last executing test programs: 13m9.600661905s ago: executing program 32 (id=3822): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c"], 0x0, 0x80}, 0x28) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000000)="826bb66f", 0x3c, 0x0, 0x0, 0xfffffffffffffec8) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000580)={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="00140000000144a443d3daa5ecf26b6497f737e84fce95409c0acb8dc2b5d9820eeea0e11d14"], 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8m37.782486497s ago: executing program 33 (id=5208): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f140001910040001400020010000c000900090073"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) 4m49.855682907s ago: executing program 3 (id=6385): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r9 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000600)={0x0, 0x20030b5, 0x0, 0x2, 0x15a, 0x0, r8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r9, r10, r11, r12, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = dup(r15) syz_ublk_setup_queues(r16, r14, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x3, 0x10000004, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x2, 0xa3, 0x0, r16}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r13, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0xfffffffd}}) r17 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r17, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 4m48.919840346s ago: executing program 3 (id=6391): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x40814) r7 = socket(0x400000000010, 0x3, 0x0) r8 = openat$tcp_mem(0xffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) fcntl$notify(r8, 0x402, 0x8000000a) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0xe9c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe68, 0x2, [@TCA_MATCHALL_ACT={0xe64, 0x2, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0x8001, 0x49, 0x1b, 0x1, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x2, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x801, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x2, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x6, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0xd5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x3, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x21, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x7, 0x6cf4, 0x1}, {0x20003, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x9, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0xb}, {0x47, 0x6, 0x8936, 0xdcb, 0x3, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe9c}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$XFS_IOC_GETBMAP(r4, 0xc0205826, &(0x7f0000000000)={0x29, 0x6, 0x5, 0x1f02fd1, 0x1ff}) sendfile(r0, r1, 0x0, 0x20000023896) 4m48.80687552s ago: executing program 3 (id=6392): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r0, &(0x7f000000bb40)="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", 0x2000, 0x0) fchmodat(0xffffffffffffff9c, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x19, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0x1, 0x1f, 0x3, 0x1a5}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x362a, 0x8, 0x2000, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x40, 0x2, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x4000, 0x3, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x45, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 4m48.757004704s ago: executing program 3 (id=6393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x2a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) (async) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) r4 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') readlinkat(r5, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0xc4, r8, 0x1, 0x4, 0x0, {}, [@WGDEVICE_A_PEERS={0x5c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7b4326167f79726ecfae0aeee91d38ba88df91957e9dead91c7bebb4db027bf1"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) (async) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r9, 0x4068aea3, &(0x7f0000000740)={0x79}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, &(0x7f0000000100)=0x4) r11 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r11, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="10000000290000003400000004a68d1914d28ae297232100c9e013ff41bf8889c69bcd7ffd0535e6c90ceb9ac17e62f78d4ea09303fd4254c9fbc9772b62a8bec6a2db655524fa109c031efb106192d3374db75242"], 0x10}}], 0x1, 0x4000000) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r12, 0x50) (async) syz_usb_connect(0x5, 0x59, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106c04e814280b0102030109024700010000000009046900000e010000182402010202"], 0x0) (async) keyctl$restrict_keyring(0x1d, r4, 0x0, 0x0) (async, rerun: 64) listen(r3, 0x9) (async, rerun: 64) r13 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r13, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="96adcc4c00"/21, @ANYRESHEX=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4048000}, 0x40) (async, rerun: 32) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e21, 0x9, @loopback, 0x400}}, 0x0, 0x0, 0x40, 0x0, "947116a1a606754ba31cb6010000000000000000f81bef965a071f0d1aadd97b9640d9a0cd9eaed05e9aec7f03d4406a77bcd75801000000000000008eb7fafaa8b125736e000000fff900"}, 0xd8) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x30, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX, @ANYRES8=r4, @ANYRES8=r13], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) 4m48.040160008s ago: executing program 3 (id=6397): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r1 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, 0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0x40305839, &(0x7f0000000280)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, &(0x7f00000021c0)=[{0x4, 0xffffffff, 0x3}], 0x1, 0x1a6, 0x0, 0x0, 0x0, 0x25}) 4m47.976648529s ago: executing program 3 (id=6398): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4080) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) readv(r0, &(0x7f0000000040), 0x2000000000000213) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @private0, 0x81}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="f9cb8a8f8221e3ab421dcef79f72225cb464dd6dec946940c98d7823307afd36ff6d4dedc13c81a3ceca081021714b188a1512d792a19b4ec51218c64d89e8514e97dcce815c8aabc2c949932e72bab8a5f4e98a56ed0933c9003b8d0222c2f2e4b9c919439a35e0738c156daf482a4109e016faa4a0d3ac5fe98604afb4cf1b65d1488b822305e498f8a9ecb7b42b", 0x8f}, {&(0x7f00000001c0)="a373c76d41412e656f5af0919bf96dc92d416f703d845193b9f786a5277cc58f8e1c8552289c7c022fd663a0f8d28bb71743709a582d8f417efe0d354c236b86b73c49395549b17da3aa304c7c1c27d0354ebf981c2e3ee65bdd9110bfa33b35fa135b1e81d25aa9ad04eeb535d86da2c98322e370b68a542f1b19043ef98830651e38b6726b1315acd41df3506f0067ecbb0e3c406eabeef61c111f1ca244737ca4a19e47533e5401449d2cb1e20603737fc84938ca0345cc23ec82da7f", 0xbe}, {&(0x7f0000000280)="68eedfd0f5e64532cd6abe300379cf00"/31, 0x1f}, {&(0x7f0000000380)="d441c6618489cb011f8dd8912a77865f258b9d47d3caf7357e889594bcf09ad8abf551719fe5bd2a4f31266a98e2dc549599ca6f8a3ae918bb332b11c749aad5c052599faa7d949c6789e19f80e0f3351ecc5a5124a7b2a28f1df595dfa2849da75eeb1c184e4be3488230b1f380d9b2ba9aa0daa89050f90fc932576c55c9583a89a1eb8229874de23fe45ef67e3a06c63fddacbc4b144b280601939521efdf0bf0574d96329c67bd31c16edd8b90df30db5d5b151520083fad118fcc86d84408f95faa046a8c07a256aa52f05e7e2cdcfe99c47af2af0173b4bcf051019caa364e3c41f8437e51e011d34b9049a189d28a33045d455e374e", 0xf9}, {&(0x7f0000000480)="d25fbd5aeda595516b96fb43939a835f68634868f43070c6bdce0b7a770f916a94aa3d4d3717eda4020a27fa7450b0609a18801dcfd72c708b72f76356b81aba33142fe407d71a542338c95dc862cbab173c0bdaae18e5dae08c440ba1c6e5b4182cdcc6a993c2b67a859309ca2b44d728576671ab82c6dd6a24a7a28cf6e3c60406ff0f1a7dee55664746f4fcc8054a0281e1950937fc84aec53995bfdb35a479b02c755f0573ec12038d2e63bbe0db92afb443fb", 0xb5}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x298}, 0x400c0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xa0000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = epoll_create(0x2) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r6 = epoll_create1(0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r7, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x81, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockname(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000910000050400ffff80000600699a769100140600fc000000000000000000000000000000fe8000000000000000000000000000aa4e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000490780004a10d08"], 0x4a) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r10 = openat$vim2m(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000300)={0x4, 0x2, 0x4, 0x0, 0x4}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x30002006}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f00000001c0)={0x1008}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x28}) 4m32.907633002s ago: executing program 34 (id=6398): sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4080) (async) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) readv(r0, &(0x7f0000000040), 0x2000000000000213) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x2, @private0, 0x81}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)="f9cb8a8f8221e3ab421dcef79f72225cb464dd6dec946940c98d7823307afd36ff6d4dedc13c81a3ceca081021714b188a1512d792a19b4ec51218c64d89e8514e97dcce815c8aabc2c949932e72bab8a5f4e98a56ed0933c9003b8d0222c2f2e4b9c919439a35e0738c156daf482a4109e016faa4a0d3ac5fe98604afb4cf1b65d1488b822305e498f8a9ecb7b42b", 0x8f}, {&(0x7f00000001c0)="a373c76d41412e656f5af0919bf96dc92d416f703d845193b9f786a5277cc58f8e1c8552289c7c022fd663a0f8d28bb71743709a582d8f417efe0d354c236b86b73c49395549b17da3aa304c7c1c27d0354ebf981c2e3ee65bdd9110bfa33b35fa135b1e81d25aa9ad04eeb535d86da2c98322e370b68a542f1b19043ef98830651e38b6726b1315acd41df3506f0067ecbb0e3c406eabeef61c111f1ca244737ca4a19e47533e5401449d2cb1e20603737fc84938ca0345cc23ec82da7f", 0xbe}, {&(0x7f0000000280)="68eedfd0f5e64532cd6abe300379cf00"/31, 0x1f}, {&(0x7f0000000380)="d441c6618489cb011f8dd8912a77865f258b9d47d3caf7357e889594bcf09ad8abf551719fe5bd2a4f31266a98e2dc549599ca6f8a3ae918bb332b11c749aad5c052599faa7d949c6789e19f80e0f3351ecc5a5124a7b2a28f1df595dfa2849da75eeb1c184e4be3488230b1f380d9b2ba9aa0daa89050f90fc932576c55c9583a89a1eb8229874de23fe45ef67e3a06c63fddacbc4b144b280601939521efdf0bf0574d96329c67bd31c16edd8b90df30db5d5b151520083fad118fcc86d84408f95faa046a8c07a256aa52f05e7e2cdcfe99c47af2af0173b4bcf051019caa364e3c41f8437e51e011d34b9049a189d28a33045d455e374e", 0xf9}, {&(0x7f0000000480)="d25fbd5aeda595516b96fb43939a835f68634868f43070c6bdce0b7a770f916a94aa3d4d3717eda4020a27fa7450b0609a18801dcfd72c708b72f76356b81aba33142fe407d71a542338c95dc862cbab173c0bdaae18e5dae08c440ba1c6e5b4182cdcc6a993c2b67a859309ca2b44d728576671ab82c6dd6a24a7a28cf6e3c60406ff0f1a7dee55664746f4fcc8054a0281e1950937fc84aec53995bfdb35a479b02c755f0573ec12038d2e63bbe0db92afb443fb", 0xb5}], 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x298}, 0x400c0) (async) openat$kvm(0xffffff9c, &(0x7f0000000080), 0xa0000, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r3 = epoll_create(0x2) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) r6 = epoll_create1(0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14008051}}, {{&(0x7f00000000c0)=@file={0x1, './file0/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0) syz_fuse_handle_req(r7, &(0x7f000000a100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38d7b98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b3276342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440f97f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb526301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd437497320d383e752dd224aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee660debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6de640bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f2f7ee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc6c9a44c575738725815a9af1ced500", 0x2000, &(0x7f0000000200)={&(0x7f0000000400)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x81, 0x0, 0xfffffffc, 0x0, 0x0, 0x4, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) getsockname(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) write$tun(r9, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000910000050400ffff80000600699a769100140600fc000000000000000000000000000000fe8000000000000000000000000000aa4e234e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000490780004a10d08"], 0x4a) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r10 = openat$vim2m(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r10, 0xc0145608, &(0x7f0000000300)={0x4, 0x2, 0x4, 0x0, 0x4}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0x30002006}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f00000001c0)={0x1008}) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0x28}) 4m17.115794889s ago: executing program 2 (id=6536): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$dlm_monitor(0xffffff9c, &(0x7f0000001080), 0x6480, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x14, &(0x7f00000010c0)=r2, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @remote, 0x2}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x440, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000001100)=0x0) r5 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsmount(r5, 0x1, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000c40)={0x2000000a}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='nolazytime', &(0x7f0000000040)='noauto_da_alloc', 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r8, 0x1, 0x8, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r3, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1, 0x6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001040)={'tunl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x200da5d85240a79d, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x6c, 0x0, 0x9, 0x2b, 0x0, @empty, @empty}}}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 4m16.877043835s ago: executing program 2 (id=6542): unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x72, 0x52, 0x7fff0080}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111, 0x3}}, 0x5c) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r5, 0x2000000a}}, 0x10) close_range(r4, r4, 0x0) prctl$PR_SET_VMA(0x49, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4m16.771921846s ago: executing program 2 (id=6543): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = io_uring_setup(0x37b0, &(0x7f00000003c0)={0x0, 0x800000, 0x10000, 0x2, 0x7}) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000740)={&(0x7f0000002000)={[{0x0, 0x0, 0x3}, {0x0}, {0x0, 0x0, 0xfffe}, {0x0}]}, 0x4}, 0x1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0xc5, &(0x7f0000000400)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xbf, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000640)={0x0, 0xffff, 0x0, 0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000900)={'syztnl2\x00', &(0x7f0000000880)={'syztnl1\x00', r3, 0x4, 0x1, 0x0, 0xfffffffe, 0x4, @private0, @private0, 0x1, 0x7800, 0x3, 0x8}}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@bridge_dellink={0x228, 0x11, 0x8, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x42002, 0x1004}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_NET_NS_PID={0x8, 0x13, r5}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_VFINFO_LIST={0x1d8, 0x16, 0x0, 0x1, [{0x64, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x6, 0x9, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x80000001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x10000, 0x6}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xc, 0x4}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x9, 0x101}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0x1f3, 0x8}}, @IFLA_VF_IB_NODE_GUID={0x10, 0xa, {0xf, 0x7f}}]}, {0x4}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xb38, 0x1}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xe, 0x80000001}}, @IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0x946, 0x77fd, 0x8100}}, {0x14, 0x1, {0x7, 0x18a, 0x4, 0x88a8}}, {0x14, 0x1, {0x80, 0x4bf, 0x2, 0x8100}}, {0x14, 0x1, {0x101, 0x95d, 0x0, 0x88a8}}, {0x14, 0x1, {0x3, 0x4d7, 0x4, 0x88a8}}, {0x14, 0x1, {0x2401a8a7, 0x4f7, 0x3, 0x88a8}}]}]}, {0xd0, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x7c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x7, 0xb77, 0x3, 0x88a8}}, {0x14, 0x1, {0xbf, 0xbb0, 0x8, 0x88a8}}, {0x14, 0x1, {0xfffffffc, 0xe45, 0x5, 0x8100}}, {0x14, 0x1, {0xa6, 0x36f, 0x6bf9, 0x88a8}}, {0x14, 0x1, {0x6, 0x1a7, 0x0, 0x8100}}, {0x14, 0x1, {0x8, 0x8, 0x1ff, 0x8100}}]}, @IFLA_VF_RATE={0x10, 0x6, {0xfffffff9, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xffffffff, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff, 0xc}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf1, 0x6}}]}]}, @IFLA_VF_PORTS={0x10, 0x18, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x27}]}, 0x228}, 0x1, 0x0, 0x0, 0x410c0}, 0x200400e0) r7 = socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) write(r1, &(0x7f0000000280)="f00b336f72d82f56d6a777e239cde27dbdd675ba014976b7359f128b1f18688785748125461ee2d2c97b17ae786fdef2b116f117a1a281e36b7d46534ca2dfc015bd9d308d982725a3af39ef5fb6eb96604d88caa778522e11c74bbda5518199e8ab5eace31db19c540132875243b359cf9f91617b1ee350421a72a9fdd3356fe4e782df08481d73754bbc28d03ac6fbe6b00b2394087caf08a1753497a2935d66aad4801a4a384cad918adc2bcd50bb01051284639b6f60e2", 0xb9) 4m16.771518999s ago: executing program 2 (id=6544): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000140)={0x0, "8820219396bf4f2f6bea5a962c2268a66beefb49786fc4fb02c8a0b33891abd61d9df3b7509dd1d4c32840f2056f35200dcb5ebe03a72b7e39d59a310321b3ad", 0x14}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r0, 0x1) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) unshare(0x600) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x82, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r1}) keyctl$clear(0x3, r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000080)='encrypted\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)='\xa8W\tj\xe6\x8e\x9eAT\xe4\x00\x00\x00\x00\x00\x00\x00\x00\xcf\x00\x00G-\xbe\b#\xd3C\xc6X\xbd\x00\x00\x00\x00\x00\x00\x00\x00o\xef\xaa\xa8;\xa4i\x0et\xbd\xc4\xa2f\x192\xb8o\xbf\"q~\xe65B`\x02\xa8\xf8\x96\xe2\x18\xd5\xe5\xed\xeb\xa4\xc9\x0f\xfbn\xe8Ls\xc1\xdc\xeb\x13Z{\x7f\xb0\xe4\xd3\xa9i\xfc\xaf6\x10Dc\x8cq\x8e\xf82\x16\x19\x85>\xeb[mt\\^\x0e\xf3\xe4*\xc0\xf3\xb4\xef\xd4\x91wi\x86\x96\xcd\x03\x0f\xb9\x17~\f\r\x9b\xf8\b\x90\x85\xfeK\x8aT\xbf\xe4\xc2\x1f\xbd\xdd\x01\xc5$o\x99/\xd8{U\x16\xa0\xcd\x1f\xe1\xff\xda\xdbZ\"\xdb\x14\x1c\xc68\xcb\x01\x90\xc5#\x18\x9b#0\x195hk\x8d\xb3l', 0x0) 4m16.749621948s ago: executing program 2 (id=6545): r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x8, 0x105}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="ab61ad5738c2e56d8f", 0x9}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000141, 0x0) preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 4m16.509963988s ago: executing program 2 (id=6546): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r1, 0x0, 0x3f) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) openat$vim2m(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x4000) 4m16.263089511s ago: executing program 35 (id=6546): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r1, 0x0, 0x3f) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000640), &(0x7f0000000140)) openat$vim2m(0xffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xcc}}, 0x4000) 2m39.120007006s ago: executing program 5 (id=7155): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000001c00010028bd7000fedbdf251c000000", @ANYRES32=0x0, @ANYBLOB="1000030608000f000000000014000100fc000000000000000000000000000001cbe8854bbe57708538dc07c8d109797508000d000900400066000100ff02000000000000"], 0x5c}}, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000340)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, 0x0) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 2m38.961467847s ago: executing program 5 (id=7156): madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xb) (async) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) pread64(r0, &(0x7f0000000040)=""/109, 0x6d, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000000c0)={0x0, 0x8, 0x1, 0x8b, 0x1, [0x0, 0x7, 0x4, 0x4]}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x98e1, 0x4, 0x1, 0x312}, &(0x7f0000000180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f91, 0x1, 0x0, 0x80}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe3b6, 0x0, 0x0, 0xde}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfaf1, 0x40, 0x3, 0x10f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f42, 0x1000, 0x0, 0xda, 0x0, r0}, 0xffffffffffffffff}], 0x4, &(0x7f0000001400)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, 0x0, '\x00', {0x1, 0xad4, 0x0, &(0x7f0000000400)=@buf_1k="36cbb7b93e7208f7465b773262cc4829636e95276959c7feccf7b5aef0a6d7f93db185cca8d3a4be5414d9d17328b551261a01fbbcadf0bc55d1c7bdfc2a0276e594078aa0f733aff7b7d144a09323293b17577a8c399a6b9b5181e0de9e3981aa16cafee8b100021725c8b1e0b340e5037b637d07eded97db5f4176f12ffe8c08e9724417acc077396139a8be6ae73969a29e93a16109919b35e1f83e6533cbd12f0caa8d1a9af3c6eb494ad1a976066568d66273e63953f12e3687f86fea395cb8898763f50e4301cf0ddfecd94947b4ce010251902bea82b1799b867af140a1a0dc86e64c2aee0f5caeb228bbfc073edc60f3b7a4dc2ac338a69e012e7268692b5eccab56c5841a1e3af7b7a767d06399d64b85ac6298a104eaab97fb8b31376cda0da3474cf69d03d8fc2f737a5bebb3cdaaf6f2680bea4e2312c25b2f9effad25d4166e6c0896b467c1501ec22343595d4bb39abf1c0a47fb39b7110ba8250f543970ac5dd8771bc1060739d8503f89b8b47d7b8ae54f1ee3bf0166d2a8b7207a0a35d741608205650a06d8e3d1a2d94d19b00f3f5d6c497738a0add420cd2da7d17174eadb9cb6649c90125935f974fd15075d57c663f026f3396ac802c1cf5730d7094993d1d6dda18b9b3fdd2070509eaccd2df524d26e2de5600faadd22772452965cfd07c06379b793da0e7be81ee1e2f4960418278f1f4a2ab9ac15acda581a2f91736583163c864cea64953b022ca0ec5490109a8ac9542709ccd429cd2b8256573154d536f1d6d1ce2768a313cecb91347bb0364dd630e347f013fc6901c70c36c790f748943b9c1140db080831dec999337ba39018983447f9eefa139cbdbb920577827a5e06003a6f16bb37be9237ab29d02dcab1acdf321602c5556187223adffa28f056e7b6b7f9c3b81b36b82593973149c36235094ec865a964ed11e4bf37153e8e18cbc4d6103825a8330b0ce0862c1e96433bc994044bc473e5c7075f6eeb2ba206a7794fcc7d244c5e1dc5a124f2134cced1892748c692b4674a6c4466565d7a2c98cc99794d7bb518865c27f733e8b8a2dfea5eab3e8792abfc7de85def627261c9c0311f15eb0f4e3e538383a29b0a0fac7086461d1fc26522af3056601d7976a39e6ebe9bd52b1fbbae40dae3ce71bd6cc7116fc8452afa1bf67f44d75ee975922dea86cc73f020a5a337fa00369549c2ad047a6b3ad4b487a34eb452b69b48bf0005aa92c446984820543309622e1159913172dcf1c9db05df2d492da82af925273b1ecacf6f4b53ef2e252e1e3bb2b21655b7a6e98d32a4242d2a4b980b1380f72c9222c3f51788d000ca7e1077452ad76cfb1f8d5f18e068e558a1ee249e7c1319d38d0478f16151edaf8dcfeba36d792106ecf72f81365f25232a581d53a7b45bc92113ac65778acab1b0ce961bd96ced67"}}, &(0x7f0000001480)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001700)=[{&(0x7f00000014c0)=""/55, 0x37}, {&(0x7f0000001500)=""/152, 0x98}, {&(0x7f00000015c0)=""/181, 0xb5}, {&(0x7f0000001680)=""/88, 0x58}], 0x4) (async) ioctl$UFFDIO_MOVE(0xffffffffffffffff, 0xc028aa05, &(0x7f0000001740)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x2000, 0x2}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7fffffff, &(0x7f0000001780)=0x1) (async) openat$cgroup_pressure(r0, &(0x7f00000017c0)='io.pressure\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000001840)={0x25c, 0x0, &(0x7f0000001800)=[r0]}, 0x1) r6 = add_key$fscrypt_provisioning(&(0x7f0000001880), &(0x7f00000018c0)={'syz', 0x2}, &(0x7f0000001900)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffff9) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000001940)='trusted\x00', &(0x7f0000001980)=@secondary) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000b, 0x110, r7, 0x0) (async) ioctl$int_out(r5, 0x5462, &(0x7f00000019c0)) (async) r8 = fcntl$getown(r0, 0x9) fcntl$lock(r4, 0x0, &(0x7f0000001a00)={0x1, 0x4, 0x7, 0x0, r8}) (async) r9 = memfd_secret(0x80000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4024587b, &(0x7f0000002c80)={{r9, &(0x7f0000001a40)='\x00', 0x582, &(0x7f0000001a80)={@_ha_fsid={[0x197e, 0x4]}, {0x1ff, 0x6, 0x1, 0x7}}, 0x5, &(0x7f0000001ac0)={@_ha_fsid}, &(0x7f0000001b00)=0x5}, 0x2, &(0x7f0000002c40)=[{0x3, 0xbfe, &(0x7f0000001b40)='abcdefghijklmnopqrstuvwxyz0123456', &(0x7f0000001b80)="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", 0x1000, 0x2}, {0x3, 0x9, &(0x7f0000002b80)='\x00', &(0x7f0000002bc0)="8e7ee140ac1bce9ed754ec72976dbdeb482d2b7a6244477c06ffa231b4c78738e143774de7248de89f0fc3394daf442efd21e9b27537987f0dbf78b6b811e470b96d6acea8965c405c1eb332e75566ee7cccc4", 0x53, 0x10}]}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002fc0)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000003040)={&(0x7f0000002cc0)="facdf3bb8faaaa9caea9508a2ac99d43fedcf1d0b2c221210458f165813f003246f0fd266337071f5d9b743ac25b6aec672911d52db5da382c7bf0f46cb8928a1cd78498989d0acea5cbbb64900163bf8d6599ea9323cf8fb4a4ca6d26af420071e45c9c088a68cb3cc81c4b76f0f858ad46eb0e8a6e3136de84e16bfbf907adc8a5e19221d3ada52093", &(0x7f0000002d80)=""/48, &(0x7f0000002dc0)="b542c0fcb611dad1fb4d84d3d0a4a648d75818998dc6e08cf6840a532479e4d784efe21a8c9b2a7df752f280e093f0a09385e6f40bc099beafa4bf155f4794e0f8e4299bf5b9ca1a21befb7b1e912fce7ba543d446982931945d2dc27750e38462c7602e9fe1b8e5870ac555c098f2245ce978e5583ae3b79e89676e23c52504a3a84635a1c0f2827bbc89fdd498c6cdddf539ecbd710c7712b7a4e92b595fd3aed090f1f7f43f99add12678a0c37b58184b5d87d09069778304cc5797665caf4489f56125b227c9b01ea04b0c66672f87c65004f3429561e8efd7217390788489770c1d0a0edcde2b7d2a7efe7583", &(0x7f0000002ec0)="e7206281d68724151770e455618c1adf7b2b20d6e0e0c66aac408b6ac16c699c30bdbdba5be608d9f71c20547f22d8bff26684570178addb2fd12ae02fcab04bb4a120be5043e6a65b4413c21e7c70e229d23d72d54b9c2f529e76284514a2c48a72134f2e14f1469099da4ef041cc06e36ea48c166ea9660d7cf433a4720344080c496e7f9039737c5dc37e833a518764db299fb7eab740ba1b35abfd06471bf62d592ea892913ef6d7ac19c7c4efc6a7ae2456f11a378b6e5dfa0fc91941199f398853349cb761040dcd06b2f825dcdc1dd2325f325600548ac511f1567c3744840bcf4fd67201a9", 0xd, r11}, 0x38) ptrace$ARCH_GET_GS(0x1e, r8, &(0x7f0000003080), 0x1004) (async) fsetxattr$security_capability(r10, &(0x7f00000030c0), &(0x7f0000003100)=@v1={0x1000000, [{0x3, 0x8}]}, 0xc, 0x0) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000003240)={r3, &(0x7f0000003140)='security.capability\x00', 0x7399b87434030350, &(0x7f0000003180)={@_ha_fsid={[0x8, 0x2]}, {0x6, 0x6, 0xc8a, 0x8}}, 0x1, &(0x7f00000031c0)={@_ha_fsid}, &(0x7f0000003200)=0xffffffff}) close_range(r10, r12, 0x0) (async) r13 = syz_open_dev$media(&(0x7f0000003280), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000032c0)={{0x1, 0x1, 0x18, r13, {0x81}}, './file0\x00'}) (async) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000004700)={0x6, 0x0, &(0x7f00000046c0)}, 0x0) 2m36.448529535s ago: executing program 5 (id=7167): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010000d0400000000000000000000c300", @ANYRES32=0x0, @ANYBLOB="00000000498005000a0001004af29c3ff0490000140035006d6163766c616e30"], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (fail_nth: 8) 2m35.500231371s ago: executing program 5 (id=7176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000000), 0x10a7, 0x28202) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0xa, @pix_mp={0x7, 0x3781e4b9, 0x33565348, 0x33565348, 0x2, [{0x3, 0xc81}, {0xfffffff8, 0x5}, {0x1, 0x3}, {0x40, 0x7}, {0x0, 0xd}, {0xfffffffc, 0x4}, {0xdad1, 0x6}, {0x10, 0x7}], 0x2, 0x0, 0x2, 0x1, 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000340004803000018008000200636d70002400028008000240000000001000038009000100244ede65f7000000080001400000000a140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x2004c010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="480300001e00010125bd7000fcffffff05000000320306"], 0x348}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x29002c, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) umount2(&(0x7f0000000200)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff"], 0x0) 2m32.574351544s ago: executing program 7 (id=7187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="45000014123440004011"], 0x1c) 2m32.429203686s ago: executing program 5 (id=7188): add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) close_range(r0, r0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m32.35816935s ago: executing program 7 (id=7190): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @empty, 0xffffffff}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa0f, 0xa46}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast1, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x6}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x0) socket$alg(0x26, 0x5, 0x0) 2m32.095791441s ago: executing program 5 (id=7191): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x10, 0x84, 0x7, @local}, @dstaddrv6={0x1c, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x2c, 0x4855}, 0x240000c2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x2010}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x38000000, 0x8, 0x7, 0x7, 0x2, 0xff800000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20040084) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)=ANY=[@ANYBLOB="1800000042000701feffffff000050c2400e000004004280"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x2, r13, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340)=0x81, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) close(r12) 2m31.561317509s ago: executing program 36 (id=7191): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44014}, 0x0) r3 = epoll_create1(0x80000) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xf1, @loopback, 0x19f49a9}], 0x1c) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000140)=[@dstaddrv4={0x10, 0x84, 0x7, @local}, @dstaddrv6={0x1c, 0x84, 0x8, @rand_addr=' \x01\x00'}], 0x2c, 0x4855}, 0x240000c2) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0x2010}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x2, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x38000000, 0x8, 0x7, 0x7, 0x2, 0xff800000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20040084) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000021c0)=ANY=[@ANYBLOB="1800000042000701feffffff000050c2400e000004004280"], 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x2, r13, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340)=0x81, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) close(r12) 2m30.618066024s ago: executing program 7 (id=7199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="45000014123440004011"], 0x1c) 2m30.300901405s ago: executing program 7 (id=7200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000000), 0x10a7, 0x28202) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f0000000340)={0xa, @pix_mp={0x7, 0x3781e4b9, 0x33565348, 0x33565348, 0x2, [{0x3, 0xc81}, {0xfffffff8, 0x5}, {0x1, 0x3}, {0x40, 0x7}, {0x0, 0xd}, {0xfffffffc, 0x4}, {0xdad1, 0x6}, {0x10, 0x7}], 0x2, 0x0, 0x2, 0x1, 0x2}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a60000000060a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000340004803000018008000200636d70002400028008000240000000001000038009000100244ede65f7000000080001400000000a140000001100010000000000000000000100000a"], 0x88}, 0x1, 0x0, 0x0, 0x4000850}, 0x2004c010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB="480300001e00010125bd7000fcffffff05000000320306"], 0x348}, 0x1, 0x0, 0x0, 0x4048957}, 0x28040) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x29002c, &(0x7f0000000940)=ANY=[], 0x1, 0x0, 0x0) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901) umount2(&(0x7f0000000200)='./file0\x00', 0x2) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff"], 0x0) 2m27.158071263s ago: executing program 7 (id=7212): getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x2, 0x8, {0x6, 0x9, 0x0, 0x80000000000000ff, 0x3, 0x0, 0x7fffffff, 0x58, 0x3, 0x8000, 0x9, r5, r6, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf9, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x00\x00'}}]}, 0x0, 0x0, 0x0}) getdents(r7, &(0x7f0000000340)=""/151, 0x97) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x484, 0x0, 0x9}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) r10 = io_uring_setup(0x1a67, &(0x7f0000000040)={0x0, 0xa8f5, 0x10000, 0xffffffff, 0xc9}) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r11) close(r10) sendmsg$inet(r9, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r9) 2m26.842595816s ago: executing program 7 (id=7214): r0 = socket(0xa, 0xa, 0x100) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000010000320800000028c088ceff68e36e3c61e8708cfa484e80508f73a32fed7b0a28c048428139cd8b", @ANYRES32=r2, @ANYRES32=r4], 0x14}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/105, 0x69}}], 0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x875, 0x48541) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0xc1205531, &(0x7f0000002680)=""/4078) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x1, &(0x7f00000003c0)) futex(0x0, 0x6, 0x3, 0x0, &(0x7f0000000080)=0x4, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 2m26.424092013s ago: executing program 37 (id=7214): r0 = socket(0xa, 0xa, 0x100) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648008ec37fe58b21998a00bc000c00f0ff7f0000b400600033d44000041560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395edb3e0ad91bd6433802e0784f2013cd1890500000000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000010000320800000028c088ceff68e36e3c61e8708cfa484e80508f73a32fed7b0a28c048428139cd8b", @ANYRES32=r2, @ANYRES32=r4], 0x14}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/105, 0x69}}], 0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x875, 0x48541) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r7, 0xc1205531, &(0x7f0000002680)=""/4078) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r9}, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, r9, 0x1, &(0x7f00000003c0)) futex(0x0, 0x6, 0x3, 0x0, &(0x7f0000000080)=0x4, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 1m51.76829998s ago: executing program 6 (id=7383): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = gettid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r3, &(0x7f0000005500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@prinfo={0x14, 0x84, 0x5, {0x0, 0xe}}, @authinfo={0x10, 0x84, 0x6, {0x6}}], 0x24, 0x80a4}], 0x1, 0x24000801) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 1m48.631101936s ago: executing program 6 (id=7397): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40440) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000000c0)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x41, @remote, 'macvlan0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000040)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) write$ppp(r2, &(0x7f0000000340)='\x00\x00', 0x2) 1m48.27476489s ago: executing program 6 (id=7401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'vcan0\x00', 0x10}) r1 = socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r2 = syz_open_dev$evdev(0x0, 0x0, 0x2000) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000198000/0x1000)=nil) brk(0x200000ffc000) syz_usb_disconnect(r2) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r4, 0x541b, 0x0) bind$can_raw(r3, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @local, @multicast1}, 0xc) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa00000000000000001400020002000000e000000200000000000004000d0001007564703a73"], 0x54}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x13f) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') close(0x3) 1m47.397089861s ago: executing program 6 (id=7405): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000000)) ioctl$SNDCTL_DSP_GETIPTR(r0, 0x800c5011, &(0x7f00000001c0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r6, &(0x7f00000000c0)='./file0\x00', 0x62) ioctl$SNDCTL_DSP_GETBLKSIZE(r0, 0xc0045004, &(0x7f0000000200)) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYRES16=r4, @ANYRES32=r5, @ANYRES8=r0, @ANYRESHEX=r0], 0x0) 1m47.168179592s ago: executing program 6 (id=7407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1m46.839160479s ago: executing program 6 (id=7408): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xa0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000440)={0x20003, 0x20e, 0x0, 'queue1\x00', 0x3fe}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) pread64(r8, &(0x7f00000004c0)=""/249, 0xf9, 0x3) preadv(r8, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 1m46.162025356s ago: executing program 38 (id=7408): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xfffffff9}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004840) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x85, 0x0, 0x0, 0xa0}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x9) unshare(0x26020480) umount2(&(0x7f0000000080)='./file0\x00', 0x4) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000440)={0x20003, 0x20e, 0x0, 'queue1\x00', 0x3fe}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip_tables_names\x00') r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r9, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) pread64(r8, &(0x7f00000004c0)=""/249, 0xf9, 0x3) preadv(r8, &(0x7f0000001700)=[{&(0x7f0000000040)=""/67, 0x43}], 0x1, 0x8, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 11.727606676s ago: executing program 4 (id=7911): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r1, 0xa94000) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 10.507266887s ago: executing program 4 (id=7920): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) r0 = socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x22020600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, {0xa, 0x4e24, 0x9, @mcast2, 0x9}}}, 0xff4d) syz_clone(0x2808000, &(0x7f0000000000)="59d4e26bbc2e350dbfe697", 0xb, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140)="21845dcb631e47c81bf40d0ac9981dbed29713e5246bc8884c6b0ba9eb140c71bbf9df449f366c4fceb20af665deb94c620b251d56afd93fa435863231cd178ab11212db45ed3085e6976a82cfe92e0d697f4e1c56c56e4eb315bf6ca86da0872b") sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1411, 0x1, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x40000) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd, 0x1]}, 0x0, 0x8) prctl$PR_SET_KEEPCAPS(0x8, 0x0) r2 = gettid() r3 = getpid() rt_tgsigqueueinfo(r3, r2, 0x5, &(0x7f0000000280)={0x17, 0x0, 0x6}) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x0, 0x6, 0x2}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000023c0)={{0x0, 0x0, 0xee01, 0x0, 0x0, 0x20, 0xc}, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) r5 = socket$inet6(0xa, 0x2, 0x0) io_uring_enter(r4, 0x597e, 0x3540, 0x10, &(0x7f00000001c0)={[0x10001, 0x3]}, 0x8) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000580)={@private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x200, 0x7, 0x0, 0xd, 0x2040010}) read(r4, &(0x7f0000000740)=""/384, 0x200008ca) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') pread64(r6, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 10.38077572s ago: executing program 4 (id=7921): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) getpeername$unix(r1, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800080060"], 0x50) shmctl$IPC_SET(0x0, 0x1, &(0x7f0000002100)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x118, 0xd}, 0xfffffffa, 0x1, 0x7, 0x5, 0x0, 0xffffffffffffffff, 0x6}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r4 = socket(0x400000010, 0x3, 0x0) write(r4, &(0x7f0000000200)="fc0000001400073eac093a00090007000aab0800080000000400e293210001c000000000060000000100000009000000fa2c1eff8656aaa79bffffffff0000002d00024000036c6c256f1a272fdf0d11512fd633d4400007f60eb8fa2e6b00000016fd368934d07302ade01720d7d5bbc91a3e2e80772c05f70c9ddef2fe082038f4f8b29d3ef3d92883170efdffffff3ae4f50504000000000040d815b2ccd243f295edbabc7c3f1a5f4e023dd16b176e83df150c3b8829a1ad0a4f41f0d48f6f0000080548deac270e37429f3694dec896592d69d381873cf1582740000000000000001ace36f071d0c22700"/252, 0xfc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x1, 0x0, 0x1000, &(0x7f0000ce9000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) socket$pppoe(0x18, 0x1, 0x0) r9 = syz_usb_connect$cdc_ncm(0x2, 0xec, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x310, 0x8, 0x0, 0x6, 0x10, 0x7f}, 0x1f, &(0x7f0000000840)={0x5, 0xf, 0x1f, 0x2, [@ssp_cap={0x10, 0x10, 0xa, 0x98, 0x1, 0x0, 0xff0f, 0xff, [0xff3fcf]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x35, 0x7, 0x6}]}, 0x4, [{0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x41b}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x41c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x807}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x427}}]}) syz_usb_disconnect(r9) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r3, 0x40786e88, &(0x7f0000000680)={{&(0x7f0000000300)=[{0x1, 0x7fff, 0xffffffffffffffff, {0x5, 0x3d}, 0x6, 0x7fff, 0x8}, {0x41fd, 0x5, 0x4, {0x0, 0xb597}, 0x800, 0x6}, {0x3ff, 0x5, 0x8000000000000000, {0x6, 0xfffffffffffffff9}, 0x3, 0x4, 0x80000000}, {0x80, 0x3, 0xffffffffffffffff, {0x6, 0x62}, 0x81, 0x0, 0x5}, {0x7fffffff, 0x9, 0x7fffffff, {0xfffffffffffffffb, 0x8}, 0x3, 0x9, 0x7}, {0x8, 0x7, 0x9, {0x6abbcc58, 0x100}, 0x7, 0x9, 0xe}], 0x6, 0x40, 0x9, 0x1}, {&(0x7f0000000480)=[{0x5, 0x7318}, {0x4, 0x7}], 0x2, 0x10, 0x0, 0x97}, {&(0x7f00000004c0)=[0x7, 0x1, 0xe, 0x3], 0x4, 0x8, 0xffff, 0x3ff}, {&(0x7f0000000500)=[{0x80000000, 0x9, 0xbd, 0x6, 0x1}, {0x3, 0x0, 0x0, 0x80000001, 0x3}, {0x80, 0x0, 0x3, 0x9, 0xffffffff}, {0x3, 0x6, 0x800, 0xffffffffffffffff, 0x81}, {0xc00000, 0x8, 0x331f, 0x2, 0x400}, {0x4, 0x206, 0x5, 0x7, 0x3bfc}, {0x4, 0x1, 0x8, 0x5}], 0x7, 0x28, 0x7}, {&(0x7f0000000640)=[0x6, 0x8], 0x2, 0x8, 0x12e5, 0x4}}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r8, 0x40082104, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d00, 0x0, 0xfff}]}) write(r7, &(0x7f0000000280)='0', 0x1) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x1, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff}]}) ioctl$KVM_SET_SREGS(r12, 0x4138ae84, &(0x7f0000000200)={{0x0, 0xffff, 0x8, 0xb, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x10, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x0, 0xffff, 0x18, 0xb, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x1, 0x0, 0x0, 0x40000}) ioctl$KVM_SET_CPUID2(r12, 0x4008ae90, &(0x7f0000000100)) 8.592549804s ago: executing program 1 (id=7929): r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x8, 0x105}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="ab61ad5738c2e56d8f4f3103cab0b39041", 0x11}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000141, 0x0) preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 8.484561215s ago: executing program 0 (id=7930): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000066755dde6c0000060008001b"], 0x30}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x2, 0x8, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88ca}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x80) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/notes', 0x181000, 0x146) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00\x00\x00\n\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="6d2922409d9e4573cb58aa2f250384924248981e1b2a0de5dac92a88975d26ddc1e10a0941e6c6a493ea1a1fff3d9d2a869f053cc7f68f1f91e07c72621e3be7eb5318746ebd1f328bf2d7722ccb894befba8fafb7a6d8621c8c6cf7349b723384992e6153d75c6ff561bfda3fba4ab33cb7d59576ec368fce0b82cb5845992dc4f65ee6e229fbe4a3c64e9a075e1d9087e500"/156, @ANYRES64=0x0], 0x20) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r6, 0x7b2, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x3ff}) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}, {&(0x7f0000000500)="5c1406d288866bbf7b72b4adad1cca30e352bb60c73cb1ada45f24f3c9d33a99b1708389cc13a8f0b89a50a845caec552334e46305cf39dfc32f89d741d205a4016c01ab7f61b77eae73f822a216f96d50559e1fe0b5b39732336690cb3bcd57324c1d5e34aedbf32f4dcfe94299", 0x6e}], 0x2}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="13069f2dcfd5bd1672440c28097b47e0336073323fdada9ab7622128fbdd81518f9ae40e967cf6f58f81766ed7297989200af1be96a6f479071c78e912bd6cb2209d31bf889e5f0eac8a073dac18d1bbdecedcd527bd196a93aef256f6eb10f62f1437ddc7d4eea783661a33cb917095d7ebed5960dea67eef613b93258aa7213487df55ca77aaa6595dee78f4b9b59739acbc024f263e7dc297adc96352bf3fa174b298d1c39552fc4ce44e", 0xac}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f00)="c9c097e1dd781ea1e9ebc317c574767bd53a959cdefc141f2c7860d450e8949367811cae1e34db137b9e933085f468a6cb105a693611235262cd4abd79b4d64c16f7807cc3c0bf7967aa7ecae50cbed2fee66a4bc5527914d38229eb6a1a6f1aa600585c28d6eeb6c1d5b797111116b32e9306178b485bc2461cc5b0bbeb410a689863", 0x83}, {&(0x7f0000000a40)="471cc7171df366df443fd6219c752d58cb4c01c0549071572209326b08ff178d5afd005f4f2eca292f247af40772cc02c6e259e6c227de4d6161543bfb83c99bb3b4e91d0d2b90cc4ad3915f8d321574e210463c0d970aea83ab4d7fecb748449ed0b9d19ee9da9abd3eff4be84559a7cf7c88928ddb569cc852747adcccd639c2f178394eb66cf4acb20968c5d3a8d3083d32ca67367ae3b05e662856090b9b1c47ab1f4fd3011c71e0822210cb65c40d3e2f080b8a6520679b2a653e60370e6e9247c68d25fd33ff8988cecd16f3b0f64e48722c49222ba5eb97f544502eef4e5db79ad0c4", 0xe6}, {&(0x7f0000000b40)="e49710b78f9c29534cd3515d9c23b7dec414dff12c71a50ea4bbc406c89234fc860e4fc24977b468371df5390319a34e687ba33be1615844ea4a0d9200a377f64fd908281e725b9983077ca62f612b9d626455cea2292f23eede376713b7783270f7d132f1124b11218b1396974b9bbe09693853073932eccb2204a9c0b8a71c4334ebdefb63d34cdb7cd2a25ac7a9779265bc6453d8089a267274a3840a6bd3a6194868844f3c53f5bc09a9e48d57e20612e80f44c3090e9b63bc71896a02c30528ded3fc62688a953b64d4e60cadd87430a9608d8efc72d6a182c74a2cdad3006dedfa905d84f2bdc6de33443484b7c84a20afaa8e1251e0", 0xf9}, {&(0x7f0000000c40)="f2be99a67b252c91224d430e7ad6186e20ac887e6065b3bed5c3783dcfeb6682e2918b5daad56e48273e95f771720682807c6881137e8fcc850a362ecfe19bbf1f10d7754d4ee5ee0134db6c186c73f8fc1b12929d4f316551f461125b58be14b84178dfcbf56a6c5aea85f1690ba4e822fef8829a085a60d2d85a67d938a906fc7790db942a06ae8160", 0x8a}, {&(0x7f0000000d00)="8c77941a18dbb04fae3cebf689bed14c3acb016d84f7cef1876d2f31559febf40c349b81d16bcc28e115cc9f401ec2d5f994750b311f03f15c4389983ab0d82a74659f1b24b8a51955d871547b74ee01384366da4eaf81caecd7bf18eeba355e78fa692f5d1ee6f52c477a49bad1c91f766bf61594a039e136c13110f3577d965083aba14205d66ef70da47b359dbe698ab99a25eb703d1e680183767f2499d0b66dd7f6f1e802f827871013cf8035ad273f37cf2b7fb47cf20ae14ca5bf36018576420ee4e24bb6c20c4292351df1823924b23c38ebe714f72aad06c0027b48ade5acb55b376f1f3df3ab2797", 0xed}, {&(0x7f0000000e00)="2e116d7a57fb7f91eacaa4d886419184ce72ac209fc5f8563766e710daa4efc9fa1e7738920f2a8a58d75a5e522341d8c8e1fb639921593247550f5960798ec92b734852f904dbc4f91407de7c30247d50a86180d66ee194acb9a75556a4713c5982310d239031e2fc635294246bc7c2d084eb6e0cb36789ba9b4690e2cd0a8e1d143275a0f922f71be749aa4054b7608c32b3401c2bad089a7420eb7778980500000000000000000000200000", 0xad}], 0x6}}], 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, 0x0, 0x0) write(r5, &(0x7f0000001e00)="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", 0x2e0) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[], 0x18, 0x40045}], 0x1, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x9c}}, 0x0) 7.588202812s ago: executing program 1 (id=7932): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_cmd={0x1f, 0xffffffff, 0x7, 0x2821, 0x4, 0x3, 0x3, 0x8, 0x8, 0xa0, 0xffffffff, 0x90e, 0x2, 0x4, 0x1, 0x7f, [0x7, 0xe0]}}) 7.408238265s ago: executing program 1 (id=7933): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x28c032, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) (async) mlock(&(0x7f0000000000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') r1 = epoll_create1(0x0) (async) r2 = epoll_create1(0x0) (async) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0x20000002}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0xc800001a}) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 7.407658823s ago: executing program 0 (id=7934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_vhci(&(0x7f0000000740)=@HCI_EVENT_PKT={0x4, @hci_ev_role_change={{0x12, 0x8}, {0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}}}, 0xb) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x7}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000480)={0x1, 0x73d8, {}, {0x0}, 0xb83, 0x1}) sendmsg$nl_xfrm(r2, &(0x7f00000010c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001080)={&(0x7f0000000f40)=@allocspi={0x104, 0x16, 0x2, 0x70bd28, 0x25dfdbff, {{{@in6=@loopback, @in6=@local, 0x4e23, 0x8001, 0x4e21, 0x9, 0x2, 0xa0, 0xa0, 0x4, r3, r8}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@broadcast, {0x0, 0x0, 0x360, 0x7, 0x800, 0x8, 0x8000000000000001, 0x100000000}, {0xff, 0x7, 0x6, 0x9}, {0x2c, 0x10000, 0x200}, 0x70bd2c, 0x0, 0x2, 0x4, 0x9c, 0x1}, 0xffff, 0x40}, [@iptfs_dont_frag={0x4}, @mark={0xc, 0x15, {0x35075b, 0xfffffffb}}]}, 0x104}}, 0x8004) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_route={{}, {0x0, 0x2, [@TCA_ROUTE4_TO={0x0, 0x2, 0x82}, @TCA_ROUTE4_IIF={0x0, 0x4, r5}, @TCA_ROUTE4_ACT={0x0, 0x6, [@m_vlan={0x0, 0x7, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x0, 0x2, {{0x80000001, 0xfffffffe, 0x0, 0x8c, 0x4}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0xff57, 0x3, 0xae3}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x7}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x0, 0x5e, 0x7, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x1}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x6, 0x4, 0x0, 0x7, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}]}, {0x0, 0x6, "4e79e73126f1fc1f86857405738a790d92bc36dcd448881c355aee14704654769545d0c093854f8b414a1e155fba18a4e0f7f16f35c7ab9df41e27fc54c2da0aa383133b4fa987d7aa473de0cc1b62bc70dae132774c2146bc5c1e8805fc6c7bbb41905187b628f2486029e1f628fccf7f312495bad3559397d322900b4da10e6137dfa5f04f724643e0c581be61665ae01cd597526d7d28d5fc27f68873d21d4fbd7ee9b1930ec75d2250eaaf246af044fef160220513581f9976"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x7, 0x1}}}}, @m_sample={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x0, 0x3, 0x1}, @TCA_SAMPLE_PSAMPLE_GROUP={0x0, 0x5, 0x2}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0xe40, 0x7, 0x10000000, 0x8, 0xc9}}, @TCA_SAMPLE_PARMS={0x0, 0x2, {0x8, 0x4, 0xffffffffffffffff, 0x19, 0x2}}]}, {0x0, 0x6, "3698abcbe0877b42694ff54c27dd3195025671ee30c121f7cbd3746e4c5f9f34b5307c6846da"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_simple={0x0, 0x9, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, 'basic\x00'}, @TCA_DEF_DATA={0x0, 0x3, ']}\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x6, 0x1ff, 0x6, 0x8, 0x4}}, @TCA_DEF_PARMS={0x0, 0x2, {0x1, 0x1, 0xffffffffffffffff, 0x9, 0x2}}, @TCA_DEF_PARMS={0x0, 0x2, {0x1800, 0x4, 0x3, 0x9, 0x6bf}}, @TCA_DEF_PARMS={0x0, 0x2, {0x80000002, 0x7, 0x20000000, 0x64b, 0x87d}}, @TCA_DEF_PARMS={0x0, 0x2, {0x7cc, 0xff, 0x0, 0x1ff, 0x6}}, @TCA_DEF_DATA={0x0, 0x3, '-(U\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x9, 0x4, 0x6, 0x3, 0x8}}]}, {0x0, 0x6, "3d54dd2da7a8bdf66894fa22caa1c3bdbc6f9f6679fc7f7f36ade4ef1dd291e02e5e737f3801e7d0b76e358026effce30c84f4e1ead8f08505ce2a965e784c2e7551422ad56a099397b3981c534cbbea0ad028876fa68db8112eccf3295237cfc2635ee2cbee9e"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1}}}}, @m_ct={0x0, 0x17, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x0, 0x3, 0x1}, @TCA_CT_MARK={0x0, 0x5, 0x10001}, @TCA_CT_MARK={0x0, 0x5, 0x8c}]}, {0x0, 0x6, "a46ddc964ea87c5b46d0176b40bf33d7d012b55cf63cc09fcd546b3b3bf819032454ceef7c84fa71f5248fd5c46a21677d46fcf67e8730dd0c7e9ed2662fa18232a12c606df5fd01ed5252b9f10a90c326d74ff3695dc33471635aa5518e6d61d89676f0102ff22755cee7"}, {}, {0x0, 0x8, {0x0, 0x2}}}}, @m_csum={0x0, 0x6, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x0, 0x1, {{0x10, 0xb, 0xffffffffffffffff, 0x2, 0x3191}, 0x1f}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x7, 0x154, 0x6, 0x2, 0xff}, 0x24}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3, 0x4, 0x6, 0x44f, 0x5}, 0x50}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x3f84, 0x100, 0x7, 0xb, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x0, 0x1, {{0x8, 0x5, 0x10000000, 0x4, 0x882}, 0x21}}]}, {0x0, 0x6, "92e491e9cbb44c8a47628533eebe43e5f046bd622753a2be666f504f38412a6a0078176621e44d14eb7db67fedbdfe8f34482e0d2adb6156c970f0d99f735c6c5a547787b9bf7f46316da4d84b05b4e6632d9bc4be5c3b1ffd2ced336a5c784f06e405038f001e88a637d153115cd10a14bece632ceac1c086bb8822be068f2c22d6e169d4ce24337a349261c7ed17a92370d560a5d89e3a56a52bc8fe03ea154da6840e1cb5"}, {0x0, 0x7, {0x1}}, {0x0, 0x8, {0x1}}}}, @m_skbedit={0x0, 0xe, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x0, 0x7, 0x6}, @TCA_SKBEDIT_PARMS={0x0, 0x2, {0xffffffa0, 0x4, 0x20000000, 0x2, 0x83eb}}]}, {0x0, 0x6, "e40beb1a3bbe8cfa4d14e1549edd9d5aa580d55f223912ec63fbfd298be7235b5917e2292b7fe3b244b2f99d1f6da6e3bb3e3fcbbc3b9c602507ec2a8b06b5923279adfd74eddc9bb2e70073597de4886b9c514694705e5aaca73179c350426c09bc"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}, @m_ct={0x0, 0xd, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CT_LABELS_MASK={0x0, 0x8, "408674a45c41d005c06fc48391992fb5"}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e24}, @TCA_CT_LABELS={0x0, 0x7, "43d8429472c78a0939ffee7dd8a110a0"}, @TCA_CT_MARK_MASK={0x0, 0x6, 0x2}, @TCA_CT_NAT_IPV6_MAX={0x0, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_CT_NAT_PORT_MAX={0x0, 0xe, 0x4e21}, @TCA_CT_PARMS={0x0, 0x1, {0x3, 0x8, 0x7, 0x7, 0x7}}, @TCA_CT_ZONE={0x0, 0x4, 0x7}, @TCA_CT_ZONE={0x0, 0x4, 0x6}, @TCA_CT_NAT_IPV6_MIN={0x0, 0xb, @empty}]}, {0x0, 0x6, "b10016a2f8528c4fa00eaede93840c62bcb3fe91cd43ac52c9568c965248a50fb588c87b160dfd3b0342eb9672e6c54d97a5f23cab56858db82f1628ae95b90c2f0c48e3da206e054f17bc3aedd87e44cc33fb66bbc51a0fc5673bb45819fdfee0798f04282872fae343f397d2791f1bce487223019f63575e94b10445d0df7c3efdf3f4da21fce09f13badbc806ccf65567fd2deedd22e3b7a614e670c20455f883132cf7057daa"}, {0x0, 0x7, {0x1, 0x1}}, {0x0, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x0, 0x25dfdbfe, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r10, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000002dc0)={0x14, 0x26, 0x303, 0x70bd28, 0x25dfdafc, {0x1f}}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000844) recvmmsg(r11, &(0x7f0000002e00)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x160, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000002c0)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="3de9c0fecde9a9f1bcd465d7d56840fde10fc5ce025fefeb4a88af975b0a65741fa86478de33d6feada96430b2f6aa784f3c27b196e1874b15e04bbd99d05490eb241096c96187d7050a65a9684caf251bf31b93997c74d29fd23875709b8573dfaf0cf7e783", 0x66, r9}, 0x64) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r12 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r12, 0x40045532, &(0x7f0000000340)=0x5) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0040000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 7.048725693s ago: executing program 1 (id=7935): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2100, &(0x7f0000000300)={&(0x7f00000000c0)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50530, 0x5a1b5}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x38, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x44}}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24004804}, 0x40000) 3.546489812s ago: executing program 4 (id=7936): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r1}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r1, 0x4}}]}, 0xc4}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xd, @output={0x1000, 0x0, {0x6, 0x5}, 0x10, 0x1}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad5", 0x5e}, {&(0x7f0000000400)="7f96b1c0057470ba", 0x8}], 0x3) write(r3, &(0x7f0000001e00)="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", 0x321) 3.451500446s ago: executing program 1 (id=7938): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041891}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xee, 0x9c, 0x1, 0x40, 0x1e59, 0x2, 0x98ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfd, 0x4, 0x0, 0x7, "", [{{0x9, 0x4, 0x82, 0x5, 0x0, 0x44, 0x48, 0xcf, 0x7}}]}}]}}, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r5 = openat$snapshot(0xffffff9c, &(0x7f0000000100), 0x161800, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0xc, {0xfff, 0x7}}, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) readv(r6, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) read$midi(r6, &(0x7f0000000180)=""/132, 0x84) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000100)=@e={0xff, 0xa, 0x2, 0x4, @SEQ_NOTEON=@note=0x7f, 0xa0, 0xb9, 0x2}) 3.380604823s ago: executing program 0 (id=7940): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x26000) ioctl$KVM_RUN(r2, 0xae80, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000140)=[@ioring_restriction_register_op={0x0, 0x1}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_sqe_flags_allowed={0x2, 0x4}], 0x3) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r3, 0xc, 0x0, 0x0) io_uring_enter(r3, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) 3.155900061s ago: executing program 9 (id=7941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0xffffffff, 0xc2}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000002c0)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r6, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "96adba7e86dfb1f9", "bf46622722a5770197b984225c89be96", "f0d29741", "5d66b23dcf836e89"}, 0x28) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 3.020484866s ago: executing program 9 (id=7942): r0 = socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x8, 0x105}, 0x50) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0x10}, {&(0x7f00000001c0)="ab61ad5738c2e56d8f4f3103cab0b39041", 0x11}], 0x2, 0x0, 0x0, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x2}}], 0x1, 0x40000141, 0x0) preadv(r1, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) 3.008515766s ago: executing program 4 (id=7943): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 2.921065448s ago: executing program 4 (id=7944): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000240)={0x7, 0x2, "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"}) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r2 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x4008700c, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x8427e, 0x9a) r7 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x800000a1e) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x110) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r8}, 0x10) openat$nullb(0xffffff9c, &(0x7f00000001c0), 0x200000, 0x0) getdents64(r1, &(0x7f0000000100)=""/117, 0x75) 2.891662008s ago: executing program 0 (id=7945): socket$inet6_sctp(0xa, 0x801, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000000)) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4623, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15ee", 0x2}], 0x1}}], 0x2, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="bc", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4623, 0xf162, @remote, 0x9}, 0x1c, &(0x7f0000000d80)=[{&(0x7f00000003c0)="15ee", 0x2}], 0x1}}], 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_clone(0x40884000, &(0x7f0000000140)="9e164faa74f23a38f4040315d173efcbd2d4594c415282626f7d0c6b6216a34ae6a317068d8da8067197584cb5d3285438bfd9c5e4b7e11956fb828000624a250f92f7aea46c1ec7342f0287bbced599cf8693f906a71e96f7ecf5786f1597cd0b9b03c1d241d49baa06ec39957143d1fa442e61dacfa35c577c90a1d889bd63f125c1c87f8a6de88f8b6806025bb091394854fe7ac762d4c2", 0x99, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000400)="849dc485309e9fbd2b2d696dfb18fbc7f715b9d67d95ec82bac205107ef51f67f8b2cee16162e6c3879aa108eadb88333a9c77650f9ce2e68dd3e5877e8785d70a69094853dad2e031cdedd167a416002a36b648c21a3d77f61cdb83eb55150b2796c6d5bdf84059b451b476a8a216a2c74b980e99cb6f3be7a460ef02a604fb1ea819e3da7fa9aca59a39c9b04a808e8edfc4e046bdf721a6c7de8d9eacc5d76d96e54d16ec11ce56daffc04215e48116d9fb6f0ef8d789eee02fd0588527a8271d6b56b95fcecf744f5a6e747893d9bbf20bba1e716c56549968e45e0c6d221eebd05de9") sendmsg$nl_generic(r1, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, 0x23, 0x2, 0x70bd2d, 0x25dfdbfb, {0x1a}, [@generic="a1c9fe78bde3cba1813911a2e55f3ca9dda1b316c7e47e1cfec35ec8b56c75bb8fd9c1d0fc70776bd09aa599d93f7907e287a26bdd8b0819b4c755632d3cb821ff8936b2ee947dd5110948aaea8e3ee00fde99980f1d1314dd685e96d9cd38a4e9b7c714db7136e7c612b1bf07db9a", @typed={0x8, 0xbc, 0x0, 0x0, @pid=r2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000010}, 0x14) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0x922, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000002300)={0x0, 0x4, 0xa629, 0x800}, 0x10) 2.479776548s ago: executing program 0 (id=7947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000280)={0x1, 0x0, [{0x400000b3, 0x0, 0x3}]}) fsetxattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)='//\\/\x06\b/?\\o\xdc\xea\x95\x9a)\x00bb\x8a\x80\x91\xdf\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) syz_usb_connect(0x3, 0x48, &(0x7f0000000140)=ANY=[@ANYBLOB="490100007ce7c810d804300a47ce010203010902360001000000000904"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0xffffffffffff8000, 0x0) close(r6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x304, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xb, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xc, 0x63bd, 0x0, 0x2, 0xf49, 0xff, 0x3}}, {0xa, 0x2, [0xfff, 0x7, 0xff]}}, {{0x1c, 0x1, {0x9, 0x9, 0x5, 0x0, 0x2, 0x6, 0xfffffff3, 0x5}}, {0xe, 0x2, [0xffff, 0x9, 0x9, 0x9, 0x6]}}, {{0x1c, 0x1, {0x7, 0x1, 0x7, 0x10001, 0x2, 0x0, 0xf, 0x5}}, {0xe, 0x2, [0x3, 0x3ff, 0x81, 0x8001, 0x3]}}, {{0x1c, 0x1, {0x9, 0xff, 0x3, 0x6, 0x1, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_red={{0x8}, {0x214, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x101}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_STAB={0x104, 0x2, "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"}]}}]}, 0x304}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) syz_open_dev$vim2m(&(0x7f0000000000), 0xb174, 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000440)=""/76, 0x4c}, {&(0x7f0000000600)=""/247, 0xf7}, {&(0x7f0000000700)=""/28, 0x1c}, {&(0x7f0000000b00)=""/174, 0xae}, {&(0x7f0000000bc0)=""/52, 0x34}, {&(0x7f0000000c00)=""/71, 0x47}, {&(0x7f0000000c80)=""/33, 0x21}], &(0x7f0000000d00)=[0x9, 0x9dde, 0xffff, 0x1, 0x10001], 0x7}, 0x20) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000340)={0xc, 0x3, 0x8, "b49e1b6230c84749af1b7c17e6e724ae0199424f5ab23800", 0x38415261}) sendmsg$can_bcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1d, r8}, 0x10, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000001000000", @ANYRES16=r5, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0400000001000b00030000c008000000d8a941262cd01cfe"], 0x34}, 0x1, 0x0, 0x0, 0x881}, 0x20000880) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0x6}, {0xffe0, 0x8}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x10000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x2004c840) 2.079852769s ago: executing program 8 (id=7950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af8ff000000007a0af0ff0000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000e0ff00008500000002000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 8) 2.008870252s ago: executing program 9 (id=7951): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000540)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004500)={0x2020}, 0xfffffe0c) (fail_nth: 8) 1.797363708s ago: executing program 8 (id=7952): r0 = openat$kvm(0x0, &(0x7f0000000300), 0x13b840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = eventfd(0x3) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r3 = eventfd(0x71f1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0xf006, 0x8000000, 0x0, r3}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r2}) (async) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x58000, 0x1, r2, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000ffe49500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1000}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)) (async) splice(r6, 0x0, r2, 0x0, 0x88, 0x0) (async) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x40001, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) mmap(&(0x7f0000672000/0x1000)=nil, 0x1000, 0x9ceb63bdd50452fd, 0x110, r1, 0xdf485000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) (async) write$binfmt_script(r7, &(0x7f0000001180)={'#! ', './file0', [], 0xa, "148b183056023ff248433e4bb26cde003fa39f8c5d3a07bc0f9ee795528bcbe5e511b480ac4d7c097974d51c1a5f69b9e5365f8df8d6a0c6a768aabc3d134aa8a37383cd1776622002a376cffc0786e32ca43071504f894979374e3df09dc19f608efbe87f4ad3b4aa57f0d389369d769401519b9851"}, 0x81) (async) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3020a527", @ANYRES16=0x0, @ANYBLOB="200029bd7000fcdbdf2564000000080001001e00000008000300", @ANYRES32=r5, @ANYBLOB="74fe99000700000016000000"], 0x30}, 0x1, 0x0, 0x0, 0x880}, 0xcc70) (async) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000140)=[{&(0x7f00000000c0)="390000002e0003470fbb65e1c3e4ffff060060001600000056000000250000001900130004000f0007fd17e5ff8e0606040020000000000000", 0x39}], 0x1) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc01c64b9, &(0x7f0000000400)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x8}) 1.384021571s ago: executing program 8 (id=7953): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r1}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r1, 0x4}}]}, 0xc4}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000100)={0xd, @output={0x1000, 0x0, {0x6, 0x5}, 0x10, 0x1}}) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002a00)=""/4114, 0x1012}, {&(0x7f0000001440)=""/4096, 0x707}, {&(0x7f0000000000)=""/135, 0x87}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x4, 0x0, 0x24}, 0x100) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) writev(r3, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000200)="135c15194fad5248c52ac1fc08d8399adf0d297ac3d2a1aa16f11eb8b8d820024c580e0de604fdbaed2ef90756c8be23ba639df0a47831c2d918315bfcf25597e99e8af1058c3fc9a3ff26a444a61320cc32641c81b34ace8a835e48fad5", 0x5e}, {&(0x7f0000000400)="7f96b1c0057470ba", 0x8}], 0x3) write(r3, &(0x7f0000001e00)="39270725d93c4ab6cb559938ef75d3d7fd5c06a228a59b717b6934bdefb8b8e2dfca955f26b8cab29bdfdce27e4f9cb112fe41e0a6799578f252519cd4a289985be050d209b4c9617cfb94f1bed81696b0c741f6d366efd7ad3dc7cef66647abaf4108076fdffecb7457f5b6b01835a3c79b873f6ebbcb5ee659861a7b4cce43711bbd6b13c941fbb38ef7e1fe0c70fa4aa49b98b43615605d51cc4d742b364a4e7a2f3dee73b86af3fa4ca8f616eaaedcf155820e1767f7d66ecd818ece03f32c3367bbd9ce6656123f394b7f26f1e0420a9ac4cb25638c75fc3c487ba76fd64c26da6d7ce7f1ee8f49d6e9cc95f5c94bf93183ebf8e6be081e0b9f34bd6c2fe5f895dc1cc01e3018cef11ad9e2e1baf35254258efbaf3e8898f561bdb5c4c49f9d3146503df48e194ea3d06396e970ea9fc7c47eb9988477ed1a7e8641dfeea7b57b5a9967c58762574262efde8795f20f2d45e964ede39c7a6502c03f863e6a21a33ba324e6474d4f0495054745f3a80e6554d4d1fd5ddbca11c5e3e6f9087ca1981a14baa3a2956faa8f6b1652e8cf30d7c37a060bc6c836862451c4e76fc9cb221db8d4b449c27aa44564cb33ef144ed0c51bdd66675302692d979297f30e2d9523f85afbbf54c5b5e2261f8b792f83b33cca78c44a5c4e6ff96273979acbb447d49c0502cc9f8991e9bc784a2e978912d8102d867b631d54269936f54bb20ee57e2b4ba4b6c44e767aef24f6c3a8bb5a3b2084d793082e4c5e517694b220e35ac140913e0e55257af03c4dcf376f24773642c14279e2b55906b0b8a4a34fa4d73f37a5feeca1cf93395b998ddcc557d0e2ae112cf1566f7097e7acb6c0bdf9350781341bb83936b355779417839a70c3cbe13e9561b0820df44dbd2a24bd3d6d8b0d9e83983cb7ad8f147f980b06be823e93a93395f5e60b7f31f5aeadc81f02e177446888c15d2845fd675b98360ac2f584a8ab618789499babac77e3311c563fa519a8dbbe49b91a46cc355f8e956c04dfc3b8e218dbe0302ff463fc94eceec7050b7477d9542f6d05d36ee13e664dfc0bb165601e6bd70615f3c299a9c7c7004cc9987a76afc54b3c83e5d23c0790f39593437b2592cf0548f21823f6", 0x321) 1.245758514s ago: executing program 9 (id=7954): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 1.113105588s ago: executing program 9 (id=7955): r0 = socket(0xa, 0xa, 0x100) write(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000010000320800000028c088ceff68e36e3c61e8708cfa484e80508f73a32fed7b0a28c048428139cd8b", @ANYRES32=r2, @ANYRES32=r4], 0x14}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/105, 0x69}}], 0x1, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000200)=0x6, 0x4) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x875, 0x48541) openat$dsp(0xffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r6, 0xc1205531, &(0x7f0000002680)=""/4078) r7 = socket(0x840000000002, 0x3, 0x100) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r7, &(0x7f0000005240), 0x4000095, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r8}, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x0, r8, 0x1, &(0x7f00000003c0)) futex(0x0, 0x6, 0x3, 0x0, &(0x7f0000000080)=0x4, 0x1) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) 449.138694ms ago: executing program 8 (id=7956): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000000)=0x40, 0x67) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x30040055}, 0x4000) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r3 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xffffffff, 0x0, 0x4}, 0x1c) getrandom(&(0x7f0000000100)=""/215, 0xd7, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r4, &(0x7f00000000c0)="f7376ba8", 0x4, 0x20008801, &(0x7f0000000200)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1e}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) 383.040803ms ago: executing program 9 (id=7957): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"}) (async) r1 = syz_open_pts(r0, 0xa0200) r2 = dup3(r1, r0, 0x80000) sendmmsg$inet6(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="334f91cb88936f3d762f0b015a4f3ad2f52697e27e7f78698a84fdc7f1a0e4aa62951a0d5613130baf0fca9709f62f2dd5250667b78dc13d652f656c17ea711c9b39bbbcaf9633df98ad", 0x4a}], 0x1}}, {{&(0x7f00000003c0)={0xa, 0x4e21, 0x7fff, @private0, 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000400)="9be4cab2f08a3928466f5713a269b75cd3801577e05c39c1e619ed6c427d6cdf8ffd35206e5bdbca71b5989b7fa85fa859c2ba5aea435060fc4535dbf57eee9b4e0ec11172689cfd5b7bfb28e935c7d759d772a18a6ea69f506472fc9b1987cd3d5ef87ae7d869f4bcd1d421c0af02c4484b1f67f3376d8dd142bc68932407e488580a3b7123b1f06e9cdbef17f3e35daed6ff1f216b9087ea6fc0ae44de17bd7c96b26501a8c116e10745287eff319f354379d2a638f35e791fe450a4101a788f8f43f1c65498251b2f8be04e831fba90eefcf128927bd014379daeab72ec8fe80208c4ecad5d9f7a6abc4cf9e0deeab55a", 0xf2}, {&(0x7f0000000500)="5b49b1ac2e5d214f4135d5cac001aa2a0ff61bcc0a7f6fc9ae4d74f91b5d269a980d067e2c40f474451f7b6311877511dd2e1455f65d7396b7f515cbd9baf3d18c4bc553baf058d20ef92d4f641fbbfb12fed3d93499f1243a864153758f79bced8339105e385957df9a61c159a16082c79960eebe7675ee9977f8bd4a92019b99e9a3e733bf2e8085180f8964259390180de44b05b2b9398689b3428b007dee97e8bf8ea726d2557302fbfb2d9f51b434693c6b040000004e48c7f877f4b8870eb4ea71cf4aecf24a19cf9ea403df92f2faa9f0598fa0843c9506e3db2a89", 0xdf}, {&(0x7f0000000600)="a6f39b27aa97f563ab2320673b1ac33cffdedc5c5353a8556cf847831416b1d60bbd73254bd5a3fe6af130010ecc167e3864aec8d389acacd55b2947f834a57fa8913dce73cbe9803ebd8285c7c547b6aa743e6d71fd", 0x56}, {&(0x7f0000000680)="e95cb54e23f29d3a8ee4e384d2d82b153941298b5a03a7f2199d6f8b2943a2ff49fcccadce1f298dc8a97f52d2942d22251e277f03f516caa96772dbc30f3b6de1d7d181bcbc89807adc2ab9f35a7907f5f36b015d274f9db8a2d18ddcdf2e71d244bf0fd6e078092980e1a8372721d7", 0x70}, {&(0x7f0000000700)="72e58a95433a89d00f071d4a5bd26ecf29bf5bd4baa0dda2b4f8161b8626f0f1db91f10370bb45f00b9bf50f621bbe0bf7160080ccecadc223c58c201e5fed179cac5ef4c442cf8b3e9d7a521282224088a7ab4a266f9f8ba1326b66d102aaad85bdd8c8b812029ca44b064334ae6b02a747bf75f85849ff6de3a3253c659f1a0d4ccdca9ad71d1d1df7eaa3102db974ad594018cbe112ed19e4ea06da", 0x9d}], 0x5, &(0x7f0000000800)=[@rthdr_2292={{0x54, 0x29, 0x39, {0x5c5dd78148751760, 0x8, 0x2, 0x9, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x26}, @mcast1, @mcast2]}}}, @tclass={{0x10, 0x29, 0x43, 0x3}}, @hopopts={{0x12c, 0x29, 0x36, {0x2f, 0x22, '\x00', [@generic={0x93, 0x9f, "7e694ce35febd0df77d84fc070e87044e0b0e63d8ea8eca357a8fba49bd50d7dd5f1ffba21d5b4523dc37206e2be68754c517c596068c4a5a173e227eea17e0cb574ce52f159bbc2781752914e700ed9d0b9f23d60bdf40da6ca797190b30498c640529b1024e4cbd19f66fba94e3f63aa606a0634941d836c69a1e0b2a0754e3f2173f4bd10e7b5cc887d19ef7b335e48f763349471c239875def8fee65d6"}, @pad1, @generic={0x5, 0x6a, "6651e7ea83aa79a908189029c711a274be36fec7b5125a95c73194f48e709640f7a73e6541c13956ff22f6073754d38c4e8acb970681641bb51171793a1f65dc1902e94a476b783474950742dc9d3b6ccc3366bce432815ec6a9c24a090acfba70d3635b595e125275fb"}, @jumbo={0xc2, 0x4, 0xfc000000}]}}}, @rthdrdstopts={{0x54, 0x29, 0x37, {0xb3, 0x7, '\x00', [@ra={0x5, 0x2, 0x100}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x1, 0x8, 0x3b, 0xf3, [0x8, 0x8, 0x5, 0x3]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}]}}}, @rthdr_2292={{0x44, 0x29, 0x39, {0x67, 0x6, 0x0, 0x2, 0x0, [@local, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts={{0x1c, 0x29, 0x36, {0x3c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xb}]}}}], 0x244}}, {{&(0x7f0000000280)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="72b326c40d9d398af6655b0f179e7ec8529413feace3bcaa1ddf0969b03afa5e06220c0b285aee43a6cacb199eff6ec066c04cc1b691df70bb339885ec6a4c9a45bb3d020dce7ff81fb6a6df8c698f783f299aaa840dc725b6a5fce280695f800b52c529ae1ef9ba8f88a91d8c067aa6dd9f3722efb3029a75685c6ba0865f86f6897a6fb17671c4f45b1fd2f1488869699ead1d9d6ec041300901ac516ef8a4c6aee0c00c7a8e", 0xa7}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e22, 0x5b5, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000000c0)="51b759272fc46fa8f517b77257ff5b53275730314e099bb11c24eebd913f5d0faaab7d156e898fc39abefcb369be29dc23f7992eee6a41e38d3cb19acc48e6aebeba5e41bd0cb97fa8413a0db68f8be180918709d69aa5646436bae5fdc281e3f8b57c8a9f7ef66c040780795ce8a8", 0x6f}, {&(0x7f0000000180)="e5d09c61a2b5c3073d076099fcd2da930f43852a7477a9eb49bdbdb11eefe988483bc0368f50cea60b5c00a127bb83793854bc49450853b82680b7ab7b1b9d1203bd5e2ff56599ea00c9eee13d2bba4f6d1202f1fe", 0x55}], 0x2, &(0x7f0000000240)=[@flowinfo={{0x10, 0x29, 0xb, 0x9}}], 0x10}}, {{&(0x7f0000000bc0)={0xa, 0x4e22, 0x6, @loopback}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000c00)="8b801d70a349239a9c83c17d3f4364ecc5671cd7b4f16613cbaaf438c3d35d7d6d14f41123e5f58abb7eff85ff8200aa95a121995a921540fac514061664a4371d11d737e9904b0b295769fb6f88c3c98ec92f6a5576df59520eef63412d5b0d57b4b3794af85253b254ab1cf32a5d3cfac8dc4072fe30db6ad1bfb92a5b8b407352e3a033b9556f79cbef64684b7b09b1bc", 0x92}, {&(0x7f0000000cc0)="8d0b54449fe5008ce63ee4d214417833b21aa58948f9e9fa3d89968d32f280ba8679e6dff5790eb4fe4e2d426a6136616a4389d3202fa2ef06a5b4", 0x3b}, {&(0x7f0000000d00)="65daac21708938144cce13e08654500d041036d35612fd40b65e47e4a5727d6ca8b20264fbae1c4d8500a89599cd2a3d7827311e260d42b206960d639dc31f74ace039891a42dae9033e799a630fbc6f532b877eb59e9741fbb927ef138f", 0x5e}, {&(0x7f0000000d80)="3188c10f8da5c947f178b675409de4fd3796ffe2736081f83997c26be0e05ce041b84bbcdf8cb2c25981da38c4c381", 0x2f}], 0x4, &(0x7f0000000e80)=[@pktinfo={{0x20, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}}}}], 0x20}}], 0x5, 0x40) (async) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000040)={0x7, 0x4, 0x2, 0x3, 0x16, "e533991cd00ee11a"}) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0xffffffffffffff38) (async) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) (async) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000010800"/19, @ANYRES32=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) (async) socket$key(0xf, 0x3, 0x2) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x4, 0xe0, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x80, 0x28) fcntl$notify(r6, 0x402, 0x3b) (async) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x8042, 0x1f6) (async) r8 = open(&(0x7f0000000180)='./file1\x00', 0x143142, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x103000) (async) splice(r8, 0x0, r7, 0x0, 0x59, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) (async) memfd_create(0x0, 0x3) 309.467875ms ago: executing program 1 (id=7958): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) write(r0, &(0x7f0000000800)="ffffffffffff0011223344554305000f32000000020200112233445500112233445500ff0000", 0x26) (fail_nth: 8) 0s ago: executing program 8 (id=7959): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x1, 0x0, &(0x7f0000000000)) fstat(0xffffffffffffffff, &(0x7f0000000540)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000040)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, 0x0, 0x0) read$FUSE(r1, &(0x7f0000004500)={0x2020}, 0xfffffe0c) kernel console output (not intermixed with test programs): 000000000 [ 1453.401882][T31829] [ 1454.201468][T27072] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 1454.358975][T27072] usb 2-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1454.360667][T27072] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1454.363084][T27072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.363109][T27072] usb 2-1: Product: syz [ 1454.363124][T27072] usb 2-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1454.363145][T27072] usb 2-1: SerialNumber: syz [ 1454.727777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 1454.746944][T31861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7692'. [ 1454.746965][T31861] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7692'. [ 1454.775942][T31863] FAULT_INJECTION: forcing a failure. [ 1454.775942][T31863] name failslab, interval 1, probability 0, space 0, times 0 [ 1454.775964][T31863] CPU: 1 UID: 0 PID: 31863 Comm: syz.9.7693 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.775979][T31863] Tainted: [L]=SOFTLOCKUP [ 1454.775983][T31863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.775990][T31863] Call Trace: [ 1454.775995][T31863] [ 1454.776000][T31863] dump_stack_lvl+0xe8/0x150 [ 1454.776032][T31863] should_fail_ex+0x410/0x560 [ 1454.776060][T31863] should_failslab+0xa8/0x100 [ 1454.776084][T31863] ? single_open+0x119/0x240 [ 1454.776101][T31863] kmem_cache_alloc_noprof+0xa1/0x600 [ 1454.776116][T31863] ? __kmalloc_cache_noprof+0x321/0x600 [ 1454.776127][T31863] ? single_open+0x5a/0x240 [ 1454.776138][T31863] ? single_open+0x119/0x240 [ 1454.776154][T31863] single_open+0x119/0x240 [ 1454.776180][T31863] bm_entry_open+0x50/0xf0 [ 1454.776204][T31863] ? __pfx_bm_entry_open+0x10/0x10 [ 1454.776228][T31863] do_dentry_open+0x816/0x1380 [ 1454.776252][T31863] vfs_open+0x3b/0x340 [ 1454.776263][T31863] ? path_openat+0x1428/0x1d60 [ 1454.776275][T31863] path_openat+0x1443/0x1d60 [ 1454.776294][T31863] do_file_open+0x23e/0x4a0 [ 1454.776320][T31863] ? __pfx_do_file_open+0x10/0x10 [ 1454.776361][T31863] ? _raw_spin_unlock+0x28/0x50 [ 1454.776389][T31863] ? alloc_fd+0x651/0x6c0 [ 1454.776409][T31863] do_sys_openat2+0x115/0x200 [ 1454.776421][T31863] ? __fget_files+0x3a2/0x420 [ 1454.776435][T31863] ? __pfx_do_sys_openat2+0x10/0x10 [ 1454.776450][T31863] ? fput+0xa0/0xd0 [ 1454.776474][T31863] ? ksys_write+0x242/0x270 [ 1454.776507][T31863] __ia32_compat_sys_openat+0x131/0x160 [ 1454.776538][T31863] __do_fast_syscall_32+0x27a/0x6a0 [ 1454.776552][T31863] ? do_fast_syscall_32+0x33/0x70 [ 1454.776563][T31863] ? asm_int80_emulation+0x1a/0x20 [ 1454.776574][T31863] ? do_int80_emulation+0x299/0x500 [ 1454.776584][T31863] ? trace_irq_disable+0x3b/0x140 [ 1454.776597][T31863] do_fast_syscall_32+0x33/0x70 [ 1454.776618][T31863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1454.776642][T31863] RIP: 0023:0xf7f630ec [ 1454.776660][T31863] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1454.776678][T31863] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1454.776695][T31863] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 1454.776703][T31863] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1454.776709][T31863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1454.776715][T31863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1454.776722][T31863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1454.776737][T31863] [ 1454.995506][T31864] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7692'. [ 1455.264658][T27072] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1455.290739][T27072] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1455.367895][ T25] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1455.456364][T27072] usb 2-1: USB disconnect, device number 43 [ 1455.536877][T31882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1455.536926][T31882] IPv6: NLM_F_CREATE should be set when creating new route [ 1455.536951][T31882] IPv6: NLM_F_CREATE should be set when creating new route [ 1455.592400][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.896095][T31888] syzkaller1: entered promiscuous mode [ 1455.896139][T31888] syzkaller1: entered allmulticast mode [ 1457.933435][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1457.934132][ T25] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1457.934155][ T25] usb 9-1: no configurations [ 1457.934162][ T25] usb 9-1: can't read configurations, error -22 [ 1457.992630][T31933] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1457.992663][T31933] IPv6: NLM_F_CREATE should be set when creating new route [ 1457.992673][T31933] FAULT_INJECTION: forcing a failure. [ 1457.992673][T31933] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.992701][T31933] CPU: 1 UID: 0 PID: 31933 Comm: syz.1.7714 Tainted: G L syzkaller #0 PREEMPT(full) [ 1457.992728][T31933] Tainted: [L]=SOFTLOCKUP [ 1457.992736][T31933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1457.992748][T31933] Call Trace: [ 1457.992757][T31933] [ 1457.992765][T31933] dump_stack_lvl+0xe8/0x150 [ 1457.992799][T31933] should_fail_ex+0x410/0x560 [ 1457.992826][T31933] should_failslab+0xa8/0x100 [ 1457.992850][T31933] ? fib6_add_1+0x73c/0x13e0 [ 1457.992872][T31933] kmem_cache_alloc_noprof+0xa1/0x600 [ 1457.992905][T31933] ? fib6_add_1+0x73c/0x13e0 [ 1457.992932][T31933] fib6_add_1+0x73c/0x13e0 [ 1457.992963][T31933] fib6_add+0x59a/0x1a20 [ 1457.992998][T31933] ? __pfx_fib6_add+0x10/0x10 [ 1457.993021][T31933] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1457.993040][T31933] ? inet6_rtm_newroute+0x988/0x1a30 [ 1457.993068][T31933] ? inet6_rtm_newroute+0x988/0x1a30 [ 1457.993099][T31933] ? inet6_rtm_newroute+0xc3e/0x1a30 [ 1457.993131][T31933] inet6_rtm_newroute+0xc57/0x1a30 [ 1457.993167][T31933] ? kasan_quarantine_put+0xbb/0x1f0 [ 1457.993187][T31933] ? lockdep_hardirqs_on+0x7b/0x110 [ 1457.993210][T31933] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1457.993237][T31933] ? nlmon_xmit+0xb0/0x100 [ 1457.993284][T31933] ? lockdep_hardirqs_on+0x7b/0x110 [ 1457.993330][T31933] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1457.993357][T31933] rtnetlink_rcv_msg+0x802/0xc00 [ 1457.993384][T31933] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1457.993405][T31933] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1457.993426][T31933] ? ref_tracker_free+0x689/0x830 [ 1457.993452][T31933] ? __pfx_ref_tracker_free+0x10/0x10 [ 1457.993491][T31933] netlink_rcv_skb+0x226/0x4a0 [ 1457.993520][T31933] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1457.993545][T31933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1457.993584][T31933] ? netlink_deliver_tap+0x2e/0x1b0 [ 1457.993611][T31933] ? netlink_deliver_tap+0x2e/0x1b0 [ 1457.993643][T31933] netlink_unicast+0x7bd/0x940 [ 1457.993679][T31933] netlink_sendmsg+0x813/0xb40 [ 1457.993716][T31933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.993752][T31933] ? apparmor_socket_sendmsg+0x98/0x360 [ 1457.993776][T31933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1457.993802][T31933] sock_sendmsg_nosec+0x13a/0x180 [ 1457.993833][T31933] ____sys_sendmsg+0x54e/0x850 [ 1457.993861][T31933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1457.993901][T31933] ___sys_sendmsg+0x2a5/0x360 [ 1457.993925][T31933] ? __lock_acquire+0x747/0x2de0 [ 1457.993952][T31933] ? __pfx____sys_sendmsg+0x10/0x10 [ 1457.993976][T31933] ? get_pid_task+0x20/0x1f0 [ 1457.993996][T31933] ? get_pid_task+0x20/0x1f0 [ 1457.994013][T31933] ? get_pid_task+0x20/0x1f0 [ 1457.994060][T31933] ? __fget_files+0x2a/0x420 [ 1457.994086][T31933] ? __fget_files+0x3a2/0x420 [ 1457.994121][T31933] __sys_sendmsg+0x177/0x240 [ 1457.994149][T31933] ? __pfx___sys_sendmsg+0x10/0x10 [ 1457.994193][T31933] __do_fast_syscall_32+0x27a/0x6a0 [ 1457.994217][T31933] ? do_fast_syscall_32+0x33/0x70 [ 1457.994238][T31933] ? asm_int80_emulation+0x1a/0x20 [ 1457.994258][T31933] ? do_int80_emulation+0x299/0x500 [ 1457.994278][T31933] ? trace_irq_disable+0x3b/0x140 [ 1457.994302][T31933] do_fast_syscall_32+0x33/0x70 [ 1457.994325][T31933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1457.994350][T31933] RIP: 0023:0xf7fb40ec [ 1457.994367][T31933] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1457.994384][T31933] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1457.994406][T31933] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1457.994420][T31933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1457.994432][T31933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1457.994444][T31933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1457.994456][T31933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1457.994493][T31933] [ 1458.232704][T31939] netlink: 'syz.1.7716': attribute type 1 has an invalid length. [ 1458.470864][T31939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1458.501241][T31942] bond1: (slave geneve3): making interface the new active one [ 1458.505042][T31942] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1458.550567][ T25] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1458.711213][ T25] usb 9-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1458.712268][ T25] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1458.715283][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1458.715309][ T25] usb 9-1: Product: syz [ 1458.715324][ T25] usb 9-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1458.715408][ T25] usb 9-1: SerialNumber: syz [ 1458.996978][ T25] usb 9-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1459.010645][ T25] usb 9-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1459.114585][ T25] usb 9-1: USB disconnect, device number 55 [ 1459.246782][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1460.019146][T31981] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7726'. [ 1460.020315][T31981] FAULT_INJECTION: forcing a failure. [ 1460.020315][T31981] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.020346][T31981] CPU: 0 UID: 0 PID: 31981 Comm: syz.9.7726 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.020372][T31981] Tainted: [L]=SOFTLOCKUP [ 1460.020379][T31981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1460.020390][T31981] Call Trace: [ 1460.020398][T31981] [ 1460.020408][T31981] dump_stack_lvl+0xe8/0x150 [ 1460.020440][T31981] should_fail_ex+0x410/0x560 [ 1460.020466][T31981] should_failslab+0xa8/0x100 [ 1460.020493][T31981] __kmalloc_cache_noprof+0xa3/0x600 [ 1460.020513][T31981] ? nsim_fib_event_nb+0x185/0x11d0 [ 1460.020542][T31981] ? nsim_fib_event_nb+0x185/0x11d0 [ 1460.020575][T31981] nsim_fib_event_nb+0x185/0x11d0 [ 1460.020604][T31981] ? lock_acquire+0x115/0x350 [ 1460.020628][T31981] notifier_call_chain+0x1a5/0x3d0 [ 1460.020659][T31981] ? atomic_notifier_call_chain+0x26/0x180 [ 1460.020690][T31981] atomic_notifier_call_chain+0xda/0x180 [ 1460.020722][T31981] call_fib_notifiers+0x31/0x60 [ 1460.020748][T31981] fib6_add_rt2node+0x15f3/0x3940 [ 1460.020795][T31981] ? __pfx_fib6_add_rt2node+0x10/0x10 [ 1460.020820][T31981] ? fib6_add_1+0x807/0x13e0 [ 1460.020858][T31981] fib6_add+0x9ae/0x1a20 [ 1460.020889][T31981] ? __pfx_fib6_add+0x10/0x10 [ 1460.020917][T31981] ? ip6_route_add+0xc9/0x1b0 [ 1460.020949][T31981] ip6_route_add+0xde/0x1b0 [ 1460.020974][T31981] inet6_rtm_newroute+0x267/0x1a30 [ 1460.021012][T31981] ? kasan_quarantine_put+0xbb/0x1f0 [ 1460.021033][T31981] ? lockdep_hardirqs_on+0x7b/0x110 [ 1460.021057][T31981] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1460.021085][T31981] ? nlmon_xmit+0xb0/0x100 [ 1460.021105][T31981] ? kmem_cache_free+0x182/0x650 [ 1460.021135][T31981] ? __lock_acquire+0x747/0x2de0 [ 1460.021165][T31981] ? __local_bh_enable_ip+0xd6/0x140 [ 1460.021190][T31981] ? lockdep_hardirqs_on+0x7b/0x110 [ 1460.021238][T31981] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 1460.021268][T31981] rtnetlink_rcv_msg+0x802/0xc00 [ 1460.021295][T31981] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1460.021316][T31981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1460.021335][T31981] ? ref_tracker_free+0x689/0x830 [ 1460.021360][T31981] ? __pfx_ref_tracker_free+0x10/0x10 [ 1460.021393][T31981] netlink_rcv_skb+0x226/0x4a0 [ 1460.021422][T31981] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1460.021446][T31981] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1460.021486][T31981] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.021512][T31981] ? netlink_deliver_tap+0x2e/0x1b0 [ 1460.021543][T31981] netlink_unicast+0x7bd/0x940 [ 1460.021573][T31981] netlink_sendmsg+0x813/0xb40 [ 1460.021603][T31981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.021632][T31981] ? apparmor_socket_sendmsg+0x98/0x360 [ 1460.021652][T31981] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1460.021674][T31981] sock_sendmsg_nosec+0x13a/0x180 [ 1460.021713][T31981] ____sys_sendmsg+0x54e/0x850 [ 1460.021738][T31981] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1460.021771][T31981] ___sys_sendmsg+0x2a5/0x360 [ 1460.021790][T31981] ? __lock_acquire+0x747/0x2de0 [ 1460.021810][T31981] ? __pfx____sys_sendmsg+0x10/0x10 [ 1460.021830][T31981] ? get_pid_task+0x20/0x1f0 [ 1460.021845][T31981] ? get_pid_task+0x20/0x1f0 [ 1460.021859][T31981] ? get_pid_task+0x20/0x1f0 [ 1460.021897][T31981] ? __fget_files+0x2a/0x420 [ 1460.021918][T31981] ? __fget_files+0x3a2/0x420 [ 1460.021953][T31981] __sys_sendmsg+0x177/0x240 [ 1460.021975][T31981] ? __pfx___sys_sendmsg+0x10/0x10 [ 1460.022011][T31981] __do_fast_syscall_32+0x27a/0x6a0 [ 1460.022031][T31981] ? do_fast_syscall_32+0x33/0x70 [ 1460.022049][T31981] ? asm_int80_emulation+0x1a/0x20 [ 1460.022065][T31981] ? do_int80_emulation+0x299/0x500 [ 1460.022082][T31981] ? trace_irq_disable+0x3b/0x140 [ 1460.022102][T31981] do_fast_syscall_32+0x33/0x70 [ 1460.022120][T31981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1460.022140][T31981] RIP: 0023:0xf7f630ec [ 1460.022155][T31981] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1460.022170][T31981] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1460.022189][T31981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1460.022201][T31981] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1460.022211][T31981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1460.022221][T31981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1460.022231][T31981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1460.022255][T31981] [ 1460.463038][T31987] FAULT_INJECTION: forcing a failure. [ 1460.463038][T31987] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.463071][T31987] CPU: 1 UID: 0 PID: 31987 Comm: syz.9.7729 Tainted: G L syzkaller #0 PREEMPT(full) [ 1460.463097][T31987] Tainted: [L]=SOFTLOCKUP [ 1460.463104][T31987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1460.463115][T31987] Call Trace: [ 1460.463123][T31987] [ 1460.463131][T31987] dump_stack_lvl+0xe8/0x150 [ 1460.463163][T31987] should_fail_ex+0x410/0x560 [ 1460.463198][T31987] should_failslab+0xa8/0x100 [ 1460.463221][T31987] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1460.463282][T31987] kmem_cache_alloc_noprof+0xa1/0x600 [ 1460.463309][T31987] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1460.463338][T31987] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1460.463365][T31987] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1460.463399][T31987] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 1460.463438][T31987] mmu_topup_memory_caches+0x21/0x170 [ 1460.463461][T31987] kvm_mmu_load+0x9d/0x21e0 [ 1460.463488][T31987] ? vmx_vcpu_load+0x1af/0x260 [ 1460.463514][T31987] ? kvm_arch_vcpu_load+0x1f6/0xab0 [ 1460.463538][T31987] ? kvm_arch_vcpu_load+0x7d9/0xab0 [ 1460.463563][T31987] ? lock_acquire+0x115/0x350 [ 1460.463589][T31987] kvm_arch_vcpu_pre_fault_memory+0x63a/0x6e0 [ 1460.463618][T31987] kvm_vcpu_pre_fault_memory+0x22f/0x470 [ 1460.463642][T31987] ? kvm_vcpu_pre_fault_memory+0x15f/0x470 [ 1460.463669][T31987] kvm_vcpu_ioctl+0x8a6/0xfd0 [ 1460.463695][T31987] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1460.463714][T31987] ? do_vfs_ioctl+0x116f/0x1530 [ 1460.463738][T31987] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1460.463770][T31987] ? hook_file_ioctl_compat+0x1f2/0x600 [ 1460.463811][T31987] kvm_vcpu_compat_ioctl+0x204/0x390 [ 1460.463835][T31987] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 1460.463857][T31987] ? __fget_files+0x3a2/0x420 [ 1460.463882][T31987] ? __fget_files+0x2a/0x420 [ 1460.463910][T31987] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1460.463941][T31987] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1460.463965][T31987] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1460.463987][T31987] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1460.464011][T31987] ? __fget_files+0x3a2/0x420 [ 1460.464043][T31987] ? fput+0xa0/0xd0 [ 1460.464065][T31987] ? ksys_write+0x242/0x270 [ 1460.464104][T31987] __do_fast_syscall_32+0x27a/0x6a0 [ 1460.464127][T31987] ? do_fast_syscall_32+0x33/0x70 [ 1460.464148][T31987] ? asm_int80_emulation+0x1a/0x20 [ 1460.464167][T31987] ? do_int80_emulation+0x299/0x500 [ 1460.464192][T31987] ? trace_irq_disable+0x3b/0x140 [ 1460.464216][T31987] do_fast_syscall_32+0x33/0x70 [ 1460.464237][T31987] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1460.464260][T31987] RIP: 0023:0xf7f630ec [ 1460.464277][T31987] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1460.464293][T31987] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1460.464314][T31987] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c040aed5 [ 1460.464327][T31987] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 1460.464339][T31987] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1460.464351][T31987] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1460.464362][T31987] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1460.464388][T31987] [ 1462.474872][T32031] syzkaller1: entered promiscuous mode [ 1462.474888][T32031] syzkaller1: entered allmulticast mode [ 1462.583075][T32034] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 1462.635580][T32034] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1462.665257][T32034] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.684257][T32034] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1462.723029][T32034] bond0 (unregistering): Released all slaves [ 1462.888027][ T5618] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1463.024066][T32044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7744'. [ 1463.024091][T32044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7744'. [ 1463.042198][ T5618] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1463.044448][ T5618] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1463.044477][ T5618] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1463.044504][ T5618] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1463.044530][ T5618] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1463.044569][ T5618] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.047285][ T5618] usb 10-1: config 0 descriptor?? [ 1463.049619][T32036] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1463.187404][T32050] FAULT_INJECTION: forcing a failure. [ 1463.187404][T32050] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.187438][T32050] CPU: 1 UID: 0 PID: 32050 Comm: syz.0.7748 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.187464][T32050] Tainted: [L]=SOFTLOCKUP [ 1463.187471][T32050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.187482][T32050] Call Trace: [ 1463.187493][T32050] [ 1463.187502][T32050] dump_stack_lvl+0xe8/0x150 [ 1463.187535][T32050] should_fail_ex+0x410/0x560 [ 1463.187558][T32050] ? __alloc_skb+0x1db/0x7a0 [ 1463.187581][T32050] should_failslab+0xa8/0x100 [ 1463.187606][T32050] ? __alloc_skb+0x1db/0x7a0 [ 1463.187626][T32050] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1463.187654][T32050] ? __alloc_skb+0x18d/0x7a0 [ 1463.187676][T32050] ? __alloc_skb+0x1db/0x7a0 [ 1463.187703][T32050] __alloc_skb+0x1db/0x7a0 [ 1463.187727][T32050] netlink_ack+0x136/0xb30 [ 1463.187767][T32050] nfnetlink_rcv+0x260c/0x28c0 [ 1463.187821][T32050] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1463.187860][T32050] ? ref_tracker_free+0x689/0x830 [ 1463.187905][T32050] ? skb_clone+0x246/0x3a0 [ 1463.187933][T32050] ? __netlink_deliver_tap+0x811/0x860 [ 1463.187976][T32050] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.188003][T32050] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.188034][T32050] netlink_unicast+0x7bd/0x940 [ 1463.188069][T32050] netlink_sendmsg+0x813/0xb40 [ 1463.188106][T32050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.188140][T32050] ? apparmor_socket_sendmsg+0x98/0x360 [ 1463.188164][T32050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.188190][T32050] sock_sendmsg_nosec+0x13a/0x180 [ 1463.188222][T32050] ____sys_sendmsg+0x54e/0x850 [ 1463.188258][T32050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.188297][T32050] ___sys_sendmsg+0x2a5/0x360 [ 1463.188323][T32050] ? __lock_acquire+0x747/0x2de0 [ 1463.188346][T32050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.188368][T32050] ? get_pid_task+0x20/0x1f0 [ 1463.188386][T32050] ? get_pid_task+0x20/0x1f0 [ 1463.188403][T32050] ? get_pid_task+0x20/0x1f0 [ 1463.188448][T32050] ? __fget_files+0x2a/0x420 [ 1463.188473][T32050] ? __fget_files+0x3a2/0x420 [ 1463.188508][T32050] __sys_sendmsg+0x177/0x240 [ 1463.188536][T32050] ? __pfx___sys_sendmsg+0x10/0x10 [ 1463.188578][T32050] __do_fast_syscall_32+0x27a/0x6a0 [ 1463.188602][T32050] ? do_fast_syscall_32+0x33/0x70 [ 1463.188624][T32050] ? asm_int80_emulation+0x1a/0x20 [ 1463.188643][T32050] ? do_int80_emulation+0x299/0x500 [ 1463.188662][T32050] ? trace_irq_disable+0x3b/0x140 [ 1463.188685][T32050] do_fast_syscall_32+0x33/0x70 [ 1463.188707][T32050] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1463.188731][T32050] RIP: 0023:0xf7ff80ec [ 1463.188749][T32050] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1463.188765][T32050] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1463.188786][T32050] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1463.188801][T32050] RDX: 0000000000048000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1463.188813][T32050] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1463.188824][T32050] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1463.188835][T32050] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1463.188864][T32050] [ 1463.521851][ T5618] plantronics 0003:047F:FFFF.005B: reserved main item tag 0xd [ 1463.593925][ T5618] plantronics 0003:047F:FFFF.005B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1463.655128][T32056] batman_adv: batadv0: Adding interface: gretap1 [ 1463.655154][T32056] batman_adv: batadv0: Interface activated: gretap1 [ 1463.816044][T32036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.816481][T32036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.835929][ T5618] usb 10-1: USB disconnect, device number 27 [ 1463.860373][T32068] netlink: 'syz.8.7752': attribute type 9 has an invalid length. [ 1463.989263][T32072] FAULT_INJECTION: forcing a failure. [ 1463.989263][T32072] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.989299][T32072] CPU: 0 UID: 0 PID: 32072 Comm: syz.4.7754 Tainted: G L syzkaller #0 PREEMPT(full) [ 1463.989325][T32072] Tainted: [L]=SOFTLOCKUP [ 1463.989333][T32072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1463.989345][T32072] Call Trace: [ 1463.989353][T32072] [ 1463.989362][T32072] dump_stack_lvl+0xe8/0x150 [ 1463.989395][T32072] should_fail_ex+0x410/0x560 [ 1463.989421][T32072] ? __alloc_skb+0x1db/0x7a0 [ 1463.989443][T32072] should_failslab+0xa8/0x100 [ 1463.989469][T32072] ? __alloc_skb+0x1db/0x7a0 [ 1463.989488][T32072] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1463.989518][T32072] ? __alloc_skb+0x18d/0x7a0 [ 1463.989540][T32072] ? __alloc_skb+0x1db/0x7a0 [ 1463.989581][T32072] __alloc_skb+0x1db/0x7a0 [ 1463.989607][T32072] netlink_ack+0x136/0xb30 [ 1463.989641][T32072] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1463.989660][T32072] ? nfnetlink_rcv+0x1021/0x28c0 [ 1463.989691][T32072] nfnetlink_rcv+0x260c/0x28c0 [ 1463.989747][T32072] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1463.989787][T32072] ? ref_tracker_free+0x689/0x830 [ 1463.989838][T32072] ? skb_clone+0x246/0x3a0 [ 1463.989867][T32072] ? __netlink_deliver_tap+0x811/0x860 [ 1463.989901][T32072] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.989927][T32072] ? netlink_deliver_tap+0x2e/0x1b0 [ 1463.989959][T32072] netlink_unicast+0x7bd/0x940 [ 1463.989993][T32072] netlink_sendmsg+0x813/0xb40 [ 1463.990030][T32072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.990065][T32072] ? apparmor_socket_sendmsg+0x98/0x360 [ 1463.990089][T32072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1463.990116][T32072] sock_sendmsg_nosec+0x13a/0x180 [ 1463.990149][T32072] ____sys_sendmsg+0x54e/0x850 [ 1463.990179][T32072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1463.990219][T32072] ___sys_sendmsg+0x2a5/0x360 [ 1463.990246][T32072] ? __lock_acquire+0x747/0x2de0 [ 1463.990271][T32072] ? __pfx____sys_sendmsg+0x10/0x10 [ 1463.990295][T32072] ? get_pid_task+0x20/0x1f0 [ 1463.990314][T32072] ? get_pid_task+0x20/0x1f0 [ 1463.990330][T32072] ? get_pid_task+0x20/0x1f0 [ 1463.990377][T32072] ? __fget_files+0x2a/0x420 [ 1463.990402][T32072] ? __fget_files+0x3a2/0x420 [ 1463.990438][T32072] __sys_sendmsg+0x177/0x240 [ 1463.990465][T32072] ? __pfx___sys_sendmsg+0x10/0x10 [ 1463.990508][T32072] __do_fast_syscall_32+0x27a/0x6a0 [ 1463.990533][T32072] ? do_fast_syscall_32+0x33/0x70 [ 1463.990555][T32072] ? asm_int80_emulation+0x1a/0x20 [ 1463.990574][T32072] ? do_int80_emulation+0x299/0x500 [ 1463.990594][T32072] ? trace_irq_disable+0x3b/0x140 [ 1463.990619][T32072] do_fast_syscall_32+0x33/0x70 [ 1463.990642][T32072] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1463.990666][T32072] RIP: 0023:0xf7fe90ec [ 1463.990683][T32072] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1463.990700][T32072] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1463.990721][T32072] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 1463.990735][T32072] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1463.990747][T32072] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1463.990760][T32072] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1463.990772][T32072] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1463.990801][T32072] [ 1464.094567][T32065] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7752'. [ 1464.415206][T32075] FAULT_INJECTION: forcing a failure. [ 1464.415206][T32075] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.415243][T32075] CPU: 1 UID: 0 PID: 32075 Comm: syz.8.7756 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.415270][T32075] Tainted: [L]=SOFTLOCKUP [ 1464.415284][T32075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1464.415296][T32075] Call Trace: [ 1464.415306][T32075] [ 1464.415314][T32075] dump_stack_lvl+0xe8/0x150 [ 1464.415346][T32075] should_fail_ex+0x410/0x560 [ 1464.415371][T32075] ? __alloc_skb+0x1db/0x7a0 [ 1464.415394][T32075] should_failslab+0xa8/0x100 [ 1464.415420][T32075] ? __alloc_skb+0x1db/0x7a0 [ 1464.415439][T32075] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1464.415469][T32075] ? __alloc_skb+0x18d/0x7a0 [ 1464.415491][T32075] ? __alloc_skb+0x1db/0x7a0 [ 1464.415517][T32075] __alloc_skb+0x1db/0x7a0 [ 1464.415543][T32075] rtmsg_ifinfo_build_skb+0x7f/0x260 [ 1464.415581][T32075] rtmsg_ifinfo+0x8c/0x1a0 [ 1464.415606][T32075] __dev_notify_flags+0x257/0x510 [ 1464.415637][T32075] ? __pfx___dev_notify_flags+0x10/0x10 [ 1464.415659][T32075] ? __dev_change_flags+0x5f1/0x820 [ 1464.415687][T32075] ? __pfx___dev_change_flags+0x10/0x10 [ 1464.415720][T32075] netif_change_flags+0xde/0x1b0 [ 1464.415749][T32075] do_setlink+0xdd6/0x4670 [ 1464.415776][T32075] ? do_raw_spin_unlock+0xf5/0x200 [ 1464.415813][T32075] ? __pfx_do_setlink+0x10/0x10 [ 1464.415836][T32075] ? __queue_work+0x1f8/0x10d0 [ 1464.415865][T32075] ? __queue_work+0xc73/0x10d0 [ 1464.415894][T32075] ? __queue_work+0x1f8/0x10d0 [ 1464.415924][T32075] ? queue_delayed_work_on+0x12f/0x1e0 [ 1464.415950][T32075] ? lockdep_hardirqs_on+0x7b/0x110 [ 1464.415974][T32075] ? queue_delayed_work_on+0x171/0x1e0 [ 1464.416008][T32075] ? bond_option_arp_interval_set+0x200/0x4a0 [ 1464.416133][T32075] ? __bond_opt_set+0x40e/0xd50 [ 1464.416164][T32075] ? bond_changelink+0x251c/0x2870 [ 1464.416197][T32075] ? __pfx_bond_changelink+0x10/0x10 [ 1464.416219][T32075] ? rtnl_newlink+0xc10/0x1c30 [ 1464.416244][T32075] ? __pfx___mutex_lock+0x10/0x10 [ 1464.416281][T32075] ? ns_capable+0x89/0xe0 [ 1464.416307][T32075] ? rtnl_nets_add+0x16c/0x300 [ 1464.416330][T32075] ? refcount_inc+0x46/0x70 [ 1464.416352][T32075] rtnl_newlink+0x15a3/0x1c30 [ 1464.416385][T32075] ? __pfx_rtnl_newlink+0x10/0x10 [ 1464.416405][T32075] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1464.416428][T32075] ? do_fast_syscall_32+0x33/0x70 [ 1464.416448][T32075] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.416506][T32075] ? kasan_quarantine_put+0xbb/0x1f0 [ 1464.416527][T32075] ? lockdep_hardirqs_on+0x7b/0x110 [ 1464.416550][T32075] ? nlmon_xmit+0xb0/0x100 [ 1464.416569][T32075] ? kmem_cache_free+0x182/0x650 [ 1464.416600][T32075] ? __lock_acquire+0x747/0x2de0 [ 1464.416628][T32075] ? __local_bh_enable_ip+0xd6/0x140 [ 1464.416653][T32075] ? lockdep_hardirqs_on+0x7b/0x110 [ 1464.416672][T32075] ? __dev_queue_xmit+0x29b/0x3820 [ 1464.416696][T32075] ? __local_bh_enable_ip+0xd6/0x140 [ 1464.416718][T32075] ? __dev_queue_xmit+0x29b/0x3820 [ 1464.416751][T32075] ? lock_acquire+0x115/0x350 [ 1464.416785][T32075] ? __pfx_rtnl_newlink+0x10/0x10 [ 1464.416806][T32075] rtnetlink_rcv_msg+0x802/0xc00 [ 1464.416832][T32075] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1464.416854][T32075] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1464.416875][T32075] ? ref_tracker_free+0x689/0x830 [ 1464.416901][T32075] ? __pfx_ref_tracker_free+0x10/0x10 [ 1464.416933][T32075] netlink_rcv_skb+0x226/0x4a0 [ 1464.416962][T32075] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1464.416986][T32075] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1464.417025][T32075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1464.417052][T32075] ? netlink_deliver_tap+0x2e/0x1b0 [ 1464.417083][T32075] netlink_unicast+0x7bd/0x940 [ 1464.417120][T32075] netlink_sendmsg+0x813/0xb40 [ 1464.417156][T32075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.417191][T32075] ? apparmor_socket_sendmsg+0x98/0x360 [ 1464.417217][T32075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1464.417243][T32075] sock_sendmsg_nosec+0x13a/0x180 [ 1464.417280][T32075] ____sys_sendmsg+0x54e/0x850 [ 1464.417311][T32075] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1464.417351][T32075] ___sys_sendmsg+0x2a5/0x360 [ 1464.417375][T32075] ? __lock_acquire+0x747/0x2de0 [ 1464.417400][T32075] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.417424][T32075] ? get_pid_task+0x20/0x1f0 [ 1464.417442][T32075] ? get_pid_task+0x20/0x1f0 [ 1464.417459][T32075] ? get_pid_task+0x20/0x1f0 [ 1464.417506][T32075] ? __fget_files+0x2a/0x420 [ 1464.417532][T32075] ? __fget_files+0x3a2/0x420 [ 1464.417569][T32075] __sys_sendmsg+0x177/0x240 [ 1464.417596][T32075] ? __pfx___sys_sendmsg+0x10/0x10 [ 1464.417639][T32075] __do_fast_syscall_32+0x27a/0x6a0 [ 1464.417662][T32075] ? do_fast_syscall_32+0x33/0x70 [ 1464.417683][T32075] ? asm_int80_emulation+0x1a/0x20 [ 1464.417701][T32075] ? do_int80_emulation+0x299/0x500 [ 1464.417722][T32075] ? trace_irq_disable+0x3b/0x140 [ 1464.417746][T32075] do_fast_syscall_32+0x33/0x70 [ 1464.417769][T32075] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1464.417792][T32075] RIP: 0023:0xf7f460ec [ 1464.417809][T32075] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1464.417826][T32075] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1464.417847][T32075] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 1464.417860][T32075] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1464.417872][T32075] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1464.417883][T32075] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1464.417894][T32075] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1464.417922][T32075] [ 1464.575928][ T1145] bond0: (slave bond_slave_0): interface is now down [ 1464.575962][ T1145] bond0: (slave bond_slave_1): interface is now down [ 1464.575976][ T1145] bond0: (slave netdevsim1): interface is now down [ 1464.852029][ T1145] bond0: now running without any active interface! [ 1465.102726][T32090] FAULT_INJECTION: forcing a failure. [ 1465.102726][T32090] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.102760][T32090] CPU: 1 UID: 0 PID: 32090 Comm: syz.8.7758 Tainted: G L syzkaller #0 PREEMPT(full) [ 1465.102786][T32090] Tainted: [L]=SOFTLOCKUP [ 1465.102793][T32090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1465.102805][T32090] Call Trace: [ 1465.102813][T32090] [ 1465.102821][T32090] dump_stack_lvl+0xe8/0x150 [ 1465.102854][T32090] should_fail_ex+0x410/0x560 [ 1465.102881][T32090] should_failslab+0xa8/0x100 [ 1465.102907][T32090] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1465.102936][T32090] ? __d_lookup+0x66/0x790 [ 1465.102955][T32090] ? __d_alloc+0x37/0x6f0 [ 1465.102980][T32090] ? __d_alloc+0x37/0x6f0 [ 1465.103012][T32090] __d_alloc+0x37/0x6f0 [ 1465.103045][T32090] d_alloc+0x4b/0x190 [ 1465.103070][T32090] ? lookup_one_qstr_excl+0xc4/0x360 [ 1465.103101][T32090] lookup_one_qstr_excl+0xd8/0x360 [ 1465.103129][T32090] ? lookup_noperm_common+0x245/0x430 [ 1465.103159][T32090] start_dirop+0x5c/0x90 [ 1465.103186][T32090] simple_start_creating+0xcc/0x110 [ 1465.103216][T32090] ? __pfx_simple_start_creating+0x10/0x10 [ 1465.103245][T32090] ? do_raw_spin_unlock+0xf5/0x200 [ 1465.103271][T32090] ? mntput+0x65/0xc0 [ 1465.103298][T32090] debugfs_start_creating+0xca/0x1b0 [ 1465.103336][T32090] __debugfs_create_file+0x6f/0x400 [ 1465.103368][T32090] debugfs_create_file_full+0x3f/0x60 [ 1465.103399][T32090] ref_tracker_dir_debugfs+0x197/0x360 [ 1465.103424][T32090] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1465.103471][T32090] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1465.103494][T32090] ? __kvmalloc_node_noprof+0x345/0x820 [ 1465.103522][T32090] ? __raw_spin_lock_init+0x45/0x100 [ 1465.103551][T32090] alloc_netdev_mqs+0x275/0x12a0 [ 1465.103577][T32090] ? __pfx_snprintf+0x10/0x10 [ 1465.103603][T32090] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 1465.103633][T32090] rtnl_create_link+0x321/0xd70 [ 1465.103666][T32090] rtnl_newlink_create+0x258/0x7b0 [ 1465.103697][T32090] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1465.103726][T32090] ? __pfx___mutex_lock+0x10/0x10 [ 1465.103757][T32090] ? ns_capable+0x89/0xe0 [ 1465.103785][T32090] rtnl_newlink+0x166d/0x1c30 [ 1465.103822][T32090] ? __pfx_rtnl_newlink+0x10/0x10 [ 1465.103842][T32090] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1465.103863][T32090] ? do_fast_syscall_32+0x33/0x70 [ 1465.103883][T32090] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1465.103940][T32090] ? kasan_quarantine_put+0xbb/0x1f0 [ 1465.103960][T32090] ? lockdep_hardirqs_on+0x7b/0x110 [ 1465.103986][T32090] ? nlmon_xmit+0xb0/0x100 [ 1465.104006][T32090] ? kmem_cache_free+0x182/0x650 [ 1465.104037][T32090] ? __lock_acquire+0x747/0x2de0 [ 1465.104067][T32090] ? __local_bh_enable_ip+0xd6/0x140 [ 1465.104090][T32090] ? lockdep_hardirqs_on+0x7b/0x110 [ 1465.104109][T32090] ? __dev_queue_xmit+0x29b/0x3820 [ 1465.104134][T32090] ? __local_bh_enable_ip+0xd6/0x140 [ 1465.104156][T32090] ? __dev_queue_xmit+0x29b/0x3820 [ 1465.104189][T32090] ? lock_acquire+0x115/0x350 [ 1465.104223][T32090] ? __pfx_rtnl_newlink+0x10/0x10 [ 1465.104244][T32090] rtnetlink_rcv_msg+0x802/0xc00 [ 1465.104270][T32090] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1465.104291][T32090] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1465.104318][T32090] ? ref_tracker_free+0x689/0x830 [ 1465.104343][T32090] ? __pfx_ref_tracker_free+0x10/0x10 [ 1465.104376][T32090] netlink_rcv_skb+0x226/0x4a0 [ 1465.104403][T32090] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1465.104427][T32090] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1465.104467][T32090] ? netlink_deliver_tap+0x2e/0x1b0 [ 1465.104493][T32090] ? netlink_deliver_tap+0x2e/0x1b0 [ 1465.104523][T32090] netlink_unicast+0x7bd/0x940 [ 1465.104560][T32090] netlink_sendmsg+0x813/0xb40 [ 1465.104596][T32090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.104631][T32090] ? apparmor_socket_sendmsg+0x98/0x360 [ 1465.104655][T32090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.104681][T32090] sock_sendmsg_nosec+0x13a/0x180 [ 1465.104712][T32090] ____sys_sendmsg+0x54e/0x850 [ 1465.104743][T32090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1465.104783][T32090] ___sys_sendmsg+0x2a5/0x360 [ 1465.104805][T32090] ? __lock_acquire+0x747/0x2de0 [ 1465.104829][T32090] ? __pfx____sys_sendmsg+0x10/0x10 [ 1465.104853][T32090] ? get_pid_task+0x20/0x1f0 [ 1465.104871][T32090] ? get_pid_task+0x20/0x1f0 [ 1465.104887][T32090] ? get_pid_task+0x20/0x1f0 [ 1465.104935][T32090] ? __fget_files+0x2a/0x420 [ 1465.104961][T32090] ? __fget_files+0x3a2/0x420 [ 1465.104996][T32090] __sys_sendmsg+0x177/0x240 [ 1465.105022][T32090] ? __pfx___sys_sendmsg+0x10/0x10 [ 1465.105066][T32090] __do_fast_syscall_32+0x27a/0x6a0 [ 1465.105089][T32090] ? do_fast_syscall_32+0x33/0x70 [ 1465.105110][T32090] ? asm_int80_emulation+0x1a/0x20 [ 1465.105128][T32090] ? do_int80_emulation+0x299/0x500 [ 1465.105148][T32090] ? trace_irq_disable+0x3b/0x140 [ 1465.105172][T32090] do_fast_syscall_32+0x33/0x70 [ 1465.105194][T32090] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1465.105217][T32090] RIP: 0023:0xf7f460ec [ 1465.105235][T32090] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1465.105253][T32090] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1465.105274][T32090] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00000000800002c0 [ 1465.105288][T32090] RDX: 0000000000004054 RSI: 0000000000000000 RDI: 0000000000000000 [ 1465.105300][T32090] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1465.105318][T32090] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1465.105330][T32090] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1465.105360][T32090] [ 1465.240235][T32090] batman_adv: batadv0: Adding interface: gretap3 [ 1465.240251][T32090] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1465.240282][T32090] batman_adv: batadv0: Interface activated: gretap3 [ 1465.859051][T32102] netlink: 'syz.8.7762': attribute type 3 has an invalid length. [ 1465.899556][T32105] netlink: 'syz.9.7763': attribute type 5 has an invalid length. [ 1466.114903][T32113] FAULT_INJECTION: forcing a failure. [ 1466.114903][T32113] name failslab, interval 1, probability 0, space 0, times 0 [ 1466.114938][T32113] CPU: 1 UID: 0 PID: 32113 Comm: syz.4.7767 Tainted: G L syzkaller #0 PREEMPT(full) [ 1466.114966][T32113] Tainted: [L]=SOFTLOCKUP [ 1466.114974][T32113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1466.114986][T32113] Call Trace: [ 1466.114998][T32113] [ 1466.115008][T32113] dump_stack_lvl+0xe8/0x150 [ 1466.115041][T32113] should_fail_ex+0x410/0x560 [ 1466.115067][T32113] ? __alloc_skb+0x1db/0x7a0 [ 1466.115097][T32113] should_failslab+0xa8/0x100 [ 1466.115123][T32113] ? __alloc_skb+0x1db/0x7a0 [ 1466.115143][T32113] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1466.115175][T32113] ? __alloc_skb+0x18d/0x7a0 [ 1466.115197][T32113] ? __alloc_skb+0x1db/0x7a0 [ 1466.115225][T32113] __alloc_skb+0x1db/0x7a0 [ 1466.115251][T32113] netlink_ack+0x136/0xb30 [ 1466.115285][T32113] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1466.115304][T32113] ? nfnetlink_rcv+0x1021/0x28c0 [ 1466.115336][T32113] nfnetlink_rcv+0x260c/0x28c0 [ 1466.115393][T32113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1466.115434][T32113] ? ref_tracker_free+0x689/0x830 [ 1466.115480][T32113] ? skb_clone+0x246/0x3a0 [ 1466.115509][T32113] ? __netlink_deliver_tap+0x811/0x860 [ 1466.115544][T32113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1466.115570][T32113] ? netlink_deliver_tap+0x2e/0x1b0 [ 1466.115601][T32113] netlink_unicast+0x7bd/0x940 [ 1466.115637][T32113] netlink_sendmsg+0x813/0xb40 [ 1466.115673][T32113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1466.115708][T32113] ? apparmor_socket_sendmsg+0x98/0x360 [ 1466.115733][T32113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1466.115760][T32113] sock_sendmsg_nosec+0x13a/0x180 [ 1466.115792][T32113] ____sys_sendmsg+0x54e/0x850 [ 1466.115823][T32113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1466.115854][T32113] ___sys_sendmsg+0x2a5/0x360 [ 1466.115872][T32113] ? __lock_acquire+0x747/0x2de0 [ 1466.115891][T32113] ? __pfx____sys_sendmsg+0x10/0x10 [ 1466.115911][T32113] ? get_pid_task+0x20/0x1f0 [ 1466.115927][T32113] ? get_pid_task+0x20/0x1f0 [ 1466.115941][T32113] ? get_pid_task+0x20/0x1f0 [ 1466.115975][T32113] ? __fget_files+0x2a/0x420 [ 1466.115996][T32113] ? __fget_files+0x3a2/0x420 [ 1466.116022][T32113] __sys_sendmsg+0x177/0x240 [ 1466.116043][T32113] ? __pfx___sys_sendmsg+0x10/0x10 [ 1466.116081][T32113] __do_fast_syscall_32+0x27a/0x6a0 [ 1466.116115][T32113] ? do_fast_syscall_32+0x33/0x70 [ 1466.116135][T32113] ? asm_int80_emulation+0x1a/0x20 [ 1466.116155][T32113] ? do_int80_emulation+0x299/0x500 [ 1466.116176][T32113] ? trace_irq_disable+0x3b/0x140 [ 1466.116199][T32113] do_fast_syscall_32+0x33/0x70 [ 1466.116222][T32113] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1466.116245][T32113] RIP: 0023:0xf7fe90ec [ 1466.116263][T32113] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1466.116281][T32113] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1466.116304][T32113] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1466.116318][T32113] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1466.116331][T32113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1466.116343][T32113] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1466.116355][T32113] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1466.116384][T32113] [ 1467.575993][T32166] batman_adv: batadv0: Adding interface: gretap2 [ 1467.576018][T32166] batman_adv: batadv0: Interface activated: gretap2 [ 1467.736717][T32169] FAULT_INJECTION: forcing a failure. [ 1467.736717][T32169] name failslab, interval 1, probability 0, space 0, times 0 [ 1467.736752][T32169] CPU: 0 UID: 0 PID: 32169 Comm: syz.8.7780 Tainted: G L syzkaller #0 PREEMPT(full) [ 1467.736778][T32169] Tainted: [L]=SOFTLOCKUP [ 1467.736786][T32169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1467.736797][T32169] Call Trace: [ 1467.736805][T32169] [ 1467.736815][T32169] dump_stack_lvl+0xe8/0x150 [ 1467.736847][T32169] should_fail_ex+0x410/0x560 [ 1467.736872][T32169] ? __alloc_skb+0x1db/0x7a0 [ 1467.736894][T32169] should_failslab+0xa8/0x100 [ 1467.736918][T32169] ? __alloc_skb+0x1db/0x7a0 [ 1467.736937][T32169] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1467.736966][T32169] ? __alloc_skb+0x18d/0x7a0 [ 1467.736986][T32169] ? __alloc_skb+0x1db/0x7a0 [ 1467.737011][T32169] __alloc_skb+0x1db/0x7a0 [ 1467.737036][T32169] netlink_ack+0x136/0xb30 [ 1467.737068][T32169] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1467.737086][T32169] ? nfnetlink_rcv+0x1021/0x28c0 [ 1467.737117][T32169] nfnetlink_rcv+0x260c/0x28c0 [ 1467.737174][T32169] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1467.737214][T32169] ? ref_tracker_free+0x689/0x830 [ 1467.737258][T32169] ? skb_clone+0x246/0x3a0 [ 1467.737287][T32169] ? __netlink_deliver_tap+0x811/0x860 [ 1467.737324][T32169] ? netlink_deliver_tap+0x2e/0x1b0 [ 1467.737351][T32169] ? netlink_deliver_tap+0x2e/0x1b0 [ 1467.737382][T32169] netlink_unicast+0x7bd/0x940 [ 1467.737415][T32169] netlink_sendmsg+0x813/0xb40 [ 1467.737459][T32169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.737495][T32169] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1467.737518][T32169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1467.737544][T32169] sock_sendmsg_nosec+0x13a/0x180 [ 1467.737576][T32169] ____sys_sendmsg+0x54e/0x850 [ 1467.737606][T32169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1467.737645][T32169] ___sys_sendmsg+0x2a5/0x360 [ 1467.737670][T32169] ? __lock_acquire+0x747/0x2de0 [ 1467.737693][T32169] ? __pfx____sys_sendmsg+0x10/0x10 [ 1467.737718][T32169] ? get_pid_task+0x20/0x1f0 [ 1467.737737][T32169] ? get_pid_task+0x20/0x1f0 [ 1467.737753][T32169] ? get_pid_task+0x20/0x1f0 [ 1467.737796][T32169] ? __fget_files+0x2a/0x420 [ 1467.737822][T32169] ? __fget_files+0x3a2/0x420 [ 1467.737856][T32169] __sys_sendmsg+0x177/0x240 [ 1467.737883][T32169] ? __pfx___sys_sendmsg+0x10/0x10 [ 1467.737924][T32169] __do_fast_syscall_32+0x27a/0x6a0 [ 1467.737948][T32169] ? do_fast_syscall_32+0x33/0x70 [ 1467.737970][T32169] ? asm_int80_emulation+0x1a/0x20 [ 1467.737990][T32169] ? do_int80_emulation+0x299/0x500 [ 1467.738010][T32169] ? trace_irq_disable+0x3b/0x140 [ 1467.738035][T32169] do_fast_syscall_32+0x33/0x70 [ 1467.738057][T32169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1467.738081][T32169] RIP: 0023:0xf7f460ec [ 1467.738099][T32169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1467.738117][T32169] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1467.738139][T32169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1467.738153][T32169] RDX: 0000000024000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 1467.738165][T32169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1467.738177][T32169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1467.738189][T32169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1467.738218][T32169] [ 1469.789863][T32221] netlink: 'syz.0.7796': attribute type 10 has an invalid length. [ 1469.810227][T32221] team0: Port device bond_slave_1 added [ 1469.868804][T32221] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7796'. [ 1469.895750][T32221] batman_adv: batadv0: Adding interface: gretap2 [ 1469.895772][T32221] batman_adv: batadv0: Interface activated: gretap2 [ 1469.908010][ T5618] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1470.057985][ T5618] usb 9-1: Using ep0 maxpacket: 32 [ 1470.058822][ T5618] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1470.065972][ T5618] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.065997][ T5618] usb 9-1: Product: syz [ 1470.066013][ T5618] usb 9-1: Manufacturer: syz [ 1470.066028][ T5618] usb 9-1: SerialNumber: syz [ 1470.074442][ T5618] usb 9-1: config 0 descriptor?? [ 1470.483696][ T5618] airspy 9-1:0.0: Board ID: 00 [ 1470.483722][ T5618] airspy 9-1:0.0: Firmware version: [ 1470.997518][ T5618] airspy 9-1:0.0: usb_control_msg() failed -71 request 12 [ 1470.998107][T15649] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1471.020653][ T5618] airspy 9-1:0.0: Registered as swradio24 [ 1471.020673][ T5618] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1471.042989][ T5618] usb 9-1: USB disconnect, device number 56 [ 1471.150219][T15649] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1471.151739][T15649] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.151769][T15649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.153364][T15649] usb 10-1: config 0 descriptor?? [ 1471.183256][T15649] pwc: Askey VC010 type 2 USB webcam detected. [ 1471.248327][T27078] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1471.355264][T15649] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1471.399207][T27078] usb 2-1: Using ep0 maxpacket: 32 [ 1471.399970][T27078] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1471.401263][T27078] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1471.401281][T27078] usb 2-1: config 0 has no interface number 0 [ 1471.401304][T27078] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1471.401316][T27078] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1471.403166][T27078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.403181][T27078] usb 2-1: Product: syz [ 1471.403189][T27078] usb 2-1: Manufacturer: syz [ 1471.403197][T27078] usb 2-1: SerialNumber: syz [ 1471.405486][T27078] usb 2-1: config 0 descriptor?? [ 1471.609281][T32244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.609558][T32244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.620951][T32244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.621431][T32244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.634621][T32244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.635125][T32244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.646386][T32244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.646856][T32244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.670804][T32244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.671317][T32244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.060591][T27078] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1472.065232][T27078] cx231xx 2-1:0.1: Failed to read PCB config [ 1472.065323][T27078] cx231xx 2-1:0.1: probe with driver cx231xx failed with error -71 [ 1472.080767][T27078] usb 2-1: USB disconnect, device number 44 [ 1472.090788][ T5626] udevd[5626]: setting owner of /dev/bus/usb/002/044 to uid=0, gid=0 failed: No such file or directory [ 1472.374740][T32258] FAULT_INJECTION: forcing a failure. [ 1472.374740][T32258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1472.374800][T32258] CPU: 1 UID: 0 PID: 32258 Comm: syz.8.7806 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.374828][T32258] Tainted: [L]=SOFTLOCKUP [ 1472.374835][T32258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1472.374846][T32258] Call Trace: [ 1472.374855][T32258] [ 1472.374864][T32258] dump_stack_lvl+0xe8/0x150 [ 1472.374896][T32258] should_fail_ex+0x410/0x560 [ 1472.374934][T32258] _copy_to_user+0x31/0xb0 [ 1472.374961][T32258] simple_read_from_buffer+0xe1/0x170 [ 1472.374994][T32258] proc_fail_nth_read+0x1bb/0x230 [ 1472.375023][T32258] ? common_file_perm+0x20e/0x2b0 [ 1472.375049][T32258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1472.375082][T32258] ? rw_verify_area+0x24a/0x4c0 [ 1472.375113][T32258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1472.375143][T32258] vfs_read+0x213/0xa80 [ 1472.375177][T32258] ? __pfx___mutex_lock+0x10/0x10 [ 1472.375201][T32258] ? __pfx_vfs_read+0x10/0x10 [ 1472.375231][T32258] ? __fget_files+0x2a/0x420 [ 1472.375261][T32258] ? __fget_files+0x3a2/0x420 [ 1472.375287][T32258] ? __fget_files+0x2a/0x420 [ 1472.375322][T32258] ksys_read+0x150/0x270 [ 1472.375352][T32258] ? __pfx_ksys_read+0x10/0x10 [ 1472.375385][T32258] ? asm_int80_emulation+0x1a/0x20 [ 1472.375410][T32258] do_int80_emulation+0x198/0x500 [ 1472.375431][T32258] ? trace_irq_disable+0x3b/0x140 [ 1472.375451][T32258] ? asm_int80_emulation+0x1a/0x20 [ 1472.375470][T32258] ? clear_bhb_loop+0x70/0xc0 [ 1472.375489][T32258] ? clear_bhb_loop+0x70/0xc0 [ 1472.375514][T32258] asm_int80_emulation+0x1a/0x20 [ 1472.375533][T32258] RIP: 0023:0xf71475ab [ 1472.375551][T32258] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1472.375569][T32258] RSP: 002b:00000000f54064bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1472.375590][T32258] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54065d0 [ 1472.375605][T32258] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1472.375618][T32258] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1472.375630][T32258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1472.375642][T32258] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1472.375672][T32258] [ 1472.483371][T15649] pwc: recv_control_msg error -71 req 02 val 2c00 [ 1472.483792][T15649] pwc: recv_control_msg error -71 req 04 val 1000 [ 1472.485779][T15649] pwc: recv_control_msg error -71 req 04 val 1300 [ 1472.487601][T15649] pwc: recv_control_msg error -71 req 04 val 1400 [ 1472.494381][T15649] pwc: recv_control_msg error -71 req 02 val 2000 [ 1472.496930][T15649] pwc: recv_control_msg error -71 req 02 val 2100 [ 1472.499756][T15649] pwc: recv_control_msg error -71 req 04 val 1500 [ 1472.501972][T15649] pwc: recv_control_msg error -71 req 02 val 2500 [ 1472.505170][T15649] pwc: recv_control_msg error -71 req 02 val 2400 [ 1472.509035][T15649] pwc: recv_control_msg error -71 req 02 val 2600 [ 1472.512448][T15649] pwc: recv_control_msg error -71 req 02 val 2900 [ 1472.513470][T15649] pwc: recv_control_msg error -71 req 02 val 2800 [ 1472.514717][T15649] pwc: recv_control_msg error -71 req 04 val 1100 [ 1472.515615][T15649] pwc: recv_control_msg error -71 req 04 val 1200 [ 1472.535606][T15649] pwc: Registered as video103. [ 1472.548816][T15649] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input120 [ 1472.604326][T15649] usb 10-1: USB disconnect, device number 28 [ 1472.999598][T32262] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1472.999622][T32262] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7807'. [ 1473.403114][T32266] input: syz0 as /devices/virtual/input/input121 [ 1473.699962][T32278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1473.700385][T32278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1473.882830][T32283] syz.1.7814: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1473.882905][T32283] CPU: 0 UID: 0 PID: 32283 Comm: syz.1.7814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1473.882934][T32283] Tainted: [L]=SOFTLOCKUP [ 1473.882942][T32283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1473.882956][T32283] Call Trace: [ 1473.882964][T32283] [ 1473.882974][T32283] dump_stack_lvl+0xe8/0x150 [ 1473.883011][T32283] warn_alloc+0x24d/0x270 [ 1473.883039][T32283] ? __pfx_warn_alloc+0x10/0x10 [ 1473.883066][T32283] ? alloc_pages_mpol+0x256/0x390 [ 1473.883102][T32283] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 1473.883156][T32283] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1473.883185][T32283] ? kvm_dev_ioctl+0x12b/0x1770 [ 1473.883206][T32283] ? rcu_is_watching+0x16/0xb0 [ 1473.883229][T32283] ? kvm_dev_ioctl+0x12b/0x1770 [ 1473.883249][T32283] ? rcu_is_watching+0x16/0xb0 [ 1473.883275][T32283] ? kvm_dev_ioctl+0x12b/0x1770 [ 1473.883294][T32283] __kvmalloc_node_noprof+0x5a1/0x820 [ 1473.883317][T32283] ? kvm_dev_ioctl+0x12b/0x1770 [ 1473.883339][T32283] ? kvm_dev_ioctl+0x12b/0x1770 [ 1473.883364][T32283] kvm_dev_ioctl+0x12b/0x1770 [ 1473.883386][T32283] ? __fget_files+0x2a/0x420 [ 1473.883420][T32283] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1473.883445][T32283] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1473.883480][T32283] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1473.883506][T32283] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1473.883536][T32283] ? __se_sys_futex_time32+0x3ab/0x440 [ 1473.883572][T32283] ? rcu_is_watching+0x16/0xb0 [ 1473.883608][T32283] __do_fast_syscall_32+0x27a/0x6a0 [ 1473.883634][T32283] ? do_fast_syscall_32+0x33/0x70 [ 1473.883658][T32283] ? irqentry_exit+0x10f/0x910 [ 1473.883679][T32283] ? trace_irq_disable+0x3b/0x140 [ 1473.883705][T32283] do_fast_syscall_32+0x33/0x70 [ 1473.883730][T32283] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1473.883756][T32283] RIP: 0023:0xf7fb40ec [ 1473.883783][T32283] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1473.883802][T32283] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1473.883825][T32283] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000000000ae01 [ 1473.883839][T32283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1473.883852][T32283] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1473.883865][T32283] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1473.883878][T32283] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1473.883908][T32283] [ 1473.884015][T32283] Mem-Info: [ 1473.884026][T32283] active_anon:17318 inactive_anon:14 isolated_anon:0 [ 1473.884026][T32283] active_file:70 inactive_file:24472 isolated_file:0 [ 1473.884026][T32283] unevictable:0 dirty:224 writeback:0 [ 1473.884026][T32283] slab_reclaimable:7895 slab_unreclaimable:135893 [ 1473.884026][T32283] mapped:44812 shmem:9742 pagetables:1825 [ 1473.884026][T32283] sec_pagetables:0 bounce:0 [ 1473.884026][T32283] kernel_misc_reclaimable:0 [ 1473.884026][T32283] free:1224514 free_pcp:18321 free_cma:0 [ 1473.884082][T32283] Node 0 active_anon:69272kB inactive_anon:56kB active_file:280kB inactive_file:97756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:179248kB dirty:896kB writeback:0kB shmem:38968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17400kB pagetables:7168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1473.884143][T32283] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1473.884197][T32283] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.884256][T32283] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 1473.884294][T32283] Node 0 DMA32 free:939916kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:69272kB inactive_anon:56kB active_file:280kB inactive_file:97756kB unevictable:0kB writepending:896kB zspages:284kB present:3129332kB managed:2546636kB mlocked:0kB bounce:0kB free_pcp:68948kB local_pcp:27232kB free_cma:0kB [ 1473.884360][T32283] lowmem_reserve[]: 0 0 0 0 0 [ 1473.884397][T32283] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1473.884456][T32283] lowmem_reserve[]: 0 0 0 0 0 [ 1473.884491][T32283] Node 1 Normal free:3942780kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:132kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4336kB local_pcp:4336kB free_cma:0kB [ 1473.884552][T32283] lowmem_reserve[]: 0 0 0 0 0 [ 1473.884588][T32283] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1473.884707][T32283] Node 0 DMA32: 1739*4kB (UME) 444*8kB (UME) 124*16kB (UME) 403*32kB (UME) 957*64kB (UME) 565*128kB (UME) 275*256kB (UME) 68*512kB (UME) 22*1024kB (UME) 5*2048kB (ME) 157*4096kB (UM) = 940012kB [ 1473.884883][T32283] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1473.884985][T32283] Node 1 Normal: 8*4kB (UM) 4*8kB (UM) 3*16kB (UM) 4*32kB (M) 7*64kB (UM) 6*128kB (UM) 4*256kB (M) 4*512kB (M) 2*1024kB (UM) 2*2048kB (UM) 960*4096kB (UM) = 3942832kB [ 1473.885146][T32283] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.885165][T32283] Node 0 hugepages_total=4 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1473.885183][T32283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1473.885200][T32283] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1473.885216][T32283] 34269 total pagecache pages [ 1473.885224][T32283] 14 pages in swap cache [ 1473.885231][T32283] Free swap = 124844kB [ 1473.885239][T32283] Total swap = 124996kB [ 1473.885247][T32283] 2097051 pages RAM [ 1473.885254][T32283] 0 pages HighMem/MovableOnly [ 1473.885261][T32283] 428776 pages reserved [ 1473.885269][T32283] 0 pages cma reserved [ 1473.933971][T27068] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1474.122758][T27068] usb 10-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1474.148977][T27068] usb 10-1: config 0 has an invalid interface number: 117 but max is 0 [ 1474.149007][T27068] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1474.149029][T27068] usb 10-1: config 0 has no interface number 0 [ 1474.149070][T27068] usb 10-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1474.149094][T27068] usb 10-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1474.266940][T27068] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1474.266968][T27068] usb 10-1: Product: syz [ 1474.266982][T27068] usb 10-1: Manufacturer: syz [ 1474.266996][T27068] usb 10-1: SerialNumber: syz [ 1474.305830][T27068] usb 10-1: config 0 descriptor?? [ 1474.622336][T32293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1474.622357][T32293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1474.710812][T27068] usb 10-1: USB disconnect, device number 29 [ 1474.876809][T32297] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 1474.882936][ T172] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1474.885772][T24870] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1474.888029][T28137] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1474.888068][T28137] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1474.947387][T32293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7817'. [ 1474.965400][T32305] debugfs: out of free dentries, can not create file 'mmu_flooded' [ 1474.984037][T32293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1475.058004][T15649] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1475.122700][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7823'. [ 1475.165890][T32311] FAULT_INJECTION: forcing a failure. [ 1475.165890][T32311] name failslab, interval 1, probability 0, space 0, times 0 [ 1475.165918][T32311] CPU: 0 UID: 0 PID: 32311 Comm: syz.8.7824 Tainted: G L syzkaller #0 PREEMPT(full) [ 1475.165934][T32311] Tainted: [L]=SOFTLOCKUP [ 1475.165938][T32311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1475.165944][T32311] Call Trace: [ 1475.165949][T32311] [ 1475.165954][T32311] dump_stack_lvl+0xe8/0x150 [ 1475.165978][T32311] should_fail_ex+0x410/0x560 [ 1475.165994][T32311] should_failslab+0xa8/0x100 [ 1475.166007][T32311] ? skb_clone+0x212/0x3a0 [ 1475.166022][T32311] kmem_cache_alloc_noprof+0xa1/0x600 [ 1475.166039][T32311] ? skb_clone+0x212/0x3a0 [ 1475.166055][T32311] skb_clone+0x212/0x3a0 [ 1475.166070][T32311] __netlink_deliver_tap+0x413/0x860 [ 1475.166091][T32311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.166107][T32311] netlink_deliver_tap+0x19c/0x1b0 [ 1475.166125][T32311] netlink_sendskb+0x68/0x140 [ 1475.166140][T32311] netlink_rcv_skb+0x2a4/0x4a0 [ 1475.166155][T32311] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1475.166169][T32311] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1475.166189][T32311] ? bpf_lsm_capable+0x9/0x20 [ 1475.166199][T32311] ? security_capable+0x7e/0x2c0 [ 1475.166215][T32311] nfnetlink_rcv+0x2b9/0x28c0 [ 1475.166230][T32311] ? __dev_queue_xmit+0x29b/0x3820 [ 1475.166246][T32311] ? __local_bh_enable_ip+0xd6/0x140 [ 1475.166260][T32311] ? lockdep_hardirqs_on+0x7b/0x110 [ 1475.166271][T32311] ? __dev_queue_xmit+0x29b/0x3820 [ 1475.166284][T32311] ? __local_bh_enable_ip+0xd6/0x140 [ 1475.166296][T32311] ? __dev_queue_xmit+0x29b/0x3820 [ 1475.166310][T32311] ? __dev_queue_xmit+0x1edc/0x3820 [ 1475.166323][T32311] ? __do_fast_syscall_32+0x27a/0x6a0 [ 1475.166334][T32311] ? do_fast_syscall_32+0x33/0x70 [ 1475.166351][T32311] ? __dev_queue_xmit+0x29b/0x3820 [ 1475.166365][T32311] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1475.166381][T32311] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1475.166399][T32311] ? ref_tracker_free+0x689/0x830 [ 1475.166412][T32311] ? __pfx_ref_tracker_free+0x10/0x10 [ 1475.166429][T32311] ? __skb_clone+0x449/0x6c0 [ 1475.166445][T32311] ? skb_clone+0x246/0x3a0 [ 1475.166460][T32311] ? __netlink_deliver_tap+0x811/0x860 [ 1475.166474][T32311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.166491][T32311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.166505][T32311] ? netlink_deliver_tap+0x2e/0x1b0 [ 1475.166521][T32311] netlink_unicast+0x7bd/0x940 [ 1475.166540][T32311] netlink_sendmsg+0x813/0xb40 [ 1475.166559][T32311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.166581][T32311] ? apparmor_socket_sendmsg+0x98/0x360 [ 1475.166595][T32311] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1475.166608][T32311] sock_sendmsg_nosec+0x13a/0x180 [ 1475.166631][T32311] ____sys_sendmsg+0x54e/0x850 [ 1475.166647][T32311] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1475.166668][T32311] ___sys_sendmsg+0x2a5/0x360 [ 1475.166680][T32311] ? __lock_acquire+0x747/0x2de0 [ 1475.166693][T32311] ? __pfx____sys_sendmsg+0x10/0x10 [ 1475.166706][T32311] ? get_pid_task+0x20/0x1f0 [ 1475.166716][T32311] ? get_pid_task+0x20/0x1f0 [ 1475.166725][T32311] ? get_pid_task+0x20/0x1f0 [ 1475.166749][T32311] ? __fget_files+0x2a/0x420 [ 1475.166763][T32311] ? __fget_files+0x3a2/0x420 [ 1475.166782][T32311] __sys_sendmsg+0x177/0x240 [ 1475.166796][T32311] ? __pfx___sys_sendmsg+0x10/0x10 [ 1475.166818][T32311] __do_fast_syscall_32+0x27a/0x6a0 [ 1475.166831][T32311] ? do_fast_syscall_32+0x33/0x70 [ 1475.166849][T32311] ? asm_int80_emulation+0x1a/0x20 [ 1475.166860][T32311] ? do_int80_emulation+0x299/0x500 [ 1475.166871][T32311] ? trace_irq_disable+0x3b/0x140 [ 1475.166884][T32311] do_fast_syscall_32+0x33/0x70 [ 1475.166896][T32311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1475.166908][T32311] RIP: 0023:0xf7f460ec [ 1475.166919][T32311] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1475.166929][T32311] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1475.166941][T32311] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 1475.166949][T32311] RDX: 0000000000000804 RSI: 0000000000000000 RDI: 0000000000000000 [ 1475.166956][T32311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1475.166962][T32311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1475.166968][T32311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1475.166984][T32311] [ 1475.213945][T15649] usb 5-1: not running at top speed; connect to a high speed hub [ 1475.213982][T15649] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 1475.215343][T15649] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1475.215389][T15649] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.236921][T15649] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 1475.242149][T15649] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 1475.242203][T15649] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -22 [ 1475.345836][T32313] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7825'. [ 1475.345858][T32313] netlink: 96 bytes leftover after parsing attributes in process `syz.9.7825'. [ 1475.460982][T15649] usb 5-1: USB disconnect, device number 62 [ 1475.494699][T15649] garmin_gps 5-1:1.0: device disconnected [ 1475.651189][T32313] input: syz0 as /devices/virtual/input/input122 [ 1476.195654][T32334] socket: no more sockets [ 1476.220106][T32334] socket: no more sockets [ 1476.240832][T32334] socket: no more sockets [ 1476.436828][T32336] syzkaller1: entered promiscuous mode [ 1476.436850][T32336] syzkaller1: entered allmulticast mode [ 1477.245298][T32351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7838'. [ 1477.367616][ T31] audit: type=1326 audit(1789151121.295:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.370734][ T31] audit: type=1326 audit(1789151121.305:4262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.388337][ T31] audit: type=1326 audit(1789151121.325:4263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.445509][ T31] audit: type=1326 audit(1789151121.375:4264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.458655][ T31] audit: type=1326 audit(1789151121.395:4265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32358 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71675ab code=0x7ffc0000 [ 1477.467987][ T31] audit: type=1326 audit(1789151121.395:4266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.468033][ T31] audit: type=1326 audit(1789151121.395:4267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.468072][ T31] audit: type=1326 audit(1789151121.395:4268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.490927][ T31] audit: type=1326 audit(1789151121.425:4269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.490995][ T31] audit: type=1326 audit(1789151121.425:4270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32354 comm="syz.9.7841" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f630ec code=0x7ffc0000 [ 1477.626050][T32360] FAULT_INJECTION: forcing a failure. [ 1477.626050][T32360] name failslab, interval 1, probability 0, space 0, times 0 [ 1477.626084][T32360] CPU: 0 UID: 0 PID: 32360 Comm: syz.8.7842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1477.626111][T32360] Tainted: [L]=SOFTLOCKUP [ 1477.626119][T32360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1477.626131][T32360] Call Trace: [ 1477.626139][T32360] [ 1477.626148][T32360] dump_stack_lvl+0xe8/0x150 [ 1477.626181][T32360] should_fail_ex+0x410/0x560 [ 1477.626208][T32360] should_failslab+0xa8/0x100 [ 1477.626234][T32360] __kvmalloc_node_noprof+0x176/0x820 [ 1477.626257][T32360] ? __kmalloc_cache_noprof+0x321/0x600 [ 1477.626277][T32360] ? alloc_fdtable+0x101/0x2c0 [ 1477.626300][T32360] ? alloc_fdtable+0x101/0x2c0 [ 1477.626330][T32360] alloc_fdtable+0x101/0x2c0 [ 1477.626358][T32360] ? dup_fd+0x7f5/0xaf0 [ 1477.626383][T32360] dup_fd+0x7fe/0xaf0 [ 1477.626420][T32360] copy_files+0xaf/0x120 [ 1477.626446][T32360] ? copy_process+0xd3c/0x43e0 [ 1477.626470][T32360] copy_process+0x1cca/0x43e0 [ 1477.626504][T32360] ? copy_process+0xd3c/0x43e0 [ 1477.626547][T32360] ? __pfx_copy_process+0x10/0x10 [ 1477.626575][T32360] ? get_pid_task+0x20/0x1f0 [ 1477.626602][T32360] kernel_clone+0x2d7/0x940 [ 1477.626634][T32360] ? __pfx_kernel_clone+0x10/0x10 [ 1477.626669][T32360] ? ksys_write+0x1e6/0x270 [ 1477.626705][T32360] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 1477.626726][T32360] ? __fget_files+0x2a/0x420 [ 1477.626754][T32360] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 1477.626789][T32360] ? ksys_write+0x242/0x270 [ 1477.626829][T32360] __do_fast_syscall_32+0x27a/0x6a0 [ 1477.626854][T32360] ? do_fast_syscall_32+0x33/0x70 [ 1477.626882][T32360] ? asm_int80_emulation+0x1a/0x20 [ 1477.626902][T32360] ? do_int80_emulation+0x299/0x500 [ 1477.626923][T32360] ? trace_irq_disable+0x3b/0x140 [ 1477.626948][T32360] do_fast_syscall_32+0x33/0x70 [ 1477.626971][T32360] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1477.626995][T32360] RIP: 0023:0xf7f460ec [ 1477.627013][T32360] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1477.627031][T32360] RSP: 002b:00000000f54064bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 1477.627053][T32360] RAX: ffffffffffffffda RBX: 00000000aa0a1000 RCX: 0000000000000000 [ 1477.627067][T32360] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1477.627080][T32360] RBP: 00000000f7404f80 R08: 0000000000000000 R09: 0000000000000000 [ 1477.627093][T32360] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1477.627104][T32360] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1477.627130][T32360] [ 1477.963407][T32367] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1477.963581][T32367] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1477.963735][T32367] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1477.963886][T32367] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1477.964037][T32367] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1478.348008][T21150] usb 2-1: new low-speed USB device number 45 using dummy_hcd [ 1478.478125][T21150] usb 2-1: device descriptor read/64, error -71 [ 1478.718178][T21150] usb 2-1: new low-speed USB device number 46 using dummy_hcd [ 1478.848475][T21150] usb 2-1: device descriptor read/64, error -71 [ 1478.958368][T21150] usb usb2-port1: attempt power cycle [ 1479.003276][T32389] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7848'. [ 1479.099798][T32391] netlink: 48 bytes leftover after parsing attributes in process `syz.9.7848'. [ 1479.152446][T32389] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1479.156845][T32391] bond1: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1479.298375][T21150] usb 2-1: new low-speed USB device number 47 using dummy_hcd [ 1479.320792][T21150] usb 2-1: device descriptor read/8, error -71 [ 1479.377137][T32394] netlink: 'syz.0.7849': attribute type 4 has an invalid length. [ 1479.421585][T32394] netlink: 'syz.0.7849': attribute type 4 has an invalid length. [ 1479.557986][T21150] usb 2-1: new low-speed USB device number 48 using dummy_hcd [ 1479.580361][T21150] usb 2-1: device descriptor read/8, error -71 [ 1479.602833][T32394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1479.603484][T32394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1479.688279][T21150] usb usb2-port1: unable to enumerate USB device [ 1479.931020][T32394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.973668][T32394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.998190][T31529] Bluetooth: hci1: command 0x0419 tx timeout [ 1479.998224][T31529] Bluetooth: hci3: command 0x040f tx timeout [ 1479.998251][T31529] Bluetooth: hci0: command 0x0c1a tx timeout [ 1479.998276][T31529] Bluetooth: hci4: command 0x0c1a tx timeout [ 1479.998299][T31529] Bluetooth: hci2: command 0x0c1a tx timeout [ 1480.506373][T32394] batman_adv: batadv0: Interface deactivated: gretap1 [ 1480.517111][T32394] batman_adv: batadv0: Interface deactivated: gretap2 [ 1480.538584][ T1145] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.538659][ T1145] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.538720][ T1145] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.538755][ T1145] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.686257][T32409] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1481.132561][T32433] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 2 out of range (51000000..2150000000) [ 1481.212940][T32430] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7859'. [ 1481.432739][T32439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1481.433864][T32439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1481.437496][T32439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1481.462646][T32439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1481.462917][T32439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1481.496963][T32444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1481.496976][T32444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1481.632530][T32446] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 1481.635041][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1481.641207][T28137] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1481.642046][T28137] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1481.659931][ T9858] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1481.814732][T32449] syzkaller1: entered promiscuous mode [ 1481.814756][T32449] syzkaller1: entered allmulticast mode [ 1481.835245][T32444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7861'. [ 1481.964453][T32444] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1482.090257][T32453] netlink: 'syz.8.7864': attribute type 4 has an invalid length. [ 1482.150269][T32453] netlink: 'syz.8.7864': attribute type 4 has an invalid length. [ 1482.321794][T32453] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.545429][T32453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.545436][T32460] FAULT_INJECTION: forcing a failure. [ 1482.545436][T32460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1482.545464][T32460] CPU: 0 UID: 0 PID: 32460 Comm: syz.0.7867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1482.545490][T32460] Tainted: [L]=SOFTLOCKUP [ 1482.545498][T32460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1482.545509][T32460] Call Trace: [ 1482.545517][T32460] [ 1482.545525][T32460] dump_stack_lvl+0xe8/0x150 [ 1482.545558][T32460] should_fail_ex+0x410/0x560 [ 1482.545585][T32460] _copy_from_user+0x2d/0xb0 [ 1482.545610][T32460] get_user_ifreq+0xa3/0x180 [ 1482.545634][T32460] sock_ioctl+0x6f8/0x7e0 [ 1482.545649][T32460] ? __pfx_sock_ioctl+0x10/0x10 [ 1482.545683][T32460] compat_sock_ioctl+0x289/0xcc0 [ 1482.545716][T32460] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 1482.545749][T32460] ? __fget_files+0x3a2/0x420 [ 1482.545773][T32460] ? __fget_files+0x2a/0x420 [ 1482.545788][T32460] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 1482.545805][T32460] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1482.545819][T32460] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1482.545831][T32460] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1482.545847][T32460] ? __fget_files+0x3a2/0x420 [ 1482.545864][T32460] ? fput+0xa0/0xd0 [ 1482.545876][T32460] ? ksys_write+0x242/0x270 [ 1482.545896][T32460] __do_fast_syscall_32+0x27a/0x6a0 [ 1482.545912][T32460] ? do_fast_syscall_32+0x33/0x70 [ 1482.545923][T32460] ? asm_int80_emulation+0x1a/0x20 [ 1482.545933][T32460] ? do_int80_emulation+0x299/0x500 [ 1482.545944][T32460] ? trace_irq_disable+0x3b/0x140 [ 1482.545957][T32460] do_fast_syscall_32+0x33/0x70 [ 1482.545968][T32460] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1482.545981][T32460] RIP: 0023:0xf7ff80ec [ 1482.545992][T32460] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1482.546002][T32460] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1482.546014][T32460] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000000089f0 [ 1482.546021][T32460] RDX: 000000008000a300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1482.546028][T32460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1482.546034][T32460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1482.546040][T32460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1482.546055][T32460] [ 1482.766699][T32453] veth1_vlan: left allmulticast mode [ 1482.953167][T32462] fuse: Unknown parameter 'fd0x000000000000000a' [ 1483.156865][T32453] batman_adv: batadv0: Interface deactivated: gretap1 [ 1483.182329][T32453] batman_adv: batadv0: Interface deactivated: gretap2 [ 1483.205792][T32453] batman_adv: batadv0: Interface deactivated: gretap3 [ 1483.239409][T24870] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.239467][T24870] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.239504][T24870] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.239541][T24870] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1483.390933][T32462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7868'. [ 1483.438255][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 1483.438282][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 1483.438298][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 1483.518028][T31529] Bluetooth: hci1: command 0x0419 tx timeout [ 1483.518067][T31529] Bluetooth: hci3: command 0x040f tx timeout [ 1484.108855][T32484] FAULT_INJECTION: forcing a failure. [ 1484.108855][T32484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1484.108889][T32484] CPU: 0 UID: 0 PID: 32484 Comm: syz.0.7873 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.108916][T32484] Tainted: [L]=SOFTLOCKUP [ 1484.108923][T32484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1484.108935][T32484] Call Trace: [ 1484.108943][T32484] [ 1484.108951][T32484] dump_stack_lvl+0xe8/0x150 [ 1484.108983][T32484] should_fail_ex+0x410/0x560 [ 1484.109008][T32484] strncpy_from_user+0x36/0x2c0 [ 1484.109024][T32484] do_getname+0x77/0x250 [ 1484.109039][T32484] path_setxattrat+0x351/0x450 [ 1484.109055][T32484] ? __pfx_path_setxattrat+0x10/0x10 [ 1484.109078][T32484] ? fput+0xa0/0xd0 [ 1484.109090][T32484] ? ksys_write+0x242/0x270 [ 1484.109108][T32484] __ia32_sys_lsetxattr+0xbf/0xe0 [ 1484.109125][T32484] __do_fast_syscall_32+0x27a/0x6a0 [ 1484.109139][T32484] ? do_fast_syscall_32+0x33/0x70 [ 1484.109150][T32484] ? asm_int80_emulation+0x1a/0x20 [ 1484.109160][T32484] ? do_int80_emulation+0x299/0x500 [ 1484.109171][T32484] ? trace_irq_disable+0x3b/0x140 [ 1484.109184][T32484] do_fast_syscall_32+0x33/0x70 [ 1484.109203][T32484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1484.109216][T32484] RIP: 0023:0xf7ff80ec [ 1484.109226][T32484] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1484.109237][T32484] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3 [ 1484.109250][T32484] RAX: ffffffffffffffda RBX: 0000000080003040 RCX: 0000000080004040 [ 1484.109257][T32484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1484.109263][T32484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1484.109270][T32484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1484.109276][T32484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1484.109291][T32484] [ 1484.400232][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.400284][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.465394][T32491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7876'. [ 1484.718628][T27072] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1484.781590][T32506] FAULT_INJECTION: forcing a failure. [ 1484.781590][T32506] name failslab, interval 1, probability 0, space 0, times 0 [ 1484.781624][T32506] CPU: 0 UID: 0 PID: 32506 Comm: syz.0.7882 Tainted: G L syzkaller #0 PREEMPT(full) [ 1484.781652][T32506] Tainted: [L]=SOFTLOCKUP [ 1484.781660][T32506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1484.781672][T32506] Call Trace: [ 1484.781680][T32506] [ 1484.781690][T32506] dump_stack_lvl+0xe8/0x150 [ 1484.781723][T32506] should_fail_ex+0x410/0x560 [ 1484.781750][T32506] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1484.781781][T32506] should_failslab+0xa8/0x100 [ 1484.781807][T32506] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1484.781836][T32506] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1484.781868][T32506] ? alloc_inode+0x6a/0x1b0 [ 1484.781891][T32506] ? alloc_inode+0x6a/0x1b0 [ 1484.781920][T32506] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1484.781949][T32506] alloc_inode+0x6a/0x1b0 [ 1484.781976][T32506] new_inode+0x1f/0x170 [ 1484.782006][T32506] __debugfs_create_file+0xb8/0x400 [ 1484.782039][T32506] debugfs_create_file_full+0x3f/0x60 [ 1484.782070][T32506] ref_tracker_dir_debugfs+0x197/0x360 [ 1484.782095][T32506] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1484.782153][T32506] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1484.782177][T32506] ? __kvmalloc_node_noprof+0x345/0x820 [ 1484.782201][T32506] ? __raw_spin_lock_init+0x45/0x100 [ 1484.782232][T32506] alloc_netdev_mqs+0x275/0x12a0 [ 1484.782259][T32506] ? __pfx_snprintf+0x10/0x10 [ 1484.782286][T32506] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 1484.782318][T32506] rtnl_create_link+0x321/0xd70 [ 1484.782355][T32506] rtnl_newlink_create+0x258/0x7b0 [ 1484.782388][T32506] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1484.782417][T32506] ? __pfx___mutex_lock+0x10/0x10 [ 1484.782449][T32506] ? ns_capable+0x89/0xe0 [ 1484.782480][T32506] rtnl_newlink+0x166d/0x1c30 [ 1484.782518][T32506] ? __pfx_rtnl_newlink+0x10/0x10 [ 1484.782542][T32506] ? __lock_acquire+0x747/0x2de0 [ 1484.782571][T32506] ? __lock_acquire+0x747/0x2de0 [ 1484.782607][T32506] ? lock_acquire+0x115/0x350 [ 1484.782634][T32506] ? lock_acquire+0x115/0x350 [ 1484.782664][T32506] ? is_bpf_text_address+0x26/0x2b0 [ 1484.782693][T32506] ? __lock_acquire+0x747/0x2de0 [ 1484.782719][T32506] ? __kernel_text_address+0xd/0x30 [ 1484.782741][T32506] ? unwind_get_return_address+0x4d/0x90 [ 1484.782765][T32506] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1484.782784][T32506] ? arch_stack_walk+0xfb/0x150 [ 1484.782818][T32506] ? lock_acquire+0x115/0x350 [ 1484.782853][T32506] ? __pfx_rtnl_newlink+0x10/0x10 [ 1484.782874][T32506] rtnetlink_rcv_msg+0x802/0xc00 [ 1484.782895][T32506] ? netlink_sendmsg+0x5d4/0xb40 [ 1484.782925][T32506] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1484.782948][T32506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1484.782972][T32506] ? __lock_acquire+0x747/0x2de0 [ 1484.783007][T32506] netlink_rcv_skb+0x226/0x4a0 [ 1484.783036][T32506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1484.783061][T32506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1484.783103][T32506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1484.783137][T32506] ? netlink_deliver_tap+0x2e/0x1b0 [ 1484.783170][T32506] netlink_unicast+0x7bd/0x940 [ 1484.783208][T32506] netlink_sendmsg+0x813/0xb40 [ 1484.783246][T32506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.783284][T32506] ? apparmor_socket_sendmsg+0x98/0x360 [ 1484.783309][T32506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1484.783336][T32506] sock_sendmsg_nosec+0x13a/0x180 [ 1484.783369][T32506] ____sys_sendmsg+0x54e/0x850 [ 1484.783401][T32506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1484.783444][T32506] ___sys_sendmsg+0x2a5/0x360 [ 1484.783468][T32506] ? __lock_acquire+0x747/0x2de0 [ 1484.783493][T32506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1484.783518][T32506] ? get_pid_task+0x20/0x1f0 [ 1484.783538][T32506] ? get_pid_task+0x20/0x1f0 [ 1484.783555][T32506] ? get_pid_task+0x20/0x1f0 [ 1484.783603][T32506] ? __fget_files+0x2a/0x420 [ 1484.783629][T32506] ? __fget_files+0x3a2/0x420 [ 1484.783666][T32506] __sys_sendmsg+0x177/0x240 [ 1484.783695][T32506] ? __pfx___sys_sendmsg+0x10/0x10 [ 1484.783741][T32506] __do_fast_syscall_32+0x27a/0x6a0 [ 1484.783766][T32506] ? do_fast_syscall_32+0x33/0x70 [ 1484.783788][T32506] ? asm_int80_emulation+0x1a/0x20 [ 1484.783807][T32506] ? do_int80_emulation+0x299/0x500 [ 1484.783829][T32506] ? trace_irq_disable+0x3b/0x140 [ 1484.783854][T32506] do_fast_syscall_32+0x33/0x70 [ 1484.783878][T32506] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1484.783902][T32506] RIP: 0023:0xf7ff80ec [ 1484.783920][T32506] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1484.783939][T32506] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1484.783961][T32506] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1484.783976][T32506] RDX: 0000000000040000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1484.783989][T32506] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1484.784001][T32506] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1484.784014][T32506] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1484.784046][T32506] [ 1484.784176][T32506] debugfs: out of free dentries, can not create file 'netdev@ffff88807723a700' [ 1484.880328][T27072] usb 10-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1484.901383][T27072] usb 10-1: config 253 has an invalid interface number: 130 but max is 0 [ 1484.901409][T27072] usb 10-1: config 253 has no interface number 0 [ 1484.901438][T27072] usb 10-1: config 253 interface 130 has no altsetting 0 [ 1484.925698][T32506] ip6tnl1: entered promiscuous mode [ 1484.959886][T27072] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.959910][T27072] usb 10-1: Product: syz [ 1484.959924][T27072] usb 10-1: Manufacturer: syz [ 1484.959938][T27072] usb 10-1: SerialNumber: syz [ 1485.610263][T32489] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1485.610435][T32489] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1485.610592][T32489] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1485.611075][T32489] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1485.611304][T32489] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1485.932343][T32531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7890'. [ 1485.971015][T32531] dlm: plock device version mismatch: kernel (1.2.0), user (2.0.0) [ 1486.408742][T27078] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1486.558026][T27078] usb 9-1: Using ep0 maxpacket: 8 [ 1486.558682][T27078] usb 9-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 1486.560595][T27078] usb 9-1: config 53 has an invalid interface number: 101 but max is 0 [ 1486.560611][T27078] usb 9-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 1486.560622][T27078] usb 9-1: config 53 has no interface number 0 [ 1486.560644][T27078] usb 9-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 1486.560663][T27078] usb 9-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1486.560686][T27078] usb 9-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1486.560711][T27078] usb 9-1: config 53 interface 101 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1486.564990][T27078] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.565014][T27078] usb 9-1: Product: syz [ 1486.565030][T27078] usb 9-1: Manufacturer: syz [ 1486.565045][T27078] usb 9-1: SerialNumber: syz [ 1486.943810][T32543] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7883'. [ 1487.196955][T32547] input: syz1 as /devices/virtual/input/input123 [ 1487.236793][T27078] kvaser_usb 9-1:53.101: error -ENODEV: Cannot get usb endpoint(s) [ 1487.384614][T27078] usb 9-1: USB disconnect, device number 57 [ 1487.524356][T27072] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1487.527022][T27072] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1487.527060][T27072] dib0700: firmware download failed at 7 with -22 [ 1487.559757][T27072] usb 10-1: USB disconnect, device number 30 [ 1487.678146][T31529] Bluetooth: hci1: command 0x0419 tx timeout [ 1487.678183][T31529] Bluetooth: hci3: command 0x040f tx timeout [ 1487.678210][T31529] Bluetooth: hci0: command 0x0c1a tx timeout [ 1487.678235][T31529] Bluetooth: hci4: command 0x0c1a tx timeout [ 1487.678260][T31529] Bluetooth: hci2: command 0x0c1a tx timeout [ 1487.928970][T32566] netlink: 'syz.1.7898': attribute type 1 has an invalid length. [ 1488.512775][T32581] FAULT_INJECTION: forcing a failure. [ 1488.512775][T32581] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.512810][T32581] CPU: 1 UID: 0 PID: 32581 Comm: syz.4.7902 Tainted: G L syzkaller #0 PREEMPT(full) [ 1488.512845][T32581] Tainted: [L]=SOFTLOCKUP [ 1488.512853][T32581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1488.512866][T32581] Call Trace: [ 1488.512874][T32581] [ 1488.512883][T32581] dump_stack_lvl+0xe8/0x150 [ 1488.512917][T32581] should_fail_ex+0x410/0x560 [ 1488.512944][T32581] _copy_to_user+0x31/0xb0 [ 1488.512972][T32581] simple_read_from_buffer+0xe1/0x170 [ 1488.513004][T32581] proc_fail_nth_read+0x1bb/0x230 [ 1488.513034][T32581] ? common_file_perm+0x20e/0x2b0 [ 1488.513060][T32581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1488.513093][T32581] ? rw_verify_area+0x24a/0x4c0 [ 1488.513121][T32581] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1488.513150][T32581] vfs_read+0x213/0xa80 [ 1488.513183][T32581] ? __pfx___mutex_lock+0x10/0x10 [ 1488.513207][T32581] ? __pfx_vfs_read+0x10/0x10 [ 1488.513238][T32581] ? __fget_files+0x2a/0x420 [ 1488.513270][T32581] ? __fget_files+0x3a2/0x420 [ 1488.513295][T32581] ? __fget_files+0x2a/0x420 [ 1488.513329][T32581] ksys_read+0x150/0x270 [ 1488.513362][T32581] ? __pfx_ksys_read+0x10/0x10 [ 1488.513396][T32581] ? asm_int80_emulation+0x1a/0x20 [ 1488.513421][T32581] do_int80_emulation+0x198/0x500 [ 1488.513443][T32581] ? trace_irq_disable+0x3b/0x140 [ 1488.513464][T32581] ? asm_int80_emulation+0x1a/0x20 [ 1488.513483][T32581] ? clear_bhb_loop+0x70/0xc0 [ 1488.513503][T32581] ? clear_bhb_loop+0x70/0xc0 [ 1488.513527][T32581] asm_int80_emulation+0x1a/0x20 [ 1488.513547][T32581] RIP: 0023:0xf71e75ab [ 1488.513565][T32581] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1488.513584][T32581] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1488.513605][T32581] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 1488.513619][T32581] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1488.513631][T32581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1488.513643][T32581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1488.513655][T32581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1488.513685][T32581] [ 1489.131275][T27072] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1489.301078][T27072] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 1489.321899][T27072] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 1489.358059][ T31] kauditd_printk_skb: 14 callbacks suppressed [ 1489.358073][ T31] audit: type=1800 audit(1789151133.285:4285): pid=32596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.7906" name="memory.events" dev="tmpfs" ino=434 res=0 errno=0 [ 1489.365461][T27072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1489.365620][T27072] usb 5-1: Product: syz [ 1489.365636][T27072] usb 5-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 1489.365712][T27072] usb 5-1: SerialNumber: syz [ 1489.518013][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1490.544556][T27072] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1490.546414][T27072] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1490.621125][T27072] usb 5-1: USB disconnect, device number 63 [ 1490.717643][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1490.811473][T32614] batman_adv: batadv0: Adding interface: syzkaller0 [ 1490.811490][T32614] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1490.811521][T32614] batman_adv: batadv0: Interface activated: syzkaller0 [ 1490.814416][T32613] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1490.906679][T32613] batman_adv: batadv0: Removing interface: syzkaller0 [ 1491.278083][T27078] usb 10-1: new full-speed USB device number 31 using dummy_hcd [ 1491.341666][T32629] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7918'. [ 1491.424020][T32631] netlink: 48 bytes leftover after parsing attributes in process `syz.8.7918'. [ 1491.429553][T27078] usb 10-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1491.430779][T27078] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1491.430801][T27078] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1491.430845][T27078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1491.433435][T27078] usb 10-1: config 0 descriptor?? [ 1491.487678][T27078] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1491.487722][T27078] dvb-usb: bulk message failed: -22 (3/0) [ 1491.506705][T32629] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1491.508224][T32631] bond2: peer notification delay (2365) is not a multiple of miimon (80), value rounded to 2320 ms [ 1491.525685][T27078] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1491.529977][T27078] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1491.530025][T27078] usb 10-1: media controller created [ 1491.539179][T27078] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1491.565638][T27078] dvb-usb: bulk message failed: -22 (6/0) [ 1491.565684][T27078] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1491.578618][T27078] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.9/usb10/10-1/input/input124 [ 1491.588389][T27078] dvb-usb: schedule remote query interval to 150 msecs. [ 1491.588407][T27078] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1491.715307][T27078] usb 10-1: USB disconnect, device number 31 [ 1491.801999][T27078] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1492.009680][T32642] netlink: 140 bytes leftover after parsing attributes in process `syz.4.7921'. [ 1492.429065][T32648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7922'. [ 1492.581589][T27068] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 1492.776475][T27068] usb 5-1: not running at top speed; connect to a high speed hub [ 1492.776513][T27068] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1492.777641][T27068] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1492.814022][T27068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.814048][T27068] usb 5-1: Product: ࠇ [ 1492.814063][T27068] usb 5-1: Manufacturer: М [ 1492.814079][T27068] usb 5-1: SerialNumber: Ч [ 1492.850549][T32645] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1492.918199][T27078] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1493.068924][T27078] usb 10-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 1493.072429][T27078] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.072479][T27078] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1493.072500][T27078] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 1493.072513][T27078] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1493.072563][T27078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.198785][T27068] cdc_ncm 5-1:1.0: bind() failure [ 1493.207617][T27068] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1493.207661][T27068] cdc_ncm 5-1:1.1: bind() failure [ 1493.233607][T27068] usb 5-1: USB disconnect, device number 64 [ 1493.301742][T27078] peak_usb 10-1:1.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1493.301773][T27078] peak_usb 10-1:1.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1493.489803][T27078] peak_usb 10-1:1.0: probe with driver peak_usb failed with error -71 [ 1493.522042][T27078] usb 10-1: USB disconnect, device number 32 [ 1493.861044][T32685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7930'. [ 1494.004828][T32688] ovs-s: entered promiscuous mode [ 1494.038996][T32690] syzkaller0: entered promiscuous mode [ 1494.039018][T32690] syzkaller0: entered allmulticast mode [ 1494.040479][T32685] openvswitch: ovs-s: Dropping previously announced user features [ 1494.053692][T32693] FAULT_INJECTION: forcing a failure. [ 1494.053692][T32693] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.053723][T32693] CPU: 1 UID: 0 PID: 32693 Comm: syz.9.7931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1494.053749][T32693] Tainted: [L]=SOFTLOCKUP [ 1494.053756][T32693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1494.053768][T32693] Call Trace: [ 1494.053776][T32693] [ 1494.053785][T32693] dump_stack_lvl+0xe8/0x150 [ 1494.053817][T32693] should_fail_ex+0x410/0x560 [ 1494.053845][T32693] should_failslab+0xa8/0x100 [ 1494.053869][T32693] ? skb_clone+0x212/0x3a0 [ 1494.053897][T32693] kmem_cache_alloc_noprof+0xa1/0x600 [ 1494.053930][T32693] ? skb_clone+0x212/0x3a0 [ 1494.053961][T32693] skb_clone+0x212/0x3a0 [ 1494.053989][T32693] __netlink_deliver_tap+0x413/0x860 [ 1494.054027][T32693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1494.054056][T32693] netlink_deliver_tap+0x19c/0x1b0 [ 1494.054085][T32693] netlink_sendskb+0x68/0x140 [ 1494.054113][T32693] netlink_rcv_skb+0x2a4/0x4a0 [ 1494.054150][T32693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1494.054175][T32693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1494.054215][T32693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1494.054242][T32693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1494.054275][T32693] netlink_unicast+0x7bd/0x940 [ 1494.054311][T32693] netlink_sendmsg+0x813/0xb40 [ 1494.054346][T32693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.054380][T32693] ? apparmor_socket_sendmsg+0x98/0x360 [ 1494.054404][T32693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.054429][T32693] sock_sendmsg_nosec+0x13a/0x180 [ 1494.054461][T32693] ____sys_sendmsg+0x54e/0x850 [ 1494.054493][T32693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1494.054533][T32693] ___sys_sendmsg+0x2a5/0x360 [ 1494.054555][T32693] ? __lock_acquire+0x747/0x2de0 [ 1494.054580][T32693] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.054603][T32693] ? get_pid_task+0x20/0x1f0 [ 1494.054621][T32693] ? get_pid_task+0x20/0x1f0 [ 1494.054638][T32693] ? get_pid_task+0x20/0x1f0 [ 1494.054684][T32693] ? __fget_files+0x2a/0x420 [ 1494.054709][T32693] ? __fget_files+0x3a2/0x420 [ 1494.054743][T32693] __sys_sendmsg+0x177/0x240 [ 1494.054771][T32693] ? __pfx___sys_sendmsg+0x10/0x10 [ 1494.054812][T32693] __do_fast_syscall_32+0x27a/0x6a0 [ 1494.054836][T32693] ? do_fast_syscall_32+0x33/0x70 [ 1494.054856][T32693] ? asm_int80_emulation+0x1a/0x20 [ 1494.054875][T32693] ? do_int80_emulation+0x299/0x500 [ 1494.054895][T32693] ? trace_irq_disable+0x3b/0x140 [ 1494.054918][T32693] do_fast_syscall_32+0x33/0x70 [ 1494.054940][T32693] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1494.054963][T32693] RIP: 0023:0xf7f630ec [ 1494.054980][T32693] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1494.054998][T32693] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1494.055018][T32693] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000580 [ 1494.055032][T32693] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1494.055043][T32693] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1494.055055][T32693] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1494.055067][T32693] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1494.055096][T32693] [ 1495.189312][T32718] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7934'. [ 1498.681563][T32718] tipc: New replicast peer: 172.20.20.187 [ 1498.681716][T32718] tipc: Enabled bearer , priority 10 [ 1498.686014][T32725] ip6tnl1: entered promiscuous mode [ 1498.720784][T32728] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7936'. [ 1498.926291][T32740] FAULT_INJECTION: forcing a failure. [ 1498.926291][T32740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.926312][T32740] CPU: 1 UID: 0 PID: 32740 Comm: syz.9.7939 Tainted: G L syzkaller #0 PREEMPT(full) [ 1498.926327][T32740] Tainted: [L]=SOFTLOCKUP [ 1498.926332][T32740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1498.926338][T32740] Call Trace: [ 1498.926343][T32740] [ 1498.926348][T32740] dump_stack_lvl+0xe8/0x150 [ 1498.926369][T32740] should_fail_ex+0x410/0x560 [ 1498.926385][T32740] _copy_to_user+0x31/0xb0 [ 1498.926399][T32740] simple_read_from_buffer+0xe1/0x170 [ 1498.926418][T32740] proc_fail_nth_read+0x1bb/0x230 [ 1498.926433][T32740] ? common_file_perm+0x20e/0x2b0 [ 1498.926447][T32740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.926465][T32740] ? rw_verify_area+0x24a/0x4c0 [ 1498.926481][T32740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1498.926496][T32740] vfs_read+0x213/0xa80 [ 1498.926514][T32740] ? __pfx___mutex_lock+0x10/0x10 [ 1498.926527][T32740] ? __pfx_vfs_read+0x10/0x10 [ 1498.926542][T32740] ? __fget_files+0x2a/0x420 [ 1498.926559][T32740] ? __fget_files+0x3a2/0x420 [ 1498.926572][T32740] ? __fget_files+0x2a/0x420 [ 1498.926590][T32740] ksys_read+0x150/0x270 [ 1498.926613][T32740] ? __pfx_ksys_read+0x10/0x10 [ 1498.926630][T32740] ? asm_int80_emulation+0x1a/0x20 [ 1498.926644][T32740] do_int80_emulation+0x198/0x500 [ 1498.926656][T32740] ? trace_irq_disable+0x3b/0x140 [ 1498.926667][T32740] ? asm_int80_emulation+0x1a/0x20 [ 1498.926677][T32740] ? clear_bhb_loop+0x70/0xc0 [ 1498.926687][T32740] ? clear_bhb_loop+0x70/0xc0 [ 1498.926700][T32740] asm_int80_emulation+0x1a/0x20 [ 1498.926710][T32740] RIP: 0023:0xf71675ab [ 1498.926720][T32740] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1498.926731][T32740] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1498.926743][T32740] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 1498.926751][T32740] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1498.926757][T32740] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1498.926764][T32740] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1498.926770][T32740] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1498.926785][T32740] [ 1499.238277][T27072] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1499.408740][T27072] usb 2-1: New USB device found, idVendor=1e59, idProduct=0002, bcdDevice=98.ed [ 1499.409738][T27072] usb 2-1: config 253 has an invalid interface number: 130 but max is 0 [ 1499.409762][T27072] usb 2-1: config 253 has no interface number 0 [ 1499.409790][T27072] usb 2-1: config 253 interface 130 has no altsetting 0 [ 1499.414191][T27072] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.414218][T27072] usb 2-1: Product: syz [ 1499.414233][T27072] usb 2-1: Manufacturer: syz [ 1499.414248][T27072] usb 2-1: SerialNumber: syz [ 1499.536336][T32762] batman_adv: batadv0: Adding interface: syzkaller0 [ 1499.536354][T32762] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1499.536387][T32762] batman_adv: batadv0: Interface activated: syzkaller0 [ 1499.581904][T32760] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1499.612550][T27068] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1499.632102][T32760] batman_adv: batadv0: Removing interface: syzkaller0 [ 1499.762564][T27068] usb 5-1: device descriptor read/64, error -71 [ 1499.850033][T32737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1499.853254][T32737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1499.853485][T32737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1499.853691][T32737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1499.873255][ T301] CIFS: VFS: UNC: path must begin with // or \\ [ 1499.873413][ T301] CIFS: VFS: Malformed UNC in devname [ 1499.873569][ T302] CIFS: VFS: UNC: path must begin with // or \\ [ 1499.873596][ T302] CIFS: VFS: Malformed UNC in devname [ 1499.875071][T32737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1499.967342][ T304] netlink: 'syz.8.7948': attribute type 3 has an invalid length. [ 1499.967363][ T304] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7948'. [ 1500.000269][T27068] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1500.127875][T27068] usb 5-1: device descriptor read/64, error -71 [ 1500.217553][ T310] FAULT_INJECTION: forcing a failure. [ 1500.217553][ T310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.217588][ T310] CPU: 0 UID: 0 PID: 310 Comm: syz.8.7950 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.217616][ T310] Tainted: [L]=SOFTLOCKUP [ 1500.217623][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1500.217635][ T310] Call Trace: [ 1500.217644][ T310] [ 1500.217653][ T310] dump_stack_lvl+0xe8/0x150 [ 1500.217689][ T310] should_fail_ex+0x410/0x560 [ 1500.217715][ T310] _copy_to_user+0x31/0xb0 [ 1500.217741][ T310] bpf_test_finish+0x4ea/0x690 [ 1500.217847][ T310] ? eth_type_trans+0x44e/0x800 [ 1500.217907][ T310] ? __pfx_bpf_test_finish+0x10/0x10 [ 1500.217947][ T310] bpf_prog_test_run_skb+0x11fe/0x2230 [ 1500.217991][ T310] ? __fget_files+0x3a2/0x420 [ 1500.218017][ T310] ? __fget_files+0x2a/0x420 [ 1500.218046][ T310] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1500.218073][ T310] bpf_prog_test_run+0x2c5/0x340 [ 1500.218100][ T310] __sys_bpf+0xa22/0xd90 [ 1500.218128][ T310] ? __pfx___sys_bpf+0x10/0x10 [ 1500.218153][ T310] ? ksys_write+0x1e6/0x270 [ 1500.218184][ T310] ? __mutex_unlock_slowpath+0x731/0x900 [ 1500.218225][ T310] ? fput+0xa0/0xd0 [ 1500.218257][ T310] __ia32_sys_bpf+0xba/0xd0 [ 1500.218280][ T310] __do_fast_syscall_32+0x27a/0x6a0 [ 1500.218304][ T310] ? do_fast_syscall_32+0x33/0x70 [ 1500.218326][ T310] ? asm_int80_emulation+0x1a/0x20 [ 1500.218346][ T310] ? do_int80_emulation+0x299/0x500 [ 1500.218366][ T310] ? trace_irq_disable+0x3b/0x140 [ 1500.218389][ T310] do_fast_syscall_32+0x33/0x70 [ 1500.218412][ T310] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.218434][ T310] RIP: 0023:0xf7f460ec [ 1500.218460][ T310] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1500.218478][ T310] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 1500.218500][ T310] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800002c0 [ 1500.218514][ T310] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.218527][ T310] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.218539][ T310] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1500.218551][ T310] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.218579][ T310] [ 1500.348971][T27068] usb usb5-port1: attempt power cycle [ 1500.453031][ T312] FAULT_INJECTION: forcing a failure. [ 1500.453031][ T312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.453066][ T312] CPU: 1 UID: 0 PID: 312 Comm: syz.9.7951 Tainted: G L syzkaller #0 PREEMPT(full) [ 1500.453093][ T312] Tainted: [L]=SOFTLOCKUP [ 1500.453101][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1500.453113][ T312] Call Trace: [ 1500.453121][ T312] [ 1500.453131][ T312] dump_stack_lvl+0xe8/0x150 [ 1500.453164][ T312] should_fail_ex+0x410/0x560 [ 1500.453190][ T312] _copy_to_user+0x31/0xb0 [ 1500.453205][ T312] rng_dev_read+0x3f0/0x7c0 [ 1500.453221][ T312] ? __pfx_rng_dev_read+0x10/0x10 [ 1500.453238][ T312] ? bpf_lsm_file_permission+0x9/0x20 [ 1500.453262][ T312] ? security_file_permission+0x75/0x260 [ 1500.453294][ T312] ? rw_verify_area+0x24a/0x4c0 [ 1500.453324][ T312] ? __pfx_rng_dev_read+0x10/0x10 [ 1500.453345][ T312] vfs_read+0x213/0xa80 [ 1500.453363][ T312] ? __pfx_vfs_read+0x10/0x10 [ 1500.453379][ T312] ? __fget_files+0x2a/0x420 [ 1500.453394][ T312] ? __fget_files+0x2a/0x420 [ 1500.453416][ T312] ? __fget_files+0x3a2/0x420 [ 1500.453441][ T312] ? __fget_files+0x2a/0x420 [ 1500.453476][ T312] ksys_read+0x150/0x270 [ 1500.453504][ T312] ? __pfx_ksys_read+0x10/0x10 [ 1500.453523][ T312] __do_fast_syscall_32+0x27a/0x6a0 [ 1500.453537][ T312] ? do_fast_syscall_32+0x33/0x70 [ 1500.453548][ T312] ? asm_int80_emulation+0x1a/0x20 [ 1500.453560][ T312] ? do_int80_emulation+0x299/0x500 [ 1500.453580][ T312] ? trace_irq_disable+0x3b/0x140 [ 1500.453605][ T312] do_fast_syscall_32+0x33/0x70 [ 1500.453627][ T312] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1500.453651][ T312] RIP: 0023:0xf7f630ec [ 1500.453664][ T312] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1500.453674][ T312] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 1500.453687][ T312] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004500 [ 1500.453694][ T312] RDX: 00000000fffffe0c RSI: 0000000000000000 RDI: 0000000000000000 [ 1500.453701][ T312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1500.453707][ T312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1500.453715][ T312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1500.453742][ T312] [ 1500.777986][T27068] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1500.799798][T27068] usb 5-1: device descriptor read/8, error -71 [ 1500.875765][ T323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7953'. [ 1501.048779][T27068] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1501.068810][T27068] usb 5-1: device descriptor read/8, error -71 [ 1501.178598][T27068] usb usb5-port1: unable to enumerate USB device [ 1501.918893][ T5619] Bluetooth: hci1: command 0x0419 tx timeout [ 1501.918932][ T5619] Bluetooth: hci3: command 0x040f tx timeout [ 1501.919054][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout [ 1501.919096][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout [ 1501.919124][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout [ 1501.962828][T27072] dvb-usb: found a 'EvolutePC TVWay+' in cold state, will try to load a firmware [ 1501.964311][T27072] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 1501.967586][T27072] dib0700: firmware download failed at 7 with -22 [ 1501.971771][ T339] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7957'. [ 1501.977123][ T335] bridge_slave_0: left allmulticast mode [ 1501.977146][ T335] bridge_slave_0: left promiscuous mode [ 1501.977366][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.028527][T27072] usb 2-1: USB disconnect, device number 49 [ 1502.058718][ T335] bond0: (slave bond_slave_0): Releasing backup interface [ 1502.066132][ T335] bond0: (slave bond_slave_1): Releasing backup interface [ 1502.086140][ T335] team0: Port device team_slave_0 removed [ 1502.095813][ T335] team0: Port device team_slave_1 removed [ 1502.096256][ T335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1502.097605][ T335] bond0: (slave netdevsim1): Releasing backup interface [ 1502.099450][ T335] batman_adv: batadv0: Removing interface: gretap1 [ 1502.104244][ T335] batman_adv: batadv0: Removing interface: gretap2 [ 1502.111867][ T335] batman_adv: batadv0: Removing interface: gretap3 [ 1502.147696][ T348] batman_adv: batadv0: Adding interface: syzkaller0 [ 1502.147710][ T348] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1502.181642][ T348] batman_adv: batadv0: Interface activated: syzkaller0 [ 1502.183205][ T347] FAULT_INJECTION: forcing a failure. [ 1502.183205][ T347] name failslab, interval 1, probability 0, space 0, times 0 [ 1502.183243][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.1.7958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.183268][ T347] Tainted: [L]=SOFTLOCKUP [ 1502.183274][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.183285][ T347] Call Trace: [ 1502.183293][ T347] [ 1502.183303][ T347] dump_stack_lvl+0xe8/0x150 [ 1502.183333][ T347] should_fail_ex+0x410/0x560 [ 1502.183359][ T347] should_failslab+0xa8/0x100 [ 1502.183385][ T347] __kmalloc_cache_noprof+0xa3/0x600 [ 1502.183405][ T347] ? batadv_orig_ifinfo_new+0x99/0x320 [ 1502.183506][ T347] ? batadv_orig_ifinfo_new+0x99/0x320 [ 1502.183539][ T347] batadv_orig_ifinfo_new+0x99/0x320 [ 1502.183570][ T347] batadv_iv_ogm_process_per_outif+0x26b/0x25c0 [ 1502.183613][ T347] ? do_raw_spin_lock+0x12b/0x2f0 [ 1502.183649][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.183681][ T347] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 1502.183706][ T347] ? lockdep_hardirqs_on+0x7b/0x110 [ 1502.183725][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.183751][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1502.183775][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.183805][ T347] batadv_iv_ogm_receive+0xc13/0x1740 [ 1502.183844][ T347] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 1502.183886][ T347] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 1502.183917][ T347] ? lock_acquire+0x115/0x350 [ 1502.183943][ T347] batadv_batman_skb_recv+0x4b6/0x870 [ 1502.183968][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1502.183991][ T347] ? ktime_get_with_offset+0x93/0x2d0 [ 1502.184010][ T347] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1502.184032][ T347] ? ktime_get_with_offset+0x27f/0x2d0 [ 1502.184049][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1502.184075][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1502.184107][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1502.184129][ T347] netif_receive_skb+0x4af/0xbf0 [ 1502.184168][ T347] ? __pfx_netif_receive_skb+0x10/0x10 [ 1502.184203][ T347] ? tun_rx_batched+0x185/0x790 [ 1502.184228][ T347] tun_rx_batched+0x1de/0x790 [ 1502.184261][ T347] ? __pfx_tun_rx_batched+0x10/0x10 [ 1502.184282][ T347] ? lock_acquire+0x115/0x350 [ 1502.184308][ T347] ? tun_get_user+0x23ba/0x44d0 [ 1502.184329][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1502.184352][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1502.184372][ T347] tun_get_user+0x2be0/0x44d0 [ 1502.184405][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1502.184431][ T347] ? aa_file_perm+0x4ed/0x15f0 [ 1502.184456][ T347] ? __pfx_tun_get_user+0x10/0x10 [ 1502.184479][ T347] ? __lock_acquire+0x747/0x2de0 [ 1502.184505][ T347] ? kstrtoull+0x137/0x1d0 [ 1502.184539][ T347] ? ref_tracker_alloc+0x341/0x4b0 [ 1502.184564][ T347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1502.184590][ T347] ? lock_acquire+0x115/0x350 [ 1502.184610][ T347] ? tun_get+0x1c/0x2f0 [ 1502.184637][ T347] ? tun_get+0x1c/0x2f0 [ 1502.184656][ T347] ? tun_get+0x1c/0x2f0 [ 1502.184681][ T347] tun_chr_write_iter+0x113/0x200 [ 1502.184703][ T347] vfs_write+0x612/0xba0 [ 1502.184739][ T347] ? __pfx_vfs_write+0x10/0x10 [ 1502.184778][ T347] ? __fget_files+0x2a/0x420 [ 1502.184813][ T347] ksys_write+0x150/0x270 [ 1502.184845][ T347] ? __pfx_ksys_write+0x10/0x10 [ 1502.184879][ T347] __do_fast_syscall_32+0x27a/0x6a0 [ 1502.184903][ T347] ? do_fast_syscall_32+0x33/0x70 [ 1502.184925][ T347] ? asm_int80_emulation+0x1a/0x20 [ 1502.184943][ T347] ? do_int80_emulation+0x299/0x500 [ 1502.184964][ T347] ? trace_irq_disable+0x3b/0x140 [ 1502.184989][ T347] do_fast_syscall_32+0x33/0x70 [ 1502.185011][ T347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1502.185034][ T347] RIP: 0023:0xf7fb40ec [ 1502.185051][ T347] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1502.185068][ T347] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1502.185090][ T347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 1502.185105][ T347] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 1502.185118][ T347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1502.185130][ T347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1502.185143][ T347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1502.185172][ T347] [ 1502.186254][ T347] ------------[ cut here ]------------ [ 1502.186265][ T347] !orig_ifinfo [ 1502.186277][ T347] WARNING: net/batman-adv/bat_iv_ogm.c:1413 at batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0, CPU#0: syz.1.7958/347 [ 1502.646057][ T347] Modules linked in: [ 1502.651977][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.1.7958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1502.662747][ T347] Tainted: [L]=SOFTLOCKUP [ 1502.667050][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1502.677102][ T347] RIP: 0010:batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1502.684223][ T347] Code: ff ff e8 af ad 1c f6 49 bc 00 00 00 00 00 fc ff df e9 80 f4 ff ff e8 9b ad 1c f6 90 0f 0b 90 e9 47 e1 ff ff e8 8d ad 1c f6 90 <0f> 0b 90 48 8b bc 24 80 00 00 00 e8 6c df ff ff 48 c7 44 24 50 00 [ 1502.703858][ T347] RSP: 0018:ffffc900058c7280 EFLAGS: 00010293 [ 1502.709927][ T347] RAX: ffffffff8bab1d03 RBX: ffff8880223b7440 RCX: ffff888079608000 [ 1502.717909][ T347] RDX: 0000000000000000 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 1502.725877][ T347] RBP: ffffc900058c7410 R08: ffffffff907a2b7f R09: 1ffffffff20f456f [ 1502.733852][ T347] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000 [ 1502.741825][ T347] R13: 0000000002020000 R14: ffff8880483f8000 R15: ffff8880223b7440 [ 1502.749797][ T347] FS: 0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:00000000f5476b40 [ 1502.758728][ T347] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1502.765311][ T347] CR2: 00000000f5455da4 CR3: 0000000073d2a000 CR4: 00000000003526f0 [ 1502.773284][ T347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1502.781257][ T347] DR3: 00000000fee0000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1502.789230][ T347] Call Trace: [ 1502.792494][ T347] [ 1502.795413][ T347] ? do_raw_spin_lock+0x12b/0x2f0 [ 1502.800447][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.805986][ T347] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 1502.812667][ T347] ? lockdep_hardirqs_on+0x7b/0x110 [ 1502.817882][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.823434][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1502.828747][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1502.834295][ T347] batadv_iv_ogm_receive+0xc13/0x1740 [ 1502.839691][ T347] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 1502.845235][ T347] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 1502.851051][ T347] ? lock_acquire+0x115/0x350 [ 1502.855722][ T347] batadv_batman_skb_recv+0x4b6/0x870 [ 1502.861108][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1502.866987][ T347] ? ktime_get_with_offset+0x93/0x2d0 [ 1502.872357][ T347] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1502.878514][ T347] ? ktime_get_with_offset+0x27f/0x2d0 [ 1502.883954][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1502.889079][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1502.894182][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1502.900078][ T347] netif_receive_skb+0x4af/0xbf0 [ 1502.905010][ T347] ? __pfx_netif_receive_skb+0x10/0x10 [ 1502.910477][ T347] ? tun_rx_batched+0x185/0x790 [ 1502.915318][ T347] tun_rx_batched+0x1de/0x790 [ 1502.919998][ T347] ? __pfx_tun_rx_batched+0x10/0x10 [ 1502.925196][ T347] ? lock_acquire+0x115/0x350 [ 1502.929881][ T347] ? tun_get_user+0x23ba/0x44d0 [ 1502.934716][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1502.940004][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1502.944842][ T347] tun_get_user+0x2be0/0x44d0 [ 1502.949525][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1502.954358][ T347] ? aa_file_perm+0x4ed/0x15f0 [ 1502.959144][ T347] ? __pfx_tun_get_user+0x10/0x10 [ 1502.964178][ T347] ? __lock_acquire+0x747/0x2de0 [ 1502.969133][ T347] ? kstrtoull+0x137/0x1d0 [ 1502.973546][ T347] ? ref_tracker_alloc+0x341/0x4b0 [ 1502.978659][ T347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1502.984104][ T347] ? lock_acquire+0x115/0x350 [ 1502.988779][ T347] ? tun_get+0x1c/0x2f0 [ 1502.992921][ T347] ? tun_get+0x1c/0x2f0 [ 1502.997060][ T347] ? tun_get+0x1c/0x2f0 [ 1503.001214][ T347] tun_chr_write_iter+0x113/0x200 [ 1503.006220][ T347] vfs_write+0x612/0xba0 [ 1503.010470][ T347] ? __pfx_vfs_write+0x10/0x10 [ 1503.015223][ T347] ? __fget_files+0x2a/0x420 [ 1503.019834][ T347] ksys_write+0x150/0x270 [ 1503.024156][ T347] ? __pfx_ksys_write+0x10/0x10 [ 1503.029016][ T347] __do_fast_syscall_32+0x27a/0x6a0 [ 1503.034201][ T347] ? do_fast_syscall_32+0x33/0x70 [ 1503.039227][ T347] ? asm_int80_emulation+0x1a/0x20 [ 1503.044323][ T347] ? do_int80_emulation+0x299/0x500 [ 1503.049525][ T347] ? trace_irq_disable+0x3b/0x140 [ 1503.054535][ T347] do_fast_syscall_32+0x33/0x70 [ 1503.059395][ T347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.065711][ T347] RIP: 0023:0xf7fb40ec [ 1503.069785][ T347] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1503.089392][ T347] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1503.097816][ T347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 1503.105784][ T347] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.113753][ T347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.121742][ T347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1503.129723][ T347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.137689][ T347] [ 1503.140731][ T347] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1503.148000][ T347] CPU: 0 UID: 0 PID: 347 Comm: syz.1.7958 Tainted: G L syzkaller #0 PREEMPT(full) [ 1503.158759][ T347] Tainted: [L]=SOFTLOCKUP [ 1503.163060][ T347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1503.173092][ T347] Call Trace: [ 1503.176352][ T347] [ 1503.179265][ T347] vpanic+0x56d/0xa60 [ 1503.183238][ T347] ? __pfx__printk+0x10/0x10 [ 1503.187810][ T347] ? __pfx_vpanic+0x10/0x10 [ 1503.192313][ T347] ? is_bpf_text_address+0x292/0x2b0 [ 1503.197578][ T347] ? is_bpf_text_address+0x26/0x2b0 [ 1503.202761][ T347] panic+0xc5/0xd0 [ 1503.206468][ T347] ? __pfx_panic+0x10/0x10 [ 1503.210876][ T347] __warn+0x315/0x4c0 [ 1503.214843][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.221328][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.227822][ T347] __report_bug+0x276/0x570 [ 1503.232374][ T347] ? lockdep_hardirqs_on+0x7b/0x110 [ 1503.237551][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.244037][ T347] ? __pfx___report_bug+0x10/0x10 [ 1503.249048][ T347] ? dump_stack_lvl+0x135/0x150 [ 1503.253885][ T347] ? dump_stack_lvl+0x137/0x150 [ 1503.258721][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.265209][ T347] report_bug+0x16b/0x220 [ 1503.269523][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.276004][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe6/0x25c0 [ 1503.282486][ T347] handle_bug+0x9c/0x200 [ 1503.286718][ T347] exc_invalid_op+0x1a/0x50 [ 1503.291200][ T347] asm_exc_invalid_op+0x1a/0x20 [ 1503.296028][ T347] RIP: 0010:batadv_iv_ogm_process_per_outif+0x1fe4/0x25c0 [ 1503.303122][ T347] Code: ff ff e8 af ad 1c f6 49 bc 00 00 00 00 00 fc ff df e9 80 f4 ff ff e8 9b ad 1c f6 90 0f 0b 90 e9 47 e1 ff ff e8 8d ad 1c f6 90 <0f> 0b 90 48 8b bc 24 80 00 00 00 e8 6c df ff ff 48 c7 44 24 50 00 [ 1503.322710][ T347] RSP: 0018:ffffc900058c7280 EFLAGS: 00010293 [ 1503.328764][ T347] RAX: ffffffff8bab1d03 RBX: ffff8880223b7440 RCX: ffff888079608000 [ 1503.336717][ T347] RDX: 0000000000000000 RSI: ffffffff8e475f59 RDI: ffffffff8c6d9a80 [ 1503.344673][ T347] RBP: ffffc900058c7410 R08: ffffffff907a2b7f R09: 1ffffffff20f456f [ 1503.352628][ T347] R10: dffffc0000000000 R11: fffffbfff20f4570 R12: dffffc0000000000 [ 1503.360582][ T347] R13: 0000000002020000 R14: ffff8880483f8000 R15: ffff8880223b7440 [ 1503.368547][ T347] ? batadv_iv_ogm_process_per_outif+0x1fe3/0x25c0 [ 1503.375049][ T347] ? do_raw_spin_lock+0x12b/0x2f0 [ 1503.380061][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1503.385594][ T347] ? __pfx_batadv_iv_ogm_process_per_outif+0x10/0x10 [ 1503.392255][ T347] ? lockdep_hardirqs_on+0x7b/0x110 [ 1503.397436][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1503.402965][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1503.408235][ T347] ? batadv_iv_ogm_orig_get+0x47f/0x5c0 [ 1503.413770][ T347] batadv_iv_ogm_receive+0xc13/0x1740 [ 1503.419132][ T347] ? batadv_iv_ogm_receive+0x4b1/0x1740 [ 1503.424667][ T347] ? __pfx_batadv_iv_ogm_receive+0x10/0x10 [ 1503.430461][ T347] ? lock_acquire+0x115/0x350 [ 1503.435118][ T347] batadv_batman_skb_recv+0x4b6/0x870 [ 1503.440472][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1503.446349][ T347] ? ktime_get_with_offset+0x93/0x2d0 [ 1503.451707][ T347] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1503.457848][ T347] ? ktime_get_with_offset+0x27f/0x2d0 [ 1503.463301][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1503.468396][ T347] ? netif_receive_skb+0x102/0xbf0 [ 1503.473492][ T347] ? __pfx_batadv_batman_skb_recv+0x10/0x10 [ 1503.479363][ T347] netif_receive_skb+0x4af/0xbf0 [ 1503.484295][ T347] ? __pfx_netif_receive_skb+0x10/0x10 [ 1503.489739][ T347] ? tun_rx_batched+0x185/0x790 [ 1503.494571][ T347] tun_rx_batched+0x1de/0x790 [ 1503.499231][ T347] ? __pfx_tun_rx_batched+0x10/0x10 [ 1503.504410][ T347] ? lock_acquire+0x115/0x350 [ 1503.509067][ T347] ? tun_get_user+0x23ba/0x44d0 [ 1503.513895][ T347] ? __local_bh_enable_ip+0xd6/0x140 [ 1503.519160][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1503.523994][ T347] tun_get_user+0x2be0/0x44d0 [ 1503.528658][ T347] ? tun_get_user+0x27b0/0x44d0 [ 1503.533494][ T347] ? aa_file_perm+0x4ed/0x15f0 [ 1503.538245][ T347] ? __pfx_tun_get_user+0x10/0x10 [ 1503.543252][ T347] ? __lock_acquire+0x747/0x2de0 [ 1503.548173][ T347] ? kstrtoull+0x137/0x1d0 [ 1503.552575][ T347] ? ref_tracker_alloc+0x341/0x4b0 [ 1503.557670][ T347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1503.563111][ T347] ? lock_acquire+0x115/0x350 [ 1503.567776][ T347] ? tun_get+0x1c/0x2f0 [ 1503.571932][ T347] ? tun_get+0x1c/0x2f0 [ 1503.576068][ T347] ? tun_get+0x1c/0x2f0 [ 1503.580206][ T347] tun_chr_write_iter+0x113/0x200 [ 1503.585212][ T347] vfs_write+0x612/0xba0 [ 1503.589453][ T347] ? __pfx_vfs_write+0x10/0x10 [ 1503.594212][ T347] ? __fget_files+0x2a/0x420 [ 1503.598789][ T347] ksys_write+0x150/0x270 [ 1503.603106][ T347] ? __pfx_ksys_write+0x10/0x10 [ 1503.607945][ T347] __do_fast_syscall_32+0x27a/0x6a0 [ 1503.613127][ T347] ? do_fast_syscall_32+0x33/0x70 [ 1503.618132][ T347] ? asm_int80_emulation+0x1a/0x20 [ 1503.623221][ T347] ? do_int80_emulation+0x299/0x500 [ 1503.628396][ T347] ? trace_irq_disable+0x3b/0x140 [ 1503.633404][ T347] do_fast_syscall_32+0x33/0x70 [ 1503.638235][ T347] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1503.644541][ T347] RIP: 0023:0xf7fb40ec [ 1503.648594][ T347] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1503.668181][ T347] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1503.676577][ T347] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000800 [ 1503.684532][ T347] RDX: 0000000000000026 RSI: 0000000000000000 RDI: 0000000000000000 [ 1503.692485][ T347] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1503.700438][ T347] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1503.708388][ T347] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1503.716349][ T347] [ 1503.719607][ T347] Kernel Offset: disabled [ 1503.723923][ T347] Rebooting in 86400 seconds..