last executing test programs: 16m36.996156842s ago: executing program 1 (id=1842): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000740)={0x4, 0x51424752, 0x3e0, 0x95, 0x2, @stepwise={{0x4, 0x3}, {0x9, 0x9}, {0x80000001, 0x3}}}) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000780), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 16m34.800225998s ago: executing program 1 (id=1845): syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) 16m34.621955281s ago: executing program 1 (id=1846): socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r3, &(0x7f0000002d40)={0x2020}, 0xfffffffffffffc88) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8003, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x7) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) socketpair$unix(0x1, 0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) read$FUSE(r5, &(0x7f0000006300)={0x2020}, 0x402) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000001c0), 0x4) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, 0x0) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x19, 0xfe}, {0x9, 0x5, 0x8f44bf2897946724, 0x2, 0x260, 0xc, 0x77, 0x3}, {0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xfd, 0x72}}}}}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000000)=0xffb) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r7, 0xc0040d07, &(0x7f0000000040)=0x121) 16m31.062204458s ago: executing program 1 (id=1851): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {0x0}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7", 0x21}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x7, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16m30.537997499s ago: executing program 1 (id=1853): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) 16m27.869372987s ago: executing program 1 (id=1858): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200000000000000000000000000018900"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de638", 0x33, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x9, 0xffffffff, 0x2001, 0x7, 0x7, 0x0, 0x5, 0xff, 0x5, 0xffd, 0x6, 0x9c, 0xa2, 0x0, 0x6, [0x5, 0xc]}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @val={0x1, 0x3, 0xf1b1, 0xc77, 0x6, 0xcff2}, @x25={0x3, 0x5, 0x9}}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0xe, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x5, 0x4000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 16m12.470863466s ago: executing program 32 (id=1858): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000be4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f00005f0000/0x2000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="ffff50ad45ffffffffaaaaaaaaaa3386dd6700000100513afffe880000000000000000000000000201ff0200000000000000000000000000018900"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8001, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de638", 0x33, 0xfffffffffffffffe) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000280)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0xa, 0x9, 0xffffffff, 0x2001, 0x7, 0x7, 0x0, 0x5, 0xff, 0x5, 0xffd, 0x6, 0x9c, 0xa2, 0x0, 0x6, [0x5, 0xc]}}) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000280)={'raw\x00', 0x3, [{}, {}, {}]}, 0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @val={0x1, 0x3, 0xf1b1, 0xc77, 0x6, 0xcff2}, @x25={0x3, 0x5, 0x9}}, 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000003c0)={0x0, 0xe, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r6, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0, r7}}, 0x18) remap_file_pages(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000000, 0x5, 0x4000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 16m7.504286093s ago: executing program 4 (id=1899): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) 16m5.481972698s ago: executing program 4 (id=1900): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) r8 = socket$netlink(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r10, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) 16m2.97525758s ago: executing program 4 (id=1907): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x9, 0x0, 0x7ffffdbd}]}) r4 = shmget$private(0x0, 0x4000, 0x8, &(0x7f0000755000/0x4000)=nil) r5 = shmat(r4, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmdt(r5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r7 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xf0f041, 0x8e6}) ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r2) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x7, 0x10842) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) 16m0.123269905s ago: executing program 4 (id=1911): socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="100000000000438717c2f20def030000"], 0x10}, 0x20004081) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x8710, 0x129640) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, 0x0) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x200000, 0x0, 0xb49, 0x6, 0xc, 0x0, 0x1}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80044100, &(0x7f0000001a80)) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r1, 0x1000000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, 0x0, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f00000001c0)=ANY=[], 0x0}, 0x94) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 15m55.789170374s ago: executing program 4 (id=1918): r0 = io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x44840) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r3 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) write$P9_RVERSION(r3, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m53.329284342s ago: executing program 4 (id=1923): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000740)={0x4, 0x51424752, 0x3e0, 0x95, 0x2, @stepwise={{0x4, 0x3}, {0x9, 0x9}, {0x80000001, 0x3}}}) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r9 = syz_open_dev$vbi(&(0x7f0000000780), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 15m38.036398698s ago: executing program 33 (id=1923): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000740)={0x4, 0x51424752, 0x3e0, 0x95, 0x2, @stepwise={{0x4, 0x3}, {0x9, 0x9}, {0x80000001, 0x3}}}) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x7e, 0x21, 0x1, 0x60, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback={0x300, 0x460c6}, 0x1, 0x8, 0x25a1, 0x40}}) r9 = syz_open_dev$vbi(&(0x7f0000000780), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r9, 0xc0945662, &(0x7f0000000100)={0x1000, 0x0, '\x00', {0x0, @bt={0x0, 0x5, 0x0, 0x0, 0x9, 0x9, 0xb, 0x7f, 0xbc, 0x0, 0x10001, 0x0, 0x0, 0x8, 0x14, 0x1b, {0x0, 0x6}, 0x7, 0x40}}}) 1m2.191464273s ago: executing program 0 (id=7656): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) (fail_nth: 1) 1m1.751630226s ago: executing program 0 (id=7657): userfaultfd(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) 1m1.660748356s ago: executing program 0 (id=7658): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x200, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9, 0x80, 0x2, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000004) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet_opts(r0, 0x0, 0x2, 0x0, &(0x7f0000000080)) (fail_nth: 1) 1m1.370567024s ago: executing program 0 (id=7659): socket$igmp6(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0xff, '\x00', {0x0, 0x6, '\x00', 0x4, 0x3a, 0x0, @private2, @mcast1}}}}}}}, 0x0) 1m1.258682132s ago: executing program 0 (id=7660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1, 0x3, 0x6361, 0x5, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x870b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, 0x0, 0x0) 56.120577812s ago: executing program 0 (id=7675): r0 = syz_open_dev$media(&(0x7f0000000240), 0x10001, 0x30240) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000005bc0)={&(0x7f0000005a00)=[&(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000000380)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000004c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000000540)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000000580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xfffffee4}, &(0x7f00000006c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000000700)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000b40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x1, 0x7}, {0x7, 0xfffffffffffffff7}, {0x5990, 0x3}, {0x10, 0xfffffffffffffffa}, {0x1, 0x9}, {0x9, 0xd}, {0x3, 0x40}, {0x2, 0x9}, {0x4b1, 0x6}, {0x2, 0x2}, {0x800, 0x7}, {0x8000, 0x1}, {0xf, 0x567}, {0x3, 0xfffffffffffffffd}, {0x1}, {0x400, 0xd59}, {0x7fffffffffffffff, 0x1}, {0xea, 0x8}, {0x3, 0x8}, {0x3, 0x8000000000000000}, {0x9}, {0xe3, 0x9}, {0x401}, {0x14b, 0xffff}, {0x1, 0x100000000}, {0x800, 0xd}, {0xaf, 0x7f}, {0xba5}, {0x7, 0x4}, {0xfff, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x6, 0xfffffffffffff801}, {0x2}, {0x400000000, 0x1}, {0x6}, {0xf92, 0x7}, {0x0, 0x3}, {0x9, 0x80000001}, {0x5, 0xffffffffffffffff}, {0x8000, 0x80000000}, {0x8}, {0x8000000000000001, 0x3}, {0x9, 0x2}, {0x1, 0x4}, {0x3}, {0x8000000000000001, 0x5dbe}, {0x101, 0x100}, {0x6}, {0x8, 0x90ee}, {0xb, 0x7}, {0xe94, 0x4000000000000000}, {0x6, 0x3}, {0xffffffffffffffff, 0xd0a}, {0xf8a, 0x2c}, {0x0, 0x100000000}, {0x2, 0x9}, {0x3, 0x8}, {0x4}, {0xfffffffffffffffa}, {0xffffffffffff0000}, {0x8001, 0x8}, {0x5, 0xffffffffffffff9c}, {0x4000000, 0x3}, {0x7, 0xfffffffffffffff6}, {0x2, 0x5}, {0x100000000, 0x1}, {0x6aaf8773, 0x2}, {0x0, 0x4}, {0xdca, 0xb6}, {0x6c98, 0xffffffffffffffa0}, {0x7fffffff, 0x4}, {0x3, 0x1}, {0x1, 0xb}, {0x7f, 0x401}, {0xf}, {0x8000000000000001, 0x3}, {0x100000000, 0xc}, {0x1000, 0x1}, {0x6, 0x9a}, {0x7, 0x9}, {0x7b307c6, 0x3}, {0x6, 0xd44}, {0x2, 0x8a2}, {0x4, 0x8}, {0x45a, 0x6}, {0x9, 0x76f8}, {0x49ea775e, 0x10}, {0xe9d3, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x10001, 0x450}, {0x0, 0x9}, {0x911, 0xffff}, {0x5, 0x54b}, {0x3, 0x64}, {0x6, 0xe28}, {0xb54, 0x5}, {0xa, 0x6}, {0x7b35, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0xc, 0xfffffffffffffffb}, {0x5}, {0x5, 0x2}, {0x100, 0x9}, {0x4, 0x8}, {0x9, 0x6}, {0xfffffffffffffffe, 0x49}, {0x100, 0x8000}, {0x400, 0x3}, {0x3ff, 0x5}, {0x7, 0x4}, {0x7f, 0x10}, {0x5, 0x8}, {0x5, 0x7}, {0x80000001, 0xa9}, {0x4, 0x3}, {0x7fffffffffffffff}, {0x3, 0x3}, {0xa7ad, 0x7ff}, {0x6, 0x5919}, {0x9, 0x1}, {0x1, 0x800}, {0x2, 0x3}, {0x2, 0xf6}, {0x10000, 0x1}, {0x8000, 0x80000001}, {0x80000000, 0x2}, {0x120000}, {0x39c, 0x7}, {0x401, 0xfffffffffffffffa}, {0x7f, 0x9}, {0x3, 0x3}, {0x3, 0x8}, {0x63f, 0x7}, {0x3, 0x10001}, {0x8, 0x9}, {0x10000, 0x4}, {0x0, 0x2}, {0x1ff, 0xea}, {0x83c, 0x1}, {0x8, 0x1}, {0xe, 0x2730}, {0x3, 0xe60}, {0xdd, 0x1}, {0x100000001, 0x3}, {0x401, 0x3}, {0x5}, {0xa18, 0x70007759}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x36907e13, 0x100000001}, {0x0, 0x7}, {0xe6, 0x3}, {0x0, 0x7fffffffffffffff}, {0x2843, 0xffff}, {0x1000, 0xfffffffffffffffd}, {0x9, 0xddc4}, {0x6, 0xffffffffffffffc1}, {0x3, 0x6}, {0xff, 0x5}, {0x2400000, 0x6c}, {0x7, 0x81}, {0x80000001, 0x7}, {0xc70, 0x3}, {0x2, 0x5}, {0x2, 0x10000}, {0x10001, 0x800}, {0x4}, {0xc4, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x24}, {0xb, 0x4}, {0x4, 0xf}, {0x9, 0x1}, {0x5, 0xfffffffffffffffd}, {0xe, 0x4}, {0x10000, 0x2}, {0x7}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0xf, 0x8}, {0x1, 0x4}, {0xfffffffffffffff0, 0x7ff}, {0xffffffffffffffff, 0x8}, {0x7fffffffffffffff, 0x5}, {0x8dc, 0x90}, {0x2}, {0x1ff, 0x9}, {0x8000000000000001, 0x6}, {0x7, 0x4}, {0x2, 0xd}, {0x8000000000000001, 0x5}, {0x100, 0x98a0}, {0x2, 0x4408d29f}, {0x0, 0x6}, {0x9, 0x9}, {0x9, 0x67c6}, {0x4, 0x8000000000000001}, {0x7fffffffffffffff, 0xfff}, {0x7fffffffffffffff, 0xc}, {0xb6, 0xa28}, {0x1ff, 0xffffffffffff6a34}, {0x2, 0x6}, {0x1}, {0x7d32a598}, {0xd3, 0x9278}, {0x10c8, 0x401}, {0x400, 0x1}, {0x37, 0xffff}, {0x81, 0x2}, {0x6, 0x1}, {0x3, 0xb}, {0x0, 0x2}, {0xfffffffffffffffe, 0xffffffff}, {0x9, 0x6}, {0x8, 0x3}, {0xfff, 0x4}, {0xfffffffffffffffb}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x8b}, {0x2, 0x67}, {0x9, 0x6}, {0x100000000, 0x5}, {0x400, 0x5}, {0x3, 0xfffffffffffffc75}, {0xa, 0x3}, {0x2d, 0x2}, {0x2, 0x5}, {0x0, 0x95}, {0xd4, 0x9e}, {0x10001, 0x7f}, {0x7, 0x5}, {0x7, 0x1}, {0x8, 0x9}, {0x0, 0x2}, {0x408, 0x4}, {0x8000, 0xfffffffffffffffb}, {0x0, 0x7fff}, {0x1c, 0x9}, {0x8, 0x3}, {0xee, 0x8000}, {0xb2, 0x513}, {0x7, 0x4}, {0x12, 0x10000}, {0x0, 0x200}]}, &(0x7f0000001b80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001bc0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001c40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x1}, &(0x7f0000001d80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000001dc0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000001e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000001e40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x60000000}}, &(0x7f0000001e80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000001ec0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000001f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x1}, &(0x7f0000002040)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000002080)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x6, 0x6}, {0x9, 0x1}, {0x8000, 0x7}, {0xf5, 0xffffffff}, {0x4, 0x8001}, {0x10, 0x1}, {0x6, 0x5}, {0x1, 0x72557a2a}, {0x0, 0x2000000000000}, {0xea4, 0x7ff}, {0x2, 0xffffffffb3802c2a}, {0x400, 0xff}, {0x8}, {0x7, 0x1}, {0x6, 0x4}, {0x8, 0x2}, {0x7f, 0x9}, {0x2}, {0x5}, {0x271, 0x765}, {0xd8, 0x800}, {0x100000001, 0x6}, {0x5, 0x1}, {0x3, 0xfffffffffffffffc}, {0x1a6, 0x2}, {0xd636, 0xffff}, {0xa, 0x3}, {0xf46, 0x1}, {0xffff, 0x3800000000000}, {0x1, 0x7}, {0x4, 0x2}, {0x400, 0x1000000}, {0xfffffffffffffffd, 0x3}, {0x7, 0x1}, {0x3, 0x40000}, {0x7ff, 0x6}, {0xffffffff, 0x1000}, {0x10001, 0x7}, {0x3, 0x4}, {0xc6, 0x5}, {0x5, 0x5}, {0xf8b, 0x9}, {0x8, 0xc6}, {0x6, 0x9}, {0x8e3c, 0x97f}, {0x9, 0xffffffffffffffff}, {0x2, 0x3}, {0x10, 0x80000000}, {0x3, 0x4}, {0xa, 0x1000}, {0x5}, {0xc, 0x3}, {0x173, 0x7}, {0x2, 0x1}, {0x1, 0xffffffffffff7032}, {0xff, 0x8}, {0x8000000000000001, 0x50}, {0x6e00000000000, 0x6}, {0xfff, 0x8001}, {0x401, 0x5}, {0x0, 0x9}, {0x0, 0x10}, {0x999}, {0x4, 0x686}, {0x80}, {0x4, 0x401}, {0xb, 0x3}, {0x9, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0x800}, {0x69e, 0x96}, {0x100000000, 0x401}, {0x9, 0x1}, {0xf8c, 0x1}, {0x1, 0x978d}, {0x8, 0x5}, {0x2, 0x9}, {0x9, 0x1ff}, {0x8, 0xfb3}, {0x4, 0xc4}, {0x0, 0x3}, {0x3, 0x3}, {0xd, 0x6}, {0x8, 0x8}, {0x2, 0x400}, {0x8, 0x6}, {0xffffffffffffffff, 0xf}, {0xfffffffffffffc01, 0x3ff}, {0xff, 0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x53f}, {0x754, 0x319}, {0xfffffffffffffff8, 0x2}, {0x4, 0x8}, {0x374791b2, 0x3}, {0x6b, 0xd}, {0xb92, 0x4}, {0x8, 0x18000}, {0xffff, 0x100000000}, {0x1, 0x5}, {0x2, 0xfffffffffffffff7}, {0x1, 0x1}, {0x100}, {0x8000000000000001, 0xff}, {0x6, 0x4}, {0xfffffffffffffff7, 0x101}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x9, 0x2}, {0xfffffffffffffffc, 0x1}, {0x100000001, 0x35c}, {0x5, 0x5}, {0x3ff, 0x8000000000000000}, {0x1, 0x1ff}, {0x7, 0x5}, {0x4, 0x7}, {0xa3d5}, {0xa, 0x9}, {0x10000, 0x8}, {0x7, 0x2}, {0x1, 0x401}, {0x6f, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x200}, {0xb5, 0x2}, {0x401, 0x3}, {0x8000000000000001, 0xffffffffffffffff}, {0x5cd, 0x7}, {0x6, 0xffffffffffffffff}, {0x4, 0x6}, {0x1, 0x6}, {0x6, 0x80}, {0x8000000000000000, 0x3}, {0x2, 0x101}, {0xfffffffffffff000, 0xe}, {0x6, 0x5}, {0xb, 0x2}, {0x8, 0x80000001}, {0x2, 0x7ff}, {0x8, 0x6f9}, {0x7fffffff, 0x8}, {0x8, 0x1}, {0x3, 0x1a}, {0x6, 0x2}, {0xa37, 0x80000000}, {0x0, 0x4}, {0xfffffffffffffff7, 0x681d3b8b}, {0xf, 0x2}, {0x5}, {0x5, 0xffffffff00000000}, {0x3, 0xde87}, {0x2, 0x9}, {0x2, 0x8000000000000001}, {0x2, 0x4}, {0x538ca066, 0xaaeb}, {0x8, 0x6}, {0x7, 0x9d}, {0x1ff, 0xff}, {0x25f80000, 0x40000000000000}, {0x3, 0x8}, {0x9, 0x3}, {0x3, 0xffffffffffff10ba}, {0x7, 0x2}, {0x5, 0x52}, {0x4, 0x22ae}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0xe2}, {0x2, 0xdc}, {0xf2, 0x6}, {0x40, 0x3f}, {0x10001}, {0x8, 0x8}, {0x4, 0x8000}, {0x0, 0x6}, {0x7}, {0x81f, 0x8000000000000000}, {0x3df, 0x200}, {0x3, 0x1}, {0x6, 0xc7}, {0x0, 0x9}, {0x2, 0xffff}, {0x101, 0x7}, {0x8, 0x3}, {0x3, 0x100}, {0xfffffffffffffffc, 0xfe2b}, {0x854c, 0x4}, {0xe8, 0x1}, {0x7, 0x7}, {0x9, 0x4}, {0x1, 0x4}, {0xe, 0x3}, {0x9, 0xfffffffffffffff8}, {0x80000001, 0xc00000000000000}, {0x5, 0x4}, {0x4, 0x80000001}, {0x7ff, 0xffff}, {0x1, 0xe83d}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x9, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x6114, 0xfffffffffffff801}, {0x6, 0x101}, {0x5, 0x2}, {0x5, 0xf}, {0x8, 0x2}, {0x9, 0xffff}, {0xffffffffffffffc0, 0x7f}, {0xff, 0xfffffffffffffff9}, {0x3, 0x100000000}, {0x0, 0x1ff}, {0x2, 0x1}, {0x8000000000000001, 0x5}, {0x4, 0x80000001}, {0xbc, 0x850}, {0xed7, 0x9}, {0xdd, 0x2}, {0x3, 0x9}, {0x4, 0x8943}, {0x4, 0x5}, {0x8, 0x80000001}, {0x329b1829, 0xc000000000}, {0x10, 0xb3}, {0x3, 0x6}, {0x3, 0x2a9}, {0xb, 0x2}, {0xf29d, 0x6}, {0x2, 0x5}, {0xcd, 0x81}, {0x68a8, 0x9}, {0x2, 0x3}, {0x8001, 0x3}, {0x4, 0x400}, {0x6, 0x9}, {0xfffffffffffffffd, 0x958}, {0x8001, 0x3}, {0x16, 0x5}, {0xfffffffffffffffd, 0x8}, {0x0, 0x10000}, {0x18e1, 0x1}, {0xdb, 0x4}, {0x10001, 0x10000}, {0x2, 0x9}, {0x180, 0x7}, {0x3ff, 0x1}, {0xb8c, 0x2}]}, &(0x7f00000030c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003100)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000003140)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003180)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xd74291aa3f34acde}}, &(0x7f00000031c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x6}, &(0x7f0000003300)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x5, 0x9}, {0x8000000000000001, 0x8}, {0x8, 0x733}, {0x200, 0x7}, {0xaf8, 0x5}, {0x80000000, 0x7}, {0x8000000000000000, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x9, 0x2}, {0x7ff, 0x3}, {0x2, 0x9}, {0x80000001, 0x7}, {0x81, 0x9}, {0x7f, 0x5}, {0x1, 0x2}, {0x100000000, 0x78}, {0x0, 0xc0}, {0x1000, 0x8}, {0x1000, 0x653}, {0x81, 0x101}, {0x10, 0x8000}, {0x1ffc0, 0x9}, {0x5, 0x5}, {0xa, 0x1}, {0xf555}, {0x7, 0xfff}, {0x756, 0x7}, {0x6, 0x1000}, {0x4, 0xc03}, {0x7ff, 0x9}, {0x2, 0x7f}, {0x9, 0x4}, {0x80, 0x9}, {0x6, 0x6fb1}, {0xa00000000000000}, {0x7, 0x1}, {0x0, 0xe}, {0x7, 0xd7a1}, {0xffffffffffffffff, 0xfe7}, {0x2, 0x6}, {0xffffffffffffffff, 0xff}, {0xfffffffffffffff9, 0x57}, {0x9, 0x1}, {0x6, 0x9}, {0x9, 0x3}, {0x1f6e}, {0xfffffffffffffff4, 0x3}, {0xa6bb, 0x4}, {0x3, 0x3}, {0x8, 0x6}, {0x9, 0x7}, {0x4, 0xfffffffffffffffb}, {0x8000000000000000, 0xa}, {0xcfc, 0xc339}, {0x3, 0xc}, {0x63, 0x9}, {0x8, 0x4}, {0x9, 0x2eed}, {0x6cf, 0x8000}, {0x2, 0x1}, {0xffffffffffffff2f, 0x6}, {0xfffffffffffffffe, 0xfffffffffffffffe}, {0xe, 0x2}, {0x7f, 0x4}, {0x8, 0xffffffff}, {0xe, 0x3ff}, {0x0, 0x6}, {0xfffffffffffffffd, 0x1}, {0x401, 0x9}, {0xff, 0x8}, {0x1, 0x3}, {0x200, 0x3}, {0x5d6f, 0xf}, {0x2, 0x4}, {0x0, 0x1}, {0x8001, 0xb}, {0x4000000000, 0x1}, {0x6, 0x3}, {0x1000}, {0xb4d, 0x8}, {0xbca, 0x8000}, {0x6, 0x9}, {0x10001, 0x49e}, {0x2, 0x1fc}, {0x0, 0x400}, {0x8, 0x2}, {0x3bee, 0x1}, {0x6, 0x7}, {0x8, 0x400}, {0x6, 0x9}, {0x80, 0x40}, {0x3, 0x3a}, {0xfffffffffffffffb, 0x6}, {0xfffffffffffffffe, 0xd}, {0xb88, 0x3}, {0x5, 0x2f53}, {0x10, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x9, 0xd}, {0x8000000000000000, 0x24000000000}, {0x4, 0x80}, {0x100, 0xb5e}, {0x9ff5, 0x3}, {0x8000000000000001, 0x3}, {0x1ff, 0x3ff}, {0xa374, 0x6}, {0x4, 0xffffffffffffffff}, {0xe17e, 0x5}, {0x6}, {0x7, 0x4d800371}, {0x2, 0x4}, {0x8000000000000001, 0x8}, {0xf7}, {0xfffffffffffffff9, 0x1}, {0xc}, {0x2, 0x8000000000000001}, {0x8, 0xfffffffffffffffd}, {0x3, 0xfffffffffffffff8}, {0x19c40000000000, 0x8}, {0x10000}, {0xe, 0x7}, {0x9, 0xa86}, {0x1, 0x9}, {0x7fffffffffffffff, 0xb66b}, {0x36, 0xfff}, {0x5, 0xffff}, {0x7f47, 0x3}, {0x7, 0x2feb2e76}, {0xffff, 0x80000000}, {0xff, 0x3}, {0xffffffffffffffff, 0x101}, {0x8, 0x2}, {0x32, 0x200}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x8d9}, {0x6, 0xf9b}, {0x8000000000000000, 0xfffffffffffffffc}, {0x1, 0x6}, {0x200, 0x9}, {0x2, 0x7ff}, {0x9, 0x7}, {0x1, 0x4}, {0x8, 0x2}, {0x8, 0x86d7}, {0xffff, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0xfffffffffffffffd}, {0x0, 0x6}, {0x9, 0x7234f3a6}, {0x4c, 0x8000000000000001}, {0x0, 0xd}, {0x3ff, 0x100000001}, {0x7, 0x9}, {0x8, 0x9}, {0x10, 0xd3dd}, {0x8000000000000001, 0x7}, {0x1, 0x6}, {0xfffffffffffffff7, 0xb8a}, {0x3, 0x3}, {0xffff, 0x7}, {0x7, 0xf9}, {0x3, 0x6}, {0xd11, 0xc000000000000000}, {0x686fa9cc, 0x8}, {0x6, 0x5}, {0xf, 0x5}, {0x9, 0x5}, {0xde}, {0xfffffffffffffb3d, 0x7}, {0x5, 0x8000000000000001}, {0x0, 0x80000000}, {0x5, 0xffff}, {0x8, 0x5}, {0x6, 0x9}, {0xf9, 0x7}, {0x6, 0x79}, {0x1780, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x3f63}, {0x8, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x80000000}, {0x8, 0x100000}, {0x3, 0x8000000000000001}, {0x1, 0x7}, {0xc089, 0x7fffffffffffffff}, {0x0, 0x4}, {0x95, 0x6}, {0x166c, 0x3}, {0x9, 0x7}, {0x7, 0x1}, {0x17, 0xfffffffffffffff8}, {0x0, 0x9}, {0x6, 0x8}, {0x200, 0xd8f}, {0xfff, 0x39aa}, {0x0, 0x69}, {0x0, 0x1}, {0x8000000000000000, 0x41920a15}, {0xf8bc, 0x9}, {0x2, 0x4}, {0xfff, 0x7}, {0x8000000000000000, 0x8}, {0xc8, 0x30}, {0x8, 0x890}, {0x7, 0xe}, {0x80000000, 0xeb}, {0x7f, 0x8}, {0xfffffffffffffff7}, {0x8, 0x9}, {0xffffffffffffffff, 0x800}, {0x7, 0x93c}, {0x2, 0xffffffffffffff04}, {0x5, 0x8}, {0x2, 0x1}, {0x7, 0x6}, {0x9}, {0x2, 0x8000000000000001}, {0xffffffffffffffff, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0xed, 0x8000000000000001}, {0x7, 0x7fffffffffffffff}, {0xe5, 0x200}, {0xffffffffffffffff, 0x4}, {0x3, 0x2fa}, {0x400, 0x8}, {0x1, 0x1000}, {0x3, 0x6}, {0x9, 0x7}, {0x3800000000000000, 0x8}, {0x7, 0xffff}, {0x8, 0x4}, {0x1000, 0x3}, {0xfffffffffffffff8, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x2, 0x8}, {0x2}, {0x4, 0xffff}, {0x100000000, 0x9}, {0xe, 0xff}, {0x1, 0x3}, {0x80000000, 0x7}, {0xffffffffffff8000, 0x9}, {0x3, 0x5}, {0x7f, 0x3}, {0xffffffff, 0x9}]}, &(0x7f0000004340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000043c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000004400)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000004440)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x5, 0x7ff}, {0x101, 0x5}, {0x4, 0x4}, {0x4, 0x80}, {0x5e, 0x1}, {0x7}, {0x4, 0xb}, {0xffffffff, 0x6}, {0x5}, {0x2, 0x6}, {0xfffffffffffffffe, 0x3}, {0xf40}, {0x6, 0xffffffffffffffff}, {0x58, 0x1ff}, {0x10001, 0xffffffff}, {0x6, 0x9}, {0xffffffffffffffff, 0x8}, {0x7, 0x4}, {0xfffffffffffffff8, 0x33}, {0xffff, 0x1000}, {0xbb0, 0x4}, {0xffffffffffffffff, 0x1}, {0x10e1, 0x86b}, {0x0, 0x4}, {0x9, 0x4}, {0x7, 0x228}, {0xa, 0x7fffffffffffffff}, {0x2, 0x5}, {0x9, 0xcef}, {0x8, 0x4}, {0x63, 0x8}, {0x6, 0x35}, {0x4, 0x8}, {0x1, 0xcc}, {0x9, 0xae30}, {0x7f, 0x7}, {0x10000, 0xfffffffffffffffe}, {0x8}, {0x5, 0x80000000}, {0x7, 0x3}, {0x2809, 0x9}, {0x101, 0x3a}, {0x81, 0xffffffffffff0000}, {0x1, 0xa}, {0x7fffffffffffffff, 0x2}, {0x8, 0x307f}, {0xed7, 0x8000000000000001}, {0xf4e, 0xe}, {0x8, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x8000, 0x5}, {0x4, 0xffff}, {0x4, 0x3}, {0x8, 0x7fff}, {0xcd7, 0x80}, {0x1, 0x1}, {0xe, 0x6}, {0x3, 0x1}, {0x6, 0x5b9}, {0xf, 0x3}, {0x1, 0x200}, {0x10001, 0x7fc}, {0x6, 0x4}, {0x0, 0xb}, {0x5, 0xffffffffffffff90}, {0x4, 0x3}, {0x6cc0, 0x4}, {0xbb}, {0x6, 0xf}, {0x5, 0x8}, {0x9, 0x1}, {0x80000001, 0x292}, {0x4, 0x8}, {0x2b800, 0x6}, {0x8, 0x7}, {0xffffffffffffffba, 0x10001}, {0x3ff, 0x5}, {0x9, 0x2}, {0xe5e0, 0x7f}, {0x7fffffffffffffff, 0x1}, {0xb444, 0x6}, {0x1, 0xffffffffffffff7f}, {0x40, 0x5}, {0x8001, 0x8}, {0x4, 0x232}, {0x3c64000000000000, 0x6}, {0x2}, {0xd2c1, 0x77}, {0xd4, 0x6}, {0xc000000000, 0x6}, {0x4, 0x1}, {0x49, 0x100}, {0xfffffffffffffff8, 0x5}, {0x2}, {0x1, 0x2}, {0x1ff, 0x8000000000000001}, {0x81, 0xffff}, {0x581d, 0x4000000000}, {0x1ff, 0x8}, {0x5, 0x7fffffff}, {0xd, 0x2}, {0x90000000, 0x3}, {0x7db9, 0x7}, {0xfffffffffffffff8, 0x7}, {0x5, 0x8000}, {0x1, 0x67ec9afa}, {0xfffffffffffffff9, 0x5}, {0x7, 0x1}, {0x7, 0xaa}, {0xfff, 0xf}, {0x7, 0x7}, {0x9, 0x1}, {0x0, 0x7}, {0x2, 0x5}, {0x80, 0x100000001}, {0x3, 0x6}, {0x0, 0x1}, {0x80, 0x9}, {0x9, 0x9}, {0x9, 0x4}, {0x0, 0x713}, {0x6, 0x4}, {0x1, 0x4000000000000000}, {0x2bb, 0x7}, {0xaf29, 0xfa8}, {0xfffffffff240d027}, {0x0, 0xe}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0xe4acfc9}, {0x3e6, 0x6}, {0x2, 0x8000000000}, {0xe, 0x3}, {0x5, 0x81}, {0x9, 0x2}, {0x3e082d0f, 0x8000000000000000}, {0x9, 0x204400}, {0x4, 0x6}, {0xfffffffffffffffb, 0x6}, {0xc, 0x3}, {0x4, 0x1}, {0x400, 0x80000000}, {0x9, 0xf}, {0x1fffe00, 0x1a}, {0x7fffffff, 0x4733}, {0x8, 0xfffffffffffffff7}, {0xac9, 0x9}, {0x4, 0xf5d}, {0x1, 0x7}, {0x292, 0x1}, {0x6, 0x8}, {0x5}, {0x1, 0x7}, {0x401, 0xa}, {0x7, 0x100000001}, {0x2, 0x49cb}, {0x0, 0x4}, {0x30a, 0x10}, {0xc7, 0x8}, {0x200, 0x5}, {0xc5ee, 0x6}, {0x3}, {0xac8, 0x8}, {0x3, 0x7}, {0xfffffffffffffff6, 0x9}, {0x2, 0x129}, {0x9, 0x9}, {0x101, 0x9}, {0x5, 0x101}, {0xd747, 0x7fff}, {0x6, 0x454}, {0x6}, {0x8, 0x8000}, {0xffffffffffffeee6, 0x2}, {0xf84, 0x6}, {0x6, 0xef}, {0x3ff, 0x2}, {0x7, 0x1}, {0xeb0, 0x9}, {0x1, 0x101}, {0x9, 0x6}, {0x6, 0x4}, {0x0, 0x844}, {0xfff, 0x1800000}, {0x0, 0xff}, {0x4, 0x6}, {0xffffffffffffffff, 0x4}, {0xfffffffffffffffb, 0x80000001}, {0x9, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x9, 0x7}, {0x8000, 0x8}, {0xddf, 0x8}, {0x2e1, 0x218}, {0x400, 0x86c}, {0xffff, 0x8}, {0x8, 0x5}, {0x800, 0x1ff}, {0xb844, 0xffffffff}, {0x3, 0x80000000}, {0x5, 0x2}, {0x401, 0x2}, {0x5, 0x80000001}, {0x8000000000000000, 0x76}, {0x4, 0x1}, {0x6f, 0x1}, {0x0, 0xf6}, {0x9, 0x8000000000000001}, {0x0, 0x7a5}, {0x8, 0x4}, {0x8, 0xcdb}, {0x9, 0xfff0000000000000}, {0xfffffffffffffff2, 0x7}, {0x7772, 0x8001}, {0x6, 0x2c9}, {0x8, 0xffffffff}, {0xc6a8, 0xc0a}, {0x699e, 0x1000}, {0x2, 0xd3df}, {0x4, 0x9}, {0x7, 0x7fff}, {0xe3, 0x8}, {0x3, 0x3}, {0x40, 0x7}, {0xfffffffffffffe07, 0x9}, {0x80000000, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0xffffffff, 0x80}, {0x8000000000000001, 0xb}, {0x8, 0x2}, {0x7, 0x2}, {0x6, 0xc081}, {}, {0xdc, 0x326}, {0xc0, 0x12}, {0x5, 0x1}, {0xb, 0xf}, {0x63, 0xb9ed}, {0x0, 0x4}, {0x3, 0xfffffffffffff9b9}, {0x8, 0x3f7}, {0x59f6, 0x3}, {0x6, 0x5}, {0xfff, 0x2}, {0x1b, 0xd}, {0x5}, {0x80000001, 0x1}, {0x1, 0x1}, {0xde, 0x7}]}, &(0x7f0000005480)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f00000054c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000005500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000005540)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000005580)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000055c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005600)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000005640)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000005680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000056c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005700)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000005740)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000005780)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005800)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0xa}, &(0x7f0000005940)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000005980)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000059c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}], 0x32}) r1 = syz_io_uring_setup(0x49, &(0x7f0000000300)={0x0, 0x22d0, 0x40, 0x0, 0x28d}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x105003, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "f0b992beb702c62a0c781b58222917b395d0ec1007788aa9a503"}]}], {0x14}}, 0xdc}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, 0x0, 0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x270, "62d47596598c123a87f580904fd82d8c77611e9363a2f6ff294dde695bbff3a0", 0x5b, 0x1, 0xfffffffffffffff7, 0x6, 0x28a, 0x3, 0x80, 0x6939, [0x98cd, 0x4, 0x1, 0x81]}) 55.720466645s ago: executing program 34 (id=7675): r0 = syz_open_dev$media(&(0x7f0000000240), 0x10001, 0x30240) ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000005bc0)={&(0x7f0000005a00)=[&(0x7f0000000280)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x1}}, &(0x7f0000000380)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000000400)=@label={{0x4f32494e, 0x4, 0x10, 0x80000000}}, &(0x7f0000000480)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000004c0)=@label={{0x4f32494e, 0x4, 0x10, 0x1}}, &(0x7f0000000540)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000001}}, &(0x7f0000000580)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0xfffffee4}, &(0x7f00000006c0)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000001}}, &(0x7f0000000700)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000000b40)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x1, 0x7}, {0x7, 0xfffffffffffffff7}, {0x5990, 0x3}, {0x10, 0xfffffffffffffffa}, {0x1, 0x9}, {0x9, 0xd}, {0x3, 0x40}, {0x2, 0x9}, {0x4b1, 0x6}, {0x2, 0x2}, {0x800, 0x7}, {0x8000, 0x1}, {0xf, 0x567}, {0x3, 0xfffffffffffffffd}, {0x1}, {0x400, 0xd59}, {0x7fffffffffffffff, 0x1}, {0xea, 0x8}, {0x3, 0x8}, {0x3, 0x8000000000000000}, {0x9}, {0xe3, 0x9}, {0x401}, {0x14b, 0xffff}, {0x1, 0x100000000}, {0x800, 0xd}, {0xaf, 0x7f}, {0xba5}, {0x7, 0x4}, {0xfff, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x6, 0xfffffffffffff801}, {0x2}, {0x400000000, 0x1}, {0x6}, {0xf92, 0x7}, {0x0, 0x3}, {0x9, 0x80000001}, {0x5, 0xffffffffffffffff}, {0x8000, 0x80000000}, {0x8}, {0x8000000000000001, 0x3}, {0x9, 0x2}, {0x1, 0x4}, {0x3}, {0x8000000000000001, 0x5dbe}, {0x101, 0x100}, {0x6}, {0x8, 0x90ee}, {0xb, 0x7}, {0xe94, 0x4000000000000000}, {0x6, 0x3}, {0xffffffffffffffff, 0xd0a}, {0xf8a, 0x2c}, {0x0, 0x100000000}, {0x2, 0x9}, {0x3, 0x8}, {0x4}, {0xfffffffffffffffa}, {0xffffffffffff0000}, {0x8001, 0x8}, {0x5, 0xffffffffffffff9c}, {0x4000000, 0x3}, {0x7, 0xfffffffffffffff6}, {0x2, 0x5}, {0x100000000, 0x1}, {0x6aaf8773, 0x2}, {0x0, 0x4}, {0xdca, 0xb6}, {0x6c98, 0xffffffffffffffa0}, {0x7fffffff, 0x4}, {0x3, 0x1}, {0x1, 0xb}, {0x7f, 0x401}, {0xf}, {0x8000000000000001, 0x3}, {0x100000000, 0xc}, {0x1000, 0x1}, {0x6, 0x9a}, {0x7, 0x9}, {0x7b307c6, 0x3}, {0x6, 0xd44}, {0x2, 0x8a2}, {0x4, 0x8}, {0x45a, 0x6}, {0x9, 0x76f8}, {0x49ea775e, 0x10}, {0xe9d3, 0x4}, {0x7, 0x5}, {0x6, 0x5}, {0x10001, 0x450}, {0x0, 0x9}, {0x911, 0xffff}, {0x5, 0x54b}, {0x3, 0x64}, {0x6, 0xe28}, {0xb54, 0x5}, {0xa, 0x6}, {0x7b35, 0x9}, {0x4, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0xc, 0xfffffffffffffffb}, {0x5}, {0x5, 0x2}, {0x100, 0x9}, {0x4, 0x8}, {0x9, 0x6}, {0xfffffffffffffffe, 0x49}, {0x100, 0x8000}, {0x400, 0x3}, {0x3ff, 0x5}, {0x7, 0x4}, {0x7f, 0x10}, {0x5, 0x8}, {0x5, 0x7}, {0x80000001, 0xa9}, {0x4, 0x3}, {0x7fffffffffffffff}, {0x3, 0x3}, {0xa7ad, 0x7ff}, {0x6, 0x5919}, {0x9, 0x1}, {0x1, 0x800}, {0x2, 0x3}, {0x2, 0xf6}, {0x10000, 0x1}, {0x8000, 0x80000001}, {0x80000000, 0x2}, {0x120000}, {0x39c, 0x7}, {0x401, 0xfffffffffffffffa}, {0x7f, 0x9}, {0x3, 0x3}, {0x3, 0x8}, {0x63f, 0x7}, {0x3, 0x10001}, {0x8, 0x9}, {0x10000, 0x4}, {0x0, 0x2}, {0x1ff, 0xea}, {0x83c, 0x1}, {0x8, 0x1}, {0xe, 0x2730}, {0x3, 0xe60}, {0xdd, 0x1}, {0x100000001, 0x3}, {0x401, 0x3}, {0x5}, {0xa18, 0x70007759}, {0x3, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x7, 0x1}, {0x36907e13, 0x100000001}, {0x0, 0x7}, {0xe6, 0x3}, {0x0, 0x7fffffffffffffff}, {0x2843, 0xffff}, {0x1000, 0xfffffffffffffffd}, {0x9, 0xddc4}, {0x6, 0xffffffffffffffc1}, {0x3, 0x6}, {0xff, 0x5}, {0x2400000, 0x6c}, {0x7, 0x81}, {0x80000001, 0x7}, {0xc70, 0x3}, {0x2, 0x5}, {0x2, 0x10000}, {0x10001, 0x800}, {0x4}, {0xc4, 0x8}, {0x6, 0x1}, {0x3, 0x7}, {0x6, 0x4}, {0x0, 0x24}, {0xb, 0x4}, {0x4, 0xf}, {0x9, 0x1}, {0x5, 0xfffffffffffffffd}, {0xe, 0x4}, {0x10000, 0x2}, {0x7}, {0x3, 0x5}, {0x3, 0x8}, {0x6, 0x1}, {0xf, 0x8}, {0x1, 0x4}, {0xfffffffffffffff0, 0x7ff}, {0xffffffffffffffff, 0x8}, {0x7fffffffffffffff, 0x5}, {0x8dc, 0x90}, {0x2}, {0x1ff, 0x9}, {0x8000000000000001, 0x6}, {0x7, 0x4}, {0x2, 0xd}, {0x8000000000000001, 0x5}, {0x100, 0x98a0}, {0x2, 0x4408d29f}, {0x0, 0x6}, {0x9, 0x9}, {0x9, 0x67c6}, {0x4, 0x8000000000000001}, {0x7fffffffffffffff, 0xfff}, {0x7fffffffffffffff, 0xc}, {0xb6, 0xa28}, {0x1ff, 0xffffffffffff6a34}, {0x2, 0x6}, {0x1}, {0x7d32a598}, {0xd3, 0x9278}, {0x10c8, 0x401}, {0x400, 0x1}, {0x37, 0xffff}, {0x81, 0x2}, {0x6, 0x1}, {0x3, 0xb}, {0x0, 0x2}, {0xfffffffffffffffe, 0xffffffff}, {0x9, 0x6}, {0x8, 0x3}, {0xfff, 0x4}, {0xfffffffffffffffb}, {0x3, 0x8}, {0x3, 0x5}, {0x1, 0x3}, {0x5, 0x8b}, {0x2, 0x67}, {0x9, 0x6}, {0x100000000, 0x5}, {0x400, 0x5}, {0x3, 0xfffffffffffffc75}, {0xa, 0x3}, {0x2d, 0x2}, {0x2, 0x5}, {0x0, 0x95}, {0xd4, 0x9e}, {0x10001, 0x7f}, {0x7, 0x5}, {0x7, 0x1}, {0x8, 0x9}, {0x0, 0x2}, {0x408, 0x4}, {0x8000, 0xfffffffffffffffb}, {0x0, 0x7fff}, {0x1c, 0x9}, {0x8, 0x3}, {0xee, 0x8000}, {0xb2, 0x513}, {0x7, 0x4}, {0x12, 0x10000}, {0x0, 0x200}]}, &(0x7f0000001b80)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000000}}, &(0x7f0000001bc0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000001c40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x1}, &(0x7f0000001d80)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000001dc0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000001e00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000001e40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x60000000}}, &(0x7f0000001e80)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000001ec0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000001f00)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0x1}, &(0x7f0000002040)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000001}}, &(0x7f0000002080)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x80000000}, [{0x6, 0x6}, {0x9, 0x1}, {0x8000, 0x7}, {0xf5, 0xffffffff}, {0x4, 0x8001}, {0x10, 0x1}, {0x6, 0x5}, {0x1, 0x72557a2a}, {0x0, 0x2000000000000}, {0xea4, 0x7ff}, {0x2, 0xffffffffb3802c2a}, {0x400, 0xff}, {0x8}, {0x7, 0x1}, {0x6, 0x4}, {0x8, 0x2}, {0x7f, 0x9}, {0x2}, {0x5}, {0x271, 0x765}, {0xd8, 0x800}, {0x100000001, 0x6}, {0x5, 0x1}, {0x3, 0xfffffffffffffffc}, {0x1a6, 0x2}, {0xd636, 0xffff}, {0xa, 0x3}, {0xf46, 0x1}, {0xffff, 0x3800000000000}, {0x1, 0x7}, {0x4, 0x2}, {0x400, 0x1000000}, {0xfffffffffffffffd, 0x3}, {0x7, 0x1}, {0x3, 0x40000}, {0x7ff, 0x6}, {0xffffffff, 0x1000}, {0x10001, 0x7}, {0x3, 0x4}, {0xc6, 0x5}, {0x5, 0x5}, {0xf8b, 0x9}, {0x8, 0xc6}, {0x6, 0x9}, {0x8e3c, 0x97f}, {0x9, 0xffffffffffffffff}, {0x2, 0x3}, {0x10, 0x80000000}, {0x3, 0x4}, {0xa, 0x1000}, {0x5}, {0xc, 0x3}, {0x173, 0x7}, {0x2, 0x1}, {0x1, 0xffffffffffff7032}, {0xff, 0x8}, {0x8000000000000001, 0x50}, {0x6e00000000000, 0x6}, {0xfff, 0x8001}, {0x401, 0x5}, {0x0, 0x9}, {0x0, 0x10}, {0x999}, {0x4, 0x686}, {0x80}, {0x4, 0x401}, {0xb, 0x3}, {0x9, 0x6}, {0x4, 0x6}, {0x6, 0x6}, {0x6, 0x800}, {0x69e, 0x96}, {0x100000000, 0x401}, {0x9, 0x1}, {0xf8c, 0x1}, {0x1, 0x978d}, {0x8, 0x5}, {0x2, 0x9}, {0x9, 0x1ff}, {0x8, 0xfb3}, {0x4, 0xc4}, {0x0, 0x3}, {0x3, 0x3}, {0xd, 0x6}, {0x8, 0x8}, {0x2, 0x400}, {0x8, 0x6}, {0xffffffffffffffff, 0xf}, {0xfffffffffffffc01, 0x3ff}, {0xff, 0x2}, {0x1, 0x5}, {0x0, 0x5}, {0x0, 0x53f}, {0x754, 0x319}, {0xfffffffffffffff8, 0x2}, {0x4, 0x8}, {0x374791b2, 0x3}, {0x6b, 0xd}, {0xb92, 0x4}, {0x8, 0x18000}, {0xffff, 0x100000000}, {0x1, 0x5}, {0x2, 0xfffffffffffffff7}, {0x1, 0x1}, {0x100}, {0x8000000000000001, 0xff}, {0x6, 0x4}, {0xfffffffffffffff7, 0x101}, {0x6, 0x3}, {0x2, 0x9}, {0x1, 0x7}, {0x9, 0x2}, {0xfffffffffffffffc, 0x1}, {0x100000001, 0x35c}, {0x5, 0x5}, {0x3ff, 0x8000000000000000}, {0x1, 0x1ff}, {0x7, 0x5}, {0x4, 0x7}, {0xa3d5}, {0xa, 0x9}, {0x10000, 0x8}, {0x7, 0x2}, {0x1, 0x401}, {0x6f, 0x3}, {0x2, 0x5}, {0x2, 0x3}, {0x7, 0x2}, {0x4, 0x200}, {0xb5, 0x2}, {0x401, 0x3}, {0x8000000000000001, 0xffffffffffffffff}, {0x5cd, 0x7}, {0x6, 0xffffffffffffffff}, {0x4, 0x6}, {0x1, 0x6}, {0x6, 0x80}, {0x8000000000000000, 0x3}, {0x2, 0x101}, {0xfffffffffffff000, 0xe}, {0x6, 0x5}, {0xb, 0x2}, {0x8, 0x80000001}, {0x2, 0x7ff}, {0x8, 0x6f9}, {0x7fffffff, 0x8}, {0x8, 0x1}, {0x3, 0x1a}, {0x6, 0x2}, {0xa37, 0x80000000}, {0x0, 0x4}, {0xfffffffffffffff7, 0x681d3b8b}, {0xf, 0x2}, {0x5}, {0x5, 0xffffffff00000000}, {0x3, 0xde87}, {0x2, 0x9}, {0x2, 0x8000000000000001}, {0x2, 0x4}, {0x538ca066, 0xaaeb}, {0x8, 0x6}, {0x7, 0x9d}, {0x1ff, 0xff}, {0x25f80000, 0x40000000000000}, {0x3, 0x8}, {0x9, 0x3}, {0x3, 0xffffffffffff10ba}, {0x7, 0x2}, {0x5, 0x52}, {0x4, 0x22ae}, {0x5, 0x2}, {0x2, 0x1}, {0x3, 0xe2}, {0x2, 0xdc}, {0xf2, 0x6}, {0x40, 0x3f}, {0x10001}, {0x8, 0x8}, {0x4, 0x8000}, {0x0, 0x6}, {0x7}, {0x81f, 0x8000000000000000}, {0x3df, 0x200}, {0x3, 0x1}, {0x6, 0xc7}, {0x0, 0x9}, {0x2, 0xffff}, {0x101, 0x7}, {0x8, 0x3}, {0x3, 0x100}, {0xfffffffffffffffc, 0xfe2b}, {0x854c, 0x4}, {0xe8, 0x1}, {0x7, 0x7}, {0x9, 0x4}, {0x1, 0x4}, {0xe, 0x3}, {0x9, 0xfffffffffffffff8}, {0x80000001, 0xc00000000000000}, {0x5, 0x4}, {0x4, 0x80000001}, {0x7ff, 0xffff}, {0x1, 0xe83d}, {0x6, 0x2}, {0x2, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x9, 0x3}, {0x7, 0x9}, {0x6, 0x9}, {0x6114, 0xfffffffffffff801}, {0x6, 0x101}, {0x5, 0x2}, {0x5, 0xf}, {0x8, 0x2}, {0x9, 0xffff}, {0xffffffffffffffc0, 0x7f}, {0xff, 0xfffffffffffffff9}, {0x3, 0x100000000}, {0x0, 0x1ff}, {0x2, 0x1}, {0x8000000000000001, 0x5}, {0x4, 0x80000001}, {0xbc, 0x850}, {0xed7, 0x9}, {0xdd, 0x2}, {0x3, 0x9}, {0x4, 0x8943}, {0x4, 0x5}, {0x8, 0x80000001}, {0x329b1829, 0xc000000000}, {0x10, 0xb3}, {0x3, 0x6}, {0x3, 0x2a9}, {0xb, 0x2}, {0xf29d, 0x6}, {0x2, 0x5}, {0xcd, 0x81}, {0x68a8, 0x9}, {0x2, 0x3}, {0x8001, 0x3}, {0x4, 0x400}, {0x6, 0x9}, {0xfffffffffffffffd, 0x958}, {0x8001, 0x3}, {0x16, 0x5}, {0xfffffffffffffffd, 0x8}, {0x0, 0x10000}, {0x18e1, 0x1}, {0xdb, 0x4}, {0x10001, 0x10000}, {0x2, 0x9}, {0x180, 0x7}, {0x3ff, 0x1}, {0xb8c, 0x2}]}, &(0x7f00000030c0)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003100)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000003140)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003180)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xd74291aa3f34acde}}, &(0x7f00000031c0)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x6}, &(0x7f0000003300)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x5, 0x9}, {0x8000000000000001, 0x8}, {0x8, 0x733}, {0x200, 0x7}, {0xaf8, 0x5}, {0x80000000, 0x7}, {0x8000000000000000, 0x8}, {0x7, 0x5}, {0x3, 0x2}, {0x1, 0x9}, {0x9, 0x2}, {0x7ff, 0x3}, {0x2, 0x9}, {0x80000001, 0x7}, {0x81, 0x9}, {0x7f, 0x5}, {0x1, 0x2}, {0x100000000, 0x78}, {0x0, 0xc0}, {0x1000, 0x8}, {0x1000, 0x653}, {0x81, 0x101}, {0x10, 0x8000}, {0x1ffc0, 0x9}, {0x5, 0x5}, {0xa, 0x1}, {0xf555}, {0x7, 0xfff}, {0x756, 0x7}, {0x6, 0x1000}, {0x4, 0xc03}, {0x7ff, 0x9}, {0x2, 0x7f}, {0x9, 0x4}, {0x80, 0x9}, {0x6, 0x6fb1}, {0xa00000000000000}, {0x7, 0x1}, {0x0, 0xe}, {0x7, 0xd7a1}, {0xffffffffffffffff, 0xfe7}, {0x2, 0x6}, {0xffffffffffffffff, 0xff}, {0xfffffffffffffff9, 0x57}, {0x9, 0x1}, {0x6, 0x9}, {0x9, 0x3}, {0x1f6e}, {0xfffffffffffffff4, 0x3}, {0xa6bb, 0x4}, {0x3, 0x3}, {0x8, 0x6}, {0x9, 0x7}, {0x4, 0xfffffffffffffffb}, {0x8000000000000000, 0xa}, {0xcfc, 0xc339}, {0x3, 0xc}, {0x63, 0x9}, {0x8, 0x4}, {0x9, 0x2eed}, {0x6cf, 0x8000}, {0x2, 0x1}, {0xffffffffffffff2f, 0x6}, {0xfffffffffffffffe, 0xfffffffffffffffe}, {0xe, 0x2}, {0x7f, 0x4}, {0x8, 0xffffffff}, {0xe, 0x3ff}, {0x0, 0x6}, {0xfffffffffffffffd, 0x1}, {0x401, 0x9}, {0xff, 0x8}, {0x1, 0x3}, {0x200, 0x3}, {0x5d6f, 0xf}, {0x2, 0x4}, {0x0, 0x1}, {0x8001, 0xb}, {0x4000000000, 0x1}, {0x6, 0x3}, {0x1000}, {0xb4d, 0x8}, {0xbca, 0x8000}, {0x6, 0x9}, {0x10001, 0x49e}, {0x2, 0x1fc}, {0x0, 0x400}, {0x8, 0x2}, {0x3bee, 0x1}, {0x6, 0x7}, {0x8, 0x400}, {0x6, 0x9}, {0x80, 0x40}, {0x3, 0x3a}, {0xfffffffffffffffb, 0x6}, {0xfffffffffffffffe, 0xd}, {0xb88, 0x3}, {0x5, 0x2f53}, {0x10, 0x5}, {0x3, 0x3}, {0x0, 0x9}, {0x9, 0xd}, {0x8000000000000000, 0x24000000000}, {0x4, 0x80}, {0x100, 0xb5e}, {0x9ff5, 0x3}, {0x8000000000000001, 0x3}, {0x1ff, 0x3ff}, {0xa374, 0x6}, {0x4, 0xffffffffffffffff}, {0xe17e, 0x5}, {0x6}, {0x7, 0x4d800371}, {0x2, 0x4}, {0x8000000000000001, 0x8}, {0xf7}, {0xfffffffffffffff9, 0x1}, {0xc}, {0x2, 0x8000000000000001}, {0x8, 0xfffffffffffffffd}, {0x3, 0xfffffffffffffff8}, {0x19c40000000000, 0x8}, {0x10000}, {0xe, 0x7}, {0x9, 0xa86}, {0x1, 0x9}, {0x7fffffffffffffff, 0xb66b}, {0x36, 0xfff}, {0x5, 0xffff}, {0x7f47, 0x3}, {0x7, 0x2feb2e76}, {0xffff, 0x80000000}, {0xff, 0x3}, {0xffffffffffffffff, 0x101}, {0x8, 0x2}, {0x32, 0x200}, {0x5, 0x8}, {0x7, 0x5}, {0x2, 0x8d9}, {0x6, 0xf9b}, {0x8000000000000000, 0xfffffffffffffffc}, {0x1, 0x6}, {0x200, 0x9}, {0x2, 0x7ff}, {0x9, 0x7}, {0x1, 0x4}, {0x8, 0x2}, {0x8, 0x86d7}, {0xffff, 0x1}, {0x3, 0x7}, {0x6, 0x1}, {0x3, 0xfffffffffffffffd}, {0x0, 0x6}, {0x9, 0x7234f3a6}, {0x4c, 0x8000000000000001}, {0x0, 0xd}, {0x3ff, 0x100000001}, {0x7, 0x9}, {0x8, 0x9}, {0x10, 0xd3dd}, {0x8000000000000001, 0x7}, {0x1, 0x6}, {0xfffffffffffffff7, 0xb8a}, {0x3, 0x3}, {0xffff, 0x7}, {0x7, 0xf9}, {0x3, 0x6}, {0xd11, 0xc000000000000000}, {0x686fa9cc, 0x8}, {0x6, 0x5}, {0xf, 0x5}, {0x9, 0x5}, {0xde}, {0xfffffffffffffb3d, 0x7}, {0x5, 0x8000000000000001}, {0x0, 0x80000000}, {0x5, 0xffff}, {0x8, 0x5}, {0x6, 0x9}, {0xf9, 0x7}, {0x6, 0x79}, {0x1780, 0x5}, {0x1, 0x9}, {0x2, 0x2}, {0x4, 0x3f63}, {0x8, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x5, 0x80000000}, {0x8, 0x100000}, {0x3, 0x8000000000000001}, {0x1, 0x7}, {0xc089, 0x7fffffffffffffff}, {0x0, 0x4}, {0x95, 0x6}, {0x166c, 0x3}, {0x9, 0x7}, {0x7, 0x1}, {0x17, 0xfffffffffffffff8}, {0x0, 0x9}, {0x6, 0x8}, {0x200, 0xd8f}, {0xfff, 0x39aa}, {0x0, 0x69}, {0x0, 0x1}, {0x8000000000000000, 0x41920a15}, {0xf8bc, 0x9}, {0x2, 0x4}, {0xfff, 0x7}, {0x8000000000000000, 0x8}, {0xc8, 0x30}, {0x8, 0x890}, {0x7, 0xe}, {0x80000000, 0xeb}, {0x7f, 0x8}, {0xfffffffffffffff7}, {0x8, 0x9}, {0xffffffffffffffff, 0x800}, {0x7, 0x93c}, {0x2, 0xffffffffffffff04}, {0x5, 0x8}, {0x2, 0x1}, {0x7, 0x6}, {0x9}, {0x2, 0x8000000000000001}, {0xffffffffffffffff, 0x7}, {0x2, 0x5}, {0x4, 0x7}, {0xed, 0x8000000000000001}, {0x7, 0x7fffffffffffffff}, {0xe5, 0x200}, {0xffffffffffffffff, 0x4}, {0x3, 0x2fa}, {0x400, 0x8}, {0x1, 0x1000}, {0x3, 0x6}, {0x9, 0x7}, {0x3800000000000000, 0x8}, {0x7, 0xffff}, {0x8, 0x4}, {0x1000, 0x3}, {0xfffffffffffffff8, 0x8}, {0x3, 0x5}, {0x7, 0x7}, {0x2, 0x8}, {0x2}, {0x4, 0xffff}, {0x100000000, 0x9}, {0xe, 0xff}, {0x1, 0x3}, {0x80000000, 0x7}, {0xffffffffffff8000, 0x9}, {0x3, 0x5}, {0x7f, 0x3}, {0xffffffff, 0x9}]}, &(0x7f0000004340)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f0000004380)=@clustersize={{0x4f32494e, 0x1, 0x10}}, &(0x7f00000043c0)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000004400)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x1}}, &(0x7f0000004440)=@freeinode={{0x4f32494e, 0x8, 0x10, 0xc0000000}, [{0x5, 0x7ff}, {0x101, 0x5}, {0x4, 0x4}, {0x4, 0x80}, {0x5e, 0x1}, {0x7}, {0x4, 0xb}, {0xffffffff, 0x6}, {0x5}, {0x2, 0x6}, {0xfffffffffffffffe, 0x3}, {0xf40}, {0x6, 0xffffffffffffffff}, {0x58, 0x1ff}, {0x10001, 0xffffffff}, {0x6, 0x9}, {0xffffffffffffffff, 0x8}, {0x7, 0x4}, {0xfffffffffffffff8, 0x33}, {0xffff, 0x1000}, {0xbb0, 0x4}, {0xffffffffffffffff, 0x1}, {0x10e1, 0x86b}, {0x0, 0x4}, {0x9, 0x4}, {0x7, 0x228}, {0xa, 0x7fffffffffffffff}, {0x2, 0x5}, {0x9, 0xcef}, {0x8, 0x4}, {0x63, 0x8}, {0x6, 0x35}, {0x4, 0x8}, {0x1, 0xcc}, {0x9, 0xae30}, {0x7f, 0x7}, {0x10000, 0xfffffffffffffffe}, {0x8}, {0x5, 0x80000000}, {0x7, 0x3}, {0x2809, 0x9}, {0x101, 0x3a}, {0x81, 0xffffffffffff0000}, {0x1, 0xa}, {0x7fffffffffffffff, 0x2}, {0x8, 0x307f}, {0xed7, 0x8000000000000001}, {0xf4e, 0xe}, {0x8, 0x6}, {0x1, 0x8}, {0x1, 0x4}, {0x5}, {0x2, 0x3}, {0x4, 0x8}, {0x8000, 0x5}, {0x4, 0xffff}, {0x4, 0x3}, {0x8, 0x7fff}, {0xcd7, 0x80}, {0x1, 0x1}, {0xe, 0x6}, {0x3, 0x1}, {0x6, 0x5b9}, {0xf, 0x3}, {0x1, 0x200}, {0x10001, 0x7fc}, {0x6, 0x4}, {0x0, 0xb}, {0x5, 0xffffffffffffff90}, {0x4, 0x3}, {0x6cc0, 0x4}, {0xbb}, {0x6, 0xf}, {0x5, 0x8}, {0x9, 0x1}, {0x80000001, 0x292}, {0x4, 0x8}, {0x2b800, 0x6}, {0x8, 0x7}, {0xffffffffffffffba, 0x10001}, {0x3ff, 0x5}, {0x9, 0x2}, {0xe5e0, 0x7f}, {0x7fffffffffffffff, 0x1}, {0xb444, 0x6}, {0x1, 0xffffffffffffff7f}, {0x40, 0x5}, {0x8001, 0x8}, {0x4, 0x232}, {0x3c64000000000000, 0x6}, {0x2}, {0xd2c1, 0x77}, {0xd4, 0x6}, {0xc000000000, 0x6}, {0x4, 0x1}, {0x49, 0x100}, {0xfffffffffffffff8, 0x5}, {0x2}, {0x1, 0x2}, {0x1ff, 0x8000000000000001}, {0x81, 0xffff}, {0x581d, 0x4000000000}, {0x1ff, 0x8}, {0x5, 0x7fffffff}, {0xd, 0x2}, {0x90000000, 0x3}, {0x7db9, 0x7}, {0xfffffffffffffff8, 0x7}, {0x5, 0x8000}, {0x1, 0x67ec9afa}, {0xfffffffffffffff9, 0x5}, {0x7, 0x1}, {0x7, 0xaa}, {0xfff, 0xf}, {0x7, 0x7}, {0x9, 0x1}, {0x0, 0x7}, {0x2, 0x5}, {0x80, 0x100000001}, {0x3, 0x6}, {0x0, 0x1}, {0x80, 0x9}, {0x9, 0x9}, {0x9, 0x4}, {0x0, 0x713}, {0x6, 0x4}, {0x1, 0x4000000000000000}, {0x2bb, 0x7}, {0xaf29, 0xfa8}, {0xfffffffff240d027}, {0x0, 0xe}, {0x0, 0x8}, {0x7, 0x9}, {0x7, 0xe4acfc9}, {0x3e6, 0x6}, {0x2, 0x8000000000}, {0xe, 0x3}, {0x5, 0x81}, {0x9, 0x2}, {0x3e082d0f, 0x8000000000000000}, {0x9, 0x204400}, {0x4, 0x6}, {0xfffffffffffffffb, 0x6}, {0xc, 0x3}, {0x4, 0x1}, {0x400, 0x80000000}, {0x9, 0xf}, {0x1fffe00, 0x1a}, {0x7fffffff, 0x4733}, {0x8, 0xfffffffffffffff7}, {0xac9, 0x9}, {0x4, 0xf5d}, {0x1, 0x7}, {0x292, 0x1}, {0x6, 0x8}, {0x5}, {0x1, 0x7}, {0x401, 0xa}, {0x7, 0x100000001}, {0x2, 0x49cb}, {0x0, 0x4}, {0x30a, 0x10}, {0xc7, 0x8}, {0x200, 0x5}, {0xc5ee, 0x6}, {0x3}, {0xac8, 0x8}, {0x3, 0x7}, {0xfffffffffffffff6, 0x9}, {0x2, 0x129}, {0x9, 0x9}, {0x101, 0x9}, {0x5, 0x101}, {0xd747, 0x7fff}, {0x6, 0x454}, {0x6}, {0x8, 0x8000}, {0xffffffffffffeee6, 0x2}, {0xf84, 0x6}, {0x6, 0xef}, {0x3ff, 0x2}, {0x7, 0x1}, {0xeb0, 0x9}, {0x1, 0x101}, {0x9, 0x6}, {0x6, 0x4}, {0x0, 0x844}, {0xfff, 0x1800000}, {0x0, 0xff}, {0x4, 0x6}, {0xffffffffffffffff, 0x4}, {0xfffffffffffffffb, 0x80000001}, {0x9, 0x4}, {0x3, 0x4}, {0x2, 0x2}, {0x9, 0x7}, {0x8000, 0x8}, {0xddf, 0x8}, {0x2e1, 0x218}, {0x400, 0x86c}, {0xffff, 0x8}, {0x8, 0x5}, {0x800, 0x1ff}, {0xb844, 0xffffffff}, {0x3, 0x80000000}, {0x5, 0x2}, {0x401, 0x2}, {0x5, 0x80000001}, {0x8000000000000000, 0x76}, {0x4, 0x1}, {0x6f, 0x1}, {0x0, 0xf6}, {0x9, 0x8000000000000001}, {0x0, 0x7a5}, {0x8, 0x4}, {0x8, 0xcdb}, {0x9, 0xfff0000000000000}, {0xfffffffffffffff2, 0x7}, {0x7772, 0x8001}, {0x6, 0x2c9}, {0x8, 0xffffffff}, {0xc6a8, 0xc0a}, {0x699e, 0x1000}, {0x2, 0xd3df}, {0x4, 0x9}, {0x7, 0x7fff}, {0xe3, 0x8}, {0x3, 0x3}, {0x40, 0x7}, {0xfffffffffffffe07, 0x9}, {0x80000000, 0x3}, {0x1, 0x9}, {0x7, 0x1}, {0xffffffff, 0x80}, {0x8000000000000001, 0xb}, {0x8, 0x2}, {0x7, 0x2}, {0x6, 0xc081}, {}, {0xdc, 0x326}, {0xc0, 0x12}, {0x5, 0x1}, {0xb, 0xf}, {0x63, 0xb9ed}, {0x0, 0x4}, {0x3, 0xfffffffffffff9b9}, {0x8, 0x3f7}, {0x59f6, 0x3}, {0x6, 0x5}, {0xfff, 0x2}, {0x1b, 0xd}, {0x5}, {0x80000001, 0x1}, {0x1, 0x1}, {0xde, 0x7}]}, &(0x7f0000005480)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x40000000}}, &(0x7f00000054c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000005500)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000005540)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000000}}, &(0x7f0000005580)=@journal={{0x4f32494e, 0x7, 0x10, 0x40000000}}, &(0x7f00000055c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005600)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000005640)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000001}}, &(0x7f0000005680)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f00000056c0)=@journal={{0x4f32494e, 0x7, 0x10}}, &(0x7f0000005700)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000005740)=@features={{0x4f32494e, 0x6, 0x10, 0x40000000}}, &(0x7f0000005780)=@label={{0x4f32494e, 0x4, 0x10, 0x40000000}}, &(0x7f0000005800)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000001}, {}, 0xa}, &(0x7f0000005940)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000000}}, &(0x7f0000005980)=@uuid={{0x4f32494e, 0x5, 0x10, 0xc0000000}}, &(0x7f00000059c0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x80000000}}], 0x32}) r1 = syz_io_uring_setup(0x49, &(0x7f0000000300)={0x0, 0x22d0, 0x40, 0x0, 0x28d}, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000080)) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x105003, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000300)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x1e, 0x7, 0x1, 0x0, "f0b992beb702c62a0c781b58222917b395d0ec1007788aa9a503"}]}], {0x14}}, 0xdc}}, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, 0x0, 0x1) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000100)={0x80000000, 0x270, "62d47596598c123a87f580904fd82d8c77611e9363a2f6ff294dde695bbff3a0", 0x5b, 0x1, 0xfffffffffffffff7, 0x6, 0x28a, 0x3, 0x80, 0x6939, [0x98cd, 0x4, 0x1, 0x81]}) 11.170484756s ago: executing program 7 (id=7859): r0 = socket(0x2a, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r6}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "bddff730a979d9b52e732fd6a9c1b085", "ace06e88", "747a2aaf941f2665"}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) r7 = syz_pidfd_open(r1, 0x0) setns(r7, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="1fd884094a26282c63a843ccca707fb7eac0962bae841681bd089a0a3560b2151bec5f87e6eb792c559c1ffbf804c17a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000003c0), &(0x7f0000000440)=0x80) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$uac2(r8, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00070600c424be1148493aeb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r8, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000880)={0x84, &(0x7f0000000200)={0x40, 0xdebda7d818a07a1e, 0x4, "b36f539c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000700)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000740)={0x40, 0x19, 0x2, "9a07"}, 0x0, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x3}}) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 6.72738321s ago: executing program 7 (id=7870): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x71bc80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fgetxattr(r1, &(0x7f0000000100)=@known='trusted.overlay.origin\x00', &(0x7f0000000040)=""/137, 0x89) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text16={0x10, &(0x7f0000000200)="0f01c90f01c8b843008ee87af80e66b8080e748d3636dee4bafc0c66b8d0bf9f5b66ef0f20610f01323ac43ac48100306766c7442400e770ffff6766c7442402db0000006766c744240600000000670f011424ba6100ec6766c7442402000000006766c744240600000000670f011424", 0x70}], 0x1, 0x74, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f0000000140)={0x7, 0x1ff}) syz_clone3(&(0x7f0000000440)={0x40002100, 0x0, 0x0, 0x0, {0x400}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.631316039s ago: executing program 7 (id=7871): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x31c000, 0x800, 0x9}, 0x20) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r1}, 0x10) 6.434709206s ago: executing program 7 (id=7872): ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, &(0x7f0000000040)=0xa1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f0000000180)='pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\x00\x00\xea\xff', &(0x7f0000000180), 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='{:\x00\x00\xea\xff', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b80)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jwq\xf8oG0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000140)=0x7, 0x4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044001}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0..:\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) r7 = socket$packet(0x11, 0x2, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'veth1_to_hsr\x00', 0x0}) sendto$packet(r7, &(0x7f0000000980)="e7030500d3", 0x5, 0x2404c810, &(0x7f0000000280)={0x11, 0x88a8, r9, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x10000, 0x0, {{0x7, 0x4, 0x2, 0x3, 0x1c, 0x64, 0x0, 0x4, 0x29, 0x0, @remote, @loopback, {[@cipso={0x86, 0x6}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x80, 0x1, 0x8, 0x7, {{0x32, 0x4, 0x1, 0x8, 0xc8, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @rand_addr=0x64010100, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0x7, "72bc17237c"}, {0x1, 0xa, "791543c9579af35c"}]}, @rr={0x7, 0xb, 0x61, [@remote, @dev={0xac, 0x14, 0x14, 0x11}]}, @timestamp_addr={0x44, 0xc, 0x24, 0x1, 0x1, [{@broadcast, 0x6}]}, @timestamp_prespec={0x44, 0x4, 0xd7, 0x3, 0x3}, @lsrr={0x83, 0x7, 0x6b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@loopback, @loopback]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x9, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8d}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9e}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x627}, {@remote, 0x9}]}, @noop, @cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x0, 0x5, "c57c34"}, {0x6, 0x3, "96"}, {0x5, 0xd, "847e15926fe8fca0085a1d"}, {0x5, 0x2}, {0x7, 0x12, "6aa0a400db75c9498c86b37ef5342caa"}]}]}}}}}) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) 4.318968045s ago: executing program 2 (id=7887): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000080)=[{r0, 0x4104}], 0x1, 0x0, &(0x7f0000000240)={[0xffffffffffffffff]}, 0x8) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 4.135631641s ago: executing program 5 (id=7889): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x0, @private2}, @in6={0xa, 0x4e20, 0xab0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in6={{0xa, 0x4e23, 0x81, @empty, 0x80000000}}}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x1}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001480)={'wlan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0xa4, 0x0, 0x1, 0x405, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'Q.931\x00'}}]}, 0xa4}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fc0c0099000c0000006c00000004007a8000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x4c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xa}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000440)=0xc) prctl$PR_SCHED_CORE(0x3e, 0x3, r10, 0x0, 0x0) r11 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00') r12 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) signalfd4(r12, &(0x7f0000000140), 0x8, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, r9, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40}, 0x8001) 3.711119158s ago: executing program 5 (id=7891): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffffffff, 0x6, 0x8, 0x401, 0x80000000, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) 3.171106029s ago: executing program 5 (id=7895): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 2.950871673s ago: executing program 5 (id=7896): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f0000001340)={{0x1, 0x3, 0x3, 0xda, 0x80, 0x4}, 0x2fc, [0x0, 0x8, 0x7, 0xff800000, 0x7ff, 0x8, 0xfffff800, 0x7, 0x5, 0x2, 0x80000000, 0x1ff, 0x0, 0x1, 0x81, 0xfffffffe, 0x10001, 0xa61b, 0x5, 0x7, 0x3, 0x9, 0x6, 0x1, 0x40, 0x81, 0x8, 0xa8, 0x6, 0x8, 0xfffffff8, 0x6, 0x9, 0x9, 0x28, 0x3, 0x4, 0x400, 0x5, 0x9e1, 0x2, 0x2, 0x2, 0x7, 0x4, 0xd, 0x7, 0x6, 0x10001, 0xc, 0x80, 0x6, 0x40, 0x3, 0x5, 0x1, 0xff, 0xea, 0xfffffffc, 0x57cf, 0x1, 0x3, 0xfffffffb, 0x5, 0x8000, 0x3, 0x0, 0x800, 0x3ff, 0x4, 0x400, 0x5, 0x7fff, 0xfffffff5, 0x2, 0x6, 0x40000000, 0x1ff, 0x6c, 0x6e85f9f7, 0x9, 0xd, 0x1, 0x2, 0x8000, 0x8001, 0xaba1, 0x3744, 0x4, 0x0, 0x7, 0x8, 0x7fffffff, 0x8, 0x2f, 0x43, 0xfffffffa, 0x86b, 0x67, 0x3, 0x9, 0x8, 0x3, 0x7633, 0x6, 0x9, 0x4, 0x1818, 0xd, 0x81, 0x4, 0x7fffffff, 0x59dd037b, 0x6, 0x3, 0x80000000, 0x3, 0x690, 0x1000, 0x4, 0x3, 0x2, 0xb8ca, 0xfffffffe, 0x3, 0xc, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x6, 0x10001, 0x3, 0x6, 0x100, 0x5, 0x5, 0x6, 0x3, 0x6, 0x4, 0x0, 0x800, 0xfffffffd, 0xcd4, 0x1000, 0x3, 0xfe6d, 0x5, 0x1, 0x7, 0x6, 0xb, 0x3, 0x1, 0x4bd, 0x4, 0x7fff, 0xb5, 0xffff61b9, 0x100, 0x1, 0x9, 0x63, 0xfffff409, 0x8b88, 0xdbe3, 0x2, 0x3, 0x86, 0xd24, 0x2, 0x3, 0x5, 0x9, 0x9, 0x8001, 0x6, 0x6, 0x2, 0x8, 0x7, 0x6, 0x6, 0x62e, 0x7, 0x7, 0x7fffffff, 0x7, 0x80000001, 0x0, 0x0, 0x5, 0x1ff, 0x8, 0x8, 0x401, 0x1000, 0x0, 0x8, 0x4, 0x9, 0x7, 0x4, 0x4, 0x9, 0xfffff801, 0x401, 0xc4b, 0x15, 0x9, 0x4, 0x9, 0xa, 0x7, 0x7a09, 0x401, 0x3, 0x7, 0x1d8, 0x6, 0x0, 0xe, 0xe, 0x4, 0x3, 0x5, 0x49, 0x2592483e, 0x0, 0x81, 0x1ff, 0xffff, 0xfd5a, 0x9, 0xc, 0x878, 0x0, 0x0, 0xcbd5, 0x35c2, 0x78, 0x7fff, 0x9, 0x6, 0x3, 0x9, 0x0, 0x9, 0x4, 0x8, 0x1, 0x8, 0x2, 0x6, 0x2, 0x80000000, 0x10000, 0x6d4f5224, 0x3, 0xc3, 0xfffff001, 0x3, 0x8000, 0x0, 0x81, 0xf7, 0x1, 0x3ff, 0x60f, 0x40, 0xe, 0x2, 0x81, 0x7, 0x1, 0x7, 0x739, 0x5, 0x3, 0x8d5, 0x78c, 0x8373, 0x9, 0x8, 0xd9e2, 0x9, 0x7ff, 0xb, 0x3, 0x5, 0x865c, 0x800, 0xb013, 0x7, 0x3, 0xfffffffb, 0x6, 0xeb27, 0x7, 0x5, 0x5dab, 0x81, 0x7, 0xcc16, 0x2, 0x80000001, 0x1, 0x7, 0xfffffffd, 0x9, 0xd6a5, 0x4, 0x4111, 0x9, 0xfcb, 0x5, 0x49, 0x7, 0x9, 0xbb, 0x6, 0x2, 0x4, 0x5, 0x6, 0x5, 0x3, 0x3, 0x800, 0xe22, 0x4, 0x4, 0xffffff7f, 0x8, 0x7, 0x2, 0xb, 0x2, 0x51, 0xf26c, 0x4, 0x9e, 0x7fff, 0x2, 0x5, 0xc, 0x7, 0x4, 0x0, 0x7, 0xffffffff, 0x2, 0x10001, 0xfffffffd, 0x4, 0x6, 0x10001, 0x79e65dd8, 0x8000, 0xfffff1d0, 0x8, 0x9, 0x2, 0x6, 0x2, 0x5, 0xfcb, 0x2, 0x1, 0x328, 0x9, 0x3, 0x0, 0x10, 0xebc2, 0x80000000, 0x4, 0xfff, 0x4, 0x9b26, 0x0, 0xf3b, 0x8, 0x1, 0x2, 0x400, 0xe, 0x7fff, 0x9, 0x62, 0x5, 0x6, 0x4, 0x0, 0x7fff, 0xffffff01, 0x5, 0xfffffff5, 0x100, 0x2, 0x10000, 0x9, 0x3, 0x0, 0xd18, 0x3, 0x8, 0xfffffff9, 0x200, 0x8, 0x5, 0x1, 0x9, 0x2, 0x9, 0x9124, 0x5, 0x8001, 0x80, 0xb24b, 0x9, 0x5, 0x4, 0x8, 0x6, 0x2, 0x5, 0x5, 0xd, 0xfc0, 0x8, 0x4, 0x200, 0x3, 0x0, 0x0, 0x6, 0x8001, 0xfffffffb, 0x7f, 0x6, 0x7, 0xb, 0x2, 0x40, 0xfffffffb, 0x1, 0x2e6, 0x2, 0x60, 0x9, 0x80, 0x798, 0x8, 0x5, 0x3ff, 0x100, 0x537, 0xc6, 0x0, 0x9, 0xc2a, 0x400, 0x1, 0x7, 0x8, 0x9, 0xd9800000, 0x84, 0x3, 0x2, 0x4, 0x5, 0xb, 0x2, 0x2, 0x1, 0x7, 0x3, 0x8, 0x9, 0x4, 0x10, 0x17, 0x80, 0x5, 0x7e4, 0x101, 0xffff, 0x0, 0x5, 0x7, 0x5, 0x6, 0x4, 0xfffffff9, 0x10001, 0x4, 0x6, 0x40, 0x0, 0x0, 0x4, 0x4, 0x0, 0x3255, 0x101, 0x4, 0x8, 0x3d3c, 0x5, 0xfffffec2, 0xa, 0x3, 0xff, 0x401, 0x6, 0x6, 0x5, 0x1ff, 0x10000, 0x3, 0x4728da94, 0x2, 0xa, 0x4, 0x6, 0x3, 0xe, 0x8, 0x22, 0x60, 0x544b, 0x20, 0x7f, 0xffff8000, 0x3ff, 0xc, 0x50, 0x8, 0xc, 0x0, 0xa8e3, 0x39ce74, 0xe, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x5, 0xfffffffc, 0x2, 0x800, 0x8, 0x0, 0x1, 0x1e, 0xffff, 0xf971, 0x2, 0x0, 0x8, 0xfffffff1, 0x101, 0xe461, 0xa, 0x400, 0x8000, 0xab0, 0x0, 0x9, 0x8, 0x80, 0x1, 0x800, 0x8000, 0xfffffe01, 0xd, 0x5, 0x400, 0x800, 0x5, 0x314d72ee, 0x0, 0x2, 0x8, 0x9, 0x8, 0x6, 0x9, 0x2, 0xe, 0xe, 0x9, 0x80, 0x11, 0x8, 0x7f, 0x4, 0x4, 0x2, 0x2, 0x4b2e, 0xffff0000, 0xbb, 0x10, 0xfff, 0x2, 0x9, 0x3, 0x2, 0x7, 0x7, 0x400, 0x4d2c084f, 0x8b, 0xff, 0x0, 0x8, 0x1, 0x4, 0x7, 0x7, 0xa04, 0x7, 0x1, 0x0, 0xc, 0x6, 0x8, 0x20000, 0x5, 0x2, 0x9, 0x1000, 0x2, 0x3, 0xfffffffa, 0xfffffffd, 0x3d69, 0x0, 0x1a6e, 0x6, 0x7, 0x4, 0x7, 0x1, 0x3, 0x80000001, 0x2, 0x81, 0x5, 0xfffffeca, 0x1, 0x7, 0x3ffc00, 0x3, 0x400, 0x1, 0xd, 0x3, 0x401, 0x9, 0x800, 0xae, 0x4, 0x401, 0x8000, 0x0, 0x8001, 0x0, 0x1, 0x6, 0x4, 0x2, 0x9, 0xc0000000, 0x1, 0x8, 0x7, 0x10000, 0x630, 0x7f, 0x63d, 0x4, 0x5, 0x0, 0x0, 0xae, 0x7, 0x8e, 0x5, 0x8, 0x4, 0x45, 0x0, 0xc42c, 0x18c26b27, 0x4, 0xe9f4, 0x7fffffff, 0x9, 0x6fd, 0x8b, 0x9, 0x1, 0x8, 0x2, 0x8d33, 0xfffffffb, 0x3, 0x4, 0x0, 0x6, 0x101, 0x2, 0x2622, 0x3, 0x4, 0x9, 0x5, 0x7, 0xa105, 0x9, 0x8, 0x5, 0x49, 0x59, 0x0, 0x6, 0xfff, 0x1aca, 0x6, 0x2, 0x3, 0x9, 0x4000000, 0x5, 0x6, 0x92, 0x80000000, 0x8, 0x20000000, 0x3, 0x4, 0x0, 0x800, 0x4, 0x7, 0x9, 0x1, 0x1c4a2aa8, 0x0, 0x47f9, 0xffffffee, 0x0, 0x4, 0x7, 0x5, 0xfa39, 0xfffffffd, 0x2, 0xf, 0x5, 0x0, 0x4, 0xe8e, 0xffffffff, 0x3, 0xa, 0x1, 0x0, 0x4a, 0x6, 0xae68, 0x7, 0x8, 0x7643, 0xa, 0x3, 0x5, 0x9, 0x300, 0xa, 0x4, 0x9, 0x1000, 0x8, 0x7, 0x10000, 0x7f, 0x0, 0xd, 0x2e1, 0x6, 0x0, 0x0, 0xabfc, 0x5, 0x9, 0xffff, 0x1ff, 0x9, 0x5, 0x9, 0x1, 0x6, 0x0, 0xa, 0x8, 0x5, 0x9, 0x4c0c4b0c, 0x3, 0xd3, 0x2048, 0x9ed3, 0x61, 0x7, 0x5, 0xf, 0x6, 0x5, 0x6, 0x9, 0x9, 0x5, 0x3, 0xffffffff, 0x8001, 0x2, 0x1, 0x5, 0x0, 0x6, 0x5, 0x3, 0x3, 0x6f8, 0x1, 0x6, 0x7, 0x7, 0x4, 0x37b, 0x5, 0x10001, 0x1, 0x4, 0x9d, 0x8, 0x0, 0x9, 0x4, 0x5cab, 0x5, 0x601, 0x4, 0x1, 0x7, 0xf2, 0x800, 0xff, 0x401, 0x9, 0xfffffff8, 0x9, 0x800, 0x4, 0x2, 0xfffffff8, 0x7, 0xd16d, 0x40, 0x8001, 0x1, 0x88c8, 0x4, 0x81, 0x7, 0x6, 0x4, 0x7b0ee0de, 0x5, 0x2, 0x4, 0x3200, 0x7, 0x330, 0xfffff27d, 0xffffffff, 0x6, 0x7, 0xf, 0x1, 0x400, 0x7, 0x0, 0x5, 0x9, 0x8, 0x7, 0x7, 0x8, 0x80, 0xffffff11, 0x7fff, 0x8, 0xc, 0x8001, 0x7, 0x20000, 0x4, 0x3, 0xe, 0xab, 0x1, 0x4, 0x0, 0x9, 0x3, 0x6, 0x5, 0x8001, 0x6a35, 0x10, 0x4, 0x5, 0x9, 0xfffffffd, 0x4f, 0xfffffffd, 0x1e, 0xdf0, 0x2, 0x5, 0x2, 0x81, 0x90000, 0xff, 0x7, 0x10001, 0xbceb, 0x54, 0x2, 0xfffffff1, 0x2, 0xfffffff9, 0x7, 0x0, 0x401, 0x9, 0x8, 0x9, 0x8, 0x5, 0x1001, 0x93, 0x4, 0x9, 0x7, 0x4, 0x80000001, 0x2, 0xe, 0xffff99ce, 0x0, 0x7, 0xa18, 0x5, 0x7f, 0x8, 0x1, 0x7, 0x6, 0x8, 0x5, 0x2, 0x401, 0x0, 0x8, 0xfff, 0xfffffff7, 0x7, 0x4, 0x3, 0x486, 0x5, 0x10001, 0x1000, 0x7fff, 0x9, 0x1, 0x0, 0x101, 0x8ff, 0x7, 0x6, 0x4, 0x8, 0x7, 0x7, 0xffff, 0x200, 0x9, 0x2, 0xab, 0x100, 0xfffffff4, 0x1, 0xff, 0x4, 0x6, 0xf7, 0xfffff5d8, 0xffffff81, 0x9, 0xcb, 0xc16b, 0x9, 0x70000]}) 2.82317413s ago: executing program 2 (id=7899): ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)={0x24, 0x12, 0x0, 0x101, 0x70bd27, 0x25dfdbfa, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x6}, @nested={0x8, 0xe8, 0x0, 0x1, [@nested={0x4, 0x43}]}]}, 0x24}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) close(0x3) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vim2m(0x0, 0x3, 0x2) recvmmsg(r0, &(0x7f0000003e80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{&(0x7f00000018c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001940)=""/129, 0x81}, {&(0x7f0000001a00)=""/182, 0xb6}, {&(0x7f0000003f80)=""/261, 0x105}, {&(0x7f0000001bc0)=""/234, 0xea}], 0x4}, 0x7}], 0x3, 0x101a2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$vim2m_VIDIOC_EXPBUF(r3, 0xc0405610, 0x0) close(0x3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7d16e354b6f02b95}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffc}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x20000000) close(0x4) mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil) move_pages(0x0, 0x1, &(0x7f0000002340)=[&(0x7f0000002000/0x2000)=nil], &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x3, 0x9fd, 0x84, 0x105}, 0x50) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES8=r5, @ANYRES64=r1, @ANYRESHEX=0x0, @ANYBLOB="c34fa43f5505fe6e631de26df21c7e699f15a2b3910ca87b9a3477888f209e38beb8e18475b4e87c4b38ed8fc0d11e58eda88389be23e1ae51f0661a2f9fb66328a10d2210a395f33f5758bd", @ANYRESOCT=r3, @ANYBLOB="ce135b0a9b234151ab5c3ce6c5e0228e8ce89d6ecb68de173e2e7f873ba2faaef7897acf815234df46b2c2eb1a7a70d3fda7731db4a34b0005f69df8606954a155db62cd80885ab6082ab502a43aa5bde2ffe7a16f192ffcddc71b526da06f6d4b9da2ac68835b405a4a1b3976e6476fa9c6fbd4647af8786043f667f818c23b37b7035da98f3fb5d9", @ANYRES32=r2], 0x94}, 0x1, 0x0, 0x0, 0x48045}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4, 0xc0000004, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x9}, {0x10, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x34, 0x2, [@TCA_FQ_QUANTUM={0xfffffffffffffd86}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x0, 0xb, 0x2}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1f}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xb508}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x4}]}}]}, 0x60}}, 0x24004055) 2.411312273s ago: executing program 3 (id=7901): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001640)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a2300"/1504, 0x5e0}, {&(0x7f0000000600)="3001fb90647586f4601659c5ad2644b99bfd65452e947b394c96c29278d097c5f170d77283a744139d2ce2a2f4bb5bb37e7396e7bac14056f25d17145e73bc2461b20ea3fce771f1b32d1585e8a456763cfafcf7189145a6e261af6232014cbf8a0f898bf6d14136874b6a1fd7caf8ec9966b0419be0420dc6e247d1a44f038ae29eb4bc67d6a04e80dfb7715ebafaa20fcbc57ade23cba05da1fbe4bba675b742472eebaabf356adc99866930e146125a272cef5baf5dfad4a28a01208d9908183ab2085a781e531f1bed4ac9c245ec19be383047656a7d857d364e6f69eccea5aca396", 0xe4}, {&(0x7f0000000e40)="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", 0x18b}, {&(0x7f0000000cc0)="f2a0f0f863621b483b19e7ecfce0d34e53fbf295927214684f4d69e90f0ec506442d2126c3f5ab0cdfd79dc1815274c3ee57068b3793c25fab48eb353478689f452328afb023f75f93229060bc2c82dd05d1e8c3a549a06e280ca4eaf77b4aed57a0c5f6120d25a3d5121895638ec5e2e600000000f5be12a64e075c60dd63e0b00e8f42bfb7671a56925477029cec7e7f16b358404edfb5e7a055fdeb2ba044d0d54e341d1d1ef1eb2c317f587f591626ceed08555ca0b2f31a3e7bf5ba7541db275e6a6b6501b87cc74c4804f6da7d3de93327287204cc97f9cb747576d2ab23a6e35c6da6b3240c92ae18b31cb6e7bc60066994e2cb401c76b1840d3e231621355f10ff35ea91ffd463228d000000000000000e454d3c36efee949f6311c6ad78b5a8f091d2ebb008925107e4a4584dab83f7f0cb5ad94266e71e2b7aaa01cf4f9f5e1d52e1e5086e9633cbee8126a20000", 0x153}, {&(0x7f00000004c0)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be17e0dbda4f028cec9973a2b9ea0cd4db9af5e29736a345d6b40ed", 0x9e}], 0x5, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x800) 2.361667738s ago: executing program 2 (id=7902): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4) 2.127393575s ago: executing program 3 (id=7903): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x8}}, 0x20) close(0x4) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 1.397145386s ago: executing program 3 (id=7904): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000e0000901080000000000000000020000050800034008000036080005400000001a10"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB='\x00\a\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 1.333475404s ago: executing program 6 (id=7905): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e6400000000140002800500010006"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0xffffffff, 0x6, 0x8, 0x401, 0x80000000, 0x7}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000240)) 1.126955356s ago: executing program 3 (id=7906): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a", 0x88}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d5", 0x1f}], 0x6, 0x4d9e, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.080180916s ago: executing program 2 (id=7907): userfaultfd(0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105f00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a27172"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000280)={0xc0, 0x0, 0x2000}) 1.054441859s ago: executing program 6 (id=7908): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x1c8, 0x29, 0x4, {0x4, 0x35, '\x00', [@generic={0xfe, 0x6d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d18"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x400, 0xb]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0xfd, 0xd3, "1535ebfdb99e0d39d28fb7f215a54151de67b9687327f73080bb73c35bad11f299c8b1f644acb1a95df98c8149faff35640b1df83d4aa03c3b99cf5dbe2746a6d54410686a5e46ff586dba7fed5df29dd37cbf320287e08f602021944b6b09ea13002d7b3a54c3c5c1da49595a1af9008fb4d75b14f3b2dd6064c5eeae6f6bfa6439ded277798140d3cfd9e105570b848ebf79b34b89945b336eb3dc2682644a086ba1ef6ab36b568807c440dabfeaa65229d6be10a7122f4b935858215daa71d1b3d1130cc791323eae973c40eee8599a40c9"}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x18, 0x29, 0x36, {0x5e}}}], 0x210}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 871.176828ms ago: executing program 5 (id=7909): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001fb40)={0x44, r0, 0xb97534d5fe9704cf, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x44}}, 0x0) 731.276746ms ago: executing program 2 (id=7910): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f00000004c0)) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x4c, 0x1, 0x9, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFCTH_STATUS={0x8}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7f00000}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10001}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4040090) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x80, 0x0, 0x3, 0x8, {{0x9, 0x4, 0x0, 0x33, 0x24, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x3c, 0x3, 0x2, [{@empty, 0x8}]}, @ssrr={0x89, 0x3, 0xb5}]}}}}}) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40000, 0x0) add_key(&(0x7f00000002c0)='asymmetric\x00', &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000580)="27bbb1597dc47f6337451576aeb8dfb5bd94109520e8e86f17154f1f9cf65ecb99c8d4a09b832e2b06377bd6f3465578f7e4bd03f416c956da02a542dee2d985d0a7b21a2186c034b3296ef41bac2493e03b67e25e27", 0x56, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, 0x0) r6 = add_key$fscrypt_provisioning(&(0x7f0000000380), 0x0, &(0x7f0000000640)={0x1, 0x0, @b}, 0x48, 0xfffffffffffffffc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0}, &(0x7f0000000700)=0xc) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f0000000740)={0x4, 0x51424752, 0x3e0, 0x95, 0x2, @stepwise={{0x4, 0x3}, {0x9, 0x9}, {0x80000001, 0x3}}}) lstat(0x0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r6, r7, r8) 716.492666ms ago: executing program 5 (id=7911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x4008af25, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@can={0xc, {{0x2, 0x1}, 0x0, 0x1, 0x0, 0x0, "aabe92e8595ce6ed"}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064d2, &(0x7f0000000080)={0x1, 0x80, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) r6 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) ustat(0x801, &(0x7f0000000000)) read$FUSE(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6c, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea98", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x24, "d8a8c8a584f6607ab62735146bd5fc7fc221094cc78e2ee6645f9841b10b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 167.144542ms ago: executing program 3 (id=7912): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8100}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipmr_newroute={0x24, 0x18, 0x2, 0x70bd29, 0x25dfdbfd, {0x80, 0x80, 0x20, 0x1, 0xfe, 0x3, 0xfe, 0xa}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000094}, 0x4000000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x9}], 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a"], 0x104}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="1a040500d3fc03fc01004788031c09", 0x10025, 0x4000004, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x6, 0x6, @remote}, 0x14) 165.728535ms ago: executing program 6 (id=7913): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)="7fe1b33315b1fd8cd2523811f49a284c7da2c2dab8d7a3562386f41e36be53b97c6eb951e4cd864a0d49c5251ea819d1fb396061defd1768694a", 0x3a}, {&(0x7f0000000400)="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", 0x47e}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001540)="2aba9e", 0x3}, {0x0}, {0x0}], 0x3}}], 0x2, 0x40) 164.69513ms ago: executing program 6 (id=7914): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) (async) r1 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8e) mknodat$loop(r2, &(0x7f0000000140)='./file0\x00', 0x4, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)=@mmap={0x1, 0xa, 0x4, 0x200, 0x5ab04187, {0x77359400}, {0x1, 0xc, 0x5, 0x7, 0x6, 0x7, "ce34f2fb"}, 0x60a, 0x1, {}, 0xfe0, 0x0, r3}) (async) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000040)=@mmap={0x1, 0xa, 0x4, 0x200, 0x5ab04187, {0x77359400}, {0x1, 0xc, 0x5, 0x7, 0x6, 0x7, "ce34f2fb"}, 0x60a, 0x1, {}, 0xfe0, 0x0, r3}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'/12}, {0x20, '\x00\x00\x00\x00\x00[[`]zN\xd8ul\xc5X\xb9 #X\xc1W_\xd3*\x03P\x87\x98\x00\xa8\xe8\n\x96\xe3\xe5\x8b\xd7+\xaeq\x8bx7\x95u\xc5\xc3$j\xb2q\x1b\x9a\x8c\xcb\xb8\xbe\x02\x00\x00\x00\x9a?\x95s5\v:\xa20\v\x1f*}%\x9aB\xeb\xcd\xb9S6\xaaM\x83\x9d\x9c[\xa2A\f\x00\x00\x00\x00\x00\x00\x9cD\x16\x90\xf6[\xb9\xf3\x91\x91\x15\xd1\x9aD\x8bW\xde\x9c~\xc8\xb0r=\xd8\xd17k.\xbe\xe96W|\\S)af,\x88 \xd8\x1bY#\x84}F*\x14\x92/\x9dh!\x1ab\xca\xaa\x8a\xf4q\xb9\xde\x00\x00\x00\x00\x00\x00\xc0\xa9\x96:\xe5\x8chq\x8cB>\xc1\xaez\x1a\'\xa5\xc0\xca\x06Yc\xf8\xa2\x9cu.\xff\xcb\xca\xfd'}], 0xa, "521299a432289bea0a363e238732fea53f5db534deca9d0418026c1f265e3df3ced185b5cd8ab88f35d292428abfb13f16b96ea93fd0551e1d4f7b79160e9e98cd9a001d5f42d3fb166c612fe4ca8a75128a336b"}, 0x134) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc5e57d1e00d96072000001ec19de2b7fb0000e60081b8787d9600010000000002000000000000004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c552b6ee4457f3060038000f4bd000000030000000000fbff00"}}) 163.719642ms ago: executing program 3 (id=7915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)='B', 0x1}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x1000803c, 0x0, 0x0) 60.382269ms ago: executing program 6 (id=7916): sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000e0000901080000000000000000020000050800034008000036080005400000001a10"], 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 0s ago: executing program 6 (id=7917): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x7, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4) kernel console output (not intermixed with test programs): process `syz.2.7528'. [ 1839.014149][T30995] netlink: 'syz.2.7536': attribute type 1 has an invalid length. [ 1839.046935][T30995] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1839.063718][T30995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7536'. [ 1839.079304][T30995] gretap1: entered promiscuous mode [ 1839.171175][T31005] FAULT_INJECTION: forcing a failure. [ 1839.171175][T31005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1839.185072][T31005] CPU: 0 UID: 0 PID: 31005 Comm: syz.2.7539 Not tainted syzkaller #0 PREEMPT(full) [ 1839.185103][T31005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1839.185117][T31005] Call Trace: [ 1839.185127][T31005] [ 1839.185137][T31005] dump_stack_lvl+0xe8/0x150 [ 1839.185168][T31005] should_fail_ex+0x412/0x560 [ 1839.185202][T31005] _copy_from_user+0x2d/0xb0 [ 1839.185236][T31005] ___sys_sendmsg+0x1c6/0x360 [ 1839.185267][T31005] ? __lock_acquire+0x6b5/0x2cf0 [ 1839.185296][T31005] ? __pfx____sys_sendmsg+0x10/0x10 [ 1839.185361][T31005] ? __fget_files+0x2a/0x420 [ 1839.185388][T31005] ? __fget_files+0x3a0/0x420 [ 1839.185431][T31005] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1839.185464][T31005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1839.185505][T31005] ? __pfx_ksys_write+0x10/0x10 [ 1839.185545][T31005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.185570][T31005] do_syscall_64+0x15f/0xf80 [ 1839.185599][T31005] ? trace_irq_disable+0x3b/0x140 [ 1839.185632][T31005] ? clear_bhb_loop+0x40/0x90 [ 1839.185669][T31005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1839.185691][T31005] RIP: 0033:0x7faaca39cdd9 [ 1839.185713][T31005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1839.185732][T31005] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1839.185756][T31005] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1839.185773][T31005] RDX: 0000000000000008 RSI: 0000200000002600 RDI: 0000000000000004 [ 1839.185787][T31005] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1839.185801][T31005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1839.185814][T31005] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1839.185847][T31005] [ 1839.527215][T31007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1839.550277][T31007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7540'. [ 1839.646060][T31011] misc userio: Invalid payload size [ 1839.656036][T31011] misc userio: No port type given on /dev/userio [ 1839.664798][T31011] misc userio: The device must be registered before sending interrupts [ 1839.684403][T31011] misc userio: Invalid payload size [ 1839.692436][T31011] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1840.707758][T18809] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 1840.870465][T18809] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.882817][T18809] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1840.912998][T18809] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1840.931921][T18809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.956513][T18809] usb 3-1: Product: syz [ 1840.964902][T18809] usb 3-1: Manufacturer: syz [ 1840.983024][T18809] usb 3-1: SerialNumber: syz [ 1841.010514][T18809] usb 3-1: config 0 descriptor?? [ 1841.236984][T31051] random: crng reseeded on system resumption [ 1841.250930][T26199] usb 3-1: USB disconnect, device number 91 [ 1841.288068][ T30] kauditd_printk_skb: 333 callbacks suppressed [ 1841.288086][ T30] audit: type=1326 audit(1778231814.035:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31050 comm="syz.5.7557" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faccef9cdd9 code=0x0 [ 1841.456000][T31054] FAULT_INJECTION: forcing a failure. [ 1841.456000][T31054] name failslab, interval 1, probability 0, space 0, times 0 [ 1841.487260][T31054] CPU: 1 UID: 0 PID: 31054 Comm: syz.3.7558 Not tainted syzkaller #0 PREEMPT(full) [ 1841.487291][T31054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1841.487312][T31054] Call Trace: [ 1841.487322][T31054] [ 1841.487333][T31054] dump_stack_lvl+0xe8/0x150 [ 1841.487367][T31054] should_fail_ex+0x412/0x560 [ 1841.487402][T31054] should_failslab+0xa8/0x100 [ 1841.487436][T31054] __kmalloc_noprof+0xe8/0x760 [ 1841.487465][T31054] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1841.487501][T31054] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1841.487533][T31054] ? tomoyo_domain+0xd7/0x130 [ 1841.487568][T31054] ? tomoyo_path_number_perm+0x219/0x630 [ 1841.487603][T31054] tomoyo_path_number_perm+0x246/0x630 [ 1841.487632][T31054] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1841.487657][T31054] ? __lock_acquire+0x6b5/0x2cf0 [ 1841.487698][T31054] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1841.487751][T31054] ? __fget_files+0x2a/0x420 [ 1841.487781][T31054] ? __fget_files+0x2a/0x420 [ 1841.487804][T31054] ? __fget_files+0x3a0/0x420 [ 1841.487829][T31054] ? __fget_files+0x2a/0x420 [ 1841.487859][T31054] security_file_ioctl+0xc3/0x2a0 [ 1841.487885][T31054] __se_sys_ioctl+0x47/0x170 [ 1841.487916][T31054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.487940][T31054] do_syscall_64+0x15f/0xf80 [ 1841.487969][T31054] ? trace_irq_disable+0x3b/0x140 [ 1841.488000][T31054] ? clear_bhb_loop+0x40/0x90 [ 1841.488027][T31054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1841.488048][T31054] RIP: 0033:0x7fc5b7d9cdd9 [ 1841.488071][T31054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1841.488090][T31054] RSP: 002b:00007fc5b8bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1841.488114][T31054] RAX: ffffffffffffffda RBX: 00007fc5b8015fa0 RCX: 00007fc5b7d9cdd9 [ 1841.488130][T31054] RDX: 0000200000000040 RSI: 00000000c008561c RDI: 0000000000000003 [ 1841.488144][T31054] RBP: 00007fc5b8bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1841.488158][T31054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1841.488170][T31054] R13: 00007fc5b8016038 R14: 00007fc5b8015fa0 R15: 00007fc5b813fa48 [ 1841.488204][T31054] [ 1841.874128][T31054] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1841.933525][T24054] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 1842.004719][T24054] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1842.338572][T31073] syzkaller0: entered promiscuous mode [ 1842.344325][T31073] syzkaller0: entered allmulticast mode [ 1842.448469][T18804] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1842.524089][T31079] binder: 31066:31079 ioctl 4018620d 0 returned -22 [ 1842.607506][T18804] usb 3-1: Using ep0 maxpacket: 32 [ 1842.624537][T18804] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1842.641640][T18804] usb 3-1: config 0 has no interface number 0 [ 1842.659096][T18804] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1842.682337][T18804] usb 3-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1842.719561][T18804] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1842.749820][T18804] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1842.783280][T18804] usb 3-1: Product: syz [ 1842.801388][T18804] usb 3-1: Manufacturer: syz [ 1842.826126][T18804] usb 3-1: SerialNumber: syz [ 1842.853552][T18804] usb 3-1: config 0 descriptor?? [ 1842.876029][T18804] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1842.887168][T18804] em28xx 3-1:0.132: Video interface 132 found: bulk [ 1843.218487][T31091] syzkaller0: entered promiscuous mode [ 1843.256200][T31091] syzkaller0: entered allmulticast mode [ 1843.269490][T18804] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1843.340493][T18804] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1843.360361][T18804] em28xx 3-1:0.132: board has no eeprom [ 1843.428506][T18804] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1843.458213][T18804] em28xx 3-1:0.132: analog set to bulk mode. [ 1843.478688][T18809] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 1843.479984][T18801] em28xx 3-1:0.132: Registering V4L2 extension [ 1843.538812][T18804] usb 3-1: USB disconnect, device number 92 [ 1843.568583][T18804] em28xx 3-1:0.132: Disconnecting em28xx [ 1843.675256][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1843.741132][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1843.794207][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1843.805272][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1843.841867][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1843.848249][T26199] usb 7-1: new full-speed USB device number 47 using dummy_hcd [ 1843.903641][T18809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1843.984783][T18809] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 1844.011640][T18809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1844.023431][T18809] usb 4-1: Product: syz [ 1844.028442][T18809] usb 4-1: Manufacturer: syz [ 1844.043698][T18809] usb 4-1: SerialNumber: syz [ 1844.065270][T26199] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1844.083902][T18809] usb 4-1: config 0 descriptor?? [ 1844.118969][T18809] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 1844.142146][T18801] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1844.148807][T18809] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 1844.170940][T26199] usb 7-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54 [ 1844.186098][T18801] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1844.234474][T26199] usb 7-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7 [ 1844.266030][T18801] em28xx 3-1:0.132: No AC97 audio processor [ 1844.313557][T26199] usb 7-1: Product: syz [ 1844.351135][T26199] usb 7-1: Manufacturer: syz [ 1844.400893][T26199] usb 7-1: SerialNumber: syz [ 1844.533941][T26199] usb 7-1: config 0 descriptor?? [ 1844.558108][T26199] gspca_main: conex-2.14.0 probing 0572:0041 [ 1844.572377][T18801] usb 3-1: Decoder not found [ 1844.590528][T18801] em28xx 3-1:0.132: failed to create media graph [ 1844.624560][T18801] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1844.745664][T18801] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1844.820017][T18804] em28xx 3-1:0.132: Closing input extension [ 1844.955528][T18804] em28xx 3-1:0.132: Freeing device [ 1845.268442][T26199] usb 7-1: USB disconnect, device number 47 [ 1846.492014][T18809] usb 4-1: USB disconnect, device number 95 [ 1846.736623][T31161] FAULT_INJECTION: forcing a failure. [ 1846.736623][T31161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.757835][T31161] CPU: 0 UID: 0 PID: 31161 Comm: syz.6.7587 Not tainted syzkaller #0 PREEMPT(full) [ 1846.757869][T31161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1846.757883][T31161] Call Trace: [ 1846.757892][T31161] [ 1846.757901][T31161] dump_stack_lvl+0xe8/0x150 [ 1846.757933][T31161] should_fail_ex+0x412/0x560 [ 1846.757967][T31161] _copy_from_user+0x2d/0xb0 [ 1846.757998][T31161] do_seccomp+0x1ab/0xdd0 [ 1846.758022][T31161] ? __fget_files+0x3a0/0x420 [ 1846.758054][T31161] ? __pfx_do_seccomp+0x10/0x10 [ 1846.758077][T31161] ? ksys_write+0x242/0x270 [ 1846.758107][T31161] ? __pfx_ksys_write+0x10/0x10 [ 1846.758144][T31161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.758168][T31161] do_syscall_64+0x15f/0xf80 [ 1846.758199][T31161] ? clear_bhb_loop+0x40/0x90 [ 1846.758224][T31161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.758245][T31161] RIP: 0033:0x7fa3d4d9cdd9 [ 1846.758267][T31161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1846.758285][T31161] RSP: 002b:00007fa3d5d07028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 1846.758310][T31161] RAX: ffffffffffffffda RBX: 00007fa3d5015fa0 RCX: 00007fa3d4d9cdd9 [ 1846.758326][T31161] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000000000000001 [ 1846.758340][T31161] RBP: 00007fa3d5d07090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.758353][T31161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1846.758366][T31161] R13: 00007fa3d5016038 R14: 00007fa3d5015fa0 R15: 00007fa3d513fa48 [ 1846.758399][T31161] [ 1847.242119][T31172] syzkaller0: entered promiscuous mode [ 1847.263651][T31172] syzkaller0: entered allmulticast mode [ 1847.483030][ T57] tipc: Subscription rejected, illegal request [ 1847.522875][T31184] FAULT_INJECTION: forcing a failure. [ 1847.522875][T31184] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.586081][T31184] CPU: 0 UID: 0 PID: 31184 Comm: syz.0.7596 Not tainted syzkaller #0 PREEMPT(full) [ 1847.586115][T31184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.586129][T31184] Call Trace: [ 1847.586138][T31184] [ 1847.586149][T31184] dump_stack_lvl+0xe8/0x150 [ 1847.586182][T31184] should_fail_ex+0x412/0x560 [ 1847.586217][T31184] _copy_from_user+0x2d/0xb0 [ 1847.586249][T31184] core_sys_select+0x578/0xc30 [ 1847.586293][T31184] ? __pfx_core_sys_select+0x10/0x10 [ 1847.586343][T31184] ? __pfx_set_user_sigmask+0x10/0x10 [ 1847.586366][T31184] ? kmem_cache_free+0x182/0x650 [ 1847.586395][T31184] ? fd_install+0x94/0x3d0 [ 1847.586430][T31184] __se_sys_pselect6+0x267/0x320 [ 1847.586461][T31184] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1847.586487][T31184] ? __pfx_ksys_write+0x10/0x10 [ 1847.586523][T31184] ? __x64_sys_pselect6+0x21/0xf0 [ 1847.586548][T31184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.586573][T31184] do_syscall_64+0x15f/0xf80 [ 1847.586603][T31184] ? trace_irq_disable+0x3b/0x140 [ 1847.586635][T31184] ? clear_bhb_loop+0x40/0x90 [ 1847.586662][T31184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.586685][T31184] RIP: 0033:0x7f34c8b9cdd9 [ 1847.586707][T31184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.586728][T31184] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1847.586752][T31184] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1847.586769][T31184] RDX: 0000000000000000 RSI: 0000200000001100 RDI: 0000000000000040 [ 1847.586784][T31184] RBP: 00007f34c99e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1847.586799][T31184] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1847.586814][T31184] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1847.586856][T31184] [ 1847.606094][T31188] FAULT_INJECTION: forcing a failure. [ 1847.606094][T31188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1847.903688][T31188] CPU: 1 UID: 0 PID: 31188 Comm: syz.2.7597 Not tainted syzkaller #0 PREEMPT(full) [ 1847.903722][T31188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1847.903735][T31188] Call Trace: [ 1847.903745][T31188] [ 1847.903756][T31188] dump_stack_lvl+0xe8/0x150 [ 1847.903799][T31188] should_fail_ex+0x412/0x560 [ 1847.903834][T31188] _copy_from_user+0x2d/0xb0 [ 1847.903867][T31188] sk_setsockopt+0x2b3/0x2d60 [ 1847.903906][T31188] ? __pfx_sk_setsockopt+0x10/0x10 [ 1847.903937][T31188] ? aa_sk_perm+0x6d5/0x900 [ 1847.903975][T31188] ? __fget_files+0x2a/0x420 [ 1847.904007][T31188] ? __pfx_aa_sk_perm+0x10/0x10 [ 1847.904037][T31188] ? __fget_files+0x2a/0x420 [ 1847.904061][T31188] ? aa_sock_opt_perm+0xff/0x1a0 [ 1847.904092][T31188] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1847.904125][T31188] do_sock_setsockopt+0x11b/0x1b0 [ 1847.904158][T31188] __x64_sys_setsockopt+0x13d/0x1b0 [ 1847.904189][T31188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.904212][T31188] do_syscall_64+0x15f/0xf80 [ 1847.904242][T31188] ? trace_irq_disable+0x3b/0x140 [ 1847.904271][T31188] ? clear_bhb_loop+0x40/0x90 [ 1847.904299][T31188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1847.904321][T31188] RIP: 0033:0x7faaca39cdd9 [ 1847.904344][T31188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1847.904363][T31188] RSP: 002b:00007faacb289028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1847.904388][T31188] RAX: ffffffffffffffda RBX: 00007faaca616090 RCX: 00007faaca39cdd9 [ 1847.904405][T31188] RDX: 0000000000000028 RSI: 0000000000000001 RDI: 0000000000000003 [ 1847.904419][T31188] RBP: 00007faacb289090 R08: 0000000000000004 R09: 0000000000000000 [ 1847.904433][T31188] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1847.904448][T31188] R13: 00007faaca616128 R14: 00007faaca616090 R15: 00007faaca73fa48 [ 1847.904480][T31188] [ 1848.462149][T31196] FAULT_INJECTION: forcing a failure. [ 1848.462149][T31196] name failslab, interval 1, probability 0, space 0, times 0 [ 1848.512566][T31196] CPU: 1 UID: 0 PID: 31196 Comm: syz.5.7601 Not tainted syzkaller #0 PREEMPT(full) [ 1848.512600][T31196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1848.512614][T31196] Call Trace: [ 1848.512624][T31196] [ 1848.512635][T31196] dump_stack_lvl+0xe8/0x150 [ 1848.512669][T31196] should_fail_ex+0x412/0x560 [ 1848.512704][T31196] should_failslab+0xa8/0x100 [ 1848.512739][T31196] __kmalloc_noprof+0xe8/0x760 [ 1848.512770][T31196] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1848.512808][T31196] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1848.512840][T31196] ? tomoyo_domain+0xd7/0x130 [ 1848.512877][T31196] ? tomoyo_path_number_perm+0x219/0x630 [ 1848.512903][T31196] tomoyo_path_number_perm+0x246/0x630 [ 1848.512934][T31196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1848.512959][T31196] ? __lock_acquire+0x6b5/0x2cf0 [ 1848.513001][T31196] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1848.513061][T31196] ? __fget_files+0x2a/0x420 [ 1848.513090][T31196] ? __fget_files+0x2a/0x420 [ 1848.513116][T31196] ? __fget_files+0x3a0/0x420 [ 1848.513140][T31196] ? __fget_files+0x2a/0x420 [ 1848.513170][T31196] security_file_ioctl+0xc3/0x2a0 [ 1848.513197][T31196] __se_sys_ioctl+0x47/0x170 [ 1848.513229][T31196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.513255][T31196] do_syscall_64+0x15f/0xf80 [ 1848.513283][T31196] ? trace_irq_disable+0x3b/0x140 [ 1848.513315][T31196] ? clear_bhb_loop+0x40/0x90 [ 1848.513341][T31196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.513363][T31196] RIP: 0033:0x7faccef9cdd9 [ 1848.513385][T31196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1848.513404][T31196] RSP: 002b:00007faccff1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1848.513428][T31196] RAX: ffffffffffffffda RBX: 00007faccf215fa0 RCX: 00007faccef9cdd9 [ 1848.513443][T31196] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 1848.513457][T31196] RBP: 00007faccff1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1848.513471][T31196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1848.513485][T31196] R13: 00007faccf216038 R14: 00007faccf215fa0 R15: 00007faccf33fa48 [ 1848.513520][T31196] [ 1848.513550][T31196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1848.858471][T18809] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1849.008179][T18809] usb 4-1: Using ep0 maxpacket: 16 [ 1849.014249][T18809] usb 4-1: too many configurations: 123, using maximum allowed: 8 [ 1849.030160][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.072080][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.108826][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.129251][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.169902][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.213103][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.231319][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.253344][T18809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.258828][T31215] tipc: Enabled bearer , priority 0 [ 1849.280336][T31215] syzkaller0: entered promiscuous mode [ 1849.282367][T18809] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1849.286255][T31215] syzkaller0: entered allmulticast mode [ 1849.312475][T18809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 1849.331309][T18809] usb 4-1: SerialNumber: syz [ 1849.348326][T18809] usb 4-1: config 0 descriptor?? [ 1849.378260][T18809] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input36 [ 1849.521717][T31215] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7608'. [ 1849.555690][T31218] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1849.583176][T31218] batadv_slave_1: entered promiscuous mode [ 1849.635911][T31219] tipc: Resetting bearer [ 1849.672769][T31214] tipc: Resetting bearer [ 1849.763630][T31214] tipc: Disabling bearer [ 1849.933766][T31229] FAULT_INJECTION: forcing a failure. [ 1849.933766][T31229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1849.956231][T31229] CPU: 1 UID: 0 PID: 31229 Comm: syz.0.7611 Not tainted syzkaller #0 PREEMPT(full) [ 1849.956269][T31229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1849.956284][T31229] Call Trace: [ 1849.956293][T31229] [ 1849.956303][T31229] dump_stack_lvl+0xe8/0x150 [ 1849.956338][T31229] should_fail_ex+0x412/0x560 [ 1849.956371][T31229] _copy_from_user+0x2d/0xb0 [ 1849.956404][T31229] ___sys_recvmsg+0x175/0x590 [ 1849.956442][T31229] ? __pfx____sys_recvmsg+0x10/0x10 [ 1849.956477][T31229] ? __fget_files+0x2a/0x420 [ 1849.956531][T31229] ? __fget_files+0x3a0/0x420 [ 1849.956567][T31229] do_recvmmsg+0x334/0x800 [ 1849.956607][T31229] ? __pfx_do_recvmmsg+0x10/0x10 [ 1849.956650][T31229] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1849.956700][T31229] __x64_sys_recvmmsg+0x198/0x250 [ 1849.956734][T31229] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1849.956773][T31229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.956799][T31229] do_syscall_64+0x15f/0xf80 [ 1849.956827][T31229] ? trace_irq_disable+0x3b/0x140 [ 1849.956860][T31229] ? clear_bhb_loop+0x40/0x90 [ 1849.956887][T31229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1849.956910][T31229] RIP: 0033:0x7f34c8b9cdd9 [ 1849.956933][T31229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.956953][T31229] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1849.956978][T31229] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1849.956995][T31229] RDX: 0000000000000005 RSI: 0000200000005000 RDI: 0000000000000003 [ 1849.957010][T31229] RBP: 00007f34c99e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1849.957024][T31229] R10: 0000000000000062 R11: 0000000000000246 R12: 0000000000000001 [ 1849.957038][T31229] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1849.957073][T31229] [ 1850.481325][T24054] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1850.547559][ T5693] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1850.615502][T31240] FAULT_INJECTION: forcing a failure. [ 1850.615502][T31240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1850.647212][T31240] CPU: 0 UID: 0 PID: 31240 Comm: syz.0.7616 Not tainted syzkaller #0 PREEMPT(full) [ 1850.647246][T31240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1850.647261][T31240] Call Trace: [ 1850.647271][T31240] [ 1850.647280][T31240] dump_stack_lvl+0xe8/0x150 [ 1850.647316][T31240] should_fail_ex+0x412/0x560 [ 1850.647352][T31240] _copy_from_user+0x2d/0xb0 [ 1850.647384][T31240] do_sock_getsockopt+0x200/0x7e0 [ 1850.647422][T31240] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1850.647467][T31240] ? __fget_files+0x3a0/0x420 [ 1850.647493][T31240] ? __fget_files+0x2a/0x420 [ 1850.647526][T31240] __x64_sys_getsockopt+0x1a4/0x240 [ 1850.647568][T31240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.647590][T31240] do_syscall_64+0x15f/0xf80 [ 1850.647609][T31240] ? trace_irq_disable+0x3b/0x140 [ 1850.647636][T31240] ? clear_bhb_loop+0x40/0x90 [ 1850.647662][T31240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1850.647683][T31240] RIP: 0033:0x7f34c8b9cdd9 [ 1850.647704][T31240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1850.647722][T31240] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1850.647749][T31240] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1850.647760][T31240] RDX: 0000000000000005 RSI: 000000000000011a RDI: 0000000000000003 [ 1850.647774][T31240] RBP: 00007f34c99e5090 R08: 0000200000000040 R09: 0000000000000000 [ 1850.647784][T31240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1850.647794][T31240] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1850.647826][T31240] [ 1851.060062][ T5693] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1851.074477][ T5693] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.106951][ T5693] usb 7-1: config 0 descriptor?? [ 1851.133905][ T5693] cp210x 7-1:0.0: cp210x converter detected [ 1851.346002][ T5693] cp210x 7-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1851.374905][ T5693] cp210x 7-1:0.0: querying part number failed [ 1851.403562][ T5693] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1851.443682][ T5693] usb 7-1: USB disconnect, device number 48 [ 1851.495343][ T5693] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1851.528253][ T5693] cp210x 7-1:0.0: device disconnected [ 1851.727787][T31258] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7622'. [ 1851.999078][T31263] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7625'. [ 1852.239137][T31272] FAULT_INJECTION: forcing a failure. [ 1852.239137][T31272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1852.261052][T31272] CPU: 1 UID: 0 PID: 31272 Comm: syz.0.7628 Not tainted syzkaller #0 PREEMPT(full) [ 1852.261083][T31272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1852.261097][T31272] Call Trace: [ 1852.261105][T31272] [ 1852.261115][T31272] dump_stack_lvl+0xe8/0x150 [ 1852.261151][T31272] should_fail_ex+0x412/0x560 [ 1852.261183][T31272] _copy_from_user+0x2d/0xb0 [ 1852.261214][T31272] do_sock_getsockopt+0x200/0x7e0 [ 1852.261248][T31272] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1852.261290][T31272] ? __fget_files+0x3a0/0x420 [ 1852.261315][T31272] ? __fget_files+0x2a/0x420 [ 1852.261349][T31272] __x64_sys_getsockopt+0x1a4/0x240 [ 1852.261382][T31272] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.261406][T31272] do_syscall_64+0x15f/0xf80 [ 1852.261437][T31272] ? clear_bhb_loop+0x40/0x90 [ 1852.261463][T31272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.261484][T31272] RIP: 0033:0x7f34c8b9cdd9 [ 1852.261505][T31272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.261524][T31272] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1852.261548][T31272] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1852.261564][T31272] RDX: 000000000000007b RSI: 0000000000000084 RDI: 0000000000000004 [ 1852.261578][T31272] RBP: 00007f34c99e5090 R08: 0000200000000040 R09: 0000000000000000 [ 1852.261592][T31272] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1852.261605][T31272] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1852.261638][T31272] [ 1852.523598][T31277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7629'. [ 1852.547585][ T5693] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1852.621027][T31283] netlink: 'syz.0.7631': attribute type 1 has an invalid length. [ 1852.646763][T31277] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1852.754295][ T5693] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1852.808554][T31283] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1852.820632][ T5693] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1852.863378][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1852.887694][T31285] gretap1: entered promiscuous mode [ 1852.912081][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 190, setting to 64 [ 1852.956036][ T5693] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1852.977685][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1852.994807][ T5693] usb 6-1: Product: syz [ 1853.012295][ T5693] usb 6-1: Manufacturer: syz [ 1853.022657][ T5693] usb 6-1: SerialNumber: syz [ 1853.044862][ T5693] usb 6-1: config 0 descriptor?? [ 1853.063670][T31269] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1853.235495][ T5693] rc_core: IR keymap rc-imon-rsc not found [ 1853.261961][ T5693] Registered IR keymap rc-empty [ 1853.293206][ T5693] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1853.325894][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.343807][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.394250][ T5693] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input37 [ 1853.499474][T31300] FAULT_INJECTION: forcing a failure. [ 1853.499474][T31300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1853.527508][T31300] CPU: 1 UID: 0 PID: 31300 Comm: syz.6.7637 Not tainted syzkaller #0 PREEMPT(full) [ 1853.527543][T31300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1853.527556][T31300] Call Trace: [ 1853.527565][T31300] [ 1853.527575][T31300] dump_stack_lvl+0xe8/0x150 [ 1853.527606][T31300] should_fail_ex+0x412/0x560 [ 1853.527641][T31300] _copy_to_user+0x31/0xb0 [ 1853.527674][T31300] simple_read_from_buffer+0xe1/0x170 [ 1853.527706][T31300] proc_fail_nth_read+0x1bb/0x230 [ 1853.527739][T31300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.527770][T31300] ? rw_verify_area+0x2a6/0x4d0 [ 1853.527797][T31300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1853.527842][T31300] vfs_read+0x20c/0xa70 [ 1853.527876][T31300] ? __pfx___mutex_lock+0x10/0x10 [ 1853.527910][T31300] ? __pfx_vfs_read+0x10/0x10 [ 1853.527941][T31300] ? __fget_files+0x2a/0x420 [ 1853.527972][T31300] ? __fget_files+0x3a0/0x420 [ 1853.527996][T31300] ? __fget_files+0x2a/0x420 [ 1853.528030][T31300] ksys_read+0x150/0x270 [ 1853.528063][T31300] ? __pfx_ksys_read+0x10/0x10 [ 1853.528101][T31300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.528126][T31300] do_syscall_64+0x15f/0xf80 [ 1853.528154][T31300] ? trace_irq_disable+0x3b/0x140 [ 1853.528186][T31300] ? clear_bhb_loop+0x40/0x90 [ 1853.528212][T31300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1853.528234][T31300] RIP: 0033:0x7fa3d4d5d60e [ 1853.528256][T31300] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1853.528274][T31300] RSP: 002b:00007fa3d5d06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1853.528299][T31300] RAX: ffffffffffffffda RBX: 00007fa3d5d076c0 RCX: 00007fa3d4d5d60e [ 1853.528315][T31300] RDX: 000000000000000f RSI: 00007fa3d5d070a0 RDI: 0000000000000004 [ 1853.528329][T31300] RBP: 00007fa3d5d07090 R08: 0000000000000000 R09: 0000000000000000 [ 1853.528343][T31300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1853.528356][T31300] R13: 00007fa3d5016038 R14: 00007fa3d5015fa0 R15: 00007fa3d513fa48 [ 1853.528392][T31300] [ 1853.874606][ T4979] bcm5974 4-1:0.0: could not read from device [ 1854.060347][T31306] syzkaller0: entered promiscuous mode [ 1854.079421][ T4979] bcm5974 4-1:0.0: could not read from device [ 1854.112912][T31306] syzkaller0: entered allmulticast mode [ 1854.138976][ T4979] bcm5974 4-1:0.0: could not read from device [ 1854.142865][T18809] usb 4-1: USB disconnect, device number 96 [ 1854.249636][ T4979] bcm5974 4-1:0.0: could not read from device [ 1854.265345][ T5693] usb 6-1: USB disconnect, device number 55 [ 1854.785512][T31313] syzkaller0: entered promiscuous mode [ 1854.795751][T31313] syzkaller0: entered allmulticast mode [ 1854.810298][T31319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 1854.864228][T31323] FAULT_INJECTION: forcing a failure. [ 1854.864228][T31323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1854.873864][T31319] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1854.885622][T31323] CPU: 1 UID: 0 PID: 31323 Comm: syz.0.7644 Not tainted syzkaller #0 PREEMPT(full) [ 1854.885660][T31323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1854.885674][T31323] Call Trace: [ 1854.885684][T31323] [ 1854.885695][T31323] dump_stack_lvl+0xe8/0x150 [ 1854.885728][T31323] should_fail_ex+0x412/0x560 [ 1854.885761][T31323] _copy_from_user+0x2d/0xb0 [ 1854.885793][T31323] ucma_write+0x15d/0x2f0 [ 1854.885939][T31323] ? __pfx_ucma_write+0x10/0x10 [ 1854.885965][T31323] ? security_file_permission+0x75/0x260 [ 1854.885992][T31323] ? rw_verify_area+0x255/0x4d0 [ 1854.886022][T31323] ? __pfx_ucma_write+0x10/0x10 [ 1854.886050][T31323] vfs_write+0x29a/0xb90 [ 1854.886089][T31323] ? __pfx_vfs_write+0x10/0x10 [ 1854.886121][T31323] ? __fget_files+0x2a/0x420 [ 1854.886149][T31323] ? __fget_files+0x2a/0x420 [ 1854.886173][T31323] ? __fget_files+0x3a0/0x420 [ 1854.886198][T31323] ? __fget_files+0x2a/0x420 [ 1854.886233][T31323] ksys_write+0x150/0x270 [ 1854.886265][T31323] ? __pfx_ksys_write+0x10/0x10 [ 1854.886303][T31323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.886328][T31323] do_syscall_64+0x15f/0xf80 [ 1854.886358][T31323] ? trace_irq_disable+0x3b/0x140 [ 1854.886389][T31323] ? clear_bhb_loop+0x40/0x90 [ 1854.886416][T31323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1854.886438][T31323] RIP: 0033:0x7f34c8b9cdd9 [ 1854.886462][T31323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.886481][T31323] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1854.886506][T31323] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1854.886522][T31323] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 0000000000000003 [ 1854.886544][T31323] RBP: 00007f34c99e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1854.886560][T31323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1854.886573][T31323] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1854.886605][T31323] [ 1856.070558][T31340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1859.725153][T31333] syzkaller0: entered promiscuous mode [ 1859.734992][T31333] syzkaller0: entered allmulticast mode [ 1861.382906][T31367] FAULT_INJECTION: forcing a failure. [ 1861.382906][T31367] name failslab, interval 1, probability 0, space 0, times 0 [ 1861.398321][T31367] CPU: 1 UID: 0 PID: 31367 Comm: syz.0.7656 Not tainted syzkaller #0 PREEMPT(full) [ 1861.398350][T31367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1861.398359][T31367] Call Trace: [ 1861.398366][T31367] [ 1861.398373][T31367] dump_stack_lvl+0xe8/0x150 [ 1861.398395][T31367] should_fail_ex+0x412/0x560 [ 1861.398418][T31367] should_failslab+0xa8/0x100 [ 1861.398439][T31367] __kmalloc_noprof+0xe8/0x760 [ 1861.398458][T31367] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1861.398492][T31367] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1861.398512][T31367] ? tomoyo_domain+0xd7/0x130 [ 1861.398534][T31367] ? tomoyo_path_number_perm+0x219/0x630 [ 1861.398550][T31367] tomoyo_path_number_perm+0x246/0x630 [ 1861.398567][T31367] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1861.398582][T31367] ? __lock_acquire+0x6b5/0x2cf0 [ 1861.398606][T31367] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1861.398637][T31367] ? __fget_files+0x2a/0x420 [ 1861.398656][T31367] ? __fget_files+0x2a/0x420 [ 1861.398671][T31367] ? __fget_files+0x3a0/0x420 [ 1861.398686][T31367] ? __fget_files+0x2a/0x420 [ 1861.398704][T31367] security_file_ioctl+0xc3/0x2a0 [ 1861.398721][T31367] __se_sys_ioctl+0x47/0x170 [ 1861.398743][T31367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.398758][T31367] do_syscall_64+0x15f/0xf80 [ 1861.398777][T31367] ? trace_irq_disable+0x3b/0x140 [ 1861.398796][T31367] ? clear_bhb_loop+0x40/0x90 [ 1861.398813][T31367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.398827][T31367] RIP: 0033:0x7f34c8b9cdd9 [ 1861.398841][T31367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.398854][T31367] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.398870][T31367] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1861.398881][T31367] RDX: 0000200000000540 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1861.398891][T31367] RBP: 00007f34c99e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.398900][T31367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.398909][T31367] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1861.398929][T31367] [ 1861.399430][T31367] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1861.846230][T31371] FAULT_INJECTION: forcing a failure. [ 1861.846230][T31371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1861.870107][T31371] CPU: 1 UID: 0 PID: 31371 Comm: syz.0.7658 Not tainted syzkaller #0 PREEMPT(full) [ 1861.870147][T31371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1861.870160][T31371] Call Trace: [ 1861.870168][T31371] [ 1861.870178][T31371] dump_stack_lvl+0xe8/0x150 [ 1861.870207][T31371] should_fail_ex+0x412/0x560 [ 1861.870237][T31371] _copy_from_user+0x2d/0xb0 [ 1861.870266][T31371] do_sock_getsockopt+0x200/0x7e0 [ 1861.870299][T31371] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1861.870340][T31371] ? __fget_files+0x3a0/0x420 [ 1861.870363][T31371] ? __fget_files+0x2a/0x420 [ 1861.870393][T31371] __x64_sys_getsockopt+0x1a4/0x240 [ 1861.870434][T31371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.870456][T31371] do_syscall_64+0x15f/0xf80 [ 1861.870483][T31371] ? trace_irq_disable+0x3b/0x140 [ 1861.870511][T31371] ? clear_bhb_loop+0x40/0x90 [ 1861.870534][T31371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.870553][T31371] RIP: 0033:0x7f34c8b9cdd9 [ 1861.870573][T31371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1861.870590][T31371] RSP: 002b:00007f34c99e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1861.870613][T31371] RAX: ffffffffffffffda RBX: 00007f34c8e15fa0 RCX: 00007f34c8b9cdd9 [ 1861.870627][T31371] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 1861.870639][T31371] RBP: 00007f34c99e5090 R08: 0000200000000080 R09: 0000000000000000 [ 1861.870652][T31371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.870664][T31371] R13: 00007f34c8e16038 R14: 00007f34c8e15fa0 R15: 00007f34c8f3fa48 [ 1861.870709][T31371] [ 1863.067618][T26195] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1863.234821][T26195] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 1863.247585][T26195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1863.260054][T26195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1863.270767][T26195] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 1863.284067][T26195] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 1863.293503][T26195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.327038][T26195] usb 4-1: config 0 descriptor?? [ 1863.540255][T31382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1863.555169][T31382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1864.009348][T26195] usbhid 4-1:0.0: can't add hid device: -71 [ 1864.035387][T26195] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1864.047897][T26195] usb 4-1: USB disconnect, device number 97 [ 1865.355461][T26195] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1865.604093][T26195] usb 4-1: Using ep0 maxpacket: 32 [ 1865.613978][T26195] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.625028][T26195] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1865.638703][T26195] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 1865.648330][T26195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.658582][T26195] usb 4-1: Product: syz [ 1865.662859][T26195] usb 4-1: Manufacturer: syz [ 1865.677263][T26195] usb 4-1: SerialNumber: syz [ 1866.403367][T31349] netlink: 64 bytes leftover after parsing attributes in process `syz.6.7650'. [ 1866.575461][T26195] usb 4-1: interface 1 not found [ 1866.674619][T26195] usb 4-1: USB disconnect, device number 98 [ 1866.706008][T31402] FAULT_INJECTION: forcing a failure. [ 1866.706008][T31402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1866.755680][T31402] CPU: 1 UID: 0 PID: 31402 Comm: syz.5.7669 Not tainted syzkaller #0 PREEMPT(full) [ 1866.755715][T31402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1866.755729][T31402] Call Trace: [ 1866.755745][T31402] [ 1866.755756][T31402] dump_stack_lvl+0xe8/0x150 [ 1866.755789][T31402] should_fail_ex+0x412/0x560 [ 1866.755826][T31402] _copy_from_user+0x2d/0xb0 [ 1866.755858][T31402] ___sys_sendmsg+0x1c6/0x360 [ 1866.755890][T31402] ? __lock_acquire+0x6b5/0x2cf0 [ 1866.755919][T31402] ? __pfx____sys_sendmsg+0x10/0x10 [ 1866.755986][T31402] ? __fget_files+0x2a/0x420 [ 1866.756012][T31402] ? __fget_files+0x3a0/0x420 [ 1866.756050][T31402] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1866.756083][T31402] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1866.756124][T31402] ? __pfx_ksys_write+0x10/0x10 [ 1866.756164][T31402] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.756188][T31402] do_syscall_64+0x15f/0xf80 [ 1866.756220][T31402] ? trace_irq_disable+0x3b/0x140 [ 1866.756252][T31402] ? clear_bhb_loop+0x40/0x90 [ 1866.756280][T31402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1866.756303][T31402] RIP: 0033:0x7faccef9cdd9 [ 1866.756324][T31402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.756344][T31402] RSP: 002b:00007faccff1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1866.756369][T31402] RAX: ffffffffffffffda RBX: 00007faccf215fa0 RCX: 00007faccef9cdd9 [ 1866.756386][T31402] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1866.756400][T31402] RBP: 00007faccff1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1866.756414][T31402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1866.756428][T31402] R13: 00007faccf216038 R14: 00007faccf215fa0 R15: 00007faccf33fa48 [ 1866.756462][T31402] [ 1867.014703][T31408] FAULT_INJECTION: forcing a failure. [ 1867.014703][T31408] name failslab, interval 1, probability 0, space 0, times 0 [ 1867.033189][T31409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7672'. [ 1867.083429][T31408] CPU: 0 UID: 0 PID: 31408 Comm: syz.3.7671 Not tainted syzkaller #0 PREEMPT(full) [ 1867.083463][T31408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1867.083477][T31408] Call Trace: [ 1867.083487][T31408] [ 1867.083499][T31408] dump_stack_lvl+0xe8/0x150 [ 1867.083542][T31408] should_fail_ex+0x412/0x560 [ 1867.083576][T31408] should_failslab+0xa8/0x100 [ 1867.083611][T31408] __kmalloc_noprof+0xe8/0x760 [ 1867.083641][T31408] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1867.083687][T31408] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1867.083719][T31408] ? tomoyo_domain+0xd7/0x130 [ 1867.083756][T31408] ? tomoyo_path_number_perm+0x219/0x630 [ 1867.083782][T31408] tomoyo_path_number_perm+0x246/0x630 [ 1867.083812][T31408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1867.083837][T31408] ? __lock_acquire+0x6b5/0x2cf0 [ 1867.083879][T31408] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1867.083938][T31408] ? __fget_files+0x2a/0x420 [ 1867.083969][T31408] ? __fget_files+0x2a/0x420 [ 1867.083994][T31408] ? __fget_files+0x3a0/0x420 [ 1867.084019][T31408] ? __fget_files+0x2a/0x420 [ 1867.084048][T31408] security_file_ioctl+0xc3/0x2a0 [ 1867.084075][T31408] __se_sys_ioctl+0x47/0x170 [ 1867.084106][T31408] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.084131][T31408] do_syscall_64+0x15f/0xf80 [ 1867.084157][T31408] ? trace_irq_disable+0x3b/0x140 [ 1867.084184][T31408] ? clear_bhb_loop+0x40/0x90 [ 1867.084210][T31408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.084232][T31408] RIP: 0033:0x7fc5b7d9cdd9 [ 1867.084253][T31408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.084273][T31408] RSP: 002b:00007fc5b8bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1867.084297][T31408] RAX: ffffffffffffffda RBX: 00007fc5b8015fa0 RCX: 00007fc5b7d9cdd9 [ 1867.084314][T31408] RDX: 0000000000000000 RSI: 000000000000541b RDI: 0000000000000003 [ 1867.084328][T31408] RBP: 00007fc5b8bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1867.084343][T31408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1867.084357][T31408] R13: 00007fc5b8016038 R14: 00007fc5b8015fa0 R15: 00007fc5b813fa48 [ 1867.084389][T31408] [ 1867.086570][T31408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1867.790321][T18801] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1867.980936][T18801] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1867.984954][T31427] syzkaller0: entered promiscuous mode [ 1868.007531][T18801] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.011340][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1868.053824][T31427] syzkaller0: entered allmulticast mode [ 1868.064523][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1868.076756][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1868.086723][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1868.101657][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1868.141173][T18801] usb 7-1: config 220 has no interface number 2 [ 1868.191364][T18801] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1868.214383][T18801] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1868.222295][T18801] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1868.230664][T18801] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1868.294249][T18801] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1868.329174][T18801] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.358498][T18801] usb 7-1: Product: syz [ 1868.372753][T18801] usb 7-1: Manufacturer: syz [ 1868.394049][T18801] usb 7-1: SerialNumber: syz [ 1868.812190][T18801] usb 7-1: selecting invalid altsetting 0 [ 1868.875347][T18801] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1868.888008][T18801] uvcvideo 7-1:220.0: No valid video chain found. [ 1868.911003][T18801] usb 7-1: selecting invalid altsetting 0 [ 1868.920283][T18801] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1868.935796][T18801] usb 7-1: USB disconnect, device number 49 [ 1869.783463][T31453] FAULT_INJECTION: forcing a failure. [ 1869.783463][T31453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1869.836901][T31453] CPU: 1 UID: 0 PID: 31453 Comm: syz.2.7686 Not tainted syzkaller #0 PREEMPT(full) [ 1869.836937][T31453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1869.836951][T31453] Call Trace: [ 1869.836962][T31453] [ 1869.836972][T31453] dump_stack_lvl+0xe8/0x150 [ 1869.837006][T31453] should_fail_ex+0x412/0x560 [ 1869.837040][T31453] copy_fpstate_to_sigframe+0xb1b/0xd60 [ 1869.837077][T31453] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 1869.837115][T31453] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1869.837155][T31453] ? ktime_get+0x1f5/0x220 [ 1869.837188][T31453] ? lapic_next_event+0x11/0x20 [ 1869.837210][T31453] ? clockevents_program_event+0x491/0x630 [ 1869.837235][T31453] ? do_raw_spin_unlock+0xf5/0x210 [ 1869.837265][T31453] ? __pfx_clockevents_program_event+0x10/0x10 [ 1869.837298][T31453] ? fpu__alloc_mathframe+0xac/0x130 [ 1869.837333][T31453] get_sigframe+0x5f7/0x820 [ 1869.837372][T31453] ? __pfx_get_sigframe+0x10/0x10 [ 1869.837408][T31453] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 1869.837445][T31453] x64_setup_rt_frame+0x160/0xcb0 [ 1869.837480][T31453] ? _raw_spin_unlock_irq+0x23/0x50 [ 1869.837507][T31453] ? lockdep_hardirqs_on+0x7a/0x110 [ 1869.837535][T31453] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1869.837558][T31453] ? get_signal+0x114f/0x1330 [ 1869.837585][T31453] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1869.837625][T31453] arch_do_signal_or_restart+0x424/0x830 [ 1869.837658][T31453] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1869.837694][T31453] ? ksys_write+0x242/0x270 [ 1869.837729][T31453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.837752][T31453] exit_to_user_mode_loop+0x86/0x480 [ 1869.837773][T31453] ? rcu_is_watching+0x15/0xb0 [ 1869.837801][T31453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.837825][T31453] do_syscall_64+0x33e/0xf80 [ 1869.837857][T31453] ? clear_bhb_loop+0x40/0x90 [ 1869.837884][T31453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.837906][T31453] RIP: 0033:0x7faaca35d60e [ 1869.837928][T31453] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1869.837949][T31453] RSP: 002b:00007faacb2a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1869.837974][T31453] RAX: 0000000000000001 RBX: 00007faacb2aa6c0 RCX: 00007faaca35d60e [ 1869.837989][T31453] RDX: 0000000000000001 RSI: 00007faacb2aa090 RDI: 0000000000000004 [ 1869.838003][T31453] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1869.838017][T31453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1869.838031][T31453] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1869.838065][T31453] [ 1870.202203][T24054] Bluetooth: hci0: command tx timeout [ 1870.382619][T31450] syzkaller0: entered promiscuous mode [ 1870.390939][T31450] syzkaller0: entered allmulticast mode [ 1870.616249][T31463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7689'. [ 1870.636613][T31465] FAULT_INJECTION: forcing a failure. [ 1870.636613][T31465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1870.661691][T31465] CPU: 1 UID: 0 PID: 31465 Comm: syz.2.7690 Not tainted syzkaller #0 PREEMPT(full) [ 1870.661725][T31465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1870.661740][T31465] Call Trace: [ 1870.661750][T31465] [ 1870.661760][T31465] dump_stack_lvl+0xe8/0x150 [ 1870.661803][T31465] should_fail_ex+0x412/0x560 [ 1870.661838][T31465] _copy_from_user+0x2d/0xb0 [ 1870.661871][T31465] copy_from_sockptr+0x5e/0x90 [ 1870.662027][T31465] do_ip_setsockopt+0x1ee1/0x2ea0 [ 1870.662063][T31465] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 1870.662088][T31465] ? aa_sk_perm+0x6d5/0x900 [ 1870.662117][T31465] ? __fget_files+0x2a/0x420 [ 1870.662150][T31465] ? __pfx_aa_sk_perm+0x10/0x10 [ 1870.662180][T31465] ? __fget_files+0x2a/0x420 [ 1870.662203][T31465] ? aa_sock_opt_perm+0xff/0x1a0 [ 1870.662234][T31465] ip_setsockopt+0x66/0x110 [ 1870.662258][T31465] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1870.662287][T31465] do_sock_setsockopt+0x17c/0x1b0 [ 1870.662321][T31465] __x64_sys_setsockopt+0x13d/0x1b0 [ 1870.662353][T31465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.662376][T31465] do_syscall_64+0x15f/0xf80 [ 1870.662406][T31465] ? trace_irq_disable+0x3b/0x140 [ 1870.662438][T31465] ? clear_bhb_loop+0x40/0x90 [ 1870.662465][T31465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1870.662487][T31465] RIP: 0033:0x7faaca39cdd9 [ 1870.662508][T31465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1870.662527][T31465] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1870.662551][T31465] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1870.662567][T31465] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 1870.662581][T31465] RBP: 00007faacb2aa090 R08: 0000000000000010 R09: 0000000000000000 [ 1870.662604][T31465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1870.662617][T31465] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1870.662653][T31465] [ 1870.930544][T31433] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.938122][T31433] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.952047][T31433] bridge_slave_0: entered allmulticast mode [ 1870.971944][T31433] bridge_slave_0: entered promiscuous mode [ 1871.019812][T31433] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.067689][T31433] bridge0: port 2(bridge_slave_1) entered disabled state [ 1871.087072][T31470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7692'. [ 1871.109455][T31433] bridge_slave_1: entered allmulticast mode [ 1871.128395][T31433] bridge_slave_1: entered promiscuous mode [ 1871.320279][T31433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1871.351336][T31433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1871.404709][T31433] team0: Port device team_slave_0 added [ 1871.415195][T31433] team0: Port device team_slave_1 added [ 1871.618261][T31433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1871.642446][T31433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.709091][T31433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.780289][T31433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.807444][T31433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.855561][T31493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7703'. [ 1871.876519][T31493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7703'. [ 1871.880693][T31433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1872.015197][T31489] syzkaller0: entered promiscuous mode [ 1872.025347][T31489] syzkaller0: entered allmulticast mode [ 1872.278002][T24054] Bluetooth: hci0: command tx timeout [ 1872.385042][T31508] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1873.419154][T26195] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1873.587533][T26195] usb 4-1: Using ep0 maxpacket: 16 [ 1873.599413][T26195] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1873.609016][T26195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1873.617175][T26195] usb 4-1: Product: syz [ 1873.625872][T26195] usb 4-1: Manufacturer: syz [ 1873.631458][T26195] usb 4-1: SerialNumber: syz [ 1873.651347][T26195] usb 4-1: config 0 descriptor?? [ 1873.677016][T26195] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1873.890533][T31526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1873.904336][T31526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1874.357908][T24054] Bluetooth: hci0: command tx timeout [ 1874.861269][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1874.870542][T31526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7712'. [ 1875.115901][T31527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1875.125406][T31527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1875.229231][T26195] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 1876.440204][T24054] Bluetooth: hci0: command tx timeout [ 1877.095287][T31433] hsr_slave_0: entered promiscuous mode [ 1877.102020][T31433] hsr_slave_1: entered promiscuous mode [ 1877.110720][T31433] debugfs: 'hsr0' already exists in 'hsr' [ 1877.116601][T31433] Cannot create hsr debugfs directory [ 1877.122816][T31510] tipc: Started in network mode [ 1877.132009][T31510] tipc: Node identity 96028f4a299d, cluster identity 4711 [ 1877.140582][T31510] tipc: Enabled bearer , priority 0 [ 1877.151714][T31513] syzkaller0: entered promiscuous mode [ 1877.171427][T31513] syzkaller0: entered allmulticast mode [ 1877.205455][T31521] tipc: Resetting bearer [ 1877.242632][T31505] tipc: Resetting bearer [ 1877.296647][T18809] usb 4-1: USB disconnect, device number 99 [ 1877.329488][T31505] tipc: Disabling bearer [ 1877.652393][T24054] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1877.667070][T31539] syzkaller0: entered promiscuous mode [ 1877.703037][T31539] syzkaller0: entered allmulticast mode [ 1877.740381][T24054] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 1878.187111][T31555] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1879.707568][T18801] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1879.878767][T18801] usb 3-1: Using ep0 maxpacket: 16 [ 1879.886759][T18801] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1879.898526][T18801] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1879.905354][T18801] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1879.914972][T18801] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.927781][T18801] usb 3-1: config 0 descriptor?? [ 1880.392083][T18801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1880.406252][T18801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1880.419060][T18801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1880.426742][T18801] nzxt-smart2 0003:1E71:2009.000C: unknown main item tag 0x0 [ 1880.476422][T18801] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1880.622125][T26195] usb 3-1: USB disconnect, device number 93 [ 1883.199073][T18809] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1883.400616][T18809] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1883.430413][T18809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.479911][T18809] usb 4-1: config 0 descriptor?? [ 1883.510443][T18809] cp210x 4-1:0.0: cp210x converter detected [ 1883.618981][T31592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7733'. [ 1883.825033][T18809] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1883.856283][T18809] cp210x 4-1:0.0: querying part number failed [ 1883.856770][T31596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1883.882321][T31596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1883.905148][T18809] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1883.957002][T18809] usb 4-1: USB disconnect, device number 100 [ 1884.053832][T18809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1884.089935][T18809] cp210x 4-1:0.0: device disconnected [ 1884.285657][T31600] syzkaller0: entered promiscuous mode [ 1884.291868][T31600] syzkaller0: entered allmulticast mode [ 1884.370176][T31433] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1884.396618][T31433] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1884.413420][T31433] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1884.434882][T31433] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1884.569260][T31433] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1884.630929][T31433] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1884.655325][T31433] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1884.676859][T31433] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1884.898233][T31433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1884.917687][T18804] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1884.972457][T31433] 8021q: adding VLAN 0 to HW filter on device team0 [ 1885.001410][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1885.008726][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1885.071237][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 1885.078622][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1885.109155][T18804] usb 3-1: Using ep0 maxpacket: 32 [ 1885.126927][T18804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.140293][T18804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1885.160877][T18804] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1885.201412][T18804] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1885.220825][T18804] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.251730][T18804] usb 3-1: config 0 descriptor?? [ 1885.428227][T26195] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1885.445616][T31433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1885.487003][T31611] random: crng reseeded on system resumption [ 1885.547639][T26199] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1885.558155][T31433] veth0_vlan: entered promiscuous mode [ 1885.576568][T31635] syzkaller0: entered promiscuous mode [ 1885.582505][T31635] syzkaller0: entered allmulticast mode [ 1885.591224][T26195] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1885.600899][T26195] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1885.606556][T31433] veth1_vlan: entered promiscuous mode [ 1885.618778][T26195] usb 7-1: config 220 has no interface number 2 [ 1885.627132][T26195] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1885.642657][T26195] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1885.654746][T26195] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1885.662368][T26195] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1885.693743][T26195] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1885.703901][T26195] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1885.716119][T26195] usb 7-1: Product: syz [ 1885.721176][T26195] usb 7-1: Manufacturer: syz [ 1885.725853][T26195] usb 7-1: SerialNumber: syz [ 1885.727477][T26199] usb 6-1: Using ep0 maxpacket: 8 [ 1885.775594][T26199] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1885.795934][T26199] usb 6-1: config 2 has an invalid interface number: 99 but max is 0 [ 1885.821663][T26199] usb 6-1: config 2 has no interface number 0 [ 1885.832898][T31433] veth0_macvtap: entered promiscuous mode [ 1885.834887][T18804] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000D/input/input39 [ 1885.861610][T26199] usb 6-1: config 2 interface 99 altsetting 7 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 1885.884827][T26199] usb 6-1: config 2 interface 99 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1885.894655][T31433] veth1_macvtap: entered promiscuous mode [ 1885.930486][T26199] usb 6-1: config 2 interface 99 altsetting 7 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1885.942311][T31433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1885.959273][T31637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7748'. [ 1885.966551][T26199] usb 6-1: config 2 interface 99 has no altsetting 0 [ 1886.001902][T26199] usb 6-1: New USB device found, idVendor=0000, idProduct=a300, bcdDevice= a.f3 [ 1886.012982][T31433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1886.033896][T26195] usb 7-1: selecting invalid altsetting 0 [ 1886.041186][T18804] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.000D/input/input40 [ 1886.056552][T26199] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.061812][T17425] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.084520][T26199] usb 6-1: Product: syz [ 1886.103140][T26199] usb 6-1: Manufacturer: syz [ 1886.137929][T26199] usb 6-1: SerialNumber: syz [ 1886.154662][T26195] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1886.175561][T26195] uvcvideo 7-1:220.0: No valid video chain found. [ 1886.190073][T17425] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.249421][T26195] usb 7-1: selecting invalid altsetting 0 [ 1886.256029][T17425] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.266294][T26195] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1886.289952][T17425] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1886.310633][T26195] usb 7-1: USB disconnect, device number 50 [ 1886.392829][T18804] kye 0003:0458:5011.000D: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 1886.844556][T26199] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.99/input/input41 [ 1886.916304][T17440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1886.941564][T26199] usb 6-1: USB disconnect, device number 56 [ 1886.941646][ C1] xpad 6-1:2.99: xpad_irq_in - usb_submit_urb failed with result -19 [ 1886.957218][T17440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.167907][T17425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1887.205008][T17425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1887.251170][T26188] usb 3-1: reset high-speed USB device number 94 using dummy_hcd [ 1887.437724][T26205] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 1887.645772][T26205] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1887.685887][T26205] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 1887.725889][T26205] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 1887.795330][T26205] usb 4-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 1887.829475][T26205] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1887.895459][T26205] usb 4-1: config 0 descriptor?? [ 1887.931489][T31658] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1888.400701][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.417129][T18804] usb 3-1: USB disconnect, device number 94 [ 1888.449948][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.472751][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.480597][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.497089][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.520371][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.528609][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.536220][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.568222][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.584067][T26205] logitech 0003:046D:C294.000E: unknown main item tag 0x0 [ 1888.600112][T31658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1888.670413][T26205] logitech 0003:046D:C294.000E: hidraw1: USB HID v0.01 Device [HID 046d:c294] on usb-dummy_hcd.3-1/input0 [ 1888.690739][T31658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1888.702673][T31682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1888.723385][T31682] batadv_slave_1: entered promiscuous mode [ 1888.729965][T26205] logitech 0003:046D:C294.000E: no inputs found [ 1888.856785][T26205] usb 4-1: USB disconnect, device number 101 [ 1888.936496][T31684] fido_id[31684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1889.117926][T31686] syzkaller0: entered promiscuous mode [ 1889.127683][T24054] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1889.138406][T31686] syzkaller0: entered allmulticast mode [ 1889.185512][ T30] audit: type=1326 audit(1778231861.925:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.243602][ T30] audit: type=1326 audit(1778231861.925:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.282492][ T30] audit: type=1326 audit(1778231861.955:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.350072][ T30] audit: type=1326 audit(1778231861.955:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.443698][ T30] audit: type=1326 audit(1778231861.955:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.484380][T26205] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1889.533742][ T30] audit: type=1326 audit(1778231861.955:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.536206][T31698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'. [ 1889.580704][T31694] bond5: entered promiscuous mode [ 1889.591590][T31699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'. [ 1889.607090][ T30] audit: type=1326 audit(1778231861.955:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.655541][ T30] audit: type=1326 audit(1778231861.955:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.697373][T26205] usb 3-1: Using ep0 maxpacket: 8 [ 1889.709825][T26205] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1889.722887][ T30] audit: type=1326 audit(1778231861.955:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaca39cdd9 code=0x7ffc0000 [ 1889.759473][T26205] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1889.779420][T26205] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1889.789843][ T30] audit: type=1326 audit(1778231861.955:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31689 comm="syz.2.7761" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faaca35d60e code=0x7ffc0000 [ 1889.818279][T26205] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1889.835675][T26205] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1889.880351][T26205] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1890.134219][T26205] usb 3-1: GET_CAPABILITIES returned 0 [ 1890.146493][T26205] usbtmc 3-1:16.0: can't read capabilities [ 1890.646407][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1890.672601][ T5639] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1890.675851][T26205] usb 3-1: USB disconnect, device number 95 [ 1890.687732][ T5639] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1890.698031][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1890.708010][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1891.622680][T31725] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1891.635478][T17424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.815086][T17424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.931166][T17424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1891.974115][T31720] bridge0: port 1(bridge_slave_0) entered blocking state [ 1891.982525][T31720] bridge0: port 1(bridge_slave_0) entered disabled state [ 1891.991355][T31720] bridge_slave_0: entered allmulticast mode [ 1891.999868][T31720] bridge_slave_0: entered promiscuous mode [ 1892.014526][T31720] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.023306][T31720] bridge0: port 2(bridge_slave_1) entered disabled state [ 1892.031172][T31720] bridge_slave_1: entered allmulticast mode [ 1892.042841][T31720] bridge_slave_1: entered promiscuous mode [ 1892.048975][T18800] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 1892.110044][T31743] netlink: zone id is out of range [ 1892.156096][T17424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1892.219776][T18800] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1892.231617][T18800] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1892.241937][T18800] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1892.249060][T18800] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1892.261310][T18800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.272550][T18800] usb 6-1: config 0 descriptor?? [ 1892.298453][T31720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1892.312204][T31720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1892.357186][T31720] team0: Port device team_slave_0 added [ 1892.367041][T31720] team0: Port device team_slave_1 added [ 1892.402555][T31720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1892.409955][T31720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.438058][T31720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1892.457634][T18804] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1892.467986][T31720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1892.486444][T31720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1892.521780][T31720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1892.597410][T18804] usb 3-1: device descriptor read/64, error -71 [ 1892.651131][T31720] hsr_slave_0: entered promiscuous mode [ 1892.659804][T31720] hsr_slave_1: entered promiscuous mode [ 1892.666321][T31720] debugfs: 'hsr0' already exists in 'hsr' [ 1892.676105][T31720] Cannot create hsr debugfs directory [ 1892.729233][T18800] hid-steam 0003:28DE:1102.000F: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 1892.818489][T18800] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' connected [ 1892.832571][T18800] input: Steam Controller as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:28DE:1102.000F/input/input42 [ 1892.844578][T24054] Bluetooth: hci4: command tx timeout [ 1892.861062][T18804] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1893.007897][T18804] usb 3-1: device descriptor read/64, error -71 [ 1893.055667][T18800] hid-steam 0003:28DE:1102.0010: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.5-1/input0 [ 1893.149131][T18804] usb usb3-port1: attempt power cycle [ 1893.517527][T18804] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1893.530479][T31757] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7782'. [ 1893.546734][T26205] usb 6-1: USB disconnect, device number 57 [ 1893.570955][T18804] usb 3-1: device descriptor read/8, error -71 [ 1893.620308][T31757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1893.837732][T18804] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1893.857044][T26205] hid-steam 0003:28DE:1102.000F: Steam Controller 'XXXXXXXXXX' disconnected [ 1893.872069][T17424] bridge_slave_1: left allmulticast mode [ 1893.886945][T17424] bridge_slave_1: left promiscuous mode [ 1893.904233][T17424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1893.916150][T18804] usb 3-1: device descriptor read/8, error -71 [ 1894.038637][T18804] usb usb3-port1: unable to enumerate USB device [ 1894.047215][T17424] bridge_slave_0: left allmulticast mode [ 1894.066611][T17424] bridge_slave_0: left promiscuous mode [ 1894.089572][T17424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1894.271766][T24054] Bluetooth: hci5: ISO packet for unknown connection handle 0 [ 1894.480596][T31779] netlink: 'syz.5.7784': attribute type 11 has an invalid length. [ 1894.496329][T31779] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7784'. [ 1894.544186][T17424] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 1894.615738][T31783] netlink: 104 bytes leftover after parsing attributes in process `syz.5.7784'. [ 1894.863249][T17424] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1894.928129][T24054] Bluetooth: hci4: command tx timeout [ 1895.049101][T17424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1895.193991][T17424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1895.241207][T17424] bond0 (unregistering): Released all slaves [ 1895.263961][T17424] bond1 (unregistering): Released all slaves [ 1895.301342][T17424] bond2 (unregistering): Released all slaves [ 1895.357052][T17424] bond3 (unregistering): Released all slaves [ 1895.375822][T17424] bond4 (unregistering): Released all slaves [ 1895.393872][T17424] bond5 (unregistering): Released all slaves [ 1895.648898][T31778] netlink: 'syz.5.7784': attribute type 49 has an invalid length. [ 1895.661311][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1895.672076][T17424] tipc: Left network mode [ 1896.140094][T24054] Bluetooth: hci5: unexpected event for opcode 0x1009 [ 1896.208347][T18804] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1896.412608][T18804] usb 4-1: Using ep0 maxpacket: 8 [ 1896.436668][T18804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1896.474181][T18804] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1896.499097][T18804] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 1896.526977][T18804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1896.551014][T18804] usb 4-1: Product: syz [ 1896.556423][T18804] usb 4-1: Manufacturer: syz [ 1896.561688][T18804] usb 4-1: SerialNumber: syz [ 1896.610102][T18804] usb 4-1: config 0 descriptor?? [ 1896.649888][T18804] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 1896.848700][T18804] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 1896.865481][T18804] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 1896.885287][T18804] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1896.985265][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 1896.985289][ T30] audit: type=1326 audit(1778231869.725:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31827 comm="syz.5.7793" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faccef9cdd9 code=0x0 [ 1897.020917][T24054] Bluetooth: hci4: command tx timeout [ 1897.068022][T31798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1897.095774][T31798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1897.123010][T18804] usb 4-1: USB disconnect, device number 102 [ 1897.383650][T17424] hsr_slave_0: left promiscuous mode [ 1897.407684][T17424] hsr_slave_1: left promiscuous mode [ 1897.420633][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1897.443912][T17424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1897.462032][T17424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1897.470154][T17424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1897.486026][T17424] veth1_macvtap: left promiscuous mode [ 1897.491907][T17424] veth0_macvtap: left promiscuous mode [ 1897.498146][T17424] veth1_vlan: left promiscuous mode [ 1897.503832][T17424] veth0_vlan: left promiscuous mode [ 1897.721986][T18801] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1897.867821][T18801] usb 6-1: device descriptor read/64, error -71 [ 1897.923101][T17424] team0 (unregistering): Port device team_slave_1 removed [ 1897.942375][T17424] team0 (unregistering): Port device team_slave_0 removed [ 1898.138249][T18801] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1898.277617][T18801] usb 6-1: device descriptor read/64, error -71 [ 1898.360715][T31855] netlink: 'syz.2.7799': attribute type 1 has an invalid length. [ 1898.411151][T18801] usb usb6-port1: attempt power cycle [ 1898.434435][T31859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7799'. [ 1898.450898][T31855] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1898.626521][T31720] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1898.703686][T31720] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1898.741495][T31720] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1898.767432][T18801] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1898.817925][T18801] usb 6-1: device descriptor read/8, error -71 [ 1899.077434][T24054] Bluetooth: hci4: command tx timeout [ 1899.082991][T18801] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1899.095798][T31720] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1899.139690][T18801] usb 6-1: device descriptor read/8, error -71 [ 1899.158211][T31720] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1899.188631][T31720] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1899.261633][T31720] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1899.299139][T18801] usb usb6-port1: unable to enumerate USB device [ 1899.311885][T31720] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1899.481697][T17424] IPVS: stop unused estimator thread 0... [ 1899.770178][T31720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1899.835424][T31720] 8021q: adding VLAN 0 to HW filter on device team0 [ 1899.888944][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.896308][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1899.948218][T31896] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7802'. [ 1899.971453][T31896] FAULT_INJECTION: forcing a failure. [ 1899.971453][T31896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1899.989790][T12198] bridge0: port 2(bridge_slave_1) entered blocking state [ 1899.997072][T12198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1900.007671][T31896] CPU: 0 UID: 0 PID: 31896 Comm: syz.2.7802 Tainted: G L syzkaller #0 PREEMPT(full) [ 1900.007709][T31896] Tainted: [L]=SOFTLOCKUP [ 1900.007718][T31896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1900.007732][T31896] Call Trace: [ 1900.007742][T31896] [ 1900.007752][T31896] dump_stack_lvl+0xe8/0x150 [ 1900.007785][T31896] should_fail_ex+0x412/0x560 [ 1900.007822][T31896] _copy_from_user+0x2d/0xb0 [ 1900.007854][T31896] ___sys_recvmsg+0x175/0x590 [ 1900.007885][T31896] ? get_pid_task+0x20/0x1f0 [ 1900.007913][T31896] ? get_pid_task+0x20/0x1f0 [ 1900.007944][T31896] ? __pfx____sys_recvmsg+0x10/0x10 [ 1900.007980][T31896] ? __fget_files+0x2a/0x420 [ 1900.008025][T31896] ? __fget_files+0x3a0/0x420 [ 1900.008062][T31896] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1900.008096][T31896] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1900.008147][T31896] ? __pfx_ksys_write+0x10/0x10 [ 1900.008187][T31896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.008212][T31896] do_syscall_64+0x15f/0xf80 [ 1900.008243][T31896] ? trace_irq_disable+0x3b/0x140 [ 1900.008276][T31896] ? clear_bhb_loop+0x40/0x90 [ 1900.008303][T31896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.008326][T31896] RIP: 0033:0x7faaca39cdd9 [ 1900.008349][T31896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1900.008368][T31896] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1900.008393][T31896] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1900.008410][T31896] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1900.008425][T31896] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1900.008439][T31896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1900.008454][T31896] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1900.008488][T31896] [ 1900.208006][T31720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1900.572504][T31720] veth0_vlan: entered promiscuous mode [ 1900.630907][T31720] veth1_vlan: entered promiscuous mode [ 1900.778490][T31720] veth0_macvtap: entered promiscuous mode [ 1900.804572][T31720] veth1_macvtap: entered promiscuous mode [ 1900.895876][T31720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1900.943403][T31720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1901.011420][T17425] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.037378][T17425] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.076752][T17425] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.101607][T17425] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1901.593245][T17425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.642684][T17425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.845915][T31921] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1901.857471][T12198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1901.883973][T31931] syzkaller0: entered promiscuous mode [ 1901.906648][T12198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1901.922796][T31931] syzkaller0: entered allmulticast mode [ 1902.799105][T31944] FAULT_INJECTION: forcing a failure. [ 1902.799105][T31944] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1902.858690][T31944] CPU: 1 UID: 0 PID: 31944 Comm: syz.2.7813 Tainted: G L syzkaller #0 PREEMPT(full) [ 1902.858729][T31944] Tainted: [L]=SOFTLOCKUP [ 1902.858737][T31944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1902.858751][T31944] Call Trace: [ 1902.858761][T31944] [ 1902.858772][T31944] dump_stack_lvl+0xe8/0x150 [ 1902.858805][T31944] should_fail_ex+0x412/0x560 [ 1902.858840][T31944] _copy_from_user+0x2d/0xb0 [ 1902.858873][T31944] ___sys_sendmsg+0x1c6/0x360 [ 1902.858904][T31944] ? __lock_acquire+0x6b5/0x2cf0 [ 1902.858932][T31944] ? __pfx____sys_sendmsg+0x10/0x10 [ 1902.858996][T31944] ? __fget_files+0x2a/0x420 [ 1902.859022][T31944] ? __fget_files+0x3a0/0x420 [ 1902.859057][T31944] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1902.859090][T31944] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1902.859130][T31944] ? __pfx_ksys_write+0x10/0x10 [ 1902.859168][T31944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.859193][T31944] do_syscall_64+0x15f/0xf80 [ 1902.859223][T31944] ? trace_irq_disable+0x3b/0x140 [ 1902.859254][T31944] ? clear_bhb_loop+0x40/0x90 [ 1902.859281][T31944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1902.859303][T31944] RIP: 0033:0x7faaca39cdd9 [ 1902.859325][T31944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1902.859345][T31944] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1902.859369][T31944] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1902.859386][T31944] RDX: 0000000000000004 RSI: 0000200000000000 RDI: 0000000000000003 [ 1902.859400][T31944] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1902.859423][T31944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1902.859437][T31944] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1902.859471][T31944] [ 1903.071091][T31946] FAULT_INJECTION: forcing a failure. [ 1903.071091][T31946] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.084442][T31946] CPU: 0 UID: 0 PID: 31946 Comm: syz.5.7814 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.084479][T31946] Tainted: [L]=SOFTLOCKUP [ 1903.084488][T31946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1903.084501][T31946] Call Trace: [ 1903.084510][T31946] [ 1903.084520][T31946] dump_stack_lvl+0xe8/0x150 [ 1903.084553][T31946] should_fail_ex+0x412/0x560 [ 1903.084599][T31946] should_failslab+0xa8/0x100 [ 1903.084633][T31946] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1903.084662][T31946] ? __alloc_skb+0x186/0x7d0 [ 1903.084689][T31946] ? __alloc_skb+0x1d0/0x7d0 [ 1903.084713][T31946] ? __local_bh_enable_ip+0xd0/0x130 [ 1903.084742][T31946] __alloc_skb+0x1d0/0x7d0 [ 1903.084774][T31946] netlink_sendmsg+0x5d4/0xb40 [ 1903.084815][T31946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.084847][T31946] ? __fget_files+0x2a/0x420 [ 1903.084873][T31946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1903.084904][T31946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1903.084933][T31946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.084963][T31946] __sys_sendto+0x672/0x710 [ 1903.084994][T31946] ? __pfx___sys_sendto+0x10/0x10 [ 1903.085019][T31946] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1903.085064][T31946] ? __fget_files+0x3a0/0x420 [ 1903.085101][T31946] ? ksys_write+0x242/0x270 [ 1903.085135][T31946] ? __pfx_ksys_write+0x10/0x10 [ 1903.085179][T31946] __x64_sys_sendto+0xde/0x100 [ 1903.085208][T31946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.085234][T31946] do_syscall_64+0x15f/0xf80 [ 1903.085262][T31946] ? trace_irq_disable+0x3b/0x140 [ 1903.085294][T31946] ? clear_bhb_loop+0x40/0x90 [ 1903.085322][T31946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.085351][T31946] RIP: 0033:0x7faccef9cdd9 [ 1903.085374][T31946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.085394][T31946] RSP: 002b:00007faccff1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1903.085418][T31946] RAX: ffffffffffffffda RBX: 00007faccf215fa0 RCX: 00007faccef9cdd9 [ 1903.085435][T31946] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 1903.085450][T31946] RBP: 00007faccff1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.085464][T31946] R10: 0000000000000810 R11: 0000000000000246 R12: 0000000000000001 [ 1903.085479][T31946] R13: 00007faccf216038 R14: 00007faccf215fa0 R15: 00007faccf33fa48 [ 1903.085512][T31946] [ 1903.350344][T31948] FAULT_INJECTION: forcing a failure. [ 1903.350344][T31948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1903.371929][T31948] CPU: 1 UID: 0 PID: 31948 Comm: syz.2.7815 Tainted: G L syzkaller #0 PREEMPT(full) [ 1903.371969][T31948] Tainted: [L]=SOFTLOCKUP [ 1903.371978][T31948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1903.371991][T31948] Call Trace: [ 1903.372002][T31948] [ 1903.372012][T31948] dump_stack_lvl+0xe8/0x150 [ 1903.372046][T31948] should_fail_ex+0x412/0x560 [ 1903.372081][T31948] prepare_alloc_pages+0x22a/0x650 [ 1903.372122][T31948] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1903.372160][T31948] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1903.372204][T31948] ? __pfx_policy_nodemask+0x10/0x10 [ 1903.372236][T31948] ? kstrtoull+0x12f/0x1d0 [ 1903.372331][T31948] ? __pfx_aa_file_perm+0x10/0x10 [ 1903.372366][T31948] alloc_pages_mpol+0x235/0x490 [ 1903.372405][T31948] alloc_pages_noprof+0xac/0x2a0 [ 1903.372437][T31948] get_free_pages_noprof+0xf/0x80 [ 1903.372470][T31948] vcs_read+0x5b/0xdb0 [ 1903.372567][T31948] ? __lock_acquire+0x6b5/0x2cf0 [ 1903.372597][T31948] ? apparmor_file_permission+0x1f4/0x300 [ 1903.372625][T31948] ? bpf_lsm_file_permission+0x9/0x20 [ 1903.372655][T31948] ? security_file_permission+0x75/0x260 [ 1903.372682][T31948] ? rw_verify_area+0x2a6/0x4d0 [ 1903.372712][T31948] ? __pfx_vcs_read+0x10/0x10 [ 1903.372743][T31948] vfs_read+0x20c/0xa70 [ 1903.372792][T31948] ? __pfx_vfs_read+0x10/0x10 [ 1903.372824][T31948] ? __fget_files+0x2a/0x420 [ 1903.372854][T31948] ? __fget_files+0x2a/0x420 [ 1903.372878][T31948] ? __fget_files+0x3a0/0x420 [ 1903.372904][T31948] ? __fget_files+0x2a/0x420 [ 1903.372939][T31948] ksys_read+0x150/0x270 [ 1903.372972][T31948] ? __pfx_ksys_read+0x10/0x10 [ 1903.373010][T31948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.373036][T31948] do_syscall_64+0x15f/0xf80 [ 1903.373067][T31948] ? trace_irq_disable+0x3b/0x140 [ 1903.373099][T31948] ? clear_bhb_loop+0x40/0x90 [ 1903.373126][T31948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.373149][T31948] RIP: 0033:0x7faaca39cdd9 [ 1903.373171][T31948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1903.373191][T31948] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1903.373216][T31948] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1903.373233][T31948] RDX: 0000000000000729 RSI: 0000200000002a00 RDI: 0000000000000003 [ 1903.373248][T31948] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.373263][T31948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1903.373277][T31948] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1903.373312][T31948] [ 1904.013829][T31962] syzkaller0: entered promiscuous mode [ 1904.025032][T31962] syzkaller0: entered allmulticast mode [ 1904.190519][T24054] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 1904.414729][T31972] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7824'. [ 1904.457682][T31972] bond1: option mode: unable to set because the bond device has slaves [ 1904.720512][T18804] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1904.750531][T31984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1904.768303][T31984] batadv_slave_1: entered promiscuous mode [ 1904.911895][T18804] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x19, changing to 0x9 [ 1904.984698][T18804] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1905.032339][T18804] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1905.051626][T18804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.078699][T18804] usb 7-1: Product: syz [ 1905.096155][T18804] usb 7-1: Manufacturer: syz [ 1905.111215][T18804] usb 7-1: SerialNumber: syz [ 1905.127051][T18804] usb 7-1: config 0 descriptor?? [ 1905.323411][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1905.351804][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1905.364868][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1905.379761][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1905.402707][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1905.646849][T18804] usb 7-1: USB disconnect, device number 51 [ 1906.115130][T12198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.127901][T12198] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.227764][T18800] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1906.264805][T12198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.284033][T12198] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.350339][T32008] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1906.387830][T18800] usb 4-1: Using ep0 maxpacket: 16 [ 1906.397912][T18800] usb 4-1: config 0 has no interfaces? [ 1906.408279][T18800] usb 4-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 1906.419341][T18800] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.428056][T18800] usb 4-1: Product: syz [ 1906.434440][T18800] usb 4-1: Manufacturer: syz [ 1906.441926][T18800] usb 4-1: SerialNumber: syz [ 1906.451581][T18800] usb 4-1: config 0 descriptor?? [ 1906.506400][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7837'. [ 1906.554307][T12198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.565279][T12198] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.607798][T32014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1906.745108][T12198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1906.759282][T12198] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1906.913147][T31995] bridge0: port 1(bridge_slave_0) entered blocking state [ 1906.922419][T31995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1906.932500][T31995] bridge_slave_0: entered allmulticast mode [ 1906.943939][T31995] bridge_slave_0: entered promiscuous mode [ 1906.959181][T31995] bridge0: port 2(bridge_slave_1) entered blocking state [ 1906.966886][T31995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1906.976905][T31995] bridge_slave_1: entered allmulticast mode [ 1906.997059][T31995] bridge_slave_1: entered promiscuous mode [ 1907.071639][T31995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1907.096519][T31995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1907.284414][T32020] syz_tun: entered promiscuous mode [ 1907.296461][T31995] team0: Port device team_slave_0 added [ 1907.331745][T32020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1907.364254][T31995] team0: Port device team_slave_1 added [ 1907.487528][T24054] Bluetooth: hci1: command tx timeout [ 1907.621427][T12198] vlan1: left allmulticast mode [ 1907.626795][T12198] geneve0: left allmulticast mode [ 1907.634544][T12198] vlan1: left promiscuous mode [ 1907.639892][T12198] geneve0: left promiscuous mode [ 1907.645420][T12198] bridge0: port 1(vlan1) entered disabled state [ 1907.656391][T12198] bridge_slave_1: left allmulticast mode [ 1907.662536][T12198] bridge_slave_1: left promiscuous mode [ 1907.669795][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.801957][T12198] bond1 (unregistering): (slave ip6erspan0): Releasing active interface [ 1907.925774][T12198] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1907.975056][T12198] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1908.011549][T12198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1908.022888][T12198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1908.033202][T12198] bond0 (unregistering): Released all slaves [ 1908.045292][T12198] bond1 (unregistering): Released all slaves [ 1908.067002][T12198] bond2 (unregistering): Released all slaves [ 1908.083024][T12198] bond3 (unregistering): Released all slaves [ 1908.101688][T12198] bond4 (unregistering): Released all slaves [ 1908.124689][T12198] bond5 (unregistering): Released all slaves [ 1908.145550][T12198] bond6 (unregistering): Released all slaves [ 1908.163896][T12198] bond7 (unregistering): Released all slaves [ 1908.182696][T31995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1908.193162][T31995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.236175][T31995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1908.274740][T31995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1908.285379][T31995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1908.315192][T31995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1908.364960][T32028] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1908.375382][T32028] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1908.575363][T12198] tipc: Disabling bearer [ 1908.587771][T12198] tipc: Left network mode [ 1908.689575][T32034] FAULT_INJECTION: forcing a failure. [ 1908.689575][T32034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1908.735917][T32034] CPU: 0 UID: 0 PID: 32034 Comm: syz.6.7842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1908.735945][T32034] Tainted: [L]=SOFTLOCKUP [ 1908.735951][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1908.735960][T32034] Call Trace: [ 1908.735967][T32034] [ 1908.735974][T32034] dump_stack_lvl+0xe8/0x150 [ 1908.735995][T32034] should_fail_ex+0x412/0x560 [ 1908.736017][T32034] copy_fpstate_to_sigframe+0xb1b/0xd60 [ 1908.736041][T32034] ? copy_fpstate_to_sigframe+0x196/0xd60 [ 1908.736064][T32034] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 1908.736088][T32034] ? ktime_get+0x1f5/0x220 [ 1908.736109][T32034] ? lapic_next_event+0x11/0x20 [ 1908.736124][T32034] ? clockevents_program_event+0x491/0x630 [ 1908.736147][T32034] ? do_raw_spin_unlock+0xf5/0x210 [ 1908.736168][T32034] ? __pfx_clockevents_program_event+0x10/0x10 [ 1908.736186][T32034] ? fpu__alloc_mathframe+0xac/0x130 [ 1908.736207][T32034] get_sigframe+0x5f7/0x820 [ 1908.736232][T32034] ? __pfx_get_sigframe+0x10/0x10 [ 1908.736254][T32034] ? posixtimer_deliver_signal+0x2ec/0x3f0 [ 1908.736273][T32034] x64_setup_rt_frame+0x160/0xcb0 [ 1908.736296][T32034] ? _raw_spin_unlock_irq+0x23/0x50 [ 1908.736314][T32034] ? lockdep_hardirqs_on+0x7a/0x110 [ 1908.736332][T32034] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1908.736348][T32034] ? get_signal+0x114f/0x1330 [ 1908.736365][T32034] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1908.736391][T32034] arch_do_signal_or_restart+0x424/0x830 [ 1908.736412][T32034] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1908.736436][T32034] ? ksys_write+0x242/0x270 [ 1908.736459][T32034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.736474][T32034] exit_to_user_mode_loop+0x86/0x480 [ 1908.736488][T32034] ? rcu_is_watching+0x15/0xb0 [ 1908.736504][T32034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.736519][T32034] do_syscall_64+0x33e/0xf80 [ 1908.736538][T32034] ? clear_bhb_loop+0x40/0x90 [ 1908.736555][T32034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1908.736568][T32034] RIP: 0033:0x7f365275d60e [ 1908.736582][T32034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1908.736595][T32034] RSP: 002b:00007f3653688fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1908.736612][T32034] RAX: 0000000000000001 RBX: 00007f36536896c0 RCX: 00007f365275d60e [ 1908.736622][T32034] RDX: 0000000000000001 RSI: 00007f3653689090 RDI: 0000000000000003 [ 1908.736631][T32034] RBP: 00007f3653689090 R08: 0000000000000000 R09: 0000000000000000 [ 1908.736640][T32034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1908.736649][T32034] R13: 00007f3652a16038 R14: 00007f3652a15fa0 R15: 00007f3652b3fa48 [ 1908.736669][T32034] [ 1909.005731][T31995] hsr_slave_0: entered promiscuous mode [ 1909.013176][T31995] hsr_slave_1: entered promiscuous mode [ 1909.019564][T31995] debugfs: 'hsr0' already exists in 'hsr' [ 1909.031310][T31995] Cannot create hsr debugfs directory [ 1909.277470][T18809] usb 4-1: USB disconnect, device number 103 [ 1909.558570][T24054] Bluetooth: hci1: command tx timeout [ 1909.627079][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7847'. [ 1909.763533][T32055] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7848'. [ 1909.865441][T32053] bond1: option mode: unable to set because the bond device has slaves [ 1910.128186][T18809] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 1910.139660][T32070] netlink: 'syz.6.7851': attribute type 1 has an invalid length. [ 1910.272323][T12198] hsr_slave_0: left promiscuous mode [ 1910.282917][T32075] FAULT_INJECTION: forcing a failure. [ 1910.282917][T32075] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.295951][T12198] hsr_slave_1: left promiscuous mode [ 1910.296025][T32075] CPU: 0 UID: 0 PID: 32075 Comm: syz.2.7852 Tainted: G L syzkaller #0 PREEMPT(full) [ 1910.296054][T32075] Tainted: [L]=SOFTLOCKUP [ 1910.296062][T32075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1910.296074][T32075] Call Trace: [ 1910.296083][T32075] [ 1910.296092][T32075] dump_stack_lvl+0xe8/0x150 [ 1910.296122][T32075] should_fail_ex+0x412/0x560 [ 1910.296154][T32075] should_failslab+0xa8/0x100 [ 1910.296186][T32075] __kmalloc_noprof+0xe8/0x760 [ 1910.296213][T32075] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1910.296249][T32075] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1910.296278][T32075] ? tomoyo_domain+0xd7/0x130 [ 1910.296311][T32075] ? tomoyo_path_number_perm+0x219/0x630 [ 1910.296344][T32075] tomoyo_path_number_perm+0x246/0x630 [ 1910.296371][T32075] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1910.296394][T32075] ? __lock_acquire+0x6b5/0x2cf0 [ 1910.296431][T32075] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1910.296480][T32075] ? __fget_files+0x2a/0x420 [ 1910.296507][T32075] ? __fget_files+0x2a/0x420 [ 1910.296529][T32075] ? __fget_files+0x3a0/0x420 [ 1910.296552][T32075] ? __fget_files+0x2a/0x420 [ 1910.296579][T32075] security_file_ioctl+0xc3/0x2a0 [ 1910.296604][T32075] __se_sys_ioctl+0x47/0x170 [ 1910.296634][T32075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.296656][T32075] do_syscall_64+0x15f/0xf80 [ 1910.296683][T32075] ? trace_irq_disable+0x3b/0x140 [ 1910.296712][T32075] ? clear_bhb_loop+0x40/0x90 [ 1910.296737][T32075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.296757][T32075] RIP: 0033:0x7faaca39cdd9 [ 1910.296777][T32075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.296794][T32075] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1910.296816][T32075] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1910.296832][T32075] RDX: 0000200000000180 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 1910.296845][T32075] RBP: 00007faacb2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 1910.296858][T32075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1910.296871][T32075] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1910.296903][T32075] [ 1910.296912][T32075] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1910.317505][T12198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1910.387808][T18800] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1910.447058][T12198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1910.581940][T18809] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1910.596148][T18809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1910.606255][T12198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1910.617597][T18800] usb 7-1: Using ep0 maxpacket: 16 [ 1910.625588][T18800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1910.635685][T18800] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1910.645829][T18809] usb 4-1: config 0 descriptor?? [ 1910.660437][T18800] usb 7-1: config 127 has no interface number 0 [ 1910.671145][T12198] veth1_macvtap: left promiscuous mode [ 1910.676723][T12198] veth0_macvtap: left promiscuous mode [ 1910.679002][T18800] usb 7-1: config 127 interface 124 has no altsetting 0 [ 1910.713733][T18800] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1910.727613][T18800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.736086][T18800] usb 7-1: Product: syz [ 1910.741389][T18800] usb 7-1: Manufacturer: syz [ 1910.746919][T32080] fuse: Bad value for 'group_id' [ 1910.752320][T18800] usb 7-1: SerialNumber: syz [ 1910.757236][T32080] fuse: Bad value for 'group_id' [ 1910.965073][T24054] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 1911.056361][T18809] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1911.086350][T18809] [drm:udl_init] *ERROR* Selecting channel failed [ 1911.173652][T12198] team0 (unregistering): Port device team_slave_1 removed [ 1911.195271][T18809] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 1911.212858][T12198] team0 (unregistering): Port device team_slave_0 removed [ 1911.220211][T18809] [drm] Initialized udl on minor 2 [ 1911.251330][T18809] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1911.270697][T18809] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1911.298099][T31647] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1911.313017][T18809] usb 4-1: USB disconnect, device number 104 [ 1911.328675][T31647] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 1911.605745][ T5289] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1911.640380][T24054] Bluetooth: hci1: command tx timeout [ 1911.672495][T18800] usb 7-1: reset high-speed USB device number 52 using dummy_hcd [ 1911.853522][T18800] usb 7-1: device firmware changed [ 1911.890690][T18800] usb 7-1: USB disconnect, device number 52 [ 1912.050212][T18800] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1912.256582][T18800] usb 7-1: Using ep0 maxpacket: 16 [ 1912.287123][T18800] usb 7-1: config 127 has an invalid interface number: 124 but max is 0 [ 1912.308510][T18800] usb 7-1: config 127 has no interface number 0 [ 1912.339616][T18800] usb 7-1: config 127 interface 124 has no altsetting 0 [ 1912.394904][T18800] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 1912.438381][T18800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1912.476314][T18800] usb 7-1: Product: syz [ 1912.494355][T18800] usb 7-1: Manufacturer: syz [ 1912.524248][T18800] usb 7-1: SerialNumber: syz [ 1912.590398][T32108] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1912.640813][T32108] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1913.307777][T12198] IPVS: stop unused estimator thread 0... [ 1913.423593][T31995] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1913.529462][T31995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1913.718191][T24054] Bluetooth: hci1: command tx timeout [ 1913.755898][T31995] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1913.906322][T31995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1914.042819][T31995] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1914.166458][T31995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1914.371473][T31995] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1914.438847][T31995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1914.759399][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.777313][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.863037][T18800] usb 7-1: USB disconnect, device number 53 [ 1915.301957][T31995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1915.342636][T31995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1915.409081][T12198] bridge0: port 1(bridge_slave_0) entered blocking state [ 1915.416306][T12198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1915.448054][T18800] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1915.539598][T17424] bridge0: port 2(bridge_slave_1) entered blocking state [ 1915.547006][T17424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1915.574785][T32144] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 1915.615586][T18800] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1915.636439][T18800] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 1915.650407][T18800] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.663685][T18800] usb 7-1: Product: syz [ 1915.671934][T18800] usb 7-1: Manufacturer: syz [ 1915.705164][T18800] usb 7-1: SerialNumber: syz [ 1915.941880][T31995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1915.995185][T32147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.095608][T31995] veth0_vlan: entered promiscuous mode [ 1916.115688][T32147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.148386][T31995] veth1_vlan: entered promiscuous mode [ 1916.203117][T32157] syzkaller0: entered promiscuous mode [ 1916.214977][T32158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1916.235473][T32157] syzkaller0: entered allmulticast mode [ 1916.313612][T18800] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1916.326856][T32157] tipc: Enabled bearer , priority 0 [ 1916.376087][T32156] tipc: Resetting bearer [ 1916.424709][T18800] usb 7-1: USB disconnect, device number 54 [ 1916.481777][T32156] tipc: Disabling bearer [ 1916.521110][T31995] veth0_macvtap: entered promiscuous mode [ 1916.549509][T31642] udevd[31642]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1916.571622][T31995] veth1_macvtap: entered promiscuous mode [ 1916.630308][T31995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1916.658795][T31995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1916.691492][T17424] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.714508][T17424] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.735461][T17424] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1916.755189][T17424] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1917.183786][ T749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.254885][ T749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.414811][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1917.452243][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1917.796573][T32190] FAULT_INJECTION: forcing a failure. [ 1917.796573][T32190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1917.831919][T32190] CPU: 0 UID: 0 PID: 32190 Comm: syz.2.7877 Tainted: G L syzkaller #0 PREEMPT(full) [ 1917.831953][T32190] Tainted: [L]=SOFTLOCKUP [ 1917.831959][T32190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1917.831967][T32190] Call Trace: [ 1917.831974][T32190] [ 1917.831981][T32190] dump_stack_lvl+0xe8/0x150 [ 1917.832007][T32190] should_fail_ex+0x412/0x560 [ 1917.832034][T32190] _copy_from_user+0x2d/0xb0 [ 1917.832058][T32190] copy_from_sockptr+0x5e/0x90 [ 1917.832154][T32190] packet_setsockopt+0xbeb/0x1510 [ 1917.832172][T32190] ? __pfx_packet_setsockopt+0x10/0x10 [ 1917.832193][T32190] ? aa_sk_perm+0x6d5/0x900 [ 1917.832214][T32190] ? __fget_files+0x2a/0x420 [ 1917.832235][T32190] ? __pfx_aa_sk_perm+0x10/0x10 [ 1917.832253][T32190] ? __fget_files+0x2a/0x420 [ 1917.832267][T32190] ? aa_sock_opt_perm+0xff/0x1a0 [ 1917.832294][T32190] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1917.832315][T32190] ? __pfx_packet_setsockopt+0x10/0x10 [ 1917.832332][T32190] do_sock_setsockopt+0x17c/0x1b0 [ 1917.832356][T32190] __x64_sys_setsockopt+0x13d/0x1b0 [ 1917.832376][T32190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.832392][T32190] do_syscall_64+0x15f/0xf80 [ 1917.832415][T32190] ? trace_irq_disable+0x3b/0x140 [ 1917.832437][T32190] ? clear_bhb_loop+0x40/0x90 [ 1917.832454][T32190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1917.832468][T32190] RIP: 0033:0x7faaca39cdd9 [ 1917.832484][T32190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1917.832496][T32190] RSP: 002b:00007faacb2aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1917.832513][T32190] RAX: ffffffffffffffda RBX: 00007faaca615fa0 RCX: 00007faaca39cdd9 [ 1917.832524][T32190] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000003 [ 1917.832533][T32190] RBP: 00007faacb2aa090 R08: 0000000000000004 R09: 0000000000000000 [ 1917.832543][T32190] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 1917.832553][T32190] R13: 00007faaca616038 R14: 00007faaca615fa0 R15: 00007faaca73fa48 [ 1917.832573][T32190] [ 1918.656938][T32207] FAULT_INJECTION: forcing a failure. [ 1918.656938][T32207] name failslab, interval 1, probability 0, space 0, times 0 [ 1918.670227][T32207] CPU: 1 UID: 0 PID: 32207 Comm: syz.3.7884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1918.670257][T32207] Tainted: [L]=SOFTLOCKUP [ 1918.670272][T32207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1918.670282][T32207] Call Trace: [ 1918.670290][T32207] [ 1918.670298][T32207] dump_stack_lvl+0xe8/0x150 [ 1918.670327][T32207] should_fail_ex+0x412/0x560 [ 1918.670354][T32207] should_failslab+0xa8/0x100 [ 1918.670384][T32207] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1918.670410][T32207] ? netlink_realloc_groups+0x126/0x350 [ 1918.670439][T32207] ? netlink_realloc_groups+0x126/0x350 [ 1918.670464][T32207] krealloc_node_align_noprof+0x19a/0x390 [ 1918.670495][T32207] netlink_realloc_groups+0x126/0x350 [ 1918.670523][T32207] netlink_setsockopt+0x365/0x730 [ 1918.670547][T32207] ? __pfx_aa_sk_perm+0x10/0x10 [ 1918.670571][T32207] ? __pfx_netlink_setsockopt+0x10/0x10 [ 1918.670594][T32207] ? aa_sock_opt_perm+0xff/0x1a0 [ 1918.670618][T32207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1918.670641][T32207] ? __pfx_netlink_setsockopt+0x10/0x10 [ 1918.670666][T32207] do_sock_setsockopt+0x17c/0x1b0 [ 1918.670693][T32207] __x64_sys_setsockopt+0x13d/0x1b0 [ 1918.670718][T32207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.670738][T32207] do_syscall_64+0x15f/0xf80 [ 1918.670762][T32207] ? trace_irq_disable+0x3b/0x140 [ 1918.670788][T32207] ? clear_bhb_loop+0x40/0x90 [ 1918.670809][T32207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.670826][T32207] RIP: 0033:0x7fc5b7d9cdd9 [ 1918.670844][T32207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.670860][T32207] RSP: 002b:00007fc5b8bd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1918.670879][T32207] RAX: ffffffffffffffda RBX: 00007fc5b8015fa0 RCX: 00007fc5b7d9cdd9 [ 1918.670893][T32207] RDX: 0000000000000002 RSI: 000000000000010e RDI: 0000000000000003 [ 1918.670904][T32207] RBP: 00007fc5b8bd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1918.670915][T32207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1918.670925][T32207] R13: 00007fc5b8016038 R14: 00007fc5b8015fa0 R15: 00007fc5b813fa48 [ 1918.670951][T32207] [ 1919.051694][T32212] libceph: resolve '0..' (ret=-3): failed [ 1919.315797][T32221] syzkaller0: entered promiscuous mode [ 1919.331501][T32221] syzkaller0: entered allmulticast mode [ 1919.385775][T32225] binder: 32223:32225 ioctl c018620b 2000000002c0 returned -14 [ 1919.864228][T32236] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7891'. [ 1919.906793][T32233] A link change request failed with some changes committed already. Interface 26±ÿ may have been left with an inconsistent configuration, please check. [ 1920.161268][T32236] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1920.824010][T26201] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1921.018202][T26201] usb 6-1: Using ep0 maxpacket: 32 [ 1921.047751][T26201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.097637][T26201] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1921.141042][T26201] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1921.165114][T26201] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 1921.191050][T26201] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.208587][T26201] usb 6-1: config 0 descriptor?? [ 1921.318851][T32266] syzkaller0: entered promiscuous mode [ 1921.324603][T32266] syzkaller0: entered allmulticast mode [ 1921.463541][T32250] random: crng reseeded on system resumption [ 1921.787183][T26201] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0011/input/input43 [ 1921.895026][T26201] input: HID 0458:5011 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5011.0011/input/input44 [ 1921.976496][T26201] kye 0003:0458:5011.0011: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.5-1/input0 [ 1922.308382][T32274] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7905'. [ 1922.335417][T32274] bond1: option mode: unable to set because the bond device is up [ 1922.601104][T26201] usb 6-1: USB disconnect, device number 62 [ 1922.966229][T32296] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1923.306616][T32305] loop8: detected capacity change from 0 to 8 [ 1923.317168][T32305] Dev loop8: unable to read RDB block 8 [ 1923.332006][T32305] loop8: unable to read partition table [ 1923.338635][T32305] loop8: partition table beyond EOD, truncated [ 1923.345062][T32305] loop_reread_partitions: partition scan of loop8 (þ被xü^WÑà– ) failed (rc=-5) [ 1923.522384][T32313] syzkaller0: entered promiscuous mode [ 1923.529080][T32313] syzkaller0: entered allmulticast mode [ 1923.639495][T32289] ================================================================== [ 1923.647626][T32289] BUG: KASAN: slab-use-after-free in drm_gem_object_release_handle+0x4b/0x1e0 [ 1923.656788][T32289] Read of size 8 at addr ffff88805c37fa78 by task syz.5.7911/32289 [ 1923.664767][T32289] [ 1923.667092][T32289] CPU: 0 UID: 0 PID: 32289 Comm: syz.5.7911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1923.667112][T32289] Tainted: [L]=SOFTLOCKUP [ 1923.667118][T32289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1923.667127][T32289] Call Trace: [ 1923.667135][T32289] [ 1923.667142][T32289] dump_stack_lvl+0xe8/0x150 [ 1923.667162][T32289] print_address_description+0x55/0x1e0 [ 1923.667195][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1923.667221][T32289] print_report+0x58/0x70 [ 1923.667234][T32289] kasan_report+0x117/0x150 [ 1923.667254][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1923.667286][T32289] drm_gem_object_release_handle+0x4b/0x1e0 [ 1923.667318][T32289] idr_for_each+0x1c6/0x2a0 [ 1923.667382][T32289] ? __pfx_drm_fb_release+0x10/0x10 [ 1923.667409][T32289] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 1923.667430][T32289] ? __pfx_idr_for_each+0x10/0x10 [ 1923.667454][T32289] drm_gem_release+0x28/0x40 [ 1923.667467][T32289] drm_file_free+0x729/0xa00 [ 1923.667493][T32289] drm_release+0x2de/0x3f0 [ 1923.667509][T32289] ? __pfx_drm_release+0x10/0x10 [ 1923.667524][T32289] __fput+0x44f/0xa60 [ 1923.667542][T32289] task_work_run+0x1d9/0x270 [ 1923.667566][T32289] ? __pfx_task_work_run+0x10/0x10 [ 1923.667586][T32289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.667600][T32289] exit_to_user_mode_loop+0xed/0x480 [ 1923.667615][T32289] ? rcu_is_watching+0x15/0xb0 [ 1923.667631][T32289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.667644][T32289] do_syscall_64+0x33e/0xf80 [ 1923.667664][T32289] ? clear_bhb_loop+0x40/0x90 [ 1923.667680][T32289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.667694][T32289] RIP: 0033:0x7feadcf9cdd9 [ 1923.667709][T32289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1923.667722][T32289] RSP: 002b:00007feadd33fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1923.667739][T32289] RAX: 0000000000000000 RBX: 00007feadd217da0 RCX: 00007feadcf9cdd9 [ 1923.667749][T32289] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1923.667758][T32289] RBP: 00007feadd217da0 R08: 0000000000000006 R09: 0000000000000000 [ 1923.667768][T32289] R10: 00007feadd217cb0 R11: 0000000000000246 R12: 00000000001d5a12 [ 1923.667778][T32289] R13: 00007feadd21618c R14: 00000000001d57ac R15: 00007feadd216180 [ 1923.667792][T32289] [ 1923.667798][T32289] [ 1923.907704][T32289] Allocated by task 32294: [ 1923.912127][T32289] kasan_save_track+0x3e/0x80 [ 1923.916826][T32289] __kasan_kmalloc+0x93/0xb0 [ 1923.921598][T32289] __kmalloc_cache_noprof+0x31c/0x660 [ 1923.927001][T32289] __drm_gem_shmem_create+0xc4/0x2e0 [ 1923.932378][T32289] drm_gem_shmem_dumb_create+0x72/0x120 [ 1923.938301][T32289] drm_mode_create_dumb_ioctl+0x2bd/0x340 [ 1923.944156][T32289] drm_ioctl_kernel+0x2df/0x3b0 [ 1923.949105][T32289] drm_ioctl+0x6ba/0xb80 [ 1923.953447][T32289] __se_sys_ioctl+0xfc/0x170 [ 1923.958058][T32289] do_syscall_64+0x15f/0xf80 [ 1923.962667][T32289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1923.968770][T32289] [ 1923.971207][T32289] Freed by task 32294: [ 1923.975301][T32289] kasan_save_track+0x3e/0x80 [ 1923.979997][T32289] kasan_save_free_info+0x46/0x50 [ 1923.985119][T32289] __kasan_slab_free+0x5c/0x80 [ 1923.989892][T32289] kfree+0x1c5/0x640 [ 1923.993883][T32289] drm_gem_change_handle_ioctl+0x3ed/0x570 [ 1923.999780][T32289] drm_ioctl_kernel+0x2df/0x3b0 [ 1924.004727][T32289] drm_ioctl+0x6ba/0xb80 [ 1924.008976][T32289] __se_sys_ioctl+0xfc/0x170 [ 1924.013580][T32289] do_syscall_64+0x15f/0xf80 [ 1924.018187][T32289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.024106][T32289] [ 1924.026463][T32289] The buggy address belongs to the object at ffff88805c37f800 [ 1924.026463][T32289] which belongs to the cache kmalloc-1k of size 1024 [ 1924.040609][T32289] The buggy address is located 632 bytes inside of [ 1924.040609][T32289] freed 1024-byte region [ffff88805c37f800, ffff88805c37fc00) [ 1924.054587][T32289] [ 1924.056916][T32289] The buggy address belongs to the physical page: [ 1924.063327][T32289] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5c378 [ 1924.072094][T32289] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1924.080595][T32289] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1924.088142][T32289] page_type: f5(slab) [ 1924.092131][T32289] raw: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122 [ 1924.100725][T32289] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1924.109512][T32289] head: 00fff00000000040 ffff88813fe1adc0 dead000000000100 dead000000000122 [ 1924.118363][T32289] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1924.127406][T32289] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 1924.136165][T32289] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1924.144917][T32289] page dumped because: kasan: bad access detected [ 1924.151541][T32289] page_owner tracks the page as allocated [ 1924.157265][T32289] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 1180, tgid 1180 (kworker/u8:10), ts 1471625329095, free_ts 1470982175258 [ 1924.180744][T32289] post_alloc_hook+0x231/0x280 [ 1924.185638][T32289] get_page_from_freelist+0x24ba/0x2540 [ 1924.191556][T32289] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1924.197379][T32289] allocate_slab+0x77/0x660 [ 1924.201895][T32289] refill_objects+0x339/0x3d0 [ 1924.206572][T32289] __pcs_replace_empty_main+0x321/0x720 [ 1924.212123][T32289] __kmalloc_noprof+0x474/0x760 [ 1924.216981][T32289] ieee802_11_parse_elems_full+0x159/0x2ab0 [ 1924.223106][T32289] ieee80211_inform_bss+0x161/0x1160 [ 1924.228424][T32289] cfg80211_inform_single_bss_data+0xcf9/0x1af0 [ 1924.234821][T32289] cfg80211_inform_bss_data+0x266/0x3c40 [ 1924.240470][T32289] cfg80211_inform_bss_frame_data+0x3c7/0x730 [ 1924.246645][T32289] ieee80211_bss_info_update+0x794/0xa40 [ 1924.252474][T32289] ieee80211_ibss_rx_queued_mgmt+0x1901/0x2cb0 [ 1924.258680][T32289] ieee80211_iface_work+0x845/0x1380 [ 1924.264013][T32289] cfg80211_wiphy_work+0x2cf/0x460 [ 1924.269249][T32289] page last free pid 24056 tgid 24056 stack trace: [ 1924.275768][T32289] __free_frozen_pages+0xbc7/0xd30 [ 1924.280903][T32289] __slab_free+0x274/0x2c0 [ 1924.285342][T32289] qlist_free_all+0x99/0x100 [ 1924.289955][T32289] kasan_quarantine_reduce+0x148/0x160 [ 1924.295429][T32289] __kasan_slab_alloc+0x22/0x80 [ 1924.300307][T32289] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1924.305779][T32289] do_getname+0x2e/0x250 [ 1924.310029][T32289] __se_sys_mkdirat+0x24/0x150 [ 1924.314898][T32289] do_syscall_64+0x15f/0xf80 [ 1924.319503][T32289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.325498][T32289] [ 1924.327828][T32289] Memory state around the buggy address: [ 1924.333554][T32289] ffff88805c37f900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1924.341969][T32289] ffff88805c37f980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1924.350121][T32289] >ffff88805c37fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1924.358183][T32289] ^ [ 1924.366165][T32289] ffff88805c37fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1924.374338][T32289] ffff88805c37fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1924.382411][T32289] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1924.760765][T32289] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1924.768204][T32289] CPU: 0 UID: 0 PID: 32289 Comm: syz.5.7911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.779350][T32289] Tainted: [L]=SOFTLOCKUP [ 1924.783694][T32289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1924.793758][T32289] Call Trace: [ 1924.797045][T32289] [ 1924.799987][T32289] vpanic+0x56c/0xa60 [ 1924.804071][T32289] ? __pfx_vpanic+0x10/0x10 [ 1924.808601][T32289] ? __pfx___schedule+0x10/0x10 [ 1924.813467][T32289] panic+0xc5/0xd0 [ 1924.817199][T32289] ? __pfx_panic+0x10/0x10 [ 1924.821633][T32289] ? preempt_schedule_common+0x82/0xd0 [ 1924.827130][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1924.833304][T32289] check_panic_on_warn+0x89/0xb0 [ 1924.838262][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1924.844343][T32289] end_report+0x73/0x170 [ 1924.848603][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1924.854701][T32289] kasan_report+0x128/0x150 [ 1924.859227][T32289] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 1924.865311][T32289] drm_gem_object_release_handle+0x4b/0x1e0 [ 1924.871240][T32289] idr_for_each+0x1c6/0x2a0 [ 1924.875761][T32289] ? __pfx_drm_fb_release+0x10/0x10 [ 1924.880987][T32289] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 1924.887510][T32289] ? __pfx_idr_for_each+0x10/0x10 [ 1924.892677][T32289] drm_gem_release+0x28/0x40 [ 1924.897287][T32289] drm_file_free+0x729/0xa00 [ 1924.901909][T32289] drm_release+0x2de/0x3f0 [ 1924.906334][T32289] ? __pfx_drm_release+0x10/0x10 [ 1924.911462][T32289] __fput+0x44f/0xa60 [ 1924.915545][T32289] task_work_run+0x1d9/0x270 [ 1924.920152][T32289] ? __pfx_task_work_run+0x10/0x10 [ 1924.925297][T32289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.931722][T32289] exit_to_user_mode_loop+0xed/0x480 [ 1924.937018][T32289] ? rcu_is_watching+0x15/0xb0 [ 1924.941793][T32289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.948569][T32289] do_syscall_64+0x33e/0xf80 [ 1924.953264][T32289] ? clear_bhb_loop+0x40/0x90 [ 1924.958039][T32289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.963943][T32289] RIP: 0033:0x7feadcf9cdd9 [ 1924.968544][T32289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.988880][T32289] RSP: 002b:00007feadd33fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1924.997334][T32289] RAX: 0000000000000000 RBX: 00007feadd217da0 RCX: 00007feadcf9cdd9 [ 1925.005453][T32289] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1925.013441][T32289] RBP: 00007feadd217da0 R08: 0000000000000006 R09: 0000000000000000 [ 1925.021689][T32289] R10: 00007feadd217cb0 R11: 0000000000000246 R12: 00000000001d5a12 [ 1925.029686][T32289] R13: 00007feadd21618c R14: 00000000001d57ac R15: 00007feadd216180 [ 1925.037674][T32289] [ 1925.040943][T32289] Kernel Offset: disabled [ 1925.045454][T32289] Rebooting in 86400 seconds..