last executing test programs: 32m59.098504927s ago: executing program 32 (id=1010): pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000f73000/0x3000)=nil, &(0x7f0000000000)="2ddedab73da67c0806de0f90446a27170700308b1c19440d9161165fd0994b2c09ed1d407a9287b96eab5eaf69b0896196a53539d560d337750777f98e79b0f7ba85cb61569c4006335af82e3841746caed679be9a7d887db1262350cc228bd54986dc3d6a1d9ca099869940dfcf7c620472668fcee192543c83300ad735de8cc0bec30f4170a7e6ab7ec3f7ed55652b23bc3248996bd3221817b34e12ea4943de45963204ce7fc8d99bed74aee8d5e6ccdb42", 0xb3, r0}, 0x68) r1 = syz_io_uring_setup(0x17c1, &(0x7f0000000180)={0x0, 0xcb52, 0x4000, 0x1, 0x17b}, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x0, &(0x7f0000000280)) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000002c0)={r0, 0x8, 0x7, 0x7ff}) ioctl$KDFONTOP_COPY(r4, 0x4b72, &(0x7f0000000700)={0x3, 0x0, 0x19, 0xb, 0x17f, &(0x7f0000000300)}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000740)=0x4, 0x4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000780)=@x86={0xf, 0x8, 0x49, 0x0, 0x0, 0xf8, 0xe3, 0x5, 0x5, 0xd, 0x5, 0x3, 0x0, 0x9, 0x8001, 0x5, 0x2, 0x80, 0x0, '\x00', 0x3}) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r4) r6 = syz_open_dev$vim2m(&(0x7f0000000800), 0x8000000000000000, 0x2) ppoll(&(0x7f0000000840)=[{r0, 0x8cb0}, {r6, 0x2}, {r6, 0x514}, {r0, 0x2000}], 0x4, &(0x7f0000000880), &(0x7f00000008c0)={[0xfffffffffffffff4]}, 0x8) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000e00)={0x0, &(0x7f0000000900)=[@nested_amd_inject_event={0x180, 0x38, {0x0, 0x54, 0x2, 0xfffffffffffffffd, 0x3}}, @wrmsr={0x65, 0x20, {0xb7b, 0x8}}, @out_dx={0x6a, 0x28, {0x64a6, 0x4, 0x3}}, @cpuid={0x64, 0x18, {0xfffffff8, 0x7}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xfffffffffffffff6, 0x4}}, @out_dx={0x6a, 0x28, {0xfb4, 0x7, 0x10000}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @wr_crn={0x67, 0x20, {0x0, 0x3ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x2, 0xffffffffffffe4ba}}, @nested_amd_invlpga={0x17d, 0x20, {0x2, 0x2293}}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0xa6}}, @nested_amd_invlpga={0x17d, 0x20, {0xb000, 0xc0c0}}, @rdmsr={0x66, 0x18, {0x825}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_syzos={0x136, 0xe0, {0x3, 0x3, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x507, 0x7, 0x0, 0x7}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0xca74}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x3d, 0x2, 0x4}}]}}, @uexit={0x0, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x3, 0x5b, 0x2, 0x9, 0x2}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_load_syzos={0x136, 0x100, {0x1, 0x7fff, [@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x58b, 0x8, 0x1, 0x9}}, @wr_drn={0x68, 0x20, {0x6, 0x6}}, @wr_crn={0x67, 0x20, {0x8, 0xa4b}}, @wr_drn={0x68, 0x20, {0x2, 0x8}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @control64=0x201c, 0xb1e, 0x0, 0x7}}]}}, @nested_create_vm={0x12d, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xeb0f, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x78, 0x54ae, 0x8001, 0x5}}], 0x4f8}) write(r7, &(0x7f0000000e40)="57e166ccf6e4b2c31a0c03f14ed39be167f441a1dabd1c3383b61e8e6634c43b21d3d594dc2dc8f3fda850996fb3674f9654446ce991468707a54b3812662b", 0x3f) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r7, 0x4068aea3, &(0x7f0000000e80)={0xc7, 0x0, 0x1}) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000f00)={0x4, 0xa73c8455, 0x6, 0xe, 0x15, "f6d2009c87e137d50009f80bf4fd0fe1e28ba5"}) r8 = syz_open_dev$ublk_chdev(&(0x7f0000000f40), 0x0, 0x20000) syz_ublk_add_dev(r4, r2, r3, 0x0, &(0x7f0000000fc0)={0x2e, 0x30, 0x0, r4, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xc4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000f80)=@new_dev={0x3, 0x26, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x12}}}, &(0x7f0000001040)=0x0) r10 = io_uring_setup(0x7cdb, &(0x7f0000001100)={0x0, 0xd28b, 0x4000, 0x0, 0x278, 0x0, r1}) syz_ublk_setup_queues(r8, r9, &(0x7f0000001080)={0x0, 0x1420, 0x2, 0x3, 0x1c1, 0x0, r4}, &(0x7f0000001180)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc3f, 0x4000, 0x3, 0x291}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa0a6, 0x8000, 0x0, 0x388, 0x0, r10}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x43e0, 0x2, 0x1, 0x1, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x244d, 0x800, 0x2, 0x1ae}}], 0x4, &(0x7f0000002400)={0x2e, 0x26, 0x0, r5, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0xe0}, 0x0, 0x0, '\x00', {0x2, 0x581, 0x0, &(0x7f0000001400)=@buf_4k="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"}}, &(0x7f0000002480)) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000024c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r13 = openat$incfs(r4, &(0x7f0000002500)='.pending_reads\x00', 0x305000, 0x19e) ioctl$KVM_SET_FPU(r13, 0x41a0ae8d, &(0x7f0000002540)={'\x00', 0x6e, 0x4, 0xd, 0x0, 0x6, 0x200000, 0x70000, '\x00', 0x7}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r4, 0x4068aea3, &(0x7f0000002700)) r14 = accept$inet6(r4, &(0x7f0000002780)={0xa, 0x0, 0x0, @empty}, &(0x7f00000027c0)=0x1c) fcntl$setown(r14, 0x8, 0x0) close(r12) r15 = getuid() quotactl_fd$Q_GETINFO(r1, 0x0, r15, &(0x7f0000002800)) ioctl$FS_IOC_GETFSUUID(r11, 0x80111500, &(0x7f0000002840)) 32m29.223144658s ago: executing program 33 (id=1060): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$tun(r2, &(0x7f00000002c0)=ANY=[], 0x33) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000000)={@empty, @private=0xa010101, 0xffffffffffffffff, "070f272e4868b5a1fb112c6880cdfa7a9d13095be8b0fd2d427e98cdb9fe63b5", 0x8000, 0x10000, 0x10000, 0x199d}, 0x3c) sendfile(r2, r1, 0x0, 0x10000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaabb88a810008100000086dd6300000000083aff00000000000000000000000000000000fe80000000000000000700"/70], 0x0) listen(r0, 0x40000000) 31m40.389226579s ago: executing program 6 (id=1257): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd29, 0x25dfdbfc, {0xa, 0x80, 0x14, 0x0, 0x8, 0x0, 0x0, 0xe, 0x17}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @FRA_SRC={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x30000054}, 0x20048800) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x4100, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 31m40.143307652s ago: executing program 6 (id=1259): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r6, 0x0, 0x39000, 0x0) r7 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) splice(r5, 0x0, r7, 0x0, 0x2, 0x5) write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[], 0xfffffe3e) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = fanotify_init(0x200, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r9, 0x40045532, &(0x7f0000000240)) fanotify_mark(r11, 0x1, 0x12, r10, 0x0) r12 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x3e2}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r13, r14, r15, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r12, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x6b09, 0x1a5f, 0x1}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r16, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0x0) 31m37.889008344s ago: executing program 6 (id=1266): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x7d000000, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 31m37.745677853s ago: executing program 6 (id=1267): userfaultfd(0x80801) (async) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x80000000003c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000240)={0x14, 0x11, 0x1, {0x2, 0x4, 0x1}}, 0x14) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000080)={0xeeee8000, 0xeeee0000, 0xe, 0x9, 0x1}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000380)={0x2, 0x25000, 0x1}) 31m37.690992286s ago: executing program 6 (id=1268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105000000890600001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 31m37.366021472s ago: executing program 6 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0xcc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa0, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x44, 0x6, "1f02447d924158711880fc75de9cbdbdc9199945d80451f2c09a120e95855dec332d709a37347ea0609053759f247db77cb8d1b09b34cf452201afccc9054b3e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) 31m36.922762888s ago: executing program 34 (id=1270): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0xcc, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xa0, 0x3, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_KEY_END={0x8c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x58, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x44, 0x6, "1f02447d924158711880fc75de9cbdbdc9199945d80451f2c09a120e95855dec332d709a37347ea0609053759f247db77cb8d1b09b34cf452201afccc9054b3e"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) 18m33.875310268s ago: executing program 5 (id=5128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x11, r0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x4c, 0x0, 0x0) (fail_nth: 39) 18m33.053065132s ago: executing program 5 (id=5131): rt_sigprocmask(0x2, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000000380)=0x0) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x181480, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000500)={0x8, "e3d509f2c24aa8f2"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m32.458345339s ago: executing program 5 (id=5136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc1b}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0xe, 0x4, 0x4, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffff9, 0x10000000005, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1ffe, 0x3c4210}) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0xa, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0x2, 0xfff, 0x20000000009, 0x9, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x20005, 0x2, 0x4ff, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x101, 0x8, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x2, 0x94f, 0x150b0000, 0x7fffffffffffffff, 0x6, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0xe, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x38c, 0x7, 0xbd, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa8, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x100, 0x4, 0xe, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0x5, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x9, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xffe, 0x80, 0x10000003, 0xd, 0x44, 0x6, 0xffff, 0x1, 0x401, 0x4, 0x2, 0x8000000007, 0xea7, 0x1]}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x13c, 0x1a, 0x713, 0x0, 0x25dfdbfd, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d, 0x0, 0xee00}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfe, 0x32}, @in=@empty, {0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xffffffff00000001, 0x0, 0x80000000, 0x53f}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {0x0, 0x4}, 0x70bd2c, 0x3500, 0x2, 0x1, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'aegis128-generic\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20000880}, 0x2000) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x2c0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) write$binfmt_aout(r6, &(0x7f0000000740)={{0xcc, 0xfa, 0x1, 0x1d4, 0x259, 0xc788, 0x1ef, 0x3}, "847053ab462344a4f963d209b8c933a1a530e838a275122332880a3acd47e6ae84341fd89dce6df2de6e8ead1cee78658a2c2d3a2d248ebeee50b25ca59ffffdccef8526e1b44b8b5af4d86685b8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x96e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xf, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001800000000000008e"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 18m32.131185849s ago: executing program 5 (id=5139): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x9b71, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}]}}}]}, 0x40}}, 0x600) 18m31.725022849s ago: executing program 5 (id=5142): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41100}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x20006884}, 0x40800) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$can_bcm(0x1d, 0x2, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x525042, 0x0) r1 = syz_clone(0x80202000, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000280)={'fscrypt:', @desc1}, &(0x7f00000002c0)={0x0, "07ec685224472d3ce62614a517a532cfa6faa7f4f33fb9fdc06c584b134c2a90b2a009126445277df563f444ba32540429912475d90df0e9844f65bf11763185", 0x2a}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000400), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000000)={[0x401]}) socket$kcm(0x29, 0x2, 0x0) ptrace$setregset(0x4205, r1, 0x1, &(0x7f0000000100)={0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x9a9c41, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x34) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x4000001) syz_emit_ethernet(0xd8, &(0x7f0000000680)={@random="7ec389c162be", @local, @val={@val={0x88a8, 0x0, 0x1, 0x4}, {0x8100, 0x1}}, {@llc={0x4, {@snap={0xaa, 0xaa, "df", "e7a417", 0x600, "8fbe1d181ed8aecd7043912ca0b7eb28a22edb7c8fc7a139ad7562addd6ea49ecc56e961498581959bf322a577644ab9dfce3129d23130a7c9b5f33953075c1b47d69e10281e0c91ae431bb23b86d7780ffa9992c1ebe5596c12f546afcbdd7285512d1987664d7710c6d9492b61c21fed983157f941f4f5abf3912ca0558a15d22e286a02c6f01a5a7be6103996043a7e583240cc8fa69828bf8da606b0b3191abe1b3616b9749df1cfd07e3ca9e4febd60fd65da3a5c3cc149"}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, [0x89b, 0x34c, 0x3ca, 0x10e]}) timer_create(0x8, &(0x7f0000000080)={0x0, 0x1b}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') ioctl$PPPIOCSFLAGS1(r4, 0xc0686611, &(0x7f0000000080)=0x68) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 18m31.318700972s ago: executing program 5 (id=5143): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(&(0x7f00000001c0)=""/90, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x204c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0xe3, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc41, 0x48c93690, 0x42, 0xffffffff], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2df9, 0x4, 0x9, 0x5, 0x2000000, 0x1f3, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7d, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12f, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x1, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x8, 0x80000003, 0x6, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="a00000000906010800000000000000000200000a840008800c00078008001c4000000006100007800900120073797a3000000000100007800c0019400000000000000026100007800900130073797a3100000000100007800c001680080001407f000001100007800a001100bbbbbbbbbbbb00000c00078008000840000000010c00076505000700730000000c00078008001c4000000004080009400000005400a90edff68c"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg\x00', 0x1}) close_range(r0, r0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m16.619321835s ago: executing program 2 (id=5186): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000206050000000000000000000000000005000400011d00000900020073797a320000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x8, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x6000000, {0x2a00, 0x80010000, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) 18m16.397890599s ago: executing program 2 (id=5188): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x11, r1, r1, r1, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) (rerun: 32) write(r4, &(0x7f0000000180)='1', 0x1) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000006000000020000000700000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000100000000006000000000001000000000000"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x10, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000100000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) (async) sendmsg$unix(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) (async) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x800, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = syz_open_procfs(0x0, 0x0) (rerun: 64) getdents64(r10, &(0x7f0000002f40)=""/4098, 0x1002) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x7b, 0xa004) (async) write(r9, &(0x7f0000000200)='1', 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) 18m16.038503719s ago: executing program 35 (id=5143): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getcwd(&(0x7f00000001c0)=""/90, 0x5a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000b80)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x204c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0xe3, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc41, 0x48c93690, 0x42, 0xffffffff], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2df9, 0x4, 0x9, 0x5, 0x2000000, 0x1f3, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7d, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12f, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x1, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x8, 0x80000003, 0x6, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000, 0x0, 0xffffffffffffffff}) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="a00000000906010800000000000000000200000a840008800c00078008001c4000000006100007800900120073797a3000000000100007800c0019400000000000000026100007800900130073797a3100000000100007800c001680080001407f000001100007800a001100bbbbbbbbbbbb00000c00078008000840000000010c00076505000700730000000c00078008001c4000000004080009400000005400a90edff68c"], 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'pim6reg\x00', 0x1}) close_range(r0, r0, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 18m16.002665336s ago: executing program 2 (id=5191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="000086dd0001090004000000a60c6eec00be004411"], 0x7a) 18m15.618610077s ago: executing program 2 (id=5192): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) unshare(0x100000) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000024c0)=ANY=[@ANYBLOB="e0190000420001f1ffffff0000000000030100000f0000003c00010000112233445566778899aabb86dd2c00001c00003c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e2b6704000280861903"], 0x19e0}}, 0x0) mremap(&(0x7f0000765000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000289000/0x4000)=nil) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r5) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) 18m14.679178059s ago: executing program 2 (id=5193): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x0, 0x2000, 0xf1ffffff}}}}]}, 0x48}}, 0x0) 18m14.204379893s ago: executing program 2 (id=5195): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0700000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='io\x00') read$watch_queue(r4, &(0x7f0000000040)=""/102, 0x66) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000080)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x1, r4}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0xb2, 0x201) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r8, r9, 0x0, r10], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000100)=[r6, r8], &(0x7f0000000180)=[0xa, 0x4, 0x100, 0x4, 0x400, 0x2], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000100)=[r8], &(0x7f0000000180)=[0x1], 0xc, 0x1, 0x9}) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x401) ioctl$KVM_TDX_CAPABILITIES(r11, 0xc008aeba, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000060120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0}], 0x1}) 18m7.90205369s ago: executing program 8 (id=5189): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) unshare(0x100000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) 18m7.473399793s ago: executing program 8 (id=5216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 18m7.186278653s ago: executing program 8 (id=5217): r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x3697, &(0x7f0000000040)={0x0, 0xa264, 0x40, 0x4, 0x1b8}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x1, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000004c40)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{0x0}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00001028bf900000008fa5f2ebaad74d8fe02fb3336c380000010000000200000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc8, 0xc004}}, {{&(0x7f0000004640)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000004bc0)=[{&(0x7f00000046c0)="69be795384a5e1a3ee1551c809f15d8a5e0962445858be03a319984afa07dcd49633709b0fcde138c6a452df49df03e3230ec7422d825c4ab3158162dca36f9fe27257180e9255ccdd69b1f6241e73088618831b562eabfb5721901bb7f57eafd8e5c71fd71b12c90c7fa7f11fab5fde198b4c2d791edce846d7495f326a0754e231fd7336e75426ca6d56ab2385a4eaf023e73d32085d26d919577174de527c3b91a54b3dda393a1cd624354828f1f3a80f12cea128d4677dba63021482c624a368136b3a12177401212ecafdbcee19d11ea5324d9ce401932a77d3234f1337956f54f8b1f7cd28", 0xe8}, {&(0x7f00000047c0)="7c25fdd293886e79810dde841ce4826441d76c04e59ab8adb3b6026a7f6fab84ea58da09df28c397fa99805230e40fee6401690a71a6790fc6144283e239a1b88f544dfbf67fb3c3407acd169b395958b4d142e4371c919ab100a878fc2c8521f829248f4effb0b6ea8c498405890efcd28d0b89d044158304ebd7252ef2bb55f5538312f63f50e1f91132fe50146ee0ea99d1edef14d4983db6e15546737ee85a02dd9788ef195d9b42618b15c761f49c6b3cdaeb69e56c6dd7cf9226b9e9c55c4a739a", 0xc4}, {&(0x7f00000048c0)="30bd32d6d5bf04bf0a6f1801f627811226909fc261bf67725dc0f44cd8ae0b825bea986eec587cae67c2ebd63f81e83a0d904e3e0fcd76279e5708d2cd1b076ac792ded4c7e7cc21e6d10808cf3deb003506d2a557d49ee6c60c1c11af8230cfa87c2c7073a6ed9ddcdb5c0daf7ceaebd69fabee6d62f66107246066f2b4c400c7d02a3a69b4d6b3c8a3d680506c2d2e107a831a7ac786c607d4c39e98b64a7a36d714c69aaf69aefb41f7170cf80d78033a8f6eec721adbd705c4ea95e7d9a659dc5ca9dbc8478a064ffd3058a8", 0xce}, {&(0x7f00000049c0)="f0c7f36ac4f5674d2aca9db411fedb16c6c0132c095bf5e1c5fd727d7afa46326c2d982e697e785818bbde446104ec00c39b82caea4849057c51c82372936bee08d9459fe13facb12a1a77e010b2cd3fa0ae7caaa796b1d2902afca1bbe009f691d1ec94b6c6d35a8b4790c030a4d0773f99ac65e9e7cd9912365b4f08acacb5056c170fe4bef1572ff9fafb774cfdcfd62ea70cd48e01e8da8fe33552eb433ae28e43e575c81b67da984a26819a901d233b8ff0008d6e342a73749d872318f978c7f862914d9a30eda0a914d8dba7af1d5907375f4aea08de41c884326ef72decda7f45095aee98531c00f6", 0xec}, {&(0x7f0000004ac0)="739dbae29ed182083fd86ece5c3c61e86d6e1edf8c146a00195a9cf926d75cedf066bede8fa41d4d1c1f6daed4d1a2988d176e380f598f7dee0ae98cc07d2ab031beb5b29db7777a4ae52444af897688f0ec9ac1b0bda59d3f580064be62c37465003ad795b45020974bfb0866f4e44b0af68204c21e267f0bd46ec28490d53da439f25d025c17bb6fc5c7227b2915113d4f0e2bd21ed2ac2ae386d008f4d6dd6ae8dc41", 0xa4}, {&(0x7f0000004b80)}], 0x6, 0x0, 0x0, 0x48010}}], 0x2, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) syz_emit_vhci(&(0x7f0000001200)=ANY=[@ANYBLOB="040e0605250cb0"], 0x9) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x1bd, @loopback}, 0x10) listen(r5, 0x5) r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r8, &(0x7f0000002c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001400010125bd7000ffdbdf25011008074e244e22030000003100000001ffffffc300000006000000000000000000004007000000", @ANYRES32=0x0, @ANYBLOB="de000000f4ffff7f0203000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='vers\x00', &(0x7f00000002c0)='1.0\x00', 0x0) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20000) ioctl$SG_BLKTRACESETUP(r9, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x21fd, 0xdd36, 0x80, 0x1df, 0x81}) ioctl$SG_BLKTRACESTART(r9, 0x1274, 0x0) ioctl$SG_BLKTRACETEARDOWN(r9, 0x1276, 0x3800) r10 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_SET_PROPERTY(r10, 0xbfffffff, 0x0) 18m5.850561343s ago: executing program 1 (id=5223): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001400192360834b80043f679a10ff3d420000008eaac7e863d60001000000f61bcdf1194ad353e9cc853a80482409000000381effffffff0057e792945f80000000050028925aaa000000c600004f860004002e49", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 18m5.753868345s ago: executing program 1 (id=5225): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) sync_file_range(r1, 0x0, 0x5, 0x7) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x3, 0x0, @private0={0xfc, 0x0, '\x00', 0x3}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000006c0)={r4}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write(r5, &(0x7f0000000000)="380000003f000501010000000000000001020000000000000f0001006f76732d73797374656d00000800020000000000080009002a", 0x35) socket$pppoe(0x18, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x3fd}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) write(r5, &(0x7f0000000100)="6000000041000901020000000000000001010000000000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) write(r5, &(0x7f0000000300)="60000000410009010200000000000000010100002a0000002c000100100004000000000000000000000000000600060008000000100007000101010102020202000040001c000200180003001400100008000200010101010500040040000000", 0x60) 18m5.566365498s ago: executing program 8 (id=5227): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b0000000800feff", @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x40800d0) 18m5.485505631s ago: executing program 8 (id=5228): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000003a00)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1) 18m4.800271699s ago: executing program 1 (id=5232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xf, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0x5522, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0xe, 0x20, 0x0, 0x0, 0x1}, {0x2, 0xe6, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x3ff, 0x0, 0x0, 0x1}, {0x3fe, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x1000000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x7, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x400024, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac41, 0x9, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3, 0x80001000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0x1ff, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x28) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f00000001c0), 0x2, 0x8000) (async) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0x8, 0xf, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x81, 0x3], [0xffffffff, 0x55, 0xffffffff, 0x6, 0xffffffff, 0x5522, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0xe, 0x20, 0x0, 0x0, 0x1}, {0x2, 0xe6, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x3ff, 0x0, 0x0, 0x1}, {0x3fe, 0x1000, 0x0, 0x0, 0x1}, {0x4, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}], '\x00', 0x1000000}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x7, 0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x400024, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac41, 0x9, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3, 0x80001000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0x1ff, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) (async) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002000000000b82100"}) (async) 18m4.630542335s ago: executing program 1 (id=5234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0xf3ff, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 18m4.502341741s ago: executing program 1 (id=5235): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000580)=[{&(0x7f00000005c0)="580000001400192360834b80043f679a10ff3d420000008eaac7e863d60001000000f61bcdf1194ad353e9cc853a80482409000000381effffffff0057e792945f80000000050028925aaa000000c600004f860004002e49", 0x58}], 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 18m4.313838196s ago: executing program 1 (id=5237): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) read$hidraw(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0xe3, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0xffffffff], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2df9, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7d, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12f, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x1, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 17m59.003367281s ago: executing program 36 (id=5195): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080), 0x4) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000200)={0x3, @win={{0x2, 0x4, 0x9, 0x8e8}, 0x2, 0x401a, &(0x7f00000021c0)={{0x2, 0x2, 0x1, 0x40}}, 0x3317, 0x0, 0x14}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=ANY=[@ANYBLOB="3801000010000100fefff7ff00010000e0000001000000000000000000000000fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c00000000000000000000000000ffffac1e000100000000000000009201000000000000060000000000000000000000000000001c250800000000000200000000000000f8ffffffffffffff7c232e0700000000090000000000000000000000000000001f00000002000000feffffffffffffff02000000fcffffffff0f00002abd700004350000020001000000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001980)='io\x00') read$watch_queue(r4, &(0x7f0000000040)=""/102, 0x66) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r5, 0x40086408, &(0x7f0000000080)={0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01864c2, &(0x7f00000000c0)={0x0, 0x1, r4}) r7 = syz_open_dev$dri(&(0x7f0000000340), 0xb2, 0x201) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000400)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r7, 0xc01064c5, &(0x7f0000000480)={&(0x7f0000000440)=[r8, r9, 0x0, r10], 0x4}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r5, 0xc01864cd, &(0x7f00000001c0)={&(0x7f0000000100)=[r6, r8], &(0x7f0000000180)=[0xa, 0x4, 0x100, 0x4, 0x400, 0x2], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc03064ca, &(0x7f00000001c0)={&(0x7f0000000100)=[r8], &(0x7f0000000180)=[0x1], 0xc, 0x1, 0x9}) r11 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x401) ioctl$KVM_TDX_CAPABILITIES(r11, 0xc008aeba, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x1, 0x0, [{}]}}}) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000060120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000140)=[{0xff, 0x0, 0x0, 0x0}], 0x1}) 17m50.155117393s ago: executing program 37 (id=5228): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) readv(r0, &(0x7f0000003a00)=[{&(0x7f00000002c0)=""/95, 0x5f}], 0x1) 17m48.891751418s ago: executing program 38 (id=5237): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) read$hidraw(r1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8, 0xc95a, 0x1, 0x8, 0x7fffffff, 0xfffffc29, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000004, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4, 0x6, 0x80010000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x4, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0xe3, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0xfffffffb, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0xffffffff], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x1, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2df9, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7d, 0x7, 0x4, 0x2950bfaf, 0xffe, 0x1, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12f, 0x0, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x1, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x8, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x0, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x2, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd8, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 25.145793382s ago: executing program 3 (id=10769): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000002780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000040)='\x00', 0xffffff3f}, {&(0x7f0000000140)="c7d3fd13c8141eccd0a15465c00fdd8faf2449784711f55a377bd78d58bccac3c7b8eb14ce78f0be4202d08614a6dd6961ed7261ad697c5299f39179e64207b9395b780116eec1ec9ee7c57438022f1825aa3581972aee0a78daf8a042ea85ac6120e7685d604dd302b7a110cdbdb21f804b1b60df316589323be90bcb05dce974ba382590566fccc8c809a7f4b4e684171bb359f66c0d01345df5aa41ce7c6fcfef1c39fee7e48fcf049ee1"}, {&(0x7f00000002c0)="cfa0776642986e1ab2b0af609ac9e16b039d0ab9a9a2e653639c9e74d8ce7d410c429a81240e04f59754d3182fb9566b30a50141dad2a2a259b22ef5700f85b24980cbdd428eca141f1a806c4c1565766fc32c2586634651002240ece1d8558e3aebe22e76bc8c645d5879b6f62782c83f87cbf72ace768af711ead1d73d7bf2939e73228756f3da433a52aeb0eceda513a2df1854eca3244dfe7a5270cdb454f525ef339941e5279a017f3e061b"}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e23, 0xd1e, @local, 0x2}, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)="54950f98ee3aabf9acdd93f0a6912ebecd6faaf758270e67c1a543b3c7e6a0336782fca24086aeacb524e0928226e98e3150153ac1f3b8749fd8b458aff8410979b50e85c1f30f1bb43379589bc1abb285ead6d9b3275343bf45a9688ea73020b439539bece361bd9c555207a4bb831dbd2a5d41ba28f3c538d35bc7a7149476ea253819bf3854c22ecd441f83816f69fef061c0e404068732a358102e6e7ee03abdda8c5319779230dc"}, {&(0x7f00000004c0)="4f658218c7948ca0189f36da8032b83a687d4aa46e4d1eff39bc9587c4dd9785d0cd80532f78288117a825f7ed46601bc92303fcae60b2f73c56e4fe16f9b2b953bcf298ef3a5c58662d71858c43b530ed5e5a94e00aa9a56dbed904c8a9144e1eb9bf57bd126231e1cb25e0eee54c2902092fd4bc3196963fed82a0c3d45bd9711c22cb9271061b1a7e4fef9faa8df4a20d52ec929ee83d7995c8415c8ad4d9fb13a1e8aa1a98b7fcdc1ae7ba1062cc56f9d143db5aa3a27b30fa37732c2e7faa5b8916214755d04ad90bfe6bd1c1d694d8bc1ba50eec11bfc7d4"}, {&(0x7f00000005c0)="2a681f7ad60f583febc96e98ee8c103947bc8d3a180ce444c55d8379df56b0e56452c9f0a3ef3eb372e02732a64c8747b199dd914055ba6aee3ece0d0f465f327b390645c0d96e836d387fa608aaed3b4d5ab1f653e49a80794bc10389fd4c7b804bfdf899c08912be0a70f24c0b81df383a854be7c10e79316d423805af017ed653"}, {&(0x7f0000000680)="b187bb4ee4f71c6fc6f26dbdb62d370eabfbe25f60ac333cf29543da721836a371bae3cc98157df49dc2cd03ce53c2fa67cdb25c5cff484dc8e108df003a68756bd7f509d69069b794ec4abb1a36a56837f84309d362f689f87aaab7f4fa14c640edd3b2cbb0e3f29f7a27f31420dec20c12c387db7ef78e2fdffd54e7c0230a0d31dfcfe0c93367aced173222aa29f48c1ede00ded98a4d220568d5086740bf03e2bdf7edb0c63825ff18730c83e9a5dd43d9a05541e4cefc9f8eec6d1dfa4f6ab2fb2417319346e3a127da8fcd7d30e5128742a58d42d4d6ef0cbfcfc91bf444455a657e"}, {&(0x7f0000000780)="2d555daaefcade32569a1565d8820323288c76ba889f0863af569b194a0d781385e1b9b93ed1edb354fea6ba88a08da433a489f28e84"}, {&(0x7f00000007c0)="2424647608d12b2938f55ea4951b3351d26dda08eef97c0a977587578b455ae9a22a0bc38a71cdda0b9638cc5e95fc5675819a7795696d803d0098d9d4f5"}, {&(0x7f0000000800)="5a74eb9e88d677ddc7d4b9fe2ae882728369f2b83283b574d600643142a9547e19dea159cee62dd96cf1f7f5120f9cab191c49759274c337c1f02d364c119fa7b695fdbbf471073268"}], 0x0, &(0x7f0000000900)=[@dontfrag={{0x0, 0x29, 0x3e, 0x5}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x21, 0x0, '\x00', [@calipso={0x7, 0x0, {0x1, 0x0, 0x81, 0x6, [0x6, 0x8, 0xd, 0x6, 0x3ff]}}, @calipso={0x7, 0x0, {0x0, 0x0, 0x4, 0xd, [0x3]}}, @hao={0xc9, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, @enc_lim={0x4, 0x1, 0x4}, @pad1, @generic={0xf, 0x0, "1d1945d9e8581dbe73b85df2c08392c722d86bde3a2ea938926ff2e3a484d79225be9d70267a92ce78a5b9415c9c2fdcbc6390784bfb3a05fee9d0af0da272076963d3984dfb8f20cf59e1eadcdc44478411c466929404305feefbb7c6"}, @generic={0x5d, 0x0, "db7a6bbbb83aecf0a19ba3663e1b7f70acd0468378a453262baa7707da75"}, @hao={0xc9, 0x0, @local}]}}}, @tclass={{0x0, 0x29, 0x43, 0x8}}, @rthdr_2292={{0x0, 0x29, 0x39, {0x6c, 0x0, 0x1, 0x4, 0x0, [@empty]}}}, @dontfrag={{0x0, 0x29, 0x3e, 0x96}}, @hoplimit={{0x0, 0x29, 0x34, 0x5b}}, @hoplimit_2292={{0x0, 0x29, 0x8, 0xd}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x2c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x5}, @calipso={0x7, 0x0, {0x3, 0x0, 0x0, 0x1, [0x9, 0x9, 0x7]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x0, {0x2, 0x0, 0xbb, 0x5, [0x101, 0x8]}}]}}}, @flowinfo={{0x0, 0x29, 0xb, 0xb9}}, @flowinfo={{0x0, 0x29, 0xb, 0xe7e2}}]}}, {{&(0x7f0000000b80)={0xa, 0x4e24, 0x1, @remote, 0x100}, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)="241bc26fb0bf24d54fa80c3bce8676d1c969fa4e1e639175a3584f1506225d047c1ea5c60e150288121fbcca9098462acb4c061f3838d4e9c1893b759b21c51d6d1fc3f24a04b3611a5cd00824470a79edb767bb0acf309981154ca1129d0050b782a15e6e86cbc15cc1f3692c2c851720ad6461a6ccb11cd0c4cd"}, {&(0x7f0000000c40)="2880cabccab486a35b5a284cecf4d8020942dac5bf4fd4a974faa57e982c694ccef7c7ea562f28193e38b3ed9260f192f4698b0ae97b0dc62486359ed762fd23961fad93d03c820f416a11654290f6f41613aedca9cd96a42c405d4b6fabf59490835413f3509eddf107a85dc4ae26223c1048a3662b2b8df764cb3d9dd7fbcc4fe84ae78e5d677bcb8fe752a5e3370d12f50f97d1dd85c3887a0a"}, {&(0x7f0000000d00)="c75674249fc9d3cf853b722f73243ca2de6576c28482ce5f7bd3a34e91b270b209057aaf57cba8c7cd850d1308c0e0628d939a56c1c2a96ca376f8ffe4e057fe898c42447eeca0376a1772a3a0eb781f3960998f7186db83494b620f09e0d3b8cfbfc08a47809c5f186ddd94bdc9ce772078ba04fb367782ee7393fdf6ccb22b1058"}, {&(0x7f0000000dc0)="204938f428cf9fa41d8673a14736768e90210f"}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="7f48519e44218feb18dc573499c30a3f8088ecf617da0c9a45b999b34e0be481d452e1074b275f27b0ee104da0565b6fd61b201e754d00174a1599c48041eeef310d2efd3982c202c0ff1a65b0f69577a5c3b22708da861f35739c98089575f1e926dca0bd434daf9658a3b8200dc61d8a3ae5fec74d498e02307bb2cddb7a833e7affe9e114c3e41d614c3b1158c66b5c8bc375827d2f7e69d688"}, {&(0x7f0000000f00)="2fe140047e50034b16e597f915afb2c6855bb2206884db60a70f614490b92d79c5fdf0f53edf26a8a5730feea20615f2a84f0a9f04d5def9c21c697de954e378b583e63b96e46a0409af9791dfbf7cb7f064ddf3721ad1606d7adb530824c151b5f0be9810a298eef82fef8f956717d56caa04ab75d7b565cff44cbfa809516a88d7a5d72315"}], 0x0, &(0x7f0000001040)=[@hoplimit_2292={{0x0, 0x29, 0x8, 0x9}}, @rthdr={{0x0, 0x29, 0x39, {0x3c, 0x0, 0x0, 0x6, 0x0, [@mcast2, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @loopback, @local]}}}, @hoplimit={{0x0, 0x29, 0x34, 0x800}}, @hopopts_2292={{0x0, 0x29, 0x36, {0x2b, 0x0, '\x00', [@calipso={0x7, 0x0, {0x2, 0x0, 0x9, 0x633a, [0x3, 0x8001, 0x5]}}, @generic={0xb3, 0x0, "659c3bf929b72a0f48ee449fdd9563425858125ecc65bddcd152540a2cd9d5c57811914513e3e8c21cbd9d2abd0615de7a"}, @hao={0xc9, 0x0, @mcast1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @pad1, @generic={0x81, 0x0, "2a73d38ac14654a7a4180113a57e8536c46ae33603f668eb3995e674cf313a2cc6b31c3a08d7be60984762677fb45e504d0db2466b7bc7623c2e10f8f9aa310974d4b338dbf87720b53f62d36b3561fce56b54652c859d0f34564ec54fdd1973170e5a3d3ff0f303430afb8605c8a05d4536576bad6724ec635a663e879e65a3cd5966e2c8a782b2cfaec9a2c1e444f6b0a588d5025f02f52515f4c699fe245350b211f66bd1e9e69bce"}]}}}, @flowinfo={{0x0, 0x29, 0xb, 0x7}}]}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0x0, @remote}, 0x0, &(0x7f0000001380)=[{&(0x7f0000001280)="6a4b5f62d5bebc2b772a29ad9e3b34543b26f57f61ece4ec9a3078695be97f1ec2fba118cfd493c2794065d5deabf0da9150c3783e29f2092bab5b9a4ede6423dc7c9fb73cc8658f47d420c5d39e1a1200a4c48927fcb5b52e416bb1487d98cc7a9a64c4d37c"}, {&(0x7f0000001300)="ac31eaba9e44bc4b68cbec5b15065fae52430098f48d602c234ed71f53d77d84c2553ef1eb1f6fbfde66a9492f24184fe93db910fe53921b92e5a9bae22322af9f39fcbba8e46821fe6ea0d7290dd821895f906fb8d9dd22f377e01f8c5e"}], 0x0, &(0x7f00000013c0)=[@dontfrag, @hoplimit={{0x0, 0x29, 0x34, 0x1000}}]}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001400)="53c98bcdcbed18dc10e0bb2a9e7e6eeb794841b7127c604c318b07320b557c11c2e3fa488a6fb9d8b481fcd9791e815161c2de29b68deb82c99a4b68a945ef689984d0a12ede0d3fc6175a3c4853b3576c75e4379fa21694cd3bf48a3ea53c35ce5b0426a3111e39fa5a8a2ee8ccb8c854c417a2554118dab16580909e8fc36465b0347e5559fcd7e7f46273910094c0bb75566d91f3acf609e66038d47a6acf1477a5599ac5dfa794d53e813f95d246e939928f00fb7e0279ca7d4b510e839c93988f3870d383e52e80f48ffb85ec3421fb38e8788f6117e3e6a9d63fe9"}, {&(0x7f0000001500)="1c412cca887e22ff27761a8a67f5da58d1f407ee1aec221229013287f5c4f5c2ff322ebfa7c574db732f7f3f6291b77c62fee11c903df5f684f7c984dcbd5fde7d8c4cb3998128ed8ed03d897602e435af4655aec8f6573e584f553f5ce628d414918cf3584ecfc7bf4af1f17e474e6b8faae596f5780c6319670c4e3ebe85415311b34201897caee0cfc46fcb20d95b234934778cb063fc7c8e358161314677fc2a82eeb5a4ee996d91f8bac83d619f9a046fa54ad85dc3cce0"}, {&(0x7f00000015c0)="6aefa93b931868330c7b"}, {&(0x7f0000001600)="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"}, {&(0x7f0000002600)="a1c0357793e5acdf50cfb7f6c05a1c795ac89ec4f6862a39e2db5f28786c48fb5fa6181a9806c032a28d0d48199f9002cffd415085f841af872f3dd8ada6e8ae4aee1317749b0343ccd95a70b52986289d32882b50a492a44de4c53e7c57e139d5188059b13058d4cb3071ba233c1a50a779f666878f6fb53154f1c4e06590dc54e839ca0226e629c82bb96c766b"}], 0x0, &(0x7f0000002740)=[@tclass={{0x0, 0x29, 0x43, 0x3}}]}}], 0x1, 0x20040040) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100), 0x4) 24.803006064s ago: executing program 3 (id=10775): r0 = socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b2, 0x10, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4b}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x3000, 0x3, 0x2a4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x28, 0x1ffa, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x10000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x2, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c2e, 0x800, 0x6040000, 0x312}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x3b}}}}, 0x32) 24.129982843s ago: executing program 7 (id=10781): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000002", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}}, 0xc804) 23.595359788s ago: executing program 3 (id=10782): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a0104000000003c0000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b002000000900020073797a32000000000900010073797a3100000000140005800800024000000002080001400000003c"], 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x24040840) 23.254192658s ago: executing program 3 (id=10783): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x210a, r0}, 0x0) (fail_nth: 9) 22.630126109s ago: executing program 3 (id=10784): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) fcntl$notify(r0, 0x402, 0x0) 22.414393235s ago: executing program 3 (id=10785): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x80, 0x1a0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000940)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x3, 0x6, "bceab6", 0x313, 0x2f, 0x0, @local, @local, {[@srh={0x11, 0xe, 0x4, 0x7, 0x1, 0x20, 0x133, [@empty, @empty, @local, @loopback, @mcast1, @local, @rand_addr=' \x01\x00']}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xdf, 0x2, [0x7328], "9517594fd6900dec92c992a86b1584e5433b4c58ebbe4ff26f5245530c5da150e812c0f46a0872db645994dc5fad42fef097ad75638a83b228409603c2c356b30634d05f374b56b59382566acadc92640d23dbfbd3df5659db07a7933e1413afdbefe7b3c60126e94b2eb820c44c1c0b32f5605a93f49a66d025e6dcb787d7c3fc2f7f084522ff0371b791aa0a69a8815bacbd8344ec13311db79cf0c207679d4078d9eef4ed8685955b93cd483ebbddf31d587ffe6f5aaeec5a5d3fa53465406b32d886ed34b444a55689434fe6fed2a83b5394a8cf6d10cbcecc3145606a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x14, 0xff], "79b3842e613ca6312437fba04cdd233c8e5d9736a4dd8f8631ccd8b3f2d351592a21381dc76e2398fe02373b51a357bafa9a6ba94e5af458594d7e1a0dc5df9494feb1ff3e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xf], "4c881cf803f6d76746b36dbb953561515b4ef72af512052dca33edda6436fba793f93bbd55310027da24ad689263794a9160d7ddca2c02f4"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4, 0xfc}, 0x2, {0x1, 0x893, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "2ddacbfad888be16b0579d4fc8e6dc4bbe94c99d968ae46ed0bf55a4666706ae9e67c54637501faf06b2a9a4b803f05e018671ddfa34028f47bbed9f3885a574da48f56629ad9abfca5de61e731150b9009cd1765fc2a6929b1c62279254095dc641075941bddee670bf4569ae1bf19722337fc0854ac77f75bf4e1ee57806f9f387fae943d33f18e3d0e64f06662027af470d5cfc7435f4f6132ae1db089668c509cace067e4dd35dafa5b062d2e81b0443268125eefb25d3a09d75e9fb57a53dfd23f3839294f42536570f4462a4de35db1ea8c4ff983658e0151b6e0da69d54d5e0da646b18612729dfa49deb3b985f909e"}}}}}}, 0x34d) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0xe4}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r8 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r10, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 12.462684477s ago: executing program 7 (id=10787): sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x78, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x10000}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x800}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048884}, 0x40000) syz_emit_ethernet(0x7e, &(0x7f0000000880)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "6b88ef", 0x48, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "bdd7c3", 0x0, 0x33, 0x0, @loopback, @local, [@dstopts={0x29, 0x1, '\x00', [@calipso={0x7, 0x8, {0x2, 0x0, 0xb, 0x4}}]}]}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x6, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000004c0)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e2e000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0x4}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r3, 0x40189429, &(0x7f0000000000)={0x1, 0x8, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001a00010000000000e2ffffff80"], 0x1c}}, 0x8010) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000100)="0f8bd60d1c1c2e0f2226650f01c536640f08660fc7b40080ec66f20f2a88206266b8600000000f23d00f21f86635100000050f23f8b842000f00d00f01ca640f015c0a66b98104000066b80000000066ba000000800f30", 0x56}], 0x1, 0x18, 0x0, 0xfffffffffffffeb2) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12.426514555s ago: executing program 9 (id=10789): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x28, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x9}, @void, @eth={@remote, @empty, @void, {@mpls_uc={0x8847, {[{0xffffb, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}], @ipv6=@gre_packet={0x6, 0x6, "e943ff", 0x44, 0x2f, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[], {{}, {0x1, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x1, 0x1, 0xe, 0x1, 0x0, 0x1, 0x1, 0x4}, 0x1, {0xffffffff}}}, {0x8, 0x22eb, 0x0, {{0x3, 0x2, 0x7, 0x2, 0x0, 0x2, 0x3, 0x63}, 0x2, {0x715, 0x1, 0x2, 0x13, 0x0, 0x0, 0x2, 0x0, 0x1}}}}}}}}}}}, 0x8a) dup(r0) read$FUSE(r0, &(0x7f0000002180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r2, 0x0, 0x40000000, 0x0) syz_open_dev$usbmon(0x0, 0x6, 0x200) r3 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0xf, 0x1, 0x5, 0x8000000000000000, 0x7fffffffffffffff, r4}) ptrace$setsig(0x4203, r5, 0x8, &(0x7f0000000440)={0x16, 0x3, 0x1}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) readv(r6, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) r7 = socket(0x10, 0x3, 0x0) r8 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x582, 0x4c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0x5, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x7, 0x20, 0x8c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4000, 0x4, 0x1d, 0x7}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x1, 0xff, 0x23}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x307, 0x0, 0x4, 0x0, 0x7, 0x81}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0xb, 0x4, {0x8, 0x25, 0x1, 0x0, 0x0, 0x40, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x4, 0x1ccc, 0x5}, @as_header={0x10, 0x24, 0x1, 0x2, 0x1, 0x0, 0x4, 0x8, 0xb8, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x40, 0x6, 0x3, {0x8, 0x25, 0x1, 0x82, 0x3, 0xf3, 0x6}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000080)={0x0, 0xb, 0x2, 'm5'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, 0x0, &(0x7f0000001880)={0x84, &(0x7f00000008c0)=ANY=[@ANYBLOB="00016b0000008039b9d110c648e27e788695d724a3d21916aaf3ef79abad8928f4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) 11.976946761s ago: executing program 7 (id=10790): fsopen(0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x40010) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) recvfrom(r5, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x5422, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) syz_genetlink_get_family_id$team(0x0, r7) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRES8, @ANYRES32=r0, @ANYRESDEC=r4, @ANYBLOB="7f31e8dab1a9977cd86ee94e0fe500c8a4fbd505ffb584c2063c2210093c8d7ca7e3510cef422c82c8fca5b0c3fa041105872dd0d9af515595cdef36430473d3dabea1ec6e6ae4f2bd762570a21967f48e6874214750b24f339a8c8317c7b7a777db21e54fe688892f3d8eced2d32a1c1ee3e389d909d5bab7235f15d77772896ac5faec0aacef09c0780cac18ba39d4d9a389acfe901546b640f9f23eef106af6fa26fe0cdf401900ac38db352e9617323aacb949a63f48a19f88f83cbd3ea3e93e3a8e9c6fafc88cff6d0ba2bb6d9d65e5a6d5430de120cca1c6f4350d56ec85e298d1e560e982a8", @ANYRESHEX=r7, @ANYRES8=r1, @ANYRESDEC=r2], 0x8, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r10, 0x4008ae9c, &(0x7f00000000c0)={0xc, 0x0, 0x5a}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000019000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x79, &(0x7f00000001c0)=[@cr4={0x1, 0x8045}], 0x1) 11.854678296s ago: executing program 4 (id=10792): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) openat$mixer(0xffffffffffffff9c, 0x0, 0x234100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x42142, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) unshare(0x22020600) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x5, 0x36, 0x0, 0x0) (async) r1 = syz_usb_connect(0x5, 0x36, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) unshare(0x600) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(0xffffffffffffffff, 0x2219, 0x3c5c, 0x16, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x28, 0x0, r2, 0x0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x2, 0xc005, 0x1}) (async) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x28, 0x0, r2, 0x0, &(0x7f0000002300)={0x0, 0x0, 0x0}, 0x2, 0xc005, 0x1}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000c7e000/0x3000)=nil, 0x400000, 0x2, 0x2}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3a5140, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x3a5140, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace(0x10, r3) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) get_mempolicy(0x0, 0xfffffffffffffffd, 0x2000008001, &(0x7f0000ffd000/0x1000)=nil, 0x2) (async) get_mempolicy(0x0, 0xfffffffffffffffd, 0x2000008001, &(0x7f0000ffd000/0x1000)=nil, 0x2) exit(0x20000000000051a) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000400)) syz_emit_ethernet(0x0, 0x0, 0x0) tkill(r3, 0x12) (async) tkill(r3, 0x12) wait4(0x0, 0x0, 0x8, 0x0) 11.751641385s ago: executing program 0 (id=10794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000000000002000002e0000002000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002"], 0x210) 11.654814486s ago: executing program 0 (id=10795): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) fcntl$notify(r0, 0x402, 0x0) 11.636751871s ago: executing program 9 (id=10796): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000206050000000000000000000000000005000400011d00000900020073797a320000000004"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.kill\x00', 0x275a, 0x0) mq_open(0x0, 0x2, 0x8, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010700, 0x0, 0x2, 0x800080000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x10]}}) 11.629518436s ago: executing program 0 (id=10797): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001500)=""/4097, 0x1001}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000400)=""/80, 0x50}], 0x11}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x20000, 0x0) 11.543464554s ago: executing program 0 (id=10798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x2, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 11.389911827s ago: executing program 9 (id=10799): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001800)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r5, &(0x7f0000000100), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000080)='maps\x00') read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000003580)=[{&(0x7f0000002180)=""/123, 0x7b}, {&(0x7f0000002200)=""/208, 0xd0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/153, 0x99}, {&(0x7f0000002500)=""/3, 0x3}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/37, 0x25}], 0x8, 0x800, 0xba6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003600)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r9, @ANYBLOB="c52cf8ba439d67bcb4699a33e1ec272908e5d7a2fe3844f4dc725e811ab52bd64b744ae12d2a479b19fb6ea5ed421d3f5ff671eac5c8dcf99310aaef30dbca9c882501a42169e1f786de3fd01da3d1d1ec56a7759b4cf38fba5e10cf83ef0c2f1e776a16ac53462d03d8ecd8d446517a1266046b2351dca5ac514e58a47396e8"], 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x12, 0x81, 0x0, @empty}}}}}, 0x0) ftruncate(0xffffffffffffffff, 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 10.332222453s ago: executing program 7 (id=10800): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(0xffffffffffffffff, 0x5) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r0, &(0x7f0000000400)='PASV\r\n', 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xfff2, 0xf}, {0x0, 0x10}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef0000000000000000080038000100040004000d000300000000800000000000000000000007000000000000000800000000004000050000000000000002"], 0x78) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) syz_usb_connect(0x5, 0x27, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x9, 0x22, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x10, 0x1, 0x8, 0xa2}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', r11, 0x29, 0x7, 0x60, 0x2, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x40, 0x8000, 0x1, 0x8}}) r12 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) write(r12, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) 8.787684097s ago: executing program 4 (id=10801): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$media(&(0x7f0000000380), 0x13, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = syz_ublk_setup_io_uring(0x72a7, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x2, 0x31a}, &(0x7f0000000400)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x21e}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1c, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r5, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='comm\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r9 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_DEV_SETUP(r9, 0x405c5503, &(0x7f0000000000)={{0x100}, 'syz1\x00', 0x19}) 6.93068403s ago: executing program 39 (id=10785): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/image_size', 0x80, 0x1a0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x40000, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x6) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x1000)=nil, 0x1000, &(0x7f0000000080)='\x00\x00\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000940)={@val={0x1c, 0xf5}, @val, @mpls={[{}], @ipv6=@gre_packet={0x3, 0x6, "bceab6", 0x313, 0x2f, 0x0, @local, @local, {[@srh={0x11, 0xe, 0x4, 0x7, 0x1, 0x20, 0x133, [@empty, @empty, @local, @loopback, @mcast1, @local, @rand_addr=' \x01\x00']}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xdf, 0x2, [0x7328], "9517594fd6900dec92c992a86b1584e5433b4c58ebbe4ff26f5245530c5da150e812c0f46a0872db645994dc5fad42fef097ad75638a83b228409603c2c356b30634d05f374b56b59382566acadc92640d23dbfbd3df5659db07a7933e1413afdbefe7b3c60126e94b2eb820c44c1c0b32f5605a93f49a66d025e6dcb787d7c3fc2f7f084522ff0371b791aa0a69a8815bacbd8344ec13311db79cf0c207679d4078d9eef4ed8685955b93cd483ebbddf31d587ffe6f5aaeec5a5d3fa53465406b32d886ed34b444a55689434fe6fed2a83b5394a8cf6d10cbcecc3145606a"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x14, 0xff], "79b3842e613ca6312437fba04cdd233c8e5d9736a4dd8f8631ccd8b3f2d351592a21381dc76e2398fe02373b51a357bafa9a6ba94e5af458594d7e1a0dc5df9494feb1ff3e"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0xf], "4c881cf803f6d76746b36dbb953561515b4ef72af512052dca33edda6436fba793f93bbd55310027da24ad689263794a9160d7ddca2c02f4"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0x0, 0x0, 0x1, 0x0, 0x5, 0x6}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x4, 0x2, 0x2, 0x3, 0x1, 0x1, 0x4, 0xfc}, 0x2, {0x1, 0x893, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x0, "2ddacbfad888be16b0579d4fc8e6dc4bbe94c99d968ae46ed0bf55a4666706ae9e67c54637501faf06b2a9a4b803f05e018671ddfa34028f47bbed9f3885a574da48f56629ad9abfca5de61e731150b9009cd1765fc2a6929b1c62279254095dc641075941bddee670bf4569ae1bf19722337fc0854ac77f75bf4e1ee57806f9f387fae943d33f18e3d0e64f06662027af470d5cfc7435f4f6132ae1db089668c509cace067e4dd35dafa5b062d2e81b0443268125eefb25d3a09d75e9fb57a53dfd23f3839294f42536570f4462a4de35db1ea8c4ff983658e0151b6e0da69d54d5e0da646b18612729dfa49deb3b985f909e"}}}}}}, 0x34d) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x3, 0x0, 0xe, 0x0, 0x949, 0x9, 0x8, 0x2, 0x3}, 0x0) r6 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r7, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0xe4}}, './file0\x00'}) landlock_restrict_self(0xffffffffffffffff, 0x5) r8 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) r9 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r10, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 1.933873917s ago: executing program 0 (id=10803): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x5bc, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30bc, 0x0, 0x2, 0x15d}, &(0x7f00000002c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x2a, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x6) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x8000, 0x1, 0x257}, &(0x7f0000000680)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x1, 0x2000, 0x10000004, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe0a4, 0x80000, 0x6, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4c3, 0x8000, 0x0, 0x8080362, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x364}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x7b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x10000000}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r9 = socket(0x15, 0x5, 0x0) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x4e22, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) 1.906762072s ago: executing program 9 (id=10804): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (fail_nth: 26) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x240c0888}, 0x24048080) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) 1.823606024s ago: executing program 7 (id=10805): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) userfaultfd(0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0185647, &(0x7f0000000100)={0xf00000, 0x7, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xf0f027, 0x8000000, '\x00', @string=0x0}}) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000000, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc06, {0x0, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x400c898) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000104040000010000005565e7021f", @ANYRES32=0x0, @ANYBLOB="03050000000002000800250001000000050010"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$update(0x2, r7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.76275898s ago: executing program 4 (id=10806): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe000005000000000800040001000000", 0x24) 1.728117378s ago: executing program 0 (id=10807): r0 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9, 0x7}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x2) socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0x0, 0xffffffffffffffff}}, './file0\x00'}) fsync(r4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) syz_open_pts(r5, 0xa00) sendfile(r3, r5, 0x0, 0xffffffff004) r6 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000280)={0x0, "fc6dba8bcfba2a5dbad411fcb75ea37166c571aea873c30d487e18cd1e9c4f532e8741ceec95bc9c1c9a0dafb814ce165192c785558efa30545eca9c48642ad7", 0x2f}, 0x48, 0xfffffffffffffffb) keyctl$search(0xa, r6, &(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x0}, 0xfffffffffffffffa) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000400)="d37eeac0525e3318a7c2b75127bd7fdeae2ad6496407321cf7723b29333b0c941aa9d6c5a8196b1b31a1cef77d41603e6516cacb4f09b0015e4e09a0feb295540806a9b3da811e812ed37944f59613913b4b82aa4e518dac5a294884b66bdea5a079ae1dbd8c86b3510d39dc3990b8c8ba8432048f87af368c0256c39b8677f4da561d5b02aa2c42f35b46358fd62ff31646c0b756671f8f32998a187d8bb1c621578e132e9b440fe8fd6ffefe47592b6ff93c310088949ca4f67b194c0f71490fc6271be364b70bca4a83f9d978370ac894c32261c9eecf6696c605755e4a3143c26debe86fcadf8d8d47545f4e876efc73d96399", 0xf5, r6) read$FUSE(r5, &(0x7f0000000a80)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000080)={0xd, 0x1, 0x4, "bc24b09446bbe8d25d0feecea9ec5d3df11d4e79462d73cacab683064cee65de", 0x34524742}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e1550"]) 1.485949626s ago: executing program 4 (id=10808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newpolicy={0xfc, 0x13, 0x101, 0x0, 0x0, {{@in6=@remote, @in=@broadcast, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0xc}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4d4, 0x2b}, 0x6, @in=@rand_addr=0x64010101, 0x0, 0x5, 0x1, 0x3, 0x80ffffff, 0x2, 0x6}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 1.333932582s ago: executing program 9 (id=10809): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x6, 0x0, 0x0, 0x41100, 0x9}, 0x94) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket(0x10, 0x803, 0x0) close(0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20a7d52d1a3e1087}, 0x30000010) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000280)={{0x9000, 0x0, 0xc, 0x6, 0x4, 0xa, 0x3, 0xe, 0x0, 0x1, 0x3, 0x3}, {0x2, 0x1000, 0xe, 0x13, 0x1, 0x8, 0x3, 0x8, 0x0, 0x46, 0x6}, {0x1, 0x315a4c100da1da58, 0x4, 0xf, 0x5, 0xff, 0xc6, 0x6, 0x3, 0x6, 0x1, 0x3}, {0x3000, 0x4000, 0x1a, 0xc, 0x7f, 0x6, 0x8, 0x80, 0x9, 0x2, 0xf, 0x6}, {0x9000, 0x8000000, 0x0, 0xd, 0x59, 0x2d, 0x5, 0xc, 0xfc, 0x0, 0x3, 0xe5}, {0x2, 0x8092000, 0x8, 0xbd, 0x6, 0x7, 0x12, 0x1, 0xbf, 0x18, 0x2, 0x4}, {0x1, 0x1, 0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x4, 0x0, 0x80, 0x9}, {0x26000, 0xffff, 0x10, 0x4, 0x3, 0x3, 0x0, 0xf9, 0x1, 0xfc, 0x0, 0xfe}, {0x4, 0xedd8}, {0xffff1000, 0x17}, 0x4004000f, 0x0, 0xd000, 0x100, 0x100000002, 0x0, 0xdddd1000, [0x5, 0x3, 0x4000000000000009, 0x7]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) socket$inet(0x2, 0x1, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) socket$nl_sock_diag(0x10, 0x3, 0x4) 1.204332955s ago: executing program 4 (id=10810): r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xbf) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002fc0)="a6", 0x5dc}], 0x2b}}], 0x5, 0x4040000) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) 644.54123ms ago: executing program 4 (id=10811): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getpeername$netlink(r1, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = syz_open_dev$sg(&(0x7f0000000480), 0xfffffffffffffffa, 0x1841) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000500)="9b7385220700000000000000e57c489b51b14b7aea6ef45d0c085cb7df42ccf49eabcf03d0e97bb857dbd8d553a187d0", 0x30}, {&(0x7f0000000540)="53000000d073b0f3347edc854b4bc4db1e2e1302af076bb6c9909a18e554d5ecc9db5942dac6a182a0efc18289ba2d68f7e5121dc8db62a39389242ce69529ab9bb7aad26d928b530b9345c2ccce127c1405386bab9074b6", 0x58}], 0x2) r3 = socket(0x400000000010, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000002280)="c4", 0x1}], 0x1}}], 0x1, 0x4050000) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) socket$key(0xf, 0x3, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) fsmount(r5, 0x1, 0x0) accept4$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800) socket$unix(0x1, 0x2, 0x0) syz_open_dev$evdev(0x0, 0xff, 0x0) ppoll(&(0x7f0000008040)=[{0xffffffffffffffff, 0x90}], 0x1, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff", @ANYRES8], 0x0) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f00ffffff03c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c001f4002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) writev(0xffffffffffffffff, 0x0, 0x0) 27.320039ms ago: executing program 7 (id=10812): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x10, 0x6, 0x0, 0x8f}, 0x3, 0x2}, [{0x2, 0x765, 0x800, 0x1, 0x528, 0x3}, {0x9, 0xe237, 0x1, 0x80000003, 0x8, 0x25ad}, {0x1, 0x9, 0x9, 0x2, 0x2, 0x2}, {0x8000, 0xd7, 0x9, 0x2, 0xec, 0x3}, {0x4, 0x9, 0x100, 0xfffffff7, 0x4, 0x7}, {0x5, 0x0, 0xfffffc00, 0x3, 0x5, 0x4}, {0x7, 0x81, 0x5a, 0x2, 0x5, 0x8}, {0xffffff11, 0x5, 0x5, 0x7ff, 0x6, 0x1}, {0x3, 0x6, 0x400, 0x0, 0x5, 0x200}, {0x80, 0x4, 0x61f, 0x1000, 0x5eb, 0xfc}, {0x7, 0x7b9b, 0xfffdfff9, 0x3, 0x1, 0xb}, {0xeef3, 0x101, 0x9, 0x8, 0x4, 0xb2}, {0x3, 0xf82, 0x81, 0x0, 0xa, 0x4000}, {0x5, 0x101, 0x5, 0x3, 0x20000000, 0xfffffeb0}, {0x400, 0xb, 0x4, 0x7ff, 0x20, 0x3}, {0x1, 0xa, 0x7, 0xd, 0x7, 0x13f9}, {0x7, 0xeedf, 0xffffffff, 0x0, 0x2, 0x7ff}, {0x6, 0x8, 0xc, 0xb9d, 0xfffffff9, 0x8}, {0x5, 0x9, 0x40, 0x8, 0x4, 0x2}, {0x9, 0x58ce, 0x9, 0xc3e1, 0x9, 0xffffffff}, {0x5, 0x160d0ee, 0x3, 0x0, 0x7fff, 0x8}, {0xffffffff, 0xb43a, 0x7, 0x2, 0x6, 0x6}, {0x5, 0x8, 0x2, 0x5, 0x9, 0x8}, {0xfffffbff, 0xdb87, 0x80e, 0x10ba, 0x3, 0x211d}, {0x200, 0x5, 0x4, 0xffffff91, 0x1, 0x7}, {0x40, 0x60b, 0x5, 0x7ff, 0x3241, 0xffffffff}, {0x8001, 0x0, 0x2, 0xc34, 0x6, 0x1}, {0x1, 0x0, 0x5, 0xe, 0x0, 0x3}, {0x8, 0x4, 0x782, 0x7, 0x8, 0xfffffffa}, {0x8, 0x1, 0xc00, 0x3, 0x4, 0x8f24}, {0x8000, 0x0, 0x6e73, 0xa80, 0x6}, {0x80000001, 0x7ff, 0x5, 0x5, 0xe4, 0x5}, {0x8, 0xffff, 0xc, 0x8001, 0xff, 0xfffffff8}, {0x37, 0x4, 0x8, 0x2, 0x2, 0x800}, {0x3, 0x400, 0xffffffff, 0x3263, 0x1e8a, 0x19ee}, {0x800, 0x2, 0x7, 0x81, 0x7, 0x1ff}, {0x6, 0x0, 0x80000000, 0x4, 0x6, 0x5}, {0x0, 0x8, 0x3, 0x8, 0x18f573a, 0x1}, {0x81, 0xca, 0x8, 0xca14, 0x1, 0x10001}, {0x401, 0x64a1c7de, 0x9, 0x2, 0x17c, 0x8}, {0x5, 0x5e2, 0x7, 0x3d, 0x8, 0x9}, {0x8000, 0x57, 0x10001, 0x1, 0x8000, 0x4}, {0x201, 0x7, 0x5dc2918a, 0x4, 0x81, 0x5}, {0xd, 0x2, 0x3, 0x2, 0x1, 0xcf}, {0x8, 0xdf3, 0x2, 0x7ffffffc, 0x3}, {0xfffffffd, 0x5, 0xff, 0xd7c, 0xffffff7c, 0x80e}, {0xffffffff, 0x40, 0x2, 0x0, 0x401, 0x21}, {0x5, 0x6612, 0xfffffff8, 0x1, 0x2099, 0x1}, {0x241, 0x1, 0x5, 0x5, 0xfffffffd, 0x5}, {0xfffffff9, 0x5, 0x9, 0x4, 0x47, 0x2}, {0xb5b, 0x81, 0xc4a8, 0x2, 0x5, 0xffffff01}, {0x7, 0x1fe, 0xfffffffe, 0x7a5e, 0x6, 0x1}, {0x2, 0x3, 0x3000000, 0x0, 0x0, 0xa}, {0xffffff79, 0xd2, 0x5, 0x4d, 0x0, 0x9997}, {0x6, 0x8, 0x100, 0xfffff8c0, 0x5, 0xfffffffa}, {0x5, 0x2, 0x5f, 0x7ff, 0x6, 0x2}, {0x0, 0x7ff, 0x7, 0x4, 0x400, 0x2}, {0x24000, 0x0, 0x3, 0x8, 0x100, 0x7}, {0x5, 0x9, 0x101, 0x9, 0x38, 0x6e1e}, {0xe, 0x8001, 0x2, 0x3, 0x9, 0xfffffff8}, {0x9, 0x4, 0x9a87, 0x3}, {0x80000000, 0x0, 0x8, 0x7, 0x4, 0x2}, {0x4500000, 0x8, 0x7, 0x458, 0x0, 0x7fff}, {0x0, 0x2, 0x65e, 0x4, 0x9, 0x8}, {0x1, 0x1, 0x1, 0x757, 0x2, 0xf14}, {0x8001, 0x31b, 0x9, 0x6, 0xdd2, 0x4}, {0xac1, 0xa1, 0xfffffffd, 0x2, 0xb, 0xb2}, {0x6, 0x0, 0x9, 0x7fff, 0x2c, 0xe07}, {0xffffffff, 0x80000001, 0x7, 0xfffff801, 0xd, 0xffffffff}, {0x2, 0x8, 0x2, 0x1, 0x4fb7e326, 0x14}, {0x80, 0xe, 0x6, 0xe, 0x3, 0xb28e}, {0x0, 0xf4, 0x3ecf, 0x3, 0x7, 0x6}, {0x1, 0xde, 0x8, 0x9, 0x8, 0x7}, {0x101, 0x8, 0x5, 0x0, 0x7, 0x5}, {0x80, 0x10, 0x1000, 0x401, 0x6, 0x8001}, {0x7, 0x9, 0x3, 0xb, 0x8, 0x2}, {0x7fffffff, 0xc22, 0x0, 0x8, 0xfff, 0x1fc}, {0x4, 0x2, 0x7, 0x63, 0x5, 0xff}, {0x401, 0x8, 0x7ec, 0xffffff0d, 0xffff3ba8, 0xc4eb}, {0x9, 0x1, 0x7, 0x0, 0x40, 0x2}, {0x3, 0x7, 0x7f, 0x7f, 0xf, 0x3}, {0x1000, 0x7, 0x1, 0x1, 0x0, 0x4c9c}, {0x2, 0x65cc00, 0x6, 0x2, 0x7, 0x9}, {0x6, 0x6, 0x9, 0x6, 0x7, 0xe}, {0x46, 0x9, 0xfffffffd, 0x1, 0x3, 0x9}, {0x9, 0xb0d, 0x5, 0x6, 0x5, 0x2}, {0x8001, 0x244, 0x2, 0x7, 0x10, 0x5}, {0x1c00, 0x0, 0x0, 0xdfffffe6, 0x3b1, 0x4}, {0x8, 0x5, 0x6c1, 0x3, 0xffffffdc, 0x1b0}, {0xd4d1, 0x9, 0x3, 0x7, 0xff}, {0x6, 0x663, 0x8, 0x6, 0xffffffff, 0xe}, {0x6, 0x6, 0x87, 0x8, 0x7, 0x5}, {0x1, 0xc0000000, 0x80000000, 0x6, 0x4, 0x5}, {0x0, 0xfffffffb, 0x8, 0x0, 0x800, 0x7}, {0x8, 0x80, 0xfffffffe, 0x4, 0x80000000, 0xfffffeff}, {0x6a6, 0xb1b, 0x8, 0x9, 0x66111b0d, 0xfff}, {0x2cb, 0x1000b5, 0x7, 0x2, 0x0, 0x200}, {0x8, 0x81, 0xf24d, 0x9, 0x19567f98, 0x8001}, {0x6, 0x0, 0x1, 0x6, 0x5, 0x7}, {0x3, 0x2, 0x5fe, 0x5, 0xc05, 0x1}, {0x7, 0x0, 0x6, 0x6, 0x200, 0x2}, {0x10, 0x3, 0x9, 0xffff, 0x5, 0x3}, {0xffff, 0x1, 0xfffffffe, 0x104, 0x1e, 0xfff}, {0x40, 0xfff, 0x7, 0x0, 0x10, 0x7f}, {0x1, 0x1cd, 0x4, 0xfffff62d, 0x0, 0x4}, {0x0, 0x7, 0x9, 0xe, 0x80000000, 0x800}, {0x4, 0x8, 0x0, 0x12, 0x6, 0x9}, {0x1fc, 0x0, 0x4, 0xffffffff, 0xa9, 0xfffffffe}, {0x7fff, 0x9, 0x8001, 0x5, 0x800, 0x8}, {0x5, 0xb382, 0x3, 0xffffffff, 0x44, 0x5}, {0x81, 0x2, 0x7, 0x200, 0x0, 0x1800}, {0x2, 0x4, 0x7f, 0x4, 0x0, 0x7}, {0x4, 0x1, 0x400, 0x9, 0x8, 0x3}, {0x7, 0xb, 0x800, 0x2, 0x0, 0x2}, {0x100, 0x0, 0x6, 0x0, 0x1b5, 0x4}, {0x7, 0xb19, 0x4, 0x8, 0x3, 0xfb}, {0x5, 0x1, 0x2, 0xfffffffe, 0x5, 0xfffffffb}, {0x9, 0x5, 0x42a, 0x15, 0x1243, 0x2}, {0x3, 0x7, 0x3, 0x8001, 0xd, 0xdb90}, {0x1, 0xed6, 0x7973, 0xb, 0x9, 0x6}, {0x5e9b300c, 0x10000, 0x7f, 0x7, 0x1c0f76f1, 0x196}, {0x11, 0xab1f, 0x1, 0x2, 0x0, 0xa7}, {0x7ff, 0x6, 0x6, 0x2c67612f, 0x9, 0xc3}, {0x8, 0x3e5, 0xfffffffb, 0xbe, 0x3, 0xffffffff}, {0x36cf, 0x678, 0x200, 0x1, 0x2, 0x7}, {0x4, 0x3, 0xb882, 0xfffffbff, 0x6cf0fe36, 0x1ff}, {0x5, 0xffff, 0xeee1, 0x8, 0x3e6, 0x85c4}, {0x6, 0x10, 0x8, 0x1, 0x40, 0x1}], [{0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x3, 0xe1dcf326175bb8c1}, {0x5, 0x1}, {0x3d37fa9ab3c03abe, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x2}, {0x2}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x1}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x2, 0x1}, {0x5}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2ed0ff2de3ef916, 0x1}, {0x1, 0x3}, {}, {0x5}, {0x2}, {0x3}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x9ca8d040297a0a22}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5a421c3d54d9c6f2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x3}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x4}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0) 0s ago: executing program 9 (id=10813): openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001800)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) r4 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x242, 0x0) write$dsp(r5, &(0x7f0000000100), 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r6 = syz_open_procfs(r4, &(0x7f0000000080)='maps\x00') read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x11, 0xffffffffffffffff, 0x0) preadv(r5, &(0x7f0000003580)=[{&(0x7f0000002180)=""/123, 0x7b}, {&(0x7f0000002200)=""/208, 0xd0}, {&(0x7f0000002300)=""/235, 0xeb}, {&(0x7f0000002400)=""/48, 0x30}, {&(0x7f0000002440)=""/153, 0x99}, {&(0x7f0000002500)=""/3, 0x3}, {&(0x7f0000002540)=""/4096, 0x1000}, {&(0x7f0000003540)=""/37, 0x25}], 0x8, 0x800, 0xba6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003600)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r9, @ANYBLOB="c52cf8ba439d67bcb4699a33e1ec272908e5d7a2fe3844f4dc725e811ab52bd64b744ae12d2a479b19fb6ea5ed421d3f5ff671eac5c8dcf99310aaef30dbca9c882501a42169e1f786de3fd01da3d1d1ec56a7759b4cf38fba5e10cf83ef0c2f1e776a16ac53462d03d8ecd8d446517a1266046b2351dca5ac514e58a47396e8"], 0x3c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x12, 0x81, 0x0, @empty}}}}}, 0x0) ftruncate(0xffffffffffffffff, 0x3) write(0xffffffffffffffff, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) kernel console output (not intermixed with test programs): xA has invalid maxpacket 64, setting to 8 [ 2199.872920][T24853] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xE is Bulk; changing to Interrupt [ 2199.879693][T24853] usb 1-1: string descriptor 0 read error: -22 [ 2199.879849][T24853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2199.963312][ T7431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2199.963466][ T7431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2199.997999][T24853] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2200.081392][ T6396] net_ratelimit: 21 callbacks suppressed [ 2200.081412][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.230310][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.293524][T24853] usb 1-1: USB disconnect, device number 95 [ 2200.331551][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.444451][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.502952][T19912] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 2200.622168][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.671218][T19912] usb 10-1: Using ep0 maxpacket: 8 [ 2200.672057][T19912] usb 10-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 2200.673211][T19912] usb 10-1: config 0 interface 0 altsetting 88 endpoint 0x2 has an invalid bInterval 135, changing to 11 [ 2200.673246][T19912] usb 10-1: config 0 interface 0 altsetting 88 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2200.673301][T19912] usb 10-1: config 0 interface 0 has no altsetting 0 [ 2200.673337][T19912] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.676464][T19912] usb 10-1: config 0 descriptor?? [ 2200.746807][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.851372][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2200.981679][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2201.095133][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2201.205640][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2201.951385][ T7466] netlink: 188 bytes leftover after parsing attributes in process `syz.9.10391'. [ 2201.982358][ T7466] fuse: Bad value for 'user_id' [ 2201.982465][ T7466] fuse: Bad value for 'user_id' [ 2202.269959][ T7467] logitech-hidpp-device 0005:046D:B012.00A3: received hid++ report of bad size (3) [ 2202.627151][T19905] logitech-hidpp-device 0005:046D:B012.00A3: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 2203.068199][ T7468] fido_id[7468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2203.687427][ T7476] netlink: 'syz.3.10394': attribute type 4 has an invalid length. [ 2204.300543][ T7483] ip6tnl3: entered allmulticast mode [ 2204.358399][ T7485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2204.358432][ T7485] IPv6: NLM_F_CREATE should be set when creating new route [ 2204.358482][ T7485] IPv6: NLM_F_CREATE should be set when creating new route [ 2204.358508][ T7485] IPv6: NLM_F_CREATE should be set when creating new route [ 2205.091949][T19912] usbhid 10-1:0.0: can't add hid device: -71 [ 2205.092066][T19912] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 2205.097395][ T5105] net_ratelimit: 28 callbacks suppressed [ 2205.097419][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.136504][T19912] usb 10-1: USB disconnect, device number 61 [ 2205.201772][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.311849][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.613102][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.636973][ T31] audit: type=1800 audit(1790912539.584:6137): pid=7504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.10404" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 2205.731685][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.842783][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2205.953495][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.180868][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10410'. [ 2206.265305][ T7519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2206.338192][ T7526] FAULT_INJECTION: forcing a failure. [ 2206.338192][ T7526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2206.338232][ T7526] CPU: 0 UID: 0 PID: 7526 Comm: syz.7.10412 Tainted: G L syzkaller #0 PREEMPT(full) [ 2206.338264][ T7526] Tainted: [L]=SOFTLOCKUP [ 2206.338276][ T7526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2206.338290][ T7526] Call Trace: [ 2206.338299][ T7526] [ 2206.338309][ T7526] dump_stack_lvl+0xe8/0x150 [ 2206.338347][ T7526] should_fail_ex+0x410/0x560 [ 2206.338380][ T7526] _copy_from_user+0x2d/0xb0 [ 2206.338413][ T7526] ___sys_sendmsg+0x1c6/0x360 [ 2206.338446][ T7526] ? __lock_acquire+0x747/0x2de0 [ 2206.338476][ T7526] ? __pfx____sys_sendmsg+0x10/0x10 [ 2206.338507][ T7526] ? __lock_acquire+0x747/0x2de0 [ 2206.338536][ T7526] ? kstrtouint+0x6e/0xe0 [ 2206.338614][ T7526] __sys_sendmmsg+0x273/0x4d0 [ 2206.338652][ T7526] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2206.338692][ T7526] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2206.338738][ T7526] ? ksys_write+0x242/0x270 [ 2206.338763][ T7526] ? __pfx_ksys_write+0x10/0x10 [ 2206.338789][ T7526] __x64_sys_sendmmsg+0xa0/0xc0 [ 2206.338824][ T7526] do_syscall_64+0x166/0x520 [ 2206.338855][ T7526] ? trace_irq_disable+0x3b/0x140 [ 2206.338879][ T7526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.338900][ T7526] ? clear_bhb_loop+0x70/0xc0 [ 2206.338927][ T7526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2206.338951][ T7526] RIP: 0033:0x7fc81b39e159 [ 2206.338972][ T7526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2206.338991][ T7526] RSP: 002b:00007fc81c2bf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2206.339016][ T7526] RAX: ffffffffffffffda RBX: 00007fc81b625fa0 RCX: 00007fc81b39e159 [ 2206.339033][ T7526] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003 [ 2206.339049][ T7526] RBP: 00007fc81c2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 2206.339064][ T7526] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000001 [ 2206.339078][ T7526] R13: 00007fc81b626038 R14: 00007fc81b625fa0 R15: 00007fc81b74fa48 [ 2206.339113][ T7526] [ 2206.341864][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.469873][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2206.830845][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2207.139438][ T7545] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10419'. [ 2208.270033][ T7572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2208.479357][ T7576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.490126][ T7576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.737324][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10434'. [ 2208.737358][ T7584] netlink: 'syz.9.10434': attribute type 1 has an invalid length. [ 2208.847831][ T7584] netlink: 'syz.9.10434': attribute type 39 has an invalid length. [ 2209.548757][ T31] audit: type=1326 audit(1790912543.494:6138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7578 comm="syz.3.10433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1da19e159 code=0x0 [ 2210.031233][ T7608] syz.0.10443: vmalloc error: size 16384, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2210.031368][ T7608] CPU: 0 UID: 0 PID: 7608 Comm: syz.0.10443 Tainted: G L syzkaller #0 PREEMPT(full) [ 2210.031402][ T7608] Tainted: [L]=SOFTLOCKUP [ 2210.031409][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2210.031421][ T7608] Call Trace: [ 2210.031431][ T7608] [ 2210.031440][ T7608] dump_stack_lvl+0xe8/0x150 [ 2210.031470][ T7608] warn_alloc+0x24d/0x270 [ 2210.031493][ T7608] ? __pfx_warn_alloc+0x10/0x10 [ 2210.031516][ T7608] ? alloc_pages_mpol+0x256/0x390 [ 2210.031546][ T7608] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 2210.031597][ T7608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2210.031624][ T7608] ? nft_array_may_resize+0x354/0x570 [ 2210.031649][ T7608] ? rcu_is_watching+0x16/0xb0 [ 2210.031672][ T7608] ? nft_array_may_resize+0x354/0x570 [ 2210.031696][ T7608] ? rcu_is_watching+0x16/0xb0 [ 2210.031719][ T7608] ? nft_array_may_resize+0x354/0x570 [ 2210.031746][ T7608] __kvmalloc_node_noprof+0x5a1/0x820 [ 2210.031767][ T7608] ? nft_array_may_resize+0x354/0x570 [ 2210.031792][ T7608] ? __kmalloc_cache_noprof+0x321/0x600 [ 2210.031811][ T7608] ? nft_array_may_resize+0x32d/0x570 [ 2210.031834][ T7608] ? nft_array_may_resize+0x354/0x570 [ 2210.031864][ T7608] nft_array_may_resize+0x354/0x570 [ 2210.031894][ T7608] nft_rbtree_insert+0x11e/0x2510 [ 2210.031921][ T7608] ? __kmalloc_noprof+0x1ab/0x720 [ 2210.031937][ T7608] ? nft_trans_alloc+0x22/0x2a0 [ 2210.031968][ T7608] ? nft_trans_alloc+0x40/0x2a0 [ 2210.031995][ T7608] nf_tables_newsetelem+0x2aa4/0x4200 [ 2210.032051][ T7608] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 2210.032077][ T7608] ? lock_acquire+0x115/0x350 [ 2210.032102][ T7608] ? nla_validate_array+0xfc/0x260 [ 2210.032149][ T7608] ? __pfx___nla_validate_parse+0x10/0x10 [ 2210.032178][ T7608] ? __pfx_nf_tables_newset+0x10/0x10 [ 2210.032206][ T7608] ? lock_acquire+0x115/0x350 [ 2210.032224][ T7608] ? nfnl_pernet+0x23/0x240 [ 2210.032263][ T7608] ? __nla_parse+0x40/0x60 [ 2210.032289][ T7608] nfnetlink_rcv+0x1288/0x28c0 [ 2210.032340][ T7608] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2210.032379][ T7608] ? ref_tracker_free+0x689/0x830 [ 2210.032419][ T7608] ? skb_clone+0x246/0x3a0 [ 2210.032448][ T7608] ? __netlink_deliver_tap+0x811/0x860 [ 2210.032473][ T7608] ? netlink_deliver_tap+0x2e/0x1b0 [ 2210.032490][ T7608] ? netlink_deliver_tap+0x2e/0x1b0 [ 2210.032512][ T7608] netlink_unicast+0x7bd/0x940 [ 2210.032547][ T7608] netlink_sendmsg+0x813/0xb40 [ 2210.032571][ T7608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2210.032596][ T7608] ? apparmor_socket_sendmsg+0x98/0x360 [ 2210.032618][ T7608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2210.032636][ T7608] sock_sendmsg_nosec+0x13a/0x180 [ 2210.032687][ T7608] ____sys_sendmsg+0x54e/0x850 [ 2210.032731][ T7608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2210.032766][ T7608] ? import_iovec+0x73/0xa0 [ 2210.032793][ T7608] ___sys_sendmsg+0x2a5/0x360 [ 2210.032817][ T7608] ? __lock_acquire+0x747/0x2de0 [ 2210.032839][ T7608] ? __pfx____sys_sendmsg+0x10/0x10 [ 2210.032872][ T7608] ? futex_wait+0x2a2/0x390 [ 2210.032911][ T7608] ? __fget_files+0x2a/0x420 [ 2210.032935][ T7608] ? __fget_files+0x3a2/0x420 [ 2210.032970][ T7608] __x64_sys_sendmsg+0x1b1/0x290 [ 2210.033001][ T7608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2210.033044][ T7608] do_syscall_64+0x166/0x520 [ 2210.033068][ T7608] ? trace_irq_disable+0x3b/0x140 [ 2210.033086][ T7608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.033106][ T7608] ? clear_bhb_loop+0x70/0xc0 [ 2210.033128][ T7608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2210.033145][ T7608] RIP: 0033:0x7f6dd0b9e159 [ 2210.033162][ T7608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2210.033177][ T7608] RSP: 002b:00007f6dd1a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2210.033195][ T7608] RAX: ffffffffffffffda RBX: 00007f6dd0e25fa0 RCX: 00007f6dd0b9e159 [ 2210.033208][ T7608] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 2210.033219][ T7608] RBP: 00007f6dd0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2210.033230][ T7608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2210.033247][ T7608] R13: 00007f6dd0e26038 R14: 00007f6dd0e25fa0 R15: 00007f6dd0f4fa48 [ 2210.033273][ T7608] [ 2210.069929][ T7608] Mem-Info: [ 2210.069975][ T7608] active_anon:14577 inactive_anon:16720 isolated_anon:0 [ 2210.069975][ T7608] active_file:195 inactive_file:70331 isolated_file:0 [ 2210.069975][ T7608] unevictable:0 dirty:181 writeback:0 [ 2210.069975][ T7608] slab_reclaimable:10502 slab_unreclaimable:148911 [ 2210.069975][ T7608] mapped:30958 shmem:20879 pagetables:2207 [ 2210.069975][ T7608] sec_pagetables:0 bounce:0 [ 2210.069975][ T7608] kernel_misc_reclaimable:0 [ 2210.069975][ T7608] free:1191080 free_pcp:11551 free_cma:0 [ 2210.070183][ T7608] Node 0 active_anon:58308kB inactive_anon:66880kB active_file:780kB inactive_file:280980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123748kB dirty:724kB writeback:0kB shmem:83516kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18404kB pagetables:8672kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2210.070360][ T7608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2210.070514][ T7608] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2210.071675][ T7608] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2210.071803][ T7608] Node 0 DMA32 free:808980kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:58308kB inactive_anon:66880kB active_file:780kB inactive_file:280980kB unevictable:0kB writepending:724kB zspages:2124kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:44660kB local_pcp:17808kB free_cma:0kB [ 2210.071985][ T7608] lowmem_reserve[]: 0 0 0 0 0 [ 2210.072085][ T7608] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2210.072294][ T7608] lowmem_reserve[]: 0 0 0 0 0 [ 2210.072406][ T7608] Node 1 Normal free:3939980kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1544kB local_pcp:0kB free_cma:0kB [ 2210.072589][ T7608] lowmem_reserve[]: 0 0 0 0 0 [ 2210.072700][ T7608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 2210.073071][ T7608] Node 0 DMA32: 2241*4kB (UME) 1097*8kB (UM) 1200*16kB (UME) 1413*32kB (UME) 1598*64kB (UME) 927*128kB (UME) 416*256kB (UME) 172*512kB (UME) 50*1024kB (M) 5*2048kB (UM) 61*4096kB (UM) = 808940kB [ 2210.073598][ T7608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2210.101547][ T7608] Node 1 Normal: 2*4kB (M) 3*8kB (UM) 6*16kB (UM) 8*32kB (UM) 13*64kB (UM) 8*128kB (UM) 6*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 3*2048kB (M) 958*4096kB (UM) = 3940032kB [ 2210.102047][ T7608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2210.102093][ T7608] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2210.102147][ T7608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2210.102207][ T7608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2210.102246][ T7608] 91382 total pagecache pages [ 2210.102270][ T7608] 6 pages in swap cache [ 2210.102295][ T7608] Free swap = 123424kB [ 2210.102319][ T7608] Total swap = 124996kB [ 2210.102349][ T7608] 2097051 pages RAM [ 2210.102371][ T7608] 0 pages HighMem/MovableOnly [ 2210.102395][ T7608] 428719 pages reserved [ 2210.102417][ T7608] 0 pages cma reserved [ 2210.175670][T27886] net_ratelimit: 30 callbacks suppressed [ 2210.175736][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.299160][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.411927][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.424739][ T7610] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10444'. [ 2210.435317][ T7611] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10444'. [ 2210.552893][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.560481][ T7611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.601971][ T7611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.605477][ T7610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2210.639443][ T7610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2210.716362][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2210.957353][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2211.061361][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2211.098731][ T7617] FAULT_INJECTION: forcing a failure. [ 2211.098731][ T7617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2211.098771][ T7617] CPU: 1 UID: 0 PID: 7617 Comm: syz.0.10446 Tainted: G L syzkaller #0 PREEMPT(full) [ 2211.098803][ T7617] Tainted: [L]=SOFTLOCKUP [ 2211.098812][ T7617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2211.098826][ T7617] Call Trace: [ 2211.098835][ T7617] [ 2211.098846][ T7617] dump_stack_lvl+0xe8/0x150 [ 2211.098883][ T7617] should_fail_ex+0x410/0x560 [ 2211.098917][ T7617] _copy_from_user+0x2d/0xb0 [ 2211.098951][ T7617] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 2211.098978][ T7617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2211.099012][ T7617] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 2211.099055][ T7617] ? __pfx_ksys_write+0x10/0x10 [ 2211.099090][ T7617] do_syscall_64+0x166/0x520 [ 2211.099120][ T7617] ? trace_irq_disable+0x3b/0x140 [ 2211.099143][ T7617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2211.099166][ T7617] ? clear_bhb_loop+0x70/0xc0 [ 2211.099193][ T7617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2211.099217][ T7617] RIP: 0033:0x7f6dd0b9e159 [ 2211.099237][ T7617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2211.099257][ T7617] RSP: 002b:00007f6dd1a6aee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 2211.099282][ T7617] RAX: ffffffffffffffda RBX: 0000200000000808 RCX: 00007f6dd0b9e159 [ 2211.099300][ T7617] RDX: 0000200000000888 RSI: 0000200000000808 RDI: 00000000000003c9 [ 2211.099316][ T7617] RBP: 0000200000000800 R08: 0000200000000340 R09: 0000000000000000 [ 2211.099330][ T7617] R10: 0000200000000890 R11: 0000000000000206 R12: 0000200000000888 [ 2211.099345][ T7617] R13: 0000200000000890 R14: 00007f6dd1a6afd8 R15: 0000000000000000 [ 2211.099378][ T7617] [ 2211.189867][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2211.306729][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2211.421853][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2211.493733][ T7630] team0: Port device xfrm0 added [ 2212.089875][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10460'. [ 2212.357636][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.358101][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.378186][ T7665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2212.378963][ T7665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2212.398298][ T7666] vivid-000: disconnect [ 2212.405255][ T7663] vivid-000: reconnect [ 2213.261528][T19912] usb 10-1: new high-speed USB device number 62 using dummy_hcd [ 2213.411154][T19912] usb 10-1: Using ep0 maxpacket: 32 [ 2213.412080][T19912] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2213.416967][T19912] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2213.417007][T19912] usb 10-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.465171][T19912] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 2213.465212][T19912] usb 10-1: Product: syz [ 2213.465234][T19912] usb 10-1: Manufacturer: syz [ 2213.518095][T19912] hub 10-1:4.0: USB hub found [ 2213.748211][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10469'. [ 2213.748246][ T7686] netlink: 'syz.0.10469': attribute type 1 has an invalid length. [ 2213.828542][ T7686] netlink: 'syz.0.10469': attribute type 39 has an invalid length. [ 2214.077647][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10471'. [ 2214.126471][ T7690] vlan3: entered allmulticast mode [ 2214.126499][ T7690] bridge9: entered allmulticast mode [ 2214.128760][ T7690] erspan0: left allmulticast mode [ 2214.128789][ T7690] erspan0: left promiscuous mode [ 2214.129054][ T7690] bridge1: port 1(erspan0) entered disabled state [ 2214.170409][ T7690] bridge9: port 1(erspan0) entered blocking state [ 2214.170641][ T7690] bridge9: port 1(erspan0) entered disabled state [ 2214.175365][ T7690] erspan0: entered allmulticast mode [ 2214.184996][ T7690] erspan0: entered promiscuous mode [ 2214.188547][ T7690] bridge9: port 1(erspan0) entered blocking state [ 2214.189025][ T7690] bridge9: port 1(erspan0) entered forwarding state [ 2214.310852][T19912] hub 10-1:4.0: config failed, can't read hub descriptor (err -22) [ 2214.355122][T19912] usb 10-1: USB disconnect, device number 62 [ 2214.583805][ T7703] FAULT_INJECTION: forcing a failure. [ 2214.583805][ T7703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2214.583844][ T7703] CPU: 1 UID: 0 PID: 7703 Comm: syz.3.10475 Tainted: G L syzkaller #0 PREEMPT(full) [ 2214.583874][ T7703] Tainted: [L]=SOFTLOCKUP [ 2214.583883][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2214.583900][ T7703] Call Trace: [ 2214.583910][ T7703] [ 2214.583920][ T7703] dump_stack_lvl+0xe8/0x150 [ 2214.583954][ T7703] should_fail_ex+0x410/0x560 [ 2214.583984][ T7703] _copy_from_user+0x2d/0xb0 [ 2214.584012][ T7703] ___sys_sendmsg+0x1c6/0x360 [ 2214.584039][ T7703] ? __lock_acquire+0x747/0x2de0 [ 2214.584065][ T7703] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.584093][ T7703] ? __lock_acquire+0x747/0x2de0 [ 2214.584122][ T7703] ? kstrtouint+0x6e/0xe0 [ 2214.584188][ T7703] __sys_sendmmsg+0x273/0x4d0 [ 2214.584227][ T7703] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2214.584270][ T7703] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2214.584319][ T7703] ? ksys_write+0x242/0x270 [ 2214.584344][ T7703] ? __pfx_ksys_write+0x10/0x10 [ 2214.584372][ T7703] __x64_sys_sendmmsg+0xa0/0xc0 [ 2214.584407][ T7703] do_syscall_64+0x166/0x520 [ 2214.584436][ T7703] ? trace_irq_disable+0x3b/0x140 [ 2214.584458][ T7703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.584481][ T7703] ? clear_bhb_loop+0x70/0xc0 [ 2214.584493][ T7702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.584510][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.584533][ T7703] RIP: 0033:0x7fb1da19e159 [ 2214.584553][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.584572][ T7703] RSP: 002b:00007fb1db082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2214.584596][ T7703] RAX: ffffffffffffffda RBX: 00007fb1da425fa0 RCX: 00007fb1da19e159 [ 2214.584614][ T7703] RDX: 17fd147c801ae9af RSI: 0000200000000ac0 RDI: 0000000000000003 [ 2214.584630][ T7703] RBP: 00007fb1db082090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.584653][ T7703] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002 [ 2214.584668][ T7703] R13: 00007fb1da426038 R14: 00007fb1da425fa0 R15: 00007fb1da54fa48 [ 2214.584703][ T7703] [ 2214.586328][ T7702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.943135][ T7709] netlink: 'syz.3.10477': attribute type 12 has an invalid length. [ 2215.173426][T19825] net_ratelimit: 31 callbacks suppressed [ 2215.173453][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.289783][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.393955][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.507915][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.611626][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.725704][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.756422][ T7714] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10478'. [ 2215.831511][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2215.944032][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2216.054567][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2216.164181][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2216.222652][ T7730] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2216.651117][T19912] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2216.780864][T19912] usb 4-1: device descriptor read/64, error -71 [ 2216.861039][T10119] usb 10-1: new high-speed USB device number 63 using dummy_hcd [ 2216.937830][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2216.940621][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.012485][T10119] usb 10-1: Using ep0 maxpacket: 8 [ 2217.013293][T10119] usb 10-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 2217.016747][T10119] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 2217.016779][T10119] usb 10-1: config 179 has no interface number 0 [ 2217.016823][T10119] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 2217.016855][T10119] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 2217.016886][T10119] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 2217.016916][T10119] usb 10-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 2217.016945][T10119] usb 10-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 2217.016974][T10119] usb 10-1: config 179 interface 65 has no altsetting 0 [ 2217.017009][T10119] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2217.035711][T19912] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2217.202969][T19912] usb 4-1: device descriptor read/64, error -71 [ 2217.300540][T10119] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:179.65/input/input322 [ 2217.316642][T19912] usb usb4-port1: attempt power cycle [ 2217.423926][ T4969] input input322: unable to receive magic message: -110 [ 2217.459795][ T4969] input input322: unable to receive magic message: -32 [ 2217.489127][ T4969] input input322: unable to receive magic message: -32 [ 2217.573489][T15726] usb 10-1: USB disconnect, device number 63 [ 2217.573629][ C0] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 2217.573682][ C0] xpad 10-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 2217.629505][ T4969] input input322: unable to receive magic message: -71 [ 2217.651419][T19912] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2217.682064][T19912] usb 4-1: device descriptor read/8, error -71 [ 2217.816001][ T7755] tun0: tun_chr_ioctl cmd 1074025681 [ 2217.909811][ T7759] tun0: tun_chr_ioctl cmd 1074025673 [ 2217.917071][ T7757] tun0: tun_chr_ioctl cmd 1074025681 [ 2217.921329][T19912] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2217.942880][T19912] usb 4-1: device descriptor read/8, error -71 [ 2218.051446][T19912] usb usb4-port1: unable to enumerate USB device [ 2219.438983][ T7787] FAULT_INJECTION: forcing a failure. [ 2219.438983][ T7787] name failslab, interval 1, probability 0, space 0, times 0 [ 2219.439025][ T7787] CPU: 1 UID: 0 PID: 7787 Comm: syz.9.10496 Tainted: G L syzkaller #0 PREEMPT(full) [ 2219.439056][ T7787] Tainted: [L]=SOFTLOCKUP [ 2219.439065][ T7787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2219.439080][ T7787] Call Trace: [ 2219.439089][ T7787] [ 2219.439100][ T7787] dump_stack_lvl+0xe8/0x150 [ 2219.439139][ T7787] should_fail_ex+0x410/0x560 [ 2219.439172][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 2219.439202][ T7787] should_failslab+0xa8/0x100 [ 2219.439235][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 2219.439262][ T7787] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2219.439300][ T7787] ? __alloc_skb+0x1db/0x7a0 [ 2219.439337][ T7787] __alloc_skb+0x1db/0x7a0 [ 2219.439373][ T7787] tcp_stream_alloc_skb+0x3f/0x580 [ 2219.439408][ T7787] tcp_sendmsg_locked+0x138c/0x5400 [ 2219.439495][ T7787] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2219.439533][ T7787] ? tcp_sendmsg+0x21/0x50 [ 2219.439565][ T7787] ? __local_bh_enable_ip+0xd6/0x140 [ 2219.439602][ T7787] tcp_sendmsg+0x2f/0x50 [ 2219.439631][ T7787] ? __pfx_inet_sendmsg+0x10/0x10 [ 2219.439654][ T7787] sock_sendmsg_nosec+0x10e/0x180 [ 2219.439685][ T7787] sock_write_iter+0x2de/0x3e0 [ 2219.439712][ T7787] ? __pfx_sock_write_iter+0x10/0x10 [ 2219.439745][ T7787] ? bpf_lsm_file_permission+0x9/0x20 [ 2219.439777][ T7787] ? security_file_permission+0x75/0x260 [ 2219.439812][ T7787] vfs_write+0x612/0xba0 [ 2219.439844][ T7787] ? __pfx_vfs_write+0x10/0x10 [ 2219.439878][ T7787] ? __fget_files+0x2a/0x420 [ 2219.439920][ T7787] ksys_write+0x150/0x270 [ 2219.439945][ T7787] ? __pfx_ksys_write+0x10/0x10 [ 2219.439980][ T7787] do_syscall_64+0x166/0x520 [ 2219.440012][ T7787] ? trace_irq_disable+0x3b/0x140 [ 2219.440036][ T7787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.440060][ T7787] ? clear_bhb_loop+0x70/0xc0 [ 2219.440089][ T7787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2219.440112][ T7787] RIP: 0033:0x7f9330b9e159 [ 2219.440134][ T7787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2219.440154][ T7787] RSP: 002b:00007f9331aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2219.440179][ T7787] RAX: ffffffffffffffda RBX: 00007f9330e25fa0 RCX: 00007f9330b9e159 [ 2219.440197][ T7787] RDX: 0000000000000003 RSI: 0000200000000500 RDI: 0000000000000005 [ 2219.440212][ T7787] RBP: 00007f9331aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 2219.440233][ T7787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2219.440248][ T7787] R13: 00007f9330e26038 R14: 00007f9330e25fa0 R15: 00007f9330f4fa48 [ 2219.440292][ T7787] [ 2219.929901][ T7798] kernel read not supported for file /! (pid: 7798 comm: syz.9.10499) [ 2219.930132][ T31] audit: type=1800 audit(1790912553.874:6139): pid=7798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.10499" name=217F dev="mqueue" ino=262903 res=0 errno=0 [ 2220.182976][ T6396] net_ratelimit: 33 callbacks suppressed [ 2220.183002][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.293946][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.404691][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.514457][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.624921][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.733183][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.844538][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2220.953913][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2221.072854][ T6564] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2221.140802][T10119] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2221.183953][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2221.249415][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10505'. [ 2221.249450][ T7815] netlink: 'syz.0.10505': attribute type 1 has an invalid length. [ 2221.292297][T10119] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 2221.294771][T10119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2221.294824][T10119] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2221.294850][T10119] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2221.294877][T10119] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2221.294923][T10119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2221.369400][ T7817] netlink: 'syz.0.10505': attribute type 39 has an invalid length. [ 2221.815802][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2221.819357][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.819426][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.341854][ T7814] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10506'. [ 2222.554405][T10119] gud 4-1:1.0: probe with driver gud failed with error -71 [ 2222.574300][T10119] usb 4-1: USB disconnect, device number 23 [ 2222.650842][T24853] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2222.813706][T24853] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2222.813767][T24853] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 2222.815466][T24853] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.815495][T24853] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2222.815542][T24853] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 2222.815586][T24853] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 2222.815628][T24853] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2222.815658][T24853] usb 1-1: config 1 interface 1 has no altsetting 0 [ 2222.819636][T24853] usb 1-1: string descriptor 0 read error: -22 [ 2222.819789][T24853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.125389][ T7845] kvm: apic: phys broadcast and lowest prio [ 2223.525629][ T7856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10518'. [ 2223.525665][ T7856] netlink: 'syz.4.10518': attribute type 1 has an invalid length. [ 2223.619482][ T7856] netlink: 'syz.4.10518': attribute type 39 has an invalid length. [ 2223.740345][ T7841] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2223.786474][ T7863] netlink: 'syz.3.10521': attribute type 10 has an invalid length. [ 2223.786998][ T7863] veth0_vlan: left promiscuous mode [ 2223.788636][ T7863] team0: Device veth0_vlan failed to register rx_handler [ 2223.929777][T24853] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 2223.970169][T24853] usb 1-1: Warning! Unlikely big volume step count (=6540), linear volume or wrong cval->res? [ 2223.970200][T24853] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/6540/1 [ 2224.082913][T24853] usb 1-1: USB disconnect, device number 96 [ 2224.212972][ T7869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10524'. [ 2224.263934][ T7872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2224.268482][ T7872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2224.596491][ T7882] C: renamed from veth1_to_team (while UP) [ 2224.600184][ T7882] netlink: 'syz.0.10529': attribute type 8 has an invalid length. [ 2224.871595][T19905] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2224.872092][ T7889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10532'. [ 2224.872120][ T7889] netlink: 'syz.3.10532': attribute type 1 has an invalid length. [ 2224.918367][ T7889] netlink: 'syz.3.10532': attribute type 39 has an invalid length. [ 2225.022582][T19905] usb 1-1: Using ep0 maxpacket: 8 [ 2225.031515][T19905] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2225.031558][T19905] usb 1-1: New USB device found, idVendor=046d, idProduct=0897, bcdDevice=22.d5 [ 2225.033199][T19905] usb 1-1: config 0 interface 0 has no altsetting 0 [ 2225.050430][T19905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2225.050517][T19905] usb 1-1: Product: syz [ 2225.050562][T19905] usb 1-1: Manufacturer: syz [ 2225.050592][T19905] usb 1-1: SerialNumber: syz [ 2225.100639][T19905] usb 1-1: config 0 descriptor?? [ 2225.201824][T27886] net_ratelimit: 33 callbacks suppressed [ 2225.201842][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.312428][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.340059][ T7882] ip_tables: iptables: counters copy to user failed while replacing table [ 2225.396527][T19905] gspca_main: vc032x-2.14.0 probing 046d:0897 [ 2225.399221][T19905] gspca_vc032x: reg_r err -71 [ 2225.399243][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399255][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399291][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399302][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399312][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399322][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399333][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399343][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399354][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399364][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399374][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399385][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399394][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399403][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399413][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399423][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399433][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399442][T19905] gspca_vc032x: I2c Bus Busy Wait 00 [ 2225.399453][T19905] gspca_vc032x: Unknown sensor... [ 2225.399521][T19905] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 2225.443933][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.551235][T19905] usb 1-1: USB disconnect, device number 97 [ 2225.560156][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.664333][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.774716][ T5107] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.868538][ T7912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10536'. [ 2225.881802][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2225.950865][T19912] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 2225.998920][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2226.101395][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2226.112992][T19912] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 2226.122513][T19912] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2226.122599][T19912] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2226.141652][T19905] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2226.169405][T19912] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.169437][T19912] usb 10-1: Product: syz [ 2226.169453][T19912] usb 10-1: Manufacturer: syz [ 2226.169468][T19912] usb 10-1: SerialNumber: syz [ 2226.271224][T19905] usb 4-1: device descriptor read/64, error -71 [ 2226.441569][T19912] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 2226.511032][T19905] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2226.641505][T19905] usb 4-1: device descriptor read/64, error -71 [ 2226.661775][ T7925] netlink: 'syz.0.10540': attribute type 1 has an invalid length. [ 2226.751833][T19905] usb usb4-port1: attempt power cycle [ 2226.837988][ T7927] veth11: entered allmulticast mode [ 2226.869075][ T7927] bond1: (slave veth11): Enslaving as an active interface with a down link [ 2226.910045][ T7928] bond1: (slave veth0_to_bond): making interface the new active one [ 2226.943878][ T7928] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2226.989353][ T7927] macvlan3: entered promiscuous mode [ 2226.989375][ T7927] macvlan3: entered allmulticast mode [ 2227.091559][T19905] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2227.112965][T19905] usb 4-1: device descriptor read/8, error -71 [ 2227.350848][T19905] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2227.372085][T19905] usb 4-1: device descriptor read/8, error -71 [ 2227.482350][T19905] usb usb4-port1: unable to enumerate USB device [ 2227.556934][ T7938] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2229.066188][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.086364][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2229.107747][ T7973] syz.0.10554: vmalloc error: size 16384, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2229.107940][ T7973] CPU: 1 UID: 0 PID: 7973 Comm: syz.0.10554 Tainted: G L syzkaller #0 PREEMPT(full) [ 2229.107972][ T7973] Tainted: [L]=SOFTLOCKUP [ 2229.107981][ T7973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2229.107995][ T7973] Call Trace: [ 2229.108005][ T7973] [ 2229.108016][ T7973] dump_stack_lvl+0xe8/0x150 [ 2229.108066][ T7973] warn_alloc+0x24d/0x270 [ 2229.108098][ T7973] ? __pfx_warn_alloc+0x10/0x10 [ 2229.108128][ T7973] ? alloc_pages_mpol+0x256/0x390 [ 2229.108171][ T7973] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 2229.108239][ T7973] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2229.108278][ T7973] ? nft_array_may_resize+0x354/0x570 [ 2229.108314][ T7973] ? rcu_is_watching+0x16/0xb0 [ 2229.108345][ T7973] ? nft_array_may_resize+0x354/0x570 [ 2229.108378][ T7973] ? rcu_is_watching+0x16/0xb0 [ 2229.108411][ T7973] ? nft_array_may_resize+0x354/0x570 [ 2229.108442][ T7973] __kvmalloc_node_noprof+0x5a1/0x820 [ 2229.108472][ T7973] ? nft_array_may_resize+0x354/0x570 [ 2229.108504][ T7973] ? __kmalloc_cache_noprof+0x321/0x600 [ 2229.108528][ T7973] ? nft_array_may_resize+0x32d/0x570 [ 2229.108558][ T7973] ? nft_array_may_resize+0x354/0x570 [ 2229.108611][ T7973] nft_array_may_resize+0x354/0x570 [ 2229.108651][ T7973] nft_rbtree_insert+0x11e/0x2510 [ 2229.108698][ T7973] ? __kmalloc_noprof+0x1ab/0x720 [ 2229.108720][ T7973] ? nft_trans_alloc+0x22/0x2a0 [ 2229.108789][ T7973] ? nft_trans_alloc+0x40/0x2a0 [ 2229.108826][ T7973] nf_tables_newsetelem+0x2aa4/0x4200 [ 2229.108916][ T7973] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 2229.108950][ T7973] ? lock_acquire+0x115/0x350 [ 2229.108975][ T7973] ? nla_validate_array+0xfc/0x260 [ 2229.109021][ T7973] ? __pfx___nla_validate_parse+0x10/0x10 [ 2229.109050][ T7973] ? __pfx_nf_tables_newset+0x10/0x10 [ 2229.109078][ T7973] ? lock_acquire+0x115/0x350 [ 2229.109096][ T7973] ? nfnl_pernet+0x23/0x240 [ 2229.109128][ T7973] ? __nla_parse+0x40/0x60 [ 2229.109154][ T7973] nfnetlink_rcv+0x1288/0x28c0 [ 2229.109205][ T7973] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2229.109255][ T7973] ? ref_tracker_free+0x689/0x830 [ 2229.109309][ T7973] ? skb_clone+0x246/0x3a0 [ 2229.109350][ T7973] ? __netlink_deliver_tap+0x811/0x860 [ 2229.109383][ T7973] ? netlink_deliver_tap+0x2e/0x1b0 [ 2229.109409][ T7973] ? netlink_deliver_tap+0x2e/0x1b0 [ 2229.109430][ T7973] netlink_unicast+0x7bd/0x940 [ 2229.109464][ T7973] netlink_sendmsg+0x813/0xb40 [ 2229.109488][ T7973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.109511][ T7973] ? apparmor_socket_sendmsg+0x98/0x360 [ 2229.109533][ T7973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.109549][ T7973] sock_sendmsg_nosec+0x13a/0x180 [ 2229.109570][ T7973] ____sys_sendmsg+0x54e/0x850 [ 2229.109617][ T7973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2229.109649][ T7973] ? import_iovec+0x73/0xa0 [ 2229.109681][ T7973] ___sys_sendmsg+0x2a5/0x360 [ 2229.109704][ T7973] ? __lock_acquire+0x747/0x2de0 [ 2229.109725][ T7973] ? __pfx____sys_sendmsg+0x10/0x10 [ 2229.109752][ T7973] ? futex_wait+0x2a2/0x390 [ 2229.109788][ T7973] ? __fget_files+0x2a/0x420 [ 2229.109812][ T7973] ? __fget_files+0x3a2/0x420 [ 2229.109843][ T7973] __x64_sys_sendmsg+0x1b1/0x290 [ 2229.109870][ T7973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2229.109909][ T7973] do_syscall_64+0x166/0x520 [ 2229.109933][ T7973] ? trace_irq_disable+0x3b/0x140 [ 2229.109950][ T7973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.109968][ T7973] ? clear_bhb_loop+0x70/0xc0 [ 2229.109988][ T7973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.110004][ T7973] RIP: 0033:0x7f6dd0b9e159 [ 2229.110020][ T7973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2229.110034][ T7973] RSP: 002b:00007f6dd1a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2229.110052][ T7973] RAX: ffffffffffffffda RBX: 00007f6dd0e25fa0 RCX: 00007f6dd0b9e159 [ 2229.110064][ T7973] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 2229.110075][ T7973] RBP: 00007f6dd0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2229.110085][ T7973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2229.110095][ T7973] R13: 00007f6dd0e26038 R14: 00007f6dd0e25fa0 R15: 00007f6dd0f4fa48 [ 2229.110121][ T7973] [ 2229.255045][ T7973] Mem-Info: [ 2229.255062][ T7973] active_anon:29838 inactive_anon:14931 isolated_anon:0 [ 2229.255062][ T7973] active_file:195 inactive_file:81430 isolated_file:0 [ 2229.255062][ T7973] unevictable:0 dirty:938 writeback:0 [ 2229.255062][ T7973] slab_reclaimable:11006 slab_unreclaimable:149605 [ 2229.255062][ T7973] mapped:37750 shmem:34204 pagetables:2390 [ 2229.255062][ T7973] sec_pagetables:0 bounce:0 [ 2229.255062][ T7973] kernel_misc_reclaimable:0 [ 2229.255062][ T7973] free:1169408 free_pcp:7900 free_cma:0 [ 2229.255343][ T7973] Node 0 active_anon:119352kB inactive_anon:59724kB active_file:780kB inactive_file:325376kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:150856kB dirty:3752kB writeback:0kB shmem:136816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18896kB pagetables:9404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2229.255523][ T7973] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:144kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2229.276693][ T7973] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2229.276770][ T7973] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2229.276892][ T7973] Node 0 DMA32 free:720728kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:119352kB inactive_anon:59724kB active_file:780kB inactive_file:325376kB unevictable:0kB writepending:3752kB zspages:2392kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:31568kB local_pcp:11288kB free_cma:0kB [ 2229.277107][ T7973] lowmem_reserve[]: 0 0 0 0 0 [ 2229.277224][ T7973] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2229.277453][ T7973] lowmem_reserve[]: 0 0 0 0 0 [ 2229.315074][ T7973] Node 1 Normal free:3941544kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 2229.315246][ T7973] lowmem_reserve[]: 0 0 0 0 0 [ 2229.315434][ T7973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 2229.315842][ T7973] Node 0 DMA32: 1897*4kB (UME) 670*8kB (UME) 595*16kB (UME) 245*32kB (UME) 1589*64kB (UME) 927*128kB (UME) 414*256kB (ME) 169*512kB (ME) 51*1024kB (UM) 4*2048kB (UM) 53*4096kB (UM) = 720676kB [ 2229.316370][ T7973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2229.378769][ T7973] Node 1 Normal: 2*4kB (M) 4*8kB (UM) 6*16kB (UM) 7*32kB (UM) 13*64kB (UM) 8*128kB (UM) 6*256kB (UM) 7*512kB (UM) 4*1024kB (UM) 3*2048kB (M) 958*4096kB (UM) = 3941544kB [ 2229.379398][ T7973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2229.379453][ T7973] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2229.379505][ T7973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2229.379558][ T7973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2229.379603][ T7973] 115831 total pagecache pages [ 2229.379642][ T7973] 6 pages in swap cache [ 2229.379665][ T7973] Free swap = 116276kB [ 2229.379688][ T7973] Total swap = 124996kB [ 2229.379709][ T7973] 2097051 pages RAM [ 2229.379717][ T7973] 0 pages HighMem/MovableOnly [ 2229.379725][ T7973] 428719 pages reserved [ 2229.379735][ T7973] 0 pages cma reserved [ 2229.679736][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2229.796655][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2230.132380][ T7981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10556'. [ 2230.236182][ T7981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2230.251602][ T6398] net_ratelimit: 28 callbacks suppressed [ 2230.251626][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.264955][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10557'. [ 2230.303816][ T7988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10558'. [ 2230.303851][ T7988] netlink: 'syz.4.10558': attribute type 1 has an invalid length. [ 2230.367144][ T7985] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2230.371080][ T7989] FAULT_INJECTION: forcing a failure. [ 2230.371080][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 2230.371126][ T7989] CPU: 1 UID: 0 PID: 7989 Comm: syz.0.10557 Tainted: G L syzkaller #0 PREEMPT(full) [ 2230.371159][ T7989] Tainted: [L]=SOFTLOCKUP [ 2230.371169][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2230.371184][ T7989] Call Trace: [ 2230.371194][ T7989] [ 2230.371205][ T7989] dump_stack_lvl+0xe8/0x150 [ 2230.371244][ T7989] should_fail_ex+0x410/0x560 [ 2230.371278][ T7989] ? __alloc_skb+0x1db/0x7a0 [ 2230.371310][ T7989] should_failslab+0xa8/0x100 [ 2230.371343][ T7989] ? __alloc_skb+0x1db/0x7a0 [ 2230.371371][ T7989] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 2230.371396][ T7989] ? __alloc_skb+0x18d/0x7a0 [ 2230.371428][ T7989] ? __alloc_skb+0x1db/0x7a0 [ 2230.371463][ T7989] __alloc_skb+0x1db/0x7a0 [ 2230.371498][ T7989] netlink_ack+0x136/0xb30 [ 2230.371521][ T7989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2230.371550][ T7989] ? ref_tracker_free+0x689/0x830 [ 2230.371584][ T7989] ? __pfx_ref_tracker_free+0x10/0x10 [ 2230.371625][ T7989] netlink_rcv_skb+0x2a4/0x4a0 [ 2230.371651][ T7989] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2230.371685][ T7989] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2230.371723][ T7989] ? netlink_deliver_tap+0x2e/0x1b0 [ 2230.371748][ T7989] ? netlink_deliver_tap+0x2e/0x1b0 [ 2230.371777][ T7989] netlink_unicast+0x7bd/0x940 [ 2230.371825][ T7989] netlink_sendmsg+0x813/0xb40 [ 2230.371860][ T7989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2230.371895][ T7989] ? apparmor_socket_sendmsg+0x98/0x360 [ 2230.371926][ T7989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2230.371951][ T7989] sock_sendmsg_nosec+0x13a/0x180 [ 2230.371980][ T7989] ____sys_sendmsg+0x54e/0x850 [ 2230.372030][ T7989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2230.372075][ T7989] ? import_iovec+0x73/0xa0 [ 2230.372111][ T7989] ___sys_sendmsg+0x2a5/0x360 [ 2230.372145][ T7989] ? __lock_acquire+0x747/0x2de0 [ 2230.372176][ T7989] ? __pfx____sys_sendmsg+0x10/0x10 [ 2230.372249][ T7989] ? __fget_files+0x2a/0x420 [ 2230.372283][ T7989] ? __fget_files+0x3a2/0x420 [ 2230.372328][ T7989] __x64_sys_sendmsg+0x1b1/0x290 [ 2230.372366][ T7989] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2230.372427][ T7989] do_syscall_64+0x166/0x520 [ 2230.372460][ T7989] ? trace_irq_disable+0x3b/0x140 [ 2230.372486][ T7989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.372511][ T7989] ? clear_bhb_loop+0x70/0xc0 [ 2230.372539][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2230.372564][ T7989] RIP: 0033:0x7f6dd0b9e159 [ 2230.372587][ T7989] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2230.372607][ T7989] RSP: 002b:00007f6dd1a4a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2230.372631][ T7989] RAX: ffffffffffffffda RBX: 00007f6dd0e26090 RCX: 00007f6dd0b9e159 [ 2230.372649][ T7989] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 2230.372665][ T7989] RBP: 00007f6dd1a4a090 R08: 0000000000000000 R09: 0000000000000000 [ 2230.372679][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2230.372693][ T7989] R13: 00007f6dd0e26128 R14: 00007f6dd0e26090 R15: 00007f6dd0f4fa48 [ 2230.372728][ T7989] [ 2230.393478][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.493726][ T7988] netlink: 'syz.4.10558': attribute type 39 has an invalid length. [ 2230.503380][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.698354][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.802160][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2230.913504][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.022541][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.076400][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.079974][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.101164][T10119] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2231.132167][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.241797][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.254015][T10119] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2231.254076][T10119] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 2231.255588][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.255641][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.255669][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.306633][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.306680][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.306700][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.353907][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.353997][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.354027][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.359346][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.359397][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.359418][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.388248][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.388504][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.388581][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.410628][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.413932][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.414028][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.423121][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2231.502831][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.502929][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.502970][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.534620][T10119] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2231.534786][T10119] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2231.534961][T10119] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2231.589759][T10119] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2231.589783][T10119] usb 4-1: Product: syz [ 2231.589795][T10119] usb 4-1: Manufacturer: syz [ 2231.589806][T10119] usb 4-1: SerialNumber: syz [ 2231.636512][T10119] usb 4-1: config 0 descriptor?? [ 2231.648122][ T8006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10563'. [ 2231.693545][T10119] yurex 4-1:0.0: USB YUREX device now attached to Yurex #1 [ 2231.879389][ T5695] usb 4-1: USB disconnect, device number 28 [ 2232.016101][ T5695] yurex 4-1:0.0: USB YUREX #1 now disconnected [ 2232.072593][ T8011] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10564'. [ 2232.072712][ T8011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2232.253205][ T8011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2232.501151][ T5695] usb 1-1: new low-speed USB device number 98 using dummy_hcd [ 2232.654480][ T5695] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2232.655549][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2232.655584][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2232.655604][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2232.655623][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2232.655643][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2232.659629][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2232.659666][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2232.659686][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2232.659705][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2232.659724][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2232.784445][ T5695] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 2232.784504][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2232.784534][ T5695] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2232.784560][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2232.784586][ T5695] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2232.847863][ T5695] usb 1-1: string descriptor 0 read error: -22 [ 2232.848020][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.907871][ T5695] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2233.213963][ T8016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2233.214357][ T8016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2233.446016][ T5695] usb 1-1: USB disconnect, device number 98 [ 2233.721620][T10119] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2233.870845][T10119] usb 4-1: Using ep0 maxpacket: 16 [ 2233.876663][T10119] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 2233.887665][T10119] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 2233.887767][T10119] usb 4-1: config 0 has no interface number 0 [ 2233.887896][T10119] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 55, changing to 9 [ 2233.887971][T10119] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 8496, setting to 1024 [ 2233.944397][T10119] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 2233.944432][T10119] usb 4-1: Product: syz [ 2233.944449][T10119] usb 4-1: Manufacturer: syz [ 2233.944466][T10119] usb 4-1: SerialNumber: syz [ 2233.989880][T10119] usb 4-1: config 0 descriptor?? [ 2234.023216][T10119] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 2234.023458][T10119] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 2234.038230][T10119] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 2234.066126][T10119] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 2234.100434][T10119] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 2234.119090][T10119] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 2234.137712][T10119] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 2234.158088][T10119] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 2234.181406][T10119] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 2234.203974][T10119] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 2235.093652][T10119] usb 4-1: USB disconnect, device number 29 [ 2235.138251][T10119] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 2235.173618][T10119] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 2235.247384][T10119] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 2235.283838][ T5108] net_ratelimit: 29 callbacks suppressed [ 2235.283864][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.321407][T10119] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 2235.322292][T10119] keyspan 4-1:0.107: device disconnected [ 2235.396142][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.501138][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.553150][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10580'. [ 2235.575895][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10581'. [ 2235.575964][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10581'. [ 2235.576001][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10581'. [ 2235.765782][ T8066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2235.781765][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2235.902523][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.011335][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.121254][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.232807][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.340895][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.401540][T10119] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2236.451601][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2236.550966][T10119] usb 4-1: Using ep0 maxpacket: 32 [ 2236.552898][T10119] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 2236.554415][T10119] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.554443][T10119] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2236.554493][T10119] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 2236.554537][T10119] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2236.554582][T10119] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2236.554607][T10119] usb 4-1: config 1 interface 1 has no altsetting 0 [ 2236.559707][ T8088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10585'. [ 2236.559835][T10119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2236.559861][T10119] usb 4-1: Product: syz [ 2236.559877][T10119] usb 4-1: Manufacturer: syz [ 2236.559892][T10119] usb 4-1: SerialNumber: syz [ 2236.720183][ T8088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2237.085012][T10119] usb 4-1: selecting invalid altsetting 0 [ 2237.085861][T10119] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 2237.089647][T10119] usb 4-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 2237.489243][T10119] usb 4-1: USB disconnect, device number 30 [ 2237.968534][ T5484] udevd[5484]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2238.207542][ T8100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2238.211375][ T8100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2238.405833][ T8097] netlink: 124 bytes leftover after parsing attributes in process `syz.9.10588'. [ 2238.773494][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10593'. [ 2238.799658][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state [ 2238.912429][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10594'. [ 2238.912454][ T8113] netlink: 'syz.0.10594': attribute type 1 has an invalid length. [ 2239.017571][ T8113] netlink: 'syz.0.10594': attribute type 39 has an invalid length. [ 2239.598370][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2239.602614][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2239.873607][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10611'. [ 2240.152712][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2240.153186][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2240.301322][T27886] net_ratelimit: 33 callbacks suppressed [ 2240.301349][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.412619][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.470882][T10119] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2240.522005][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.601208][T10119] usb 1-1: device descriptor read/64, error -71 [ 2240.631988][T19832] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.732769][ T5695] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2240.749279][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.825713][ T8179] netlink: 40 bytes leftover after parsing attributes in process `syz.7.10618'. [ 2240.842105][T10119] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2240.862653][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2240.924066][ T5695] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 2240.954834][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.954858][ T5695] usb 4-1: Product: syz [ 2240.954869][ T5695] usb 4-1: Manufacturer: syz [ 2240.954883][ T5695] usb 4-1: SerialNumber: syz [ 2240.987362][T10119] usb 1-1: device descriptor read/64, error -71 [ 2241.037803][ T8186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2241.091755][T10119] usb usb1-port1: attempt power cycle [ 2241.093311][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2241.206814][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2241.313238][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2241.422882][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2241.437048][T10119] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2241.452534][T10119] usb 1-1: device descriptor read/8, error -71 [ 2241.506133][ T5695] rtl8150 4-1:1.0: couldn't reset the device [ 2241.506428][ T5695] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 2241.563803][ T5695] usb 4-1: USB disconnect, device number 31 [ 2241.690974][T10119] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2241.712293][T10119] usb 1-1: device descriptor read/8, error -71 [ 2241.822976][T10119] usb usb1-port1: unable to enumerate USB device [ 2243.048987][ T8212] FAULT_INJECTION: forcing a failure. [ 2243.048987][ T8212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2243.049021][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.3.10626 Tainted: G L syzkaller #0 PREEMPT(full) [ 2243.049046][ T8212] Tainted: [L]=SOFTLOCKUP [ 2243.049053][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2243.049064][ T8212] Call Trace: [ 2243.049071][ T8212] [ 2243.049080][ T8212] dump_stack_lvl+0xe8/0x150 [ 2243.049112][ T8212] should_fail_ex+0x410/0x560 [ 2243.049143][ T8212] prepare_alloc_pages+0x223/0x600 [ 2243.049170][ T8212] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2243.049196][ T8212] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2243.049222][ T8212] ? __pfx_policy_nodemask+0x10/0x10 [ 2243.049250][ T8212] ? mfill_atomic_install_pte+0x775/0x890 [ 2243.049299][ T8212] alloc_pages_mpol+0x21e/0x390 [ 2243.049341][ T8212] folio_alloc_mpol_noprof+0x39/0x160 [ 2243.049376][ T8212] shmem_mfill_folio_alloc+0x196/0x370 [ 2243.049407][ T8212] ? __pfx_shmem_mfill_folio_alloc+0x10/0x10 [ 2243.049435][ T8212] __mfill_atomic_pte+0xe0/0x610 [ 2243.049461][ T8212] mfill_atomic_pte_zeropage+0x3a7/0x640 [ 2243.049486][ T8212] ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10 [ 2243.049509][ T8212] ? mm_alloc_pmd+0x246/0x400 [ 2243.049529][ T8212] userfaultfd_zeropage+0x674/0xfa0 [ 2243.049571][ T8212] ? __pfx_userfaultfd_zeropage+0x10/0x10 [ 2243.049614][ T8212] userfaultfd_ioctl+0x483/0x560 [ 2243.049646][ T8212] ? __fget_files+0x2a/0x420 [ 2243.049674][ T8212] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2243.049701][ T8212] ? __fget_files+0x2a/0x420 [ 2243.049726][ T8212] ? __fget_files+0x3a2/0x420 [ 2243.049752][ T8212] ? __fget_files+0x2a/0x420 [ 2243.049782][ T8212] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2243.049809][ T8212] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2243.049837][ T8212] __se_sys_ioctl+0xfc/0x170 [ 2243.049860][ T8212] do_syscall_64+0x166/0x520 [ 2243.049886][ T8212] ? trace_irq_disable+0x3b/0x140 [ 2243.049906][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.049926][ T8212] ? clear_bhb_loop+0x70/0xc0 [ 2243.049949][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.049968][ T8212] RIP: 0033:0x7fb1da19e159 [ 2243.049985][ T8212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2243.050004][ T8212] RSP: 002b:00007fb1db082028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2243.050024][ T8212] RAX: ffffffffffffffda RBX: 00007fb1da425fa0 RCX: 00007fb1da19e159 [ 2243.050038][ T8212] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 2243.050051][ T8212] RBP: 00007fb1db082090 R08: 0000000000000000 R09: 0000000000000000 [ 2243.050082][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2243.050098][ T8212] R13: 00007fb1da426038 R14: 00007fb1da425fa0 R15: 00007fb1da54fa48 [ 2243.050140][ T8212] [ 2243.989954][ T8229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2243.990471][ T8229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.017375][ T8227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2244.017869][ T8227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2244.131119][T10119] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2244.282906][T10119] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 2244.285632][T10119] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 2244.285670][T10119] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2244.285701][T10119] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2244.285734][T10119] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2244.358739][T10119] usb 1-1: config 0 descriptor?? [ 2244.371960][T10119] usb-storage 1-1:0.0: USB Mass Storage device detected [ 2244.404088][T10119] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 2244.578422][T15727] usb 1-1: USB disconnect, device number 103 [ 2245.080448][ T8261] netlink: 'syz.3.10641': attribute type 1 has an invalid length. [ 2245.261140][ T8261] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2245.320619][ T8262] bond3: (slave veth0_to_bond): making interface the new active one [ 2245.382750][ T8262] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2245.486206][ T8273] fuse: Bad value for 'group_id' [ 2245.486234][ T8273] fuse: Bad value for 'group_id' [ 2245.515873][ T6398] net_ratelimit: 30 callbacks suppressed [ 2245.515902][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2245.662134][T15727] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2245.720497][ T8275] ip_tables: iptables: counters copy to user failed while replacing table [ 2245.803808][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2245.833217][T15727] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2245.834562][T15727] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2245.834608][T15727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2245.834638][T15727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2245.834662][T15727] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2245.838481][T15727] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2245.838513][T15727] usb 1-1: Manufacturer: syz [ 2245.889599][T15727] usb 1-1: config 0 descriptor?? [ 2245.908317][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10646'. [ 2245.921462][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.022759][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.142152][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.251716][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.269414][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.271714][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2246.326269][T15727] appleir 0003:05AC:8243.00A4: unknown main item tag 0x0 [ 2246.345781][T15727] appleir 0003:05AC:8243.00A4: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 2246.371630][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.493068][ T6398] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.526368][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2246.526846][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2246.601486][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2246.980877][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10650'. [ 2246.980912][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10650'. [ 2247.211255][T24853] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 2247.363886][T24853] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2247.401633][T24853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.401666][T24853] usb 4-1: Product: syz [ 2247.401683][T24853] usb 4-1: Manufacturer: syz [ 2247.401700][T24853] usb 4-1: SerialNumber: syz [ 2247.810617][T24853] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 2248.451363][T15727] usb 1-1: USB disconnect, device number 104 [ 2248.649610][ T8330] pimreg: entered allmulticast mode [ 2248.894477][ T8341] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10667'. [ 2248.894510][ T8341] netlink: 'syz.4.10667': attribute type 1 has an invalid length. [ 2249.000604][ T8341] netlink: 'syz.4.10667': attribute type 39 has an invalid length. [ 2249.049898][ T8347] tipc: Enabling of bearer rejected, failed to enable media [ 2249.292152][ T8353] input: syz1 as /devices/virtual/input/input323 [ 2249.357410][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2249.358023][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.116581][ T8361] pimreg: left allmulticast mode [ 2250.317135][T24853] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 2250.317169][T24853] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2250.318005][T24853] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2250.336816][T24853] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 2250.377703][T24853] usb 4-1: USB disconnect, device number 32 [ 2250.398680][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10674'. [ 2250.612231][ T6396] net_ratelimit: 32 callbacks suppressed [ 2250.612278][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2250.781401][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.781865][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2250.784504][ T8374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2250.787037][ T8374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2251.089376][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.222317][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.339427][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.374144][ T8390] FAULT_INJECTION: forcing a failure. [ 2251.374144][ T8390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2251.374185][ T8390] CPU: 1 UID: 0 PID: 8390 Comm: syz.3.10680 Tainted: G L syzkaller #0 PREEMPT(full) [ 2251.374217][ T8390] Tainted: [L]=SOFTLOCKUP [ 2251.374227][ T8390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2251.374241][ T8390] Call Trace: [ 2251.374250][ T8390] [ 2251.374261][ T8390] dump_stack_lvl+0xe8/0x150 [ 2251.374299][ T8390] should_fail_ex+0x410/0x560 [ 2251.374333][ T8390] _copy_from_user+0x2d/0xb0 [ 2251.374366][ T8390] __sys_connect+0x155/0x450 [ 2251.374399][ T8390] ? __pfx___sys_connect+0x10/0x10 [ 2251.374442][ T8390] ? __pfx_ksys_write+0x10/0x10 [ 2251.374473][ T8390] __x64_sys_connect+0x7a/0x90 [ 2251.374504][ T8390] do_syscall_64+0x166/0x520 [ 2251.374536][ T8390] ? trace_irq_disable+0x3b/0x140 [ 2251.374561][ T8390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.374585][ T8390] ? clear_bhb_loop+0x70/0xc0 [ 2251.374613][ T8390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.374637][ T8390] RIP: 0033:0x7fb1da19e159 [ 2251.374659][ T8390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2251.374680][ T8390] RSP: 002b:00007fb1db082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 2251.374706][ T8390] RAX: ffffffffffffffda RBX: 00007fb1da425fa0 RCX: 00007fb1da19e159 [ 2251.374724][ T8390] RDX: 0000000000000010 RSI: 0000200000000700 RDI: 0000000000000006 [ 2251.374739][ T8390] RBP: 00007fb1db082090 R08: 0000000000000000 R09: 0000000000000000 [ 2251.374754][ T8390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2251.374769][ T8390] R13: 00007fb1da426038 R14: 00007fb1da425fa0 R15: 00007fb1da54fa48 [ 2251.374805][ T8390] [ 2251.445751][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.551288][ T6396] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.670948][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.750216][ T8392] netlink: 240 bytes leftover after parsing attributes in process `syz.3.10681'. [ 2251.781826][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2251.839010][ T8392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2251.843233][ T8392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2252.060840][ T5695] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2252.113909][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2252.212267][ T5695] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 2252.213627][ T5695] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2252.213689][ T5695] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2252.213732][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2253.076689][ T5695] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -71 [ 2253.095064][ T5695] usb 4-1: USB disconnect, device number 33 [ 2253.679902][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10687'. [ 2253.679935][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10687'. [ 2253.719310][ T8411] FAULT_INJECTION: forcing a failure. [ 2253.719310][ T8411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2253.719352][ T8411] CPU: 0 UID: 0 PID: 8411 Comm: syz.3.10687 Tainted: G L syzkaller #0 PREEMPT(full) [ 2253.719383][ T8411] Tainted: [L]=SOFTLOCKUP [ 2253.719392][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2253.719405][ T8411] Call Trace: [ 2253.719415][ T8411] [ 2253.719426][ T8411] dump_stack_lvl+0xe8/0x150 [ 2253.719463][ T8411] should_fail_ex+0x410/0x560 [ 2253.719496][ T8411] _copy_from_user+0x2d/0xb0 [ 2253.719538][ T8411] ___sys_sendmsg+0x1c6/0x360 [ 2253.719571][ T8411] ? __lock_acquire+0x747/0x2de0 [ 2253.719602][ T8411] ? __pfx____sys_sendmsg+0x10/0x10 [ 2253.719672][ T8411] ? __fget_files+0x2a/0x420 [ 2253.719702][ T8411] ? __fget_files+0x3a2/0x420 [ 2253.719745][ T8411] __x64_sys_sendmsg+0x1b1/0x290 [ 2253.719782][ T8411] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2253.719836][ T8411] do_syscall_64+0x166/0x520 [ 2253.719868][ T8411] ? trace_irq_disable+0x3b/0x140 [ 2253.719892][ T8411] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.719916][ T8411] ? clear_bhb_loop+0x70/0xc0 [ 2253.719944][ T8411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2253.719966][ T8411] RIP: 0033:0x7fb1da19e159 [ 2253.719988][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2253.720024][ T8411] RSP: 002b:00007fb1db082028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2253.720049][ T8411] RAX: ffffffffffffffda RBX: 00007fb1da425fa0 RCX: 00007fb1da19e159 [ 2253.720066][ T8411] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 2253.720081][ T8411] RBP: 00007fb1db082090 R08: 0000000000000000 R09: 0000000000000000 [ 2253.720096][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2253.720110][ T8411] R13: 00007fb1da426038 R14: 00007fb1da425fa0 R15: 00007fb1da54fa48 [ 2253.720145][ T8411] [ 2255.098221][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10689'. [ 2255.098246][ T8416] netlink: 'syz.4.10689': attribute type 1 has an invalid length. [ 2255.435186][ T8417] netlink: 'syz.4.10689': attribute type 39 has an invalid length. [ 2262.182590][ T8402] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10684'. [ 2262.220852][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2262.331369][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2262.378688][ T8423] netlink: 'syz.4.10692': attribute type 1 has an invalid length. [ 2262.378714][ T8423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10692'. [ 2262.399461][ T8426] netlink: 'syz.4.10692': attribute type 1 has an invalid length. [ 2262.399485][ T8426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10692'. [ 2262.441302][ T5100] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2262.639569][ T8424] syz.0.10693: vmalloc error: size 16384, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 2262.639605][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10695'. [ 2262.639612][ T8424] ,cpuset=/,mems_allowed=0-1 [ 2262.639658][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.0.10693 Tainted: G L syzkaller #0 PREEMPT(full) [ 2262.639688][ T8424] Tainted: [L]=SOFTLOCKUP [ 2262.639697][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2262.639712][ T8424] Call Trace: [ 2262.639722][ T8424] [ 2262.639733][ T8424] dump_stack_lvl+0xe8/0x150 [ 2262.639776][ T8424] warn_alloc+0x24d/0x270 [ 2262.639808][ T8424] ? __pfx_warn_alloc+0x10/0x10 [ 2262.639839][ T8424] ? alloc_pages_mpol+0x256/0x390 [ 2262.639880][ T8424] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 2262.639948][ T8424] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2262.639984][ T8424] ? nft_array_may_resize+0x354/0x570 [ 2262.640017][ T8424] ? rcu_is_watching+0x16/0xb0 [ 2262.640048][ T8424] ? nft_array_may_resize+0x354/0x570 [ 2262.640080][ T8424] ? rcu_is_watching+0x16/0xb0 [ 2262.640111][ T8424] ? nft_array_may_resize+0x354/0x570 [ 2262.640158][ T8424] __kvmalloc_node_noprof+0x5a1/0x820 [ 2262.640190][ T8424] ? nft_array_may_resize+0x354/0x570 [ 2262.640223][ T8424] ? __kmalloc_cache_noprof+0x321/0x600 [ 2262.640256][ T8424] ? nft_array_may_resize+0x32d/0x570 [ 2262.640288][ T8424] ? nft_array_may_resize+0x354/0x570 [ 2262.640329][ T8424] nft_array_may_resize+0x354/0x570 [ 2262.640369][ T8424] nft_rbtree_insert+0x11e/0x2510 [ 2262.640406][ T8424] ? __kmalloc_noprof+0x1ab/0x720 [ 2262.640427][ T8424] ? nft_trans_alloc+0x22/0x2a0 [ 2262.640470][ T8424] ? nft_trans_alloc+0x40/0x2a0 [ 2262.640506][ T8424] nf_tables_newsetelem+0x2aa4/0x4200 [ 2262.640583][ T8424] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 2262.640617][ T8424] ? lock_acquire+0x115/0x350 [ 2262.640652][ T8424] ? nla_validate_array+0xfc/0x260 [ 2262.640718][ T8424] ? __pfx___nla_validate_parse+0x10/0x10 [ 2262.640758][ T8424] ? __pfx_nf_tables_newset+0x10/0x10 [ 2262.640797][ T8424] ? lock_acquire+0x115/0x350 [ 2262.640821][ T8424] ? nfnl_pernet+0x23/0x240 [ 2262.640858][ T8424] ? __nla_parse+0x40/0x60 [ 2262.640888][ T8424] nfnetlink_rcv+0x1288/0x28c0 [ 2262.640951][ T8424] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2262.640997][ T8424] ? ref_tracker_free+0x689/0x830 [ 2262.641047][ T8424] ? skb_clone+0x246/0x3a0 [ 2262.641081][ T8424] ? __netlink_deliver_tap+0x811/0x860 [ 2262.641111][ T8424] ? netlink_deliver_tap+0x2e/0x1b0 [ 2262.641132][ T8424] ? netlink_deliver_tap+0x2e/0x1b0 [ 2262.641169][ T8424] netlink_unicast+0x7bd/0x940 [ 2262.641212][ T8424] netlink_sendmsg+0x813/0xb40 [ 2262.641243][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2262.641272][ T8424] ? apparmor_socket_sendmsg+0x98/0x360 [ 2262.641299][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2262.641320][ T8424] sock_sendmsg_nosec+0x13a/0x180 [ 2262.641345][ T8424] ____sys_sendmsg+0x54e/0x850 [ 2262.641381][ T8424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2262.641419][ T8424] ? import_iovec+0x73/0xa0 [ 2262.641451][ T8424] ___sys_sendmsg+0x2a5/0x360 [ 2262.641480][ T8424] ? __lock_acquire+0x747/0x2de0 [ 2262.641507][ T8424] ? __pfx____sys_sendmsg+0x10/0x10 [ 2262.641541][ T8424] ? futex_wait+0x2a2/0x390 [ 2262.641590][ T8424] ? __fget_files+0x2a/0x420 [ 2262.641619][ T8424] ? __fget_files+0x3a2/0x420 [ 2262.641659][ T8424] __x64_sys_sendmsg+0x1b1/0x290 [ 2262.641692][ T8424] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2262.641744][ T8424] do_syscall_64+0x166/0x520 [ 2262.641774][ T8424] ? trace_irq_disable+0x3b/0x140 [ 2262.641795][ T8424] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.641816][ T8424] ? clear_bhb_loop+0x70/0xc0 [ 2262.641841][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2262.641862][ T8424] RIP: 0033:0x7f6dd0b9e159 [ 2262.641884][ T8424] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2262.641901][ T8424] RSP: 002b:00007f6dd1a6b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2262.641925][ T8424] RAX: ffffffffffffffda RBX: 00007f6dd0e25fa0 RCX: 00007f6dd0b9e159 [ 2262.641940][ T8424] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 2262.641955][ T8424] RBP: 00007f6dd0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 2262.641968][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2262.641981][ T8424] R13: 00007f6dd0e26038 R14: 00007f6dd0e25fa0 R15: 00007f6dd0f4fa48 [ 2262.642014][ T8424] [ 2262.644226][ T8424] Mem-Info: [ 2262.644246][ T8424] active_anon:12479 inactive_anon:14931 isolated_anon:0 [ 2262.644246][ T8424] active_file:195 inactive_file:81440 isolated_file:0 [ 2262.644246][ T8424] unevictable:0 dirty:339 writeback:0 [ 2262.644246][ T8424] slab_reclaimable:10932 slab_unreclaimable:152690 [ 2262.644246][ T8424] mapped:30122 shmem:17284 pagetables:2227 [ 2262.644246][ T8424] sec_pagetables:0 bounce:0 [ 2262.644246][ T8424] kernel_misc_reclaimable:0 [ 2262.644246][ T8424] free:1181724 free_pcp:10361 free_cma:0 [ 2262.764794][ T8424] Node 0 active_anon:49916kB inactive_anon:59724kB active_file:780kB inactive_file:325416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120372kB dirty:1356kB writeback:0kB shmem:69136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18632kB pagetables:8752kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2262.764980][ T8424] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 2262.765144][ T8424] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2262.765325][ T8424] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 2262.765444][ T8424] Node 0 DMA32 free:769964kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:49916kB inactive_anon:59724kB active_file:780kB inactive_file:325416kB unevictable:0kB writepending:1356kB zspages:2392kB present:3129332kB managed:2546864kB mlocked:0kB bounce:0kB free_pcp:41592kB local_pcp:21016kB free_cma:0kB [ 2262.765666][ T8424] lowmem_reserve[]: 0 0 0 0 0 [ 2262.765832][ T8424] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2262.765992][ T8424] lowmem_reserve[]: 0 0 0 0 0 [ 2262.766092][ T8424] Node 1 Normal free:3941572kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:344kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2262.766257][ T8424] lowmem_reserve[]: 0 0 0 0 0 [ 2262.827385][ T8424] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 2262.827739][ T8424] Node 0 DMA32: 1695*4kB (UME) 1571*8kB (UM) 1218*16kB (UME) 858*32kB (UME) 1722*64kB (UME) 926*128kB (UME) 415*256kB (UME) 168*512kB (ME) 54*1024kB (UM) 3*2048kB (UM) 54*4096kB (UM) = 769908kB [ 2262.828298][ T8424] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2262.829200][ T8424] Node 1 Normal: 1*4kB (U) 2*8kB (M) 5*16kB (UM) 7*32kB (UM) 12*64kB (UM) 7*128kB (UM) 5*256kB (UM) 6*512kB (UM) 3*1024kB (UM) 4*2048kB (M) 958*4096kB (UM) = 3941572kB [ 2262.853929][ T8424] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.853991][ T8424] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2262.854061][ T8424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2262.854107][ T8424] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2262.854162][ T8424] 98923 total pagecache pages [ 2262.854193][ T8424] 6 pages in swap cache [ 2262.854216][ T8424] Free swap = 116276kB [ 2262.854239][ T8424] Total swap = 124996kB [ 2262.854269][ T8424] 2097051 pages RAM [ 2262.854291][ T8424] 0 pages HighMem/MovableOnly [ 2262.854315][ T8424] 428719 pages reserved [ 2262.854337][ T8424] 0 pages cma reserved [ 2263.592199][ T8435] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2263.643221][T19832] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2263.754757][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2263.861747][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2264.005897][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10699'. [ 2264.112876][ T31] audit: type=1326 audit(1790912598.064:6140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9330b9e159 code=0x7ffc0000 [ 2264.147298][ T31] audit: type=1326 audit(1790912598.074:6141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f9330b9e159 code=0x7ffc0000 [ 2264.176271][ T31] audit: type=1326 audit(1790912598.104:6142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9330b9e159 code=0x7ffc0000 [ 2264.176339][ T31] audit: type=1326 audit(1790912598.104:6143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9330b9e159 code=0x7ffc0000 [ 2264.189164][ T31] audit: type=1326 audit(1790912598.134:6144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9330b5e98e code=0x7ffc0000 [ 2264.202995][ T31] audit: type=1326 audit(1790912598.164:6145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9330b5e98e code=0x7ffc0000 [ 2264.203550][ T8454] FAULT_INJECTION: forcing a failure. [ 2264.203550][ T8454] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.203636][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.9.10700 Tainted: G L syzkaller #0 PREEMPT(full) [ 2264.203720][ T8454] Tainted: [L]=SOFTLOCKUP [ 2264.203743][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2264.203777][ T8454] Call Trace: [ 2264.203800][ T8454] [ 2264.203831][ T8454] dump_stack_lvl+0xe8/0x150 [ 2264.203941][ T8454] should_fail_ex+0x410/0x560 [ 2264.204039][ T8454] should_failslab+0xa8/0x100 [ 2264.204126][ T8454] __kmalloc_cache_noprof+0xa3/0x600 [ 2264.204200][ T8454] ? landlock_create_object+0x68/0x150 [ 2264.204258][ T8454] ? landlock_create_object+0x68/0x150 [ 2264.204343][ T8454] ? landlock_append_fs_rule+0x1c1/0xbe0 [ 2264.204413][ T8454] landlock_create_object+0x68/0x150 [ 2264.204487][ T8454] ? landlock_append_fs_rule+0x1c1/0xbe0 [ 2264.204566][ T8454] landlock_append_fs_rule+0x566/0xbe0 [ 2264.204671][ T8454] ? __pfx_landlock_append_fs_rule+0x10/0x10 [ 2264.204775][ T8454] __se_sys_landlock_add_rule+0x883/0x9f0 [ 2264.204853][ T8454] ? __pfx___se_sys_landlock_add_rule+0x10/0x10 [ 2264.204938][ T8454] ? __pfx_ksys_write+0x10/0x10 [ 2264.205012][ T8454] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 2264.205100][ T8454] do_syscall_64+0x166/0x520 [ 2264.205183][ T8454] ? trace_irq_disable+0x3b/0x140 [ 2264.205252][ T8454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.205309][ T8454] ? clear_bhb_loop+0x70/0xc0 [ 2264.205369][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2264.205434][ T8454] RIP: 0033:0x7f9330b9e159 [ 2264.205489][ T8454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2264.205542][ T8454] RSP: 002b:00007f9331aa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bd [ 2264.205606][ T8454] RAX: ffffffffffffffda RBX: 00007f9330e25fa0 RCX: 00007f9330b9e159 [ 2264.205651][ T8454] RDX: 0000200000000000 RSI: 0000000000000001 RDI: 0000000000000005 [ 2264.205692][ T8454] RBP: 00007f9331aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 2264.205726][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2264.205768][ T8454] R13: 00007f9330e26038 R14: 00007f9330e25fa0 R15: 00007f9330f4fa48 [ 2264.205856][ T8454] [ 2264.206756][ T31] audit: type=1326 audit(1790912598.164:6146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f9330b9e159 code=0x7ffc0000 [ 2264.268575][ T31] audit: type=1326 audit(1790912598.214:6147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9330b5e98e code=0x7ffc0000 [ 2264.271841][ T31] audit: type=1326 audit(1790912598.214:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9330b5e98e code=0x7ffc0000 [ 2264.296534][ T31] audit: type=1326 audit(1790912598.214:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.9.10700" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9330b5e98e code=0x7ffc0000 [ 2264.745072][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2264.856036][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2264.972937][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.001691][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2265.097811][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2265.201385][ T8470] binder: 8469:8470 ioctl c0306201 200000000680 returned -14 [ 2265.316430][ T8468] tipc: Enabling of bearer rejected, failed to enable media [ 2267.383097][ T5695] hid-generic 0000:0000:0000.00A5: unknown main item tag 0x0 [ 2267.423239][ T5695] hid-generic 0000:0000:0000.00A5: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2267.490120][T25608] net_ratelimit: 12 callbacks suppressed [ 2267.490139][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2267.590898][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2267.712005][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2267.827329][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2267.944337][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2268.070971][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2268.081065][ T8496] batman_adv: batadv0: Adding interface: syzkaller0 [ 2268.081085][ T8496] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2268.081137][ T8496] batman_adv: batadv0: Interface activated: syzkaller0 [ 2268.497901][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2268.589352][ T8498] x_tables: duplicate underflow at hook 2 [ 2268.593459][ T8498] fuse: Bad value for 'rootmode' [ 2268.608619][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2268.749912][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2268.852668][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2269.059799][ T8503] loop4: detected capacity change from 0 to 7 [ 2269.071389][ T8503] Dev loop4: unable to read RDB block 7 [ 2269.071423][ T8503] loop4: AHDI p1 p2 p3 [ 2269.071446][ T8503] loop4: partition table partially beyond EOD, truncated [ 2269.071629][ T8503] loop4: p1 start 1601398130 is beyond EOD, truncated [ 2269.071652][ T8503] loop4: p2 start 1702059890 is beyond EOD, truncated [ 2269.230537][ T8496] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 2269.516722][ T8496] batman_adv: batadv0: Removing interface: syzkaller0 [ 2269.591475][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.595985][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2269.646428][ T8512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2269.671701][ T8512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2270.390437][ T8520] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10721'. [ 2270.697484][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 2270.697506][ T31] audit: type=1326 audit(1790912604.654:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8521 comm="syz.7.10720" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc81b39e159 code=0x0 [ 2270.847577][ T8533] netlink: 52 bytes leftover after parsing attributes in process `syz.0.10724'. [ 2271.982076][ T8550] netlink: 'syz.0.10731': attribute type 17 has an invalid length. [ 2272.056421][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 2272.056557][ T8550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2272.071735][ T8552] netlink: 'syz.0.10731': attribute type 8 has an invalid length. [ 2272.088681][T15727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2272.233294][T19832] bridge0: port 2(bridge_slave_1) entered blocking state [ 2272.233373][T19832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2272.271808][T24853] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2272.562284][ T5105] net_ratelimit: 23 callbacks suppressed [ 2272.562309][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2272.679536][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2272.781908][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2272.893376][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.002104][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.112665][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.211595][T24853] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 2273.262023][ T8569] ovs-system: entered promiscuous mode [ 2273.262759][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.374689][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.376991][T24853] usb 1-1: Using ep0 maxpacket: 16 [ 2273.377668][T24853] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2273.378994][T24853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2273.379017][T24853] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.379035][T24853] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2273.379065][T24853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2273.468352][T24853] usb 1-1: config 0 descriptor?? [ 2273.481437][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2273.592678][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2274.396160][T24853] usbhid 1-1:0.0: can't add hid device: -71 [ 2274.396268][T24853] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2274.435752][T24853] usb 1-1: USB disconnect, device number 105 [ 2274.513656][ T8579] ip6tnl2: entered allmulticast mode [ 2274.662201][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10740'. [ 2274.662233][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10740'. [ 2274.665694][ T8583] netlink: 'syz.3.10740': attribute type 39 has an invalid length. [ 2275.226576][ T31] audit: type=1326 audit(1790912609.174:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8591 comm="syz.3.10742" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb1da19e159 code=0x0 [ 2275.428746][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2275.429633][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2277.581776][T25608] net_ratelimit: 34 callbacks suppressed [ 2277.581800][T25608] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2277.627858][ T8632] socket: no more sockets [ 2277.695953][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2277.818525][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2277.943174][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.087931][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.201329][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.312586][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.421601][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.544181][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2278.891787][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10758'. [ 2278.891817][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10758'. [ 2280.287673][ T8677] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10764'. [ 2281.950104][ T8657] batman_adv: batadv0: Interface deactivated: gretap1 [ 2282.186907][ T8657] gretap0: left allmulticast mode [ 2282.412355][ T5105] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2282.412395][ T5105] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.413394][ T5105] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2282.413428][ T5105] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.413556][ T5105] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2282.413587][ T5105] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.413723][ T5105] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2282.413754][ T5105] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.596473][ T8700] tipc: Enabling of bearer rejected, failed to enable media [ 2282.631818][T19825] net_ratelimit: 5 callbacks suppressed [ 2282.631843][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.743474][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.851865][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2282.966859][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2283.075826][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2283.186796][ T5108] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2283.256956][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.257032][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.311727][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2283.400144][ T31] audit: type=1326 audit(1790912617.344:6155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8722 comm="syz.9.10778" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9330b9e159 code=0x0 [ 2284.557296][ T31] audit: type=1326 audit(1790912618.504:6156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1da19e159 code=0x7ffc0000 [ 2284.557358][ T31] audit: type=1326 audit(1790912618.504:6157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1da19e159 code=0x7ffc0000 [ 2284.557405][ T31] audit: type=1326 audit(1790912618.504:6158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fb1da19e159 code=0x7ffc0000 [ 2284.557454][ T31] audit: type=1326 audit(1790912618.504:6159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1da19e159 code=0x7ffc0000 [ 2284.557503][ T31] audit: type=1326 audit(1790912618.504:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1da15e98e code=0x7ffc0000 [ 2284.559810][ T8736] FAULT_INJECTION: forcing a failure. [ 2284.559810][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 2284.559846][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.3.10783 Tainted: G L syzkaller #0 PREEMPT(full) [ 2284.559876][ T8736] Tainted: [L]=SOFTLOCKUP [ 2284.559886][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2284.559899][ T8736] Call Trace: [ 2284.559909][ T8736] [ 2284.559919][ T8736] dump_stack_lvl+0xe8/0x150 [ 2284.559958][ T8736] should_fail_ex+0x410/0x560 [ 2284.559993][ T8736] should_failslab+0xa8/0x100 [ 2284.560023][ T8736] ? audit_log_start+0x103/0xa10 [ 2284.560055][ T8736] kmem_cache_alloc_noprof+0xa1/0x600 [ 2284.560082][ T8736] ? auditd_test_task+0x22/0x280 [ 2284.560113][ T8736] ? auditd_test_task+0x22/0x280 [ 2284.560141][ T8736] ? audit_log_start+0x103/0xa10 [ 2284.560180][ T8736] audit_log_start+0x103/0xa10 [ 2284.560219][ T8736] ? __pfx_audit_log_start+0x10/0x10 [ 2284.560250][ T8736] ? __lock_acquire+0x747/0x2de0 [ 2284.560288][ T8736] ? __lock_acquire+0x747/0x2de0 [ 2284.560317][ T8736] ? __pfx_refcount_dec_not_one+0x10/0x10 [ 2284.560352][ T8736] audit_seccomp+0x63/0x190 [ 2284.560407][ T8736] ? clear_bhb_loop+0x70/0xc0 [ 2284.560431][ T8736] ? clear_bhb_loop+0xe/0xc0 [ 2284.560460][ T8736] __seccomp_filter+0xd14/0x1de0 [ 2284.560496][ T8736] ? lock_acquire+0x115/0x350 [ 2284.560525][ T8736] ? __pfx___seccomp_filter+0x10/0x10 [ 2284.560559][ T8736] ? landlock_put_ruleset+0x14/0x2b0 [ 2284.560588][ T8736] ? landlock_put_ruleset+0x113/0x2b0 [ 2284.560616][ T8736] ? __se_sys_landlock_add_rule+0x779/0x9f0 [ 2284.560653][ T8736] ? __pfx_ksys_write+0x10/0x10 [ 2284.560679][ T8736] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 2284.560712][ T8736] do_syscall_64+0x11f/0x520 [ 2284.560741][ T8736] ? trace_irq_disable+0x3b/0x140 [ 2284.560764][ T8736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.560788][ T8736] ? clear_bhb_loop+0x70/0xc0 [ 2284.560813][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2284.560836][ T8736] RIP: 0033:0x7fb1da15e98e [ 2284.560857][ T8736] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2284.560877][ T8736] RSP: 002b:00007fb1db081fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2284.560901][ T8736] RAX: ffffffffffffffda RBX: 00007fb1db0826c0 RCX: 00007fb1da15e98e [ 2284.560919][ T8736] RDX: 000000000000000f RSI: 00007fb1db0820a0 RDI: 0000000000000006 [ 2284.560934][ T8736] RBP: 00007fb1db082090 R08: 0000000000000000 R09: 0000000000000000 [ 2284.560948][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2284.560963][ T8736] R13: 00007fb1da426038 R14: 00007fb1da425fa0 R15: 00007fb1da54fa48 [ 2284.560998][ T8736] [ 2284.567607][ T8736] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 2284.567673][ T8736] audit: out of memory in audit_log_start [ 2284.583905][ T31] audit: type=1326 audit(1790912618.504:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1da15e98e code=0x7ffc0000 [ 2284.584080][ T31] audit: type=1326 audit(1790912618.504:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.3.10783" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fb1da19e159 code=0x7ffc0000 [ 2295.300228][ T8755] netlink: 'syz.7.10787': attribute type 4 has an invalid length. [ 2295.300280][ T8755] netlink: 152 bytes leftover after parsing attributes in process `syz.7.10787'. [ 2295.385120][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2295.385469][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2295.440381][ T8762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2295.472833][ T8762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2295.495982][ T8766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2295.532207][ T8755] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2295.641630][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2295.755186][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2295.861964][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2295.974002][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2296.083033][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2296.271556][T27886] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2296.423050][ T31] kauditd_printk_skb: 3 callbacks suppressed [ 2296.423070][ T31] audit: type=1326 audit(1790912630.374:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8793 comm="syz.9.10799" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9330b9e159 code=0x0 [ 2301.105596][T20852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2301.125403][T20852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2301.127306][T20852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2301.180451][T20852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2301.292108][T20852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2303.498958][ T1527] Bluetooth: hci2: command tx timeout [ 2305.576338][ T1527] Bluetooth: hci2: command tx timeout [ 2305.691325][ T6395] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2305.861807][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2305.960081][ T8823] FAULT_INJECTION: forcing a failure. [ 2305.960081][ T8823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2305.960124][ T8823] CPU: 1 UID: 0 PID: 8823 Comm: syz.9.10804 Tainted: G L syzkaller #0 PREEMPT(full) [ 2305.960156][ T8823] Tainted: [L]=SOFTLOCKUP [ 2305.960168][ T8823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2305.960183][ T8823] Call Trace: [ 2305.960193][ T8823] [ 2305.960204][ T8823] dump_stack_lvl+0xe8/0x150 [ 2305.960242][ T8823] should_fail_ex+0x410/0x560 [ 2305.960278][ T8823] prepare_alloc_pages+0x223/0x600 [ 2305.960312][ T8823] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 2305.960344][ T8823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2305.960376][ T8823] ? __pfx_policy_nodemask+0x10/0x10 [ 2305.960419][ T8823] ? mfill_atomic_install_pte+0x775/0x890 [ 2305.960448][ T8823] alloc_pages_mpol+0x21e/0x390 [ 2305.960485][ T8823] folio_alloc_mpol_noprof+0x39/0x160 [ 2305.960519][ T8823] shmem_mfill_folio_alloc+0x196/0x370 [ 2305.960556][ T8823] ? __pfx_shmem_mfill_folio_alloc+0x10/0x10 [ 2305.960590][ T8823] __mfill_atomic_pte+0xe0/0x610 [ 2305.960624][ T8823] mfill_atomic_pte_zeropage+0x3a7/0x640 [ 2305.960653][ T8823] ? __pfx_mfill_atomic_pte_zeropage+0x10/0x10 [ 2305.960681][ T8823] ? mm_alloc_pmd+0x246/0x400 [ 2305.960705][ T8823] userfaultfd_zeropage+0x674/0xfa0 [ 2305.960757][ T8823] ? __pfx_userfaultfd_zeropage+0x10/0x10 [ 2305.960810][ T8823] userfaultfd_ioctl+0x483/0x560 [ 2305.960842][ T8823] ? __fget_files+0x2a/0x420 [ 2305.960877][ T8823] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2305.960909][ T8823] ? __fget_files+0x2a/0x420 [ 2305.960940][ T8823] ? __fget_files+0x3a2/0x420 [ 2305.960971][ T8823] ? __fget_files+0x2a/0x420 [ 2305.961006][ T8823] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2305.961039][ T8823] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 2305.961073][ T8823] __se_sys_ioctl+0xfc/0x170 [ 2305.961102][ T8823] do_syscall_64+0x166/0x520 [ 2305.961133][ T8823] ? trace_irq_disable+0x3b/0x140 [ 2305.961157][ T8823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.961180][ T8823] ? clear_bhb_loop+0x70/0xc0 [ 2305.961209][ T8823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2305.961232][ T8823] RIP: 0033:0x7f9330b9e159 [ 2305.961255][ T8823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2305.961275][ T8823] RSP: 002b:00007f9331aa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2305.961300][ T8823] RAX: ffffffffffffffda RBX: 00007f9330e25fa0 RCX: 00007f9330b9e159 [ 2305.961318][ T8823] RDX: 0000200000000000 RSI: 00000000c020aa04 RDI: 0000000000000003 [ 2305.961333][ T8823] RBP: 00007f9331aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 2305.961348][ T8823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2305.961361][ T8823] R13: 00007f9330e26038 R14: 00007f9330e25fa0 R15: 00007f9330f4fa48 [ 2305.961404][ T8823] [ 2305.978292][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2306.493347][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2306.540339][ T8830] netlink: 27 bytes leftover after parsing attributes in process `syz.7.10805'. [ 2306.605548][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2306.621405][T15727] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 2306.772273][T15727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2306.776202][T15727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2306.776234][T15727] usb 1-1: Product: syz [ 2306.776252][T15727] usb 1-1: Manufacturer: syz [ 2306.776268][T15727] usb 1-1: SerialNumber: syz [ 2306.808989][T19825] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2306.862022][ T5695] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2306.911175][ T5917] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.215497][ T8812] bridge0: port 1(bridge_slave_0) entered blocking state [ 2307.217266][ T8812] bridge0: port 1(bridge_slave_0) entered disabled state [ 2307.217779][ T8812] bridge_slave_0: entered allmulticast mode [ 2307.228650][ T8812] bridge_slave_0: entered promiscuous mode [ 2307.264732][ T8812] bridge0: port 2(bridge_slave_1) entered blocking state [ 2307.265024][ T8812] bridge0: port 2(bridge_slave_1) entered disabled state [ 2307.265918][ T8812] bridge_slave_1: entered allmulticast mode [ 2307.269355][ T8812] bridge_slave_1: entered promiscuous mode [ 2307.299661][ T5105] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 2307.324067][ T8852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2307.340365][ T8852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2307.367398][ T31] audit: type=1326 audit(1790912641.314:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.370558][ T31] audit: type=1326 audit(1790912641.314:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.376706][ T31] audit: type=1326 audit(1790912641.324:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.386412][ T31] audit: type=1326 audit(1790912641.344:6171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.393851][ T31] audit: type=1326 audit(1790912641.324:6170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.450409][ T31] audit: type=1326 audit(1790912641.394:6172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dd0b9e159 code=0x7ffc0000 [ 2307.496904][ T31] audit: type=1326 audit(1790912641.394:6173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6dd0b9dec2 code=0x7ffc0000 [ 2307.496969][ T31] audit: type=1326 audit(1790912641.394:6174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6dd0b9df57 code=0x7ffc0000 [ 2307.497065][ T31] audit: type=1326 audit(1790912641.414:6175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6dd0b5ae51 code=0x7ffc0000 [ 2307.497114][ T31] audit: type=1326 audit(1790912641.414:6176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8829 comm="syz.0.10807" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6dd0b9ef49 code=0x7ffc0000 [ 2307.651143][ T1527] Bluetooth: hci2: command tx timeout [ 2307.878305][ T8853] batman_adv: batadv0: Adding interface: gretap0 [ 2307.878326][ T8853] batman_adv: batadv0: The MTU of interface gretap0 is too small (1424) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2307.878522][ T8853] batman_adv: batadv0: Interface activated: gretap0 [ 2307.943762][ T8812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2308.138406][ T5695] usb 1-1: Service connection timeout for: 256 [ 2308.138436][ T5695] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ ** replaying previous printk message ** [ 2308.178208][ T5695] ath9k_htc: Failed to initialize the device [ 2308.180466][ C1] ================================================================== [ 2308.180487][ C1] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x103/0x490 [ 2308.180532][ C1] Read of size 8 at addr ffff88808f8d6158 by task rcu_exp_gp_kthr/19 [ 2308.180552][ C1] [ 2308.180568][ C1] CPU: 1 UID: 0 PID: 19 Comm: rcu_exp_gp_kthr Tainted: G L syzkaller #0 PREEMPT(full) [ 2308.180601][ C1] Tainted: [L]=SOFTLOCKUP [ 2308.180611][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2308.180625][ C1] Call Trace: [ 2308.180639][ C1] [ 2308.180649][ C1] dump_stack_lvl+0xe8/0x150 [ 2308.180685][ C1] print_address_description+0x55/0x1e0 [ 2308.180718][ C1] ? tasklet_action_common+0x103/0x490 [ 2308.180753][ C1] print_report+0x58/0x70 [ 2308.180784][ C1] kasan_report+0x117/0x150 [ 2308.180817][ C1] ? tasklet_action_common+0x103/0x490 [ 2308.180856][ C1] tasklet_action_common+0x103/0x490 [ 2308.180894][ C1] handle_softirqs+0x226/0x860 [ 2308.180927][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 2308.180963][ C1] __irq_exit_rcu+0xcb/0x220 [ 2308.180994][ C1] irq_exit_rcu+0x9/0x30 [ 2308.181023][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2308.181057][ C1] [ 2308.181066][ C1] [ 2308.181076][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2308.181104][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 2308.181137][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 c7 8f 53 0a e8 b2 2d 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 2308.181160][ C1] RSP: 0018:ffffc90000187ac0 EFLAGS: 00000202 [ 2308.181183][ C1] RAX: 00000000001a4c01 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 2308.181203][ C1] RDX: 0000000000000000 RSI: ffffffff8e416437 RDI: ffffffff8c6dad80 [ 2308.181222][ C1] RBP: ffffc90000187b10 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 2308.181241][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffff88801e2d9f40 [ 2308.181260][ C1] R13: ffff8880b873c8a8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 2308.181294][ C1] __schedule+0x17e3/0x58f0 [ 2308.181338][ C1] ? __pfx___schedule+0x10/0x10 [ 2308.181383][ C1] ? schedule+0x90/0x2b0 [ 2308.181414][ C1] schedule+0x164/0x2b0 [ 2308.181445][ C1] kthread_worker_fn+0x4c1/0xb20 [ 2308.181485][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 2308.181524][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 2308.181557][ C1] kthread+0x38b/0x480 [ 2308.181581][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 2308.181617][ C1] ? __pfx_kthread+0x10/0x10 [ 2308.181641][ C1] ret_from_fork+0x514/0xb70 [ 2308.181666][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2308.181687][ C1] ? __switch_to+0xc89/0x1420 [ 2308.181722][ C1] ? __pfx_kthread+0x10/0x10 [ 2308.181745][ C1] ret_from_fork_asm+0x1a/0x30 [ 2308.181791][ C1] [ 2308.181801][ C1] [ 2308.181808][ C1] Allocated by task 5695: [ 2308.181820][ C1] kasan_save_track+0x3e/0x80 [ 2308.181847][ C1] __kasan_kmalloc+0x93/0xb0 [ 2308.181870][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 2308.181893][ C1] ath9k_init_wmi+0x4f/0x2b0 [ 2308.181921][ C1] ath9k_htc_probe_device+0x1e5/0x2370 [ 2308.181945][ C1] ath9k_htc_hw_init+0x32/0x70 [ 2308.181969][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 2308.181995][ C1] request_firmware_work_func+0xf7/0x2d0 [ 2308.182019][ C1] process_scheduled_works+0xc3d/0x1630 [ 2308.182047][ C1] worker_thread+0xa47/0xfb0 [ 2308.182076][ C1] kthread+0x38b/0x480 [ 2308.182097][ C1] ret_from_fork+0x514/0xb70 [ 2308.182115][ C1] ret_from_fork_asm+0x1a/0x30 [ 2308.182147][ C1] [ 2308.182154][ C1] Freed by task 5695: [ 2308.182165][ C1] kasan_save_track+0x3e/0x80 [ 2308.182187][ C1] kasan_save_free_info+0x40/0x50 [ 2308.182221][ C1] __kasan_slab_free+0x5c/0x80 [ 2308.182247][ C1] kfree+0x1c5/0x650 [ 2308.182279][ C1] ath9k_htc_probe_device+0x11a9/0x2370 [ 2308.182303][ C1] ath9k_htc_hw_init+0x32/0x70 [ 2308.182327][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 2308.182363][ C1] request_firmware_work_func+0xf7/0x2d0 [ 2308.182386][ C1] process_scheduled_works+0xc3d/0x1630 [ 2308.182415][ C1] worker_thread+0xa47/0xfb0 [ 2308.182444][ C1] kthread+0x38b/0x480 [ 2308.182463][ C1] ret_from_fork+0x514/0xb70 [ 2308.182482][ C1] ret_from_fork_asm+0x1a/0x30 [ 2308.182515][ C1] [ 2308.182522][ C1] The buggy address belongs to the object at ffff88808f8d6000 [ 2308.182522][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 2308.182544][ C1] The buggy address is located 344 bytes inside of [ 2308.182544][ C1] freed 2048-byte region [ffff88808f8d6000, ffff88808f8d6800) [ 2308.182570][ C1] [ 2308.182576][ C1] The buggy address belongs to the physical page: [ 2308.182589][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8f8d0 [ 2308.182612][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2308.182633][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 2308.182656][ C1] page_type: f5(slab) [ 2308.182678][ C1] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 2308.182699][ C1] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 2308.182722][ C1] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122 [ 2308.182743][ C1] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 2308.182766][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 2308.182787][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 2308.182800][ C1] page dumped because: kasan: bad access detected [ 2308.182829][ C1] page_owner tracks the page as allocated [ 2308.182839][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15518, tgid 15515 (syz.7.2966), ts 745372923571 [ 2308.182875][ C1] post_alloc_hook+0x1f9/0x250 [ 2308.182912][ C1] get_page_from_freelist+0x2209/0x2280 [ 2308.182938][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 2308.182963][ C1] allocate_slab+0x7d/0x620 [ 2308.182993][ C1] refill_objects+0x2d5/0x350 [ 2308.183023][ C1] __pcs_replace_empty_main+0x2c8/0x6c0 [ 2308.183053][ C1] __kmalloc_noprof+0x47b/0x720 [ 2308.183075][ C1] sk_prot_alloc+0xe7/0x210 [ 2308.183106][ C1] sk_alloc+0x3a/0x390 [ 2308.183135][ C1] __netlink_create+0x62/0x260 [ 2308.183167][ C1] netlink_create+0x3ca/0x590 [ 2308.183191][ C1] __sock_create+0x4b3/0x9d0 [ 2308.183215][ C1] __sys_socket+0xd6/0x1b0 [ 2308.183240][ C1] __x64_sys_socket+0x7a/0x90 [ 2308.183265][ C1] do_syscall_64+0x166/0x520 [ 2308.183296][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2308.183320][ C1] page last free pid 5767 tgid 5767 ts 745365148136 stack trace: [ 2308.183337][ C1] free_pages_prepare+0x9eb/0xaf0 [ 2308.183381][ C1] __free_contig_range_common+0x174/0x340 [ 2308.183411][ C1] free_pages_bulk+0x48/0x120 [ 2308.183435][ C1] vfree+0x231/0x490 [ 2308.183466][ C1] delayed_vfree_work+0x55/0x80 [ 2308.183487][ C1] process_scheduled_works+0xc3d/0x1630 [ 2308.183517][ C1] worker_thread+0xa47/0xfb0 [ 2308.183548][ C1] kthread+0x38b/0x480 [ 2308.183568][ C1] ret_from_fork+0x514/0xb70 [ 2308.183587][ C1] ret_from_fork_asm+0x1a/0x30 [ 2308.183619][ C1] [ 2308.183626][ C1] Memory state around the buggy address: [ 2308.183640][ C1] ffff88808f8d6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2308.183657][ C1] ffff88808f8d6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2308.183674][ C1] >ffff88808f8d6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2308.183687][ C1] ^ [ 2308.183701][ C1] ffff88808f8d6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2308.183718][ C1] ffff88808f8d6200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2308.183731][ C1] ================================================================== [ 2308.183876][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2308.965443][ C1] CPU: 1 UID: 0 PID: 19 Comm: rcu_exp_gp_kthr Tainted: G L syzkaller #0 PREEMPT(full) [ 2308.976616][ C1] Tainted: [L]=SOFTLOCKUP [ 2308.980964][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2308.991037][ C1] Call Trace: [ 2308.994435][ C1] [ 2308.997307][ C1] vpanic+0x56d/0xa60 [ 2309.001333][ C1] ? rcu_is_watching+0x16/0xb0 [ 2309.006134][ C1] ? __pfx_vpanic+0x10/0x10 [ 2309.010677][ C1] panic+0xc5/0xd0 [ 2309.014449][ C1] ? __pfx_panic+0x10/0x10 [ 2309.018906][ C1] ? tasklet_action_common+0x103/0x490 [ 2309.024408][ C1] ? tasklet_action_common+0x103/0x490 [ 2309.029907][ C1] check_panic_on_warn+0x89/0xb0 [ 2309.034877][ C1] ? tasklet_action_common+0x103/0x490 [ 2309.040378][ C1] end_report+0x73/0x170 [ 2309.044654][ C1] ? tasklet_action_common+0x103/0x490 [ 2309.050151][ C1] kasan_report+0x128/0x150 [ 2309.054709][ C1] ? tasklet_action_common+0x103/0x490 [ 2309.060204][ C1] tasklet_action_common+0x103/0x490 [ 2309.065535][ C1] handle_softirqs+0x226/0x860 [ 2309.070347][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 2309.075147][ C1] __irq_exit_rcu+0xcb/0x220 [ 2309.079770][ C1] irq_exit_rcu+0x9/0x30 [ 2309.084041][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2309.089710][ C1] [ 2309.093096][ C1] [ 2309.096050][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2309.102061][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 2309.107906][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 c7 8f 53 0a e8 b2 2d 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 2309.127541][ C1] RSP: 0018:ffffc90000187ac0 EFLAGS: 00000202 [ 2309.133654][ C1] RAX: 00000000001a4c01 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 2309.141655][ C1] RDX: 0000000000000000 RSI: ffffffff8e416437 RDI: ffffffff8c6dad80 [ 2309.149649][ C1] RBP: ffffc90000187b10 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 2309.157656][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffff88801e2d9f40 [ 2309.165671][ C1] R13: ffff8880b873c8a8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 2309.173728][ C1] __schedule+0x17e3/0x58f0 [ 2309.178290][ C1] ? __pfx___schedule+0x10/0x10 [ 2309.183180][ C1] ? schedule+0x90/0x2b0 [ 2309.187464][ C1] schedule+0x164/0x2b0 [ 2309.191657][ C1] kthread_worker_fn+0x4c1/0xb20 [ 2309.197160][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 2309.202230][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 2309.207561][ C1] kthread+0x38b/0x480 [ 2309.211658][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 2309.217172][ C1] ? __pfx_kthread+0x10/0x10 [ 2309.221794][ C1] ret_from_fork+0x514/0xb70 [ 2309.226417][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2309.231640][ C1] ? __switch_to+0xc89/0x1420 [ 2309.236361][ C1] ? __pfx_kthread+0x10/0x10 [ 2309.240982][ C1] ret_from_fork_asm+0x1a/0x30 [ 2309.245790][ C1] [ 2309.248996][ C1] Kernel Offset: disabled [ 2309.253342][ C1] Rebooting in 86400 seconds..