last executing test programs: 18m47.71391765s ago: executing program 0 (id=1525): socket$alg(0x26, 0x5, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001680)}}], 0x1, 0x41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) cachestat(r0, &(0x7f0000000040), &(0x7f000009de80), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000001c0)={0x9, 0x1, {0xffffffffffffffff, 0x2, 0x982, 0x2, 0x4}, 0x7ff}) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x40) syz_extract_tcp_res(&(0x7f0000000100)={0x41424344, 0x41424344}, 0x9d, 0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000007a80), 0x101000, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x62}, @val={@void, {0x8100, 0x3, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x18, 0x6, 0x0, @private1, @local, {[], {{0xfffe, 0x4201, r5, r4, 0x0, 0x0, 0x6, 0x2, 0x4, 0x0, 0x0, {[@fastopen={0x22, 0x4, "d9de"}]}}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000bc0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x0, 0x67, 0x0, @dev, @local}}}}, 0x0) syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40088d0) remap_file_pages(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x3000008, 0x6, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="1201000300000010cc17691940000102030109026e000301221040080b0101012028070904000000010130000a2401060a0000080000090401"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) 18m44.516769395s ago: executing program 0 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$tun(r2, 0x0, 0x1001) write$cgroup_int(r2, &(0x7f0000000380)=0x8, 0x12) write$tun(r2, &(0x7f0000001400)={@val={0x0, 0x9300}, @val={0x0, 0x1, 0xe, 0x6, 0x4, 0x129}, @eth={@random="91d993d5768f", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1a, 0xfe5, 0x67, 0x0, 0x3, 0x11, 0x0, @private=0xa010101, @rand_addr=0x64010100}, {0x4e23, 0x4e21, 0xfd1, 0x0, @wg=@data={0x4, 0x7, 0x3, "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"}}}}}}}, 0x1001) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB="0a000100aa941da21805"], 0x48}}, 0x0) 18m44.346559003s ago: executing program 0 (id=1543): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x3ffc, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3f}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000015280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 18m44.217238572s ago: executing program 0 (id=1546): r0 = socket(0x200000000000011, 0x2, 0xd) socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r1, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') syz_emit_ethernet(0x32, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @icmp={{0x7, 0x4, 0x2, 0x2, 0x24, 0x67, 0x0, 0x4, 0x1, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0xc5}, @rr={0x7, 0x3, 0x97}]}}, @address_reply={0x12, 0x0, 0x0, 0x8}}}}}, 0x0) 18m44.109382672s ago: executing program 0 (id=1547): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r2, &(0x7f0000000600)="89", 0x1) splice(r1, 0x0, r0, &(0x7f0000000140)=0x8008, 0x9, 0x7) (fail_nth: 6) 18m43.6391638s ago: executing program 0 (id=1549): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000040000000000000000000003"], 0xb8}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x636, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 7) 18m43.171892743s ago: executing program 32 (id=1549): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000040000000000000000000003"], 0xb8}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000040)=0x636, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x8, 0x0, 0x91a, 0x2}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (fail_nth: 7) 12m37.3811618s ago: executing program 1 (id=3042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020301040000000000000000000040200800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372", 0x15}, {&(0x7f0000000300)="e8700e444d50a969ff673459ff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d10326222de0aba87ae1f89b41c3050c0c147d3a158da988456d30026b433186f536ad0aab82e773016b595283bec6d95501ad7e8bf8fc31c5002395a24e679d7f1789060e8f3dabed0a740f5251e6218", 0x74}], 0x3}], 0x1, 0x40800) recvmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)=""/143, 0x8f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)=""/50, 0x32}], 0x1}}], 0x2, 0x40010144, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x23}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4008008}, 0x4024000) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40002002, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000007060108000000000000000000000005080006400000080009000206400fea000005000100070000000800064000000006"], 0x40}}, 0x4004814) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x0, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_LABELS_MASK={0x24, 0x17, [0x18a, 0x85, 0x8, 0x5, 0x7fffffff, 0xc09, 0x0, 0x9]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0x6, 0x7fffffff, 0xf12, 0x4, 0x2]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}]}, 0x98}, 0x1, 0x0, 0x0, 0x880}, 0x8000) 12m37.107045333s ago: executing program 1 (id=3043): syz_clone(0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xdddd1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000100)={{0x3001, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xb, 0x4, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0x0, 0xdddd0000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0x2}, {0x80a0000, 0x6000, 0x8, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x3c, 0x2}, {0x100000, 0xeeee0000, 0x0, 0x2, 0x80, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x1, 0x0, 0xa1, 0x20, 0x0, 0xff, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0xc, 0xf801, 0x0, [0x80000001, 0x0, 0x2, 0x1]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/rt6_stats\x00') read$alg(r5, &(0x7f0000000e80)=""/4096, 0x1000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) socket$kcm(0x11, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$kcm(0xf, 0x3, 0x2) 12m24.930973301s ago: executing program 1 (id=3056): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x0, 0x40000) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, '.\x00'}, 0x30) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x4, 0xfffffffd}, &(0x7f0000000140), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r1, 0x1e76, 0x0, 0x6, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f00000002c0)={0x0, @bt={0x9, 0x1, 0x1, 0x3, 0x6, 0x7, 0x4, 0x9, 0x1, 0xff, 0x6, 0x7, 0x1, 0x2, 0x1, 0x39, {0x0, 0x8}, 0x6, 0x6}}) r3 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0x40045731, &(0x7f0000000300)) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)) io_setup(0x2, &(0x7f0000000180)) unshare(0x400) socket$rds(0x15, 0x5, 0x0) 12m24.471608622s ago: executing program 1 (id=3072): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x0, 0x13, "00176a0000fcf7ffffa5e8673608f7ecfeff00"}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x823}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x39, {0x7, 0x7}}]}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x45}, 0x40040) r5 = syz_open_pts(r2, 0x8182) r6 = dup3(r5, r2, 0x0) write$binfmt_elf64(r6, 0x0, 0x0) write$sequencer(r6, &(0x7f0000000000)=[@e={0xff, 0xa, 0x5, 0x6, @SEQ_NOTEON=@special, 0x10, 0x4, 0x2}, @e={0xff, 0x9, 0xa, 0xb, @SEQ_NOTEON=@note=0x79, 0x4, 0x8, 0x2}, @v={0x93, 0xe, 0xa0, 0x1c, @MIDI_NOTEON=@note=0x2e, 0x1c, 0x8}], 0x18) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) 12m23.451457254s ago: executing program 1 (id=3078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540", @ANYRESHEX=r2], 0x74}, 0x1, 0x0, 0x0, 0x10040042}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000800) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000200)) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) io_setup(0x8, &(0x7f0000004200)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) r7 = openat$full(0xffffff9c, &(0x7f0000000180), 0x210001, 0x0) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000240)={r7, 0x1, 0xfffff000, 0xfffff000}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000004180)={{{@in=@dev={0xac, 0x14, 0x14, 0x3a}, @in6=@mcast2, 0x4e20, 0x2, 0x4e21, 0x1ff, 0x2, 0x60, 0x0, 0x2c, r4, r8}, {0x7, 0x8, 0x7, 0x5, 0x8, 0x4a21, 0x4, 0xffffffffffffffc9}, {0x6, 0x7fffffff, 0x7, 0xfffffffffffffffa}, 0x0, 0x6e6bbb, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0x2, @in=@multicast1, 0x3505, 0x0, 0x1, 0x4, 0x7, 0x6, 0x9}}, 0xe4) close(0x3) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) process_vm_readv(r10, &(0x7f0000001900)=[{0x0}, {&(0x7f0000000800)=""/4096, 0x1000}, {0x0}], 0x3, &(0x7f0000002100)=[{0x0}, {0x0}, {&(0x7f0000001c40)=""/213, 0xd5}, {&(0x7f0000001d40)=""/223, 0xdf}, {0x0}, {0x0}], 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 12m22.37720464s ago: executing program 1 (id=3081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x800008ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 12m6.884357509s ago: executing program 33 (id=3081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x800008ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x14, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 9m29.485450194s ago: executing program 3 (id=3762): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) close(r0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) timer_create(0x6, &(0x7f0000000000)={0x0, 0x4, 0x1}, &(0x7f0000000040)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r1, 0x0, &(0x7f00000000c0)={{0x77359400}, {r2, r3+60000000}}, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000140)={0xe413, 0x1, 0x6, 0x10, 0x9, 0x3, 0xfffffffffffffffd}, &(0x7f0000000180)={0x3, 0xaae6, 0x78, 0x9, 0x8, 0x4, 0x5, 0x3}, &(0x7f00000001c0)={0xb, 0x3, 0x2, 0xcd51, 0x5, 0x58, 0x2b2, 0xe}, &(0x7f0000000200)={0x0, 0x3938700}, &(0x7f0000000280)={&(0x7f0000000240)={[0x8, 0x3]}, 0x8}) timer_gettime(r1, &(0x7f00000002c0)) sendmsg$AUDIT_TTY_SET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x18, 0x3f9, 0x1, 0x70bd28, 0x25dfdbfb, {0x1}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0xb92af8d7b52f9500}, 0x1) syz_emit_ethernet(0xb2, &(0x7f0000000400)={@local, @broadcast, @void, {@x25={0x805, {0x2, 0x1, 0x1, "e18f16f127f97c350ba365bc9100a5f037e5e9b14d2196a23a52bfde1c4dac6f8faaf51d8ff3b68a92108c9f55e2df79576a01ce3c95dfe5b1a2b6000572908d1b24affecd19342b046d3b2bc3e2f3db6aec287c13d9e3dba3454275dbd9f8bd283c16e94dfdf58f14767045e93e67d73df499f7d7166df9b7694c2ea19d1163af0293802353fa23b9b14d5d1d951bc460c9b7542d0fde7b4b2f1524ccd805fd17"}}}}, &(0x7f00000004c0)={0x0, 0x3, [0x143, 0x9e0, 0x825, 0xef4]}) timer_settime(r1, 0x1, &(0x7f0000000500)={{0x77359400}, {0x77359400}}, &(0x7f0000000540)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x7, &(0x7f0000000580)=0x0) io_pgetevents(r5, 0x1, 0x0, &(0x7f00000005c0), &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640), 0x8}) r6 = dup(r4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) sendmsg$NL80211_CMD_GET_COALESCE(r6, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r7, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x9, 0x23}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x20008091) ioctl$FBIOBLANK(r6, 0x4611, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_SUBMITURB(r6, 0x802c550a, &(0x7f00000008c0)=@urb_type_interrupt={0x1, {0xd, 0x1}, 0x8, 0x4, &(0x7f0000000800)="59ee6f703d86f15451d001190349fdc082d9377f71c79645e3a23c9a73fe434678a566ce1802c854e377764572221ab5fc82017ef2f15e69b8b37746fd4421", 0x3f, 0x41, 0x8, 0x0, 0x9, 0x4, &(0x7f0000000840)="e36be56259fb07b054698d113f48cd2f66a561a862a39d6d11b6e21a8f9daad925acf5049a908da413278d785fe0a69d68aa16bc42d8281a1f926a7c2097c4a1433f6965ddee4936fe88d4cd65a0a1d7dc3a6a64fde1e1efe9f1ba07795ecb"}) futex_waitv(&(0x7f0000000900), 0x0, 0x0, &(0x7f0000000940)={0x77359400}, 0x1) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000980)={0x80, 0x2, 0x4, 0x1, 0x1}) syz_clone(0x80000, &(0x7f00000009c0)="a1067399f03ad876e79fc79fadb1a9f2b712ae170112c28b430f68a9ab8ec786637994c047eaa9f113d929a89b75dbeeaf6baccb5af11a640755c7b4914f12e0fadd5c2719b5022223f6d75fd3879ebf8d916f70f2c1b78a27b5977f7109362fc85385f7709c5ea4befbd8af182cad47d3ce2fa291b970628819a072ceed6b2654bb440eb6cd16c44e813488bb8ff01a267018117a7be2fab6a87b922fb521a77f340b9e59d5bae986034f5146a556f4851cda717662c6601b9c1f52dd872bd208d2c079987aaba662bed0c5eaa751221bb39d79a4f70ecb360e2c", 0xdb, &(0x7f0000000ac0), &(0x7f0000000b00), &(0x7f0000000b40)="6e91450a6eaa82f0f6e4819b7ccc25c141d1b02844ebf18dcb8a61612c85cfa162537e7f636cfd82293d049593c125c716f3a8ad02023d1e3ae9abe3f667e6edc20e41f76e509e4077468ea1193bcd6244727c7bb9b188517a21c5db9b6bcaae3721c2826ed62a5ff35e3944ae6ed8c229ff81d3cf8ea921617ce446d0110e9014de62718af50ab54aaa8ecefee3d1cc74acf6c191e49aa1eb36a13e7e312e759cb746a6e703db8b18849ba2f1c0dfca900c6fbc55b3123859") syz_extract_tcp_res(&(0x7f0000000c00), 0x4, 0x1) recvmmsg(r6, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000c40)=""/198, 0xc6}, {&(0x7f0000000d40)=""/129, 0x81}], 0x2, &(0x7f0000000e40)=""/156, 0x9c}, 0x1}, {{&(0x7f0000000f00)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000f80)=""/214, 0xd6}, {&(0x7f0000001080)=""/77, 0x4d}, {&(0x7f0000001100)=""/162, 0xa2}, {&(0x7f00000011c0)=""/193, 0xc1}], 0x4, &(0x7f0000001300)=""/83, 0x53}, 0xa}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001380)=""/86, 0x56}, {&(0x7f0000001400)=""/148, 0x94}, {&(0x7f00000014c0)=""/215, 0xd7}], 0x3}, 0xfff}, {{&(0x7f0000001600)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001680)=""/143, 0x8f}, {&(0x7f0000001740)=""/179, 0xb3}, {&(0x7f0000001800)=""/45, 0x2d}, {&(0x7f0000001840)=""/148, 0x94}, {&(0x7f0000001900)=""/44, 0x2c}], 0x5, &(0x7f0000001980)=""/195, 0xc3}}, {{0x0, 0x0, &(0x7f0000001c40)=[{&(0x7f0000001a80)=""/158, 0x9e}, {&(0x7f0000001b40)=""/95, 0x5f}, {&(0x7f0000001bc0)=""/30, 0x1e}, {&(0x7f0000001c00)=""/47, 0x2f}], 0x4}, 0xff}, {{&(0x7f0000001c80)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001d00)=""/93, 0x5d}, {&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/38, 0x26}, {&(0x7f0000001e00)=""/173, 0xad}], 0x4, &(0x7f0000001f00)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002f00)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/127, 0x7f}, {&(0x7f0000003000)=""/231, 0xe7}, {&(0x7f0000003100)=""/239, 0xef}], 0x3, &(0x7f0000003240)=""/152, 0x98}, 0x4}], 0x7, 0x0, 0x0) ftruncate(r0, 0x9) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f0000003440)={0x0, @vsock={0x28, 0x0, 0x4fd8aa6cb2c30818, @local}, @hci={0x1f, 0x3, 0x3}, @llc={0x1a, 0x308, 0xb, 0x2c, 0x1, 0x7, @multicast}, 0x8, 0x0, 0x0, 0x0, 0xef2, &(0x7f0000003400)='veth0_macvtap\x00', 0x1, 0x3, 0x7}) socket$inet_mptcp(0x2, 0x1, 0x106) inotify_init() ftruncate(r4, 0x7) 9m29.142751268s ago: executing program 3 (id=3764): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x8000a, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904"], 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800"], 0x98}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) r11 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r11, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0xfffffffb}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r11, 0x80e05411, &(0x7f0000001740)) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0xa, '\'\t\x00 '}, @local=@item_4={0x3, 0x2, 0xa}]}}, 0x0}, 0x0) 9m27.629015501s ago: executing program 3 (id=3782): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000040)=0x90, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xe26, 0x8, @remote, 0x5}, 0x1c) r1 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) socket$inet(0x2, 0x2000000080002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xc, 'g'}]}}, 0x0}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008021100000108021100000008021100000000000000000000000000640001000006020202020202010782848b960c121872060303030303034d6e609fbb2ff63f11dcae47e85607e18f9735cb299d1e9f2ec1e075bc6397287a26a84f0c380a637cfd5c96e36d33e252e947e0f37f0a7374ee537bbe790702b97e22cc45f3e634823d4881e48ea20bde1a0d3b65547cb9fbfc2d152731e7382c04d47c096e43b426e025780673d613e7dc26d9cabfdb615d48806f"], 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=ANY=[@ANYBLOB="18b5ff0700009751f0050802190000000802110000013b00bc3f4f01"], 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002cbd700000dcdf2500000000", @ANYRES32=r7], 0x20}}, 0x2000e844) lsm_list_modules(&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000000)=0x82, 0x0) 9m25.469231638s ago: executing program 3 (id=3797): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) (async, rerun: 64) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 64) r2 = open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x8d900) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) (async) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000100)='./file0\x00') (async) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000200)={0x18, 0x0, {0x2, @multicast, 'wg0\x00'}}, 0x1e) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async, rerun: 64) sendmmsg(r5, &(0x7f0000008040)=[{{0x0, 0x0, &(0x7f0000006a80)=[{&(0x7f0000006880)="ec", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) syz_usb_connect$uac3(0x0, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="12011003000000201e044030400001020301af0a00000000000005080b00010101304b0904000000010130000a2401052e00060000001324030506030604ff0c00000003000800080011240a0401000000000700000032d9dbc332bed9da7cbdf7a22c0200000009040100000904010101011630000905010940000403ff0a2525ea000000050700090402000001023000090402010101023000090582094000ba020c6783af9beacf42629885424428e0f40a252500000000"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 9m25.184840072s ago: executing program 3 (id=3798): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x28101) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000000c0)={0x1c, 0x1, 'client1\x00', 0x100000000, "c541e12dfbe471c9", "2df8e76a1ee147923397f2e86368ef29c0d68b94502a7a9fcc1405eea0b21367", 0xd3, 0x4}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x88, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x4, 0xfff3}}, [@TCA_STAB={0x64, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xa, 0x7, 0x2, 0x1, 0x7, 0xc7}}, {0x4}}, {{0x1c, 0x1, {0x1, 0x9c, 0x8000, 0x1, 0x0, 0x8, 0x1}}, {0x4}}, {{0x1c, 0x1, {0xef, 0xd7, 0x2, 0x3, 0x3, 0x4, 0xc}}, {0x4}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x41}, 0x24008004) 9m24.767666165s ago: executing program 3 (id=3799): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffe, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', r1, 0x7, 0x80, 0x0, 0x401, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0xef, [@empty, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}, @cipso={0x86, 0x57, 0x1, [{0x5, 0x11, "c6bf65271525678c9f561e28f5805f"}, {0x1, 0x3, "c8"}, {0x0, 0x4, "73ff"}, {0x7, 0x4, "ea82"}, {0x2, 0x7, "bc20725c91"}, {0x5, 0x11, "a176dd7560d78e82faf01434b5cfce"}, {0x0, 0x9, "6d9ace6f4483bd"}, {0x7, 0x2}, {0x2, 0x7, "5950551a8c"}, {0x2, 0xb, "0c5839da5fcfdcfe0a"}]}, @ssrr={0x89, 0x13, 0x59, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local]}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x6, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x2a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0xb, 0x9, 0xfffffffffffffff4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x3, 0x14, &(0x7f00000008c0)=""/20, 0x41100, 0x50, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x8, 0xfffffff0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x3c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x9e, &(0x7f0000000440)=""/158, 0x1e00, 0x10, '\x00', r5, @fallback=0x14, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x2, &(0x7f0000000ac0)=[r9], &(0x7f0000000b00)=[{0x2, 0x5, 0xc, 0x3}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48810) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 9m24.069138078s ago: executing program 34 (id=3799): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffe, 0x800, 0x7, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000300)=[{&(0x7f0000007900)=""/4095, 0xfff}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'tunl0\x00', &(0x7f0000000500)={'tunl0\x00', r1, 0x7, 0x80, 0x0, 0x401, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x2, 0x29, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x2b, 0xef, [@empty, @rand_addr=0x64010102, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast1]}, @cipso={0x86, 0x57, 0x1, [{0x5, 0x11, "c6bf65271525678c9f561e28f5805f"}, {0x1, 0x3, "c8"}, {0x0, 0x4, "73ff"}, {0x7, 0x4, "ea82"}, {0x2, 0x7, "bc20725c91"}, {0x5, 0x11, "a176dd7560d78e82faf01434b5cfce"}, {0x0, 0x9, "6d9ace6f4483bd"}, {0x7, 0x2}, {0x2, 0x7, "5950551a8c"}, {0x2, 0xb, "0c5839da5fcfdcfe0a"}]}, @ssrr={0x89, 0x13, 0x59, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @loopback, @local]}]}}}}}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000006c0)={0x6, 0x0}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0x2a, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0xb, 0x9, 0xfffffffffffffff4, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='GPL\x00', 0x3, 0x14, &(0x7f00000008c0)=""/20, 0x41100, 0x50, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x1, 0x8, 0xfffffff0, 0x5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0x11, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x3c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}]}, &(0x7f0000000200)='syzkaller\x00', 0x4, 0x9e, &(0x7f0000000440)=""/158, 0x1e00, 0x10, '\x00', r5, @fallback=0x14, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r8, 0x2, &(0x7f0000000ac0)=[r9], &(0x7f0000000b00)=[{0x2, 0x5, 0xc, 0x3}, {0x5, 0x5, 0x2, 0xb}], 0x10, 0x9}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48810) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$packet(0x11, 0x2, 0x300) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2a) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r13], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 4m2.998611262s ago: executing program 6 (id=5172): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x8, 0x0, {0x15, 0x4, 0x3, 0x17, 0x101, 0x67, 0x6, 0x1, 0x1, 0x44c1, @rand_addr=0x64010101, @remote, {[@timestamp={0x44, 0x18, 0xa9, 0x0, 0x5, [0xa2, 0x6, 0x8, 0xbe7, 0x8]}, @generic={0x88, 0xe, "c64be0bbe0302be1665e5d81"}, @rr={0x7, 0xb, 0x1c, [@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x0, [{@rand_addr=0x64010102, 0x8}]}]}}}}}}}, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) r4 = userfaultfd(0x801) socket$l2tp(0x2, 0x2, 0x73) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x54, r5, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1a}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44840}, 0x40) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r6) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f022}) 4m2.824265301s ago: executing program 6 (id=5173): r0 = socket(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) sendmmsg$inet6(r0, &(0x7f0000005dc0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x10000}, 0x1c, 0x0}}], 0x1, 0x4000000) (fail_nth: 2) 4m2.341750449s ago: executing program 6 (id=5174): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000001c0)="14fd54ab72df97e6256c00000000", 0x0, 0x7fb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m2.251443295s ago: executing program 6 (id=5176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000340)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0xc4004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x805}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x428001, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r11, {0x0, 0xffe0}, {0x7, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0x6, 0x5, 0x1, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xffffffff}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 4m1.959617914s ago: executing program 6 (id=5177): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x69, 0x1100, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4m1.21575466s ago: executing program 6 (id=5181): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0xf, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'bridge0\x00', 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f00000008c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccbfdbc}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0xb3db5447c6401257}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccbfdbc}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0xb3db5447c6401257}, 0x40) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESDEC=r0], 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x20040800) 4m0.683745725s ago: executing program 35 (id=5181): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000220edf104c05c10687c20102030109022400010000ae0009040000024f69960009050f029d82297200090582"], 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_open_dev$media(&(0x7f0000000000), 0xf, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$MEDIA_IOC_ENUM_ENTITIES(r5, 0xc1007c01, &(0x7f0000000100)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044892}, 0x4040050) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x20000000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'bridge0\x00', 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f00000008c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccbfdbc}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0xb3db5447c6401257}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccbfdbc}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x78}, 0x1, 0x0, 0x0, 0xb3db5447c6401257}, 0x40) pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES16=0x0, @ANYRESDEC=r0], 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x20040800) 16.744092637s ago: executing program 4 (id=6097): syz_open_dev$vim2m(0x0, 0x800, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x8, 0x0, {0x5, 0x4, 0x3, 0x17, 0x101, 0x67, 0x6, 0x1, 0x1, 0x44c1, @rand_addr=0x64010101, @remote}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)}], 0x1) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1a}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44840}, 0x40) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) 16.609888898s ago: executing program 4 (id=6099): accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x9, 0x9, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @local, {[@ssrr={0x89, 0x1f, 0x44, [@local, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x8, [{@loopback}, {@local, 0x7d14}]}, @generic={0x89, 0x4, "6aa6"}, @rr={0x7, 0xf, 0x84, [@broadcast, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2d1d, 0x2}, 0x10, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0xffffffff004) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800"], 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\\<\'&', 0x3a, '\x00', 0x3a, './file0/file0'}, 0x32) ioctl$UBLK_U_IO_FETCH_REQ(r3, 0xc0107520, &(0x7f0000001700)={0x2, 0x2ca, 0x0, &(0x7f0000000700)=@buf_4k="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"}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) landlock_restrict_self(r0, 0x0) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x1, 0x100, 0x0) 14.435790229s ago: executing program 2 (id=6108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24008814) creat(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r2], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 14.329440935s ago: executing program 2 (id=6110): r0 = socket(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000240)={r3, 0x7fc, 0x2, r3}) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0x4188aec6, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$sndseq(0xffffff9c, &(0x7f00000003c0), 0x147240) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a45352, &(0x7f0000000400)={{0xe, 0x8}, 'port0\x00', 0x10, 0x100008, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}) r6 = openat$panthor(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000740)={0x0, 0x1, &(0x7f0000000380)=[r9], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r11, r10], &(0x7f0000000180), 0x0, 0x800000000000c}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000500)={0x1, r9, 0x3ff, 0x505, 0x3ff, 0x10, 0x0, 0xe0e6, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x10, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x10000}, 0x48) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x2, 0x1, r3, 0x1}) close(r4) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r12, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x1e4, 0x24, 0xf0b, 0x70bd23, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x7, 0x10, 0x0, 0x81, 0x5, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7fff, 0x4, 0x1, 0xfffffc01, 0xad, 0x7}}, {0x12, 0x2, [0x3ff, 0x9, 0xffff, 0x4, 0x6, 0x4, 0x5]}}, {{0x1c, 0x1, {0x2, 0x4, 0xf380, 0x3, 0x2, 0x80000001, 0x9b, 0x2}}, {0x8, 0x2, [0x4, 0xc240]}}, {{0x1c, 0x1, {0x5, 0x5, 0x0, 0x0, 0x2, 0x40, 0x9, 0x7}}, {0x12, 0x2, [0x40, 0x1, 0x800, 0x8, 0xdc7, 0x2, 0x7]}}, {{0x1c, 0x1, {0x5, 0xfa, 0x200, 0x6, 0x1, 0x2, 0xb592, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x4, 0x4, 0x5, 0x80000000, 0x0, 0x8, 0x8d7, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x52, 0x8, 0x5, 0x2a, 0x0, 0x0, 0x100, 0x8}}, {0x14, 0x2, [0x100, 0x1, 0xf22, 0x4, 0x5, 0xff00, 0x75, 0x7]}}, {{0x1c, 0x1, {0x91, 0xfe, 0x83, 0x7, 0x0, 0xfffffffe, 0x7fffffff, 0x9}}, {0x16, 0x2, [0x1, 0x0, 0x5, 0x8, 0x3, 0x4, 0x8001, 0x0, 0x7]}}, {{0x1c, 0x1, {0x81, 0x0, 0x9, 0x847, 0x0, 0x2, 0x7, 0xa}}, {0x18, 0x2, [0x6, 0xf4e, 0x4da3, 0x40, 0x9, 0x2, 0xf9, 0xed, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x9358, 0x2, 0x2, 0x6, 0x9}}, {0x16, 0x2, [0x1ff, 0xa, 0x572, 0xbb0e, 0xfffa, 0x6, 0x0, 0x7, 0x2285]}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 13.292260957s ago: executing program 4 (id=6113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setregset(0x4205, r1, 0x1, &(0x7f00000001c0)={&(0x7f0000000340)="4ca8b941eb6a3f6dedf11f150828613743e35636", 0x14}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={r7, 0x7fffffff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000a80)={r7, 0x1000, "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"}, &(0x7f0000001ac0)=0x1008) r8 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0xfb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x684c, 0x1, 0x3, 0x0, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r2], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r15 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="080008000000000000002b000000457f002d0066000040119078ac1e0101ac1414164e204e200019907804000000030000000900000000000000fddab47b3dd17e6f824c5baf967514fa69fb6f45135282e67ce60fcf04c089b3d94e290c13f8286a04697ffea85676a2ee4167599bdc20d6883acd84116898ede0653d477b160459843693e87f741f57ba8cf7e3d14e7a1a0a599192214381cd1de1e66a9f266228d4b4dccdee6a2a622db60efd5ed3054e490a4757f78934114200"/200], 0x3b) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000001000000000000000000040000000c000c0000000000e58c6534"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) 11.998908275s ago: executing program 4 (id=6120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="580000001400192340848bdd9387bdd81798843e8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809", 0x45}], 0x1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x4, 0x2) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000480)={0x2c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000f15000000050f1500011010"], 0x0, 0x0}, 0x0) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) fchdir(r3) ioctl$UBLK_U_CMD_SET_PARAMS(r3, 0xc0207508, &(0x7f0000000300)={0x0, 0xffff, 0x6c, &(0x7f0000000240)={0x6c, 0x1, {0x0, 0xb, 0xb, 0x54, 0x0, 0x2, 0x7b, 0xfffffffffffffff8, 0x8000000000000001}, {0x8, 0x81, 0xfff, 0x3, 0x55d}, {0x1, 0x8000, 0xca, 0x8}, {0x30000000, 0x1, 0x8}}}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000140)={0x0, 0x0, 0x9}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3a, 0x7, 0x0, 0x8009, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x6, 0xff, 0x0, 0xfffffeff, [0x4]}}) r6 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x4000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r6, {0x8}}, './file0\x00'}) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="b451a3ea160134f2df923b897f45f89e73140967736aba9b8c9d1b0af94135ba276fdf2f352dbcc25954180955a1290a4fba22a1128f1a4dee4c4ba439208c48421049c68163b694b7c881521d6611d0c8c92e6b28e206", @ANYRES16=r8, @ANYBLOB="000129bd7000fbdbdf2500000000080002000100000008000700", @ANYRES32, @ANYBLOB="08000400e00000020800080001000000"], 0x34}, 0x1, 0x0, 0x0, 0x24004095}, 0x4800) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000440)=0x14) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r8, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_FAMILY={0x5, 0xd, 0x29}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r9}]}, 0x44}}, 0x44044) 11.203724045s ago: executing program 2 (id=6125): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x11, 0xffffffffffffffff, 0xe64fe000) 11.095156749s ago: executing program 2 (id=6126): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000180)='./file0\x00') r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000040)={0x11, 0x9, 0x0, 0x1, 0x3, 0x6, @multicast}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x1, 0x3, 0x6, @remote}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="bbbbbba1bbbb0180c20000010011ffdcc3"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x1000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x7d, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2601}, 0x30, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c546008b0dc353bf32e0868161263d15a420ce2905c3e9ec5dfe253041bb81243140964dd8083b303ef6637c581e6050f308b94a1427cf79852b0e744cf090d1182234bf99b989d9f0546d001abf1582aebd351fbb98941ca35d6a0217878e0b7ddf8e263a3131d963ae11d72678b432ba8471c50cc3335584da3205b9946c8aae56f07eb44857bc724ae2c284e7ea7bc387d42f6c136fd1a3e8431fa5ed5c4c8b5f53909e1707b86b2bcfe7c657de44473ff1df236ced0dfb1dbf3097335b79c5f908a95712bd234621bacabcc51b2f9224e47fe8dac534a571fb9e9e33206687034fc99331858b393"], 0x24}}, 0x200000c0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000001c0)={0x2, 0x1, 0x0, 0x0, 0x0, 0xd5e855c9ff29405c}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000880)) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x95) syz_usb_connect(0x0, 0x32, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000083ef0840e07d6e67db77000000030902200001000000000904000000ef01"], 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000340)={0x2000, r5}, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) unshare(0x8040480) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2d, &(0x7f00000001c0)=0x100000001, 0x4) 8.875729446s ago: executing program 4 (id=6131): r0 = socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3ffd) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7fc, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x80, 0x1, 0x0, 0x0, 0x100000000000000}, {0xffffffff, 0x0, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x10, 0xc}, {0x10000, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x21, 0x3, 0xfd, 0x0, 0xfe, 0x0, 0x800}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="0f0100008010be693b4461a66cfe4306aaa68eca176c4082052400011b2015306581f3d88c6e177baf9b50677766b8e70a7a8448fc685856d4aef908b659b9e002fc4182ad4c7aaa5df747c25168ff0f000046ee4806537fec3c3fbfba8b2d88d13ad9b06c1d60bd56622756b312f31c2a85a9380666e52a354a88a0bc49ecbdb8be5cbcd9311b53619732e12b7ca096c7437c352e90b5a5e0e53044547e4291be45d4ec64f1958d2422d1b53c1c65829ee3b805fa00"/191], 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$sndseq(0xffffff9c, &(0x7f00000003c0), 0x147240) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r4, 0xc0a45352, &(0x7f0000000400)={{0xe, 0x8}, 'port0\x00', 0x10, 0x100008, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x7, 0x8}) r5 = socket(0xa, 0x3, 0x3a) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = openat$panthor(0xffffff9c, &(0x7f00000004c0), 0x2, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r8, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r9}) ioctl$DRM_IOCTL_MODE_ATOMIC(r7, 0xc03864bc, &(0x7f0000000740)={0x600, 0x3, &(0x7f00000000c0)=[r9, r9, r10], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r11, r10], &(0x7f0000000180), 0x0, 0x800000000000c}) ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000500)={0x1, r9, 0x3ff, 0x505, 0x3ff, 0x10, 0x0, 0xe0e6, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0xc, 0x1, 0xffe00, 0x4040, 0xffffffffffffffff, 0x279, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x4, 0xb}, 0x50) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000180)={0x0, 0x2, 0x1, r2, 0x1}) close(r3) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r12, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x1e4, 0x24, 0xf0b, 0x70bd23, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x2, 0xffff}}, [@TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x2, 0x7, 0x10, 0x0, 0x81, 0x5, 0x2}}, {0x8, 0x2, [0x1, 0x8]}}, {{0x1c, 0x1, {0x4, 0x5, 0x7fff, 0x4, 0x1, 0xfffffc01, 0xad, 0x7}}, {0x12, 0x2, [0x3ff, 0x9, 0xffff, 0x4, 0x6, 0x4, 0x9]}}, {{0x1c, 0x1, {0x2, 0x4, 0xf37e, 0x3, 0x2, 0x80000001, 0x9b, 0x2}}, {0x8, 0x2, [0x4, 0xc240]}}, {{0x1c, 0x1, {0x5, 0x5, 0x0, 0x0, 0x2, 0x40, 0x9, 0x7}}, {0x12, 0x2, [0x40, 0x1, 0x800, 0x8, 0xdc7, 0x2, 0x7]}}, {{0x1c, 0x1, {0x5, 0xfa, 0x200, 0x6, 0x1, 0x4, 0xb592, 0x1}}, {0x6, 0x2, [0xfff]}}, {{0x1c, 0x1, {0x4, 0x4, 0x5, 0x80000000, 0x0, 0x8, 0x8d7, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x52, 0x8, 0x5, 0x2a, 0x0, 0x0, 0x100, 0x8}}, {0x14, 0x2, [0x100, 0x1, 0xf22, 0x4, 0x5, 0xff00, 0x75, 0x7]}}, {{0x1c, 0x1, {0x91, 0xfe, 0x83, 0x7, 0x0, 0xfffffffe, 0x7fffffff, 0x9}}, {0x16, 0x2, [0x1, 0x0, 0x5, 0x8, 0x3, 0x4, 0x8001, 0x0, 0x7]}}, {{0x1c, 0x1, {0x81, 0x0, 0x9, 0x847, 0x0, 0x2, 0x7, 0xa}}, {0x18, 0x2, [0x6, 0xf4e, 0x4da3, 0x40, 0x9, 0x2, 0xf9, 0xed, 0x3, 0x5]}}, {{0x1c, 0x1, {0x3, 0x4, 0x4, 0x9358, 0x2, 0x2, 0x6, 0x9}}, {0x16, 0x2, [0x1ff, 0xa, 0x572, 0xbb0e, 0xfffa, 0x6, 0x0, 0x7, 0x2285]}}]}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 8.021387048s ago: executing program 2 (id=6134): syz_open_dev$vim2m(0x0, 0x800, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x8, 0x0, {0x5, 0x4, 0x3, 0x17, 0x101, 0x67, 0x6, 0x1, 0x1, 0x44c1, @rand_addr=0x64010101, @remote}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)}], 0x1) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1a}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44840}, 0x40) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) 7.934222357s ago: executing program 2 (id=6135): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) ppoll(&(0x7f0000000200)=[{r0, 0x8100}, {r0, 0x4c0}, {r0, 0x50a}, {0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x500}, {0xffffffffffffffff, 0xc000}], 0x6, &(0x7f0000000600), 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000640)="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", 0x178, 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd6539050000000000000000000000000000000001fe8000000200000000000000000000bb890090780000000000552500000000000000ffffac1414aafc01000000000000000000000000000100000000336c51831b8bff814055c616bcbd82798975c2ef5c772b4cfa3daf05cf6004398653dedd5d8ff3c2a093011cb5a591d020bb1e25ddfcb573c0b5a8ad512d540c087ab3eed61bc8f521d5684641a3ff18e8ceb2bdcd25abe26fd459c5be10e38ace244ac0f2964ba6187b749f52428456dfc9270fd30b13f2ddac089645f6d6d0fe3788"], 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x82}], 0x1, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) sendmsg$nl_route_sched(r8, 0x0, 0x0) dup3(r4, r5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 6.581700876s ago: executing program 7 (id=6137): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70000000800000018230000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000005d80)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x50}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0684113, &(0x7f00000007c0)={0x2000002, 0x75, 0x80000000, 0xffff, 0x8, 0x7, 0x52c10e9, 0x1000000, 0x0, 0x8, 0x3}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x1b, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x8, 0x0, 0x0, 0x2}, 0x20) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x800) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x24020000) syz_usbip_server_init(0x0) bind$inet(r7, &(0x7f0000001300)={0x2, 0xe21, @multicast2}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r10, &(0x7f0000000100)=""/83, 0x53, 0x1f5) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000100)={"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"}) r11 = syz_usb_connect(0x0, 0x46, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902"], 0x0) syz_usb_control_io$printer(r11, &(0x7f00000003c0)={0xc, 0x0, 0x0}, 0x0) 5.826393648s ago: executing program 4 (id=6138): r0 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1001, 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x5, 0x6, "390500", 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @local}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000900), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0xe0000000, 0xffffffffd64b043a, 0x83, 0xffff, 0x4, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff}, 0x80) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x121d01, 0x82) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{0x0}], 0x1}, 0x0) ppoll(&(0x7f0000000180)=[{r5, 0x82}], 0x1, 0x0, 0x0, 0x0) (fail_nth: 3) r7 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r7, 0x10f, 0x82, 0x0, &(0x7f00000000c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r8 = socket(0x10, 0x3, 0x0) connect$netlink(r8, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_open_dev$sndctrl(&(0x7f0000002b80), 0x1, 0x8000) sendmsg$nl_route_sched(r8, 0x0, 0x0) dup3(r4, r5, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x6, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb4}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x400c920a, &(0x7f0000002180)={&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000001180)=""/4096, 0x1000}) keyctl$get_security(0x11, r0, &(0x7f00000010c0)=""/142, 0x8e) 5.61167282s ago: executing program 7 (id=6140): r0 = fsopen(&(0x7f00000000c0)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514a11ac004000202080002000300010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x300) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000a40)=""/39, 0x27) getdents64(r3, 0xfffffffffffffffe, 0x29) r4 = epoll_create(0x7) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0x1ff, 0x0, 0x0) rseq(&(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x80000000, 0x10000}}, 0x20, 0x1, 0x0) 5.196932493s ago: executing program 8 (id=6141): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000005080)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000440)="115a8646c33ae48091fdf209e03f14105508c0419c5368a0b2c30d99b990ac447d9357ad3888a21ec5e4d6187a963c815998ff7beb4507676fd529c3a17d3c8b0d4766770e61993d7e6f7bb816ab1a50e582616ca574191454bf89646d26cdfa6c74b0ed2e72f09ed4645e2a623e26b6da18df0d1f0db7a9aa9b800eb02196d991be78", 0x83}, {&(0x7f0000000500)="13d844b63ae1117fafd55eb68d4c40b0ae0d61ce0258b1201659dd9688d7e3dbe1dea88d63ac530575aa78acb1ff0033559e9e2d79d49f16f72f104294ea9dc57cf46c12", 0x44}, {&(0x7f0000000580)="4ac8518b3d30a04d76", 0x9}, {&(0x7f00000005c0)="cde36f4c1620678c93e528ebf836c7b05d77e5c5efded96c0d0e5e37d1da0a408d9e13656bf6d54b34ac2df9c74abdbe86731df4d990275e6c4b18b4bce4a0797c9ae9c80b35e0a98960ed283106517b44a57fbaf7db6188891637b12e9a22e4", 0x60}, {&(0x7f0000000640)="4d7a55a91a2c41b2345d549f292c7e25d58f4cd72c6eb03e2eb091cc5a36116842c0bbac30700c51c136a2ac3c38bc6f1b164a2bef88f1fcc7da3fd59a05607f7c8bfac83ea2", 0x46}, {&(0x7f00000006c0)="85b3c3d2db218c1598c6bd6f96060d5a53f29b21b50efe28fb8592fec58c3ee498da5fa5cfc83741e6d3105d3d480b54a6c3337133eb42da1906bdd96c1541125611b6046d754426bce51d9cd38ddc673b0baa0e11d0247e9c07e557ed8b12e13fa994505184b4acbb28", 0x6a}, {&(0x7f0000001480)="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", 0x800}, {&(0x7f0000002480)="39740dbd9e5f757517ef08399fd13af995f58a47b789dfd0732c6792bf3f058982ccca4da7d2c356324f9b569d77a955551fd1c25ae558a12479f407a4df644673891ab1c8df4e8ec3a8108c30697b853b5f6c6c10229ea95dfbe6a2410ac6e6a3769c49b36fc25868b127a535083f0410948e2cd88840dc20c4177be9566c1fba773d1ec3a9fcf0191d1fd7", 0x8c}], 0x8, &(0x7f0000000180)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r1, r1]}}], 0x24}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)="6fe30bd28e3fef8ff7c2530fcb3fe557c7a6cf9f30a7faf177c344ae727467e7a3a1438293fa2757f4157544982210e85751357b06ad61c7cb79d15a7a13821c0cbf1b11166119cc16d454a19a67d0283785f2e01fac2d84058dd4e413958ede634db52984bef973eacd8f926a1731c3f3ef3c9d18cb545f502caac457853335b476f30c7956d18a13a6d4a3ffd2c93bc0fe9b2603a7af2ec1c93934d505f6f575d15af9dd1dfaca2f0cfa38c9ddf631f81a83b53d7f9018337f235434a3c8997a825eb9afc41e609e530a95a728c8bf39", 0xd1}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x44, 0x8000}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000027c0)="fc1db9b4cfbca5418c60300aac938568268b1b5c174bfe7bbd2131f2f7dff76d1488d988df3cd63e94e975cee257da6ce668b92f619105ed79a73e8535093fc7dfce5031ec597e5c7673e94abbb40bec467f7ae220163047b47815a4f26025f34dd9f152baffbbba10c3bee662b8a46ffe287c184f174eb20a98019e56385592c43c333457a47076bd4abfa272e2b94b2dfa7564e4d1e400b883f80f75093daa4c008494a2b04a26715b8ceef9219da5b4ab695bb21aa72a4c9a093c8eda803cd2bc28727aaa8392a5e646ccfdf73b8ed338a844fead6e36cb200c20335fe62964b3", 0xe2}, {&(0x7f00000028c0)="bd", 0x1}, {&(0x7f0000002900)="08fb3e76fc118f04e66d1b93e0703bafd1506bb67c1bfaa0ed043e6e7c3c58c5ddd960fb9085333cc8f6a97038cb00d8eebbaafa34007d387d24a324006735ee4ec8f59b6907599adad456576055d685cc9eac73e9df4d16b04ec006f24e193a89cffab746ede516bb97e07ed5ce670d3c528dfafcd2a1a73d8f68008f93ffb7e282ee289af749b19e1e50cedb7228868ddd066f9ba8566ff0773c6f209daa8b05f2d790c214e7ea9617cb5d66cd09c2e1cf98db10f16a053f26775cc2498fcf0aed98e2eb522b70ffc96bb0f2e4f133720c8202eb079359a3de", 0xda}, {&(0x7f0000002a00)="9866a88a4155cb0b75e4a04068b9187d080484053c767b37b2be25b40ddf3f43a576d32cd387297fcd7dad771359aaa351b78d5e3325ff5ce9af5b03b55ce068dd9007b9d4675c41e4e643c8c70dc3ba40cd523e504c3f90f139c8738d0cf183c6e1e1034ddda34f9a1a455b404b2a82b10a1ea748ccd996a31238f98b2f75f4d8ebbb6197d5ee3e5ac3a5c8f542b193b2fa68cb3f11fa5529ea03cf6f669d", 0x9f}, {&(0x7f0000002ac0)="c83e47fe217f65f92cc399a6b4ff0a5020e9d479ce20080cd28a27fd8da4190612fc5cc05d49078ebe291fd9ce740e1752ca8b28e1cf89f3b63ac70425dbc3447cab2b8b4de6fc38ea7f21478d8c09fd08e5aedff908dea0056251", 0x5b}, {&(0x7f0000002b40)="acf5b4f1586f3aa65b05bcd6bb2e76de51a3ffaa29978d209d3a21d375bf5e88f4c64e43a7ae583483e0b99a19f2b123445efacc3c4890662a1a7d320cb609f5c9c313194d2c469c019e5ac55e677787922a2a11f56342dd7eb7a26b3b42b7464de6b3980a4d447a1fc57271", 0x6c}, {&(0x7f0000002bc0)="5fb99201ee23803d8978fecdbb974108985b8b121ae5bec9eb25a8f8a6141e0fe62f88bc0ccd4e510a39fab1a90764beedeb78d7422b3aa2808966b2f978df9f6924ee4983e8423322fc9d765166bea61c35f99fe8df6fe3d579a2e7a6e17e5ee27b9fd2b1a9d0a93d971e3e0cea25cb1d8d49a121c4426eceb59fae4e1b46d9f343d080ce3926871f88a37579e822d6218bc1e08ad3d77af152903e23b31f5edc95338291f8c70ae3fccaf634132a4f1489dda8f181b95aa108", 0xba}], 0x7, &(0x7f0000002d40)=[@rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x88, 0x24000000}}, {{&(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000002e80)="53da8f8dea58fd6dad72ea298b28ff345956b3c137695106bae08339013f37ed2a269d301f94fa601e952e9add9fad144f4afaa54625898192e5a00f9ec7d6bda4ef90d9bf6be67edb1d24fbd02525b43bc131505759fc82192954fa6bacfc2d16bd27", 0x63}, {&(0x7f0000002f00)="af258a88e5a7ef6b273c2eff72692135b9bcc921243d94dfa8fab84c77823de62e76a337e216080eccba429a8737242d426308f75edba426bc30e75f6b3f884517f8995874bcecb35166e48ec325bf8b04c61131e9564abca2e4b636e9704d1e93909a460e45f6e17edef8a634a0817198192634d8801ccd1e90653e4a0c8c33ea90ec776ee1ee7521b4c63f2a53247026b927ab652fc571b8da07137d5de7004b000dc6c6ded05314901214", 0xac}, {&(0x7f0000002fc0)="b25522c1e46173de2d8778bc0d52db434dfe0a8bc7d514e0f396f3c0eeba82a0d8bd8e49e2e6ef4f1ff38f4b0c4900d315e5f8532128ed5cad78608c37cd681d53255f686db1c20d177edf073d31881a8376fdfb4d667b701306fac0feb5a93c58ef12ec195336eb17ba0c9d224fd239d78e0a80612a295eb66709012d1e981010fdaf7d978f18bbdbfadeacc3d1225d8c5b9ba766a734b0e805d18b1492543b7cfc352a996672c25c61458d1f7ca3412b15e409f971efaa6f8464f4820bf1dc4d19b451e4bc350d96fdfa9a2989288c7659f0bcfcac9401c644577aa82de95cf9075149bfe57004a8b34c82d94691ebcf887558abe31743ac85d656b8291a9c29038e93707a1b50134e69964a8cd2b8387b3c149dcebc46184fce0d0e34b6c08aa80487be6e3731489146f38c8c2d1961ec9c6db3829ed93940086af67374a21782ee8c7c55fdb2e010cb3a1bc4b8c11bc1d2d252973deb0c4bd835bafe68f16c8a30de7e8668bba70131215d2ed53e36b90da71bb431d6982b0a5697c896f7c25921ef2071c9f034730cf89106de04f78ed9cda1935f3ee19035a0dd13297c590e74c5fc6112e0ac161c8eb27efe00eaa187be0f4056ddea988f45ff899dd8fbe8de062e3606cf536a3cb16c0449d80bc3bceb34fac544da5040942160ad56cfda62e71ad750bbbef72cb6e6e7b62e73f2a0aabe7cd224560e98da46ff051df0969aa642012dd4e5903c0d3f28763930ba9dd4a2b571fdcff24710caea0d445152a171ec1deb8a64a9b40d571ac0e9aa1a947cf5a05cad52fd57851ee0b09d3f1b1447d3e247109214471be7545a75ed1790b4535b2550c77022df5135b86b163e82b634c6756b738507e5889641b5ef7716f7b393675c519ac220dbe0ceadfbc502ef8e0a0450c9287716a0989babdcbbac42180ecd766895ff44c6fa24312957f6467e64a076bcc09772d1662eacf2570ac22b78d126e7a7d61a445bba56effc8ea112462c6e97f635b294d1c27467066940305794bc375c6c6acf041459d6bb41547a4db6a13eb8fd036644bd39b16b82c98e4e8839c18f8241493a22322ba91d3a11303e2e859b9cb756ea413132d49f931831ac9d584a85be183105c352e40c8191d8c307fac98c7099f377849e410e9d1e811fb2cebb245d3b4077baf1fc64546266a404609f8031cbafcb7f26b573bf2aeb25f396686aff4402f084787cab002f6eab399f30076d6b23eef1e653522085f00c8eba429216193f56cc5ef4fed465ebc4b0ed978d4eac09f930999732b5712ce43e90d1936d8a153ab22dcb48299815c1ad8733d01b097fbb40f3fb2949ddbc4fadc295f651703a589a37223689499433782719c834491999f10ffda4a956431dc599a14dcd7a2ac985cd88f68ab2fa48c9304355fd70ad090be7af88e2e7d98b97317458db178fc0174826307f2aa12f344fdd1e35bf473b0dd4b3682d7b680d29c615e19b41f4c33c1911daceca1f00000795fbf2c2610910870ecf407c561d9d573b5eaed14749465e002928746e3cdea9fb720a44f16febad91a723d0358afa13f979c730d1ccbb15c05cb5c158bf0b83d275a928ba3b203e16504eb5a06b7a2ce641d1587968404387c53f3e717a71386f4fea30da2901e7f271f475c29817ad451cac2e5ca6394baddf0597b83d7752d8ec7ac1e58a28cabd809b84bd66881daa132151c1ebd27e75b25e0f5328c332ca7a7ee8b2f048124d1aea1cb0f08412e939a41417c795b612ec32b45a94e6ee11b8ee6515d6a6417acb0e987f70b15f2f881cf895de3262def5074787504857c8e62942453cb26f52e85cf7fbc716dc25f862907a9e2b0963547a73a7d6a51ffcc8756d03682a4382520b255fdb375c7400cbf7d7bbe0ccc963498e33f75c55553fc4f28f80fbb2e1c9b877fca7fe6d2c3cbb4567249b95cacbb9530f631096afb1cfb27102ff90b55475e76ef5185609918eda2d7e8d054a98e12778a76643b857dbc5cffd06825125e3c05d23492c5ccc8a2ba8951afe4c47d45b1ac7f9b62e76e85bfadcccefbf6d0af1bdabd3dfbcd8317cb26a02a475beb00a30f705b925177f4540b3d125d196374e1ce2e205c5e094be3e7f4e3d102280d5e160de1ba038e6ad0e48612de9c75d5f999825b8817e4303a0c8047289a46324592df7e52f4b919bb3d5d12d8c27d3c4963413dd4e1a57649ae073d4a5dc32f02a74ef2fa45a417c2a6bae28ad0daabe906d70476cc942a0368936b3390c04056e290b7bb271717800e3a38f54ab4a2319cb28d0ad305653b2a7c921e260f359a631f6dc8c61fc038174f94ffdf7462161382a26774bf2c375ae1c106a831f94e86efdae52fb54f0e43e069bd48b15384415ffa2a16628220f165c06ac7a9a51fd3bcd449e66117c9b9442aca56f1709e514dbf230f6a6ba28b6f18d4b742e62b0c92fa6556600ebb8d3a819f5c4735076aa23ebfaf66ff9ad80f759eb10d4a8c98e1a5254b0116ee7406641ae0597426df90e23384d66435447930f0cef5e169c10ebfda4fc40288dc892c1f22529218ae24ba2f8509c5386855447e0ea3727ec5a67dd58cc020a54e2f2c0ee8ff8e2e1af87d869486e5943c022c015e0c20553775c81ff5a2f5876dccbb17e48a583761f883b04ce6a0657324581855cf2d2746223f1b7d7729b8f64161c0a3e57ef21bc0d1cd4eff276a1ac7e5da4786beef8065726eeedb8f62c9ff19e6276a97e6f20cb71ae1df22cabc40bcfff1e19482fa06b55e16658b7a30ac83ed064f197f9fba9f9805aac78a137290c775fc2266cf6ab8aa4ffa818bc2746a7e2c05c9c58c91f3837e4402e6a45d9f3b1d6ebecf8dceedc42d5bc3ff6b303497fced132cc12bb761fdfdbba04013eb2888260b10a66b03d9921a8611f2136527c16e01cc26ff0a7d6d579f392906d0880a23059198f9b70b97896dc0758ab25de1739540acf5f2dbeec8a4189a31f03e26f64da42bfca28104ff67da1a4ed0c87733f5b9e782fde00425dcf207a4f5555e26cffb16d04b786956a1ddc2960d2a8592089078740710b0e3c0d7b0339bbf83c2f826410ecb276166b1de250d52c6a4f37fc5c684ec4f0318dee8063532bab667b17a77b9b7de31f95f20f4e545f7b4a4233145871188637b90a5e6c2cab9ec4be97c9f0d8355b7d5d2ded9b862704be81245f971d23d697c31ec7d838b02b0155440b557871348cd4256d71e1ad7ec70e2f02f87f90436bf8cb5653baafc31920ce6d99565add305c774e46ade422a08c46c6e559e03340dbd11711ae81c7ab7991e5f115450dd6c131c73ba962ccf3f3a6043d7b96672971435dfeb29635b2c002e22421b4ddcf5a7281f0e4ce087ab1d2d451e3037577924ac435b3f9fbe689db6b8976d4da406beb98b33c417a7e04f6e1fc0ffc0823e9f1a3307140bde0800ce36f65983e0e1990f06ec3284bf11f1131ebe856fae570afdd0410ea0c2c548a73b8ea4d1e1f8a04cb4b14d27351eaf13630b7a04b4d26ec2555d0dabb6e1cb695374a28f0f9d3496f758837eaf6b4df54d60cad244df3ffda6cf82aa06fac792bb7be0c118e8ef0bdb8779a27d47fc564d6c7278e26b880ea7840e0cc98103ed06d4d60f69b239bd61f928b14b5b019ca1793d7b48aa9feae78532544e4c7f93d7270fee0dc5897f95db890422448d15b042a4d294e052c76a02f5b39b7e0ec83f219be6c236968f76047326506e48c159d9b4094b9895f74c0a36d51692bbb39858e7c251ed8b26bfa883010dc034b4b5c314caa5434fe7b05bbbce4abd81d867d6dc9759efff04a4f554f58f6348adb439c2384c94fa3330f71a697b0cb62d1fc13f9a5f0621153ca11985d4c88f203a396ea907cefaa7e1aa06ab4df519b5f3be83e35b56b021685277833dbf8243ed6a955362c064f4ca8318173197918ef418983c3906ad54faf986379d76b09e2797bae3d9e7d0e5411e42300a2ec27400053ab472419c7cf3fd8bc2a0ecb24974186d397b0a6820802ca304fd24c790aa24dee5411b7979934a058e3c50926905a954695a4fa1f70310ee39298685327d4755ed9fe74739d574dae2248e7e2e402825c2964efbfbcb2100b4b85d552266bf77971f030d8a622a5c50dddaff2a19266c2bc00efefc31a7c50db8a6ee83d61a13e236c86fb3a256888b0d751dc5a0214d4f3e6e25deefce58b0118f917affcf77af3df3bd19318de7a204882a0b3b4008971383b274707c40d7fe728f47c7977712bfc68875eba5c1be8b8d632986f37f0611fa70e3387c6e458b4e8db93a46ee76350bdf6bd10d17c72922aaa04d8978369343f47da609aa58fcd62dec1ccc79acec7a2485a68e35774eb942357f8a09ff86d103e1c9f19932b47c5615ce16977cc6af916f79039b42703b1a1501650713c48119103915f40c7903e34dd4e66a7d42495b8d8e7cc35b8115dcd29effb0485927e5febde381a463386b850326279f84d00c5de4e3d24c0fc9fa069b943ac031beedf50f947e9aad4d6ec641191469e1598e94d7cabbf74235cc9ec67aecb8d2898fd9b6981a14090c3d5ce74c081f75c4edabd362f4a92e6a50eb54b3d8b337d3eaf9137852fe44c04bb25423025a74aeaa622d038d5e982327350adc522c55ffbe48d1a7740c6c0d65db00539ac8f600ff15d89d61edb8d3ec31f30c7f2b0b3f3f1062fb6682c3ef5fca718d23d74cc459312ebf9f8f118c0658257b65817bd722163fbd29837c586f35e3f36d655647027c444184c6f236b03380537a0a3d3b946be2812adcea01ca1e2d99a1302a71d60419bf4d818339920ae58fda3455232e9c9bc0acdd7a5399ece7c9a42289e594d9ec39b622812571ef9d606fa299ecf08c8a97e8df60c76a942b6a798bdbbb28813f0522baeb3fa6747fa5826eb9935091b5b603d57dd76849d62c588ca029b3654e917a4ea2773a8d751d0eae6e71b0a8cce417ad06738cc79acc4af7c6455e4d237fc920d943ea64e8b04ed26973aaec19f20135f576a70d5f1ece98e4c5b3509f5a22718189d305fc5d92c9371befeee4314d837d4a4eec016aabbd2ec848709e5aad7b1afdea8b0a7a14375aff38d9bd6f878df190c3ddef9c9e2557f45d1dbbf16bb500ef81f63963097f5fc73a3ae8a28710058ffffa7a6ec9bf161ca77568fa48440f94b20797a5d034842eef8c1db4184a67a125bec76f3cb6be89a8d52ad147fb86cc891966f1c93b039dd76ecb757c6aaed74b3ff634dd26523b4c799025ea691a8aec7c09228e3e0cf4db61a733119bcece8d8b5ada12d4b80520df0e791194fb5aaa07398674b1a486187148d045ed771e0c3da3acbc937e6acfa58caf201777007a285bd59c8ca6b43a6de1920a667e381a2b8e0d2a302be80872a6c5f9437bc2157d783bd7a112649f79e8b97e3b8dced6ba41f47d188e14c7b341d8ea6bfdde25939fea2de39109c16be8e148e23b66b04eae0cc488d6056165dd3ace2fa128d5ceaa41c8e415063d2eb5300dd7c276ba9249c43c0f805edd12c85a903fe3f1b1e2f6f999d4ee452d1a60df8d1c235f5f2384bb8d2cf8ed601e3bad3329c67e094b3a3ce0a89dd09fe8825454b453e5f27d0cc4571f72060a2ba0403c7e916f1acb83703f1a61f6a73efabaf2c46ad4a91a05aa62a8bfd308e520f4b494d560d9731b251e77f7d6a1bcafbb469be8853791d0edb8fea7496ff4bafef2c712f8fd99ae035f56707ef74a3d757e90eed194a592d5517837df357973045cf5a624ac89d1006bd3d37c79ce38aaa", 0x1000}, {&(0x7f0000003fc0)="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", 0x1000}], 0x4, &(0x7f0000005000)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x2400c040}}], 0x4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000bd1000/0x1000)=nil, 0x1000, 0x400000, 0x6, &(0x7f000082a000/0x400000)=nil) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x81, 0x1}}]}, 0x28}}, 0x20000000) r3 = fcntl$getown(r2, 0x9) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c5}, 0x4) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlock2(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) listen(r1, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000300)={0x5, 0x3, {r3}, {r6}, 0xffffffff, 0x3}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) 5.028356127s ago: executing program 7 (id=6142): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x64}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10) (fail_nth: 9) 4.528727381s ago: executing program 7 (id=6144): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x20000003}}, 0x2e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001300)) sendto$packet(r0, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0xfe3b, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/wireless\x00') lseek(r5, 0x289e0cb5, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f4, 0x10c, 0x0, 0x234, 0x314, 0x314, 0x314, 0x4, &(0x7f0000000040), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @private=0xa010102, 0xf, 0xffffffff}}}, {{@arp={@multicast1, @remote, 0xff000000, 0x0, 0x7, 0xb, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x8, 0x401, 0xfff8, 0x8, 0x2, 0x1000, 'erspan0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x8}, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0x362, 0x9, 0x6d, 0x1, 0x0, "5d23cc3d462afc03c1f5cfb887b9cdde015e753d31081c73e0612e3568356a08c169a72ff111488fcee3c45e97f5d04cfe12d58eac7f6fbdd3a6f4b392d66541"}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x440) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='task\x00') read$eventfd(r6, &(0x7f0000000340), 0x8) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r7, r8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_open_dev$usbfs(0x0, 0x76, 0x60642) ioctl$USBDEVFS_CONNECTINFO(r11, 0x80045505, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x18000000, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 3.524547362s ago: executing program 8 (id=6145): syz_open_dev$vim2m(0x0, 0x800, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x8, 0x0, {0x5, 0x4, 0x3, 0x17, 0x101, 0x67, 0x6, 0x1, 0x1, 0x44c1, @rand_addr=0x64010101, @remote}}}}}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000c80)}], 0x1) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x54, r2, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1a}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44840}, 0x40) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f022}) 3.489615236s ago: executing program 7 (id=6146): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4b}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1ffc, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1000000, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x80020, 0x0, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newsa={0xf0, 0x10, 0x633, 0x0, 0x200000, {{@in=@local, @in6=@empty, 0xffff, 0x3ffc, 0x5e21, 0x8003, 0xa, 0x20}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x4d4, 0x32}, @in=@remote, {0x323, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000, 0x7efffffe}, {0x0, 0xfffffffffffffffc, 0x400000000000000, 0x20000000000}, {0x7, 0x0, 0x2}, 0x70bd01, 0x3500, 0x2, 0x5, 0x1}}, 0xf0}}, 0x24000800) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/10, 0xa, 0x1, 0x0}, &(0x7f00000001c0)=0x40) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3.35548166s ago: executing program 8 (id=6148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24008814) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) 3.300266524s ago: executing program 8 (id=6149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) 3.251762212s ago: executing program 8 (id=6150): accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x1, 0x9, 0x9, {{0x18, 0x4, 0x2, 0x8, 0x60, 0x68, 0x0, 0x3, 0x4, 0x0, @private=0xa010102, @local, {[@ssrr={0x89, 0x1f, 0x44, [@local, @dev={0xac, 0x14, 0x14, 0x44}, @dev={0xac, 0x14, 0x14, 0x32}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0xb6, 0x3, 0x8, [{@loopback}, {@local, 0x7d14}]}, @generic={0x89, 0x4, "6aa6"}, @rr={0x7, 0xf, 0x84, [@broadcast, @rand_addr=0x64010101, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x2d1d, 0x2}, 0x10, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0xffffffff004) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b142010400000109023800"], 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0xa, 0x3a, '\\<\'&', 0x3a, '\x00', 0x3a, './file0/file0'}, 0x32) ioctl$UBLK_U_IO_FETCH_REQ(r3, 0xc0107520, &(0x7f0000001700)={0x2, 0x2ca, 0x0, &(0x7f0000000700)=@buf_4k="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"}) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) syz_usb_connect(0x1, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da203002a000009050502"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) landlock_restrict_self(r0, 0x0) mq_open(&(0x7f0000000480)='.\\\x00\xd5\xf6\t\xcf\xc4Q\xdfx\x8e2\xd4\xe9\xb5\xf5w\x9bP\xbf\xe7\x87\xf0\xe5.\xe7\xa0\x8e\xcd\xe1\x8a3\xbbh5SA,\xd3\xec\",p\x81W\xa8\x83\xec\n\xce\x1c@\xa3!\x03\xbe%J\x92\xa7\xe9\xb2\x9c\xee\x9b\xb8+\xd88\xddw\x97\'\xc5\xads`^\xb7I\\\xcf\xe5\x98\xe4gY\xa9\xf1\x9f\xfe\xe2\x9a~\xd9\xa1\xe4P*U\x91\x1f\'\xa9OE\xb4F\xdfd\xac\\S\xb2\xc0\xc1\xc9M\xfc\x8c\x1d,\xdc\x03\x1d\xdb\xa2N\xd8\xd7\xed\x8b\\T\xe2\x87]\xcfp\x8d}\x17\xe4?\x96H\x8c\x0fA\xfc]?\xa0I\x82\x02\xe7\xaeG\xc2_j\fSy\xb41M}\xd9\xd6\xd4\xd8\x84l3#z\xb7<', 0x1, 0x100, 0x0) 2.827133604s ago: executing program 5 (id=6151): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r3, r2], 0x2}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) r4 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000040), 0x4c0881, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f00000002c0)={0x2, 0x0, &(0x7f0000000080)=""/183, &(0x7f0000000400)=""/70, &(0x7f0000000240)=""/90, 0x9000}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) prctl$PR_SET_FPEXC(0xc, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 2.755023299s ago: executing program 5 (id=6152): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, 0x0, 0x10000000000001) syz_ublk_setup_io_uring(0x8000021, &(0x7f0000000040)={0x0, 0x30b6, 0x200, 0x2, 0x3a6}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000140)) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86cd600a843500022f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2, 0xf5ff}, 0x10) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x48814) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x4, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) 2.535470745s ago: executing program 5 (id=6153): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000005080)=[{{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000000440)="115a8646c33ae48091fdf209e03f14105508c0419c5368a0b2c30d99b990ac447d9357ad3888a21ec5e4d6187a963c815998ff7beb4507676fd529c3a17d3c8b0d4766770e61993d7e6f7bb816ab1a50e582616ca574191454bf89646d26cdfa6c74b0ed2e72f09ed4645e2a623e26b6da18df0d1f0db7a9aa9b800eb02196d991be78", 0x83}, {&(0x7f0000000500)="13d844b63ae1117fafd55eb68d4c40b0ae0d61ce0258b1201659dd9688d7e3dbe1dea88d63ac530575aa78acb1ff0033559e9e2d79d49f16f72f104294ea9dc57cf46c12", 0x44}, {&(0x7f0000000580)="4ac8518b3d30a04d76", 0x9}, {&(0x7f00000005c0)="cde36f4c1620678c93e528ebf836c7b05d77e5c5efded96c0d0e5e37d1da0a408d9e13656bf6d54b34ac2df9c74abdbe86731df4d990275e6c4b18b4bce4a0797c9ae9c80b35e0a98960ed283106517b44a57fbaf7db6188891637b12e9a22e4", 0x60}, {&(0x7f0000000640)="4d7a55a91a2c41b2345d549f292c7e25d58f4cd72c6eb03e2eb091cc5a36116842c0bbac30700c51c136a2ac3c38bc6f1b164a2bef88f1fcc7da3fd59a05607f7c8bfac83ea2", 0x46}, {&(0x7f00000006c0)="85b3c3d2db218c1598c6bd6f96060d5a53f29b21b50efe28fb8592fec58c3ee498da5fa5cfc83741e6d3105d3d480b54a6c3337133eb42da1906bdd96c1541125611b6046d754426bce51d9cd38ddc673b0baa0e11d0247e9c07e557ed8b12e13fa994505184b4acbb28", 0x6a}, {&(0x7f0000001480)="32df16f8f0d07d417a4d412bcaca0d4460820cec490aade9e070d33a9d65d259e97f80b1fdd9b32bae11523a196bfef48959d0d6cfc1553ee90327223571cc3778f2c9664cc9b66edb9c49ed133c02179d12e01825b77acf4dc884b0d314599b8cd7449a809c72f05cc0135e31b2b57378133022c94c40f2a857d010b5f1b2a9a42ad6557049d27600c75ac8bf46352a846af805ba711ddb15b80d54603d1e907dfd78d95adc8674585d1822e02d357df89f4ad9c36e533760284e0e7ee6ffa33aa552385764c312f69532ae5b84fd8caf38aa290b215dd37111f9b431e5caf879ccebbcf192c4b58f0c1eb77b5e694117a1b5acf2468c209080fadd529431979d3920430eaced02719b0e8952b054131313bdbe86537cd146eff7bad77cc90e78b520ab19c2de4c00d79fe47c314f6f1e6574edc355dbbc757763dd784a0b4c6a9b8931a4b230a2550a6bb4b51b99b82faeb97ac3c3af7b5dba75b6fa229a39e8771d21a6c3cadf3a449dd0e57f425362d7950320f4ba67c9ece772cb7dca69305db3aa9f643508fddd37799a15dedadaab7c519a16c98d6ddb28e352d67ee7581f8cdd30beba6b556b622780a1ef52edd29ca106d8015b04a5354591906b642e896ba40fd4d696f71cd57f7f8a38c0d9dc528f7114d3de2941c121364c80c566ef0e442e6ba1da5f6cda3757d61ebf09e4519e7fc46ee542a4a5e575ebf46f4f72f4a84714fb9a1eb97b7f6f515abdd582d2fba2b37cb63ab381e199b0ee9c1e68b981f2f78667142008fe77b0e8de508a0c32611e305491269485011804dd4c85a18098d266abe1f3146ac2d037975f4cdb33c5f503b55601c59331e553cb9746a7a94a41042ac99fe540800866fbbbf464662b54adaa4f0d7e3b35b8d82cd2e38892dcd41f68791b2701ddc97154c20133826bf4a31f0c25006dea674d57cca411c81b5184a429b7c83c2054ed1bfa3938b194aa8e0833da1c363cda3d7c2a326c1d3e79c85e1c170367f74604e4775fac35f150c67eedc82d8a703133ddebaf32c2d8448ad4a6830a80686c76052f5ff4c8b64c47b7926cc03a7576669cbd82bdac7b0539c7435bc68512aa69ec0f994cb7169b4b5cc36dc8fa666ef5946328bb295f66c6724b6c61dc66973c9dd4c891c4a34fcaf8790dd53ae342a962ab3c46fdc526d3bf60afde0fe46a5a1c7e023294c724f2f72bdbd066fff467d5d17f8feadfb3f87550648a184485f866de55052dfdc6134b1ac059bdbc4a16deb1dca07d290aa0ad82eff1fa6c8527f79247d04be8b79194e0dcf99f4be916dbf04c32d8359c96f82977dab688841f7c06861fd58ccbcde15e9e6ec25ebb8ed693175ade755e8ac84cd1aa01b57f2d9f53c0358d11f8e1924b048acee4c2af35412a094b9a2658c35c2542c7a04f0b0e886701ccd9a1d1f8afce675c57e654cf24bb3c258770b79d23f59341dc65c9536e5923c4847d613d6c79a058167d0e97757a3e5b8bec31437899ec47849f2fce70b5b72d3e3245efb40d8e9828e75ca38ce20dbf304529296453442c100202b246fddbc6c2330b1663059453fbd8daa98e73aa79a9c3bf11b1a75a40b859b23d57a37a329e5b693228d24624c8322116ce98d7f724842e276c22bed16da4286769bd0e019b595e32d41675f3137163747d34c7681e4e637288f446bb6f83807627cb7ff8ce3951edf9ef0b0b9bdc4fb7c3ad306a1691f5968044deeecbc5b74acbf77e86322209dad6ca0cdfba8eab0082db52126130615aae720568985617723675ad74403d4664e95c922d2eeea6d8b399301c1e5d46fab0780b87b144014e095c6dd1d01578ea773f2bd01b19e1f385da76623d4ddb7d5570e1979f1b6285f621b02fac526b1f0ba5245d78b87d1a7ea3789071c806eb73be8ef6049fec8b0381abc30b77fcbc95248dbaa2769ebf3504a956ccfbfa4f712a8ba7fe64c5e943da2bc014f41f827e79a2c1aeaded156613cdda9864ceb59f89aeacbb05d0f6df5f5c7a47ef7da834415da2141707d4a3afbbd4276f19bfe2b226595d6d8ee277afc88e8d10468f4d595b45b0d75851f6b7b55eabc6aea2528408509193422e0dc8db2d3129dc0f56da019a38e1a468266b75a791d3cf8bc9c8c57965e2863d4752273acaf2c54136a7125151af3207be684de210d63570dcc3131bb14e6aad5ed26fbce8eb3ea5991e3b69433f1a9566643ae22f5adec4bc2141e14f48b835b3bb67885a1fe02682df3fc65a4f50a3b0ff6d4a560415c8444d6dc4ad84c70582806f513243c1b6badb1be5dc596f104640a63234c3141fb129666a1f6cca0c1958c82ed32d3866c91182a1250cfb3b648236b7ad4638981b6bc02761dd7c5eca1e400b0cdd5483c22d22d79417a85cd9ec1f8dbf7119e1fb796e6da417c94dd17e767d0733867cc47706213237171c55212871514c21f737a899139e6215b0f571e954ba14f9d67498a8d083b3aa10c6e4c0ffb25f51493214ac6f3f61490d26356c1001ef05a3a23fbbd8ebc85603710fbb45892e644e357d6381d5d1255ad33e601c1b62c42f60e8ceaef701062e5a8f3d854ddd81bfea770c062ffa89e58ce4eb6d043834b48fc801fb6ffa483a1106cdc9b8bb798f988848d81c71c186195d73ad879d69fe25d77b9cb2535d7b9fb39d8eae783e712fc563cc29dea7786cb4117648acae8c5fddfa8183015f50e790bb067cafab8ed7aaa922bc8792f15d14b2e2091965433e3fc939dfdef8fa0143afb2d413c9c8415023277780a2acde84b02a04bc2daf06893411e442d7ff527ad542780183f7a64f1e0485f8215af781e23d6671cfa070d96a48c18c787bc4c24b82b888ca9960234564d653a98970235e07ef2f07858a8fb6c0864635ec", 0x800}, {&(0x7f0000002480)="39740dbd9e5f757517ef08399fd13af995f58a47b789dfd0732c6792bf3f058982ccca4da7d2c356324f9b569d77a955551fd1c25ae558a12479f407a4df644673891ab1c8df4e8ec3a8108c30697b853b5f6c6c10229ea95dfbe6a2410ac6e6a3769c49b36fc25868b127a535083f0410948e2cd88840dc20c4177be9566c1fba773d1ec3a9fcf0191d1fd7", 0x8c}], 0x8, &(0x7f0000000180)=[@rights={{0x24, 0x1, 0x1, [r0, r1, r0, r0, r1, r1]}}], 0x24}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000025c0)="6fe30bd28e3fef8ff7c2530fcb3fe557c7a6cf9f30a7faf177c344ae727467e7a3a1438293fa2757f4157544982210e85751357b06ad61c7cb79d15a7a13821c0cbf1b11166119cc16d454a19a67d0283785f2e01fac2d84058dd4e413958ede634db52984bef973eacd8f926a1731c3f3ef3c9d18cb545f502caac457853335b476f30c7956d18a13a6d4a3ffd2c93bc0fe9b2603a7af2ec1c93934d505f6f575d15af9dd1dfaca2f0cfa38c9ddf631f81a83b53d7f9018337f235434a3c8997a825eb9afc41e609e530a95a728c8bf39", 0xd1}], 0x1, &(0x7f0000002740)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r0, r1, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x44, 0x8000}}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f00000027c0)="fc1db9b4cfbca5418c60300aac938568268b1b5c174bfe7bbd2131f2f7dff76d1488d988df3cd63e94e975cee257da6ce668b92f619105ed79a73e8535093fc7dfce5031ec597e5c7673e94abbb40bec467f7ae220163047b47815a4f26025f34dd9f152baffbbba10c3bee662b8a46ffe287c184f174eb20a98019e56385592c43c333457a47076bd4abfa272e2b94b2dfa7564e4d1e400b883f80f75093daa4c008494a2b04a26715b8ceef9219da5b4ab695bb21aa72a4c9a093c8eda803cd2bc28727aaa8392a5e646ccfdf73b8ed338a844fead6e36cb200c20335fe62964b3", 0xe2}, {&(0x7f00000028c0)="bd", 0x1}, {&(0x7f0000002900)="08fb3e76fc118f04e66d1b93e0703bafd1506bb67c1bfaa0ed043e6e7c3c58c5ddd960fb9085333cc8f6a97038cb00d8eebbaafa34007d387d24a324006735ee4ec8f59b6907599adad456576055d685cc9eac73e9df4d16b04ec006f24e193a89cffab746ede516bb97e07ed5ce670d3c528dfafcd2a1a73d8f68008f93ffb7e282ee289af749b19e1e50cedb7228868ddd066f9ba8566ff0773c6f209daa8b05f2d790c214e7ea9617cb5d66cd09c2e1cf98db10f16a053f26775cc2498fcf0aed98e2eb522b70ffc96bb0f2e4f133720c8202eb079359a3de", 0xda}, {&(0x7f0000002a00)="9866a88a4155cb0b75e4a04068b9187d080484053c767b37b2be25b40ddf3f43a576d32cd387297fcd7dad771359aaa351b78d5e3325ff5ce9af5b03b55ce068dd9007b9d4675c41e4e643c8c70dc3ba40cd523e504c3f90f139c8738d0cf183c6e1e1034ddda34f9a1a455b404b2a82b10a1ea748ccd996a31238f98b2f75f4d8ebbb6197d5ee3e5ac3a5c8f542b193b2fa68cb3f11fa5529ea03cf6f669d", 0x9f}, {&(0x7f0000002ac0)="c83e47fe217f65f92cc399a6b4ff0a5020e9d479ce20080cd28a27fd8da4190612fc5cc05d49078ebe291fd9ce740e1752ca8b28e1cf89f3b63ac70425dbc3447cab2b8b4de6fc38ea7f21478d8c09fd08e5aedff908dea0056251", 0x5b}, {&(0x7f0000002b40)="acf5b4f1586f3aa65b05bcd6bb2e76de51a3ffaa29978d209d3a21d375bf5e88f4c64e43a7ae583483e0b99a19f2b123445efacc3c4890662a1a7d320cb609f5c9c313194d2c469c019e5ac55e677787922a2a11f56342dd7eb7a26b3b42b7464de6b3980a4d447a1fc57271", 0x6c}, {&(0x7f0000002bc0)="5fb99201ee23803d8978fecdbb974108985b8b121ae5bec9eb25a8f8a6141e0fe62f88bc0ccd4e510a39fab1a90764beedeb78d7422b3aa2808966b2f978df9f6924ee4983e8423322fc9d765166bea61c35f99fe8df6fe3d579a2e7a6e17e5ee27b9fd2b1a9d0a93d971e3e0cea25cb1d8d49a121c4426eceb59fae4e1b46d9f343d080ce3926871f88a37579e822d6218bc1e08ad3d77af152903e23b31f5edc95338291f8c70ae3fccaf634132a4f1489dda8f181b95aa108", 0xba}], 0x7, &(0x7f0000002d40)=[@rights={{0xc}}, @rights={{0x10, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x88, 0x24000000}}, {{&(0x7f0000002e00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004fc0)=[{&(0x7f0000002e80)="53da8f8dea58fd6dad72ea298b28ff345956b3c137695106bae08339013f37ed2a269d301f94fa601e952e9add9fad144f4afaa54625898192e5a00f9ec7d6bda4ef90d9bf6be67edb1d24fbd02525b43bc131505759fc82192954fa6bacfc2d16bd27", 0x63}, {&(0x7f0000002f00)="af258a88e5a7ef6b273c2eff72692135b9bcc921243d94dfa8fab84c77823de62e76a337e216080eccba429a8737242d426308f75edba426bc30e75f6b3f884517f8995874bcecb35166e48ec325bf8b04c61131e9564abca2e4b636e9704d1e93909a460e45f6e17edef8a634a0817198192634d8801ccd1e90653e4a0c8c33ea90ec776ee1ee7521b4c63f2a53247026b927ab652fc571b8da07137d5de7004b000dc6c6ded05314901214", 0xac}, {&(0x7f0000002fc0)="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", 0x1000}, {&(0x7f0000003fc0)="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", 0x1000}], 0x4, &(0x7f0000005000)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60, 0x2400c040}}], 0x4, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f0000bd1000/0x1000)=nil, 0x1000, 0x400000, 0x6, &(0x7f000082a000/0x400000)=nil) timer_create(0x7, 0x0, &(0x7f0000bbdffc)) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x28, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x81, 0x1}}]}, 0x28}}, 0x20000000) r3 = fcntl$getown(r2, 0x9) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x3d, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x3}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c5}, 0x4) mlock2(&(0x7f00001e2000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mlock2(&(0x7f00003f3000/0x3000)=nil, 0x3000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) listen(r1, 0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f0000000300)={0x5, 0x3, {r3}, {r6}, 0xffffffff, 0x3}) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000000)=0x8) 1.629929245s ago: executing program 5 (id=6154): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x8001, 0x10, "f3f0a0e7c6f3a0153af5e3c9309af36ca76c3d"}) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x7e, &(0x7f0000000480)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x4, 0x8, 0x0, {0x15, 0x4, 0x3, 0x17, 0x101, 0x67, 0x6, 0x1, 0x1, 0x44c1, @rand_addr=0x64010101, @remote, {[@timestamp={0x44, 0x18, 0xa9, 0x0, 0x5, [0xa2, 0x6, 0x8, 0xbe7, 0x8]}, @generic={0x88, 0xe, "c64be0bbe0302be1665e5d81"}, @rr={0x7, 0xb, 0x1c, [@dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_addr={0x44, 0xc, 0x4a, 0x1, 0x0, [{@rand_addr=0x64010102, 0x8}]}]}}}}}}}, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000c80)="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", 0x223}], 0x1) r3 = userfaultfd(0x801) socket$l2tp(0x2, 0x2, 0x73) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f00000007c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x54, r4, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1a}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010101}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x44840}, 0x40) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r5}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f022}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x3e, 0x0}, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f00000000c0)={0x2, 0x2, 0x80000000}) r12 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl0\x00', 0x0, 0x20, 0x8000, 0x5, 0x1, {{0xe, 0x4, 0x0, 0x31, 0x38, 0x68, 0x0, 0x9, 0x4, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x3c}, {[@timestamp_prespec={0x44, 0x24, 0x86, 0x3, 0x3, [{@loopback, 0x8}, {@local, 0x4}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x8}]}]}}}}}) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f00000008c0)={@loopback, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x100, 0x8, 0xf, 0x100, 0x2, 0x40400020, r13}) 1.173448952s ago: executing program 5 (id=6155): r0 = open(0x0, 0x0, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f0000001440)=[{&(0x7f0000001ac0)=""/14, 0xe}, {&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f0000002b00)=""/4100, 0x1004}], 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xbf25}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa9525000) mkdirat(0xffffffffffffff9c, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f00000000c0)=0x4, 0x7) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000100)="394e5abaa78cd4356a489350bfed3296e3b54e88b30ac1b10a25cd5aa378a48b5b74bd5802fc29189473fc57acef6d438f5c4badf4d7aef4859ee0815a93b3c783f53f3dff0faaec9ef44b5265f346dcffee39460a31d9e2392940cd5dac5bbdee3bc7c1c26ba924317d2fcdb5cd2ba0b300ea77ab84dfaaa5d98534e01edbb118b88b67bb0f46eed0f1268d18fe7502cb7c0ab0b423f4d2b60f1c043244833cadc135d676fd299c011c14100d43206dca73ecb2df834a144dfc5fc200bb84f6979bae32dc735f6aeb33834ac736b81d8a04523c54c0a6a91127519e421635a335327ec28cceeb10e41c92f5a51489948f8ed1054f9a51272e3286024361ac014bd421e6c18a05acd5d75037941382f323df48900b3c374ddad80476d708859b279a507ead6ad6206c34878bf542a40c2f1e6366a312dd9592a94859c5f095a421f38958ef0223fd44b5e793e552ae55615d75e13f2986d97f056277281f1b0e2569a891652116881963d45400f657d1e44c2bcbd57b7d5353bd64790e0509cff8dbefc4c5751a315946a298619439315c9191bba3cf4c7fa30c693d61e9cc2718ec90d47c55e62e0fd4f2a7b29d72f0ec2edcd4986598f1ed1b8771ae7ef5b9b3c41393f76019cc1201c74fdd46e63c45632e611a75917543e28c3cc669a2b614a007c1e1789f2a34d61a951467d5d5891894f611ad1aac04aaf52fe4161b420e0067beaeee0da7f549184a4c1015f94a10f5ffe78c7e4e348f28d039b8104c7c6863372fc41246574a164cac68dd9aa0d7227c79e518d2ab13ffc13821e763f07e2efb5f73a45a119c94edd9b71b46ccfe52e614bb2b19515011ce3b6a87e8a3bb181c6e135ef021125521645bb5fec473f15b9c26d320ade6bd77cca482b345a2a52ec8ff9312c6501510687b49982b4388e49c7369a0d03ac8fd2c155cbd279bce91ca4ebbeb73ee5ecf31a7c5cb1551339a0555371f5850a250530e5b612bb3f09f404289ca6f1ce83c3ed91ea9b99d3bbe17d70abea59736a86eb9f8fff4d0caea70606361666a70a43b3b6c6d331e50bce5d64b563950db4cd998a48397bfef0bf43a491cc818bb02730483e6b6fbb34642f9035aa3540c1905d007ac94f843d27346f66a81b8daf007f1d69b51cfa5b8f7d66e246ea9e95962e10b12cd1e99ae4a64f5fcee3e08a5d6c1b676f2c1837e95b09ad28c979fd74e86b8671bede41370196800f0a287a5e1bd5eaac8eb4c2458a56139c925882d2aeaf6dd9914f19fc5724740553571b3ba70b1b1d2a8084940a59426bc0ea9db00fe1f6a8cb59c77e6c071ae55b8cead50db6abd1b9c7d0dba51273af0d66587ef4db6ea35bde398bc1bdd50822ca4a347abdf3fad577fc51abe96dd88d395f64248a81684a9610034320964054830973ca8ea5490868b6eb9bce0076ed0a7d18e0762845ac3f2cd11cb045a2b2bf78dea4c8890b2739387708d2c36384f89698068be36aac98eaba65bc5155b6aa4e960eb0c4c10c25a5d4804bb3a4c0df5a059a9a8ea3c599186319700a2fb883efec038b7952b6215ab5c6511f9a7e36eecbbf204c5765980326ca258901ba4e1ebe8647f037710edcb9fef689d901972c05ef20adb132c227be86bebb984df723496078496b5bb906b84dd44f35355f6aad4a1d4a13000a368bde5ffa6c350fc83921c44ec68de9bb03311d9c2fe67860917d7c30d7833b8eb211941494c46f8cae2a44c7a5e261880bf8f3c8b3740a37147c95f24e1538547c4aed05c2d9de4fe718be1d45a0d8dfe749dd3d99ecd465cac986511f05f1756bc74a754f5cc9fd97953d378d68e5df72249ea5cabcd7c4b9b45adb443a212d3cafa579b53208bc7429f1178d4e588a682b11a6bad911213a358eb011cdbaccabeab6522a4bcb131dcc517db098d15765d7cee39f2d6d4189664bb4e541a6d09e5a582d91262e6e1f13fd8bac02aa0c32b6ffdfbe427bee7bcef1113fcbbe360129659e9556a0a79b1358d5caab9e41a52568f5a626e39d516a21a52b54e6adad07ada33315bfacc6b8b17c763b47e391958b78c3d62284a0a4b835fda4df10bca9b12c964850c68c675828bf8c558109183520a6fd57422b4d982e58e50c6ddf206cf91c0a9f35ee2f87b31ccea9dc6ec59d48c6bd779e5fc91f56e89f78473bee54c28926c7b9638165580ae6d6dd1a7e3af982a5b548e262f3e0835ba261913009a6d885070c3f77a855b0bc3672d9160d8e06fe917ce10ebb6962136e5bcd98b1520b4dd294fbb8dad7b87a84966879eb2d4f24c8e3f393f4a729efb5a274161d71965e963be651ef56dc2e8a2de9612dcba299bcc664aaf7582834fd5471ef184596689111ed3c83c21d556182b64cdd1a5f64b0b63235a1fcab53b4016b152f88ae2a16cfa0dcd3745b4cafac640e1748117a047b6be70508e20e3e6ebdc71e8d3311e4e10af894ffb70c71991fb3238a3e3d7456b5bd15095b71b41407b7d3cd6eae1090a2a396f37a11ebb4bbb37f922e6b653c8ffb79aac3270525aacecff98dd675b0c01417d5e4c24a8b88597a74a8f1876926dfb24ceb466598eeae92dfcde2225363373a99d2f4d3ae6a94f8bd1ad2cc1b88d569e66af910a2cdb61bd067e53e78959f2bf10a3af345a5aac65b4eefa3ad6e7219f9dda9efe05db2ef3a8a1912607930cb72100fcf37d702cbe82e7e135fe0413d33910d5bb6cd9eead2fdbb5630f055b274a670bf658f8395c32eb799cb476beca59fc8220d7d6caf07662a87ce8293a352957cbb29d939f8ceb60b7ba025ec91c8c5f22d4e06cc2bb86e4fd8238f5962b11b8c1a6125ad96dcdfbef060a00c09c4bb653282b28541c8e0eed50f7a0e92dfb4f9c3593970bd79e4423b720ad448b25860cf98cc5956b2b7ee183bf53177efd61b0a96bb263793dfb05b2655785a057ac3e30725397610ccf9c813c08ef871d930c76ea113df49cd15245da0fb55838eef52b2dec78e14b7aa18aa4b108886b514c58f786b0ee28def738e31a4f6048082822f23fa6d5f721699072ed3da14d0b4770a6e98ac61d04f5204d37d215ecdc2616067d0a9a47d358a42c79896fdefc77024dcdb2ce1c18f28373fabbf248804dc8cfe40e59100f14c85842243a510146e9a776899ee2c2f1e8b52774acd325b1f2f3fe6ab9f1d5c4751f215437de7401006af2487de421b064cce76b19ae618e08c503df32d3560d0dd9d33ce272a1cf7e8df9f9fa12d919517451c0b3e2378fb3e7e68f95ba3fb11dc4eee58940f080d33a6d3a1783ccc598422fa4a59fe1489b86dc9b37aa5b491662efa780111fc5d02ba58c3a44e31507dd0d59853f38d44cf2684d14de7ddb5d70137fedfa57aa40e665e69bc802ce698a5b4bb5badba3a704e48649cb903a033a2498aead6db0e0a889e7f1651097fbfe6e110b55b364d65b8f1686a5402a2c53c0e070453a160cbf5608dc47739410328317f01e6f06a4deaf8bb84c70007bdd65bacc95f8b4a7227c49c2480a49ebb079e2c214f0004cc4d669324074e9f87cc2df95adcf182e6320bdeda0d30ac27a33f48d47b42f6ed9599f78589984bf6a280fb580ba57e701ff5f111d4df3c284979d96def5c2a65558e96f5dbb56027aae87e90aaee92c4686737bf671fab47c8d0a71e962c4603ffd29c1fb814efe8dd95ab55e60885af65f4a683299625316228cf2376548f1f880c11b4932340da7c63b54d4db6e68e3fd3fec590234fb0ab49fa573075036067bd01119a9868dbda1d948166a850f5a685dc344d143a05bbfc5f05aeb9d22333feaf4c10292d404edf52e9e622a4fe89884b258f885043b0919195e3b6544f938375457e9fe39c13a0b83416bc8fe2a8f9db39744a9e3962cc603d4bd1ba6e7c95140e4b19bbcd8ed1b2fcd5c60a6354f9d86373594362f4ed7cc71d3e61fab6eba04c0f878373c03a2d389bfb67d3c8c28bc904a1cf8b9251a5735ce8326cb0f59702132154b04a8d2ee9725df6a1cdff7cb324ea40b2aee5b5a0ebca1dd2bb13f6450bae71ad5d0c5e9e5ea622f53877a0de3abe51ae6f9f20916ec684d5ed6921dbe40a73b265304fe9306e4d6eaf27ad4f56283a95f68791d8c638e554e7393f92c0a20f9e9ef3edf95f4da8aa4419254dedf41c8bd6146782a5e060becf59f071f8ee7a58f0240d7101fbcc9c8c07a2fd8d6096fe25e73346673ae1db736ac63303356f518bbf61370087c4ba9dfd3ff56255389940cf0c55fe513cce2b1d86944d147e4082fda7370849dc32fcebab6517bad992ae9f970e33233bb364cd642c66161e7f610bf1d0688e0a576b44a02785508aaba54f4c1439063952cc744752c90c6fa5e74f2af50e976a5a315d2a17b6b1dc6c5e76be7de9771a3408511373f1b4620cd0984082a27ea04fde89ee0385a7d614dca5e0c9d15593c88f2ffd3a6686a4f43f5ae73c46dd4694cbee8b06ab2022bd3c4e9e3f455ac392ed462d78f4b65fe58e65183cc7590d5dcc1ee8a6b26be9d87f361274159541987cd028ed52cdecfa11717a4d9b2b9fd6b365dd2a081e1fdc71bf4773c5811b44989dbc3610de4b1351db34710d5dc921bf7220566652e60aab7606a1bc03e82c77af1eda9dcb2102a6e550630e4f46d343f741d3a8771a3a3ce1f355f0ea7d1031ac27bb8e34fb2871f1897d30e811c54baff2e3b4c669df110291d586cccdaddad08a2eb778fcae5c6d7352d0b8f8e24c97adcb9d6745d262477c66d6b905d6ff456b6521627f6b4e01738443f3ea7f3dd0c496cd451766fa5d6f6dc10479673b8ed5fd8b092b965f09de8cb549295c8b1af901ec36024755d4de44147949f79a62e09e380fd07d4a5b28108d3bfc919269f942534578fecb341603f6d52bb861c263f445241946e4cdc4712a489a7a102dae539bb47c4c893212d91410017d4fd531c1348bd0851cc1a887d212ffba7c35dd026e4b64319ae3b3fab9f2a2b06aff14f10865f1750e896f65ef54be2c35acecfcdeba56f7271e77f6537efe062d44693ab222c01a6e4a530551bd76f917e499a52c2523110fa547f0b812c3952011d306191417e59e7249a25d4b776bab1ad5fc73f0024d6d58c361a40d77140fd33bfad01ba7d8c0198e74b0a2ebf2c29aba73200b051e0ad51fa6b77fa74f3c920d2abcebc48872ec2dc7ebdb6be4bbdba65b5e15a4c0d59b2e0782fe9be5c0d26dc21e4bdbf98670d9dcdb7ed37b44c47a9740147c3ee3f8d91187977004e2b5ddfb06c54259971bc6c882a724fa424fc5e99c2b38e5ecd587a5d6be0129aa1d5814da40a8aba7606e69b65ab4cd5bcaebece157491cd3aaf0fde2a5a5ecf099bed1c8ce20e2a6b3207b43b7407edf5395c75ce24e60bb210d750b30ed3b0c6e8a4fcabba46878916c0321e355b16c0a7e7148d20f41d9a5be28966d020f86d42aaa73674884ec3426554e7144730750683968ff2eb35ba513f5a64577ef1ab9e573c7a502b922cdcbd1b0fae0cb1b41a6d461fa55e4bac37f7f6f2dc31daeea4648a81b23771f8442409ec934f2ff3f75b1e116cad58b04b1b484b97936b545fa6dd45ab3f13e58fdfec07be0e88d7e9e0b29642e4e40f2e7a085e155c2c0b039ac09cf7fba40578d1d057206ade5b74cab402e3c3ca6f67997dd0c1e5089184d40f2b7c187ffcb524cef001a9c34a32f345aec880e8085b482d300525f304c6913fcc1c48377fbcb8e29ef473846f9ec121731bcfc26ccc717506f7fa2313347eaeb6629333e8f9227cd95bafd58aab215f437083daa9b7a702", 0x1000) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000140)=@other={'unlock', ' ', 'mem'}, 0xb) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000000)={0xdfe, 0x4, 0x4, 0xa}) r5 = socket(0x1e, 0x4, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x475, 0x4, 0x3}, 0x1c) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r5, 0x8010661b, &(0x7f0000001740)) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x4003, 0x2, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmsg$unix(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)}, 0x20) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmsg$unix(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) recvmsg$unix(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/4080, 0xff0}], 0x1}, 0x20) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000040)) 365.594616ms ago: executing program 7 (id=6156): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ffbe"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x202043) syz_usb_control_io$sierra_net(r0, &(0x7f00000001c0)={0xc, &(0x7f0000000080)={0x20, 0x22, 0x4b, {0x4b, 0x7, "463b4252878728f86039308c73eb2bc9e4af1cbda498130a9afd43173ba9c15cf60693ce98d8caa71a53914f12dac863e34661072cd8bd05853030ef3c9f60063816650249fb97a2c1"}}, &(0x7f0000000100)={0x0, 0x3, 0xab, @string={0xab, 0x3, "78668c178f8b97f2dcfcc134f3dab5286c9a77dbdba9d11f1949c61768cd157cfd361c02ebfc50a4ae1a248b2992ad8711213e1002eb61d2d87acf9e05174fe98832b4588d479678da6b4b6b97a3bcf33721e6979fc15f1badfa90cb8a0ce9516a7bf2b90327c0ce96e931659ec7ae9e09cd495bb518eb6762cf9c997627d32af7eac4129b9493bd5c16645298d94118e12e1f0a18a58843cfe10fdd9f82c25085ae9e4e163576d4d0"}}}, &(0x7f0000000740)={0x10, &(0x7f0000000200)={0x40, 0xf, 0x9b, "f1d827812eca3abbc1edc3a6563b1639b336d1d694e9a8fa785ba591862d868a2af49e3f0ee783d4af6e3550c76507137dcdda6e392e00790647201976b9cb64d81bfb418e09d6adefeb9c0697ba585309d9d32cf0b4142dcfdd030ebdf44d08fa89be6418a7dd5ecc96c4f451eb58e6d1d0511d13e1da2d57ce1025cfa97fad8947abf39b94447dff0811b1d936df2002f540de717042399e1aa8"}, &(0x7f00000002c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000700)={0x21, 0x0, 0x4, "ebeac99e"}}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000000)={0x1, 0x1, 0x401, 0x3, 0xcdf8, 0xa5c}) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000004e40)={0xb, 0x18, 0xeffe, 0x0, "4d512c91002a49500000008000000000f82a3373f20000010000000000fbf29c"}) 217.610603ms ago: executing program 5 (id=6157): r0 = syz_usbip_server_init(0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES8, @ANYRESHEX, @ANYRESOCT, @ANYRESOCT], 0xff70) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TCXONC(r2, 0x540a, 0x2) ioctl$TCXONC(r2, 0x540a, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)) move_pages(0x0, 0x0, 0x0, &(0x7f0000000140)=[0x80, 0x8, 0x0], &(0x7f0000000080)=[0x0], 0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2800, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(0x0, 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) unshare(0x22020400) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0x4010, 0xffffffffffffffff, 0x200000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00006cc000/0xb000)=nil, 0xb000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, r3) ptrace$poke(0x4, r3, &(0x7f0000000200), 0x1) 0s ago: executing program 8 (id=6158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c0005000100060000002400078008"], 0x6c}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x8864000000000000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r5, 0x80045503, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x4, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) kernel console output (not intermixed with test programs): , please check. [ 1514.743619][T26032] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.5779'. [ 1514.775471][T18153] rc_core: IR keymap rc-streamzap not found [ 1514.795184][T18153] Registered IR keymap rc-empty [ 1514.806187][T26029] netlink: 'syz.8.5778': attribute type 14 has an invalid length. [ 1514.816472][T18153] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1514.832265][T26029] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5778'. [ 1514.849959][T18153] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input100 [ 1514.869893][T26020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1514.920480][T26020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1515.049981][T26020] sg_write: data in/out 811008/136 bytes for SCSI command 0x9-- guessing data in; [ 1515.049981][T26020] program syz.4.5774 not setting count and/or reply_len properly [ 1515.163538][T26034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.174214][T26034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.412043][T18153] usb 5-1: USB disconnect, device number 115 [ 1515.560976][T26034] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.606235][T26034] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.924803][T16099] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.953661][T16099] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.974100][T16099] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.995817][T16099] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.295413][T18153] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1516.486884][T18153] usb 3-1: Using ep0 maxpacket: 8 [ 1516.517298][T18153] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1516.564292][T18153] usb 3-1: config 0 has no interface number 0 [ 1516.591722][T18153] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1516.625159][T18153] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1516.658408][T18153] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.698153][T18153] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1516.719608][T18153] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1516.732044][T18153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.772212][T18153] usb 3-1: config 0 descriptor?? [ 1516.814237][T18153] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1517.023545][T26045] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5780'. [ 1517.053907][T26045] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1517.905177][T18162] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1518.077632][T18162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 1518.106585][T18162] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1518.134618][T18162] usb 9-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 1518.160791][T18162] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1518.215277][T18162] usb 9-1: config 0 descriptor?? [ 1518.653639][T26073] netlink: 76 bytes leftover after parsing attributes in process `syz.8.5790'. [ 1518.678485][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.686225][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.693844][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.701478][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.709735][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.718574][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.726671][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.734229][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.744214][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.752293][T18162] nzxt-smart2 0003:1E71:200F.004A: unknown main item tag 0x0 [ 1518.774855][T18162] nzxt-smart2 0003:1E71:200F.004A: hidraw0: USB HID v7f.fd Device [HID 1e71:200f] on usb-dummy_hcd.8-1/input0 [ 1518.898623][T18162] usb 9-1: USB disconnect, device number 16 [ 1519.092917][T24256] usb 3-1: USB disconnect, device number 79 [ 1519.109544][T24256] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 1519.226979][T26088] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1519.234959][T26088] [U] J"—E:ÀÆ" [ 1519.555417][T24256] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1519.736520][T24256] usb 3-1: Using ep0 maxpacket: 32 [ 1519.753715][T24256] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1519.781169][T24256] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1519.814852][T24256] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.853916][T24256] usb 3-1: config 0 descriptor?? [ 1520.525357][T24256] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1520.696456][T24256] usb 9-1: Using ep0 maxpacket: 16 [ 1520.718218][T26105] FAULT_INJECTION: forcing a failure. [ 1520.718218][T26105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1520.750649][T26105] CPU: 0 UID: 0 PID: 26105 Comm: syz.5.5799 Tainted: G L syzkaller #0 PREEMPT(full) [ 1520.750684][T26105] Tainted: [L]=SOFTLOCKUP [ 1520.750693][T26105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1520.750706][T26105] Call Trace: [ 1520.750715][T26105] [ 1520.750724][T26105] dump_stack_lvl+0xe8/0x150 [ 1520.750766][T26105] should_fail_ex+0x40c/0x560 [ 1520.750799][T26105] _copy_from_user+0x2d/0xb0 [ 1520.750831][T26105] __ia32_compat_sys_socketcall+0x158/0xa50 [ 1520.750860][T26105] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1520.750895][T26105] ? __fget_files+0x3a2/0x420 [ 1520.750925][T26105] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1520.750950][T26105] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 1520.750981][T26105] ? fput+0xa0/0xd0 [ 1520.751021][T26105] ? asm_int80_emulation+0x1a/0x20 [ 1520.751054][T26105] do_int80_emulation+0x19a/0x550 [ 1520.751093][T26105] ? trace_irq_disable+0x3b/0x140 [ 1520.751122][T26105] ? asm_int80_emulation+0x1a/0x20 [ 1520.751143][T26105] ? clear_bhb_loop+0x40/0x90 [ 1520.751167][T26105] ? clear_bhb_loop+0x40/0x90 [ 1520.751194][T26105] asm_int80_emulation+0x1a/0x20 [ 1520.751216][T26105] RIP: 0023:0xf71e71eb [ 1520.751237][T26105] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1520.751256][T26105] RSP: 002b:00000000f549c34c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 1520.751280][T26105] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f549c3f4 [ 1520.751296][T26105] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1520.751310][T26105] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1520.751323][T26105] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1520.751337][T26105] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1520.751369][T26105] [ 1520.754621][T24256] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.100120][T26107] FAULT_INJECTION: forcing a failure. [ 1521.100120][T26107] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.114448][T26107] CPU: 1 UID: 0 PID: 26107 Comm: syz.7.5798 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.114482][T26107] Tainted: [L]=SOFTLOCKUP [ 1521.114491][T26107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1521.114504][T26107] Call Trace: [ 1521.114513][T26107] [ 1521.114522][T26107] dump_stack_lvl+0xe8/0x150 [ 1521.114568][T26107] should_fail_ex+0x40c/0x560 [ 1521.114598][T26107] should_failslab+0xa8/0x100 [ 1521.114633][T26107] __kmalloc_noprof+0xfe/0x720 [ 1521.114661][T26107] ? tomoyo_encode+0x2ad/0x570 [ 1521.114683][T26107] ? tomoyo_encode+0x2ad/0x570 [ 1521.114713][T26107] tomoyo_encode+0x2ad/0x570 [ 1521.114743][T26107] tomoyo_realpath_from_path+0x5fa/0x640 [ 1521.114778][T26107] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1521.114810][T26107] tomoyo_path_number_perm+0x246/0x5f0 [ 1521.114844][T26107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1521.114873][T26107] ? __lock_acquire+0x683/0x2cf0 [ 1521.114910][T26107] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 1521.114955][T26107] ? __fget_files+0x2a/0x420 [ 1521.114988][T26107] ? __fget_files+0x3a2/0x420 [ 1521.115016][T26107] ? __fget_files+0x2a/0x420 [ 1521.115048][T26107] security_file_ioctl_compat+0xc3/0x2a0 [ 1521.115082][T26107] __ia32_compat_sys_ioctl+0x139/0x950 [ 1521.115108][T26107] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1521.115132][T26107] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.115165][T26107] ? __fget_files+0x3a2/0x420 [ 1521.115213][T26107] ? __secure_computing+0xe7/0x2b0 [ 1521.115250][T26107] __do_fast_syscall_32+0x23e/0x6f0 [ 1521.115284][T26107] ? do_fast_syscall_32+0x33/0x70 [ 1521.115315][T26107] ? lockdep_hardirqs_on+0x7a/0x110 [ 1521.115344][T26107] ? asm_int80_emulation+0x1a/0x20 [ 1521.115365][T26107] ? do_int80_emulation+0x29f/0x550 [ 1521.115401][T26107] do_fast_syscall_32+0x33/0x70 [ 1521.115434][T26107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1521.115460][T26107] RIP: 0023:0xf703f0ec [ 1521.115481][T26107] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1521.115501][T26107] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1521.115522][T26107] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0184800 [ 1521.115542][T26107] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 1521.115553][T26107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1521.115563][T26107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1521.115574][T26107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1521.115599][T26107] [ 1521.372620][T24256] usb 9-1: config 0 has no interfaces? [ 1521.462786][T26107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1521.469905][T24256] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1521.479289][T24256] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1521.487526][T24256] usb 9-1: Manufacturer: syz [ 1521.495851][T24256] usb 9-1: config 0 descriptor?? [ 1521.749163][T26099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1521.767377][T24256] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1521.779489][T26099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.938245][ T6636] usb 9-1: USB disconnect, device number 17 [ 1521.943846][T24256] usb 5-1: Using ep0 maxpacket: 8 [ 1521.959340][T24256] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1521.989547][T24256] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1522.006669][T24256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1522.020971][T24256] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1522.032151][T24256] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1522.048739][T24256] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1522.059381][T24256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.218255][ T6636] usb 3-1: USB disconnect, device number 80 [ 1523.580434][T26140] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5810'. [ 1523.905146][ T6636] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1524.075165][ T6636] usb 9-1: Using ep0 maxpacket: 8 [ 1524.091356][ T6636] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1524.107480][ T6636] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1524.120109][ T6636] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1524.131559][ T6636] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1524.143145][ T6636] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1524.157020][ T6636] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1524.166511][ T6636] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.269016][T26152] netlink: 'syz.5.5813': attribute type 8 has an invalid length. [ 1524.479086][ T6636] usb 5-1: USB disconnect, device number 116 [ 1524.495359][ T5613] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1524.665191][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 1524.681072][ T5613] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1524.712114][ T5613] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1524.745407][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1524.788570][ T5613] usb 3-1: config 0 descriptor?? [ 1524.802167][T26168] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5820'. [ 1525.073969][T26172] AppArmor: change_hat: Invalid input, NULL hat and NULL magic [ 1525.393321][T26179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5823'. [ 1525.423628][T24256] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 1525.605110][T24256] usb 6-1: Using ep0 maxpacket: 16 [ 1525.620390][T24256] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1525.650963][T24256] usb 6-1: config 0 has no interfaces? [ 1525.681884][T24256] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1525.715211][T24256] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1525.749822][T24256] usb 6-1: Manufacturer: syz [ 1525.778774][T24256] usb 6-1: config 0 descriptor?? [ 1526.033603][T26187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5827'. [ 1526.056713][T26157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.081367][T26157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1526.249915][T24256] usb 6-1: USB disconnect, device number 95 [ 1526.681574][T15301] usb 9-1: USB disconnect, device number 18 [ 1526.756401][T26200] sock: sock_set_timeout: `syz.8.5831' (pid 26200) tries to set negative timeout [ 1527.016554][T26204] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5832'. [ 1527.274466][T26209] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5835'. [ 1527.296139][T24256] usb 3-1: USB disconnect, device number 81 [ 1527.392657][T26211] netlink: 'syz.5.5833': attribute type 12 has an invalid length. [ 1529.165154][T24256] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1529.325800][T24256] usb 5-1: Using ep0 maxpacket: 16 [ 1529.339259][T24256] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.354858][T24256] usb 5-1: config 0 has no interfaces? [ 1529.364745][T24256] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1529.374834][T24256] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1529.389118][T24256] usb 5-1: Manufacturer: syz [ 1529.416980][T24256] usb 5-1: config 0 descriptor?? [ 1529.518187][T26251] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5847'. [ 1529.655583][ T5613] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 1529.688904][T26243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.736236][T26243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.826873][T26264] FAULT_INJECTION: forcing a failure. [ 1529.826873][T26264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.842061][ T5613] usb 6-1: Using ep0 maxpacket: 32 [ 1529.853307][ T5613] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1529.865278][T26264] CPU: 1 UID: 0 PID: 26264 Comm: syz.7.5851 Tainted: G L syzkaller #0 PREEMPT(full) [ 1529.865313][T26264] Tainted: [L]=SOFTLOCKUP [ 1529.865321][T26264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1529.865335][T26264] Call Trace: [ 1529.865344][T26264] [ 1529.865353][T26264] dump_stack_lvl+0xe8/0x150 [ 1529.865392][T26264] should_fail_ex+0x40c/0x560 [ 1529.865424][T26264] _copy_from_user+0x2d/0xb0 [ 1529.865457][T26264] kstrtouint_from_user+0xd6/0x180 [ 1529.865487][T26264] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1529.865529][T26264] proc_fail_nth_write+0x8e/0x210 [ 1529.865560][T26264] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1529.865599][T26264] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1529.865628][T26264] vfs_write+0x296/0xba0 [ 1529.865669][T26264] ? __pfx_vfs_write+0x10/0x10 [ 1529.865703][T26264] ? __fget_files+0x2a/0x420 [ 1529.865736][T26264] ? __fget_files+0x3a2/0x420 [ 1529.865764][T26264] ? __fget_files+0x2a/0x420 [ 1529.865802][T26264] ksys_write+0x150/0x270 [ 1529.865838][T26264] ? __pfx_ksys_write+0x10/0x10 [ 1529.865876][T26264] ? asm_int80_emulation+0x1a/0x20 [ 1529.865904][T26264] do_int80_emulation+0x19a/0x550 [ 1529.865937][T26264] ? trace_irq_disable+0x3b/0x140 [ 1529.865963][T26264] ? asm_int80_emulation+0x1a/0x20 [ 1529.865984][T26264] ? clear_bhb_loop+0x40/0x90 [ 1529.866006][T26264] ? clear_bhb_loop+0x40/0x90 [ 1529.866033][T26264] asm_int80_emulation+0x1a/0x20 [ 1529.866056][T26264] RIP: 0023:0xf71771eb [ 1529.866076][T26264] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1529.866096][T26264] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1529.866119][T26264] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f542d5d0 [ 1529.866135][T26264] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1529.866148][T26264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1529.866161][T26264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1529.866175][T26264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1529.866208][T26264] [ 1530.090200][ T5613] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1530.099405][ T5613] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.113304][ T5613] usb 6-1: config 0 descriptor?? [ 1530.167131][T26202] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1530.174671][T26202] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 1530.183477][T26202] ALSA: mixer_oss: invalid OSS volume '6' [ 1530.189321][T26202] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1530.195790][T26202] ALSA: mixer_oss: invalid OSS volume '7' [ 1530.206490][T24256] usb 5-1: USB disconnect, device number 117 [ 1530.221114][T18162] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1530.385211][T18162] usb 3-1: Using ep0 maxpacket: 32 [ 1530.392325][T18162] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.403063][T18162] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1530.414558][T18162] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1530.424375][T18162] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.432728][T18162] usb 3-1: Product: syz [ 1530.437183][T18162] usb 3-1: Manufacturer: syz [ 1530.442252][T18162] usb 3-1: SerialNumber: syz [ 1530.451568][T18162] usb 3-1: config 0 descriptor?? [ 1530.669392][T26261] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1531.609004][T26284] netlink: 'syz.8.5856': attribute type 8 has an invalid length. [ 1531.815221][T26286] FAULT_INJECTION: forcing a failure. [ 1531.815221][T26286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.844945][T26286] CPU: 0 UID: 0 PID: 26286 Comm: syz.8.5857 Tainted: G L syzkaller #0 PREEMPT(full) [ 1531.844983][T26286] Tainted: [L]=SOFTLOCKUP [ 1531.844991][T26286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1531.845004][T26286] Call Trace: [ 1531.845013][T26286] [ 1531.845022][T26286] dump_stack_lvl+0xe8/0x150 [ 1531.845060][T26286] should_fail_ex+0x40c/0x560 [ 1531.845091][T26286] _copy_from_iter+0x1d3/0x1660 [ 1531.845125][T26286] ? _copy_from_iter+0x21b/0x1660 [ 1531.845158][T26286] ? __pfx__copy_from_iter+0x10/0x10 [ 1531.845182][T26286] ? __pfx__copy_from_iter+0x10/0x10 [ 1531.845207][T26286] copy_page_from_iter+0x219/0x2d0 [ 1531.845231][T26286] skb_copy_datagram_from_iter+0x2f4/0x720 [ 1531.845257][T26286] tun_get_user+0x1520/0x4370 [ 1531.845290][T26286] ? aa_file_perm+0x18b/0x15f0 [ 1531.845310][T26286] ? aa_file_perm+0x4ed/0x15f0 [ 1531.845326][T26286] ? __pfx_tun_get_user+0x10/0x10 [ 1531.845347][T26286] ? __lock_acquire+0x683/0x2cf0 [ 1531.845373][T26286] ? kstrtoull+0x12f/0x1d0 [ 1531.845393][T26286] ? ref_tracker_alloc+0x341/0x4b0 [ 1531.845414][T26286] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1531.845433][T26286] ? tun_get+0x1c/0x2f0 [ 1531.845452][T26286] ? tun_get+0x1c/0x2f0 [ 1531.845476][T26286] ? tun_get+0x1c/0x2f0 [ 1531.845494][T26286] ? tun_get+0x1c/0x2f0 [ 1531.845516][T26286] tun_chr_write_iter+0x113/0x200 [ 1531.845538][T26286] vfs_write+0x612/0xba0 [ 1531.845591][T26286] ? __pfx_vfs_write+0x10/0x10 [ 1531.845632][T26286] ? __fget_files+0x2a/0x420 [ 1531.845670][T26286] ksys_write+0x150/0x270 [ 1531.845695][T26286] ? __pfx_ksys_write+0x10/0x10 [ 1531.845720][T26286] ? __ia32_sys_write+0x2d/0x90 [ 1531.845746][T26286] __do_fast_syscall_32+0x23e/0x6f0 [ 1531.845770][T26286] ? do_fast_syscall_32+0x33/0x70 [ 1531.845792][T26286] ? lockdep_hardirqs_on+0x7a/0x110 [ 1531.845823][T26286] ? asm_int80_emulation+0x1a/0x20 [ 1531.845836][T26286] ? do_int80_emulation+0x29f/0x550 [ 1531.845857][T26286] ? trace_irq_disable+0x3b/0x140 [ 1531.845877][T26286] do_fast_syscall_32+0x33/0x70 [ 1531.845898][T26286] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1531.845916][T26286] RIP: 0023:0xf7f030ec [ 1531.845929][T26286] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1531.845942][T26286] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1531.845957][T26286] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000140 [ 1531.845967][T26286] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 1531.845988][T26286] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1531.846001][T26286] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1531.846013][T26286] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1531.846041][T26286] [ 1532.227383][T15301] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1532.395174][T15301] usb 5-1: Using ep0 maxpacket: 16 [ 1532.406680][T24256] usb 6-1: USB disconnect, device number 96 [ 1532.426869][T15301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.437803][T15301] usb 5-1: config 0 has no interfaces? [ 1532.445462][T15301] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1532.456437][T15301] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1532.464718][T15301] usb 5-1: Manufacturer: syz [ 1532.481392][T15301] usb 5-1: config 0 descriptor?? [ 1532.536531][T26291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5859'. [ 1532.769193][ T5613] usb 5-1: USB disconnect, device number 118 [ 1532.783391][T26296] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5861'. [ 1532.885200][T24256] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 1532.933285][ T807] usb 3-1: USB disconnect, device number 82 [ 1533.038924][T26301] FAULT_INJECTION: forcing a failure. [ 1533.038924][T26301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1533.052460][T26301] CPU: 0 UID: 0 PID: 26301 Comm: syz.2.5863 Tainted: G L syzkaller #0 PREEMPT(full) [ 1533.052502][T26301] Tainted: [L]=SOFTLOCKUP [ 1533.052510][T26301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1533.052524][T26301] Call Trace: [ 1533.052532][T26301] [ 1533.052542][T26301] dump_stack_lvl+0xe8/0x150 [ 1533.052580][T26301] should_fail_ex+0x40c/0x560 [ 1533.052611][T26301] _copy_from_user+0x2d/0xb0 [ 1533.052644][T26301] kstrtouint_from_user+0xd6/0x180 [ 1533.052673][T26301] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1533.052716][T26301] proc_fail_nth_write+0x8e/0x210 [ 1533.052746][T26301] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1533.052784][T26301] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1533.052814][T26301] vfs_write+0x296/0xba0 [ 1533.052856][T26301] ? __pfx_vfs_write+0x10/0x10 [ 1533.052890][T26301] ? __fget_files+0x2a/0x420 [ 1533.052922][T26301] ? __fget_files+0x3a2/0x420 [ 1533.052949][T26301] ? __fget_files+0x2a/0x420 [ 1533.052987][T26301] ksys_write+0x150/0x270 [ 1533.053025][T26301] ? __pfx_ksys_write+0x10/0x10 [ 1533.053063][T26301] ? asm_int80_emulation+0x1a/0x20 [ 1533.053090][T26301] do_int80_emulation+0x19a/0x550 [ 1533.053122][T26301] ? trace_irq_disable+0x3b/0x140 [ 1533.053148][T26301] ? asm_int80_emulation+0x1a/0x20 [ 1533.053168][T26301] ? clear_bhb_loop+0x40/0x90 [ 1533.053190][T26301] ? clear_bhb_loop+0x40/0x90 [ 1533.053217][T26301] asm_int80_emulation+0x1a/0x20 [ 1533.053238][T26301] RIP: 0023:0xf71071eb [ 1533.053257][T26301] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1533.053276][T26301] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1533.053298][T26301] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f53bd5d0 [ 1533.053313][T26301] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1533.053326][T26301] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1533.053340][T26301] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1533.053353][T26301] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1533.053386][T26301] [ 1533.117711][T24256] usb 6-1: Using ep0 maxpacket: 16 [ 1533.280654][T24256] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.292129][T24256] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1533.302026][T24256] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1533.313611][T24256] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 60930, setting to 1024 [ 1533.328054][T24256] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 1533.338111][T24256] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1533.352400][T24256] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1533.361761][T24256] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1533.369921][T24256] usb 6-1: SerialNumber: syz [ 1533.378759][T26291] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1533.393752][T26291] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1533.628226][T24256] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 1533.674501][T24256] usb 6-1: USB disconnect, device number 97 [ 1534.022594][T26317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5868'. [ 1534.035377][ T807] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1534.187138][ T807] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 1534.207828][ T807] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1534.222839][T26321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5870'. [ 1534.231927][ T807] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1534.231962][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.231986][ T807] usb 3-1: Product: syz [ 1534.232004][ T807] usb 3-1: Manufacturer: syz [ 1534.232022][ T807] usb 3-1: SerialNumber: syz [ 1534.267866][ T807] rtl8150 3-1:1.0: couldn't find required endpoints [ 1534.285728][ T807] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 1534.375207][T24256] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1534.474113][T26305] RDS: rds_bind could not find a transport for 8031:1700::, load rds_tcp or rds_rdma? [ 1534.491466][ T6636] usb 3-1: USB disconnect, device number 83 [ 1534.518906][T26326] netlink: 14 bytes leftover after parsing attributes in process `syz.8.5872'. [ 1534.545305][T24256] usb 5-1: Using ep0 maxpacket: 32 [ 1534.552713][T24256] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1534.565759][T24256] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.578426][T24256] usb 5-1: config 0 descriptor?? [ 1534.586891][T15301] usb 6-1: new full-speed USB device number 98 using dummy_hcd [ 1534.771537][T15301] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1534.782875][T15301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.792131][T15301] usb 6-1: Product: syz [ 1534.797137][T15301] usb 6-1: Manufacturer: syz [ 1534.806157][T15301] usb 6-1: SerialNumber: syz [ 1534.806733][T24256] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1534.831724][T15301] usb 6-1: config 0 descriptor?? [ 1534.834804][T24256] usb 5-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1534.846588][T24256] usb 5-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1534.862270][T15301] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1535.365528][T26343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5879'. [ 1535.447671][ T807] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1535.607197][ T807] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1535.617986][ T807] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 1535.627506][ T807] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1535.639478][ T807] usb 9-1: config 0 descriptor?? [ 1535.650735][ T807] pwc: Askey VC010 type 2 USB webcam detected. [ 1535.850891][ T807] pwc: send_video_command error -71 [ 1535.858013][ T807] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1535.870596][ T807] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 1535.885920][ T807] usb 9-1: USB disconnect, device number 19 [ 1536.375230][ T807] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1536.403014][T26357] FAULT_INJECTION: forcing a failure. [ 1536.403014][T26357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.421859][T26357] CPU: 1 UID: 0 PID: 26357 Comm: syz.4.5884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1536.421894][T26357] Tainted: [L]=SOFTLOCKUP [ 1536.421903][T26357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1536.421917][T26357] Call Trace: [ 1536.421927][T26357] [ 1536.421936][T26357] dump_stack_lvl+0xe8/0x150 [ 1536.421977][T26357] should_fail_ex+0x40c/0x560 [ 1536.422009][T26357] _copy_from_user+0x2d/0xb0 [ 1536.422043][T26357] move_addr_to_kernel+0x7e/0x160 [ 1536.422072][T26357] get_compat_msghdr+0x3db/0x4c0 [ 1536.422098][T26357] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1536.422135][T26357] ___sys_sendmsg+0x201/0x360 [ 1536.422168][T26357] ? __lock_acquire+0x683/0x2cf0 [ 1536.422202][T26357] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.422235][T26357] ? get_pid_task+0x20/0x1f0 [ 1536.422267][T26357] ? get_pid_task+0x20/0x1f0 [ 1536.422295][T26357] ? get_pid_task+0x20/0x1f0 [ 1536.422355][T26357] ? __fget_files+0x2a/0x420 [ 1536.422384][T26357] ? __fget_files+0x3a2/0x420 [ 1536.422424][T26357] __sys_sendmsg+0x177/0x240 [ 1536.422460][T26357] ? __pfx___sys_sendmsg+0x10/0x10 [ 1536.422513][T26357] __do_fast_syscall_32+0x23e/0x6f0 [ 1536.422552][T26357] ? do_fast_syscall_32+0x33/0x70 [ 1536.422583][T26357] ? lockdep_hardirqs_on+0x7a/0x110 [ 1536.422611][T26357] ? asm_int80_emulation+0x1a/0x20 [ 1536.422633][T26357] ? do_int80_emulation+0x29f/0x550 [ 1536.422663][T26357] ? trace_irq_disable+0x3b/0x140 [ 1536.422702][T26357] do_fast_syscall_32+0x33/0x70 [ 1536.422735][T26357] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1536.422763][T26357] RIP: 0023:0xf6fef0ec [ 1536.422784][T26357] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1536.422804][T26357] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1536.422829][T26357] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001c00 [ 1536.422846][T26357] RDX: 0000000020008b88 RSI: 0000000000000000 RDI: 0000000000000000 [ 1536.422860][T26357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1536.422874][T26357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1536.422887][T26357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1536.422919][T26357] [ 1536.795121][ T807] usb 9-1: Using ep0 maxpacket: 8 [ 1536.809740][ T807] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=39.ee [ 1536.818938][ T807] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.827060][ T807] usb 9-1: Product: syz [ 1536.831273][ T807] usb 9-1: Manufacturer: syz [ 1536.835960][ T807] usb 9-1: SerialNumber: syz [ 1536.843844][ T807] usb 9-1: config 0 descriptor?? [ 1536.864296][ T807] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1537.053495][ T807] gspca_vc032x: reg_r err -32 [ 1537.060505][ T807] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1537.089343][ T807] usb 9-1: USB disconnect, device number 20 [ 1537.289864][T26374] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5890'. [ 1537.375517][T18153] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1537.439184][T26377] netlink: 'syz.4.5891': attribute type 2 has an invalid length. [ 1537.535117][T18153] usb 3-1: Using ep0 maxpacket: 32 [ 1537.545422][T18153] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1537.555648][T18153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.567567][T18153] usb 3-1: config 0 descriptor?? [ 1537.688434][T15301] gspca_stk1135: reg_w 0x350 err -71 [ 1537.699445][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.708426][T15301] gspca_stk1135: Sensor write failed [ 1537.715494][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.722765][T15301] gspca_stk1135: Sensor write failed [ 1537.728840][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.736520][T15301] gspca_stk1135: Sensor read failed [ 1537.741935][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.752972][T15301] gspca_stk1135: Sensor read failed [ 1537.761287][T15301] gspca_stk1135: Detected sensor type unknown (0x0) [ 1537.770836][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.784567][T15301] gspca_stk1135: Sensor read failed [ 1537.799287][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.815642][T15301] gspca_stk1135: Sensor read failed [ 1537.816544][T18153] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1537.831887][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.854576][T15301] gspca_stk1135: Sensor write failed [ 1537.881897][T15301] gspca_stk1135: serial bus timeout: status=0x00 [ 1537.895580][T15301] gspca_stk1135: Sensor write failed [ 1537.906715][T15301] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1537.937731][T15301] usb 6-1: USB disconnect, device number 98 [ 1538.184252][ T807] IPVS: starting estimator thread 0... [ 1538.320830][T26387] IPVS: using max 27 ests per chain, 64800 per kthread [ 1538.832533][T26396] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1538.853496][T26396] [U] J"—E:ÀÆ" [ 1539.478458][T26407] FAULT_INJECTION: forcing a failure. [ 1539.478458][T26407] name failslab, interval 1, probability 0, space 0, times 0 [ 1539.493937][T26407] CPU: 1 UID: 0 PID: 26407 Comm: syz.5.5900 Tainted: G L syzkaller #0 PREEMPT(full) [ 1539.493965][T26407] Tainted: [L]=SOFTLOCKUP [ 1539.493971][T26407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1539.493981][T26407] Call Trace: [ 1539.493988][T26407] [ 1539.493995][T26407] dump_stack_lvl+0xe8/0x150 [ 1539.494050][T26407] should_fail_ex+0x40c/0x560 [ 1539.494083][T26407] should_failslab+0xa8/0x100 [ 1539.494116][T26407] __kmalloc_cache_noprof+0xa8/0x660 [ 1539.494147][T26407] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1539.494170][T26407] ? __kmalloc_cache_noprof+0x150/0x660 [ 1539.494189][T26407] ? sctp_add_bind_addr+0x8c/0x370 [ 1539.494208][T26407] ? sctp_add_bind_addr+0x8c/0x370 [ 1539.494232][T26407] sctp_add_bind_addr+0x8c/0x370 [ 1539.494255][T26407] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1539.494278][T26407] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1539.494299][T26407] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1539.494321][T26407] ? sctp_v6_is_any+0x64/0x80 [ 1539.494343][T26407] ? sctp_copy_one_addr+0x93/0x360 [ 1539.494364][T26407] sctp_bind_addr_copy+0xb3/0x3c0 [ 1539.494385][T26407] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1539.494408][T26407] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1539.494435][T26407] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1539.494460][T26407] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1539.494485][T26407] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1539.494507][T26407] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1539.494532][T26407] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1539.494550][T26407] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1539.494575][T26407] sctp_sendmsg+0x159b/0x2d00 [ 1539.494610][T26407] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1539.494638][T26407] ? aa_sk_perm+0x6d5/0x900 [ 1539.494672][T26407] ? sock_rps_record_flow+0x19/0x350 [ 1539.494725][T26407] ? inet_sendmsg+0x298/0x320 [ 1539.494757][T26407] ? __pfx_inet_sendmsg+0x10/0x10 [ 1539.494784][T26407] sock_sendmsg_nosec+0x10e/0x180 [ 1539.494810][T26407] ____sys_sendmsg+0x54e/0x850 [ 1539.494845][T26407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1539.494899][T26407] ___sys_sendmsg+0x2a5/0x360 [ 1539.494929][T26407] ? __lock_acquire+0x683/0x2cf0 [ 1539.494959][T26407] ? __pfx____sys_sendmsg+0x10/0x10 [ 1539.494990][T26407] ? get_pid_task+0x20/0x1f0 [ 1539.495020][T26407] ? get_pid_task+0x20/0x1f0 [ 1539.495048][T26407] ? get_pid_task+0x20/0x1f0 [ 1539.495108][T26407] ? __fget_files+0x2a/0x420 [ 1539.495136][T26407] ? __fget_files+0x3a2/0x420 [ 1539.495174][T26407] __sys_sendmsg+0x177/0x240 [ 1539.495210][T26407] ? __pfx___sys_sendmsg+0x10/0x10 [ 1539.495248][T26407] __do_fast_syscall_32+0x23e/0x6f0 [ 1539.495273][T26407] ? do_fast_syscall_32+0x33/0x70 [ 1539.495295][T26407] ? lockdep_hardirqs_on+0x7a/0x110 [ 1539.495316][T26407] ? asm_int80_emulation+0x1a/0x20 [ 1539.495331][T26407] ? do_int80_emulation+0x29f/0x550 [ 1539.495354][T26407] ? trace_irq_disable+0x3b/0x140 [ 1539.495377][T26407] do_fast_syscall_32+0x33/0x70 [ 1539.495403][T26407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1539.495422][T26407] RIP: 0023:0xf70af0ec [ 1539.495437][T26407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1539.495451][T26407] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1539.495468][T26407] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 1539.495479][T26407] RDX: 000000000000c050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1539.495489][T26407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1539.495498][T26407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1539.495508][T26407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1539.495530][T26407] [ 1540.359594][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5901'. [ 1540.722286][T26415] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5904'. [ 1540.974426][T26421] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5906'. [ 1541.319652][T26432] trusted_key: encrypted_key: insufficient parameters specified [ 1541.415162][ T6636] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1541.565676][ T6636] usb 9-1: device descriptor read/64, error -71 [ 1541.817881][ T6636] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1541.955229][ T6636] usb 9-1: device descriptor read/64, error -71 [ 1542.065588][ T6636] usb usb9-port1: attempt power cycle [ 1542.415182][ T6636] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1542.457208][ T6636] usb 9-1: device descriptor read/8, error -71 [ 1542.713508][ T6636] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1542.745923][ T6636] usb 9-1: device descriptor read/8, error -71 [ 1542.755834][T26447] FAULT_INJECTION: forcing a failure. [ 1542.755834][T26447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1542.790390][T26447] CPU: 0 UID: 0 PID: 26447 Comm: syz.7.5915 Tainted: G L syzkaller #0 PREEMPT(full) [ 1542.790428][T26447] Tainted: [L]=SOFTLOCKUP [ 1542.790437][T26447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1542.790454][T26447] Call Trace: [ 1542.790463][T26447] [ 1542.790479][T26447] dump_stack_lvl+0xe8/0x150 [ 1542.790509][T26447] should_fail_ex+0x40c/0x560 [ 1542.790532][T26447] _copy_to_user+0x31/0xb0 [ 1542.790557][T26447] simple_read_from_buffer+0xe1/0x170 [ 1542.790583][T26447] proc_fail_nth_read+0x1bb/0x230 [ 1542.790608][T26447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1542.790632][T26447] ? rw_verify_area+0x24a/0x4c0 [ 1542.790657][T26447] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1542.790684][T26447] vfs_read+0x213/0xa80 [ 1542.790712][T26447] ? __pfx___mutex_lock+0x10/0x10 [ 1542.790737][T26447] ? __pfx_vfs_read+0x10/0x10 [ 1542.790761][T26447] ? __fget_files+0x2a/0x420 [ 1542.790785][T26447] ? __fget_files+0x3a2/0x420 [ 1542.790804][T26447] ? __fget_files+0x2a/0x420 [ 1542.790849][T26447] ksys_read+0x150/0x270 [ 1542.790884][T26447] ? __pfx_ksys_read+0x10/0x10 [ 1542.790921][T26447] ? asm_int80_emulation+0x1a/0x20 [ 1542.790940][T26447] do_int80_emulation+0x19a/0x550 [ 1542.790963][T26447] ? trace_irq_disable+0x3b/0x140 [ 1542.790985][T26447] ? asm_int80_emulation+0x1a/0x20 [ 1542.791000][T26447] ? clear_bhb_loop+0x40/0x90 [ 1542.791016][T26447] ? clear_bhb_loop+0x40/0x90 [ 1542.791035][T26447] asm_int80_emulation+0x1a/0x20 [ 1542.791050][T26447] RIP: 0023:0xf71771eb [ 1542.791065][T26447] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1542.791080][T26447] RSP: 002b:00000000f542d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1542.791097][T26447] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f542d5d0 [ 1542.791108][T26447] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1542.791118][T26447] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1542.791127][T26447] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1542.791137][T26447] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1542.791160][T26447] [ 1543.020847][ T6636] usb usb9-port1: unable to enumerate USB device [ 1543.460877][T26457] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1543.468245][T26457] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1543.484726][T26457] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1543.496333][T26457] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1543.539559][T26457] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1543.546850][T26457] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1543.569534][T26457] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1543.579210][T26457] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1543.603856][T26457] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1543.610382][T26457] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1543.759707][T26462] netlink: 'syz.2.5920': attribute type 2 has an invalid length. [ 1543.832558][T26462] : entered promiscuous mode [ 1543.838700][T26467] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1543.845269][T26467] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1543.875143][T26467] vhci_hcd vhci_hcd.0: Device attached [ 1544.031831][T26475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5924'. [ 1544.095375][ T6636] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 1544.555430][T15301] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1544.707588][T15301] usb 9-1: config 74 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.718187][T15301] usb 9-1: config 74 has 0 interfaces, different from the descriptor's value: 1 [ 1544.727552][T15301] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 1544.737010][T15301] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.992603][T15301] usb 9-1: string descriptor 0 read error: -71 [ 1545.014457][T15301] usb 9-1: USB disconnect, device number 25 [ 1545.215137][ T5613] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 1545.227867][T26495] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5930'. [ 1545.365105][ T5613] usb 6-1: device descriptor read/64, error -71 [ 1545.608181][T26503] FAULT_INJECTION: forcing a failure. [ 1545.608181][T26503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1545.622176][T26503] CPU: 1 UID: 0 PID: 26503 Comm: syz.8.5932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1545.622211][T26503] Tainted: [L]=SOFTLOCKUP [ 1545.622220][T26503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1545.622234][T26503] Call Trace: [ 1545.622243][T26503] [ 1545.622252][T26503] dump_stack_lvl+0xe8/0x150 [ 1545.622310][T26503] should_fail_ex+0x40c/0x560 [ 1545.622343][T26503] _copy_to_user+0x31/0xb0 [ 1545.622384][T26503] simple_read_from_buffer+0xe1/0x170 [ 1545.622420][T26503] proc_fail_nth_read+0x1bb/0x230 [ 1545.622455][T26503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1545.622480][T26503] ? rw_verify_area+0x24a/0x4c0 [ 1545.622505][T26503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1545.622526][T26503] vfs_read+0x213/0xa80 [ 1545.622553][T26503] ? __pfx___mutex_lock+0x10/0x10 [ 1545.622577][T26503] ? __pfx_vfs_read+0x10/0x10 [ 1545.622602][T26503] ? __fget_files+0x2a/0x420 [ 1545.622625][T26503] ? __fget_files+0x3a2/0x420 [ 1545.622645][T26503] ? __fget_files+0x2a/0x420 [ 1545.622672][T26503] ksys_read+0x150/0x270 [ 1545.622697][T26503] ? __pfx_ksys_read+0x10/0x10 [ 1545.622724][T26503] ? asm_int80_emulation+0x1a/0x20 [ 1545.622743][T26503] do_int80_emulation+0x19a/0x550 [ 1545.622767][T26503] ? trace_irq_disable+0x3b/0x140 [ 1545.622786][T26503] ? asm_int80_emulation+0x1a/0x20 [ 1545.622801][T26503] ? clear_bhb_loop+0x40/0x90 [ 1545.622817][T26503] ? clear_bhb_loop+0x40/0x90 [ 1545.622836][T26503] asm_int80_emulation+0x1a/0x20 [ 1545.622852][T26503] RIP: 0023:0xf71071eb [ 1545.622866][T26503] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1545.622883][T26503] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1545.622902][T26503] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 1545.622913][T26503] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1545.622923][T26503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1545.622932][T26503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1545.622942][T26503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1545.622964][T26503] [ 1545.850177][ T5613] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 1546.017271][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.023723][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.031062][ T5613] usb 6-1: device descriptor read/64, error -71 [ 1546.145416][ T5613] usb usb6-port1: attempt power cycle [ 1546.500593][ T5613] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 1546.527087][ T5613] usb 6-1: device descriptor read/8, error -71 [ 1546.775439][ T5613] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 1546.815820][ T5613] usb 6-1: device descriptor read/8, error -71 [ 1546.876348][T26513] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5935'. [ 1546.925599][ T5613] usb usb6-port1: unable to enumerate USB device [ 1547.009601][T26517] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1547.028519][T26517] [U] J"—E:ÀÆ" [ 1547.120243][T26523] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 1547.126841][T26523] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1547.135660][T26527] FAULT_INJECTION: forcing a failure. [ 1547.135660][T26527] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.136768][T26523] vhci_hcd vhci_hcd.0: Device attached [ 1547.161646][T26527] CPU: 0 UID: 0 PID: 26527 Comm: syz.2.5938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1547.161679][T26527] Tainted: [L]=SOFTLOCKUP [ 1547.161686][T26527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1547.161699][T26527] Call Trace: [ 1547.161707][T26527] [ 1547.161716][T26527] dump_stack_lvl+0xe8/0x150 [ 1547.161755][T26527] should_fail_ex+0x40c/0x560 [ 1547.161788][T26527] should_failslab+0xa8/0x100 [ 1547.161824][T26527] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1547.161851][T26527] ? local_lock_release+0x9c/0x160 [ 1547.161884][T26527] ? __alloc_skb+0x1d7/0x7a0 [ 1547.161912][T26527] ? __alloc_skb+0x1d7/0x7a0 [ 1547.161949][T26527] __alloc_skb+0x1d7/0x7a0 [ 1547.161984][T26527] netlink_sendmsg+0x5d4/0xb40 [ 1547.162021][T26527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.162045][T26527] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1547.162070][T26527] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1547.162088][T26527] sock_sendmsg_nosec+0x13a/0x180 [ 1547.162114][T26527] ____sys_sendmsg+0x54e/0x850 [ 1547.162150][T26527] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1547.162209][T26527] ___sys_sendmsg+0x2a5/0x360 [ 1547.162239][T26527] ? __lock_acquire+0x683/0x2cf0 [ 1547.162278][T26527] ? __pfx____sys_sendmsg+0x10/0x10 [ 1547.162310][T26527] ? get_pid_task+0x20/0x1f0 [ 1547.162339][T26527] ? get_pid_task+0x20/0x1f0 [ 1547.162368][T26527] ? get_pid_task+0x20/0x1f0 [ 1547.162429][T26527] ? __fget_files+0x2a/0x420 [ 1547.162459][T26527] ? __fget_files+0x3a2/0x420 [ 1547.162500][T26527] __sys_sendmsg+0x177/0x240 [ 1547.162537][T26527] ? __pfx___sys_sendmsg+0x10/0x10 [ 1547.162590][T26527] __do_fast_syscall_32+0x23e/0x6f0 [ 1547.162625][T26527] ? do_fast_syscall_32+0x33/0x70 [ 1547.162657][T26527] ? lockdep_hardirqs_on+0x7a/0x110 [ 1547.162687][T26527] ? asm_int80_emulation+0x1a/0x20 [ 1547.162709][T26527] ? do_int80_emulation+0x29f/0x550 [ 1547.162739][T26527] ? trace_irq_disable+0x3b/0x140 [ 1547.162771][T26527] do_fast_syscall_32+0x33/0x70 [ 1547.162803][T26527] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1547.162829][T26527] RIP: 0023:0xf6fcf0ec [ 1547.162849][T26527] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1547.162869][T26527] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1547.162893][T26527] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000ad80 [ 1547.162908][T26527] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1547.162922][T26527] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1547.162935][T26527] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1547.162948][T26527] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1547.162978][T26527] [ 1547.515914][ T5613] usb 41-1: new low-speed USB device number 8 using vhci_hcd [ 1547.961405][T26535] sg_write: data in/out 421869/4462 bytes for SCSI command 0x0-- guessing data in; [ 1547.961405][T26535] program syz.2.5942 not setting count and/or reply_len properly [ 1547.991325][T26537] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1548.003534][T26537] [U] J"—E:ÀÆ" [ 1548.177156][T26496] ALSA: mixer_oss: invalid OSS volume 'SPEA9¦KŸsË â¢+ñI2KER' [ 1548.196604][T26496] ALSA: mixer_oss: invalid OSS volume 'VOLUM0:00000000' [ 1548.211397][T26496] ALSA: mixer_oss: invalid OSS volume '6' [ 1548.225204][T26496] ALSA: mixer_oss: invalid OSS volume '010000E0' [ 1548.240380][T26496] ALSA: mixer_oss: invalid OSS volume '7' [ 1548.258682][T26547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5944'. [ 1548.311153][T26543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1548.350773][T26543] gtp3: entered promiscuous mode [ 1548.367429][T26543] gtp3: entered allmulticast mode [ 1548.385885][T26550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1548.675137][T15301] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 1548.833671][T26556] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5947'. [ 1548.849220][T15301] usb 6-1: Using ep0 maxpacket: 32 [ 1548.871496][T15301] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1548.894128][T15301] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1548.929011][T15301] usb 6-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 1548.956158][T15301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.978850][T15301] usb 6-1: Product: syz [ 1548.993933][T15301] usb 6-1: Manufacturer: syz [ 1549.012476][T15301] usb 6-1: SerialNumber: syz [ 1549.276101][T15301] ljca 6-1:1.0: probe with driver ljca failed with error -110 [ 1549.299827][T26543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5943'. [ 1549.368011][T26543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1549.488459][T26543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1549.605627][T26569] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1549.634520][T26569] [U] J"—E:ÀÆ" [ 1550.851592][T26580] vhci_hcd vhci_hcd.0: port 0 already used [ 1551.224938][T15301] usb 6-1: USB disconnect, device number 103 [ 1551.438015][T26590] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5956'. [ 1551.732593][T26594] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1551.744656][T26595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5958'. [ 1551.826278][T26596] netlink: 'syz.5.5958': attribute type 14 has an invalid length. [ 1551.859811][T26596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5958'. [ 1552.095534][T24255] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1552.137293][T26603] netlink: 'syz.5.5962': attribute type 13 has an invalid length. [ 1552.245844][ T807] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1552.260915][T24255] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1552.273813][T24255] usb 9-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1552.294384][T24255] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1552.316400][T24255] usb 9-1: config 0 descriptor?? [ 1552.338925][T24255] smsusb:smsusb_probe: board id=8, interface number 0 [ 1552.341925][T26606] bridge_slave_0: left allmulticast mode [ 1552.359339][T24255] smsusb:smsusb_probe: Device initialized with return code -19 [ 1552.367823][T26606] bridge_slave_0: left promiscuous mode [ 1552.373966][T26606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.385428][T26606] bridge_slave_1: left allmulticast mode [ 1552.391244][T26606] bridge_slave_1: left promiscuous mode [ 1552.398644][T26606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.408184][T26608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1552.423078][T26606] bond0: (slave bond_slave_0): Releasing backup interface [ 1552.433892][T26606] bond0: (slave bond_slave_1): Releasing backup interface [ 1552.447320][T26606] team0: Port device team_slave_0 removed [ 1552.457189][T26606] team0: Port device team_slave_1 removed [ 1552.463935][T26606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.477106][T26609] netlink: 'syz.2.5959': attribute type 14 has an invalid length. [ 1552.486276][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5959'. [ 1552.489457][T26606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1552.504864][T26606] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1552.522514][T26610] syzkaller0: entered promiscuous mode [ 1552.528545][T26610] syzkaller0: entered allmulticast mode [ 1552.613826][T18148] usb 9-1: USB disconnect, device number 26 [ 1552.971125][T26623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1552.980615][T18148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1553.020877][T26623] gtp0: entered promiscuous mode [ 1553.056759][T26623] gtp0: entered allmulticast mode [ 1553.083957][T26623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5966'. [ 1553.330572][T26627] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5967'. [ 1553.669938][T26631] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5968'. [ 1554.013837][T26639] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1554.046901][T26639] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5972'. [ 1554.057196][T26639] netlink: 'syz.8.5972': attribute type 14 has an invalid length. [ 1554.065685][T26639] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5972'. [ 1554.381050][T26646] trusted_key: encrypted_key: insufficient parameters specified [ 1556.641679][T26673] FAULT_INJECTION: forcing a failure. [ 1556.641679][T26673] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.657183][T26673] CPU: 0 UID: 0 PID: 26673 Comm: syz.7.5982 Tainted: G L syzkaller #0 PREEMPT(full) [ 1556.657208][T26673] Tainted: [L]=SOFTLOCKUP [ 1556.657214][T26673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1556.657224][T26673] Call Trace: [ 1556.657232][T26673] [ 1556.657240][T26673] dump_stack_lvl+0xe8/0x150 [ 1556.657269][T26673] should_fail_ex+0x40c/0x560 [ 1556.657291][T26673] should_failslab+0xa8/0x100 [ 1556.657316][T26673] __kmalloc_cache_noprof+0xa8/0x660 [ 1556.657338][T26673] ? nsim_fib_event_nb+0x185/0x11d0 [ 1556.657358][T26673] ? nsim_fib_event_nb+0x185/0x11d0 [ 1556.657380][T26673] nsim_fib_event_nb+0x185/0x11d0 [ 1556.657399][T26673] ? atomic_notifier_call_chain+0x26/0x180 [ 1556.657421][T26673] ? lock_acquire+0x106/0x350 [ 1556.657446][T26673] notifier_call_chain+0x1a5/0x3d0 [ 1556.657470][T26673] ? atomic_notifier_call_chain+0x26/0x180 [ 1556.657500][T26673] atomic_notifier_call_chain+0xda/0x180 [ 1556.657523][T26673] call_fib_notifiers+0x31/0x60 [ 1556.657549][T26673] fib6_del+0x1009/0x15f0 [ 1556.657570][T26673] ? fib6_del+0x6a1/0x15f0 [ 1556.657599][T26673] ? __pfx_fib6_del+0x10/0x10 [ 1556.657617][T26673] ? do_raw_spin_lock+0x12b/0x2f0 [ 1556.657633][T26673] ? __ip6_del_rt+0x8c/0x180 [ 1556.657659][T26673] ? __ip6_del_rt+0x8c/0x180 [ 1556.657679][T26673] __ip6_del_rt+0x97/0x180 [ 1556.657699][T26673] ip6_del_rt+0xc1/0x120 [ 1556.657722][T26673] ? __pfx_ip6_del_rt+0x10/0x10 [ 1556.657747][T26673] ? __ipv6_dev_mc_dec+0x2e9/0x320 [ 1556.657837][T26673] __ipv6_ifa_notify+0x897/0xc60 [ 1556.657863][T26673] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 1556.657880][T26673] ? work_grab_pending+0x3d1/0x930 [ 1556.657903][T26673] ? __cancel_work+0x17f/0x230 [ 1556.657925][T26673] ? __cancel_work+0x1dd/0x230 [ 1556.657948][T26673] ipv6_del_addr+0x688/0x8b0 [ 1556.657964][T26673] ? __local_bh_enable_ip+0xd0/0x130 [ 1556.657988][T26673] inet6_addr_del+0x619/0x790 [ 1556.658014][T26673] addrconf_del_ifaddr+0x121/0x180 [ 1556.658029][T26673] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 1556.658048][T26673] ? kasan_quarantine_put+0xbb/0x1f0 [ 1556.658072][T26673] inet6_ioctl+0x11c/0x2e0 [ 1556.658096][T26673] ? __pfx_inet6_ioctl+0x10/0x10 [ 1556.658120][T26673] ? tomoyo_path_number_perm+0x219/0x5f0 [ 1556.658146][T26673] ? do_vfs_ioctl+0x116f/0x1530 [ 1556.658169][T26673] sock_do_ioctl+0x101/0x320 [ 1556.658189][T26673] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1556.658218][T26673] compat_sock_ioctl+0xbb9/0xcc0 [ 1556.658239][T26673] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1556.658258][T26673] ? __fget_files+0x3a2/0x420 [ 1556.658277][T26673] ? __fget_files+0x2a/0x420 [ 1556.658299][T26673] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1556.658321][T26673] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1556.658340][T26673] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1556.658356][T26673] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1556.658380][T26673] ? __fget_files+0x3a2/0x420 [ 1556.658405][T26673] ? fput+0xa0/0xd0 [ 1556.658423][T26673] ? ksys_write+0x242/0x270 [ 1556.658455][T26673] __do_fast_syscall_32+0x23e/0x6f0 [ 1556.658483][T26673] ? do_fast_syscall_32+0x33/0x70 [ 1556.658505][T26673] ? lockdep_hardirqs_on+0x7a/0x110 [ 1556.658525][T26673] ? asm_int80_emulation+0x1a/0x20 [ 1556.658540][T26673] ? do_int80_emulation+0x29f/0x550 [ 1556.658562][T26673] ? trace_irq_disable+0x3b/0x140 [ 1556.658584][T26673] do_fast_syscall_32+0x33/0x70 [ 1556.658607][T26673] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1556.658627][T26673] RIP: 0023:0xf703f0ec [ 1556.658642][T26673] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1556.658655][T26673] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1556.658678][T26673] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008936 [ 1556.658689][T26673] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1556.658699][T26673] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1556.658726][T26673] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1556.658735][T26673] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1556.658758][T26673] [ 1557.283725][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5984'. [ 1557.332202][T26675] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1557.351876][T26679] netlink: 'syz.5.5984': attribute type 14 has an invalid length. [ 1557.360090][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5984'. [ 1557.777510][T26692] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1557.889334][T26694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5981'. [ 1557.909837][T26696] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5989'. [ 1558.037204][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5990'. [ 1558.051814][T26698] netlink: 'syz.8.5990': attribute type 25 has an invalid length. [ 1558.061197][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5990'. [ 1558.110825][T26704] netlink: 'syz.2.5992': attribute type 13 has an invalid length. [ 1558.220375][T26704] syzkaller0: entered promiscuous mode [ 1558.242528][T26704] syzkaller0: entered allmulticast mode [ 1558.255196][T18163] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 1558.311055][T26708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5994'. [ 1558.425143][T18163] usb 6-1: Using ep0 maxpacket: 16 [ 1558.433971][T18163] usb 6-1: config 128 has an invalid interface number: 52 but max is 0 [ 1558.449370][T18163] usb 6-1: config 128 has no interface number 0 [ 1558.460543][T18163] usb 6-1: config 128 interface 52 altsetting 144 has a duplicate endpoint with address 0xB, skipping [ 1558.473895][T18163] usb 6-1: config 128 interface 52 altsetting 144 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1558.486525][T18163] usb 6-1: config 128 interface 52 altsetting 144 has a duplicate endpoint with address 0xB, skipping [ 1558.498117][T18163] usb 6-1: config 128 interface 52 altsetting 144 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1558.509839][T18163] usb 6-1: config 128 interface 52 altsetting 144 endpoint 0xA has invalid maxpacket 1056, setting to 1024 [ 1558.522430][T26710] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1558.531793][T18163] usb 6-1: config 128 interface 52 altsetting 144 bulk endpoint 0xA has invalid maxpacket 1024 [ 1558.543795][T18163] usb 6-1: config 128 interface 52 altsetting 144 has an invalid descriptor for endpoint zero, skipping [ 1558.560071][T18163] usb 6-1: config 128 interface 52 altsetting 144 has a duplicate endpoint with address 0xB, skipping [ 1558.595112][T18165] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1558.609570][T18163] usb 6-1: config 128 interface 52 altsetting 144 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1558.641687][T18163] usb 6-1: config 128 interface 52 altsetting 144 has a duplicate endpoint with address 0xC, skipping [ 1558.664534][T18163] usb 6-1: config 128 interface 52 has no altsetting 0 [ 1558.699544][T18163] usb 6-1: New USB device found, idVendor=0c45, idProduct=6019, bcdDevice=a8.26 [ 1558.721192][T18163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.735275][T18165] usb 9-1: device descriptor read/64, error -71 [ 1558.743252][T18163] usb 6-1: Product: ì›·ã¯‹É—è¼æ®åª™á‹—룄ﶼ㱗긺딊禔î”ä´è‘‚쇢ᕱ화ìŠë–¿ï‘‚쪉犔縌㿳詙å¡ç¢·ë“”â±€êƒ“âŒ…ã¢»å²“îŸ [ 1558.772240][T18163] usb 6-1: Manufacturer: å¥­ì¬±î§¸ã‰æ´Šâ›œæµ‹ë«›á³“ì¦ì—’牑쨚⢿觺撠娂ꄥ뇃㯤赲倔쩋焚çžå®žéƒ¡ì­æ´–战汳î‹â˜»æ¹†ì‘—ë—©î [ 1558.809294][T18163] usb 6-1: SerialNumber: У [ 1558.830634][T26701] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1558.975341][T18165] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1559.080332][T26701] lo: Caught tx_queue_len zero misconfig [ 1559.125229][T18165] usb 9-1: device descriptor read/64, error -71 [ 1559.144144][T26716] netlink: 'syz.4.5997': attribute type 4 has an invalid length. [ 1559.153373][T26701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1559.165874][T26716] FAULT_INJECTION: forcing a failure. [ 1559.165874][T26716] name failslab, interval 1, probability 0, space 0, times 0 [ 1559.188079][T26701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1559.199389][T26716] CPU: 1 UID: 0 PID: 26716 Comm: syz.4.5997 Tainted: G L syzkaller #0 PREEMPT(full) [ 1559.199421][T26716] Tainted: [L]=SOFTLOCKUP [ 1559.199431][T26716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1559.199447][T26716] Call Trace: [ 1559.199454][T26716] [ 1559.199460][T26716] dump_stack_lvl+0xe8/0x150 [ 1559.199514][T26716] should_fail_ex+0x40c/0x560 [ 1559.199545][T26716] should_failslab+0xa8/0x100 [ 1559.199577][T26716] __kmalloc_cache_noprof+0xa8/0x660 [ 1559.199607][T26716] ? unwind_next_frame+0x8f/0x2550 [ 1559.199623][T26716] ? nsim_fib_event_nb+0x185/0x11d0 [ 1559.199649][T26716] ? nsim_fib_event_nb+0x185/0x11d0 [ 1559.199695][T26716] nsim_fib_event_nb+0x185/0x11d0 [ 1559.199722][T26716] ? atomic_notifier_call_chain+0x26/0x180 [ 1559.199760][T26716] notifier_call_chain+0x1a5/0x3d0 [ 1559.199785][T26716] ? atomic_notifier_call_chain+0x26/0x180 [ 1559.199808][T26716] atomic_notifier_call_chain+0xda/0x180 [ 1559.199854][T26716] call_fib_notifiers+0x31/0x60 [ 1559.199887][T26716] call_fib_entry_notifiers+0x158/0x200 [ 1559.200006][T26716] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 1559.200040][T26716] ? lockdep_rtnl_is_held+0x26/0x40 [ 1559.200061][T26716] ? fib_find_node+0x2b0/0x2f0 [ 1559.200086][T26716] fib_table_delete+0xa47/0xd40 [ 1559.200151][T26716] fib_magic+0x45d/0x530 [ 1559.200203][T26716] ? ktime_get+0x1f5/0x220 [ 1559.200235][T26716] ? __pfx_fib_magic+0x10/0x10 [ 1559.200277][T26716] ? irqentry_exit+0x218/0x8f0 [ 1559.200304][T26716] fib_del_ifaddr+0x28b/0x1490 [ 1559.200354][T26716] ? inetaddr_event+0xef/0x150 [ 1559.200430][T26716] ? __pfx_inetaddr_event+0x10/0x10 [ 1559.200454][T26716] ? blocking_notifier_call_chain+0x54/0x90 [ 1559.200500][T26716] fib_inetaddr_event+0xbb/0x190 [ 1559.200532][T26716] notifier_call_chain+0x1a5/0x3d0 [ 1559.200574][T26716] blocking_notifier_call_chain+0x6a/0x90 [ 1559.200599][T26716] __inet_del_ifa+0xa69/0x1040 [ 1559.200654][T26716] inetdev_event+0x629/0x15e0 [ 1559.200689][T26716] ? __pfx_inetdev_event+0x10/0x10 [ 1559.200730][T26716] notifier_call_chain+0x1a5/0x3d0 [ 1559.200763][T26716] netif_set_mtu_ext+0x5ac/0x830 [ 1559.200813][T26716] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1559.200846][T26716] ? __irq_work_queue_local+0x200/0x4f0 [ 1559.200884][T26716] ? console_unlock+0x150/0x1c0 [ 1559.200900][T26716] ? preempt_schedule_thunk+0x16/0x40 [ 1559.200920][T26716] ? validate_linkmsg+0x765/0x950 [ 1559.200960][T26716] do_setlink+0xa81/0x4670 [ 1559.200992][T26716] ? __wake_up_klogd+0xe6/0x120 [ 1559.201021][T26716] ? __pfx_vprintk_emit+0x10/0x10 [ 1559.201050][T26716] ? __pfx_do_setlink+0x10/0x10 [ 1559.201081][T26716] ? __lock_acquire+0x683/0x2cf0 [ 1559.201144][T26716] ? lockdep_hardirqs_on+0x7a/0x110 [ 1559.201173][T26716] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1559.201202][T26716] ? ___ratelimit+0x584/0x8e0 [ 1559.201238][T26716] ? __mutex_trylock_common+0x15f/0x270 [ 1559.201256][T26716] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1559.201296][T26716] ? rcu_is_watching+0x15/0xb0 [ 1559.201330][T26716] ? trace_contention_end+0x3d/0x140 [ 1559.201354][T26716] ? __mutex_lock+0x30d/0x1550 [ 1559.201392][T26716] ? rtnl_setlink+0x6a7/0xb20 [ 1559.201416][T26716] ? __pfx___mutex_lock+0x10/0x10 [ 1559.201471][T26716] ? ns_capable+0x89/0xe0 [ 1559.201503][T26716] rtnl_setlink+0x77d/0xb20 [ 1559.201537][T26716] ? __pfx_rtnl_setlink+0x10/0x10 [ 1559.201561][T26716] ? __lock_acquire+0x683/0x2cf0 [ 1559.201602][T26716] ? ktime_get+0x1f5/0x220 [ 1559.201637][T26716] ? lapic_next_event+0x11/0x20 [ 1559.201655][T26716] ? clockevents_program_event+0x491/0x630 [ 1559.201753][T26716] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1559.201801][T26716] ? __pfx_rtnl_setlink+0x10/0x10 [ 1559.201829][T26716] rtnetlink_rcv_msg+0x802/0xc00 [ 1559.201858][T26716] ? netlink_sendmsg+0x5d4/0xb40 [ 1559.201875][T26716] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1559.201912][T26716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1559.201944][T26716] ? __lock_acquire+0x683/0x2cf0 [ 1559.201991][T26716] netlink_rcv_skb+0x226/0x4a0 [ 1559.202035][T26716] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1559.202068][T26716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1559.202114][T26716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1559.202149][T26716] ? netlink_deliver_tap+0x2e/0x1b0 [ 1559.202177][T26716] netlink_unicast+0x7bb/0x940 [ 1559.202231][T26716] netlink_sendmsg+0x813/0xb40 [ 1559.202251][T26716] ? aa_file_perm+0x18b/0x15f0 [ 1559.202283][T26716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.202309][T26716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1559.202328][T26716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1559.202342][T26716] sock_sendmsg_nosec+0x13a/0x180 [ 1559.202385][T26716] sock_write_iter+0x2de/0x3e0 [ 1559.202411][T26716] ? __pfx_sock_write_iter+0x10/0x10 [ 1559.202442][T26716] ? kstrtoull+0x12f/0x1d0 [ 1559.202474][T26716] do_iter_readv_writev+0x612/0x8c0 [ 1559.202493][T26716] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1559.202534][T26716] ? bpf_lsm_file_permission+0x9/0x20 [ 1559.202559][T26716] ? security_file_permission+0x75/0x260 [ 1559.202589][T26716] ? rw_verify_area+0x203/0x4c0 [ 1559.202626][T26716] vfs_writev+0x343/0x990 [ 1559.202657][T26716] ? __pfx_vfs_writev+0x10/0x10 [ 1559.202711][T26716] ? __fget_files+0x2a/0x420 [ 1559.202744][T26716] ? __fget_files+0x3a2/0x420 [ 1559.202775][T26716] ? __fget_files+0x2a/0x420 [ 1559.202802][T26716] do_writev+0x154/0x2e0 [ 1559.202824][T26716] ? __pfx_do_writev+0x10/0x10 [ 1559.202875][T26716] __do_fast_syscall_32+0x23e/0x6f0 [ 1559.202907][T26716] ? do_fast_syscall_32+0x33/0x70 [ 1559.202939][T26716] ? lockdep_hardirqs_on+0x7a/0x110 [ 1559.202960][T26716] ? asm_int80_emulation+0x1a/0x20 [ 1559.202975][T26716] ? do_int80_emulation+0x29f/0x550 [ 1559.203019][T26716] ? trace_irq_disable+0x3b/0x140 [ 1559.203051][T26716] do_fast_syscall_32+0x33/0x70 [ 1559.203082][T26716] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1559.203113][T26716] RIP: 0023:0xf6fef0ec [ 1559.203129][T26716] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1559.203160][T26716] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1559.203185][T26716] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800003c0 [ 1559.203199][T26716] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1559.203211][T26716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1559.203223][T26716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1559.203238][T26716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1559.203266][T26716] [ 1559.237272][T18165] usb usb9-port1: attempt power cycle [ 1559.933589][T18163] gspca_main: sonixb-2.14.0 probing 0c45:6019 [ 1559.945211][T18163] sonixb 6-1:128.52: Error reading register 00: -71 [ 1559.973367][T18163] usb 6-1: USB disconnect, device number 104 [ 1560.171350][T26726] FAULT_INJECTION: forcing a failure. [ 1560.171350][T26726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1560.185392][T26726] CPU: 1 UID: 0 PID: 26726 Comm: syz.4.6000 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.185428][T26726] Tainted: [L]=SOFTLOCKUP [ 1560.185437][T26726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1560.185451][T26726] Call Trace: [ 1560.185461][T26726] [ 1560.185471][T26726] dump_stack_lvl+0xe8/0x150 [ 1560.185510][T26726] should_fail_ex+0x40c/0x560 [ 1560.185541][T26726] _copy_from_user+0x2d/0xb0 [ 1560.185574][T26726] kstrtouint_from_user+0xd6/0x180 [ 1560.185605][T26726] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1560.185650][T26726] proc_fail_nth_write+0x8e/0x210 [ 1560.185681][T26726] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1560.185720][T26726] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1560.185748][T26726] vfs_write+0x296/0xba0 [ 1560.185790][T26726] ? __pfx_vfs_write+0x10/0x10 [ 1560.185823][T26726] ? __fget_files+0x2a/0x420 [ 1560.185858][T26726] ? __fget_files+0x3a2/0x420 [ 1560.185885][T26726] ? __fget_files+0x2a/0x420 [ 1560.185924][T26726] ksys_write+0x150/0x270 [ 1560.185961][T26726] ? __pfx_ksys_write+0x10/0x10 [ 1560.186003][T26726] ? asm_int80_emulation+0x1a/0x20 [ 1560.186031][T26726] do_int80_emulation+0x19a/0x550 [ 1560.186065][T26726] ? asm_int80_emulation+0x1a/0x20 [ 1560.186085][T26726] ? clear_bhb_loop+0x40/0x90 [ 1560.186115][T26726] ? clear_bhb_loop+0x40/0x90 [ 1560.186143][T26726] asm_int80_emulation+0x1a/0x20 [ 1560.186164][T26726] RIP: 0023:0xf71271eb [ 1560.186184][T26726] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1560.186205][T26726] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1560.186228][T26726] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53dd5d0 [ 1560.186244][T26726] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.186257][T26726] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.186271][T26726] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1560.186283][T26726] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.186316][T26726] [ 1560.205510][T18165] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1560.456952][T18165] usb 9-1: device descriptor read/8, error -71 [ 1560.489199][T26728] fuse: Bad value for 'rootmode' [ 1560.497784][T26728] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6001'. [ 1560.695957][T18165] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1560.716402][T26734] FAULT_INJECTION: forcing a failure. [ 1560.716402][T26734] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.724702][T26730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1560.738432][T26734] CPU: 1 UID: 0 PID: 26734 Comm: syz.5.6004 Tainted: G L syzkaller #0 PREEMPT(full) [ 1560.738469][T26734] Tainted: [L]=SOFTLOCKUP [ 1560.738478][T26734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1560.738492][T26734] Call Trace: [ 1560.738501][T26734] [ 1560.738511][T26734] dump_stack_lvl+0xe8/0x150 [ 1560.738662][T26734] should_fail_ex+0x40c/0x560 [ 1560.738762][T26734] should_failslab+0xa8/0x100 [ 1560.738855][T26734] __kmalloc_cache_noprof+0xa8/0x660 [ 1560.738932][T26734] ? nfnetlink_rcv+0x1021/0x28c0 [ 1560.739016][T26734] ? nfnetlink_rcv+0x1021/0x28c0 [ 1560.739100][T26734] nfnetlink_rcv+0x1021/0x28c0 [ 1560.739267][T26734] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1560.739385][T26734] ? ref_tracker_free+0x689/0x830 [ 1560.739513][T26734] ? skb_clone+0x246/0x3a0 [ 1560.739594][T26734] ? __netlink_deliver_tap+0x811/0x860 [ 1560.739712][T26734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1560.739797][T26734] ? netlink_deliver_tap+0x2e/0x1b0 [ 1560.739902][T26734] netlink_unicast+0x7bb/0x940 [ 1560.740015][T26734] netlink_sendmsg+0x813/0xb40 [ 1560.740122][T26734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.740196][T26734] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1560.740266][T26734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1560.740326][T26734] sock_sendmsg_nosec+0x13a/0x180 [ 1560.740402][T26734] ____sys_sendmsg+0x54e/0x850 [ 1560.740498][T26734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1560.740632][T26734] ___sys_sendmsg+0x2a5/0x360 [ 1560.740715][T26734] ? __lock_acquire+0x683/0x2cf0 [ 1560.740810][T26734] ? __pfx____sys_sendmsg+0x10/0x10 [ 1560.740896][T26734] ? get_pid_task+0x20/0x1f0 [ 1560.740987][T26734] ? get_pid_task+0x20/0x1f0 [ 1560.741062][T26734] ? get_pid_task+0x20/0x1f0 [ 1560.741201][T26734] ? __fget_files+0x2a/0x420 [ 1560.741273][T26734] ? __fget_files+0x3a2/0x420 [ 1560.741375][T26734] __sys_sendmsg+0x177/0x240 [ 1560.741496][T26734] ? __pfx___sys_sendmsg+0x10/0x10 [ 1560.741635][T26734] __do_fast_syscall_32+0x23e/0x6f0 [ 1560.741729][T26734] ? do_fast_syscall_32+0x33/0x70 [ 1560.741815][T26734] ? lockdep_hardirqs_on+0x7a/0x110 [ 1560.741890][T26734] ? asm_int80_emulation+0x1a/0x20 [ 1560.741952][T26734] ? do_int80_emulation+0x29f/0x550 [ 1560.742028][T26734] ? trace_irq_disable+0x3b/0x140 [ 1560.742105][T26734] do_fast_syscall_32+0x33/0x70 [ 1560.742187][T26734] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1560.742253][T26734] RIP: 0023:0xf70af0ec [ 1560.742308][T26734] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1560.742359][T26734] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1560.742423][T26734] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1560.742458][T26734] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1560.742498][T26734] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1560.742530][T26734] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1560.742566][T26734] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1560.742661][T26734] [ 1560.772767][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1560.772819][ T30] audit: type=1326 audit(1783718180.096:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26731 comm="syz.4.6003" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x0 [ 1560.784411][T18165] usb 9-1: device descriptor read/8, error -71 [ 1561.066392][T18165] usb usb9-port1: unable to enumerate USB device [ 1561.165482][T26739] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6005'. [ 1561.221189][T26741] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6006'. [ 1561.365519][T26743] FAULT_INJECTION: forcing a failure. [ 1561.365519][T26743] name failslab, interval 1, probability 0, space 0, times 0 [ 1561.402490][T26743] CPU: 0 UID: 0 PID: 26743 Comm: syz.2.6007 Tainted: G L syzkaller #0 PREEMPT(full) [ 1561.402526][T26743] Tainted: [L]=SOFTLOCKUP [ 1561.402535][T26743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1561.402548][T26743] Call Trace: [ 1561.402557][T26743] [ 1561.402567][T26743] dump_stack_lvl+0xe8/0x150 [ 1561.402606][T26743] should_fail_ex+0x40c/0x560 [ 1561.402637][T26743] should_failslab+0xa8/0x100 [ 1561.402673][T26743] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1561.402700][T26743] ? local_lock_release+0x9c/0x160 [ 1561.402731][T26743] ? __alloc_skb+0x1d7/0x7a0 [ 1561.402758][T26743] ? __alloc_skb+0x1d7/0x7a0 [ 1561.402792][T26743] __alloc_skb+0x1d7/0x7a0 [ 1561.402826][T26743] netlink_ack+0x136/0xb30 [ 1561.402866][T26743] ? __kmalloc_cache_noprof+0x150/0x660 [ 1561.402894][T26743] ? nfnetlink_rcv+0x1021/0x28c0 [ 1561.402933][T26743] nfnetlink_rcv+0x260c/0x28c0 [ 1561.403011][T26743] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1561.403086][T26743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1561.403131][T26743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1561.403163][T26743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1561.403203][T26743] netlink_unicast+0x7bb/0x940 [ 1561.403246][T26743] netlink_sendmsg+0x813/0xb40 [ 1561.403278][T26743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.403304][T26743] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1561.403332][T26743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1561.403353][T26743] sock_sendmsg_nosec+0x13a/0x180 [ 1561.403382][T26743] ____sys_sendmsg+0x54e/0x850 [ 1561.403421][T26743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1561.403470][T26743] ___sys_sendmsg+0x2a5/0x360 [ 1561.403505][T26743] ? __lock_acquire+0x683/0x2cf0 [ 1561.403540][T26743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.403572][T26743] ? get_pid_task+0x20/0x1f0 [ 1561.403602][T26743] ? get_pid_task+0x20/0x1f0 [ 1561.403630][T26743] ? get_pid_task+0x20/0x1f0 [ 1561.403688][T26743] ? __fget_files+0x2a/0x420 [ 1561.403717][T26743] ? __fget_files+0x3a2/0x420 [ 1561.403755][T26743] __sys_sendmsg+0x177/0x240 [ 1561.403791][T26743] ? __pfx___sys_sendmsg+0x10/0x10 [ 1561.403844][T26743] __do_fast_syscall_32+0x23e/0x6f0 [ 1561.403878][T26743] ? do_fast_syscall_32+0x33/0x70 [ 1561.403909][T26743] ? lockdep_hardirqs_on+0x7a/0x110 [ 1561.403937][T26743] ? asm_int80_emulation+0x1a/0x20 [ 1561.403959][T26743] ? do_int80_emulation+0x29f/0x550 [ 1561.403995][T26743] do_fast_syscall_32+0x33/0x70 [ 1561.404036][T26743] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1561.404064][T26743] RIP: 0023:0xf6fcf0ec [ 1561.404084][T26743] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1561.404102][T26743] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1561.404122][T26743] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1561.404135][T26743] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1561.404146][T26743] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1561.404156][T26743] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1561.404167][T26743] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1561.404192][T26743] [ 1561.742210][T26745] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1561.800199][T26745] netlink: 'syz.7.6008': attribute type 14 has an invalid length. [ 1563.158414][T26783] __nla_validate_parse: 5 callbacks suppressed [ 1563.158431][T26783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6020'. [ 1563.751489][T26797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6025'. [ 1563.775999][T26797] lo: Caught tx_queue_len zero misconfig [ 1563.904380][T26802] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1563.916344][T26802] [U] J"—e:ÀÆ" [ 1564.126972][T26811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6029'. [ 1565.221400][T18165] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1565.383675][T26838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6037'. [ 1565.385304][T18165] usb 9-1: Using ep0 maxpacket: 16 [ 1565.407494][T26828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6034'. [ 1565.431772][T18165] usb 9-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1565.441953][T18165] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.451856][T18165] usb 9-1: Product: syz [ 1565.456567][T18165] usb 9-1: Manufacturer: syz [ 1565.461262][T18165] usb 9-1: SerialNumber: syz [ 1565.473828][T18165] usb 9-1: config 0 descriptor?? [ 1565.488495][T18165] ums-onetouch 9-1:0.0: USB Mass Storage device detected [ 1565.708216][T26831] kvm: kvm [26830]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0x200000000400 [ 1565.729035][T18148] usb 9-1: USB disconnect, device number 31 [ 1566.054567][T26846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6039'. [ 1566.088647][T26846] bond2: entered allmulticast mode [ 1566.355196][T24255] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 1566.486473][T24255] usb 6-1: device descriptor read/64, error -71 [ 1566.687930][T26862] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1566.702464][T26862] [U] J"—e:ÀÆ" [ 1566.745165][T24255] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 1566.886644][T24255] usb 6-1: device descriptor read/64, error -71 [ 1567.007085][T24255] usb usb6-port1: attempt power cycle [ 1567.355072][T24255] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1567.387034][T24255] usb 6-1: device descriptor read/8, error -71 [ 1567.657999][T24255] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1567.711393][T24255] usb 6-1: device descriptor read/8, error -71 [ 1567.825665][T24255] usb usb6-port1: unable to enumerate USB device [ 1568.782933][T26883] FAULT_INJECTION: forcing a failure. [ 1568.782933][T26883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.798531][T26883] CPU: 0 UID: 0 PID: 26883 Comm: syz.7.6051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1568.798565][T26883] Tainted: [L]=SOFTLOCKUP [ 1568.798573][T26883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1568.798587][T26883] Call Trace: [ 1568.798596][T26883] [ 1568.798605][T26883] dump_stack_lvl+0xe8/0x150 [ 1568.798641][T26883] should_fail_ex+0x40c/0x560 [ 1568.798672][T26883] _copy_from_user+0x2d/0xb0 [ 1568.798704][T26883] snd_seq_oss_write+0x6e2/0x950 [ 1568.798839][T26883] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 1568.798871][T26883] ? apparmor_file_permission+0x1f4/0x300 [ 1568.798903][T26883] ? security_file_permission+0x75/0x260 [ 1568.798937][T26883] odev_write+0x5a/0x80 [ 1568.798959][T26883] vfs_writev+0x4bb/0x990 [ 1568.798986][T26883] ? __pfx_odev_write+0x10/0x10 [ 1568.799012][T26883] ? __pfx_vfs_writev+0x10/0x10 [ 1568.799052][T26883] ? __fget_files+0x2a/0x420 [ 1568.799083][T26883] ? __fget_files+0x3a2/0x420 [ 1568.799110][T26883] ? __fget_files+0x2a/0x420 [ 1568.799146][T26883] do_writev+0x154/0x2e0 [ 1568.799175][T26883] ? __pfx_do_writev+0x10/0x10 [ 1568.799210][T26883] __do_fast_syscall_32+0x23e/0x6f0 [ 1568.799243][T26883] ? do_fast_syscall_32+0x33/0x70 [ 1568.799273][T26883] ? lockdep_hardirqs_on+0x7a/0x110 [ 1568.799301][T26883] ? asm_int80_emulation+0x1a/0x20 [ 1568.799329][T26883] ? do_int80_emulation+0x29f/0x550 [ 1568.799359][T26883] ? trace_irq_disable+0x3b/0x140 [ 1568.799390][T26883] do_fast_syscall_32+0x33/0x70 [ 1568.799421][T26883] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1568.799447][T26883] RIP: 0023:0xf703f0ec [ 1568.799468][T26883] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1568.799488][T26883] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 1568.799511][T26883] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000840 [ 1568.799526][T26883] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 1568.799538][T26883] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1568.799551][T26883] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1568.799565][T26883] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1568.799596][T26883] [ 1569.144716][T26888] FAULT_INJECTION: forcing a failure. [ 1569.144716][T26888] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.158246][T26888] CPU: 0 UID: 0 PID: 26888 Comm: syz.7.6052 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.158287][T26888] Tainted: [L]=SOFTLOCKUP [ 1569.158297][T26888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1569.158310][T26888] Call Trace: [ 1569.158318][T26888] [ 1569.158328][T26888] dump_stack_lvl+0xe8/0x150 [ 1569.158366][T26888] should_fail_ex+0x40c/0x560 [ 1569.158399][T26888] should_failslab+0xa8/0x100 [ 1569.158433][T26888] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 1569.158464][T26888] ? ip6_setup_cork+0x811/0xf60 [ 1569.158488][T26888] ? ip6_setup_cork+0x811/0xf60 [ 1569.158513][T26888] ? ip6_setup_cork+0x613/0xf60 [ 1569.158542][T26888] kmemdup_noprof+0x2b/0x70 [ 1569.158575][T26888] ip6_setup_cork+0x811/0xf60 [ 1569.158602][T26888] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1569.158633][T26888] ip6_append_data+0x175/0x270 [ 1569.158659][T26888] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1569.158694][T26888] l2tp_ip6_sendmsg+0x139f/0x18e0 [ 1569.158826][T26888] ? __pfx_l2tp_ip6_sendmsg+0x10/0x10 [ 1569.158887][T26888] ? sock_rps_record_flow+0x19/0x350 [ 1569.158919][T26888] ? inet_sendmsg+0x298/0x320 [ 1569.158949][T26888] ? __pfx_inet_sendmsg+0x10/0x10 [ 1569.158977][T26888] sock_sendmsg_nosec+0x10e/0x180 [ 1569.159011][T26888] ____sys_sendmsg+0x54e/0x850 [ 1569.159051][T26888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1569.159101][T26888] ___sys_sendmsg+0x2a5/0x360 [ 1569.159132][T26888] ? __lock_acquire+0x683/0x2cf0 [ 1569.159166][T26888] ? __pfx____sys_sendmsg+0x10/0x10 [ 1569.159198][T26888] ? get_pid_task+0x20/0x1f0 [ 1569.159228][T26888] ? get_pid_task+0x20/0x1f0 [ 1569.159255][T26888] ? get_pid_task+0x20/0x1f0 [ 1569.159324][T26888] ? __fget_files+0x2a/0x420 [ 1569.159352][T26888] ? __fget_files+0x3a2/0x420 [ 1569.159391][T26888] __sys_sendmsg+0x177/0x240 [ 1569.159426][T26888] ? __pfx___sys_sendmsg+0x10/0x10 [ 1569.159480][T26888] __do_fast_syscall_32+0x23e/0x6f0 [ 1569.159513][T26888] ? do_fast_syscall_32+0x33/0x70 [ 1569.159543][T26888] ? lockdep_hardirqs_on+0x7a/0x110 [ 1569.159571][T26888] ? asm_int80_emulation+0x1a/0x20 [ 1569.159593][T26888] ? do_int80_emulation+0x29f/0x550 [ 1569.159625][T26888] ? trace_irq_disable+0x3b/0x140 [ 1569.159655][T26888] do_fast_syscall_32+0x33/0x70 [ 1569.159688][T26888] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1569.159715][T26888] RIP: 0023:0xf703f0ec [ 1569.159736][T26888] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1569.159755][T26888] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1569.159779][T26888] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001180 [ 1569.159795][T26888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1569.159809][T26888] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1569.159822][T26888] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1569.159836][T26888] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.159869][T26888] [ 1569.480652][T26890] FAULT_INJECTION: forcing a failure. [ 1569.480652][T26890] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.539460][T26890] CPU: 1 UID: 0 PID: 26890 Comm: syz.5.6054 Tainted: G L syzkaller #0 PREEMPT(full) [ 1569.539486][T26890] Tainted: [L]=SOFTLOCKUP [ 1569.539493][T26890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1569.539503][T26890] Call Trace: [ 1569.539509][T26890] [ 1569.539516][T26890] dump_stack_lvl+0xe8/0x150 [ 1569.539546][T26890] should_fail_ex+0x40c/0x560 [ 1569.539569][T26890] should_failslab+0xa8/0x100 [ 1569.539595][T26890] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1569.539616][T26890] ? alloc_inode+0x6a/0x1b0 [ 1569.539634][T26890] ? alloc_inode+0x6a/0x1b0 [ 1569.539656][T26890] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1569.539674][T26890] alloc_inode+0x6a/0x1b0 [ 1569.539694][T26890] new_inode+0x1f/0x170 [ 1569.539717][T26890] __debugfs_create_file+0xb8/0x400 [ 1569.539746][T26890] debugfs_create_file_full+0x3f/0x60 [ 1569.539809][T26890] ref_tracker_dir_debugfs+0x197/0x360 [ 1569.539845][T26890] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1569.539897][T26890] ? __kvmalloc_node_noprof+0x55a/0x860 [ 1569.539930][T26890] ? __kvmalloc_node_noprof+0x35c/0x860 [ 1569.539967][T26890] ? __raw_spin_lock_init+0x45/0x100 [ 1569.539988][T26890] alloc_netdev_mqs+0x275/0x12b0 [ 1569.540005][T26890] ? __pfx_snprintf+0x10/0x10 [ 1569.540045][T26890] ? __pfx_erspan_setup+0x10/0x10 [ 1569.540082][T26890] rtnl_create_link+0x321/0xd70 [ 1569.540106][T26890] rtnl_newlink_create+0x25f/0xb00 [ 1569.540138][T26890] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1569.540165][T26890] ? __pfx___mutex_lock+0x10/0x10 [ 1569.540195][T26890] ? ns_capable+0x89/0xe0 [ 1569.540232][T26890] rtnl_newlink+0x167f/0x1bd0 [ 1569.540266][T26890] ? __pfx_rtnl_newlink+0x10/0x10 [ 1569.540286][T26890] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1569.540310][T26890] ? do_fast_syscall_32+0x33/0x70 [ 1569.540337][T26890] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1569.540383][T26890] ? kasan_quarantine_put+0xbb/0x1f0 [ 1569.540403][T26890] ? lockdep_hardirqs_on+0x7a/0x110 [ 1569.540428][T26890] ? nlmon_xmit+0xb0/0x100 [ 1569.540450][T26890] ? kmem_cache_free+0x182/0x650 [ 1569.540479][T26890] ? __lock_acquire+0x683/0x2cf0 [ 1569.540504][T26890] ? __dev_queue_xmit+0x29b/0x37f0 [ 1569.540522][T26890] ? __local_bh_enable_ip+0xd0/0x130 [ 1569.540541][T26890] ? lockdep_hardirqs_on+0x7a/0x110 [ 1569.540562][T26890] ? __dev_queue_xmit+0x29b/0x37f0 [ 1569.540577][T26890] ? __local_bh_enable_ip+0xd0/0x130 [ 1569.540593][T26890] ? __dev_queue_xmit+0x29b/0x37f0 [ 1569.540614][T26890] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1569.540648][T26890] ? __pfx_rtnl_newlink+0x10/0x10 [ 1569.540669][T26890] rtnetlink_rcv_msg+0x802/0xc00 [ 1569.540693][T26890] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1569.540715][T26890] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1569.540735][T26890] ? ref_tracker_free+0x689/0x830 [ 1569.540757][T26890] ? __pfx_ref_tracker_free+0x10/0x10 [ 1569.540784][T26890] netlink_rcv_skb+0x226/0x4a0 [ 1569.540810][T26890] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1569.540838][T26890] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1569.540872][T26890] ? netlink_deliver_tap+0x2e/0x1b0 [ 1569.540897][T26890] ? netlink_deliver_tap+0x2e/0x1b0 [ 1569.540925][T26890] netlink_unicast+0x7bb/0x940 [ 1569.540956][T26890] netlink_sendmsg+0x813/0xb40 [ 1569.540979][T26890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.541000][T26890] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1569.541042][T26890] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1569.541069][T26890] sock_sendmsg_nosec+0x13a/0x180 [ 1569.541090][T26890] ____sys_sendmsg+0x54e/0x850 [ 1569.541119][T26890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1569.541156][T26890] ___sys_sendmsg+0x2a5/0x360 [ 1569.541179][T26890] ? __lock_acquire+0x683/0x2cf0 [ 1569.541203][T26890] ? __pfx____sys_sendmsg+0x10/0x10 [ 1569.541227][T26890] ? get_pid_task+0x20/0x1f0 [ 1569.541249][T26890] ? get_pid_task+0x20/0x1f0 [ 1569.541269][T26890] ? get_pid_task+0x20/0x1f0 [ 1569.541313][T26890] ? __fget_files+0x2a/0x420 [ 1569.541335][T26890] ? __fget_files+0x3a2/0x420 [ 1569.541363][T26890] __sys_sendmsg+0x177/0x240 [ 1569.541389][T26890] ? __pfx___sys_sendmsg+0x10/0x10 [ 1569.541427][T26890] __do_fast_syscall_32+0x23e/0x6f0 [ 1569.541451][T26890] ? do_fast_syscall_32+0x33/0x70 [ 1569.541473][T26890] ? lockdep_hardirqs_on+0x7a/0x110 [ 1569.541494][T26890] ? asm_int80_emulation+0x1a/0x20 [ 1569.541509][T26890] ? do_int80_emulation+0x29f/0x550 [ 1569.541532][T26890] ? trace_irq_disable+0x3b/0x140 [ 1569.541554][T26890] do_fast_syscall_32+0x33/0x70 [ 1569.541578][T26890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1569.541597][T26890] RIP: 0023:0xf70af0ec [ 1569.541613][T26890] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1569.541627][T26890] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1569.541643][T26890] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 1569.541654][T26890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1569.541663][T26890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1569.541672][T26890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1569.541682][T26890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1569.541704][T26890] [ 1570.047169][T26890] debugfs: out of free dentries, can not create file 'netdev@ffff88807d280700' [ 1570.191334][T26893] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1570.198072][T26893] [U] J"—e:ÀÆ" [ 1570.535511][T18165] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 1570.614252][T26905] kvm: emulating exchange as write [ 1570.685141][T18165] usb 6-1: Using ep0 maxpacket: 32 [ 1570.699416][T18165] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1570.709513][T18165] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1570.734138][T18165] usb 6-1: config 0 descriptor?? [ 1570.956455][T18165] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1571.179026][T26910] vcan0: tx drop: invalid da for name 0x00000000000000c7 [ 1571.322027][T26914] netlink: 'syz.7.6061': attribute type 3 has an invalid length. [ 1571.825184][T18163] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1571.859540][T26932] vhci_hcd vhci_hcd.0: port 0 already used [ 1571.985169][T18163] usb 9-1: Using ep0 maxpacket: 32 [ 1571.995296][T18163] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1572.008728][T18163] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1572.022677][T18163] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1572.040583][T18163] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1572.051140][T18163] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.062243][T18163] usb 9-1: config 0 descriptor?? [ 1572.070011][T26922] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1572.093485][T18163] hub 9-1:0.0: USB hub found [ 1572.287707][T18163] hub 9-1:0.0: 2 ports detected [ 1572.704619][T18163] hub 9-1:0.0: set hub depth failed [ 1572.730095][T18163] usb 9-1: USB disconnect, device number 32 [ 1572.872687][T26950] fuse: Bad value for 'fd' [ 1573.070018][T26956] netlink: 'syz.5.6076': attribute type 12 has an invalid length. [ 1573.240054][T26962] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6079'. [ 1573.476389][T26975] netlink: 'syz.8.6083': attribute type 12 has an invalid length. [ 1573.480284][T26973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1573.484781][T26975] FAULT_INJECTION: forcing a failure. [ 1573.484781][T26975] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.507712][T26975] CPU: 1 UID: 0 PID: 26975 Comm: syz.8.6083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1573.507748][T26975] Tainted: [L]=SOFTLOCKUP [ 1573.507757][T26975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1573.507771][T26975] Call Trace: [ 1573.507781][T26975] [ 1573.507790][T26975] dump_stack_lvl+0xe8/0x150 [ 1573.507830][T26975] should_fail_ex+0x40c/0x560 [ 1573.507862][T26975] should_failslab+0xa8/0x100 [ 1573.507898][T26975] __kmalloc_noprof+0xfe/0x720 [ 1573.507938][T26975] ? rfkill_alloc+0xa8/0x300 [ 1573.508051][T26975] ? rfkill_alloc+0xa8/0x300 [ 1573.508088][T26975] rfkill_alloc+0xa8/0x300 [ 1573.508125][T26975] wiphy_new_nm+0x11a3/0x19f0 [ 1573.508209][T26975] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1573.508241][T26975] ieee80211_alloc_hw_nm+0x3f3/0x1ec0 [ 1573.508273][T26975] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1573.508309][T26975] mac80211_hwsim_new_radio+0x1ea/0x5680 [ 1573.508352][T26975] ? __pfx___nla_validate_parse+0x10/0x10 [ 1573.508399][T26975] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1573.508431][T26975] ? trace_kmalloc+0x2a/0xf0 [ 1573.508466][T26975] hwsim_new_radio_nl+0xd8b/0xf90 [ 1573.508516][T26975] genl_family_rcv_msg_doit+0x233/0x340 [ 1573.508552][T26975] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1573.508594][T26975] ? bpf_lsm_capable+0x9/0x20 [ 1573.508621][T26975] ? security_capable+0x7e/0x2c0 [ 1573.508662][T26975] genl_rcv_msg+0x614/0x7a0 [ 1573.508696][T26975] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1573.508721][T26975] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1573.508752][T26975] ? __pfx_ref_tracker_free+0x10/0x10 [ 1573.508791][T26975] netlink_rcv_skb+0x226/0x4a0 [ 1573.508826][T26975] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1573.508853][T26975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1573.508893][T26975] ? down_read+0x2be/0x330 [ 1573.508931][T26975] genl_rcv+0x28/0x40 [ 1573.508950][T26975] netlink_unicast+0x7bb/0x940 [ 1573.508985][T26975] netlink_sendmsg+0x813/0xb40 [ 1573.509013][T26975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.509038][T26975] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1573.509061][T26975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1573.509077][T26975] sock_sendmsg_nosec+0x13a/0x180 [ 1573.509102][T26975] ____sys_sendmsg+0x54e/0x850 [ 1573.509134][T26975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1573.509174][T26975] ___sys_sendmsg+0x2a5/0x360 [ 1573.509201][T26975] ? __lock_acquire+0x683/0x2cf0 [ 1573.509229][T26975] ? __pfx____sys_sendmsg+0x10/0x10 [ 1573.509255][T26975] ? get_pid_task+0x20/0x1f0 [ 1573.509280][T26975] ? get_pid_task+0x20/0x1f0 [ 1573.509302][T26975] ? get_pid_task+0x20/0x1f0 [ 1573.509351][T26975] ? __fget_files+0x2a/0x420 [ 1573.509374][T26975] ? __fget_files+0x3a2/0x420 [ 1573.509406][T26975] __sys_sendmsg+0x177/0x240 [ 1573.509437][T26975] ? __pfx___sys_sendmsg+0x10/0x10 [ 1573.509480][T26975] __do_fast_syscall_32+0x23e/0x6f0 [ 1573.509507][T26975] ? do_fast_syscall_32+0x33/0x70 [ 1573.509532][T26975] ? lockdep_hardirqs_on+0x7a/0x110 [ 1573.509556][T26975] ? asm_int80_emulation+0x1a/0x20 [ 1573.509573][T26975] ? do_int80_emulation+0x29f/0x550 [ 1573.509599][T26975] ? trace_irq_disable+0x3b/0x140 [ 1573.509624][T26975] do_fast_syscall_32+0x33/0x70 [ 1573.509651][T26975] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1573.509673][T26975] RIP: 0023:0xf7f030ec [ 1573.509691][T26975] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1573.509707][T26975] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1573.509726][T26975] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1573.509739][T26975] RDX: 0000000000080000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1573.509750][T26975] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1573.509761][T26975] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1573.509771][T26975] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1573.509796][T26975] [ 1574.048625][T26984] FAULT_INJECTION: forcing a failure. [ 1574.048625][T26984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.062617][T26984] CPU: 0 UID: 0 PID: 26984 Comm: syz.8.6087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.062644][T26984] Tainted: [L]=SOFTLOCKUP [ 1574.062650][T26984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1574.062660][T26984] Call Trace: [ 1574.062666][T26984] [ 1574.062673][T26984] dump_stack_lvl+0xe8/0x150 [ 1574.062703][T26984] should_fail_ex+0x40c/0x560 [ 1574.062725][T26984] _copy_from_user+0x2d/0xb0 [ 1574.062749][T26984] kstrtouint_from_user+0xd6/0x180 [ 1574.062771][T26984] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1574.062803][T26984] proc_fail_nth_write+0x8e/0x210 [ 1574.062825][T26984] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.062853][T26984] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.062874][T26984] vfs_write+0x296/0xba0 [ 1574.062905][T26984] ? __pfx_vfs_write+0x10/0x10 [ 1574.062931][T26984] ? __fget_files+0x2a/0x420 [ 1574.062955][T26984] ? __fget_files+0x3a2/0x420 [ 1574.062974][T26984] ? __fget_files+0x2a/0x420 [ 1574.063005][T26984] ksys_write+0x150/0x270 [ 1574.063031][T26984] ? __pfx_ksys_write+0x10/0x10 [ 1574.063058][T26984] ? asm_int80_emulation+0x1a/0x20 [ 1574.063078][T26984] do_int80_emulation+0x19a/0x550 [ 1574.063102][T26984] ? trace_irq_disable+0x3b/0x140 [ 1574.063121][T26984] ? asm_int80_emulation+0x1a/0x20 [ 1574.063136][T26984] ? clear_bhb_loop+0x40/0x90 [ 1574.063152][T26984] ? clear_bhb_loop+0x40/0x90 [ 1574.063171][T26984] asm_int80_emulation+0x1a/0x20 [ 1574.063187][T26984] RIP: 0023:0xf71071eb [ 1574.063202][T26984] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1574.063215][T26984] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1574.063232][T26984] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53c65d0 [ 1574.063243][T26984] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1574.063253][T26984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.063262][T26984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1574.063272][T26984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1574.063294][T26984] [ 1574.886444][T26990] FAULT_INJECTION: forcing a failure. [ 1574.886444][T26990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.900599][T26990] CPU: 1 UID: 0 PID: 26990 Comm: syz.2.6089 Tainted: G L syzkaller #0 PREEMPT(full) [ 1574.900634][T26990] Tainted: [L]=SOFTLOCKUP [ 1574.900643][T26990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1574.900657][T26990] Call Trace: [ 1574.900666][T26990] [ 1574.900675][T26990] dump_stack_lvl+0xe8/0x150 [ 1574.900714][T26990] should_fail_ex+0x40c/0x560 [ 1574.900746][T26990] _copy_from_user+0x2d/0xb0 [ 1574.900779][T26990] kstrtouint_from_user+0xd6/0x180 [ 1574.900809][T26990] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1574.900855][T26990] proc_fail_nth_write+0x8e/0x210 [ 1574.900886][T26990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.900924][T26990] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1574.900954][T26990] vfs_write+0x296/0xba0 [ 1574.901001][T26990] ? __pfx_vfs_write+0x10/0x10 [ 1574.901036][T26990] ? __fget_files+0x2a/0x420 [ 1574.901073][T26990] ? __fget_files+0x3a2/0x420 [ 1574.901100][T26990] ? __fget_files+0x2a/0x420 [ 1574.901137][T26990] ksys_write+0x150/0x270 [ 1574.901172][T26990] ? __pfx_ksys_write+0x10/0x10 [ 1574.901211][T26990] ? asm_int80_emulation+0x1a/0x20 [ 1574.901239][T26990] do_int80_emulation+0x19a/0x550 [ 1574.901271][T26990] ? trace_irq_disable+0x3b/0x140 [ 1574.901298][T26990] ? asm_int80_emulation+0x1a/0x20 [ 1574.901326][T26990] ? clear_bhb_loop+0x40/0x90 [ 1574.901347][T26990] ? clear_bhb_loop+0x40/0x90 [ 1574.901374][T26990] asm_int80_emulation+0x1a/0x20 [ 1574.901394][T26990] RIP: 0023:0xf71071eb [ 1574.901414][T26990] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1574.901434][T26990] RSP: 002b:00000000f53bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1574.901457][T26990] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53bd5d0 [ 1574.901473][T26990] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1574.901486][T26990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1574.901499][T26990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1574.901512][T26990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1574.901543][T26990] [ 1576.050809][T27008] vhci_hcd vhci_hcd.0: port 0 already used [ 1578.047434][T27044] FAULT_INJECTION: forcing a failure. [ 1578.047434][T27044] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.060851][T27044] CPU: 1 UID: 0 PID: 27044 Comm: syz.8.6105 Tainted: G L syzkaller #0 PREEMPT(full) [ 1578.060887][T27044] Tainted: [L]=SOFTLOCKUP [ 1578.060895][T27044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1578.060909][T27044] Call Trace: [ 1578.060918][T27044] [ 1578.060928][T27044] dump_stack_lvl+0xe8/0x150 [ 1578.060967][T27044] should_fail_ex+0x40c/0x560 [ 1578.060998][T27044] should_failslab+0xa8/0x100 [ 1578.061042][T27044] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1578.061069][T27044] ? skb_clone+0x212/0x3a0 [ 1578.061089][T27044] ? skb_clone+0x212/0x3a0 [ 1578.061115][T27044] skb_clone+0x212/0x3a0 [ 1578.061140][T27044] __netlink_deliver_tap+0x413/0x860 [ 1578.061188][T27044] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.061224][T27044] netlink_deliver_tap+0x19c/0x1b0 [ 1578.061259][T27044] netlink_unicast+0x77f/0x940 [ 1578.061301][T27044] netlink_sendmsg+0x813/0xb40 [ 1578.061330][T27044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.061355][T27044] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1578.061382][T27044] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.061401][T27044] sock_sendmsg_nosec+0x13a/0x180 [ 1578.061431][T27044] sock_write_iter+0x2de/0x3e0 [ 1578.061458][T27044] ? __pfx_sock_write_iter+0x10/0x10 [ 1578.061491][T27044] ? bpf_lsm_file_permission+0x9/0x20 [ 1578.061515][T27044] ? security_file_permission+0x75/0x260 [ 1578.061553][T27044] vfs_write+0x612/0xba0 [ 1578.061595][T27044] ? __pfx_vfs_write+0x10/0x10 [ 1578.061645][T27044] ? __fget_files+0x2a/0x420 [ 1578.061682][T27044] ksys_write+0x150/0x270 [ 1578.061717][T27044] ? __pfx_ksys_write+0x10/0x10 [ 1578.061759][T27044] __do_fast_syscall_32+0x23e/0x6f0 [ 1578.061792][T27044] ? do_fast_syscall_32+0x33/0x70 [ 1578.061821][T27044] ? lockdep_hardirqs_on+0x7a/0x110 [ 1578.061850][T27044] ? asm_int80_emulation+0x1a/0x20 [ 1578.061871][T27044] ? do_int80_emulation+0x29f/0x550 [ 1578.061901][T27044] ? trace_irq_disable+0x3b/0x140 [ 1578.061931][T27044] do_fast_syscall_32+0x33/0x70 [ 1578.061964][T27044] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1578.061992][T27044] RIP: 0023:0xf7f030ec [ 1578.062023][T27044] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1578.062044][T27044] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1578.062067][T27044] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1578.062082][T27044] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000000 [ 1578.062096][T27044] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1578.062109][T27044] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1578.062123][T27044] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1578.062155][T27044] [ 1578.556875][T27050] netlink: 'syz.2.6108': attribute type 7 has an invalid length. [ 1578.645858][T26508] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1578.805077][T26508] usb 9-1: Using ep0 maxpacket: 32 [ 1578.817556][T26508] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1578.831582][T26508] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1578.849617][T26508] usb 9-1: config 0 descriptor?? [ 1579.070127][T26508] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1579.652098][T27063] vhci_hcd vhci_hcd.0: port 0 already used [ 1579.923065][T27073] FAULT_INJECTION: forcing a failure. [ 1579.923065][T27073] name failslab, interval 1, probability 0, space 0, times 0 [ 1579.946709][T27073] CPU: 0 UID: 0 PID: 27073 Comm: syz.8.6114 Tainted: G L syzkaller #0 PREEMPT(full) [ 1579.946745][T27073] Tainted: [L]=SOFTLOCKUP [ 1579.946754][T27073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1579.946768][T27073] Call Trace: [ 1579.946779][T27073] [ 1579.946789][T27073] dump_stack_lvl+0xe8/0x150 [ 1579.946837][T27073] should_fail_ex+0x40c/0x560 [ 1579.946869][T27073] should_failslab+0xa8/0x100 [ 1579.946906][T27073] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1579.946936][T27073] ? skb_clone+0x212/0x3a0 [ 1579.946955][T27073] ? skb_clone+0x212/0x3a0 [ 1579.946982][T27073] skb_clone+0x212/0x3a0 [ 1579.947009][T27073] __netlink_deliver_tap+0x413/0x860 [ 1579.947053][T27073] ? netlink_deliver_tap+0x2e/0x1b0 [ 1579.947087][T27073] netlink_deliver_tap+0x19c/0x1b0 [ 1579.947124][T27073] netlink_sendskb+0x68/0x140 [ 1579.947156][T27073] netlink_rcv_skb+0x2a4/0x4a0 [ 1579.947191][T27073] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1579.947220][T27073] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1579.947268][T27073] ? down_read+0x2be/0x330 [ 1579.947306][T27073] genl_rcv+0x28/0x40 [ 1579.947329][T27073] netlink_unicast+0x7bb/0x940 [ 1579.947371][T27073] netlink_sendmsg+0x813/0xb40 [ 1579.947403][T27073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.947429][T27073] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1579.947459][T27073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1579.947480][T27073] sock_sendmsg_nosec+0x13a/0x180 [ 1579.947510][T27073] ____sys_sendmsg+0x54e/0x850 [ 1579.947549][T27073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1579.947597][T27073] ___sys_sendmsg+0x2a5/0x360 [ 1579.947628][T27073] ? __lock_acquire+0x683/0x2cf0 [ 1579.947663][T27073] ? __pfx____sys_sendmsg+0x10/0x10 [ 1579.947696][T27073] ? get_pid_task+0x20/0x1f0 [ 1579.947726][T27073] ? get_pid_task+0x20/0x1f0 [ 1579.947753][T27073] ? get_pid_task+0x20/0x1f0 [ 1579.947816][T27073] ? __fget_files+0x2a/0x420 [ 1579.947853][T27073] ? __fget_files+0x3a2/0x420 [ 1579.947893][T27073] __sys_sendmsg+0x177/0x240 [ 1579.947931][T27073] ? __pfx___sys_sendmsg+0x10/0x10 [ 1579.947984][T27073] __do_fast_syscall_32+0x23e/0x6f0 [ 1579.948017][T27073] ? do_fast_syscall_32+0x33/0x70 [ 1579.948046][T27073] ? lockdep_hardirqs_on+0x7a/0x110 [ 1579.948074][T27073] ? asm_int80_emulation+0x1a/0x20 [ 1579.948095][T27073] ? do_int80_emulation+0x29f/0x550 [ 1579.948126][T27073] ? trace_irq_disable+0x3b/0x140 [ 1579.948157][T27073] do_fast_syscall_32+0x33/0x70 [ 1579.948188][T27073] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1579.948215][T27073] RIP: 0023:0xf7f030ec [ 1579.948236][T27073] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1579.948256][T27073] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1579.948280][T27073] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000640 [ 1579.948297][T27073] RDX: 0000000020040010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1579.948311][T27073] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1579.948325][T27073] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1579.948339][T27073] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1579.948372][T27073] [ 1580.358168][T27080] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6113'. [ 1580.415778][T27083] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1580.421982][T27083] [U] J"—e:ÀÆ" [ 1580.440180][T27080] syzkaller1: entered promiscuous mode [ 1580.460305][T27080] syzkaller1: entered allmulticast mode [ 1581.368000][T27107] vhci_hcd vhci_hcd.0: port 0 already used [ 1581.783924][T27120] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6125'. [ 1583.786696][T27132] vhci_hcd vhci_hcd.0: port 0 already used [ 1584.692779][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6133'. [ 1584.711177][T27150] gtp1: entered promiscuous mode [ 1584.716724][T27150] gtp1: entered allmulticast mode [ 1584.732038][T27150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6133'. [ 1585.437401][T27160] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 1585.465144][T27160] [U] J"—e:ÀÆ" [ 1586.541797][T27166] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1587.390322][T27169] FAULT_INJECTION: forcing a failure. [ 1587.390322][T27169] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1587.403945][T27169] CPU: 0 UID: 0 PID: 27169 Comm: syz.4.6138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1587.403971][T27169] Tainted: [L]=SOFTLOCKUP [ 1587.403977][T27169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1587.403987][T27169] Call Trace: [ 1587.403993][T27169] [ 1587.404004][T27169] dump_stack_lvl+0xe8/0x150 [ 1587.404033][T27169] should_fail_ex+0x40c/0x560 [ 1587.404056][T27169] get_futex_key+0x1b3/0x1580 [ 1587.404081][T27169] ? perf_lock_task_context+0x79b/0x850 [ 1587.404106][T27169] ? perf_lock_task_context+0xfe/0x850 [ 1587.404130][T27169] ? __pfx_get_futex_key+0x10/0x10 [ 1587.404151][T27169] ? __lock_acquire+0x683/0x2cf0 [ 1587.404209][T27169] futex_wake+0x119/0x5f0 [ 1587.404240][T27169] ? __pfx_futex_wake+0x10/0x10 [ 1587.404281][T27169] ? exit_mm_release+0x1a/0x30 [ 1587.404302][T27169] do_futex+0x458/0x4e0 [ 1587.404330][T27169] ? __pfx_do_futex+0x10/0x10 [ 1587.404358][T27169] ? __might_fault+0xaf/0x130 [ 1587.404378][T27169] mm_release+0x101/0x290 [ 1587.404397][T27169] exit_mm+0x4d/0x2d0 [ 1587.404422][T27169] do_exit+0x6cd/0x2360 [ 1587.404451][T27169] ? __pfx_do_exit+0x10/0x10 [ 1587.404474][T27169] ? cgroup1_freezing+0x20/0x350 [ 1587.404490][T27169] ? cgroup1_freezing+0x20/0x350 [ 1587.404511][T27169] do_group_exit+0x22d/0x2f0 [ 1587.404533][T27169] ? _raw_spin_unlock_irq+0x23/0x50 [ 1587.404556][T27169] get_signal+0x121b/0x12c0 [ 1587.404589][T27169] arch_do_signal_or_restart+0xbb/0x860 [ 1587.404610][T27169] ? __fget_files+0x2a/0x420 [ 1587.404654][T27169] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1587.404701][T27169] exit_to_user_mode_loop+0x104/0x730 [ 1587.404722][T27169] ? rcu_is_watching+0x15/0xb0 [ 1587.404747][T27169] ? do_fast_syscall_32+0x33/0x70 [ 1587.404773][T27169] __do_fast_syscall_32+0x45b/0x6f0 [ 1587.404797][T27169] ? do_fast_syscall_32+0x33/0x70 [ 1587.404819][T27169] ? lockdep_hardirqs_on+0x7a/0x110 [ 1587.404841][T27169] ? asm_int80_emulation+0x1a/0x20 [ 1587.404855][T27169] ? do_int80_emulation+0x29f/0x550 [ 1587.404882][T27169] do_fast_syscall_32+0x33/0x70 [ 1587.404905][T27169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1587.404925][T27169] RIP: 0023:0xf6fef0ec [ 1587.404940][T27169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1587.404971][T27169] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 1587.404995][T27169] RAX: 0000000000000001 RBX: 0000000080000180 RCX: 0000000000000001 [ 1587.405009][T27169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1587.405021][T27169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1587.405034][T27169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1587.405047][T27169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1587.405078][T27169] [ 1587.730816][T27178] gre0: Caught tx_queue_len zero misconfig [ 1587.943330][T27180] FAULT_INJECTION: forcing a failure. [ 1587.943330][T27180] name failslab, interval 1, probability 0, space 0, times 0 [ 1587.985075][T27180] CPU: 1 UID: 0 PID: 27180 Comm: syz.7.6142 Tainted: G L syzkaller #0 PREEMPT(full) [ 1587.985108][T27180] Tainted: [L]=SOFTLOCKUP [ 1587.985117][T27180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1587.985130][T27180] Call Trace: [ 1587.985139][T27180] [ 1587.985148][T27180] dump_stack_lvl+0xe8/0x150 [ 1587.985188][T27180] should_fail_ex+0x40c/0x560 [ 1587.985219][T27180] should_failslab+0xa8/0x100 [ 1587.985253][T27180] __kmalloc_cache_noprof+0xa8/0x660 [ 1587.985279][T27180] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1587.985308][T27180] ? sctp_add_bind_addr+0x8c/0x370 [ 1587.985333][T27180] ? sctp_add_bind_addr+0x8c/0x370 [ 1587.985366][T27180] sctp_add_bind_addr+0x8c/0x370 [ 1587.985398][T27180] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1587.985429][T27180] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1587.985457][T27180] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1587.985486][T27180] ? sctp_v6_is_any+0x64/0x80 [ 1587.985516][T27180] ? sctp_copy_one_addr+0x93/0x360 [ 1587.985545][T27180] sctp_bind_addr_copy+0xb3/0x3c0 [ 1587.985574][T27180] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1587.985603][T27180] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1587.985639][T27180] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1587.985679][T27180] ? sctp_inet6_send_verify+0x23a/0x300 [ 1587.985715][T27180] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 1587.985752][T27180] __sctp_connect+0x5cb/0xdc0 [ 1587.985794][T27180] ? __pfx___sctp_connect+0x10/0x10 [ 1587.985817][T27180] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1587.985843][T27180] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 1587.985865][T27180] sctp_getsockopt_connectx3+0x227/0x360 [ 1587.985884][T27180] ? lock_sock_nested+0x6a/0x100 [ 1587.985905][T27180] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 1587.985933][T27180] ? __local_bh_enable_ip+0xd0/0x130 [ 1587.985954][T27180] sctp_getsockopt+0x984/0xb90 [ 1587.985978][T27180] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1587.985998][T27180] do_sock_getsockopt+0x51d/0x7e0 [ 1587.986059][T27180] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1587.986086][T27180] ? __fget_files+0x2a/0x420 [ 1587.986119][T27180] ? __fget_files+0x2a/0x420 [ 1587.986139][T27180] ? __fget_files+0x3a2/0x420 [ 1587.986171][T27180] ? __fget_files+0x2a/0x420 [ 1587.986196][T27180] __ia32_sys_getsockopt+0x1a4/0x240 [ 1587.986247][T27180] __do_fast_syscall_32+0x23e/0x6f0 [ 1587.986272][T27180] ? do_fast_syscall_32+0x33/0x70 [ 1587.986294][T27180] ? lockdep_hardirqs_on+0x7a/0x110 [ 1587.986315][T27180] ? asm_int80_emulation+0x1a/0x20 [ 1587.986330][T27180] ? do_int80_emulation+0x29f/0x550 [ 1587.986353][T27180] ? trace_irq_disable+0x3b/0x140 [ 1587.986376][T27180] do_fast_syscall_32+0x33/0x70 [ 1587.986400][T27180] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1587.986421][T27180] RIP: 0023:0xf703f0ec [ 1587.986437][T27180] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1587.986451][T27180] RSP: 002b:00000000f542d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 1587.986468][T27180] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000084 [ 1587.986478][T27180] RDX: 000000000000006f RSI: 0000000080000140 RDI: 0000000080000100 [ 1587.986489][T27180] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1587.986498][T27180] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1587.986508][T27180] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1587.986530][T27180] [ 1588.510332][T27182] vhci_hcd vhci_hcd.0: port 0 already used [ 1589.556705][T27200] sctp: [Deprecated]: syz.5.6147 (pid 27200) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1589.556705][T27200] Use struct sctp_sack_info instead [ 1591.343936][T27221] [U] VÔ3¸ÂFÙ¾"SÇÁ/ÉÊ4:ÃXTZ“W¡T‘’LWµ«= [ 1591.366525][T27221] [U] J"—E:ÀÆ" [ 1592.822506][T27231] vhci_hcd vhci_hcd.0: port 0 already used [ 1593.375593][ T31] INFO: task kworker/1:0:24254 blocked for more than 143 seconds. [ 1593.383738][ T31] Tainted: G L syzkaller #0 [ 1593.390963][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1593.400042][ T31] task:kworker/1:0 state:D stack:21776 pid:24254 tgid:24254 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1593.412373][ T31] Workqueue: usb_hub_wq hub_event [ 1593.417703][ T31] Call Trace: [ 1593.421114][ T31] [ 1593.424085][ T31] __schedule+0x17d9/0x56c0 [ 1593.428774][ T31] ? __lock_acquire+0x683/0x2cf0 [ 1593.433893][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1593.439386][ T31] ? wq_worker_sleeping+0x101/0x250 [ 1593.444754][ T31] ? __pfx___schedule+0x10/0x10 [ 1593.449980][ T31] ? schedule+0x90/0x2b0 [ 1593.454353][ T31] schedule+0x164/0x2b0 [ 1593.458729][ T31] schedule_preempt_disabled+0x13/0x30 [ 1593.464281][ T31] __mutex_lock+0x7bf/0x1550 [ 1593.469047][ T31] ? __mutex_lock+0x5d4/0x1550 [ 1593.473976][ T31] ? hub_event+0x20c9/0x4d30 [ 1593.478792][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1593.483899][ T31] hub_event+0x20c9/0x4d30 [ 1593.488442][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 1593.493616][ T31] ? register_lock_class+0x31/0x2e0 [ 1593.502547][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1593.508381][ T31] ? __pfx_hub_event+0x10/0x10 [ 1593.513263][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1593.519472][ T31] ? rcu_is_watching+0x15/0xb0 [ 1593.524372][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 1593.530897][ T31] process_scheduled_works+0xa8e/0x14e0 [ 1593.538133][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1593.544177][ T31] ? assign_work+0x3cf/0x5d0 [ 1593.550702][ T31] worker_thread+0xa47/0xfb0 [ 1593.556621][ T31] kthread+0x388/0x470 [ 1593.561134][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1593.566832][ T31] ? __pfx_kthread+0x10/0x10 [ 1593.571514][ T31] ret_from_fork+0x514/0xb70 [ 1593.577460][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1593.582682][ T31] ? __switch_to+0xc89/0x1420 [ 1593.588003][ T31] ? __pfx_kthread+0x10/0x10 [ 1593.592694][ T31] ret_from_fork_asm+0x1a/0x30 [ 1593.598819][ T31] [ 1593.602057][ T31] [ 1593.602057][ T31] Showing all locks held in the system: [ 1593.610663][ T31] 1 lock held by khungtaskd/31: [ 1593.615976][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1593.626661][ T31] 2 locks held by getty/5378: [ 1593.631504][ T31] #0: ffff88803216d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1593.641905][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1593.664615][ T31] 5 locks held by kworker/1:3/5613: [ 1593.670248][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.681988][ T31] #1: ffffc90003a0fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.694276][ T31] #2: ffff88802bda71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1593.704434][ T31] #3: ffff88802bda4568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1593.716989][ T31] #4: ffff88802bcf5960 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1593.727640][ T31] 5 locks held by kworker/1:7/5725: [ 1593.733314][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.746175][ T31] #1: ffffc9000519fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.758754][ T31] #2: ffff88802c1e41d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1593.768596][ T31] #3: ffff88802c229568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1593.779023][ T31] #4: ffff88802c0e5d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1593.788940][ T31] 5 locks held by kworker/0:8/6636: [ 1593.794201][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.805878][ T31] #1: ffffc9000dc47c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.818113][ T31] #2: ffff88802bf321d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1593.827383][ T31] #3: ffff88802bf30568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1593.837638][ T31] #4: ffff88802bde3e60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1593.847413][ T31] 5 locks held by kworker/1:14/6646: [ 1593.852771][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.864659][ T31] #1: ffffc9000de7fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.877171][ T31] #2: ffff88823bf301d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1593.888314][ T31] #3: ffff88802c27c568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1593.898838][ T31] #4: ffff88802c0e5d60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1593.908967][ T31] 5 locks held by kworker/1:5/15711: [ 1593.914444][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.926291][ T31] #1: ffffc9000739fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.939475][ T31] #2: ffff88802c1091d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1593.948620][ T31] #3: ffff88802c10e568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1593.958818][ T31] #4: ffff88802bff6860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1593.968668][ T31] 5 locks held by kworker/1:12/18153: [ 1593.974207][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.985968][ T31] #1: ffffc9001058fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1593.999057][ T31] #2: ffff88802a57b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1594.008787][ T31] #3: ffff8880306b31d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.023608][ T31] #4: ffff8880352a71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.033169][ T31] 5 locks held by kworker/0:16/18165: [ 1594.038640][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.050486][ T31] #1: ffffc9001065fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.062811][ T31] #2: ffff88802a6931d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1594.071945][ T31] #3: ffff8880542c21d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.081415][ T31] #4: ffff8880324d21a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.090793][ T31] 5 locks held by kworker/1:0/24254: [ 1594.096584][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.108242][ T31] #1: ffffc90005997c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.120468][ T31] #2: ffff88802c18b1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1594.130434][ T31] #3: ffff88802c188568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 1594.141451][ T31] #4: ffff88802bff6860 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 1594.151487][ T31] 6 locks held by kworker/1:4/24256: [ 1594.156910][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.168556][ T31] #1: ffffc90005a67c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.180698][ T31] #2: ffff88802a5eb1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1594.189802][ T31] #3: ffff8880206f01d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.199318][ T31] #4: ffff88803570d1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.209020][ T31] #5: ffffffff8e9f5988 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1594.219713][ T31] 5 locks held by kworker/1:8/26508: [ 1594.225165][ T31] #0: ffff88801ee9d540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.236719][ T31] #1: ffffc900074e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1594.248760][ T31] #2: ffff88802a5d71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1594.257932][ T31] #3: ffff88803187f1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.267398][ T31] #4: ffff8880325fc1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1594.276810][ T31] 1 lock held by syz.2.6135/27156: [ 1594.282077][ T31] #0: ffff88802a6931d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1594.291193][ T31] 1 lock held by syz.4.6138/27170: [ 1594.296474][ T31] #0: ffff88802a6931d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1594.305675][ T31] 1 lock held by syz.8.6158/27241: [ 1594.310849][ T31] #0: ffff88802a5d71d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1594.321119][ T31] [ 1594.323512][ T31] ============================================= [ 1594.323512][ T31] [ 1594.332650][ T31] NMI backtrace for cpu 1 [ 1594.332673][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.332704][ T31] Tainted: [L]=SOFTLOCKUP [ 1594.332713][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1594.332727][ T31] Call Trace: [ 1594.332736][ T31] [ 1594.332746][ T31] dump_stack_lvl+0xe8/0x150 [ 1594.332785][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1594.332812][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1594.332848][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1594.332877][ T31] sys_info+0x135/0x170 [ 1594.332899][ T31] watchdog+0xfd7/0x1030 [ 1594.332934][ T31] ? watchdog+0x1c7/0x1030 [ 1594.332967][ T31] kthread+0x388/0x470 [ 1594.332999][ T31] ? __pfx_watchdog+0x10/0x10 [ 1594.333023][ T31] ? __pfx_kthread+0x10/0x10 [ 1594.333055][ T31] ret_from_fork+0x514/0xb70 [ 1594.333090][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1594.333121][ T31] ? __switch_to+0xc89/0x1420 [ 1594.333149][ T31] ? __pfx_kthread+0x10/0x10 [ 1594.333191][ T31] ret_from_fork_asm+0x1a/0x30 [ 1594.333231][ T31] [ 1594.333240][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1594.451262][ C0] NMI backtrace for cpu 0 [ 1594.451286][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.451313][ C0] Tainted: [L]=SOFTLOCKUP [ 1594.451320][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1594.451332][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1594.451365][ C0] Code: 8c 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 6a 1a 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1594.451385][ C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246 [ 1594.451405][ C0] RAX: 00000000013a7e27 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 1594.451422][ C0] RDX: 0000000000000001 RSI: ffffffff8e22a419 RDI: ffffffff8c4bd380 [ 1594.451440][ C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b [ 1594.451457][ C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000 [ 1594.451474][ C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000 [ 1594.451492][ C0] FS: 0000000000000000(0000) GS:ffff888124f58000(0000) knlGS:0000000000000000 [ 1594.451511][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1594.451527][ C0] CR2: 000000000c49b7d7 CR3: 0000000074d30000 CR4: 00000000003526f0 [ 1594.451548][ C0] Call Trace: [ 1594.451557][ C0] [ 1594.451565][ C0] default_idle+0x9/0x20 [ 1594.451606][ C0] default_idle_call+0x72/0xb0 [ 1594.451627][ C0] do_idle+0x2e0/0x540 [ 1594.451665][ C0] ? __pfx_do_idle+0x10/0x10 [ 1594.451697][ C0] cpu_startup_entry+0x43/0x60 [ 1594.451722][ C0] rest_init+0x2de/0x300 [ 1594.451742][ C0] start_kernel+0x392/0x3e0 [ 1594.451862][ C0] x86_64_start_reservations+0x24/0x30 [ 1594.451904][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1594.451924][ C0] common_startup_64+0x13e/0x157 [ 1594.451955][ C0] [ 1594.636518][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1594.643407][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1594.654114][ T31] Tainted: [L]=SOFTLOCKUP [ 1594.658478][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1594.668583][ T31] Call Trace: [ 1594.671897][ T31] [ 1594.674866][ T31] vpanic+0x56c/0xa60 [ 1594.678897][ T31] ? __pfx___schedule+0x10/0x10 [ 1594.683766][ T31] ? __pfx_vpanic+0x10/0x10 [ 1594.688294][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 1594.694565][ T31] panic+0xc5/0xd0 [ 1594.698410][ T31] ? __pfx_panic+0x10/0x10 [ 1594.702869][ T31] ? preempt_schedule_common+0x82/0xd0 [ 1594.708357][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1594.713755][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 1594.719940][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 1594.726130][ T31] watchdog+0x1030/0x1030 [ 1594.730509][ T31] ? watchdog+0x1c7/0x1030 [ 1594.734974][ T31] kthread+0x388/0x470 [ 1594.739094][ T31] ? __pfx_watchdog+0x10/0x10 [ 1594.743808][ T31] ? __pfx_kthread+0x10/0x10 [ 1594.748438][ T31] ret_from_fork+0x514/0xb70 [ 1594.753067][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1594.758209][ T31] ? __switch_to+0xc89/0x1420 [ 1594.762917][ T31] ? __pfx_kthread+0x10/0x10 [ 1594.767624][ T31] ret_from_fork_asm+0x1a/0x30 [ 1594.772420][ T31] [ 1594.776165][ T31] Kernel Offset: disabled [ 1594.780512][ T31] Rebooting in 86400 seconds..