last executing test programs: 6m36.450422998s ago: executing program 3 (id=248): socket$inet(0x2, 0x800, 0x3ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) rseq(&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000001, 0x5, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0xa0000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000080)={0x2, 0x16f, 0x2, 0x5, 0x3, 0x7}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) pipe(0x0) openat(0xffffffffffffff9c, &(0x7f0000001400)='./cgroup.net/devices.allow\x00', 0x0, 0x48) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x1c3902, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101000, 0x63) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000001480)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r3, r3, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000014c0)={0x38, 0x0, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) r4 = syz_open_dev$vim2m(&(0x7f0000001500), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000001540)={0xf0f028, 0xffff}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001640)=ANY=[@ANYBLOB="1400000010000100000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000094200009801c0002800c0001800800014000000004180001800800014000000004440000000c0a01010000000000000000020000000e00020073797a31000000000900010073797a30000000001800038014000080100001800c000100480012000000000014000000110001000000000000"], 0xf0}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x1, 0x4, &(0x7f0000001900)=ANY=[@ANYBLOB="180000000100000000000000080000009111a40000000000950000"], &(0x7f0000001940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001980)={@fallback=r7, r7, 0x13, 0x20, r7}, 0x20) 6m34.726895517s ago: executing program 3 (id=254): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000400)=0x800, 0x4) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000440)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000540)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000580)={0x2c, 0x0, r8}, 0x10) r9 = dup(r5) syz_ublk_setup_queues(r9, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m33.209050936s ago: executing program 3 (id=257): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000085) recvmmsg(r0, &(0x7f0000000140), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000180), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f00000001c0)={0x0, 0x40, @name="211ac0912fb1a36f4826fb7943a679c23d0000000075cc8f7b171f10622e1233"}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x40000000, 0x80}, 0x10}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000001680)=[{{&(0x7f0000000580)={0xa, 0x4e24, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0xffff}, 0x1c, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xbbe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000d00)=[{&(0x7f0000000b00)="5ccf7c6e14c3061553094888352acf8b50f0b8ba3ef8f4423d44e3c2352569befa8ba72587567c7409fee3e4f49add629d5001e0760a078e496c00b8d800757027972ddbd20b2012d0259adf0ec1496985a57958ad934bc10d3c56048c0c69c154aa683d810d9cb0c69fb0101c0c681c1624e3a7aedced0a96c6c1d4c0e08c168c4500d9f93e7e69b3f7beaecfcf899ab0d147dcf5cecf106326b4e8c99f45c9b778179a7eed2bb2881f803d067e613cf23daefcfc2cf812bfb2cf069aed94af3a7cab0e2ffb23259ad5e7fa2e97728f94c6", 0xd2}, {&(0x7f0000000c00)="966977a649c610cef198868288bf30fb5d26ec72e71d88f536d1f4244b94b420297a097723eea20a7192fada786373850f562b9fed16ffd8241695a6c5f549e25814bc1f4ec3c2ccd0a2b50c56c2089a1e5ebc7d98d2fb0379e338fcb133a8ed6cc4b888b4df2d67ba8376abf0eb6974bd514dbed5261db83c0f580c9e04334e682bf956e147411a2d278315c057540ba367f833c00479fedc3f30159b4b04daa8b0193c2052f053f61da62e78", 0xad}, {&(0x7f0000000cc0)="8a05690b35cc7aaaf9ecf0937b25c6ceb027889eeb8dbf426c859b05592f2559a4e12dae5bba3576a7bb47700c366bf359d451079fe2ef00c794dd932f", 0x3d}], 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1f0}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000f40)="8efe77a8f36aee4504c9c181fdf624cc1214252daeda5d87f412d0e6a882f1d9721a3b019ed186a73d7bf7d455bb982e614694929ca9e1d5c6155a22cbcc350e2e1dc3c0fc2ca2982a5a2aaf7d86b2539da07ba20c96e9b5a6f10b4158761cc1246e5b6256cebd62bb11ad822251a038b5311dd2ef720b119dcec561354d0e9fc5ce36d516b4abbd633e0f1286b483a097ecee65ae3f1e0fa56ef84d6b010ea704abe29acc752991d725fb28a6e18b7877b28cf4a560fde819d8f57ae5c9a810ebcb98d3bd80219d98af6d7f5e2381107dab3cdd24612aa946ba43a803f5", 0xde}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="50000000000065338f6951ce0000000019908cd1a42beb4becb82bfdcd12202077f4d9074f9a35e39b4d3e3f4da3aeb182c58a00000000008000"], 0x50}}, {{&(0x7f0000001100)={0xa, 0x4f23, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001440)=[{&(0x7f0000001140)="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", 0xfb}, {&(0x7f0000001240)="77d682c9c86acf634c8a9e3538fbdd514b673d015ccff321a7b08666dc905f56f65dbf32b9e6e386aa71d4ac169aef4f9896d9b89ef0fc01036409be5b866ca9228f5b20d48c197c034a81afdd6a6b8c8d40f081672e7ebcd82c2257ee00d2966e33cb27c06616cb31f4599578f43942e6a739cb780227e3f2bf0f15de37841574f3f46f73fa54d46fbe674c5ed7dd917a5282a528bdd2ae19f60b7b4bb11a78bff56e47eeba8e5c", 0xa8}, {&(0x7f0000001300)="ca05eac2ba5ca16656a7baa11a4e568a2353bab42a8c42dc5281e8dd487146ea60ba44bc91b27b4b05f54342618c5e412e9f2e882746720681ec0199c5d7f3d28a717aafaab5afa812953605094f86d49e9374ae56a1c8fbbb59461b2c9e0bc828cd812ee1cca8050e2efcfa39b51b1672ad1b43471162908456d6", 0x7b}, {&(0x7f0000001380)="7954b152277d1782d0650fcdefc97fd4e8b12150c24b7214239738f9e97847220e5ac9e6d8b904330248fd5597309fe5ad2ef366dc2444889452cc3da0e5b8c5af77fb76bfd86f7712ef396253a6995ada413203c997ac4f8c31049acb2c2f65bd08c59bded7229823ad4487512c18ade121d9e396a8855299731c9148ed1cfbaaceb12b15531935b898119dbdbfe11e4ee94554ca4ab6a08a7aeedb7f167675bd43b6670fb88b5dd7477b44fe89", 0xae}], 0x4, &(0x7f0000001480)=ANY=[@ANYBLOB="58000000000000002900000039000000840802fd0000000020010000000000000000000000000002fc000000000000000000000000000000fe800000000000000000000000000031fc00000900"/88], 0x58}}, {{&(0x7f0000001500)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf}, 0x1c, &(0x7f0000001540)}}], 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7b, &(0x7f00000003c0)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100002}, 0x50) r4 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{0x0, 0x60}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000009c0)=@assoc_value, &(0x7f0000000a00)=0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x46180) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000600)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000700)={0x38, 0x3, 0x10000025, 0x12000, 0x299d2, 0x9, 0x395400000000000, 0x2, 0x40000003, 0x5507}, 0x0) syz_open_dev$vim2m(&(0x7f0000000740), 0x0, 0x2) syz_open_dev$vbi(&(0x7f0000000780), 0x1, 0x2) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000007c0)={0x3, 'bridge_slave_0\x00', {0xffffff7d}, 0x9}) 6m32.264701977s ago: executing program 3 (id=261): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000680)='./file0\x00', 0x0) 6m31.439694385s ago: executing program 4 (id=267): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="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", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40), 0x0) 6m31.147116762s ago: executing program 4 (id=269): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1, 0xfffff, 0x0, 0x0) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000b80)=ANY=[@ANYBLOB="1201010200000010ac05670240000102030109022d00010102800509040001010301012f17cb81ce8af29466040905810330000403800905020340007f32c830509a7187eb6a913ca91ee3ebee8887d96c30b3fe5c5827724d48b45d2ec456abc1d09b0b617d82fe97c878a30dd63da87af0602767fd94d6d83380d530798f24eaf28de57e6c6e34e03a47fbda8fd381e3dd0b95e331fa869f187cb8178102e2ded950ccd3c5498e8ba64021174c23e1ad308e414b89c2ffdab5163bac18762b599e6ed8ac220b72bd38ca6c09f06cac02da7ee33a65b1888fa54a638d1b31f309c6d89b212ce1d830793eb436ca21b2b861b1"], &(0x7f0000000600)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x8, 0xf7, 0x5, 0xff, 0x81}, 0x3b, &(0x7f0000000100)={0x5, 0xf, 0x3b, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0x4, 0x5}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x3, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x135, 0xf00, 0x1, [0xc00f, 0x1fec000]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "487ee767bff9e3b6aea8d7ea24807f24"}]}, 0xa, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1404}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41d}}, {0x92, &(0x7f0000000240)=@string={0x92, 0x3, "62cf834ba30c7b5f23b2ed8a63e3de73694f7f7bef59c6c00099b5cdaed294a1a42bdfd1d4b5ac2f0e169049981c35bc521db7ef146795902c1f3e30333de1a2212a3bc3539987528b327718343309f26da530a9378e4957bc6d469727506e24f6bfddce96c7333e723d58074dd955cc2006599564d1c2541e1e842cd1c12bbf6181ccaca6227413403dfa4924c8fab5"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x809}}, {0xe0, &(0x7f00000003c0)=@string={0xe0, 0x3, "1b53ce9e4660e09a39ed2d002f58192877fc01e31ba7f6aa5d1ab11bbaa33af807f0325eb8bce0bb066fb3715e3a9f29609c53191f95fe6a8309535120cbf5082722dcb15bf5f8b571b10ee3b42bf08c349dfa07988122528ac4076bd986a0fbb6156297618ae545aad6d39ec1a5ad352e5322462244ce5ef159f474d12df44648bafa943159e3415e96f3628fb9a329113f08936748e27f36ecf4284faca8a4893e5401a3f8df6e829a43079bbe7d8fe79a1c2ed0ec3652cd41afbb01648fd5151118bdd6c5a2a19c40523a1c54ffdb27d566f9d2250ae4bf89bec3f159"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41e}}, {0xae, &(0x7f0000000500)=@string={0xae, 0x3, "4de5958de7ae5b14ff4fb72327e4ed70e7742c9e65effe6b354d98db7fe963b0c15b83fdfa85b9e5cfb493e3c62885548523e672cc21abb83a550ede3e46f39da2c7dd729d1f88433e70fdcda5f92f50858e539fba09f553ade3faa718c307dfb4bcba416022375779f71ce57c6c85c37865d9014e3de8ea3dec3279cba91bf6eccb9a94824073600d647c5e172827c3a71fb57858b8fbcf7b5165ead6fa8deeaf22187a7488139cedf676d6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x410}}]}) syz_usb_control_io$hid(r1, &(0x7f0000000840)={0x24, &(0x7f00000006c0)={0x0, 0x23, 0x7c, {0x7c, 0x30, "6c734cd07451d4fce367eb925ad2ccb205536a6a42c932f3157c5282d9c0b5b020222450e30ac56ed7d8be6f7a6f4f6ed5f3de4834d0afdd819507e8b6547ddbbe7b160f10be6e61372c8171f0568023762f08d896d752e93e76b21765891ca83591d2952e156cdce1333b57a947e8abf122f04596b4657cc721"}}, &(0x7f0000000780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42c}}, &(0x7f00000007c0)={0x0, 0x22, 0x1c, {[@main=@item_012={0x2, 0x0, 0x8, 'ew'}, @local=@item_4={0x3, 0x2, 0x0, "e59272e1"}, @local=@item_012={0x2, 0x2, 0x1, "75b8"}, @local=@item_4={0x3, 0x2, 0x0, "379344a4"}, @local=@item_012={0x1, 0x2, 0x8, "fd"}, @main=@item_012={0x1, 0x0, 0xa, "ee"}, @main=@item_012={0x0, 0x0, 0x9}, @global=@item_012={0x1, 0x1, 0x2, "d4"}, @global=@item_4={0x3, 0x1, 0x7, "253018a4"}]}}, &(0x7f0000000800)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0x936}}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000880)={0x0, 0x22, 0x57, "d1d705a8a050c6f918a0701d553a37c020e0cb1aa925f25019962cc5bf030931a1b0d80543d164ac82714510b770e9dee968ec4071040e27beb49afdc362da2560e072f0c42b12ee86677e726f170f62e96932cbcb6336"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000980)={0x20, 0x1, 0xe2, "77f020be89cc759947434a9ce492c02d98bc82feef3b7c22e582b25d5e0170b78d13a0a3a708b957ce571e9fc649bd3e52ce702eb3b0f5a2dd5730d1c6f490bd4c2973d405b18ce3b130d343e4d85ffbdc5f916670182c5c8810418d327a19d5d669b9dc65cb3cd447248e721eb58d31cbe706082ac0bd43124baeb42cfad78cd297f812e0f54f94b86349f1c29da410f3cd40509ea15781ed6359341612f307b95afa2fa7c64ebb6cb578f7bb20f909c2c994f1d6082b35c4afcf03e4951eae05ed078da29b69dce0a88cf8c85cfae33be40d031649a2baffcfa3d246ade551de9c"}, &(0x7f0000000a80)={0x20, 0x3, 0x1, 0x2}}) prctl$PR_SET_DUMPABLE(0x4, 0x3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000b00)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) unshare(0x22020600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d40)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x6}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newlink={0x34, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa068, 0x282e1}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace(0x10, 0x1) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000e40)={0xffffffff}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="200000001200010a00000000000000000201"], 0x20}}, 0x0) 6m31.122050549s ago: executing program 3 (id=271): socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x4340, 0x4000, 0x2, 0x158}, &(0x7f0000000100), 0x0, &(0x7f0000000140)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x5e, 0x0, r0}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x20000, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x1000, 0x1, 0x401f0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x563f, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) chmod(&(0x7f00000002c0)='./file1\x00', 0x100) socket$unix(0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002580)="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", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0xfffffffe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000022c0)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x2321810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) getegid() socket$igmp(0x2, 0x3, 0x2) syz_open_dev$dmmidi(&(0x7f0000000900), 0x6, 0x400000) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000200)={0x8604}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x1c}}, 0x4980) unshare(0x26020480) unshare(0x6a060000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x48810) 6m30.72518528s ago: executing program 3 (id=273): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000030a000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x7a1fa000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffff, 0x3, @mcast2}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000022c0), 0x80002, 0x0) r2 = syz_io_uring_setup(0xf08, &(0x7f0000002300)={0x0, 0x2d85, 0x2, 0x2, 0x800000c3}, &(0x7f0000002380)=0x0, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000002440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xff70) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002500)) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x480, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000002180)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="60001e18", @ANYRES16=r10, @ANYBLOB="0100fdfffffffcdbdf25030000004c00018021000400200001000a004e22fffffe0000000000000000000000000000000000010000001400020002000000e000000200000000000000000d0001007564703a73797a3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 6m29.9693483s ago: executing program 32 (id=273): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f000030a000/0x3000)=nil, 0x3000, 0x0, 0x4000010, r0, 0x7a1fa000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x96) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xffff, 0x3, @mcast2}, 0x1c) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000022c0), 0x80002, 0x0) r2 = syz_io_uring_setup(0xf08, &(0x7f0000002300)={0x0, 0x2d85, 0x2, 0x2, 0x800000c3}, &(0x7f0000002380)=0x0, &(0x7f00000023c0)=0x0, &(0x7f0000002400)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000002440)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r2, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) write$binfmt_aout(r1, 0x0, 0xff70) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000002500)) r6 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x480, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000002180)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002240)={&(0x7f0000002280)=@ipv4_delroute={0x24, 0x18, 0x901, 0x70bd2c, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x800}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=ANY=[@ANYBLOB="60001e18", @ANYRES16=r10, @ANYBLOB="0100fdfffffffcdbdf25030000004c00018021000400200001000a004e22fffffe0000000000000000000000000000000000010000001400020002000000e000000200000000000000000d0001007564703a73797a3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 6m29.888617357s ago: executing program 4 (id=277): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602"], 0x0) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000440)=ANY=[@ANYBLOB="0040818293bb09641cc805d086fa0417dada7f19c35c2111ca986dd9dfb3125357a4789868336e092d5084bbb3b823c4d7103b217b782328b7b670a096cc12a7db3463295e96f02eab76d9f16c107ed1e8432f98ac133b34919821f07da0e8f73ed543a9fd76d1596502c07c3e05747ffc7ab07d82b01bf89aaa92eda50a4e6407b6b49bb766086caf97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000240)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000280)=0x9, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r1, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001dc0)}}], 0x2, 0x40002180, 0x0) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1fffffffc000, 0x10d900) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r6, 0x80184153, &(0x7f0000000600)={0x0, &(0x7f00000007c0)=[&(0x7f0000000100)="399cb02d2e32017b227ff62acdc73ad2fedc2962448ee353552781ff27ec893a338863770f67bd4d4b1d9e65000c74", &(0x7f00000001c0)="7bf6c1a1621e64bbb75f36691977393994b0d540f155b6afb8104ada62bc932c4140836f1cd18cc0d8ffdab7dc957984b9017e47e5b1be3edaedbe0453f1745164607e40633db3ef58342fa8f27cc61d40e73e78adadbed0dcc6ec8ca69928d8be47740ffdb8cd49f16152f76443af0e", &(0x7f00000002c0)="718ebc1ee4b995f2cbd15289c10ebbb1245eda65e31c5c", 0x0, &(0x7f0000000400)="23a770dec4b5367d1b346a5a88c97e4b3840430f48e70940b56b54310d56ae2c3685c8b93d5502d2fc848183389f83cb890a31c837acdc57afa3677699f44f99a0629638d96a9df25ffbdc995e01", &(0x7f0000000480)="f9587b90f03973eb2520c0dbc49ae523db7ad99838541f3e276b1ce50a8a51f11f5c8e6cd17edee04b1550fb10de6cef2a2eca4c37696cefc94e5fbfa0f1950b8b79adac66c864bc58390dfa9abd5d7350288336a468d6f361c2896e2e00379cc6239f7b587f3fc0e576eff7b6374f4ee6e1b2f86228a31bfd9d9bb40bacbb1842937cd848ba2861c54f2a2880497985ace9be21d2c39898022b0f5c2d5ba1f70e7af42917f1527d62", &(0x7f0000000540)="aa1a0e4cad183649fa6db9cde8325f1805c044a67ecd8bb1aebd0719bbeca52bc9017a1f9a14275d81f2bd11ed2a0bdc34945309a79823fa6c163693a9dfb7a5cb5176271a8b6d3b7e38814faa9983878508f1d8981785ff1aa3b27ee18d4a531d", &(0x7f0000000140), &(0x7f0000000640)="213cdb38d814dad8f712193dd8adc702dc5b26a69293760e23ef98fd9edbfd35b7677e372f24882f28f60a7ada2961e24ac301fce1375fbcd9de1cbfe6b28a425899ccd7209ee9dbedce9fae28685709c0e92a11bbbce5c588f5131f8bd01eab9416a3b57685f023116f835debb1cc70165c7ee95980bf8303941a890e2ba9ab06db9cb5f219d59365a61abe33a5213b95f21ca40d0c5628f09850c0aca90ad3311463580b52862ecdf7476ae470c2e3bbb0e0be136636773e797c3ee10e1b74861550394e2860b8d28e664b38f26cb0f496b20b5fed8b1e138614575f1635c100bbd0afe40ab874be7c919892a2c33cf05d23e6efc6b1", &(0x7f0000000740)="6bbb37901d4fa248a0a91acfaec6a9ddb3cff6dcdc539b88b3752d27ad7b3a8e4af3a775a027fdb9f485a73604fa60a28e841c6cc32a6589bd58b90618233c7cc836e93e5a8b87f4bc59777128992fc5043c7fc17625277c7446b1b9d63efb2cf60aca0e72e15bb20887"]}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x3f}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x42044801}, 0x40004) 6m28.496025989s ago: executing program 4 (id=281): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000680)='./file0\x00', 0x0) 6m26.199315135s ago: executing program 4 (id=288): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x4e20, 0xd5, @mcast2, 0x6}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000000c0)="8e721dacec94c61ff31b504283a51337ebc1c8a50511fa8c10e4aebbca399ef86695b54eccc90fee9b67e849bf90216c66", 0x31}, {&(0x7f0000000140)='*', 0x1}, {&(0x7f0000000300)="f6a540c79fad440ec24468413481a52486a022f253f51bba2c674daea9391c901d8f434d481c2103a1f22ff6ef7e8b31a0f94f67cc9c73d380066a38833b4af8e14ad3186bc674fcf4efed40596f49226c6d22381a316175452bb54284517f816fec23d7698b982210cf977857674656801738aaaf834ea9145f5552f1b905a0897283ca3d72c1dbf1b373326b7335fb540e79c1f94f295724f46baf05ed2b7e397e72e2bc146a7bcb2ffa3f08f98d82d56748777309e6187c18b930", 0xbc}, {&(0x7f00000005c0)="25b4a74f1efe735acae2cadfcff3e355595c354060c3cd37cc5a8e9df51a5c250ec8c0fe0cda5b585e24e45aac2090577f4905559d64a5900aeb31d0e196c32aad641fb287837c4a2ae1bbf8b31369cfd83f738620d3b9cc4ae4fa5313e7b815c831a1a007fb69901bcbc08ed660bd952846461d89bc135c4d19d0d2941cc64cc67eedb569839be380d7026a08f11a5a1b9f2354e725869d81a775fbe23f81c8d1e88675799c0eea886307c51e33c5b05af56f03db47d6b4336e1439", 0xbc}], 0x4, &(0x7f0000000200)=[@hoplimit={{0x14, 0x29, 0x34, 0x1000}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x2f, 0x4, '\x00', [@pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x80, 0x400, [0x100, 0x9, 0x8000000000000001]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x1, 0x6b, 0x0, [@dev={0xfe, 0x80, '\x00', 0x28}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xa5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x87, 0x4, 0x0, 0x53, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}], 0x100}}], 0x2, 0x20002040) 6m24.75351562s ago: executing program 1 (id=292): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x829, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}, 0x1, 0x0, 0x0, 0x14}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000030000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) 6m24.311592252s ago: executing program 1 (id=293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x79, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000380)={0x1, &(0x7f00000003c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000400)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d508891e58a3f117fc203f787901de99a6a1b851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7ffffffff984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38542c35292cf3fdbfc45af8630174371535dbab0b2ec6403658ab3b48a93093de50c743a4f987cc433b546f194f00ba2d1cb675b44bdec6b6", 0x148}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000740)=0xdf8, 0x4) writev(r0, &(0x7f0000001d40)=[{0x0}], 0x1) 6m24.075676868s ago: executing program 1 (id=294): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) io_setup(0xffff12d9, &(0x7f0000000100)=0x0) io_getevents(r2, 0xa, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000240)={0x77359400}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000480)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000500)='syz_tun\x00', 0x10) connect$inet(r5, &(0x7f0000000540)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000001940)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001900)={&(0x7f0000001980)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000225bd7000ffdbdf253000000008000300", @ANYRES32=r6, @ANYBLOB="0c009900080000004800000006003600020000000600360012000000060036000e00000006003600280000000600360036000000060036003200000006003600280000001790a4b5e82e970a460f5bff60b83bcdbfc85bb97eafe8432a0feb5746595aac205fac4db2d66342b48000695a441411135d591b1cdefa5007904985332e16f3a61b76f7d9aa686cc5967267966c484fb3f9bb2167a5428aaf849fc1b1"], 0x60}, 0x1, 0x0, 0x0, 0x20000054}, 0x40000) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000580)={{0x2, 0x2000, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x31857717b80f31eb}}, 0x16, {0x2, 0x4e22, @private}, 'syz_tun\x00'}) sendto$inet6(r4, &(0x7f0000000640)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e986", 0xa4, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000700)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000001740)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001780)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) r7 = fspick(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000300)='ipvlan0\x00', &(0x7f0000000340)='}^\x00', 0x0) r8 = add_key$user(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), 0x5ba8, 0xfffffffffffffffd) keyctl$revoke(0x3, r8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x2adc0, 0x1c1, 0x6}, 0x18) r9 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00', 0x1}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @mcast2, [0x0, 0xff000000, 0xffffffff, 0xff], [0xff, 0x47066fef753f41fe, 0xff000000, 0xff], 'veth1_to_hsr\x00', 'bond0\x00', {0xff}, {}, 0x87, 0x2, 0x3, 0xa}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @common=@mh={{0x28}, {"b11c", 0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) write$binfmt_register(r9, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x46d0, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, '*\\\xd0\xa4\xee', 0x3a, './file0', 0x3a, [0x46]}, 0x38) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) 6m21.491818751s ago: executing program 1 (id=297): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000680)='./file0\x00', 0x0) 6m20.100398372s ago: executing program 1 (id=301): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000300)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000400)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000440)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) bind$xdp(r7, &(0x7f0000000580)={0x2c, 0x0, r9}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r10 = dup(r5) syz_ublk_setup_queues(r10, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m19.305822589s ago: executing program 1 (id=304): r0 = syz_open_dev$usbfs(&(0x7f0000000a80), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000ac0)=@urb_type_control={0x2, {}, 0xffffffe4, 0xe1, &(0x7f0000000b00)={0x0, 0x3, 0x1, 0x2}, 0x8, 0x200, 0x7ff0bdbe, 0x0, 0x0, 0x8000, 0x0}) 6m18.558358483s ago: executing program 33 (id=304): r0 = syz_open_dev$usbfs(&(0x7f0000000a80), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000ac0)=@urb_type_control={0x2, {}, 0xffffffe4, 0xe1, &(0x7f0000000b00)={0x0, 0x3, 0x1, 0x2}, 0x8, 0x200, 0x7ff0bdbe, 0x0, 0x0, 0x8000, 0x0}) 6m17.122694634s ago: executing program 4 (id=310): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000680)='./file0\x00', 0x0) 6m16.727335004s ago: executing program 34 (id=310): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000400)='\x00', 0x89901) move_mount(r1, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x20000, 0x0) umount2(&(0x7f0000000500)='./file0\x00', 0x3) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000540), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) umount2(&(0x7f0000000680)='./file0\x00', 0x0) 12.666980977s ago: executing program 5 (id=1952): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000300)='2\x00', 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x5c, &(0x7f0000000340)=ANY=[@ANYBLOB="f592968c882981f76b20984268e85dd8e4fbfc49b100f24259fe6998a97170ec1904a638f2845e36a147c0bec7f1319a390a014a0ed23afad5a39b68ee6decede5c7f0629a3e2f877b3ab1a57007fb4c2d2266f8a2b841b70281a96a21b8d9c73ac4a3623a102637de45a576c775d875d2119e6b06987024fc4c417e353125e6b1509331d3976ec6acc27bf9abdd428f965565b78d4e75527c40220c80c79285ba797d43e8a71b779c5a47784e4996d6e9c1d12e78aca89f43c2c766914720f95139c208179479934dcb328fad07a211d757a6", @ANYRES64=r1], 0x0) 9.516665012s ago: executing program 5 (id=1966): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]}) getpid() r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r2, r2, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0xff, 0x1, 0x9, 0x42, @private0, @local, 0x7, 0x8000, 0x7, 0x80000000}}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd2(0x10, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000003c0)={0x0, r5}) close(r5) r6 = eventfd(0x6) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000400)={0x0, r6}) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, @private0, [0x0, 0x0, 0x0, 0xff], [], 'veth1_macvtap\x00', 'team_slave_1\x00', {}, {}, 0x84}, 0x0, 0x198, 0x200, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x800000000002}, {0x7f}], 0x2, 0x2}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv6=@mcast2, [0x0, 0xff000000, 0xffffffff, 0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xffffff00, 0x0, 0x800000ff], @ipv6=@local, [0x0, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@multicast2, [0xff, 0xffffff00, 0xff000000, 0xff000000], 0x36, 0x7ff, 0x32, 0x4e22, 0x4e22, 0x4e23, 0x4e23, 0x13, 0x2010}, 0x40, 0xb0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x6, 0x9, 0x81, 'snmp\x00', 'syz1\x00', {0x400000000000}}}}, {{@ipv6={@empty, @private0, [0xffffff00, 0xffffffff, 0xff, 0xff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'macvlan0\x00', 'pim6reg0\x00', {}, {0xff}, 0xf8, 0x9, 0x6, 0x1c}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x81, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400010010000100000000424c97e8acf6a4f5b3587cbe64725c00000000000200000a1400000011"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000000) 7.271210548s ago: executing program 6 (id=1977): mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x31, 0xffffffffffffffff, 0xcee90000) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000910000000000000000000a58000000060a010400000000000000000a0000010900200073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000001508000140000000090900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 7.011797271s ago: executing program 6 (id=1978): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15b, 0x0, &(0x7f0000000740)="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", 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="003a00004f523e24a11b98fadb9bf827b68b370c88ac7b9c649a556a86a505053293"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000bd68a0edee1d07a38a6e23a7b20d00000000000000c34ae59845d71c47fb16a6f9838aa327d8be7f697b61e625b95b17414761adddcdcf68069e6060ad000baed274b297617b3ebba12a85dc9d0a87dbd5a870185122b16b6bbc3bd79d81ee089397fe7beae0923e83922158af170f56ce99317225bf29209a73ca0bb8a83abe625886edcd88472365e7d0d446ba8e6b6bac95e38b5ce36b26ef983ce70f96fe0546805a6fd21067b7994b00d18e512cb82101c91a817219fa4b9118ff2bcb5a5cbe6e17b1d9c4cda1a619ce4115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c00000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/128, 0x80}], 0x3}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000ac0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0xa4242, 0x0) sendfile(r4, r2, 0x0, 0x1002000ff) r5 = fcntl$dupfd(r4, 0x0, r4) close_range(0xffffffffffffffff, r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r7, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000c40)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000c80)='cdg', 0x3) bind$inet(r1, &(0x7f0000000cc0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000d00)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0xffff, {0xfff6, 0xd2a}, {0x9, 0x4}, @rumble={0xc, 0x3}}}) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) bind$l2tp6(r5, &(0x7f0000000e80)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001100)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@o_path={&(0x7f00000011c0)='./file0\x00', r8}, 0x18) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x100, 0x0) 6.481034867s ago: executing program 0 (id=1982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xa4, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x80000001}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private2}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xd0}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}}, 0x0) r1 = epoll_create(0x6) r2 = openat$vcsu(0xffffff9c, &(0x7f0000000240), 0x100, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000280)={0x30000004}) 6.23573812s ago: executing program 0 (id=1984): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES64=r0], 0x30}, 0x1, 0x0, 0x0, 0x8800}, 0x44090) (async) io_setup(0x8, &(0x7f0000000480)=0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000e40)=[&(0x7f0000000e80)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0, 0x0, 0x2a25, 0x0, 0x2}]) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) mmap(&(0x7f0000472000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) (async, rerun: 64) lsetxattr$security_capability(&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) (async, rerun: 64) openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x400000000a882, 0x0) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000400), 0x4d0c40, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) openat$cgroup_int(r4, &(0x7f0000000000)='cpu.max\x00', 0x2, 0x0) (async, rerun: 32) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000004c0)={0x0, 0x30b5, 0x0, 0x2, 0x148}, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000600)={0x2e, 0x42, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000680)=@any_dev={0x3, 0x929, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4}}}, &(0x7f00000006c0)=0x0) (async) r10 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0xb816, 0x20, 0x4, 0x255, 0x0, r4}, &(0x7f0000000780)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x2008, 0x1, 0x328, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11dd, 0x1, 0x2, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff82, 0x1, 0x0, 0x1d8, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4413, 0x8200, 0x2, 0x2b9}}], 0x1, &(0x7f0000000ec0)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0xb87, 0x0, 0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000cc0)=@getchain={0x54, 0x66, 0x400, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x2, 0xa}, {0x6, 0xfff2}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0xf99}, {0x8, 0xb, 0x40004}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x10000eb}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c0d1}, 0x4c840) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000000d40)=0x80000004, 0x4) (async, rerun: 64) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000d80)={0x1, &(0x7f0000000180)=[{0x5, 0x0, 0x1}]}, 0x10) (async, rerun: 64) bind$inet6(r11, &(0x7f0000000e00)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffff}, 0x1c) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1, 0x0, 0x0, &(0x7f0000000c00)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x20084884) (async) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r12, 0x84, 0x6b, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @private2, 0x9}], 0x1c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r12, 0x84, 0x85, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x1641, @private2, 0x8}}, 0x4fff, 0x9}, &(0x7f0000000140)=0x90) (async) r13 = syz_open_dev$usbfs(&(0x7f0000000240), 0xd, 0x115f80) ioctl$USBDEVFS_IOCTL(r13, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x638}) 6.11490711s ago: executing program 5 (id=1985): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000001c0)=[{0x0}], 0x1) 5.925008044s ago: executing program 6 (id=1986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) getsockopt$sock_buf(r0, 0x1, 0x37, 0x0, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {0x0, 0x4101, 0x21}, {0x18, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x8000) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 5.840399317s ago: executing program 5 (id=1987): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @raw_data="72ed754c7f8e5c4b474fd126a3fe9b711f572b925f28b458cac93e432bb57ef39b1bfba2167c4185d7bbc92e07aa16cf033ac0ee2bd34a4fbf466ab574e85930d69c6aeb06f51fbb77993ade83184e1d394a6a7a2254384c92475b2394111d8ec6a4ed1e10cccbc26bdc2467f7154437318592d2797ce955b9a5d7b4c81df762dca734eb24a26a2f0fc222aab195146964d8f6d3c1ecd1552c44916247f7f7a98f11064a60dee2c5505acfbcf07f98a2f8f599884ae613d16e5da439b0a2de9d026ce53581ae1446"}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000440)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000480)={0x2, @pix={0xaf92, 0xb, 0x66686c0a, 0x7, 0x3ff, 0x2, 0x4, 0x1000, 0x0, 0x2, 0x1, 0x2}}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) accept4(r3, 0x0, 0x0, 0x80800) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x9, &(0x7f0000000140)=[{0x1, 0x4, 0x4, 0x9}, {0xadda, 0x5, 0x4, 0x3}, {0x7, 0x4, 0x4, 0x6}, {0x400, 0x3, 0x2, 0x80000000}, {0x2ec, 0x3, 0x1b, 0x10000}, {0xea1, 0x5, 0x0, 0x1}, {0x100, 0x9, 0xb, 0x10000}, {0x4, 0x9, 0x6, 0x274}, {0x4, 0x8, 0x80, 0x2}]}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="600000000206030000000000000000000000000011000300686173683a6e65742c6e657400000000050001000700000005000500020000000900020073797a30000000000500040000000000140007800800084000000078050014"], 0x60}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f00000005c0)={0x84, &(0x7f0000000680)={0x40, 0x11, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000740)=ANY=[@ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000240)) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000840)={0x8, 0x4, 0x3, 0x747b, 0x5, 0x0, [{0xfff, 0x5, 0x9, '\x00', 0x2088}, {0x3, 0x3, 0x7fffffffffffffff, '\x00', 0xc80}, {0xd7, 0x8, 0x9, '\x00', 0xa02}, {0x7, 0x6, 0x5}, {0x8000, 0x5, 0x8, '\x00', 0x2080}]}) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, &(0x7f0000000200)={0x80, 0x80, 0x100000}, 0x20) 5.719678605s ago: executing program 6 (id=1988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x40241, 0x0) r1 = socket(0xa, 0x3, 0xff) socket$inet_sctp(0x2, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50) r2 = syz_open_dev$sg(&(0x7f0000000600), 0x0, 0x401) write$tun(r2, &(0x7f0000000640)=ANY=[@ANYBLOB="141bdf003060", @ANYRES64=r2], 0xb2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="600000001800010400000000000000030a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) connect$inet6(r1, &(0x7f0000000780)={0xa, 0x4e21, 0x10000002, @ipv4={'\x00', '\xff\xff', @empty}, 0x800100}, 0x1c) sendmsg$key(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000001080)={0x2, 0x8, 0x80, 0x5, 0xf, 0x0, 0x70bd28, 0x25dfdbfc, [@sadb_sa={0x2, 0x1, 0x4d6, 0x6, 0x6, 0x43, 0x4, 0x40000000}, @sadb_ident={0x2, 0xa, 0xb5ff, 0x0, 0x5}, @sadb_x_policy={0x8, 0x12, 0x3, 0x4, 0x0, 0x6e6bb0, 0x8000, {0x6, 0x32, 0xf, 0x7, 0x0, 0x7, 0x0, @in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x12}}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}]}, 0x78}}, 0x50) sendmsg$key(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x48}}, 0x4000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000980)={'syzkaller1\x00', 0xc201}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000009c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) statx(0xffffffffffffffff, &(0x7f0000000ac0)='./file0\x00', 0x800, 0xc0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000c00)={{{@in=@local, @in6=@mcast1, 0x4e23, 0x0, 0x4e21, 0x8000, 0x8, 0x0, 0x20, 0x87, r6, r9}, {0x7, 0x8, 0x5, 0x3, 0x7, 0x5, 0x6, 0x8}, {0xc, 0x0, 0x10001, 0x3}, 0x3, 0x6e6bb1, 0x1, 0x0, 0x1}, {{@in6=@loopback, 0x4d5, 0x2b}, 0xa, @in=@multicast2, 0x3500, 0x2, 0x2, 0x2, 0x4, 0x10001, 0x5}}, 0xe8) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000d00)="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", 0x118) connect$inet6(r7, &(0x7f0000000e40)={0xa, 0x4e23, 0x8020000c, @loopback, 0xfffff803}, 0x1c) syz_extract_tcp_res(0x0, 0x5, 0x80000001) sendmsg$nl_route_sched(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newtfilter={0x64, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xa, 0x7}, {0xfff1, 0xffff}, {0x300, 0xffe3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1fc}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xe12b, 0x7, 0x9}, {{0x0, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x6, 0x34}}}]}]}]}}]}, 0x64}}, 0x0) r10 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r10, 0x6, 0x17, 0x0, 0x0) getpeername$unix(r10, &(0x7f0000000fc0), &(0x7f0000001040)=0x6e) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209"], 0x0) syz_usb_connect$midi(0x6, 0xc3, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x582, 0x1b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x1, 0x1, 0x8, 0x70, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0xbd, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x40, 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xf8, 0x19}, @midi_out_jack={0xb, 0x24, 0x3, 0x1, 0x4, 0x2, [{0x1, 0x2}, {0x24, 0x5a}], 0x5}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x7, 0x12}], [{{0x9, 0x5, 0x4, 0xc, 0x200, 0x1, 0x1, 0xf, {0xc, 0x25, 0x1, 0x8, "c14c5a1cb2772f73"}}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x9, 0x5, 0xb3, {0xe, 0x25, 0x1, 0xa, "4d6d635dbf85c222ddcb"}}}, {{0x9, 0x5, 0x1, 0x2, 0x400, 0xc, 0x80, 0x7, {0x6, 0x25, 0x1, 0x2, "32ef"}}}, {{0x9, 0x5, 0x0, 0x3, 0x3ff, 0x0, 0x81, 0x0, {0x9, 0x25, 0x1, 0x5, "f9df06c3dc"}}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x5, 0x6, 0x5, {0x10, 0x25, 0x1, 0xc, "23abce582e06438333a7a3f4"}}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x1, 0x2, 0x1, {0x4}}}, {{0x9, 0x5, 0x3, 0x7c062e7b6eff4ac9, 0x40, 0x9, 0x3, 0x9c, {0x6, 0x25, 0x1, 0x2, "ccba"}}}]}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x9, 0x3, 0x3, 0x8, 0x9}, 0xcc, &(0x7f0000000180)={0x5, 0xf, 0xcc, 0x4, [@ptm_cap={0x3}, @generic={0x99, 0x10, 0x3d0888976658885a, "a24469068e7154550bf46e6539f3475eac31865416e3273a986ca36da75e8160e3c99b09d8b350bc71910229d23836eb50cc65bbc8ff7f40d42b43fe07b4e0e46f326e0b66e9d0efb66378659b035c274ec3181b9f19e906074a65cb0217f509ce6cf4902e31f5fdc03229116d0ec8558ec1bec3c0249b8ecbfd601f9b2083bcf177049ba4376de8c06cc996060e9bd68697a9d6c8a8"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x0, 0x3d, 0x47a2, 0xcc}, @ssp_cap={0x20, 0x10, 0xa, 0x1, 0x5, 0x6, 0xf000, 0x8, [0xff0f, 0xf0, 0xffc000, 0xc03f, 0x7ef0]}]}, 0x6, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4ff}}, {0x91, &(0x7f00000002c0)=@string={0x91, 0x3, "534d52fefa1e7ba0097429408a3793cfb873c0cad8d182f087bf24343abf540ffd96e762e273ace472973e57a5cdb98058ffc255381e30b95d3964f6e60aa0d43302150eeac28b5969952e966b5eda7125141484e1a18c82a35722c1dc1b4b431befba606fb12091cd5d5ce66ecfb293b152235c9974fb97da874afae77e5e5dbacbc978427d4090a2a4df8b962614"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x810}}, {0xb1, &(0x7f0000000440)=@string={0xb1, 0x3, "8924d7d69fc662b8654577cab4553bed52d90088b37b64bd534b910d9a538f6b293af1e955df31b766e9f84cf9092174475b60a8c1f69d72017bcdb70db3063027497474f966741a5e7f177ff5dafce2b3ee892ef3b31b8cb592eb051737c7d1691c96f22ce3b2190fa2bd825129ea55d192919026a9b614a8659780a8fbc48b22184fbfd8bb419245dbb14100edf054c701f06606a3909814172c8a85176b1c456a52cadcd19d448c01b7fd9d1fe7"}}]}) 5.104178391s ago: executing program 0 (id=1991): r0 = syz_usb_connect(0x0, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c0001010080fa0904030000010100000a240100010a0002"], 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x26, 0x0, 0x1ed, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0xff, 0x45, [0x1ff, 0x200089ff]}}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fchown(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x8000000000010000, 0x4e00) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYRES8], 0x158}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) getsockname$packet(r5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket(0x10, 0x803, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6c000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000240007800c000280080001c0e000ee010c00018008000140e0000002050014002000000005000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0xc085084}, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x66) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r9, 0x714, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) ioctl(r3, 0xc4c85513, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.656568139s ago: executing program 7 (id=1993): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x11, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 4.152054345s ago: executing program 7 (id=1994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102100, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/kvm\x00', &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffff9}) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x29d, 0x0, 0xa}]}) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffd000/0x1000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102100, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8401, 0x0) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f00000000c0)={&(0x7f0000000040)='/dev/kvm\x00', &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffff9}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt(r2, 0x65, 0x8, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x29d, 0x0, 0xa}]}) (async) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x6, &(0x7f0000ffd000/0x1000)=nil) (async) 3.527977971s ago: executing program 7 (id=1995): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000180)={&(0x7f00000001c0)={0xa, 0x4e20, 0x7c, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000000290000000400000084023004003000000402000304", @ANYRES64=r0], 0x30}, 0x800) 3.33356322s ago: executing program 2 (id=1996): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15b, 0x0, &(0x7f0000000740)="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", 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="003a00004f523e24a11b98fadb9bf827b68b370c88ac7b9c649a556a86a505053293"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000bd68a0edee1d07a38a6e23a7b20d00000000000000c34ae59845d71c47fb16a6f9838aa327d8be7f697b61e625b95b17414761adddcdcf68069e6060ad000baed274b297617b3ebba12a85dc9d0a87dbd5a870185122b16b6bbc3bd79d81ee089397fe7beae0923e83922158af170f56ce99317225bf29209a73ca0bb8a83abe625886edcd88472365e7d0d446ba8e6b6bac95e38b5ce36b26ef983ce70f96fe0546805a6fd21067b7994b00d18e512cb82101c91a817219fa4b9118ff2bcb5a5cbe6e17b1d9c4cda1a619ce4115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c00000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/128, 0x80}], 0x3}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000ac0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0xa4242, 0x0) sendfile(r4, r2, 0x0, 0x1002000ff) r5 = fcntl$dupfd(r4, 0x0, r4) close_range(0xffffffffffffffff, r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="5c00000010000100297000fadbdf250000000000", @ANYRES32=r7, @ANYBLOB="1380000023b205003c00128009000100626f6e64000000002c0002800800070081000000080003"], 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0xc094) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000c40)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000c80)='cdg', 0x3) bind$inet(r1, &(0x7f0000000cc0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000d00)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0xffff, {0xfff6, 0xd2a}, {0x9, 0x4}, @rumble={0xc, 0x3}}}) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) bind$l2tp6(r5, &(0x7f0000000e80)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001100)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@o_path={&(0x7f00000011c0)='./file0\x00', r8}, 0x18) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x100, 0x0) 3.218878477s ago: executing program 7 (id=1997): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="891a7b4a65068cdb9f9f8f83c0d9", 0xe}, {&(0x7f0000000140)="65d5", 0x2}], 0x2}}], 0x1, 0x8000) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x128, &(0x7f0000000440)={[{0x121, 0x4e00, "6f7ea2eb64d4decafb5757b8f65c203b4958a09f32b6db3328c92fd6fe034383bbb2e8611062fb1979365cd2374a45e6a2b44b3091df40d86e4a2a591208b15bf6abffffff7f7045a00def3fd05570d9e35529281ed11ff88e97f82e05000000fb13820000f93910add07a36fb0aa11d359f7630b621129ebfb8752b1c83ce368d4aa06c7e7e320d8de5372f8dffa2dd00889e030000000000000045f685eee93a06964705b449f6969e000000451a61f8a70b4ef6af67f184576a82d8c5adb83bc280b5431b7e5c78b2f949cd2ae89d378ef2791f0aabe139f054d4996653962a093252afae885fff3a28488bef8aa4598e4860193a0b000000000000007297329952e0cd7c7276ae9f03365f79e732a513b4f84dc013f05183b34b3677423144"}]}) 2.36845232s ago: executing program 2 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$video(&(0x7f0000000180), 0x7, 0x800) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205647, &(0x7f00000001c0)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0xa00965, 0x7, '\x00', @value=0x11}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'netdevsim0\x00'}) r3 = gettid() r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x101000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x200, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'nicvf0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000240)={'netdevsim0\x00', @multicast}) r8 = socket(0x200000000000011, 0x4000000000080002, 0x0) bind$packet(r8, &(0x7f0000000600)={0x11, 0x3, r7, 0x1, 0x52, 0x6, @remote}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000140)='net/vlan/vlan1\x00') preadv(r0, &(0x7f0000000680)=[{&(0x7f00000006c0)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x800000000004, @thr={&(0x7f00000002c0)="e1e444dc3f2a77c533bef283a920f6a36f498fb4a9961dd3b4aeeb8d738d500aa2fabcaab72bd37e0ee0c91bf220bc182fc56f94fd78221df09ec3fcd5cec157ebc8b35df9a885cb6fd888dc23bdb7732a022845993ccf2fecf45c7181ac13e5b8ae8582b0d4252399308363973d6ae2c9f7c7a7b5cf4569564d22fe7b9f8eacb95e8c87012a20748f43839045d7200335ba0810835d20c3073cf262a49ed41406ce419d179065172e35208e045607a89ae334641ee7870be3299e7b2df253098889d995254bacf42789e54d8b70a065c2a239aa", &(0x7f0000000840)="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"}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x4, 0x10002, 0x2}) mprotect(&(0x7f0000189000/0x1000)=nil, 0x1000, 0x300000b) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x4000040) r9 = socket$inet(0x2, 0x1, 0x100) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000200)={0xff, 0x70731f3e, 0x2, @stepwise={0xbdf, 0x7, 0x900, 0xffffffff, 0xd, 0x7}}) setsockopt$sock_int(r8, 0x1, 0x53, &(0x7f0000000040)=0x1, 0x4) connect$inet(r9, &(0x7f0000002040)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) 2.314766759s ago: executing program 7 (id=1999): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000100)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000380)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000480)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000004c0)=0x0) r6 = dup(r1) syz_ublk_setup_queues(r6, r5, &(0x7f0000000500)={0x0, 0x49d4, 0x800, 0x1, 0x32c}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x6, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa348, 0x8, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x4000, 0x3, 0x0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x82, 0xba}}], 0x1, &(0x7f0000000880)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x2, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000900)={0x1034, {0x2000, 0x0, 0x15, 0x3776, 0x5}}) socket$unix(0x1, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0xf, 0x28, "539f1721036d2cf61daa51081597ffb43c5f53591287b492290cd96962713806a17ca2bed89ff947"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.223332597s ago: executing program 6 (id=2000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2501, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r6}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000740)=@filter={'filter\x00', 0xe, 0x3, 0x3c0, [0x0, 0x200000000640, 0x200000000670, 0x200000000790], 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]}, 0x438) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_getaddr={0x80, 0x16, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x40, 0x10}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xfff}, @IFA_RT_PRIORITY={0x8, 0x9, 0xb5f1}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x8003}, @IFA_CACHEINFO={0x14, 0x6, {0x57, 0xea4, 0xd, 0xff}}, @IFA_CACHEINFO={0x14, 0x6, {0x57, 0x2, 0x7}}, @IFA_CACHEINFO={0x14, 0x6, {0xfffffff9, 0x3f04, 0x240, 0x10000}}]}, 0x80}, 0x1, 0x0, 0x0, 0x68001}, 0x8000) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000140)={0x1, 0x0, [{0x28e, 0x0, 0x8}]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e20, 0xfa, @private2}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000040000003c000000000000001800000000000000290000003b0000002900000000000000a8000000000000002900000004"], 0xd8}, 0x2004c084) 2.15585405s ago: executing program 2 (id=2001): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@llc_tr={0x11, {@snap={0x0, 0x1, 'S', "128e89", 0x11, "9d8b"}}}}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x600000, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x1e, 0x4, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca58c30f81b6079f}) read(0xffffffffffffffff, &(0x7f00000002c0)=""/53, 0x35) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040091}, 0x0) mq_notify(r1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000006c0)=@req={0x3fc, 0x4, 0x0, 0xfffffffb}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000100001040100000000000000000100000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) 1.982420006s ago: executing program 0 (id=2002): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0\x00'}) openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_setup(0x8, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd/3\x00') io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x40004) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89ff, &(0x7f0000000140)={'bridge_slave_0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x777) ioctl$BLKCRYPTOIMPORTKEY(r1, 0xc0401289, &(0x7f00000002c0)={&(0x7f0000000180)="6d78f4ccd9aedca17541b45e0ded7573b04cb4b622f89252bcb0c206b3", 0x1d, &(0x7f0000000280)=""/10, 0xa}) write(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000840)='0', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x20, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x7, 0x6, 0x6, 0x1, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @generic={0x1, 0x7, 0xe, 0x3, 0x400}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.664058677s ago: executing program 2 (id=2003): add_key(&(0x7f0000003040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000000)="00dba90ec815c305255d6e8542ddcef7d4a34a039f1b99832c6b2f44018e8412be2aa8505112dca2a4fe4dfa55692a6e5bbce07e643975ae754ede275e314725656219806e0c", 0x46, 0xfffffffffffffffe) 1.598057117s ago: executing program 2 (id=2004): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001740)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff2, 0xc}, {0x11, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 1.468357581s ago: executing program 5 (id=2005): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000440), 0x0, 0x80001) recvmmsg(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1}}], 0x1, 0x40000141, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r4, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000340)={&(0x7f0000000100), 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x6, 0x400, 0x6, {0x0, 0xea60}, {}, {0x3, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1, 0x0, 0x1}, 0x9, 0x2, 0x0, 0x0, "e479d5e3ec57899f7df191fb577fefbc86575b5fe550711eab874f382b6c4a2f1800ae910042e7f5bd291a6bb5df4a69014e0a8e28722d51d9a90998399231d7"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_fuse_handle_req(r6, &(0x7f0000004180)="efee0d4b83d05176f89facd925dab80e08f32e7c520897b698f4d81968665df1d057c2a25859a797a27ff446db09899843d77db086d52211717bbaf3a235441919dbb9b5caab91a87e8e84d2cc372a92b6850368731d99ddb0b2b7d8558ae733b0dddeae74ca9c73433deb773042642d156fe6384ada6d3e3d40f02d1af42f2f188341decc91997b0f2bec27f2036428ecbef2f8faaf9c02cd6aafea6d37e53683e89b6baf6c0373292ac5c0ab3e18e2d97025ca8db782fe67e5dc304be69319d1bc14d5fd7c779268ff477953d55af5bbcdec5c1f044e3922a7e8acf3b0e3724851a130b1b3ed467a7ba92465bfde9bbfcdd6c6408650cf0d7fb4b050d223e2d11679d3c624a802c8c0075391991b158a6d6396e16ec6fbfcc9cd2427b0da19248d373155bcff93ba8b3878bdf3fe9325eaa0abb09e835f97c5ddd9da414011915d18e8194fc183c95f9f4e4f4d60ed0b5e6a1e45189086e63504e38d3305ab7c09aaceb09102c33a8f769871b235742f41b7d805713d100a42e14bdc28a37dbfe4149ae48312ecf665106550366b23442393211f520e7775fd5d45992242ae89f93eb30f11fcb00468d2a8d9ad2305a663b673b5debeee7b424a2350e58d83e829c6490946bef60513e2df5c4763f6e9b743e57b28e19fb37171a83d6e3e2cb9f1a91467cef3fbc2939fa4826fefdfe64a1678783ce057a82fc9e5927b4ae47891f474815087404a22d08899b24478fc1366615b717ac6771f41b57d49573f2900c9383920d6a67415d44a19c6115e64ad2a2ab007923de8dac7a1d16517717c1a4cb34ca83f81f09411788d5a4daaac955b8630ac0f618892957e0f4dbe4fdb19aaedee968f8826920e2abd46420e9faa85fdd647479ab812a8dfffcfa406cbf2e30f32ad08df8ffe88bd5566c0e7553c949b6f07958467b159b29a944f84fefed95dccb1fa8d05f9d0297dc3b4f9338c62b1d0a8eeac62bc402733c1e0d4e285122b3d5252022b67ba7b65b413a3f3ce6210247685fb36f641fcd48b777c7a2a950f7714a3f1cba09963aca2962bebabe9a4c403d1c066717e0ddc67a573c881b6c6e57bb009826eef7423aa5e23549e5c812b044eee2627521b6e2ccc163511e864ded204e2c5be98958bd83f130d165ce83c875af84e5cc2c8fafd3859af05dedbdd9e4d0cb991fe2c60b000d63e52e18c399c784d00a544614bb13d1ec0266821abd8aed8228fe527182b6248bd3eb08b5bb5928b52f4b736da985f669bd7dcdab9d6db0226f08b66d3fd62c9f06b9d94aeb60c9fa56dd862fe967752456d25aeeb308a5fe306ffa800fb825be3691c1e765c38e0c30adc5d5c826f3002dd5a1343d26c293cd954b2da693510159a5e189d7a625c440cb297a30932d2870769479437637b61465b91333fafbb9f0d4cb461858c18ef28e63285ee502025295ff9b6c0b3d528381a57bbff6c4cd67ff46ba5a4692c4ccc913f5ab12e464d1be766c8e9fa53020907af63d223b6cd78f6648cbf72b7543766d503c905f805b72bc4b72f831c8cee014437e9dd1fa4c67e5618bef5f63c837791a8aa94796833c663ddc0ddc36fd12dde14902939312787c393259f25f763456370706b8c488677e9ac315c06a1273ed1fdecf6c414c5018ce14c13c4dced915dccea6fdee33c1ee93ced37fd34b6e565bd4c4024e7a0f4565afb9112f179850ff6be4b5d758d560bb405e55e72d1349aa39e900edb87da315b8a6d243be5b954817e6f0102f9aa90c5a55af25bcdca07fd63f0870f1ca2d84e29bcca2cbaf9f52582c4aeba796b19655c139212bf5163f63ae783ac87db2fa1a56d169169604d199cd44fd2e9aa32bdf7a695930647f7f46d542115b02b0cdc4de531494306db3bda4e9de063876e7830b03d58ee9a13779af4f0a4ee5befc789efea8e0afbddabdd5ca5a05a8d64d2c8c777642bf89a3c06cee917c5b4f2672baf04ebc2ed9c0ae1a65f4b1a8b6596970865e48ff8d03baf8378a3a56fb371062aaa6363f038ce3646a5caf2a0df2b2e59cd56db1af20dccc1ae31c5c95886b53a38a278183117fa6a014b50c29f2e09d3b4a2d7a09d3b5907089c2519b2c0479138522a080f3203052ce5b7619407368d9315c74c8c52e4475f6c9f8d5847d245ff5f3330c89d74b636f535ca8d09d9889fd12c63f9f0a8dda717d697e1759d3cd69cef1daee5656ae961079a1e020ecea9efe61b3bb64eaceaea300147ad1f53eba2459dea002740dc287ef7c0443fc84677a4d4391aea96eeaa2d17e9f305499f663e212001c8bb191903e812b07a5e1823a862b6dd1829332495c532093cf41344f56b524b6a4d1c04ff2b7ddc627fb20ef271516f2d9774d7427e1825094f5d9c4b65fc9940a7882fce6a26e3f523b69864a72822ab55ea6c4849b89d20249550cd6cc29ca2462ae1f728a7196479a90ad0572cc141349c28d21355c4ce2fca17e73a100da6e5508f140fc5e41c4d326090fb05fb28c819f1e74443e11bfa6a81a7241877c1c32b9c8b89ca457ecf79b64599ed15de989dd6e98b24889bec7a19573b59b83c0652356ee24ce75bfbafa8d089c14c767445713c39f5a96f330a8ea83a9dba2550afe394c1c6ed0712aeb86c4d9a4ef1ae4ff8cb5746e9000af500719afabbdf99516815467d4507975b5fb7a1175ae94c68a1f43289b71d91f08184f57b53b168fb1ccfc88229b0d188198ced60bfa08b62cc300c07cbc193c9f514cdac2cbecb78d75fb0f748d547a84b375edd978e314c778abe31afd2dfb1c1944253057e51f544f9ad1b81659889c14867a8c86b8b5def96ea90d3c969646bf76d620d68a07fb6b438aaedcd33135a10b876bf911e89f6fec781cc0ec7b09650c8c93c41ce920c92c76f723ae850459b9932e4386ff4f165e4107f80b772f2ce77b0e87fdfe4ee9889ba2d5c4f8e52b9f477b3bf44a3784f20a29378944ed9b0dfbbc552a259fdd3d1412c370348d1da358d810285bd4f70ed0898330772e1e835eb0e0527a484c359601f72a0dc21646b8ba39986b027fff7bc1b82dd334a7d66877cc5d3ad6f3b13349885c781d79dbfaccaff9b522c1e1675a27d9b74cdb676ed87ff7db4e1c3f0504794070b6eca4de897c3ad75a5ef48a3fc9175ade66c5760a552a74a4f5f9c6eac0eeb0359234b1f6c2fb2758b0a2bb6577678dd7e2c9ab31215878f5d1a13c6f2527b7756dd49dd8fa5dc77c134cc5db33d2acf5ec00d52b7671a4d576024aa76f0c55f153d79ea75912b3adb554b659096d0391db25d36d42a6250ec190cfd74f82ac14349fa39f11c1b08b601ee4e885c2667768cca021d9910d4b7881504bfe1abf4ded4b6dbe48d6c94414116b25c27a185f0f6f3ac4e442e2148d83a328768adbdb87ad64acaa7a2fd8e10e8e2fc0bedb9335dbe24c7a9ecbc1f0a4cde1717318603d43eb3fdf00b44eaa931bda4cb8f552a123b7ad21aae7ee7ede4047db52b54e11b51c5de364f75803809da505189087c08c508c83014158beb6d8eab93edd5658884b24af1bb493f82e9548b3dfe6c874f9e9ed1d42ace44538d546629fe92696b8c5a549e7854c06922de87851c718b2489759b5b1db4d7722c1533fbe57607bd9da5e0e8b392d81591d47d56a286f358917f69c68770348871ccca29209181855b26a25f8852e6d6a9e0c6dd5c96b9b0ab08a1919cd2bdefacdc1bbb7081782e0389943b2206d27e09e11387924145a79ef21cb31f782609b088ed4577e7208a28d7e5bd391f872de8bab33fdaa08b2f2bbecaaa8b909617ca163e4c9a3f7328d471e30c4c640b40addf57ac650b36e3900405a04a0817bbea5ef4a81461305f9fbd7c57d7feefd4f67d3785270d3d16075fca05dad439d999294cf12eaa6ce89468a24fe13c1583a7881088c63852cb0f01781d9f2a8553b781d953bed50a47fc689e6d2756ec5bc930d2029dcc48e059145ad1525917b0ba6a728e908a3cd80d213849d1c2a3201628a7a9a8cbe25f1e43f8883303f175843ee2685afcaa3f77fdae1b3b127b5f3fc84342069ebe1c386e3c29efe56cf99c9c324255b373028d3bad7e095e06894d6019468bcf418580bbf1ae887966f72980d2d9e6a77fbe92138448eefbce716e401fbd7f95997ec1fc02470e2539942a5db3dd001dea86681cdae6b242928465527365b310cc3d2bf10af4e003ec20446cc102a044e0edbf749171348c492e6d4785962d0457240bed02aa791fd62a077ee5e442df881361d1076d0368e421bc96353aab61082a0c5b118e0b01466161bf9f420eca0c917e0df1836189d4b7105b4d69a9e8e745c1ce824dec0f44d15f47e5fd567fe799a6374aaa47d392218a0bbbfc960d9301e1d5524c5e5cad10aec1bc947e0d5467126834b3d17385dbc9107be0d5e14b48dd49d2d8ea806608b4a5f141d46f0a4b778d0cb47daf4f8fd823214fb4e0d8fd782997ca33e1d0329e815bffbc938dde2a61a4a440618ff8cba7d67460daff103efbd90bb922833f3d38693f4f001af4a4635c8b9af4fbe374f13b1073bace968f0aae76b86f323f61800ee3e62b3fd0c7bf2c2cfab282f60258f45344e6eb7fe0db27b1ea5a95f9b75b8dfd7d4d8e7ffcf0ab3bc9004cbfe4babdc085ce0eb4d12c7b93fe9980ae38fbe2cf791e8adc9cf0685ef31741f341b86b054d45ae9c9584ad3c8b7945be15050361cad94886023d25594bdbe43b4f97cc0c0b9496eef9703d247e80ad2b4ad7fceaa603f5276a8324338974df5599be4a83ccd0d963688a86d4de56c63c5da3633ab6df2847b17bb6f92fd7dc2f3986a88f0d1d50645fd15e5f0d956009f94bb2b1d9f0b9e51eb073688cd601e65b452a04cb9ff2ab2222e9d8a832d61336ad1030700a19770dec17151d3581c208807b6fde0d1d5362e08d4b7107ee977fa73490c4e7bc5cd23c89b8d5bef9809f7bc79ab227b1c08bb86db5a561aaac76d432dafac3a57d92642415acb9cb0339d6180c9216cb507cff38b9600394771d9898bede6f5577d0ac122dd6911ee501ab6095e0455bb5cda6e44861e038866002bb0b492e336d1127f5e1c9d5a7b3059a9b306621fe547404e89e792105ebb9357c0feb94a7f7c001de408d62a269c17f11a74bae2e01837b123034cfd641143900594ed96158705a0de85eb20dd798aa0c0c239e24ea1534c8a20874a93b761e84ff0ef5b7f69ca97ba532a0b7ea14b54749bf6cf29abb71fdd2c43ae7afa717daa9111f06041457d6bb4b2d0e9f23b28ee512bc53f7c1dfc50295833e3668f9c24fdfe95994e16f940bfbc196c7bba0f6e8719ce435866907bc9aa5f19801fb7a832d3f06dc21305dad16355975534d4992b5fad3e3796c6fde3830f9093ca316680dad0b6fb3d88ad3ae5ce6096958a80b78ad05e4817f23ca9d09d17f66108e47c120162274fad2defbe4d63ade5455fff235ad144938d8e03c5fce5e0e9398187ef5a1fa451f3fb29fc6e1eaa676f501ddfa4879233b94ddda0d11da65a44f8ac5d58bcaf2ebd9064775c317f97f3e4e9efc75f7dc1e969961a37023dc9c0bd7e66b2526283b8d147eecaff8d2422a9093a4e4b066d9cefa26dfcb02c1109fee4cb4945c1ee0a48746a48f806ef19aa77aeb826e8e9a2bb412116a6b4287ec45c43a03047277d9f5d972b377bc1089d06d2f4eb8663fcea2a15bca90126d52cfd92a8203e6f9d194929b8b4dde2cff452320eb28fe0b0805e0ec488f23637eb99ccf71e1cf90818d13baf3018ab712f5752a016e504024fcda9cf465b09de96cf33509d7200a38f889978971fa2dab416f73e0a1dae1b07840a5904d0f102f50c297b23f786e4e859908620835279f2b2f49451df97ed9a0b5343efe833e34d4703371192536696b6ff9f31285c63930d0218a5970d6343be67ffb231ab48b887cd26a871ed100606e095676be77cd72f8e4bf992b10da073584d8692d4e5216243a9ca4b2451a5c5cc8498d82d2b8eb9d7ab617d73110d9561ce5a3b96f4ae980dc43f3c89c82896620e803164f930fe3e92519383b1ae26983ad2995411098c52425ea62e2e501425845df455ab6113ccbc53d74e3cb96ce7a4b3265b8d511642924ff7fd5c75333ee8c6c41b1499075f0c632c09493171151f05bfb4c07f2dfcebfe3dde44c1fbd7163af05a6865a08d76a8f4028c6d29d7b2f8a6c75b1d981754f02d2388fc7ad991be39a58a3e44b967a2cace84c86b692119eab4c8fadd93ab9f8f6835187fd9b3da7572b4aad817517f2994900067440795923140dfb50e643fe5443b52f1fbdbada7770b47dbd2ae6b4bff7b23cbf3d686409568f4b679ade04b96bc379ce176f7fdf23502f106db4c0e04722f5696ea3af31d15d7ec02845a903b137584f1934df23f8bde9e5f6d31f115f36e42cd743c49f21267a7a08104d55c64f99cf197b806cc0d1a33daad58cc330dc0be10e5a07f0e54803c6d127e41d196b113a5efab924006050fce798b39aab89d9659e5acff42ef60ecb79f439aa9a896d89c5c9ad6c841c74222d872622ab87ed7b8801761d58765f858bdb508911bc596e29c80eb66cbad4f96c9e4e0eda3d6fb4f6293e47181240b40900000000000000a9939c56be4205d7daa809391a802b23f101ed4540983de28b4d38fdd141899efdb17487ce557d6e31881ee004bbf5d5af0acaeba7c1761470695e230e7d4c4422459d8ca981be95acb8d782920b78ad0c15f2be14f7c0638186daf649b292ee5d8129756b012e9f4b82b67f37ed1ed74b3d4e94ae803abb507df1f111c0a4ed834e013c6d941f5e3aa23b5d2fce851da782a9cfbed6f6deda4f87d2de8d39d42b9cdcdaa8d0e67e7de9ff152df2c12e2002b4296ee9e12c40da60501c34f0f94ea1701f873ddaf7f0922d75c57cf3f037ef5eef7c1de2984817ea0807adca45c16747d0d469b32a4bc84f3454a78ad3b95b2dc68c7d1ffe1e6c1e23d52e705e40636bef91a987307aef38df504588b231058fe95db121d397be85ee853a3d9d87a10794cb9ba1154c1b8d60c3a4df05cd881ee939a7d6f3bd335b566fcb698ff093a5228e8c0c0c8f9c16476f9533de56c1f1ea1b565af94fa4ae5bd3190814ebb46c1e08c179367a741f23f75027d267b6a43d83675215e24ad6f935670ddc9225b5bf482c3e64a1053de8a34e7fe255e85858ccb8fbba3d3e5ba620a99c9d8d2762cc1feee663929a2fcef5d3f6a777dacdae3826910fc326ecb14d8541db620025ace658cfd8ff5fecc0860061c73d1341924501b8e2073de8f3c45e4b0c6cb75b1ec0205a8c6ed4db1ae4138ed8a0c8572d19d83084512fe5699f66e2e9ce73802e27dc7a0696d106c9acaf940fb8105799e69f740024b39ad269bdce4d7bdf711306d1d34f5bbde0317672b6c59efebf5f0b2a212cf19ca49f1c1d1208cedb3f8aa30da143910b423594df7f60b92edbbe34ce40c983da5943bdd0d6dc72f217b02c202e35a259ddc9dbff3dfa15d9f9adb646a40483b271f16581ee2583db3e729200d6839e012adbb52b3cbde75c115c80bf41aece00284c66ef92a127f37402d98b4ea77214c1eeb29957a9b27fe576c4e05168ea6c91788187c15328a05039b066c5dd9179a5249e6b5d8d18b194d42d21131f56f151fe802beee5163e4fae266560f285429b17c24a7cf38f15871af5b7fe34dcf5a7baa81ee7b9747ca300fd0056ad6d5044135b619402eb829cef170808bae1f72123fe9ca9e2b0282fdfd7c096659352285f4f5cad063cd9ceee30e86a1b6745c5e8de40b8772de6cf93c9be556cf540d1f847a7f1cb64fba2cb08c30bbfafb02e1864053ec0c4241d6c67bcfebab9bcb9a989458208e101db74614ef4c6f327486304199cc49b1c6ec448585cf01f111235954586bcada2c4771a69f393b7f9589aa61ebb2c508c7fa0e88dcbd04be44898e299cee96219dd8f5834849d4b21709508baad425d1f9dee383e16ccdc0a9089c9a859290accded3a0027ca8276873db8bab47f0b3cd71dd006b86b52594daf44c000d43cd6e961b67211f9d31e1e8bbc15ee7091af1e2a609db1b91cf0bc49c8d9ec55f93422bdb278f0f1ad35a0191999d3cf703112f8347e6e1081acdb7a8246064e6f5f2ba75e190a29da27b46edbe9b6919bd98f88f0e8b75d8f04260aafb6c19583f8413e96cf942a69bdbaa705f2990bf3fe429caa883c9a290b57adbc8f814f6d01bbe030bdbbd236e538e22665893fde75315e245349e4f83d459bed6bade3bc35a7b79ef6a844d8dc4b12e53a84d5498ec2c6885bbad859ff92fed7a267f745a2c4ab46f28564faaa4280668b87641db79c90ab0876a26f729eb4b9445b4c21c56cd5435dc439a7e4efbf50ab8cedd05493f71d477851baa52432807c7682f4cc42af19c411a54b64de040e4dfa13537427070a6b5c892b2f3cf9a5418089a880068a7865b4405fe618446234ff2edffe37cdb42ed6ca194797ea0fdf72a55a997e55da45b0537f96bcb38d312467a2544a0e0db418328e03d9308383a8ef82f45b2ed460cbf51ce97fd08c8e2258dd5e38510e9c2a7b0f7e0ee05d1f32c7c42dbd441d3b03daa99b2d8787771dac51f00fb96c3a240517597b3dd7e145ecfd7b54146cbaf50059549bc37fe8e310b2192ee453745d6798e5ebcf8d64474b2503bb8352b917a5c35ce1293f2b8e743997898b2716ee30f0c644db14cebc05843b7ed2a59a44d5d4e3f8cef65310a50df8a1b16ac91cd63ac9183913b91747b7fcac05adac80a3d1403ecea47c2f4b9bbcc65127e68126539ffe6c2dab3c8044e14d1c9a52b5314b32288d755025b65ba26eea1e59d2721108eea4def7d78fdbaddb71dddbe95940a08540a4c45e7dd231a75e5c82a112acbd4601738e15613e9bc600802fadfb509c9f954672044a9e911ebbcc9619e8f5d92348aa78e41b9d000beaca0f9dd7a0bf97188a30eeb2f8d725e1b27b4b95877515bfdd9db58cfb7da76dc26663fe3ccbc857179e72e1c67d0444fd141874148f6f3b7a417e77190347b5a3e7aeb715438cf1b226604b3977a0560b8f5330b12afa9da8c06afb85f577ca48d2e9251639a86b409dfe9a8ab5999335ff7f4d032a7fe63aa436ccdab5b030b8031df5b275ec0d63988e60c68ac324515874eaa3643f06711c6364fe50680d43bd5b8bd0a61054e7b50f5a47e171f82510f524b3d9f6e1d1d0ac577bc877a237e2937a66f0c84f505bd5b7d46fa4e8c9463d940e64d305bd2b47434a24d0c1127e37fc878ac1445f7da168d565a2d06beca8d91a8d9644e6d6fbbcda952b971180e679cf0e1d858da9a7c419d4ddb00990c9a72f38a9a6e7fce6494c773cf03762debb3c343892f0f1f567d1458bb511ea98f202060c4bdac07e05d611abd8b5c919255d845febc9acaa5bc541645641de62ae351433ea10f4fe3468e6bbbd811f59fccbeeb28214b66cccfb85aed4046ce7f08e9167804c867afc05ded9f65e2b0fd891aeedffcf1db4f8e5f99a03a5056aa6dbae357961bad3b374720e15ed690e4847849d7e220f80acfc77eb8f1421ee4c4215713523a3ca8385b6c4279269e6da08aca8ed34f275aa401d89d27b54b8ce438f39dbf877a38da47075429559fa0ee43d338781ec66e300007608b7a3949b9c75e6feef8bfdf64a22823d23212de41b331b1ba50c8d475f398f39f0f402f772adb2ec8d55397371f556ab9bf2fa0a47a4894e6b467ac87ae3c59982e8857b787245bc20f65333f3a7460bd4cfd5e98e919b42bdef0b1ca6f4cd787edfa20f0e80dd0a64adc8376bd13c2e65dfb6036ddc3cbe2affa7f70b9ec87e38cca4e171d19e802fda33683a92f3714a686b14cc46e88f1ecf6841690a23c71a66af1457f0ea68314d84de0c3daf4dfb53cc8ffa689ff79fd1f60d3b14d8099540a9cf634222364e9cfb0692743224620d470475fa70c1d3123e45492f59fa2701a6f9f48882d3917bcf4060005e31e5894a7b342f8c9d7486d87a1867a4c6ab1a349d732333a493e5415543781dc9b6032f6531bcdadeb3fee635d7cc1aa75e1845d1ce0224ecec4154091fd6ebb72c846e79e84afd1348531d1dd316ee1ff1d997087f2aaa4669b289b4ed4bb4e807bad50d0639c69529c26f28999677b1e87d98e07714d68229b99be5b1c28beef95549611d1c165aa40c71d20c499145cf2f86d54c077324bb0148f47e388effd10787d115ba648f82253214adb648055be36a6d2ac882c34f9cc54e5314e2d990238c0c98a7eca404dba95a2f6093f12c5df201a43e52a0fc9e066ef3e6d25918ff3d65ae25c436fcab59f69c4148369159fdc595ed8acd485e1e44241315a82526ea4898e27851f15664a549fa040347403026196998fe58583a4cfc168d923fb9628c2200a165a424923ddd2f0721eba45f617ab2e1fe727e726bfc9bf3ad0134f25e8e76ff59df61fba42699a9570bd542a1f91216e59aebe0b19e48698379ebd88b35a2a22c32d09599c563546c8bac567172fd38a62117b8b94b1bd3aad30661a42382307b8ea700eb1f310c8cd2fc4ccc1ed00893bfdd7fe3c752f52d38b939de79d545de6b25c9b3e843c201d86672f0536b668585d55935cbf3c22cd521dce8fec61b40a25ab97c33108d61a942328a8d75a24151cd03052b5b9ef9d0d2616fdde0fc7da0949511fdcc550b15cdd0bf374ca5f411301394898fb292aefc7eca0c8e6ca98cb09f774e57ea300ed43b3249734aa9af862470d2f9480f5713d02a8ea96138c04e657561c41012d2d978c5ce4436e002af3b24a20f53693f32b8d56bfb74c510b0c3cb9b46961abeb83ee6d7115a80c59eb25ba474db9ed0464076d175bf9b7c6355f929431f049dbe895bae795746117435d901d32d0a7fbb01882e5dcbec95075d908565c321c328e82fb6486f1ccce2b010c20ae82901416635071be340e6cceb52fab572e706dfb1a8f9242bbf80f4eab70f9d3bd9ccbd63893a19f08057e50df2dc43a5aa9a6e12440dd548350a3e406b4ecf0f76c6f2b34fa6a3c0565dc3af1f4ebc915e2957a7bd674105a77ee999035a7cbc36029d9ef669abcc28195344c14ad1950e76095999929f41bc3651fee28c31218a539ad0d3ea26275f7548d053e176ea646d59158468d15a5dc6d6ad595c441d3902104f26eb928b239b6c95d765fa45e4c33d085eb2e6b8cd132ef4e7eea0fecb4198f0c7c94f634bd73a43fc55b87822df007c59e06a7407e3b6b0420fa6d55ebdf03abb5c5fef0b7ab3b20308090518becf1c8c3b105c4e6b17734a3c7912c466b5776696a5a24e7eb886d6ba7b51f40e53f35f472e017e3cc78e799b5438ecd2df6af75bab505e80168ea02a5409b776132ee67662b021a810ae591ebfee88b0fc1245c63e50d6ec0b296f9c4b4be27303ced22faf378023cda7767233e9da1753361182ad2f70dd48ad71572c8e949c859df251d031520d728910b50cfe6a3042f2586fbdefe416ffde32030992dacc86256e499c77792c885e0bbf7060cb36ceb8f365555efaf26bf8ab15b15f32f6d2df866391869c53aef12f572", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f0000006180)={0x2020}, 0x2020) 1.22026783s ago: executing program 2 (id=2006): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20040840) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r7, 0x11b, 0x3, &(0x7f0000000400)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000440)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000540)=0x4000, 0x4) bind$xdp(r7, &(0x7f0000000580)={0x2c, 0x0, r9}, 0x10) writev(r6, &(0x7f00000005c0)=[{&(0x7f0000000600)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc", 0x24}], 0x1) r10 = dup(r5) syz_ublk_setup_queues(r10, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x20000255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x252, 0x0, r0}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.036432277s ago: executing program 0 (id=2007): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000000c0)="3b76210fb6150f209e440f20c0663503000000440f22c00fa2660fc7b2d42af30fa7d0440f20c066350d000000440f22c06767f2caab12bad004ec", 0x3b}], 0x1, 0xd, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) pipe2(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) splice(r7, 0x0, r6, 0x0, 0xf55f, 0x0) bind$pptp(r6, &(0x7f0000000400)={0x18, 0x2, {0x0, @loopback}}, 0x1e) sendmmsg$unix(r3, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r5, r4]}}], 0x18}}], 0x1, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x9, 0x100000001, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x6, 0x6a], 0xeeee8000, 0x300092}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 971.319059ms ago: executing program 6 (id=2008): openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000000240)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000280)={0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(r0, r0, 0x0, 0x20002005) (async) sendfile(r0, r0, 0x0, 0x20002005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) (async) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000001c00010428bd7000fcdbdf250a808067960000001000000014000200fe8000000000000000000000000000aa05001300d900000014000100fc02000000000000000000000000000156b3bc63"], 0x4c}, 0x1, 0x1000000000000000, 0x0, 0x20000000}, 0x800) socket$kcm(0x2, 0xa, 0x2) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'syzkaller1\x00', 0x0}) add_key$keyring(&(0x7f0000000680), &(0x7f0000000740)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f0000000780), &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0x114, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x7, 0xffff}, {0x300}}, [@filter_kind_options=@f_u32={{0x8}, {0xe8, 0x2, [@TCA_U32_SEL={0xe4, 0x5, {0x3, 0x6, 0xd, 0x5, 0x4, 0x1, 0x5, 0x9, [{0x8, 0x1, 0x17, 0x8}, {0x94, 0x7, 0xfe000000, 0x1}, {0x9, 0x4, 0x4, 0x4}, {0x7, 0x7, 0xd, 0x1}, {0x5, 0x0, 0x8, 0xffffffff}, {0x101, 0x398, 0x8, 0x2}, {0x9, 0x0, 0x8, 0x36}, {0x4, 0xe8c, 0xcc, 0x5}, {0xff, 0x40, 0x347c, 0x1a80}, {0xc, 0x80, 0xffffffff, 0x1ff}, {0x7, 0x1000000e, 0xc71713ac, 0x35ad5b6d}, {0x1, 0x6, 0xff, 0x4}, {0x0, 0xffff, 0x78e, 0x400}]}}]}}]}, 0x114}}, 0x4) write$tun(r2, &(0x7f0000000a80)=ANY=[], 0xfd6c) (async) write$tun(r2, &(0x7f0000000a80)=ANY=[], 0xfd6c) sendmmsg(r1, &(0x7f0000000ac0), 0x800001d, 0x0) 767.979843ms ago: executing program 5 (id=2009): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x15b, 0x0, &(0x7f0000000740)="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", 0x0, 0x100005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x44}}, 0x800) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x1c3902, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)}, {&(0x7f00000002c0)="2242cffaf92c57b02b679d1c2282415c2191be37d4d2480f5a067e593c3a8c2b8409306ff909b3150d01d0ca82dffd1c0ff22eacdf2d644c7204d62a54fdf43e93eba236d522e80c5a72e52cc535dbe363514aa22598795207f474b74733ddc0781a492319a2f3dbcfc05427663d07d92d5ba6b2c213c8e01bba0fe542ed727ca50c446d7f09b7bfae25aca40f4a150c4643c9e9f9050b19760bd57c5d979ef7d9a8b3e510e653d88ff336e83aae60b52c4102aab0558219007a8852781285c68a423f165f26ccd1947d8c4bb6b7", 0xce}], 0x2, &(0x7f0000001200)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES64=r2, @ANYRES32=0x0, @ANYRES64, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="003a00004f523e24a11b98fadb9bf827b68b370c88ac7b9c649a556a86a505053293"], 0x58, 0x4080}}, {{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1c000000000000000100000002000000bd68a0edee1d07a38a6e23a7b20d00000000000000c34ae59845d71c47fb16a6f9838aa327d8be7f697b61e625b95b17414761adddcdcf68069e6060ad000baed274b297617b3ebba12a85dc9d0a87dbd5a870185122b16b6bbc3bd79d81ee089397fe7beae0923e83922158af170f56ce99317225bf29209a73ca0bb8a83abe625886edcd88472365e7d0d446ba8e6b6bac95e38b5ce36b26ef983ce70f96fe0546805a6fd21067b7994b00d18e512cb82101c91a817219fa4b9118ff2bcb5a5cbe6e17b1d9c4cda1a619ce4115", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="1c00000000000000010000000100", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xa0, 0x8000}}], 0x2, 0x800) recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000640)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/76, 0x4c}, {&(0x7f0000000a40)=""/128, 0x80}], 0x3}, 0x3}], 0x1, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000ac0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000b00), 0xa4242, 0x0) sendfile(r4, r2, 0x0, 0x1002000ff) r5 = fcntl$dupfd(r4, 0x0, r4) close_range(0xffffffffffffffff, r5, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b40)={'bond0\x00'}) splice(r6, 0x0, r6, 0x0, 0x2, 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000c40)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000c80)='cdg', 0x3) bind$inet(r1, &(0x7f0000000cc0)={0x2, 0x4e24, @loopback}, 0x10) ioctl$UI_END_FF_UPLOAD(r5, 0x406855c9, &(0x7f0000000d00)={0xa, 0x6, {0x55, 0x1000, 0x7, {0x2, 0xa}, {0x6920, 0xc1a}, @const={0x8d, {0xf, 0x2, 0x0, 0x8}}}, {0x53, 0x3, 0xffff, {0xfff6, 0xd2a}, {0x9, 0x4}, @rumble={0xc, 0x3}}}) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000dc0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000e40)="b9cd14c222ee", 0x6}], 0x1}}], 0x1, 0x20008000) bind$l2tp6(r5, &(0x7f0000000e80)={0xa, 0x0, 0x40, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9c47}, 0x20) ioctl$VFAT_IOCTL_READDIR_SHORT(r3, 0x82307202, &(0x7f0000000ec0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001100)=@ccm_128={{0x304}, '\x00', "bcf87c7910b661b4be4ae0143548a525", "07b5e559", "1aec271e54d0bbda"}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001180)=@o_path={&(0x7f00000011c0)='./file0\x00', r7}, 0x18) recvmmsg(r1, &(0x7f0000001200), 0x0, 0x100, 0x0) 359.227195ms ago: executing program 0 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x185042, 0x0) r5 = syz_open_dev$loop(&(0x7f00000002c0), 0x800000000000006, 0x128202) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={r4, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a85a056f5d759ded130e04d528539f3d328973747a75df8a69ea917deb7d6193b3e7772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}}) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x8) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8001, 0x10}}}]}, 0x38}}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@setneightbl={0x48, 0x43, 0x1a, 0x70bd2d, 0x25dfdbfe, {0x7}, [@NDTA_THRESH1={0x8, 0x2, 0x60}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x7ff}, @NDTA_THRESH1={0x8, 0x2, 0xe}, @NDTA_NAME={0xf, 0x1, 'syzkaller0\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x8004) r7 = syz_open_dev$dri(&(0x7f0000000300), 0x9, 0x28000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000340)={0xfff, 0xfffffff8, 0xa3}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 0s ago: executing program 7 (id=2011): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000300)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb) syz_clone(0x88106000, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) kernel console output (not intermixed with test programs): 9f559 code=0x0 [ 829.360975][T11954] program syz.5.1673 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 829.394945][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 829.506285][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 829.614873][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 829.726270][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 829.835038][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 829.945609][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 830.055804][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 830.166024][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 830.314868][ T194] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 830.389979][ T29] usb 8-1: USB disconnect, device number 52 [ 830.475012][ T194] usb 3-1: Using ep0 maxpacket: 8 [ 830.477505][ T194] usb 3-1: New USB device found: idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 830.481406][ T194] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 830.481460][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.481485][ T194] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 830.481506][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 830.500181][ T194] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 830.500220][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.500234][ T194] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 830.500246][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 830.543467][ T194] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 830.543497][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 830.543510][ T194] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 830.543523][ T194] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 830.640216][ T194] usb 3-1: string descriptor 0 read error: -22 [ 830.640747][ T194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.669305][ T194] adutux 3-1:168.0: interrupt endpoints not found [ 830.839375][ T5768] usb 1-1: USB disconnect, device number 64 [ 830.877712][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.878225][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.880108][T11961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.880523][T11961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.881468][ T194] usb 3-1: USB disconnect, device number 81 [ 831.091895][ T5768] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 831.121635][ T5768] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 832.068000][ T29] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 832.216149][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 832.233823][ T29] usb 6-1: New USB device found: idVendor=249c, idProduct=9006, bcdDevice=0.40 [ 832.263621][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.263639][ T29] usb 6-1: Product: Ñ™ [ 832.263647][ T29] usb 6-1: Manufacturer: ⊲蹂쑔î°ç«³î¼½âƒ‡ë’‹Ô¡ä»Žé³»è›£ê·°å–¡éœ¨ç¤¡èŒå¥°ã¬£ã€â–ᤗ鸵⩄劘앢蒊͑᣻솚୑뚋율梙춆åƒê¹ƒç‰¥ê³¤ê¡Ÿá«µê¬©ã’솆 [ 832.263656][ T29] usb 6-1: SerialNumber: syz [ 832.533992][T11993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1685'. [ 832.741103][ T29] usb 6-1: 1:1 : unknown format tag 0x3 is detected. processed as MPEG. [ 832.741130][ T29] usb 6-1: found format II with max.bitrate = 8, frame size=9 [ 832.741147][ T29] usb 6-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 832.741848][ T29] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 833.048395][ T29] usb 6-1: USB disconnect, device number 59 [ 833.387251][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.555045][T12008] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5699] was attempted by ""[12008] [ 833.809267][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1692'. [ 833.873340][T12017] trusted_key: encrypted_key: insufficient parameters specified [ 834.266537][ T5781] net_ratelimit: 38 callbacks suppressed [ 834.266554][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.375701][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.485698][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.596291][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.661229][T12046] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1700'. [ 834.705642][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 834.752017][T12048] FAULT_INJECTION: forcing a failure. [ 834.752017][T12048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 834.752050][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.2.1702 Tainted: G L syzkaller #0 PREEMPT(full) [ 834.752078][T12048] Tainted: [L]=SOFTLOCKUP [ 834.752084][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 834.752091][T12048] Call Trace: [ 834.752096][T12048] [ 834.752101][T12048] dump_stack_lvl+0xe8/0x150 [ 834.752125][T12048] should_fail_ex+0x3eb/0x540 [ 834.752141][T12048] prepare_alloc_pages+0x21e/0x5f0 [ 834.752159][T12048] __alloc_frozen_pages_noprof+0x17c/0x410 [ 834.752176][T12048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 834.752193][T12048] ? policy_nodemask+0x31b/0x980 [ 834.752209][T12048] ? __lock_acquire+0x747/0x2de0 [ 834.752224][T12048] alloc_pages_mpol+0x21e/0x390 [ 834.752241][T12048] folio_alloc_mpol_noprof+0x39/0x160 [ 834.752256][T12048] vma_alloc_folio_noprof+0xe1/0x1e0 [ 834.752272][T12048] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 834.752289][T12048] ? vma_has_anon_rmap+0xc9/0x270 [ 834.752304][T12048] do_pte_missing+0x16d4/0x3570 [ 834.752325][T12048] handle_mm_fault+0x1a53/0x3750 [ 834.752344][T12048] ? handle_mm_fault+0xf1/0x3750 [ 834.752372][T12048] ? __pfx_handle_mm_fault+0x10/0x10 [ 834.752395][T12048] ? lock_vma_under_rcu+0x45a/0x500 [ 834.752412][T12048] ? irqentry_exit+0x2a0/0x9b0 [ 834.752433][T12048] ? trace_irq_disable+0x3b/0x140 [ 834.752460][T12048] do_user_addr_fault+0xb35/0x1480 [ 834.752480][T12048] ? trace_page_fault_user+0x84/0x1e0 [ 834.752492][T12048] exc_page_fault+0x6a/0xc0 [ 834.752503][T12048] asm_exc_page_fault+0x26/0x30 [ 834.752513][T12048] RIP: 0033:0x7ff130e66de6 [ 834.752524][T12048] Code: fc ff ff 90 41 57 31 c0 41 56 49 89 fe 48 8d 3d 37 08 1d 00 41 55 49 89 d5 41 54 49 89 f4 48 89 d6 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ac c7 fe ff 4d 85 ed 0f 84 2b 0a 00 [ 834.752533][T12048] RSP: 002b:00007ff131deaf60 EFLAGS: 00010206 [ 834.752543][T12048] RAX: 0000000000000000 RBX: 00007ff131225fa0 RCX: 0000000000000000 [ 834.752550][T12048] RDX: 0000200000000140 RSI: 0000200000000140 RDI: 00007ff131037607 [ 834.752557][T12048] RBP: 00007ff131ded090 R08: 00007ff130e53930 R09: 0000000000000000 [ 834.752564][T12048] R10: 0000000000000000 R11: 0000200000000140 R12: 0000000000000043 [ 834.752572][T12048] R13: 0000200000000140 R14: 0000000000000000 R15: 00007ff13134fa48 [ 834.752589][T12048] [ 834.784052][T12048] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 835.037340][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 835.094890][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.205836][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.260252][T12050] tipc: Enabled bearer , priority 0 [ 835.282349][ T30] audit: type=1326 audit(1793405760.482:2923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.282770][ T30] audit: type=1326 audit(1793405760.482:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.336225][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.362868][ T30] audit: type=1326 audit(1793405760.562:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.363042][ T30] audit: type=1326 audit(1793405760.562:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.363297][ T30] audit: type=1326 audit(1793405760.562:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.439659][ T30] audit: type=1326 audit(1793405760.642:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12051 comm="syz.0.1704" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 835.449395][ T8844] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.502187][ T30] audit: type=1326 audit(1793405760.702:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.6.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 835.502413][ T30] audit: type=1326 audit(1793405760.702:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.6.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 835.525124][ T30] audit: type=1326 audit(1793405760.712:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.6.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 835.525181][ T30] audit: type=1326 audit(1793405760.712:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12053 comm="syz.6.1705" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 835.559179][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 835.877328][T12062] fuse: Bad value for 'fd' [ 835.878973][T12065] fuse: Bad value for 'user_id' [ 835.878984][T12065] fuse: Bad value for 'user_id' [ 836.075013][ T29] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 836.196129][T12071] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5701] was attempted by ""[12071] [ 836.225351][ T29] usb 7-1: Using ep0 maxpacket: 16 [ 836.229819][ T29] usb 7-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 836.279492][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.279518][ T29] usb 7-1: Product: syz [ 836.279531][ T29] usb 7-1: Manufacturer: syz [ 836.279544][ T29] usb 7-1: SerialNumber: syz [ 837.636575][ T29] usb 7-1: 1:1 : no or invalid class specific endpoint descriptor [ 837.636603][ T29] usb 7-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 837.636625][ T29] usb 7-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 837.683151][ T29] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 837.889969][ T29] usb 7-1: USB disconnect, device number 44 [ 837.966425][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 838.206758][ T8651] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 838.348550][T12098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.348811][T12098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.360113][ T8651] usb 1-1: New USB device found: idVendor=10c4, idProduct=ea90, bcdDevice=0.80 [ 838.363189][ T8651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.363218][ T8651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.363251][ T8651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.373564][ T8651] usb 1-1: config 0 descriptor?? [ 838.546917][ T29] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 838.650609][T12100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.654542][T12100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.694957][ T29] usb 7-1: Using ep0 maxpacket: 32 [ 838.704961][ T29] usb 7-1: device descriptor read/all, error -61 [ 838.837986][ T29] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 838.868701][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868724][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868739][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868753][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868768][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868782][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.868796][ T8651] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 838.927993][ T8651] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 838.967337][ T29] usb 7-1: device descriptor read/64, error -71 [ 839.077235][ T29] usb usb7-port1: attempt power cycle [ 839.086326][ T8651] cp2112 0003:10C4:EA90.0013: Part Number: 0x00 Device Version: 0x00 [ 839.272990][T12102] ip6t_rt: unknown flags B [ 839.284918][ T86] net_ratelimit: 29 callbacks suppressed [ 839.285881][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.345913][T12111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 839.349901][T12111] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5699] was attempted by ""[12111] [ 839.395574][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.426814][ T29] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 839.456358][ T29] usb 7-1: device descriptor read/8, error -71 [ 839.507212][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.624666][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.706244][ T29] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 839.725229][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.733450][ T29] usb 7-1: device descriptor read/8, error -71 [ 839.835259][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.838205][ T29] usb usb7-port1: unable to enumerate USB device [ 839.944918][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 839.987644][ T29] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 840.056358][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 840.118888][ T29] usb 7-1: device descriptor read/64, error -71 [ 840.167600][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 840.167790][T12095] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1716'. [ 840.335201][ T5747] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 840.356089][ T29] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 840.402508][T12120] FAULT_INJECTION: forcing a failure. [ 840.402508][T12120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.402539][T12120] CPU: 1 UID: 0 PID: 12120 Comm: syz.2.1726 Tainted: G L syzkaller #0 PREEMPT(full) [ 840.402556][T12120] Tainted: [L]=SOFTLOCKUP [ 840.402560][T12120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 840.402567][T12120] Call Trace: [ 840.402572][T12120] [ 840.402577][T12120] dump_stack_lvl+0xe8/0x150 [ 840.402600][T12120] should_fail_ex+0x3eb/0x540 [ 840.402614][T12120] _copy_from_iter+0x1d3/0x1680 [ 840.402630][T12120] ? __alloc_skb+0x27a/0x7a0 [ 840.402647][T12120] ? __alloc_skb+0x27a/0x7a0 [ 840.402667][T12120] ? __alloc_skb+0x27a/0x7a0 [ 840.402679][T12120] ? __pfx__copy_from_iter+0x10/0x10 [ 840.402692][T12120] ? kmem_cache_alloc_node_noprof+0x1f4/0x600 [ 840.402704][T12120] ? __alloc_skb+0x27a/0x7a0 [ 840.402715][T12120] ? __alloc_skb+0x27a/0x7a0 [ 840.402730][T12120] ? netlink_sendmsg+0x64f/0xb20 [ 840.402743][T12120] ? skb_put+0x112/0x210 [ 840.402757][T12120] netlink_sendmsg+0x6bb/0xb20 [ 840.402772][T12120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.402786][T12120] ? aa_sock_msg_perm+0x144/0x210 [ 840.402804][T12120] ? apparmor_socket_sendmsg+0x98/0x360 [ 840.402818][T12120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 840.402829][T12120] sock_sendmsg_nosec+0x14e/0x190 [ 840.402842][T12120] ____sys_sendmsg+0x54e/0x850 [ 840.402859][T12120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 840.402877][T12120] ? import_iovec+0x73/0xa0 [ 840.402890][T12120] ___sys_sendmsg+0x2a5/0x360 [ 840.402903][T12120] ? __lock_acquire+0x747/0x2de0 [ 840.402918][T12120] ? __pfx____sys_sendmsg+0x10/0x10 [ 840.402950][T12120] ? __fget_files+0x3a2/0x420 [ 840.402961][T12120] ? __fget_files+0x2a/0x420 [ 840.402977][T12120] __x64_sys_sendmsg+0x1b1/0x290 [ 840.402992][T12120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 840.403018][T12120] do_syscall_64+0x166/0x520 [ 840.403028][T12120] ? trace_irq_disable+0x3b/0x140 [ 840.403042][T12120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.403052][T12120] ? clear_bhb_loop+0x70/0xc0 [ 840.403064][T12120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.403074][T12120] RIP: 0033:0x7ff130f9f559 [ 840.403085][T12120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.403093][T12120] RSP: 002b:00007ff131ded028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.403105][T12120] RAX: ffffffffffffffda RBX: 00007ff131225fa0 RCX: 00007ff130f9f559 [ 840.403111][T12120] RDX: 0000000000000014 RSI: 0000200000000500 RDI: 0000000000000003 [ 840.403118][T12120] RBP: 00007ff131ded090 R08: 0000000000000000 R09: 0000000000000000 [ 840.403124][T12120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.403130][T12120] R13: 00007ff131226038 R14: 00007ff131225fa0 R15: 00007ff13134fa48 [ 840.403146][T12120] [ 840.485652][ T29] usb 7-1: device descriptor read/64, error -71 [ 840.514538][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 840.516650][ T5747] usb 6-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 840.531025][ T5747] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 840.531079][ T5747] usb 6-1: config 0 has no interface number 0 [ 840.531118][ T5747] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 840.531157][ T5747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.603873][ T29] usb usb7-port1: attempt power cycle [ 840.714749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 840.758157][ T5747] usb 6-1: config 0 descriptor?? [ 840.831945][ T5747] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 840.985268][ T29] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 841.012226][ T29] usb 7-1: device descriptor read/8, error -71 [ 841.247817][ T29] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 841.631283][ T29] usb 7-1: device descriptor read/8, error -71 [ 841.735234][ T29] usb usb7-port1: unable to enumerate USB device [ 841.854191][ T5755] usb 6-1: USB disconnect, device number 60 [ 841.909877][ T8651] cp2112 0003:10C4:EA90.0013: error reading lock byte: -71 [ 841.954130][ T8651] usb 1-1: USB disconnect, device number 65 [ 842.692565][T12146] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5699] was attempted by ""[12146] [ 843.378606][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1735'. [ 843.378632][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1735'. [ 843.656525][T12160] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1739'. [ 844.318127][ T5768] usb 1-1: new full-speed USB device number 66 using dummy_hcd [ 844.335788][ T86] net_ratelimit: 36 callbacks suppressed [ 844.335807][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.447072][ T6248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.465743][ T5768] usb 1-1: New USB device found: idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 844.467056][ T5768] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 844.467080][ T5768] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 844.467099][ T5768] usb 1-1: config 150 has no interface number 0 [ 844.467136][ T5768] usb 1-1: config 150 interface 204 has no altsetting 0 [ 844.473134][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.473158][ T5768] usb 1-1: Product: syz [ 844.473171][ T5768] usb 1-1: Manufacturer: syz [ 844.473184][ T5768] usb 1-1: SerialNumber: syz [ 844.555306][ T6248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.670042][ T6248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.758504][ T5768] xr_serial 1-1:150.204: skipping garbage [ 844.758556][ T5768] xr_serial 1-1:150.204: xr_serial converter detected [ 844.781949][ T6248] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.895343][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 844.924372][T12197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.932926][T12197] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6912] was attempted by ""[12197] [ 845.010214][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.115486][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.161379][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1750'. [ 845.162912][T12207] FAULT_INJECTION: forcing a failure. [ 845.162912][T12207] name failslab, interval 1, probability 0, space 0, times 0 [ 845.162941][T12207] CPU: 1 UID: 0 PID: 12207 Comm: syz.5.1750 Tainted: G L syzkaller #0 PREEMPT(full) [ 845.162964][T12207] Tainted: [L]=SOFTLOCKUP [ 845.162971][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 845.162981][T12207] Call Trace: [ 845.162988][T12207] [ 845.162993][T12207] dump_stack_lvl+0xe8/0x150 [ 845.163015][T12207] should_fail_ex+0x3eb/0x540 [ 845.163029][T12207] ? __alloc_skb+0x1db/0x7a0 [ 845.163045][T12207] should_failslab+0xa8/0x100 [ 845.163071][T12207] ? __alloc_skb+0x1db/0x7a0 [ 845.163093][T12207] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 845.163114][T12207] ? __alloc_skb+0x18d/0x7a0 [ 845.163136][T12207] ? __alloc_skb+0x1db/0x7a0 [ 845.163152][T12207] __alloc_skb+0x1db/0x7a0 [ 845.163167][T12207] inet_netconf_notify_devconf+0x173/0x240 [ 845.163184][T12207] inetdev_event+0x633/0x1610 [ 845.163205][T12207] ? __pfx_inetdev_event+0x10/0x10 [ 845.163229][T12207] ? kvfree_call_rcu+0x9c/0x430 [ 845.163263][T12207] notifier_call_chain+0x1a5/0x3d0 [ 845.163290][T12207] unregister_netdevice_many_notify+0x1432/0x1d80 [ 845.163310][T12207] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 845.163323][T12207] ? unregister_netdevice_queue+0x17d/0x340 [ 845.163335][T12207] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 845.163349][T12207] ? __nla_parse+0x40/0x60 [ 845.163374][T12207] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 845.163394][T12207] rtnl_dellink+0x5bc/0x810 [ 845.163423][T12207] ? __pfx_rtnl_dellink+0x10/0x10 [ 845.163481][T12207] ? lock_acquire+0x115/0x350 [ 845.163494][T12207] ? __pfx_rtnl_dellink+0x10/0x10 [ 845.163533][T12207] ? __pfx_rtnl_dellink+0x10/0x10 [ 845.163556][T12207] rtnetlink_rcv_msg+0x802/0xc00 [ 845.163584][T12207] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 845.163599][T12207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.163614][T12207] ? __copy_skb_header+0xa3/0x4a0 [ 845.163635][T12207] netlink_rcv_skb+0x226/0x4a0 [ 845.163652][T12207] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 845.163678][T12207] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.163714][T12207] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.163735][T12207] ? netlink_deliver_tap+0x2e/0x1b0 [ 845.163751][T12207] netlink_unicast+0x8ef/0xa80 [ 845.163771][T12207] netlink_sendmsg+0x7f0/0xb20 [ 845.163786][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.163802][T12207] ? aa_sock_msg_perm+0x144/0x210 [ 845.163833][T12207] ? apparmor_socket_sendmsg+0x98/0x360 [ 845.163858][T12207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.163879][T12207] sock_sendmsg_nosec+0x14e/0x190 [ 845.163896][T12207] ____sys_sendmsg+0x54e/0x850 [ 845.163913][T12207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.163932][T12207] ? import_iovec+0x73/0xa0 [ 845.163945][T12207] ___sys_sendmsg+0x2a5/0x360 [ 845.163966][T12207] ? __lock_acquire+0x747/0x2de0 [ 845.163993][T12207] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.164047][T12207] ? __fget_files+0x3a2/0x420 [ 845.164059][T12207] ? __fget_files+0x2a/0x420 [ 845.164075][T12207] __x64_sys_sendmsg+0x1b1/0x290 [ 845.164091][T12207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 845.164132][T12207] do_syscall_64+0x166/0x520 [ 845.164151][T12207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.164169][T12207] ? clear_bhb_loop+0x70/0xc0 [ 845.164190][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.164206][T12207] RIP: 0033:0x7f1b1cd9f559 [ 845.164225][T12207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 845.164240][T12207] RSP: 002b:00007f1b1dc46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.164259][T12207] RAX: ffffffffffffffda RBX: 00007f1b1d026090 RCX: 00007f1b1cd9f559 [ 845.164273][T12207] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 000000000000000a [ 845.164285][T12207] RBP: 00007f1b1dc46090 R08: 0000000000000000 R09: 0000000000000000 [ 845.164296][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.164307][T12207] R13: 00007f1b1d026128 R14: 00007f1b1d026090 R15: 00007f1b1d14fa48 [ 845.164335][T12207] [ 845.245788][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 845.265429][ T5755] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 845.394889][ T5755] usb 3-1: device descriptor read/64, error -71 [ 845.614044][T12209] loop6: detected capacity change from 0 to 524288000 [ 845.614208][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.614589][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.635317][ T5755] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 845.678952][T12209] loop6: detected capacity change from 524288000 to 0 [ 845.765374][ T5755] usb 3-1: device descriptor read/64, error -71 [ 845.876210][ T5755] usb usb3-port1: attempt power cycle [ 846.115850][ T30] kauditd_printk_skb: 248 callbacks suppressed [ 846.115869][ T30] audit: type=1326 audit(1793405771.322:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.122381][ T30] audit: type=1326 audit(1793405771.322:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.122766][ T30] audit: type=1326 audit(1793405771.322:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.123758][ T30] audit: type=1326 audit(1793405771.322:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.131244][ T30] audit: type=1326 audit(1793405771.332:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.181280][ T30] audit: type=1326 audit(1793405771.362:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.215199][ T5755] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 846.247598][ T5755] usb 3-1: device descriptor read/8, error -71 [ 846.264976][ T8651] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 846.419499][ T8651] usb 6-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 846.422214][ T8651] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 846.422259][ T8651] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 846.422296][ T8651] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 846.422319][ T8651] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 846.430230][ T8651] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.430253][ T8651] usb 6-1: Product: syz [ 846.430266][ T8651] usb 6-1: Manufacturer: syz [ 846.430279][ T8651] usb 6-1: SerialNumber: syz [ 846.450320][T12216] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 846.484963][ T5755] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 846.502846][ T30] audit: type=1326 audit(1793405771.702:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.502900][ T30] audit: type=1326 audit(1793405771.702:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12218 comm="syz.6.1756" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 846.506024][ T5755] usb 3-1: device descriptor read/8, error -71 [ 846.617405][ T5755] usb usb3-port1: unable to enumerate USB device [ 846.662715][T12216] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 846.662850][T12216] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 846.991403][ T5768] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 846.991465][ T5768] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 847.033104][ T5768] usb 1-1: USB disconnect, device number 66 [ 847.060328][ T5768] xr_serial 1-1:150.204: device disconnected [ 847.167839][T12226] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1758'. [ 847.317102][T12232] FAULT_INJECTION: forcing a failure. [ 847.317102][T12232] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 847.317133][T12232] CPU: 0 UID: 0 PID: 12232 Comm: syz.6.1761 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.317157][T12232] Tainted: [L]=SOFTLOCKUP [ 847.317164][T12232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 847.317174][T12232] Call Trace: [ 847.317182][T12232] [ 847.317190][T12232] dump_stack_lvl+0xe8/0x150 [ 847.317223][T12232] should_fail_ex+0x3eb/0x540 [ 847.317248][T12232] _copy_from_user+0x2d/0xb0 [ 847.317270][T12232] rds_setsockopt+0x71c/0xdf0 [ 847.317301][T12232] ? __pfx_rds_setsockopt+0x10/0x10 [ 847.317325][T12232] ? kmem_cache_free+0x182/0x650 [ 847.317350][T12232] ? __pfx_aa_sk_perm+0x10/0x10 [ 847.317376][T12232] ? aa_sock_opt_perm+0x142/0x1e0 [ 847.317414][T12232] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 847.317438][T12232] ? __pfx_rds_setsockopt+0x10/0x10 [ 847.317462][T12232] do_sock_setsockopt+0x17c/0x1b0 [ 847.317493][T12232] __x64_sys_setsockopt+0x13d/0x1b0 [ 847.317524][T12232] do_syscall_64+0x166/0x520 [ 847.317541][T12232] ? trace_irq_disable+0x3b/0x140 [ 847.317565][T12232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.317583][T12232] ? clear_bhb_loop+0x70/0xc0 [ 847.317604][T12232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.317622][T12232] RIP: 0033:0x7f9cc519f559 [ 847.317639][T12232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.317654][T12232] RSP: 002b:00007f9cc604c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 847.317673][T12232] RAX: ffffffffffffffda RBX: 00007f9cc5425fa0 RCX: 00007f9cc519f559 [ 847.317686][T12232] RDX: 0000000000000006 RSI: 0000000000000114 RDI: 0000000000000003 [ 847.317696][T12232] RBP: 00007f9cc604c090 R08: 0000000000000004 R09: 0000000000000000 [ 847.317709][T12232] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 847.317719][T12232] R13: 00007f9cc5426038 R14: 00007f9cc5425fa0 R15: 00007f9cc554fa48 [ 847.317747][T12232] [ 847.523177][ T8651] cdc_ncm 6-1:1.0: bind() failure [ 847.561992][ T8651] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 847.562022][ T8651] cdc_ncm 6-1:1.1: bind() failure [ 847.581120][ T8651] usb 6-1: USB disconnect, device number 61 [ 847.687393][ T30] audit: type=1326 audit(1793405772.892:3189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 847.689172][ T30] audit: type=1326 audit(1793405772.892:3190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12238 comm="syz.0.1764" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af1b9f559 code=0x7ffc0000 [ 847.747724][T12237] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6912] was attempted by ""[12237] [ 848.112751][T12245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1764'. [ 848.247200][T12249] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1766'. [ 848.247220][T12249] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1766'. [ 848.247228][T12249] netlink: 'syz.5.1766': attribute type 6 has an invalid length. [ 848.247235][T12249] netlink: 'syz.5.1766': attribute type 5 has an invalid length. [ 848.247241][T12249] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1766'. [ 848.710043][ T5768] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 848.859495][ T5768] usb 6-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 848.861128][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.861155][ T5768] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.861192][ T5768] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.904616][ T5768] usb 6-1: config 0 descriptor?? [ 848.984101][T12261] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 849.014974][ T5755] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 849.165663][ T5755] usb 8-1: New USB device found: idVendor=046d, idProduct=c532, bcdDevice=0.40 [ 849.166867][ T5755] usb 8-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 849.166897][ T5755] usb 8-1: config 1 interface 0 has no altsetting 0 [ 849.172435][ T5755] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.172461][ T5755] usb 8-1: Product: ж [ 849.172474][ T5755] usb 8-1: Manufacturer: ã Š [ 849.172486][ T5755] usb 8-1: SerialNumber: syz [ 849.265468][ T29] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 849.320239][ T5768] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 849.338478][ T5768] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input44 [ 849.425964][ T29] usb 1-1: New USB device found: idVendor=2040, idProduct=1605, bcdDevice=a.94 [ 849.443130][ T29] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.443178][ T29] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 849.443201][ T29] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 849.443261][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.457053][ T43] net_ratelimit: 37 callbacks suppressed [ 849.457072][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 849.462571][ T29] usb 1-1: config 0 descriptor?? [ 849.567175][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 849.606486][ T5768] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 849.632960][ T5768] usb 6-1: USB disconnect, device number 62 [ 849.683234][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 849.717371][ T29] usb 1-1: USB disconnect, device number 67 [ 849.785221][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 849.888165][T12266] fido_id[12266]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 849.898697][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.007452][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.116166][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.226342][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.340490][ T86] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.447692][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 850.694874][ T29] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 850.786748][ T8651] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 850.850697][ T29] usb 6-1: unable to get BOS descriptor or descriptor too short [ 850.850730][ T29] usb 6-1: New USB device found: idVendor=0644, idProduct=8021, bcdDevice=0.40 [ 850.852264][ T29] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.852286][ T29] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 850.852300][ T29] usb 6-1: config 1 has no interface number 0 [ 850.901257][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.901283][ T29] usb 6-1: Product: syz [ 850.901296][ T29] usb 6-1: Manufacturer: syz [ 850.901309][ T29] usb 6-1: SerialNumber: syz [ 850.934907][ T8651] usb 7-1: Using ep0 maxpacket: 16 [ 850.937955][ T8651] usb 7-1: New USB device found: idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 850.939035][ T8651] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 850.939049][ T8651] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 850.939059][ T8651] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 850.939069][ T8651] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 850.939078][ T8651] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 850.939088][ T8651] usb 7-1: config 0 has no interface number 0 [ 850.939114][ T8651] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 850.939262][ T8651] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 850.939274][ T8651] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 850.939311][ T8651] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 850.939324][ T8651] usb 7-1: config 0 interface 125 has no altsetting 0 [ 850.944405][ T8651] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.944420][ T8651] usb 7-1: Product: syz [ 850.944427][ T8651] usb 7-1: Manufacturer: syz [ 850.944434][ T8651] usb 7-1: SerialNumber: syz [ 850.964042][ T8651] usb 7-1: config 0 descriptor?? [ 851.123565][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 851.142628][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 851.243289][T12281] program syz.6.1776 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 851.473866][T12278] netlink: 'syz.5.1774': attribute type 2 has an invalid length. [ 851.492563][ T29] usb 6-1: selecting invalid altsetting 1 [ 851.492585][ T29] snd-usb-us122l 6-1:1.1: usb_set_interface error [ 851.496813][ T29] snd-usb-us122l 6-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 851.501646][ T29] usb 6-1: USB disconnect, device number 63 [ 851.637701][ T5755] usbhid 8-1:1.0: can't add hid device: -71 [ 851.637822][ T5755] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 851.654901][ T5755] usb 8-1: USB disconnect, device number 53 [ 851.836282][ C1] usb 7-1: async_complete: urb error -71 [ 851.836739][ C1] usb 7-1: async_complete: urb error -71 [ 851.837165][ C1] usb 7-1: async_complete: urb error -71 [ 851.837293][ C1] usb 7-1: async_complete: urb error -71 [ 851.838608][ T8651] get_1284_register: usb error -71 [ 851.865715][ T8651] usb 7-1: USB disconnect, device number 53 [ 852.142029][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1783'. [ 852.152180][T12307] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1783'. [ 852.321861][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 852.321878][ T30] audit: type=1326 audit(1793405777.522:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.321918][ T30] audit: type=1326 audit(1793405777.522:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.321956][ T30] audit: type=1326 audit(1793405777.522:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.321991][ T30] audit: type=1326 audit(1793405777.522:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.322027][ T30] audit: type=1326 audit(1793405777.522:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.322858][ T30] audit: type=1326 audit(1793405777.522:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.323712][ T30] audit: type=1326 audit(1793405777.522:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.323756][ T30] audit: type=1326 audit(1793405777.522:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.323793][ T30] audit: type=1326 audit(1793405777.522:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.323829][ T30] audit: type=1326 audit(1793405777.522:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12303 comm="syz.6.1782" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 852.653400][T12320] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1786'. [ 853.284890][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1790'. [ 853.650376][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1793'. [ 853.681721][T12339] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.682002][T12339] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.955443][T12345] netlink: 'syz.7.1795': attribute type 10 has an invalid length. [ 853.955460][T12345] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1795'. [ 854.545393][ T43] net_ratelimit: 29 callbacks suppressed [ 854.545415][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 854.545466][ T5768] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 854.655304][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 854.696199][ T5768] usb 7-1: New USB device found: idVendor=0b95, idProduct=1790, bcdDevice=1.00 [ 854.697757][ T5768] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.697798][ T5768] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 854.697820][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.767872][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 854.875822][ T5934] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 854.976453][T12358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 854.995304][ T5934] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.104877][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.215401][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.325353][ T5934] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.437118][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 855.938856][T12378] futex_wake_op: syz.7.1806 tries to shift op by 144; fix this program [ 856.108394][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 856.126365][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 856.126394][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 856.504918][ T8651] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 856.655442][ T8651] usb 3-1: Using ep0 maxpacket: 16 [ 856.656250][ T8651] usb 3-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 856.657624][ T8651] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.657647][ T8651] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 856.668369][ T8651] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.668393][ T8651] usb 3-1: Product: syz [ 856.668406][ T8651] usb 3-1: Manufacturer: syz [ 856.668419][ T8651] usb 3-1: SerialNumber: syz [ 856.695974][ T8651] usb 3-1: 0:2 : does not exist [ 856.863280][T12397] FAULT_INJECTION: forcing a failure. [ 856.863280][T12397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.863302][T12397] CPU: 0 UID: 0 PID: 12397 Comm: syz.7.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 856.863316][T12397] Tainted: [L]=SOFTLOCKUP [ 856.863322][T12397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 856.863332][T12397] Call Trace: [ 856.863340][T12397] [ 856.863348][T12397] dump_stack_lvl+0xe8/0x150 [ 856.863384][T12397] should_fail_ex+0x3eb/0x540 [ 856.863409][T12397] _copy_from_user+0x2d/0xb0 [ 856.863423][T12397] do_ipv6_setsockopt+0x245/0x2960 [ 856.863441][T12397] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 856.863453][T12397] ? aa_inet_opt_perm+0x94d/0xcd0 [ 856.863467][T12397] ? get_pid_task+0x20/0x1f0 [ 856.863494][T12397] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 856.863535][T12397] ? ksys_write+0x1e6/0x270 [ 856.863564][T12397] ? lock_acquire+0x115/0x350 [ 856.863582][T12397] ? aa_sock_opt_perm+0xe1/0x1e0 [ 856.863598][T12397] ipv6_setsockopt+0x59/0x170 [ 856.863611][T12397] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 856.863630][T12397] do_sock_setsockopt+0x17c/0x1b0 [ 856.863660][T12397] __x64_sys_setsockopt+0x13d/0x1b0 [ 856.863691][T12397] do_syscall_64+0x166/0x520 [ 856.863708][T12397] ? trace_irq_disable+0x3b/0x140 [ 856.863725][T12397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.863736][T12397] ? clear_bhb_loop+0x70/0xc0 [ 856.863748][T12397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.863757][T12397] RIP: 0033:0x7f533e39f559 [ 856.863768][T12397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.863778][T12397] RSP: 002b:00007f533f1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 856.863797][T12397] RAX: ffffffffffffffda RBX: 00007f533e626090 RCX: 00007f533e39f559 [ 856.863811][T12397] RDX: 000000000000003c RSI: 0000000000000029 RDI: 0000000000000003 [ 856.863822][T12397] RBP: 00007f533f1a6090 R08: 0000000000000004 R09: 0000000000000000 [ 856.863834][T12397] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.863845][T12397] R13: 00007f533e626128 R14: 00007f533e626090 R15: 00007f533e74fa48 [ 856.863871][T12397] [ 857.164817][ T194] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 857.316944][ T194] usb 6-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 857.318223][ T194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 857.318250][ T194] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 857.318309][ T194] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.400738][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 857.401335][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 857.401800][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 857.403209][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 857.404592][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 857.439744][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 857.474165][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 857.486890][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 857.488455][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 857.489576][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 857.490836][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 857.492157][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 857.492688][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 857.493621][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 857.494460][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 857.505792][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 857.528738][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 857.563196][ T5768] ax88179_178a 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 857.640639][ T5768] ax88179_178a 7-1:1.0 eth14: register 'ax88179_178a' at usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet, c2:63:fd:b0:3e:a8 [ 857.642935][ T5768] usb 7-1: USB disconnect, device number 54 [ 857.675310][ T5768] ax88179_178a 7-1:1.0 eth14: unregister 'ax88179_178a' usb-dummy_hcd.6-1, ASIX AX88179 USB 3.0 Gigabit Ethernet [ 858.059300][T12396] xt_NETMAP: bad MAP_IPS. [ 858.342502][ T194] usbhid 6-1:1.0: can't add hid device: -71 [ 858.342604][ T194] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 858.375769][ T194] usb 6-1: USB disconnect, device number 64 [ 858.638213][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 858.638241][ T30] audit: type=1326 audit(1793405783.832:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.638281][ T30] audit: type=1326 audit(1793405783.832:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.648107][ T30] audit: type=1326 audit(1793405783.852:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.648153][ T30] audit: type=1326 audit(1793405783.852:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.648413][ T30] audit: type=1326 audit(1793405783.852:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.648760][ T30] audit: type=1326 audit(1793405783.852:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.648798][ T30] audit: type=1326 audit(1793405783.852:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.829834][ T30] audit: type=1326 audit(1793405784.032:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.830106][ T30] audit: type=1326 audit(1793405784.032:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.850507][ T30] audit: type=1326 audit(1793405784.032:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.6.1814" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 858.915980][ T8651] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 858.981562][ T8651] usb 3-1: USB disconnect, device number 86 [ 859.074080][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 859.554995][ T194] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 859.615788][ T6259] net_ratelimit: 35 callbacks suppressed [ 859.615812][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 859.714831][ T194] usb 7-1: Using ep0 maxpacket: 16 [ 859.718844][ T194] usb 7-1: New USB device found: idVendor=0763, idProduct=2001, bcdDevice=0.40 [ 859.725826][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 859.760450][ T194] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 859.760469][ T194] usb 7-1: config 1 has no interface number 0 [ 859.760491][ T194] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 859.808200][ T194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.808226][ T194] usb 7-1: Product: syz [ 859.808240][ T194] usb 7-1: Manufacturer: syz [ 859.808252][ T194] usb 7-1: SerialNumber: syz [ 859.850653][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 859.965110][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.082838][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.256417][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.367396][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.438864][T12421] kvm: debugfs: duplicate directory 12421-29 [ 860.480634][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.585219][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 860.605329][T12421] kvm: debugfs: duplicate directory 12421-27 [ 860.695101][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 861.131623][ T194] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 861.282169][ T194] usb 7-1: USB disconnect, device number 55 [ 861.344113][ T9299] udevd[9299]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 861.406603][T12433] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 862.636720][T12461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 862.638804][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1833'. [ 862.644867][ T5747] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 862.818954][ T5747] usb 1-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 862.821151][ T5747] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.821174][ T5747] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 862.821204][ T5747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.834375][ T5747] usb 1-1: config 0 descriptor?? [ 862.883226][T12461] team0: Port device team_slave_0 removed [ 863.227910][ T8651] usb 1-1: USB disconnect, device number 68 [ 863.398528][T12480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1838'. [ 863.423159][T12482] FAULT_INJECTION: forcing a failure. [ 863.423159][T12482] name failslab, interval 1, probability 0, space 0, times 0 [ 863.423179][T12482] CPU: 0 UID: 0 PID: 12482 Comm: syz.7.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.423193][T12482] Tainted: [L]=SOFTLOCKUP [ 863.423197][T12482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 863.423204][T12482] Call Trace: [ 863.423208][T12482] [ 863.423213][T12482] dump_stack_lvl+0xe8/0x150 [ 863.423234][T12482] should_fail_ex+0x3eb/0x540 [ 863.423249][T12482] should_failslab+0xa8/0x100 [ 863.423265][T12482] __kvmalloc_node_noprof+0x171/0x820 [ 863.423280][T12482] ? bpf_compute_idoms+0xcc/0x1940 [ 863.423291][T12482] ? bpf_compute_idoms+0xcc/0x1940 [ 863.423304][T12482] bpf_compute_idoms+0xcc/0x1940 [ 863.423319][T12482] ? __pfx_bpf_compute_subprog_ret_regs+0x10/0x10 [ 863.423333][T12482] ? prepare_subprog_args+0x40f/0x450 [ 863.423348][T12482] bpf_check+0x2cc3/0x34e0 [ 863.423364][T12482] ? ktime_get_with_offset+0x93/0x2d0 [ 863.423379][T12482] ? ktime_get_with_offset+0x93/0x2d0 [ 863.423392][T12482] ? __pfx_bpf_check+0x10/0x10 [ 863.423404][T12482] ? bpf_obj_name_cpy+0x194/0x1e0 [ 863.423419][T12482] bpf_prog_load+0x14da/0x1c60 [ 863.423435][T12482] ? __pfx_bpf_prog_load+0x10/0x10 [ 863.423453][T12482] ? __might_fault+0xaf/0x130 [ 863.423466][T12482] __sys_bpf+0xd86/0xe00 [ 863.423480][T12482] ? __pfx___sys_bpf+0x10/0x10 [ 863.423496][T12482] ? __fget_files+0x2a/0x420 [ 863.423516][T12482] ? ksys_write+0x242/0x270 [ 863.423531][T12482] ? __pfx_ksys_write+0x10/0x10 [ 863.423552][T12482] __x64_sys_bpf+0xba/0xd0 [ 863.423567][T12482] do_syscall_64+0x166/0x520 [ 863.423578][T12482] ? trace_irq_disable+0x3b/0x140 [ 863.423592][T12482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.423602][T12482] ? clear_bhb_loop+0x70/0xc0 [ 863.423616][T12482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.423631][T12482] RIP: 0033:0x7f533e39f559 [ 863.423648][T12482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.423659][T12482] RSP: 002b:00007f533f1c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.423671][T12482] RAX: ffffffffffffffda RBX: 00007f533e625fa0 RCX: 00007f533e39f559 [ 863.423678][T12482] RDX: 0000000000000048 RSI: 00002000000010c0 RDI: 0000000000000005 [ 863.423685][T12482] RBP: 00007f533f1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 863.423691][T12482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 863.423697][T12482] R13: 00007f533e626038 R14: 00007f533e625fa0 R15: 00007f533e74fa48 [ 863.423714][T12482] [ 863.714440][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 863.736937][T12487] netlink: 'syz.7.1841': attribute type 4 has an invalid length. [ 863.741137][T12484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1840'. [ 864.028146][ T30] kauditd_printk_skb: 180 callbacks suppressed [ 864.028165][ T30] audit: type=1800 audit(1793405789.232:3466): pid=12455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1828" name="file2" dev="fuse" ino=0 res=0 errno=-4 [ 864.264888][ T8651] usb 3-1: new low-speed USB device number 87 using dummy_hcd [ 864.394842][ T8651] usb 3-1: device descriptor read/64, error -71 [ 864.476688][ T194] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 864.639930][ T194] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 864.641218][ T194] usb 1-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 864.641263][ T194] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 864.650703][ T6251] net_ratelimit: 32 callbacks suppressed [ 864.650720][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 864.663155][ T194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 864.663180][ T194] usb 1-1: SerialNumber: syz [ 864.664836][ T5768] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 864.682281][ T8651] usb 3-1: new low-speed USB device number 88 using dummy_hcd [ 864.700058][ T194] cdc_ether 1-1:1.0: skipping garbage [ 864.700081][ T194] cdc_ether 1-1:1.0: missing cdc header ether descriptor [ 864.755296][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 864.804933][ T5768] usb 7-1: Using ep0 maxpacket: 8 [ 864.810532][ T5768] usb 7-1: New USB device found: idVendor=046d, idProduct=c623, bcdDevice=0.00 [ 864.814653][ T5768] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.814674][ T5768] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.814685][ T5768] usb 7-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.814776][ T5768] usb 7-1: config 0 interface 0 has no altsetting 0 [ 864.814811][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.821649][ T5768] usb 7-1: config 0 descriptor?? [ 864.888031][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 864.896662][ T8651] usb 3-1: device descriptor read/64, error -71 [ 864.985625][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.005073][ T8651] usb usb3-port1: attempt power cycle [ 865.095540][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.206525][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.257021][ T5768] input: HID 046d:c623 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:046D:C623.0015/input/input45 [ 865.316081][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.355214][ T8651] usb 3-1: new low-speed USB device number 89 using dummy_hcd [ 865.375524][ T8651] usb 3-1: device descriptor read/8, error -71 [ 865.397970][ T5768] logitech 0003:046D:C623.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.6-1/input0 [ 865.425087][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.537263][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.625371][ T8651] usb 3-1: new low-speed USB device number 90 using dummy_hcd [ 865.649380][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 865.663686][ T8651] usb 3-1: device descriptor read/8, error -71 [ 865.765510][ T8651] usb usb3-port1: unable to enumerate USB device [ 866.513614][T12539] netlink: 272 bytes leftover after parsing attributes in process `syz.7.1853'. [ 867.058339][ T5776] usb 1-1: USB disconnect, device number 69 [ 867.090945][ T30] audit: type=1326 audit(1793405792.292:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.093983][ T30] audit: type=1326 audit(1793405792.292:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.151757][ T30] audit: type=1326 audit(1793405792.322:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.158503][ T30] audit: type=1326 audit(1793405792.352:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.164934][ T30] audit: type=1326 audit(1793405792.362:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.241093][ T194] usb 7-1: USB disconnect, device number 56 [ 867.277504][ T30] audit: type=1326 audit(1793405792.482:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cc515fd8e code=0x7ffc0000 [ 867.294784][ T30] audit: type=1326 audit(1793405792.492:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9cc515fd8e code=0x7ffc0000 [ 867.335789][ T30] audit: type=1326 audit(1793405792.542:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.370050][ T30] audit: type=1326 audit(1793405792.542:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12543 comm="syz.6.1855" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cc519f559 code=0x7ffc0000 [ 867.705926][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 867.733516][ T194] dummy0: entered promiscuous mode [ 867.736181][T12550] macvtap1: entered allmulticast mode [ 867.736203][T12550] dummy0: entered allmulticast mode [ 867.756720][T12550] dummy0: left allmulticast mode [ 867.759666][T12556] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1858'. [ 867.759680][T12556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 867.833739][T12565] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 867.833767][T12565] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 867.833820][T12565] vhci_hcd vhci_hcd.0: Device attached [ 867.904250][T12569] vhci_hcd: connection closed [ 867.905242][ T6259] vhci_hcd vhci_hcd.5: stop threads [ 867.905265][ T6259] vhci_hcd vhci_hcd.5: release socket [ 867.905283][ T6259] vhci_hcd vhci_hcd.5: disconnect device [ 867.978487][ T194] dummy0: left promiscuous mode [ 868.016005][ T194] dummy0: entered promiscuous mode [ 868.017344][T12556] macvtap1: entered allmulticast mode [ 868.017361][T12556] dummy0: entered allmulticast mode [ 868.036129][T12556] dummy0: left allmulticast mode [ 868.083010][T12576] FAULT_INJECTION: forcing a failure. [ 868.083010][T12576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.096057][T12576] CPU: 0 UID: 0 PID: 12576 Comm: syz.6.1862 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.096085][T12576] Tainted: [L]=SOFTLOCKUP [ 868.096092][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 868.096103][T12576] Call Trace: [ 868.096112][T12576] [ 868.096120][T12576] dump_stack_lvl+0xe8/0x150 [ 868.096153][T12576] should_fail_ex+0x3eb/0x540 [ 868.096177][T12576] _copy_to_user+0x31/0xb0 [ 868.096200][T12576] simple_read_from_buffer+0xe1/0x170 [ 868.096226][T12576] proc_fail_nth_read+0x1bb/0x230 [ 868.096257][T12576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.096286][T12576] ? rw_verify_area+0x24a/0x4c0 [ 868.096309][T12576] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 868.096334][T12576] vfs_read+0x213/0xa80 [ 868.096361][T12576] ? __pfx___mutex_lock+0x10/0x10 [ 868.096382][T12576] ? __pfx_vfs_read+0x10/0x10 [ 868.096405][T12576] ? __fget_files+0x2a/0x420 [ 868.096424][T12576] ? __fget_files+0x3a2/0x420 [ 868.096443][T12576] ? __fget_files+0x2a/0x420 [ 868.096466][T12576] ? fdget+0x1ac/0x250 [ 868.096492][T12576] ksys_read+0x150/0x270 [ 868.096516][T12576] ? __pfx_ksys_read+0x10/0x10 [ 868.096549][T12576] do_syscall_64+0x166/0x520 [ 868.096566][T12576] ? trace_irq_disable+0x3b/0x140 [ 868.096588][T12576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.096606][T12576] ? clear_bhb_loop+0x70/0xc0 [ 868.096627][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.096644][T12576] RIP: 0033:0x7f9cc515fd8e [ 868.096661][T12576] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.096675][T12576] RSP: 002b:00007f9cc602afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 868.096694][T12576] RAX: ffffffffffffffda RBX: 00007f9cc602b6c0 RCX: 00007f9cc515fd8e [ 868.096707][T12576] RDX: 000000000000000f RSI: 00007f9cc602b0a0 RDI: 0000000000000007 [ 868.096718][T12576] RBP: 00007f9cc602b090 R08: 0000000000000000 R09: 0000000000000000 [ 868.096729][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.096739][T12576] R13: 00007f9cc5426128 R14: 00007f9cc5426090 R15: 00007f9cc554fa48 [ 868.096769][T12576] [ 868.114103][ T194] dummy0: left promiscuous mode [ 868.178084][T12579] netlink: 'syz.6.1863': attribute type 15 has an invalid length. [ 868.505997][T12589] fuse: Bad value for 'fd' [ 868.636014][T12595] netlink: 'syz.5.1868': attribute type 1 has an invalid length. [ 868.636028][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1868'. [ 868.727444][T12597] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6730] was attempted by ""[12597] [ 869.294987][ T5755] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 869.435003][ T5755] usb 7-1: device descriptor read/64, error -71 [ 869.675103][ T5755] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 869.704856][ T6251] net_ratelimit: 30 callbacks suppressed [ 869.704878][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.804883][ T5755] usb 7-1: device descriptor read/64, error -71 [ 869.814950][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 869.862452][T12612] fuse: Bad value for 'fd' [ 869.915045][ T5755] usb usb7-port1: attempt power cycle [ 869.930278][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.035727][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.227654][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.239636][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.239694][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.269320][ T5755] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 870.295569][ T5755] usb 7-1: device descriptor read/8, error -71 [ 870.335040][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.445034][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.464840][ T5768] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 870.545635][ T5755] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 870.562625][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.575894][ T5755] usb 7-1: device descriptor read/8, error -71 [ 870.615033][ T5768] usb 6-1: Using ep0 maxpacket: 16 [ 870.618255][ T5768] usb 6-1: New USB device found: idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 870.619297][ T5768] usb 6-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 870.619319][ T5768] usb 6-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 870.619362][ T5768] usb 6-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 870.619377][ T5768] usb 6-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 870.619389][ T5768] usb 6-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 870.621241][ T5768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.621262][ T5768] usb 6-1: Product: syz [ 870.621271][ T5768] usb 6-1: Manufacturer: syz [ 870.621278][ T5768] usb 6-1: SerialNumber: syz [ 870.674941][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.695232][ T5755] usb usb7-port1: unable to enumerate USB device [ 870.785948][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 870.867320][ T5768] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 870.867563][ T5768] powermate 6-1:129.0: probe with driver powermate failed with error -5 [ 870.893265][ T5768] usb 6-1: USB disconnect, device number 65 [ 871.288604][T12656] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5701] was attempted by ""[12656] [ 872.141912][T12638] syz.7.1883 (12638): drop_caches: 2 [ 872.203548][T12673] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 872.203564][T12673] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 872.274572][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1890'. [ 872.284964][ T5768] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 872.456738][ T5768] usb 6-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 872.460601][ T5768] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.460618][ T5768] usb 6-1: Product: syz [ 872.460625][ T5768] usb 6-1: Manufacturer: syz [ 872.460633][ T5768] usb 6-1: SerialNumber: syz [ 872.465131][ T5768] usb 6-1: config 0 descriptor?? [ 872.476069][ T5768] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 872.841314][T12687] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1894'. [ 872.976774][T12687] netlink: 'syz.7.1894': attribute type 3 has an invalid length. [ 872.976796][T12687] netlink: 152 bytes leftover after parsing attributes in process `syz.7.1894'. [ 872.976836][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1894'. [ 873.098499][T12668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.335753][ T194] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 873.407692][ T5768] gspca_sunplus: reg_r err -110 [ 873.407745][ T5768] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 873.499294][ T194] usb 7-1: unable to get BOS descriptor or descriptor too short [ 873.499327][ T194] usb 7-1: New USB device found: idVendor=07ca, idProduct=2835, bcdDevice=ea.e7 [ 873.501707][ T194] usb 7-1: config 3 has an invalid interface number: 73 but max is 1 [ 873.501733][ T194] usb 7-1: config 3 has no interface number 1 [ 873.501783][ T194] usb 7-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 873.501807][ T194] usb 7-1: config 3 interface 0 has no altsetting 0 [ 873.501823][ T194] usb 7-1: config 3 interface 73 has no altsetting 0 [ 873.508651][ T194] usb 7-1: string descriptor 0 read error: -22 [ 873.508781][ T194] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.570894][ T194] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 873.570957][ T194] dvb_usb_af9035 7-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 873.680943][ T194] usb 6-1: USB disconnect, device number 66 [ 873.756824][ T5768] usb 7-1: USB disconnect, device number 61 [ 873.860273][T12695] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6912] was attempted by ""[12695] [ 874.023397][ T30] kauditd_printk_skb: 141 callbacks suppressed [ 874.023413][ T30] audit: type=1804 audit(1793405799.222:3617): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1901" name="/newroot/379/file1" dev="fuse" ino=1 res=1 errno=0 [ 874.591863][T12722] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1908'. [ 874.616976][ T5747] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 874.724917][ T6259] net_ratelimit: 31 callbacks suppressed [ 874.724937][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.768112][ T5747] usb 1-1: New USB device found: idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 874.769533][ T5747] usb 1-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 874.769561][ T5747] usb 1-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.771040][ T5747] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 874.771055][ T5747] usb 1-1: Manufacturer: syz [ 874.771062][ T5747] usb 1-1: SerialNumber: syz [ 874.834874][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 874.885599][ T5768] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 874.944848][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.047153][ T5768] usb 7-1: New USB device found: idVendor=0424, idProduct=cf19, bcdDevice=71.90 [ 875.048758][ T5768] usb 7-1: config 255 has an invalid interface number: 97 but max is 1 [ 875.048779][ T5768] usb 7-1: config 255 has an invalid interface descriptor of length 2, skipping [ 875.048795][ T5768] usb 7-1: config 255 has an invalid interface number: 227 but max is 1 [ 875.048826][ T5768] usb 7-1: config 255 has no interface number 0 [ 875.048840][ T5768] usb 7-1: config 255 has no interface number 1 [ 875.048887][ T5768] usb 7-1: config 255 interface 97 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.048912][ T5768] usb 7-1: config 255 interface 97 has no altsetting 0 [ 875.048927][ T5768] usb 7-1: config 255 interface 227 has no altsetting 0 [ 875.053858][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.053880][ T5768] usb 7-1: Product: syz [ 875.053893][ T5768] usb 7-1: Manufacturer: syz [ 875.053906][ T5768] usb 7-1: SerialNumber: syz [ 875.067919][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.078328][T12725] loop9: detected capacity change from 0 to 2640 [ 875.092059][T12725] buffer_io_error: 80 callbacks suppressed [ 875.092077][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.092137][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.092166][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098533][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098621][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098672][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098735][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098763][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098778][T12725] ldm_validate_partition_table(): Disk read failed. [ 875.098804][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098831][T12725] Buffer I/O error on dev loop9, logical block 0, async page read [ 875.098896][T12725] Dev loop9: unable to read RDB block 0 [ 875.099103][T12725] loop9: unable to read partition table [ 875.105113][T12725] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 875.185371][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.294856][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.304616][ T5747] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 875.321600][ T5747] usb 1-1: USB disconnect, device number 70 [ 875.420945][T12734] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1908'. [ 875.455921][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 875.458829][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.516012][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.626003][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.715901][T12742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1913'. [ 875.737293][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.844854][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 875.954803][ T5755] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 876.109927][ T5755] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 876.109963][ T5755] usb 3-1: too many configurations: 11, using maximum allowed: 8 [ 876.160959][ T5755] usb 3-1: string descriptor 0 read error: -71 [ 876.161093][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.182694][ T5755] usb 3-1: can't set config #1, error -71 [ 876.184264][ T5755] usb 3-1: USB disconnect, device number 91 [ 876.273276][T12750] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5701] was attempted by ""[12750] [ 876.845698][T12762] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1919'. [ 876.884990][ T5747] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 877.073946][ T5747] usb 6-1: Using ep0 maxpacket: 8 [ 877.261809][ T5776] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 877.435900][ T5776] usb 3-1: New USB device found: idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 877.448842][ T5776] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 877.448869][ T5776] usb 3-1: Product: syz [ 877.448882][ T5776] usb 3-1: Manufacturer: syz [ 877.448895][ T5776] usb 3-1: SerialNumber: syz [ 877.479300][ T5776] usb 3-1: config 0 descriptor?? [ 877.695542][ T5768] rndis_host 7-1:255.97: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 877.718294][ T5776] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 877.931310][ T5768] usb 7-1: USB disconnect, device number 62 [ 877.942405][T12762] netlink: 'syz.2.1919': attribute type 21 has an invalid length. [ 878.003912][ T5776] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 878.003984][ T5776] peak_usb 3-1:0.0: unable to tell PCAN-Chip USB driver is loaded (err -71) [ 878.216044][ T5776] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 878.246318][ T5776] usb 3-1: USB disconnect, device number 92 [ 878.365621][ T5768] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 878.517571][ T5768] usb 7-1: Using ep0 maxpacket: 32 [ 878.519701][ T5768] usb 7-1: unable to get BOS descriptor or descriptor too short [ 878.519747][ T5768] usb 7-1: New USB device found: idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 878.520883][ T5768] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 878.520898][ T5768] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 878.520908][ T5768] usb 7-1: config 14 has no interface number 0 [ 878.520921][ T5768] usb 7-1: config 14 has no interface number 1 [ 878.520979][ T5768] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 878.520999][ T5768] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 878.521014][ T5768] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 878.521034][ T5768] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 878.521047][ T5768] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 878.521059][ T5768] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 878.521080][ T5768] usb 7-1: config 14 interface 57 has no altsetting 0 [ 878.521125][ T5768] usb 7-1: config 14 interface 228 has no altsetting 0 [ 878.526347][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.526370][ T5768] usb 7-1: Product: syz [ 878.526383][ T5768] usb 7-1: Manufacturer: syz [ 878.526396][ T5768] usb 7-1: SerialNumber: syz [ 879.009040][ T5768] legousbtower 7-1:14.57: interrupt endpoints not found [ 879.033075][T12778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.066510][T12778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 879.688894][T12782] netlink: 'syz.6.1922': attribute type 5 has an invalid length. [ 879.832894][ T6259] net_ratelimit: 33 callbacks suppressed [ 879.832918][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 879.892348][ T5747] usb 6-1: unable to get BOS descriptor or descriptor too short [ 879.892398][ T5747] usb 6-1: New USB device found: idVendor=2b73, idProduct=0013, bcdDevice=1.40 [ 879.916462][ T5747] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 879.916501][ T5747] usb 6-1: can't read configurations, error -71 [ 879.943643][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.045923][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.156028][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.267505][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.377560][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.485566][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.486980][T12802] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 880.490585][T12802] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6730] was attempted by ""[12802] [ 880.596074][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.708041][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 880.910230][ T5768] legousbtower 7-1:14.228: get version request failed: -71 [ 880.910405][ T5768] legousbtower 7-1:14.228: probe with driver legousbtower failed with error -71 [ 880.919990][ T5768] usb 7-1: USB disconnect, device number 63 [ 880.981175][T12806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 881.004214][ T194] input: syz0 as /devices/virtual/misc/uhid/0005:0070:0306.0016/input/input48 [ 881.153940][ T194] hid-generic 0005:0070:0306.0016: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 881.432428][T12815] misc userio: Begin command sent, but we're already running [ 881.557342][ T30] audit: type=1326 audit(1793405806.762:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.560515][ T30] audit: type=1326 audit(1793405806.762:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.560544][ T30] audit: type=1326 audit(1793405806.762:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.560565][ T30] audit: type=1326 audit(1793405806.762:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.562070][ T30] audit: type=1326 audit(1793405806.762:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.562099][ T30] audit: type=1326 audit(1793405806.762:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.562422][ T30] audit: type=1326 audit(1793405806.762:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.562635][ T30] audit: type=1326 audit(1793405806.762:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.562982][ T30] audit: type=1326 audit(1793405806.762:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.563483][ T30] audit: type=1326 audit(1793405806.762:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12817 comm="syz.2.1937" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff130f9f559 code=0x7ffc0000 [ 881.846093][ T5776] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 881.928406][T12822] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 881.996659][ T5776] usb 7-1: New USB device found: idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 882.000774][ T5776] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 882.000799][ T5776] usb 7-1: Product: syz [ 882.000812][ T5776] usb 7-1: SerialNumber: syz [ 882.013386][ T5776] usb 7-1: config 0 descriptor?? [ 882.106493][T12826] FAULT_INJECTION: forcing a failure. [ 882.106493][T12826] name failslab, interval 1, probability 0, space 0, times 0 [ 882.106514][T12826] CPU: 0 UID: 0 PID: 12826 Comm: syz.0.1939 Tainted: G L syzkaller #0 PREEMPT(full) [ 882.106531][T12826] Tainted: [L]=SOFTLOCKUP [ 882.106534][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 882.106540][T12826] Call Trace: [ 882.106545][T12826] [ 882.106550][T12826] dump_stack_lvl+0xe8/0x150 [ 882.106571][T12826] should_fail_ex+0x3eb/0x540 [ 882.106586][T12826] should_failslab+0xa8/0x100 [ 882.106603][T12826] ? skb_clone+0x212/0x3a0 [ 882.106615][T12826] kmem_cache_alloc_noprof+0x9c/0x600 [ 882.106628][T12826] ? skb_clone+0x212/0x3a0 [ 882.106641][T12826] skb_clone+0x212/0x3a0 [ 882.106653][T12826] __netlink_deliver_tap+0x355/0x6e0 [ 882.106672][T12826] ? netlink_deliver_tap+0x2e/0x1b0 [ 882.106687][T12826] netlink_deliver_tap+0x19c/0x1b0 [ 882.106757][T12826] netlink_unicast+0x8c1/0xa80 [ 882.106779][T12826] netlink_sendmsg+0x7f0/0xb20 [ 882.106795][T12826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.106810][T12826] ? aa_sock_msg_perm+0x144/0x210 [ 882.106828][T12826] ? apparmor_socket_sendmsg+0x98/0x360 [ 882.106842][T12826] ? __pfx_netlink_sendmsg+0x10/0x10 [ 882.106853][T12826] sock_sendmsg_nosec+0x14e/0x190 [ 882.106867][T12826] ____sys_sendmsg+0x54e/0x850 [ 882.106885][T12826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 882.106905][T12826] ? import_iovec+0x73/0xa0 [ 882.106918][T12826] ___sys_sendmsg+0x2a5/0x360 [ 882.106931][T12826] ? __lock_acquire+0x747/0x2de0 [ 882.106947][T12826] ? __pfx____sys_sendmsg+0x10/0x10 [ 882.106979][T12826] ? __fget_files+0x3a2/0x420 [ 882.106992][T12826] ? __fget_files+0x2a/0x420 [ 882.107008][T12826] __x64_sys_sendmsg+0x1b1/0x290 [ 882.107024][T12826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 882.107049][T12826] do_syscall_64+0x166/0x520 [ 882.107060][T12826] ? trace_irq_disable+0x3b/0x140 [ 882.107073][T12826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.107084][T12826] ? clear_bhb_loop+0x70/0xc0 [ 882.107096][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.107106][T12826] RIP: 0033:0x7f7af1b9f559 [ 882.107118][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.107126][T12826] RSP: 002b:00007f7af2aa0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 882.107138][T12826] RAX: ffffffffffffffda RBX: 00007f7af1e25fa0 RCX: 00007f7af1b9f559 [ 882.107146][T12826] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 882.107152][T12826] RBP: 00007f7af2aa0090 R08: 0000000000000000 R09: 0000000000000000 [ 882.107159][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.107173][T12826] R13: 00007f7af1e26038 R14: 00007f7af1e25fa0 R15: 00007f7af1f4fa48 [ 882.107190][T12826] [ 882.107235][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1939'. [ 882.226156][ T194] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 882.242684][ T5776] hso 7-1:0.0: Failed to find BULK eps [ 882.383432][ T194] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 882.418219][ T194] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 882.418252][ T194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 882.418273][ T194] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 882.418292][ T194] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 882.418329][ T194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.429188][ T194] usb 3-1: config 0 descriptor?? [ 882.863227][ T194] usbhid 3-1:0.0: can't add hid device: -71 [ 882.863342][ T194] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 882.882506][ T194] usb 3-1: USB disconnect, device number 93 [ 883.068827][ T5768] usb 7-1: USB disconnect, device number 64 [ 883.121727][ T5776] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 883.156104][T12828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 883.269584][ T5776] usb 6-1: New USB device found: idVendor=1b5c, idProduct=0105, bcdDevice=1.f1 [ 883.270476][ T5776] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 883.270510][ T5776] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 883.270523][ T5776] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.287810][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.287836][ T5776] usb 6-1: Product: syz [ 883.287849][ T5776] usb 6-1: Manufacturer: syz [ 883.287862][ T5776] usb 6-1: SerialNumber: syz [ 883.316012][ T5776] usb 6-1: config 0 descriptor?? [ 883.332907][ T5776] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 883.343379][ T5776] usb 6-1: Detected SIO [ 883.343399][ T5776] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 4 [ 883.360840][ T5776] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 883.553832][T12843] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1943'. [ 883.641156][T12848] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5701] was attempted by ""[12848] [ 883.744203][ T5776] usb 6-1: USB disconnect, device number 69 [ 883.762522][ T5776] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 883.764545][ T5776] ftdi_sio 6-1:0.0: device disconnected [ 883.807509][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1946'. [ 884.078026][ T5768] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 884.226228][ T5768] usb 7-1: Using ep0 maxpacket: 32 [ 884.226981][ T5768] usb 7-1: New USB device found: idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 884.228217][ T5768] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 884.228239][ T5768] usb 7-1: config 0 has no interface number 0 [ 884.228274][ T5768] usb 7-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 884.228294][ T5768] usb 7-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 884.230374][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.230396][ T5768] usb 7-1: Product: syz [ 884.230410][ T5768] usb 7-1: Manufacturer: syz [ 884.230423][ T5768] usb 7-1: SerialNumber: syz [ 884.261110][ T5768] usb 7-1: config 0 descriptor?? [ 884.276009][ T5768] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 884.418951][T12866] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1950'. [ 884.421867][ T9983] bond0: (slave bond_slave_0): interface is now down [ 884.421882][ T9983] bond0: (slave bond_slave_1): interface is now down [ 884.466817][ T5768] usb 7-1: qt2_setup_urbs - submit read urb failed -90 [ 884.466985][ T5768] quatech2 7-1:0.51: probe with driver quatech2 failed with error -90 [ 884.515943][ T9983] bond0: now running without any active interface! [ 884.638017][ T5776] usb 1-1: new full-speed USB device number 71 using dummy_hcd [ 884.694663][ T5768] usb 7-1: USB disconnect, device number 65 [ 884.787752][ T5776] usb 1-1: New USB device found: idVendor=067b, idProduct=2303, bcdDevice=1.00 [ 884.790746][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 884.790769][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 884.790782][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 884.790794][ T5776] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 884.829696][ T5776] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.829721][ T5776] usb 1-1: Product: syz [ 884.829734][ T5776] usb 1-1: Manufacturer: syz [ 884.829747][ T5776] usb 1-1: SerialNumber: syz [ 884.833409][T12865] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 884.833533][T12865] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 884.842311][ T5776] pl2303 1-1:1.0: pl2303 converter detected [ 884.848627][ T5776] pl2303 1-1:1.0: unknown device type, please report to linux-usb@vger.kernel.org [ 884.866238][ T6251] net_ratelimit: 34 callbacks suppressed [ 884.866255][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 884.966821][ T194] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 884.975075][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.044366][ T5768] usb 1-1: USB disconnect, device number 71 [ 885.093562][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.098936][ T194] usb 6-1: device descriptor read/64, error -71 [ 885.197131][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.305091][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.336945][ T194] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 885.372377][ T5683] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 885.415398][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 885.420041][T12899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 885.465342][ T194] usb 6-1: device descriptor read/64, error -71 [ 885.496664][T12900] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 885.530741][T12899] bridge0: entered promiscuous mode [ 885.532567][T12899] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.542181][ T9983] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 885.576016][ T194] usb usb6-port1: attempt power cycle [ 885.680910][T12899] veth1_vlan: left promiscuous mode [ 885.684596][T12899] veth0_vlan: left promiscuous mode [ 885.692730][T12899] veth0_vlan: entered promiscuous mode [ 885.703577][T12899] veth1_vlan: entered promiscuous mode [ 885.716956][T12899] veth1_macvtap: left promiscuous mode [ 885.720968][T12899] veth0_macvtap: left promiscuous mode [ 885.724351][T12899] veth0_macvtap: entered promiscuous mode [ 885.732920][T12899] veth1_macvtap: entered promiscuous mode [ 885.761890][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.773709][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.780765][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.789612][T12899] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.810485][T12899] bridge0: port 3(batadv1) entered blocking state [ 885.810553][T12899] bridge0: port 3(batadv1) entered forwarding state [ 885.812183][T12899] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 885.877901][T12905] fuse: Bad value for 'fd' [ 885.894102][T12905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1958'. [ 885.916813][ T194] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 885.937450][ T194] usb 6-1: device descriptor read/8, error -71 [ 885.969648][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.075555][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 886.175483][ T194] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 886.199702][ T194] usb 6-1: device descriptor read/8, error -71 [ 886.216012][ T5776] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 886.246490][T12921] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x47425247, 8, 0, 0, 0) [ 886.306259][ T194] usb usb6-port1: unable to enumerate USB device [ 886.367367][ T5776] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 886.368462][ T5776] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 886.369667][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 886.369690][ T5776] usb 1-1: SerialNumber: syz [ 886.807111][ T5776] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 886.826344][ T5776] usb 1-1: USB disconnect, device number 72 [ 886.973377][T12938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1963'. [ 888.165705][ T5747] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 888.238190][T12980] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1973'. [ 888.335429][ T5747] usb 6-1: New USB device found: idVendor=0424, idProduct=7850, bcdDevice=0.00 [ 888.345977][ T5747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.345993][ T5747] usb 6-1: Product: syz [ 888.346001][ T5747] usb 6-1: Manufacturer: syz [ 888.346008][ T5747] usb 6-1: SerialNumber: syz [ 888.414873][ T5755] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 888.495200][ T5776] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 888.560794][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 888.560822][ T5747] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 888.587902][ T5747] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -32 [ 888.589357][ T5755] usb 3-1: New USB device found: idVendor=056a, idProduct=012c, bcdDevice=0.00 [ 888.607300][ T5755] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 888.607337][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 888.607351][ T5755] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 130 [ 888.607374][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.658565][ T5755] usb 3-1: config 0 descriptor?? [ 888.684317][ T5776] usb 7-1: unable to get BOS descriptor or descriptor too short [ 888.685712][ T5776] usb 7-1: not running at top speed; connect to a high speed hub [ 888.685743][ T5776] usb 7-1: New USB device found: idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 888.687790][ T5776] usb 7-1: config index 0 descriptor too short (expected 7954, got 18) [ 888.687812][ T5776] usb 7-1: config 97 has too many interfaces: 225, using maximum allowed: 32 [ 888.687830][ T5776] usb 7-1: config 97 has 1 interface, different from the descriptor's value: 225 [ 888.687849][ T5776] usb 7-1: config 97 has no interface number 0 [ 888.698692][ T5776] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 888.698717][ T5776] usb 7-1: Product: syz [ 888.698729][ T5776] usb 7-1: Manufacturer: syz [ 888.698741][ T5776] usb 7-1: SerialNumber: syz [ 888.777288][ T5768] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 888.927868][ T5768] usb 1-1: New USB device found: idVendor=04d8, idProduct=c002, bcdDevice=0.00 [ 888.929714][ T5768] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.929732][ T5768] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.929752][ T5768] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.982527][ T5776] cdc_phonet 7-1:97.102: probe with driver cdc_phonet failed with error -22 [ 889.024479][ T5776] usb 7-1: USB disconnect, device number 66 [ 889.096791][ T5755] wacom 0003:056A:012C.0017: unknown main item tag 0x4 [ 889.120542][ T5755] wacom 0003:056A:012C.0017: hidraw0: USB HID v0.08 Device [HID 056a:012c] on usb-dummy_hcd.2-1/input0 [ 889.153406][T13003] xt_connbytes: Forcing CT accounting to be enabled [ 889.312006][T13003] xt_CT: No such helper "snmp" [ 889.398647][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x2 [ 889.398670][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398685][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398831][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398846][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398861][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398876][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398891][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.398905][ T5768] hid-picolcd 0003:04D8:C002.0018: unknown main item tag 0x0 [ 889.455155][ T5768] hid-picolcd 0003:04D8:C002.0018: unsupported KEY_STATE report [ 889.455784][ T5768] hid-picolcd 0003:04D8:C002.0018: probe with driver hid-picolcd failed with error -22 [ 889.473304][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 889.648888][T12986] xt_NETMAP: bad MAP_IPS. [ 889.709770][ T5768] usb 3-1: USB disconnect, device number 94 [ 889.806905][ T5776] usb 1-1: USB disconnect, device number 73 [ 889.896704][ T9983] net_ratelimit: 33 callbacks suppressed [ 889.896740][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.007715][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.115011][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.225784][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.335206][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.447875][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.458303][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1978'. [ 890.561155][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.667163][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.774934][ T5781] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 890.887796][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 891.048124][ T5776] usb 6-1: USB disconnect, device number 74 [ 891.398957][T13087] tipc: Enabled bearer , priority 0 [ 891.440716][ T194] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 891.534310][T13092] sg_write: data in/out 483340/136 bytes for SCSI command 0x0-- guessing data in; [ 891.534310][T13092] program syz.6.1988 not setting count and/or reply_len properly [ 891.585956][ T194] usb 3-1: not running at top speed; connect to a high speed hub [ 891.585978][ T194] usb 3-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 891.587126][ T194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.587162][ T194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.608948][ T194] uvcvideo 3-1:1.0: Found UVC 1.00 device (046d:0825) [ 891.805611][ T5776] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 891.934980][ T5768] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 891.954786][ T5776] usb 6-1: Using ep0 maxpacket: 8 [ 891.958311][ T5776] usb 6-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 891.959457][ T5776] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 891.968182][ T5776] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.968208][ T5776] usb 6-1: Product: syz [ 891.968222][ T5776] usb 6-1: Manufacturer: syz [ 891.968234][ T5776] usb 6-1: SerialNumber: syz [ 891.973641][ T5776] usb 6-1: config 0 descriptor?? [ 892.025563][ T5776] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 892.087826][ T5768] usb 7-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 892.089171][ T5768] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 892.089205][ T5768] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.089217][ T5768] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 892.089261][ T5768] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 892.091363][ T5768] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 892.091385][ T5768] usb 7-1: Product: syz [ 892.091397][ T5768] usb 7-1: Manufacturer: syz [ 892.109805][ T5768] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 892.223800][ T194] uvcvideo 3-1:1.1: Failed to set UVC probe control : -71 (exp. 26). [ 892.225808][ T194] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 892.225890][ T194] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 892.226661][ T194] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 892.270842][ T194] usb 3-1: USB disconnect, device number 95 [ 892.445073][ T5768] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 892.529823][ T8651] tipc: Node number set to 1272145189 [ 892.597617][ T5768] usb 1-1: New USB device found: idVendor=0644, idProduct=8047, bcdDevice=1.00 [ 892.599331][ T5768] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 892.599348][ T5768] usb 1-1: config 1 has no interface number 0 [ 892.602571][ T5768] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.602589][ T5768] usb 1-1: Product: syz [ 892.602596][ T5768] usb 1-1: Manufacturer: syz [ 892.602603][ T5768] usb 1-1: SerialNumber: syz [ 892.641354][ T5768] usb 1-1: 3:0 : does not exist [ 892.641376][ T5768] usb 1-1: 3:0 : does not exist [ 892.764899][ T194] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 892.915243][ T194] usb 3-1: Using ep0 maxpacket: 16 [ 892.921262][ T194] usb 3-1: New USB device found: idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 892.923253][ T194] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 892.923268][ T194] usb 3-1: config 127 has no interface number 0 [ 892.923283][ T194] usb 3-1: config 127 interface 124 has no altsetting 0 [ 892.929312][ T194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.929335][ T194] usb 3-1: Product: syz [ 892.929348][ T194] usb 3-1: Manufacturer: syz [ 892.929361][ T194] usb 3-1: SerialNumber: syz [ 893.001919][T13149] netlink: 'syz.0.1991': attribute type 1 has an invalid length. [ 893.980919][ T194] usb 3-1: USB disconnect, device number 96 [ 894.063614][ T5776] gspca_zc3xx: i2c_w status error d4 [ 894.102366][T13205] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1996'. [ 894.640323][ T194] usb 7-1: USB disconnect, device number 67 [ 894.702020][ T5776] gspca_zc3xx: i2c_r status error d4 [ 894.951887][T13215] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 894.951914][T13215] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 894.959465][ T6251] net_ratelimit: 32 callbacks suppressed [ 894.959492][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.064977][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.105635][ T5776] gspca_zc3xx: reg_r err -71 [ 895.105725][ T5776] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 895.111365][ T5776] usb 6-1: USB disconnect, device number 75 [ 895.174949][ T7284] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.177598][T13223] netlink: 'syz.6.2000': attribute type 1 has an invalid length. [ 895.198270][ T194] usb 1-1: USB disconnect, device number 74 [ 895.335718][T13223] bond2: option mode: invalid value (8) [ 895.361693][T13223] bond2 (unregistering): Released all slaves [ 895.424123][T13316] netlink: 'syz.6.2000': attribute type 10 has an invalid length. [ 895.424137][T13316] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2000'. [ 895.625467][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.631770][T13316] dummy0: entered promiscuous mode [ 895.661943][T13319] syz.0.2002: vmalloc error: size 8192, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 895.662015][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.0.2002 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.662040][T13319] Tainted: [L]=SOFTLOCKUP [ 895.662047][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 895.662059][T13319] Call Trace: [ 895.662067][T13319] [ 895.662076][T13319] dump_stack_lvl+0xe8/0x150 [ 895.662112][T13319] warn_alloc+0x24d/0x270 [ 895.662142][T13319] ? __pfx_warn_alloc+0x10/0x10 [ 895.662162][T13319] ? policy_nodemask+0x31b/0x980 [ 895.662196][T13319] ? alloc_pages_mpol+0x256/0x390 [ 895.662237][T13319] __vmalloc_node_range_noprof+0x12fd/0x16f0 [ 895.662296][T13319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 895.662325][T13319] ? security_capable+0xb9/0x2c0 [ 895.662354][T13319] ? bpf_check+0x14ae/0x34e0 [ 895.662372][T13319] __vmalloc_noprof+0xd2/0x120 [ 895.662391][T13319] ? bpf_check+0x14ae/0x34e0 [ 895.662419][T13319] bpf_check+0x14ae/0x34e0 [ 895.662449][T13319] ? ktime_get_with_offset+0x93/0x2d0 [ 895.662474][T13319] ? ktime_get_with_offset+0x93/0x2d0 [ 895.662497][T13319] ? __pfx_bpf_check+0x10/0x10 [ 895.662519][T13319] ? bpf_obj_name_cpy+0x194/0x1e0 [ 895.662546][T13319] bpf_prog_load+0x14da/0x1c60 [ 895.662578][T13319] ? __pfx_bpf_prog_load+0x10/0x10 [ 895.662612][T13319] ? __might_fault+0xaf/0x130 [ 895.662637][T13319] __sys_bpf+0xd86/0xe00 [ 895.662664][T13319] ? __pfx___sys_bpf+0x10/0x10 [ 895.662685][T13319] ? do_futex+0x3e7/0x4e0 [ 895.662734][T13319] ? rcu_is_watching+0x16/0xb0 [ 895.662769][T13319] __x64_sys_bpf+0xba/0xd0 [ 895.662798][T13319] do_syscall_64+0x166/0x520 [ 895.662818][T13319] ? trace_irq_disable+0x3b/0x140 [ 895.662841][T13319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.662861][T13319] ? clear_bhb_loop+0x70/0xc0 [ 895.662884][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.662902][T13319] RIP: 0033:0x7f7af1b9f559 [ 895.662917][T13319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.662932][T13319] RSP: 002b:00007f7af2a7e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.662951][T13319] RAX: ffffffffffffffda RBX: 00007f7af1e26090 RCX: 00007f7af1b9f559 [ 895.662964][T13319] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 895.662976][T13319] RBP: 00007f7af1c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 895.662988][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.663000][T13319] R13: 00007f7af1e26128 R14: 00007f7af1e26090 R15: 00007f7af1f4fa48 [ 895.663032][T13319] [ 895.688224][T13319] Mem-Info: [ 895.688240][T13319] active_anon:51843 inactive_anon:14673 isolated_anon:0 [ 895.688240][T13319] active_file:153 inactive_file:61932 isolated_file:0 [ 895.688240][T13319] unevictable:0 dirty:410 writeback:0 [ 895.688240][T13319] slab_reclaimable:12675 slab_unreclaimable:103070 [ 895.688240][T13319] mapped:34262 shmem:58985 pagetables:1960 [ 895.688240][T13319] sec_pagetables:0 bounce:0 [ 895.688240][T13319] kernel_misc_reclaimable:0 [ 895.688240][T13319] free:1211798 free_pcp:13163 free_cma:0 [ 895.688386][T13319] Node 0 active_anon:207372kB inactive_anon:58692kB active_file:612kB inactive_file:247524kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137044kB dirty:1640kB writeback:0kB shmem:235940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15084kB pagetables:7716kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 895.688446][T13319] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 895.688492][T13319] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.688547][T13319] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 895.688579][T13319] Node 0 DMA32 free:889036kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:207372kB inactive_anon:58692kB active_file:612kB inactive_file:247524kB unevictable:0kB writepending:1640kB zspages:3180kB present:3129332kB managed:2522984kB mlocked:0kB bounce:0kB free_pcp:52648kB local_pcp:20452kB free_cma:0kB [ 895.688633][T13319] lowmem_reserve[]: 0 0 1 1 1 [ 895.688663][T13319] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1400kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 895.689495][T13319] lowmem_reserve[]: 0 0 0 0 0 [ 895.689529][T13319] Node 1 Normal free:3942796kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 895.689582][T13319] lowmem_reserve[]: 0 0 0 0 0 [ 895.689613][T13319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 895.689716][T13319] Node 0 DMA32: 3270*4kB (UME) 1575*8kB (UME) 1616*16kB (UME) 1118*32kB (UME) 371*64kB (UME) 790*128kB (UME) 356*256kB (UME) [ 895.738202][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.738640][T13319] 130*512kB (ME) 55*1024kB (UME) 6*2048kB (UM) 110*4096kB (UM) = 889040kB [ 895.738701][T13319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 895.738790][T13319] Node 1 Normal: 1*4kB (U) 1*8kB (M) 10*16kB (UM) 9*32kB (UM) 7*64kB (UM) 6*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3942796kB [ 895.738927][T13319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.738943][T13319] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 895.738958][T13319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 895.738972][T13319] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 895.738987][T13319] 120939 total pagecache pages [ 895.738996][T13319] 26 pages in swap cache [ 895.739003][T13319] Free swap = 100212kB [ 895.739010][T13319] Total swap = 124996kB [ 895.739017][T13319] 2097051 pages RAM [ 895.739024][T13319] 0 pages HighMem/MovableOnly [ 895.739031][T13319] 434339 pages reserved [ 895.739038][T13319] 0 pages cma reserved [ 895.851005][ T6251] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 895.905062][ T5000] buffer_io_error: 11 callbacks suppressed [ 895.905080][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905111][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905136][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905160][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905185][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905226][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905264][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905293][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905306][ T5000] ldm_validate_partition_table(): Disk read failed. [ 895.905329][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905353][ T5000] Buffer I/O error on dev loop9, logical block 0, async page read [ 895.905397][ T5000] Dev loop9: unable to read RDB block 0 [ 895.905563][ T5000] loop9: unable to read partition table [ 895.957311][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 896.065761][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 896.176583][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 896.285738][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 897.056418][T13361] loop4: detected capacity change from 0 to 2640 [ 897.067028][T13361] ldm_validate_partition_table(): Disk read failed. [ 897.067105][T13361] Dev loop4: unable to read RDB block 0 [ 897.067258][T13361] loop4: unable to read partition table [ 897.067570][T13361] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 897.137536][T13361] Invalid logical block size (8) [ 897.252976][T13350] [ 897.255342][T13350] ============================================ [ 897.261502][T13350] WARNING: possible recursive locking detected [ 897.267666][T13350] syzkaller #0 Tainted: G L [ 897.273711][T13350] -------------------------------------------- [ 897.279850][T13350] syz.5.2009/13350 is trying to acquire lock: [ 897.285914][T13350] ffff8880286a1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_buffered_write+0xd7/0x160 [ 897.296845][T13350] [ 897.296845][T13350] but task is already holding lock: [ 897.304223][T13350] ffff8880286a1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 897.314671][T13350] [ 897.314671][T13350] other info that might help us debug this: [ 897.322725][T13350] Possible unsafe locking scenario: [ 897.322725][T13350] [ 897.330159][T13350] CPU0 [ 897.333421][T13350] ---- [ 897.336745][T13350] lock(&sb->s_type->i_mutex_key#10); [ 897.342200][T13350] lock(&sb->s_type->i_mutex_key#10); [ 897.347640][T13350] [ 897.347640][T13350] *** DEADLOCK *** [ 897.347640][T13350] [ 897.355765][T13350] May be due to missing lock nesting notation [ 897.355765][T13350] [ 897.364065][T13350] locks held by syz.5.2009/13350: 1, last CPU#1: [ 897.370466][T13350] #0: ffff8880286a1368 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_write_iter+0x6c5/0x810 [ 897.381333][T13350] [ 897.381333][T13350] stack backtrace: [ 897.387240][T13350] CPU: 1 UID: 0 PID: 13350 Comm: syz.5.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.398248][T13350] Tainted: [L]=SOFTLOCKUP [ 897.402557][T13350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 897.412605][T13350] Call Trace: [ 897.415884][T13350] [ 897.418798][T13350] dump_stack_lvl+0xe8/0x150 [ 897.423381][T13350] print_deadlock_bug+0x27a/0x290 [ 897.428410][T13350] __lock_acquire+0x25db/0x2de0 [ 897.433265][T13350] ? __lock_acquire+0x747/0x2de0 [ 897.438203][T13350] lock_acquire+0x115/0x350 [ 897.442694][T13350] ? blkdev_buffered_write+0xd7/0x160 [ 897.448054][T13350] down_read+0x45/0x320 [ 897.452206][T13350] ? blkdev_buffered_write+0xd7/0x160 [ 897.457561][T13350] blkdev_buffered_write+0xd7/0x160 [ 897.462753][T13350] blkdev_write_iter+0x6d5/0x810 [ 897.467682][T13350] iter_file_splice_write+0xa31/0x1240 [ 897.473132][T13350] ? __pfx_iter_file_splice_write+0x10/0x10 [ 897.479006][T13350] ? rcu_is_watching+0x16/0xb0 [ 897.483764][T13350] ? __pfx_iter_file_splice_write+0x10/0x10 [ 897.489676][T13350] direct_splice_actor+0x101/0x160 [ 897.494788][T13350] splice_direct_to_actor+0x57b/0xcb0 [ 897.500193][T13350] ? __pfx_direct_splice_actor+0x10/0x10 [ 897.505813][T13350] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 897.511698][T13350] do_splice_direct+0x195/0x290 [ 897.516538][T13350] ? __pfx_do_splice_direct+0x10/0x10 [ 897.521893][T13350] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 897.527769][T13350] ? bpf_lsm_file_permission+0x9/0x20 [ 897.533143][T13350] ? security_file_permission+0x75/0x260 [ 897.538760][T13350] ? rw_verify_area+0x203/0x4c0 [ 897.543610][T13350] ? fdget+0x1ac/0x250 [ 897.547660][T13350] do_sendfile+0x52e/0x7c0 [ 897.552076][T13350] ? __pfx_do_sendfile+0x10/0x10 [ 897.557000][T13350] ? __se_sys_futex+0x3a8/0x450 [ 897.561861][T13350] __se_sys_sendfile64+0x144/0x1a0 [ 897.566998][T13350] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 897.572625][T13350] do_syscall_64+0x166/0x520 [ 897.577304][T13350] ? trace_irq_disable+0x3b/0x140 [ 897.582319][T13350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.588369][T13350] ? clear_bhb_loop+0x70/0xc0 [ 897.593048][T13350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.598938][T13350] RIP: 0033:0x7f1b1cd9f559 [ 897.603336][T13350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.622940][T13350] RSP: 002b:00007f1b1dc67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 897.631347][T13350] RAX: ffffffffffffffda RBX: 00007f1b1d025fa0 RCX: 00007f1b1cd9f559 [ 897.639307][T13350] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000007 [ 897.647267][T13350] RBP: 00007f1b1ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 897.655226][T13350] R10: 00000001002000ff R11: 0000000000000246 R12: 0000000000000000 [ 897.663182][T13350] R13: 00007f1b1d026038 R14: 00007f1b1d025fa0 R15: 00007f1b1d14fa48 [ 897.671144][T13350] [ 897.818630][T13370] FAULT_INJECTION: forcing a failure. [ 897.818630][T13370] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 897.818650][T13370] CPU: 0 UID: 0 PID: 13370 Comm: syz.7.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 897.818664][T13370] Tainted: [L]=SOFTLOCKUP [ 897.818667][T13370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 897.818674][T13370] Call Trace: [ 897.818678][T13370] [ 897.818682][T13370] dump_stack_lvl+0xe8/0x150 [ 897.818701][T13370] should_fail_ex+0x3eb/0x540 [ 897.818713][T13370] prepare_alloc_pages+0x21e/0x5f0 [ 897.818727][T13370] __alloc_frozen_pages_noprof+0x17c/0x410 [ 897.818740][T13370] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 897.818751][T13370] ? dup_mmap+0x9a8/0x1e10 [ 897.818762][T13370] ? policy_nodemask+0x31b/0x980 [ 897.818782][T13370] ? percpu_ref_get_many+0x19/0x140 [ 897.818798][T13370] alloc_pages_mpol+0x21e/0x390 [ 897.818812][T13370] alloc_pages_noprof+0xb1/0x2b0 [ 897.818825][T13370] __pud_alloc+0x3a/0x460 [ 897.818840][T13370] copy_page_range+0xd4a/0x12b0 [ 897.818856][T13370] ? __pfx_copy_page_range+0x10/0x10 [ 897.818868][T13370] ? __vma_start_write+0x178/0x290 [ 897.818883][T13370] dup_mmap+0xf70/0x1e10 [ 897.818895][T13370] ? __pfx_dup_mmap+0x10/0x10 [ 897.818904][T13370] ? do_raw_spin_lock+0x12b/0x2f0 [ 897.818915][T13370] ? rcu_is_watching+0x16/0xb0 [ 897.818929][T13370] ? rcu_is_watching+0x16/0xb0 [ 897.818941][T13370] ? lock_acquire+0x58/0x350 [ 897.818955][T13370] copy_mm+0x115/0x470 [ 897.818968][T13370] copy_process+0x1ecc/0x44b0 [ 897.818980][T13370] ? lock_acquire+0x58/0x350 [ 897.818992][T13370] ? copy_process+0xd17/0x44b0 [ 897.819007][T13370] ? __pfx_copy_process+0x10/0x10 [ 897.819018][T13370] ? __mutex_trylock_common+0x15f/0x270 [ 897.819032][T13370] ? get_pid_task+0x20/0x1f0 [ 897.819041][T13370] ? get_pid_task+0x20/0x1f0 [ 897.819052][T13370] kernel_clone+0x2d7/0x940 [ 897.819064][T13370] ? preempt_count_add+0x6a/0x140 [ 897.819074][T13370] ? __pfx_kernel_clone+0x10/0x10 [ 897.819090][T13370] __x64_sys_clone+0x1b6/0x230 [ 897.819103][T13370] ? __pfx___x64_sys_clone+0x10/0x10 [ 897.819119][T13370] ? __pfx_ksys_write+0x10/0x10 [ 897.819134][T13370] ? rcu_is_watching+0x16/0xb0 [ 897.819146][T13370] do_syscall_64+0x166/0x520 [ 897.819157][T13370] ? trace_irq_disable+0x3b/0x140 [ 897.819169][T13370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.819178][T13370] ? clear_bhb_loop+0x70/0xc0 [ 897.819189][T13370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.819198][T13370] RIP: 0033:0x7f533e39f559 [ 897.819208][T13370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.819217][T13370] RSP: 002b:00007f533f1c6fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 897.819228][T13370] RAX: ffffffffffffffda RBX: 00007f533e625fa0 RCX: 00007f533e39f559 [ 897.819235][T13370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000088106000 [ 897.819242][T13370] RBP: 00007f533f1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 897.819248][T13370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 897.819253][T13370] R13: 00007f533e626038 R14: 00007f533e625fa0 R15: 00007f533e74fa48 [ 897.819264][T13370] [ 899.984818][ T9983] net_ratelimit: 23 callbacks suppressed [ 899.984835][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.094802][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.204828][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.316332][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.424850][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.534820][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.644873][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.754846][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.864881][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 900.955346][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 900.974793][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.024848][ T9983] net_ratelimit: 35 callbacks suppressed [ 905.024870][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.144871][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.265522][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.374861][ T6250] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.485387][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.594877][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.705412][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.814851][ T9983] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 905.924877][ T975] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 906.035352][ T6259] bond2: (slave ip6gretap1): failed to get link speed/duplex