last executing test programs: 31m0.347274796s ago: executing program 2 (id=1161): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) time(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x478, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x448, 0x2, [@TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x7, 0x7, 0x7, {0x4, 0x1, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcb, 0x1, 0x800, 0x8002}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x40000000, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c1, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x4, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x7, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x1, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x8, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdff, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0x13, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x81, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0xffffffff, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xfb, 0x8, 0x5, 0x0, 0x0, 0x12, 0x4e, 0xf, 0xbb4f, 0x7, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x0, 0x81, 0x10000, 0x70, 0xffffffff, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x6ab0, 0x401, 0x40000007, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (fail_nth: 6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f00000000c0)=0x85, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) linkat(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[], 0x0) 30m59.837524434s ago: executing program 2 (id=1164): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf3200090563e4fb9c84805e4b725dbc88a39b2f5fdba236e7c4293cb69b1334d6fe7cead0e7aadcd24e22174df70ef9e10755d765bd8369bcdc9fcc64115f0d105035feeeb456d587947fe15488000acf7ab65f1de615295b057d25d975bdfe2735f3ab4b0c44bc997858fee75eb96fd35b2469d3c3d24a8d2c7b271af714c8d27fec7d4fe73809cee2a9e8064b57cc0c8bb13e700b055bdd47a2e158804f0d2d88260cacf87674eb93a9f4e21e8de4952d9302bd25398867e8c60d3e458f98a2c7a0bfde3cfcbf91f39b2822cfe2a71d695b548925d83a47aee213b41cd778070eea62519047aafcd01b7383b03eaf1dc2", @ANYRES64], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x120b41) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000001c0)={0x14, &(0x7f00000000c0)={0x20, 0xa, 0x8c, {0x8c, 0x31, "354b5b8cf5a5e8f40c5fb46e4540adbf37d357a564cb8511289683c6bfedd77096c8893f3e01697768fd0152e5ca1507c9d0ac6e1e3be8ce99f6ba28613561b2f3f535f59ac7759041050bf744f7bd82ac2af7bb2f4a98d153ddbc47ac69c6e47c7b69c09c951b728143aa3737b0975429d766b7a59d730567a48f6c8e8715384fcabfbdffd914d49210"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x20, 0x0, 0xaa, "e452a1a03bc493cabf9636cd43a810b07f44050dd4b120b5017507dde08ca49a57f4dcb26c6cc79fc9b789a0448482d7a6af22ed86631f6d2f6643dee423db2375a848b24055cab70cdd099df2ce999072c35d19b2c5ce470b949d5eba54bf004a841646d3a0c813353028efdc141c76e8cc4e3e2511f8dbef283d9f90e2fb4bc0eb559662b55532e1d7f528de90455ddecc889d480cb7037dab0290c7cb24cbd6da839f2d99c28c9f5b"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0xc446, 0x1, 0x5, 0x7ff, 0x3, 0x10, 0x6, 0xb, 0x5, 0xfffb, 0xfff, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4, 0x3ae2}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x81}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r2, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) truncate(&(0x7f0000001580)='./file1\x00', 0xd4) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_control_io(r1, 0x0, 0x0) 30m55.605529807s ago: executing program 2 (id=1180): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="141000fec800"], 0xa) 30m55.523571892s ago: executing program 2 (id=1182): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x54, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9738}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) umount2(&(0x7f00000021c0)='./file0\x00', 0x4) unshare(0x2c020400) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x19, 0x1, {0x148, {0x2, 0x0, 0x100}, 0x8b, 0x0, 0x0, 0xff, 0x5, 0x4000084, 0xbf43, 0x20000008000007, 0x8, 0x400000000008, 0x200002, 0x2, 0xfffffffffffffffe, 0x4, 0x8, 0x8000000000408, 0x0, 0xfffffffffffffff7}}, 0xa0) r5 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5393, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0x81, 0x8, 0x3, 0x44, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x7800, 0x1, 0x82}}) bind$packet(r1, &(0x7f0000000340)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @remote}, 0x14) 30m55.330120517s ago: executing program 2 (id=1184): newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x6000) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1, &(0x7f0000000540)=""/237, 0xed}, 0xfffffffa}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x3, &(0x7f0000001980)=""/118, 0x76}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/246, 0xf6}], 0x2}, 0x8}, {{&(0x7f0000001bc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/200, 0xc8}, {&(0x7f0000001d40)=""/104, 0x68}, {&(0x7f0000001dc0)=""/5, 0x5}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/202, 0xca}, {&(0x7f0000002000)=""/8, 0x8}, {&(0x7f0000002040)=""/39, 0x27}], 0x7, &(0x7f0000002100)=""/199, 0xc7}, 0xb2c7}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002280)=""/24, 0x18}, {&(0x7f00000022c0)=""/102, 0x66}, {&(0x7f0000002340)=""/250, 0xfa}, {&(0x7f0000002440)=""/107, 0x6b}, {&(0x7f00000024c0)=""/245, 0xf5}, {&(0x7f00000025c0)=""/32, 0x20}, {&(0x7f0000002600)=""/47, 0x2f}], 0x7, &(0x7f00000026c0)=""/212, 0x133}, 0xffffffff}], 0x5, 0x10021, &(0x7f0000002900)={0x77359400}) r1 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf\x14o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36dffd56e149523b04f7553979abf48a538bc48c7e4a637cc4a89b541bee19126701eccf408bd99d59db466d75bebccb72b8d609c305cd95b3a54eb8b4cab9b90c524ddae7d03c45b03f767301ff08a7cbc2e734271681488df1ddf64a39a9a442ea517f609050702"], 0x0) 30m55.032206326s ago: executing program 32 (id=1186): r0 = syz_open_dev$swradio(&(0x7f0000003640), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000003680)={0x1, 0x5, 0x6}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100030006"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x4d, 0x0, &(0x7f0000cab000)) syz_usb_connect(0x5, 0x255, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000670250404020014964680102030109024302010000000009042100021085d80009050402ff0300000007250180000500872266b8d895a718d2000000000000000000fe3c9ad0bc7dabdd92000000000070e9f36dffd56e149523b04f7553979abf48a538bc48c7e4a637cc4a89b541bee19126701eccf408bd99d59db466d75bebccb72b8d609c305cd95b3a54eb8b4cab9b90c524ddae7d03c45b03f767301ff08a7cbc2e734271681488df1ddf64a39a9a442ea517f609050702"], 0x0) 27m30.905192254s ago: executing program 5 (id=2236): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000000)={0x0, 0x0, @ioapic={0x4, 0x2, 0x2, 0x8000, 0x0, [{0x1a, 0x4, 0x81, '\x00', 0x9}, {0x70, 0x3, 0x9, '\x00', 0xf}, {0x3, 0xc, 0x8d, '\x00', 0x5}, {0x7, 0xf, 0x6, '\x00', 0x9}, {0x0, 0x8, 0xf, '\x00', 0x2}, {0x3, 0x8, 0x4, '\x00', 0x80}, {0x7, 0xf8, 0x3, '\x00', 0x5}, {0x9, 0x1, 0x6}, {0x4, 0x8, 0x1, '\x00', 0x1}, {0x3, 0x50, 0x11, '\x00', 0x1}, {0x8, 0x3, 0x4, '\x00', 0x9}, {0x2, 0x4, 0xe8, '\x00', 0x9}, {0xc3, 0x0, 0xf7, '\x00', 0x40}, {0x1, 0x3e, 0x80, '\x00', 0x1}, {0x8, 0x1, 0x5}, {0x25, 0x8, 0x8, '\x00', 0xb}, {0x2, 0x3, 0x0, '\x00', 0x3}, {0x4, 0x6, 0x7, '\x00', 0xd}, {0xf5, 0x8, 0x4, '\x00', 0x80}, {0xdd, 0x8, 0x38}, {0x0, 0x0, 0xd, '\x00', 0xe}, {0x8b, 0xf7, 0x42, '\x00', 0x2}, {0xc0, 0x9, 0x8, '\x00', 0x3}, {0xc, 0x33, 0x3}]}}) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000240), 0x404400, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000) r2 = accept4$inet(r1, &(0x7f0000000280)={0x2, 0x0, @multicast2}, &(0x7f00000002c0)=0x10, 0x80800) ioctl$NILFS_IOCTL_SYNC(r2, 0x80086e8a, &(0x7f0000000300)) sendto$inet6(r1, &(0x7f0000000340)="11f8325a928422d4955a1c9f18b124d0701c139078d26425db94a92b3405523bda5115f7098fc8bc7229231d5fc4d89a83867d0b8c9545f63a9d370346841ed83b3e219bec86882a1fcfe2b597fd5c2830ee49aa613625f6922915f82ef4a65b08c725bce93e683931c96efdc30f6f0f899d842feb5e339f753488b5884dd2a9acf7c08efeb47dece31ee7f12c187c0a87aca7dd19af2d08e87bfe8f6251acbf28ab99d9b3c476fceee475157f790ee307c61d7f", 0xb4, 0x8005, &(0x7f0000000400)={0xa, 0x4e23, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) ioctl$XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000540)={r2, &(0x7f0000000440)='\x00', 0x181280, &(0x7f0000000480)={@_ha_fsid={[0x2, 0x6]}, {0x4, 0x5, 0x10001, 0x9}}, 0x40, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0x5000}) shutdown(r2, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000580), 0x0, 0x242080) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000600)={{{@in6, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000700)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000001c80)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001c40)={&(0x7f0000000740)={0x14c4, 0x9, 0xb, 0x201, 0x70bd2b, 0x25dfdbff, {0x5, 0x0, 0x4}, [@generic="f3e71aa436eba2430fc450834b59640e2f5e047aecabc89aaecde00e81afefced465e766dc3665", @generic="8f11f845280b9de7f8e755eeb41cfe7da25723a894967dd7c698ae6c7a312f48a4865ecb18324c73881b577e30aa084c49659e52b2ea9a7c06b7c8c318cfa734a938b4ecc65a28d9c953be3cf39f36f124061f1393d434d1d88c9c3e5afd8c71e33478b8de1002e9f1efff6ec1475b5c1f067a032cfedd4d1158edf310c115ec47c64d2c45043a5080584911a161d4a5da6549d00b3bae64c97f57ec81f306b538cb9a752311486ceb84e6996c624ce835dbb64d1f8f4dd4f3ce4b6098c9b9634267209533a4830360c1ada2e8ec7653ec0edb8ad10c225e604dc4a68533342ad236a0ed578d2b3a6c397d7229c3dffc", @generic="6a2847c4c75c60a21d9911450f04050414d805c703598ec2e5fd8ab22b2ff74a2a0e960860f668f7de8c384ce9dcd5f699dd1c4b052598415a643abf2dfc227242eaff24798b0525df2ad78721fb766d86ceb07afdcdb277f16fb2a85bf81f35a2d03b70a852d837c602101f13f7ca490f38bec3adda3052ef744e42f9a78f9632b137719803f103551217d0d20ee8d767a6252f381191cc398f51287a2571ab74633cc662bf77208e071ff4662f", @nested={0x169, 0x6a, 0x0, 0x1, [@generic="1e0ed45ad19f1a62b5b35467d85be7f0472cb9a5ef4bbdfc71a196c0", @generic="92926e1634ba247de52efaead877db525ffef6bcaeb43df17501fe1bea5964f49266a7f1794922a7009d276cf3adae647f7498de039e2118e48a6e434bdc594684824809bea3006ca66035742225996448e7f94b479e322e0d327d891967ad072a753c948f8f4dc0d10466aa5b84e39e74fe10b1487bd6511a5e28f377b0ee7ad8a567307d255d55a3156264aae9dce8b1a2376cf0655dad6d236990a8c7ebe2018ec26a1b73dda5b6968945889dcc", @generic="e77f065aae64fdabfab35a6f33ff1a641a37ac3b895141a235f0da54e5083685d1b3d95e71ce8c1590b67eb3132e3e11186c4ff089c6f28761140ecd2620f48d02434c13b0af1c4ca6a254d69aa3424d663234a81b499a4983fa83b48a05c47eda3463600028b735af5334ea193d2705d95c057ec078a0dacb7e72d7db57fa479f738cef6c34f06c89ab538d1a11b068aa739551beb0", @typed={0x4, 0x127}]}, @nested={0x167, 0xd5, 0x0, 0x1, [@typed={0x52, 0x12f, 0x0, 0x0, @binary="bfece03b544872347ce6dbec0b709f27cdada77d704ae95fb2a41e15e1ba8996954a00bfe7a96d3591fe621da66ff0268fe6669addd22fb61a73f3b5ce1ad1878753242feb6a9861b450faf1bcbc"}, @typed={0x20, 0x22, 0x0, 0x0, @str='/sys/kernel/debug/sync/info\x00'}, @nested={0x4, 0x22}, @nested={0x4}, @nested={0x4, 0x15a}, @nested={0x4, 0xb5}, @typed={0x8, 0xc5, 0x0, 0x0, @uid=r3}, @typed={0x14, 0x9b, 0x0, 0x0, @str=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="f138318d34b652f83c7501274b5a4a953ef776091bf9442b09cfeaa3c0f084af740a58dd225063e00ebb21084f3eb7d35b07b46efef96a4dd0bcd4ea949a6efe166d84d15882bc64c3e54050877d24b2b47e47e346c1bc5724e7781378644cd5312d1c154e4d8780cb89a884250666efdbcf8207f1671136fda4c3531b9115bff32f4e942819cee949812633573338358e7d996b7ffa27ae7522ff576617a66a817505f082db85c8995e0db16aaeb0c7b472b0ee6dddb70289ae4f2ea21ad143b3753a"]}, @typed={0x14, 0x8c, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="569303dfde13e6e92e331ee50b4a6d3bec88e3c2931a68aa07daa902168e4c088b93ec90e3adc33569adc57a61fff27daa51a750537ed073da87f130494afa83a7dbbe2ffc623b592870b63284794c670cf5da261b914614c71e52b758bf1056f97e29a905a502d2f241d91f858fa3625a6a7688f1833dc984873c3d725d2d5e017ddc64c00bcefa54ff0aaec6e756d2b1298c145302bfcbf166e7e296c689e49f4631324226c1b4b2db12dab748b71bbbe8dbec4e85493e562345ceca239c4fec3e279bedbafda6f32415cad2e2deb3760e89612d70f68ee55412fee54fd9e18e2ae6af40c73b0143fbc7735a5a5ba36eb564a754be1ec8a9b8a94e520d18b588ca3adf6be9794c9783fd56a21da81dd8a68ef49b9a366dcc2f3affb79e545e8330366c39ca1a41e4a1e5313f761ff23c95ccb9ce53952a002c45770cdff1daf9dafde685bbe6bdb890ab3f81522db0e1d02349cf5ef4a2576ae41820ba0a26e6d1ddfadb6a29edbeafd0c6ccb40e1af248c0a27c60b9ca8f361d075e29db833b1ea764a1e7a9b08c76c06dcba7147f563df3de8b0b66189092f681b7e1e09bfebaf876b813f3437b66713fc0b917ecc5ae01533a916478880de2c749b64222698ca4afd7e31fb83c6c90ca9f23a559b3af2368eb75372259a7a35dad19a49a0b9bf50275a5d4426417822e14349d616259b38f3365cea1f11eca4a7b4cc26dd96c5928fa705034879de7f8e27a26e79ed24b6012c31db181260197c22117cfcb4dc98d4c01b2dcd84da440f03979da271d8f431ea478ca089913961fac53d6f4c6431ce7716d666eb4a17f610a4d48212377cd8d49cc1696e0485e4f3e768343e5af015db64722d57550f0638df5f6afca937015441430c768b2e65519bc9aaddfd9a34f3f96227755b07f0750a686d4e26ffae2715a84387da70ab8c52bbb5b156df040c7648e8846c57bfa0449ed90d8e01307ff28ba62cd1dc9ffd00f106bef5706f83d6457b9612d6756ec199c8ddf14963214aca43f78aa0328cc81a7d79013e373b9708c216456694404ec55c497af48043471c6a94bfa18f59e183da7938cf5b5f41a817c03f9819232677d55b459a8ad44aea658cc6bb21b7fca1225c66d391a106911d697f0d479a1d58ede54aff6fd428f9730ea4c898fc91b08040eccd00b59a5bcc5d00d6df07b4fc28b596d98da0639171e1802f48c79bfd6125b02e2b7079664999337eb7cf75b4e2ad2da4b9c932313521075078eb7ec7927e536cc3b2f86f9d1ac99f15c750bf92f7a98a7f7e56a964fbcccbc5ef82ba060d2c8f4b6c92f1315e3bc285ce5750d8c7e5e3d4e356abcf86d5fe535042a30bf6dd3bc7e30ece7693394e97d0eea01582c91d367b208f38dd7698b91326f54bb3543b67ddcc5381b00e675ab3c4cd7e5ca6e9fefd9d2001f18e50d4b25a0ea10bc0e685cf778ec2c1a8bbad10c8adeeba8e6c787196ca28e5eca4338d455d009f964308bccfcea12e9960bd5c1d87ec2492e58ae5232c3b979f49eed1e3ce129d357259cd285f4afb31961be2d2b7d61b89d0035dafa97db901a88b9b2e8282ee58168082a3bc1b50510e56fb3605ea85ebc15a6d5b8178b9a2afa0c94c7269cf360264c4e6ffc61f750654008911396b6295471b3fa8f93e542b99eb04b00c073967f18644cd94af13c2dc7ab404cc3d8a0563e83e0c6f45d420c67d368b9f23b7fbbf395584032495ec2732afbd9fa52dee9019360b4501c19ea033aa898e031cfe113fdd580483e5671dc37b844362a302628d861feb5c20a9e3ad6f8a7ed52baaf6754685b47e493df11951330c3f0d0156785b2dbba49e38a8ae11df6cd43afde05eb702604bcc6212f5171e2b01e90974537713b63bdedbed85668af0fd62da2121fde54270fe239a3da730079d91c5b590e992e3fa9cc0fffd66bd210eeae52f5505b769bd511adbb21303edd888d2facb6d0938e21b82b6439c686241698d6250fe68eae7b6fa49be222a57b4cea5e69dce6a0e7ae81df2f5b109622638635ae1770c05fa0533335ee72d75a2d0b7186527c6bf14de5c9a7878253a8c6ba575dd4e779592b48bf03c222938bcd871c4e17a9aa50a750ed795fa422bf311f1918878d3260ea0d765f0f33d81279d9c6c67e94243c14fbb46a08d81916ff1ee6ef57ec76e172eb6784b0e484254b9009e5d21061c8a6cac9e43cc5d29e97ad4e45546c1b0e4f33609975e375225f1716910ddffefd6d4757539fa52c17f4d40d740b6f8c3c493298fb252e4d7a7e761c7ce41ffd6c0c1d2e5e43c483bc87417853d2fbc548ca639d1c8ab5577bf7b5356c62f2ead56618498210f2393742b819fba8a1e37d242c8ded3db889cf526f462958d39f08a31a5cc2d8c44c79d3718630eed1965301103f0d5ad9724ebf64bc10a8ae4c507a290de51e17a1bcdc95139bc11331710232547d08e52ab264db602c16eb731484265553cbe9be86ebf3d36abe130ba2a00c91f60b733ad9e98690cd13162018a3a3ac26ab0ff44ba8f8f22b1258df167942c260ab559bf1b6555c6acf1de0d3247e523aed69d7c0a507839f3d1242aa27683df4df15c0257c80aee1a608bd372739379b410dc4a7f2412b14668d273c54df248f0ce3dc56471afce6d509254e46e86d6ff4cc1b9f352ede70e43f66e200ec2fc3717488748c9ca9fe05adb60f2c55ed7f3981839a2ad6ba21dc88f6a69b87489bf3f2a257c8d9fe506ce404a16ae305e455ecc75ffcf4816607acfaafebdcbe3636d83d25952fcb95c91d103f1f100f16782cea60fc11590c6c1f49216227e42e155cf5294a0b42ca6c55a152292e968e448e09414a3b017013a49aee8328c2387570650b70495cb0515efbba23803ced06a1959e601f34a73ed376c06bd6d99a98826a2257197f44a87e4a2cfc43e949e2fefd61ac0eb3315249770c1ce381145c80f4a447c1569b48e863e9fb14e29c9802d5f2449699366ed969a7459e9946cf191f3d81b907aaa88bca3c3708492d6725f9dc752e0a54d24beb9739ad6c1d5378f2672f3e13b08145080dacc9d06b8844121f22dbe2fe6a21bb05438cee6263afa3e2b24167c700db8664eef3dbe7411f0a962cd64e0ac0f9204ed402df2a12a26745d618706685051907cc193a01fbb995c4670e829d908f65dba2bd2c9acbcfa7e116327ebbff56f4af3aaca9f5214f9437e26307ea6b50d2c67fb61bd446cd5d5cb091645a43b3ad3e09e0eb9afcc1ea387cf77a4b81e7b2fcca638e96c679f054021c2fdd568a24f1ea78bcf7b13a3f46b76ab54058daef4d5f51c1f22f0db1623d0c3ac91cc55efc3271364dfe1b06e0981b2c14ae548a03f68c0aed0fd3dbbe78d563ac4d8ef10c4af1c44456c365c83674e51a0287a1447ffa69f5820316b031d298d972b31e10168ce859862a38986eb3dd50c3c3ef2f75eabeb08149698f9fd0bc89072759e33f7a28307027569623dd55cd552818da431383e7ca1d7551b129bc2313e64766364171d3f62e429c73b48955a5ece719f3fbdcac76832e2261110c884b469e9130903d651b4f6ad2b8d0535a44f5fd903782479ce8c4a75c11e0b474ce70f13caa849a71c00d2d5a5131f76c073e62981ac817217339e77f67478c44689226d20cda7a06c3b1daec665c299bfca0ac8718cea7d154a6638a51fa352295f92d187bf6df0580384efb9d3f7d4e6db7b4e225f4a9acbd6427772af4cc7e73aa0eae84337a118fa4723bddad7da180c34f5de3248c5dc7c0e5bce2b5b98d984db49d8769444cf48065c3bee403ea23e9bf3bf398a145da7bce805ac44e263926adea44588657b2563cae2538062b6370cf9e82d8c0f74a8f65d84f2b87fd581f6550e38d40ea0dc4faeb7fbb7d8f6eff7e8114a35fc44ce99572da87640a9aaef994e3c46765f188a350fd431077a9074ce11e1ff3a014bf321c131f985436ca59eb83136988bcf25bd3335fea756defbec53e89aead1427530473c2977d7220452eb155ca12db08fe4f8eeae51dd3ce6dc98f397446d66b93f01fe41728f1f050e633c2c3c920e9dd45ee58e4a17368bfacce97ca26d3de94fe8c029ac1011bf5bdc2108ea66ea79ca36fa5404e6525a6d91212c9418a7ff975580c8ad42ca5b439d69f1c3e9706069d2797f61167879a13ef485b7359a5e2a3d0f9ad20af81e6f1ac2ae59f61e15c669b86d9fd7ac42aa3774e45962a8e15b48489e553ba547d1a90461d17bab0589c4c35468a85fa63e54a4d82c2ee24752bbd1895ef428d0f940dfcfde6ee85810426b7d828cd8ade6f7ea275e8af5a184221bacd179f03eb8b5b465063c86b5556f968eded7d4ea59dfe06fa34a632440cfcef82fe5bb555f507b05da5db57c4c7b8fc173d69593a392a8e024096092b5f619b723164725f9e5acc9e9095403e4bc1733f5b1eef8187687b5fab8dc845ef25a2cdb31165a4693169088b340139e630836ea10063b31086d93101e0562704ebfbe9a8e08cf7b3b38c198df2656c5fd182a88674d82ccd087e7170e4fa9058975cba8c0a959f1509cf4edcaca8a080e24d481bd863640be556d7a3038858865b68054ca88873aed6f25fd53b9dc9f262012b66170ab2613e1da4e4d79f6c3a5105c3dfd73998eb4e8f99764353e73410c002b8d901c8022caf41d761bd05dbc875dd114e7b7522c705f9283eeb093e7b28e630886ea26d641c3d9bf32d44a5828166460de39e882b3ef108f8a01dc4c8797ff1fdd93769986674a98e70c99e4e1d07b2ec63ee1efe91f3f3c9395a29a371121c38b0547ebe4e6db350c75d516b5ac7752678da049ad1041b9ee89b784e10173aa2d02be3f3e0161cb28805aca8c800e0c24592656650ec0d0adea5b5efd119bd764e5687ec28d2f0f985568b44e9aa9a77c4be6090cc479259c2407fb17bfe2ef4ca416eadd3f521ba41a72c827c0f4937ce21271b74fd454aa02bc82b9bb66a714e6185c1a033ea54351222ffedd5570bcc4488005a5b3bebde3d93d247162b67714c8734a902f21c26f6b72ebee1b23abff2752d114ea2b9bd23a162a17257d5781fec700d9b24b653a08ec7617ca085068832b48234f84b4bc990dbc80ceb4071c8e9d5ae01df2c6eccdadc5d69c17f0c6d4466954d632e1074f0562645d53ccad26cc07379a24ee17c7ce37089b11f243cafc50eb2351fa51d56ba584845c4cb15d90b9506ab4ee2f59868d00e73eff7c532945185f173764fbda8bf066a3afc7fbcf369908216353e075062027d2fd6ecb1548bb9683137d018fe8345c989f84b26dbef78d45a9fb166217e2e0f93993473d7b55e2a22f327d8b0f01e0faceadea8004d75dd9c72a517c4154496f769021512db2e2650c095e4a4a7734a2f37994d0772cb3f367c37d4f08cd321c0078756568285af9bbca6d90576dab9169ecad8cc04b4522a12447f0967ee1ae04927f5ded0e2d7c180460290f2c794ab3767c75058660c98b7861b969ea8e324d95c16786f24453314a2dd9bdf1642c2480f99f3a76dae2134eb3d6534379350b1ec9a71b99cb88d581ff8a4caa11120c191a1cc02a9a663634ba0d8209f562862544118fd9dfe4c6ba6bd12e7c20c4c26615e9909fa14623d159edbb071f2cd281a7e4ee75c59bb715ee278637e3b2e8354aa00c13f092f8e883c72c6f96b4164fde6f8e00b16bdf618007639b9d0e0be7d2853edd211b2279fcfa0b1d1e0553f5045f8ed5a7fbc412894e8ddd2bbe54ef1ef3de5cb27aba64bd9cd4e41eb0eee9729194e04250276fb"]}, 0x14c4}, 0x1, 0x0, 0x0, 0x20040800}, 0x4005800) syz_open_dev$sndmidi(&(0x7f0000001cc0), 0x7b, 0x100) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000001d00)={0xec65, 0x800f, 0x101, 0x5fa, 0x0}, &(0x7f0000001d40)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001d80)={r4, @in6={{0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1fe00000}}, 0xfffa, 0x74c}, &(0x7f0000001e40)=0x90) r5 = openat$cgroup_ro(r1, &(0x7f0000001e80)='cgroup.freeze\x00', 0x0, 0x0) r6 = fcntl$dupfd(r1, 0x406, r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{r5, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)='%-010d \x00'}, 0x20) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x110, r7, 0xfffffffffffffffe) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000001f80)) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f0000001fc0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x8f) pipe2$watch_queue(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000002040)={0x2, {{0xa, 0x4e24, 0x1, @empty, 0x17a}}, 0x1, 0x2, [{{0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}}, {{0xa, 0x4e22, 0x7, @mcast2}}]}, 0x190) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000002200)=0x4400, 0x4) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x11) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x9, 0x4010, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000002240)={0x2, 0x0, 0x2, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$LOOP_GET_STATUS64(r8, 0x4c05, &(0x7f0000002280)) 27m30.781817922s ago: executing program 5 (id=2238): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000000240)=@ctrl_frame=@rts={{}, {}, @broadcast}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x0, 'queue1\x00', 0x800}) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000180)={{@align=0x8000000000000001, {0x1, 0x1556, 0x3, 0x90960000000000}}, {{[0x0, 0xff, 0x101]}, 0x0, 0x1, 0x4, 0x0, &(0x7f0000000080)=[{{@_ha_fsid={[0x9, 0x9]}, {0x208, 0x0, 0x8, 0x1ff}}, 0x9, 0x0, '#)\xd8+\x00'}, {{@align=0x2, {0x2b, 0xfffd, 0x8, 0x101}}, 0x6, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@_ha_fsid={[0x8, 0x5]}, {0x81, 0x7, 0x200, 0x2}}, 0xd, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@_ha_fsid={[0x3, 0x7ff]}, {0x0, 0x7, 0x1, 0x8000000000000001}}, 0x4, 0x0, '/dev/bus/usb/00#/00#\x00'}, {{@_ha_fsid={[0x5, 0xffff7dd0]}, {0x6, 0x7fff, 0x7, 0x8e}}, 0x6, 0x0, '@!#\x00'}]}}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0x37, 0x1, 0xfffffffe}}]}]}}}]}, 0x6c}}, 0x0) sendto$packet(r3, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r6, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) setrlimit(0xf, &(0x7f00000000c0)={0x0, 0x3}) timer_settime(r7, 0x1, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f00000001c0)={0x82, 0x0, 0x81, 0x0, 0x0, 0x1, 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r9, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r10, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x24048014) 27m30.034038026s ago: executing program 5 (id=2239): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) sendto$inet6(r0, &(0x7f0000000040)="875ee4a87738bdcf12f4d20f6f609164428d66063975fec8", 0x18, 0x8008084, 0x0, 0x0) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) 27m29.121607799s ago: executing program 5 (id=2244): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x20040, 0x0) r2 = syz_usb_connect$rtl8150(0x5, 0x27, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r2, &(0x7f00000007c0)={0x14, &(0x7f0000000440)={0x0, 0x21, 0xcb, {0xcb, 0x2, "90b4d82481cee770bfcd7cc5d61697200289931805bd8aba7d44d434c0a13075e86fcfdde51b2bd31ef298e074cb80b469f480081150568f2ecf0236a195964fc8f48ec0fa4d0e655558e6bf4aced31c94f7a34cc9e84bd78fd2346983681b067771e06b77333171dc2e648630fc0aabe4fc17385f1a5ae631526f1474e17c6ac7e0911161752a9fc90a48411178e1c2397425f672121d58ca3a50073ba1bc51facaeaece1465765a156db60cc595e37cf258b38352174976291659393561364e95b93279fa97a0160"}}, &(0x7f0000000680)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}}, &(0x7f0000000a00)={0x2c, &(0x7f0000000800)=ANY=[@ANYBLOB="400ac90000007e8109df6b00175bc181eb2df1f9b17f3229c36629bcae5aee5974e3c0dd9f6aa8a591351f6b99085da4ac79a180d1624a9ab75356d642f84b292e6ace683dfec8d780d8f0890bac1a9347d0d2e7ad5b5747633e185b61e0a27bbb315db9b1ae8bec62bfcebf76c99a0064a5a5cb31f2f8911f1798b5a01b426d750e8b715c7d8b7a09a47e5def120219608daaeafb945e355fb7a17dd19ac433fe0244e1f38a0380e420cb749b83b0ae03851d11f96b5f7fcaab59c5a8b4c630f8e1610b48ddc2c6d08de3b0e1b313"], &(0x7f0000000900)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000980)={0xc0, 0x5, 0x5, "90431a42ee"}, &(0x7f00000009c0)={0x40, 0x5, 0x6, "9040caa07430"}}) ioctl$SNDCTL_SEQ_NRMIDIS(r1, 0xc0045103, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x48100) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x6, 0xff, 0x1fd, 0x1}) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xf, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x80000, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x180, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x0, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x4, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x101, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000002, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0xd4c, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xffb, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0x0, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x401000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r11) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 27m27.472758949s ago: executing program 5 (id=2248): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x7, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x4a, 0x0, {0x7, 0x1f, 0x5, 0xffffffffd3110f4f, 0x9a64, 0x8002, 0x200, 0xffeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') ioctl$KVM_RUN(r2, 0xae80, 0x0) 27m27.176145994s ago: executing program 5 (id=2251): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x44000) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x28, 0xc, 0x5c}, 0x2c) 27m26.967609548s ago: executing program 33 (id=2251): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [], {0x14}}, 0x28}}, 0x44000) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x7, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x28, 0xc, 0x5c}, 0x2c) 10m14.21857803s ago: executing program 0 (id=7161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x24, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) 10m14.123359127s ago: executing program 0 (id=7162): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) accept4(r0, 0x0, 0x0, 0x400) dup2(r0, r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f0000000380)={0x1, r3}) ioctl$KVM_HYPERV_EVENTFD(r2, 0x4018aebd, &(0x7f00000002c0)={0x1, r3}) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f0000000180)=[{0x2, 0xf, 0x1000}, {0x1, 0x81, 0x2800}, {0x4, 0x9, 0x1800}], 0x3, 0x0) semtimedop(r4, &(0x7f00000003c0), 0x0, 0x0) semop(r4, &(0x7f00000000c0)=[{0x2, 0x8001, 0x1000}], 0x1) semop(0x0, &(0x7f0000000300)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x3800, {"e6a3785ef3ea62186288f8d2b35df471", "d35c65ff7462d83df18224e8fe7e024f", "82e70a363e66af9d666e017c542a839d"}, 0x7ad, 0x7}) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r8, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x8000, 0xf208683}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000015000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = msgget$private(0x0, 0xafb0e20fef6483ff) msgctl$MSG_STAT_ANY(r9, 0xd, &(0x7f0000000000)=""/49) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000100)=[{0x50, 0x8001, 0xfffffffffffffe52, 0x0}, {0xd, 0x0, 0x0, &(0x7f0000000040)}], 0x2}) 10m12.380243676s ago: executing program 0 (id=7164): newfstatat(0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440), 0x6000) r0 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)=""/230, 0xe6}], 0x1, &(0x7f0000000540)=""/237, 0xed}, 0xfffffffa}, {{&(0x7f0000000640)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)=""/13, 0xd}, {&(0x7f0000000700)=""/241, 0xf1}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x3, &(0x7f0000001980)=""/118, 0x76}, 0xfffffffb}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/246, 0xf6}], 0x2}, 0x8}, {{&(0x7f0000001bc0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001c40)=""/200, 0xc8}, {&(0x7f0000001d40)=""/104, 0x68}, {&(0x7f0000001dc0)=""/5, 0x5}, {&(0x7f0000001e00)=""/208, 0xd0}, {&(0x7f0000001f00)=""/202, 0xca}, {&(0x7f0000002000)=""/8, 0x8}, {&(0x7f0000002040)=""/39, 0x27}], 0x7, &(0x7f0000002100)=""/199, 0xc7}, 0xb2c7}, {{&(0x7f0000000800)=@xdp, 0x80, &(0x7f0000002640)=[{&(0x7f0000002280)=""/24, 0x18}, {&(0x7f00000022c0)=""/102, 0x66}, {&(0x7f0000002340)=""/250, 0xfa}, {&(0x7f0000002440)=""/107, 0x6b}, {&(0x7f00000024c0)=""/245, 0xf5}, {&(0x7f00000025c0)=""/32, 0x20}, {&(0x7f0000002600)=""/47, 0x2f}], 0x7, &(0x7f00000026c0)=""/212, 0x133}, 0xffffffff}], 0x5, 0x10021, &(0x7f0000002900)={0x77359400}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf\x14o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x7e}}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r2, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000380)={&(0x7f0000001880)=[{0x3, 0x0, 0x0, 0x0}], 0x1}) 6.088931793s ago: executing program 1 (id=10295): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x46, 0x0, 0x1}, 0x28) mq_open(&(0x7f0000000000)='\':\x00', 0x40, 0x3, &(0x7f0000000040)={0x10001, 0x4, 0x80000001, 0x3}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020601080000000000000000000000040900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c000780080012400000000205000500020000000500010006"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000000906010200000000000000e1020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 5.489515366s ago: executing program 7 (id=10298): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$l2tp6(0xa, 0x2, 0x73) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth0_to_team\x00', 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x810) (async) connect$inet(r1, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) 5.431935894s ago: executing program 7 (id=10299): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, 0x0, 0x0, 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') getdents(r1, 0xfffffffffffffffd, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) socket$inet(0x2, 0x80001, 0x84) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x6, @multicast2, 0x4e22, 0x1, 'wrr\x00', 0x20, 0x1b53, 0xd}, 0x2c) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x8, 0x1b) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x45, 0x5, 0x6, 0x0, 0x7, 0x3c57, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x100008, 0x3ff, 0x80, 0x0, 0xfd71, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x5, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x7, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x6, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x800, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x4381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x2, 0x5, 0x5, 0x1, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x40000200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbb, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x81, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0xd1c, 0xb, 0x5, 0x4, 0x6, 0x6, 0x1, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0x5e, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x6, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x3, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0xc, r7, 0x1, 0x59, 0x6, @broadcast}, 0x14) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.209534158s ago: executing program 7 (id=10301): socket$netlink(0x10, 0x3, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9, 0xffc3}, 0x0) 4.945453607s ago: executing program 7 (id=10302): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) eventfd(0x0) 4.88008124s ago: executing program 3 (id=10303): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000540)={0x11, 0x1, 0x200, "d30580c9043bc70900ffff07050000010000fad3000000000000000000000008", 0x32525942}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x5423) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={r4, 0x3, 0xffff, 0x4, &(0x7f0000000100)=[{0x25, 0xf72, 0x3, 0x4}, {0x0, 0x7, 0x4, 0x8}, {0x5, 0x0, 0x3ba, 0x3}, {0xfe01, 0x8, 0xb, 0x8de8}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000a40)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r9}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0xffffffff, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 4.688740927s ago: executing program 3 (id=10304): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r0, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) recvmmsg$unix(r0, &(0x7f0000006440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xff81}}], 0x11, 0x10002, 0x0) 4.464983012s ago: executing program 3 (id=10305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) bind$qrtr(r1, &(0x7f00000001c0)={0x2a, 0x1, 0x4000}, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0xd, 0x6, 0x601, 0x0, 0x0, {0x7, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x4000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r2, &(0x7f0000000380)='./cgroup\x00', r2, &(0x7f00000003c0)='./mnt\x00', 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002140)={0x50, 0x0, r4, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r3, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r6}, 0x10) syz_fuse_handle_req(r3, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0x0, 0x0, 0xfa0, 0xffffffff, 0x1, {0x8000, 0x0, 0x0, 0x0, 0x22, 0xf7fd, 0x3, 0x0, 0xfffffff7, 0x4000, 0x1, r7, 0x0, 0x0, 0xfffff8af}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000027c0)="d9cf539302536e60479ecaf012fd80816e33b5b31bc2e76fab1942b8070f75572b73aae90d9691199a2c031ed82d5637429305aeee2bc5bcb51b1872ddef1f0a8ef7e036ef2c0b8bdb9b4b3901128b0d2e130339d5ecea75dae21754f1d50b4f93c6481461efefeef29e393063fafbfa50ac36fe24cd3d9639d72ba0d8fe1f2022daf7e59aa29351e58730c3c2ab6f4747f66bf51373ad60c5ac3f69c224c42dee0c5c0a9a82f127e9915e179b4e3d4ef06b1f1cb080272c668c71ebe84cd18a2e3918c83266fb7a9541dcb2de49ae6c8699a2e3ed8e92512e29b36dabd5e6af75f5d555fa5aa59c158d91aee3b7b4f1d8d2614c98bdff334794b7a8e8ba94671847aa2a960c2eb98b98407b5663fec26d55970191bf982fee18c51de602dc4362e4536bdceb038addad7316310f8a85056236ccecde4755f8fa4ee2f488642958f3a82d5a2a22f04bab00c28c1c5c3b7ed5715e6854463663188be847ace2adae30d52e4380d5e3be64604b4e0574de1dbcde1dad9deaa8fedda026d0cf1cccb2fa47ea1eaba99bbeef129958a73469a7e5fe455989089a82a503213a48c831c0cd807e0a9a88115e338f97ec9616bd4051cac36c835305ffe4891198d3adcdd034a64a5c6977cb6fc2a536bedbe713184ed7759df08fcfdeeabaab45c62b726c2ff48f0d72f1f58eb27aec7ec5cc118e62846408d81f93fc93f7675bc186911bec5135dc3dccac802fd4f8e92cddf9a7a2b3aaf79fd3fc1363bca244df9ac86c4077e768ae358dce823092ea460d6cd15136808061a1c8f83b18834d6f97c5e29bde4cb524e059dfdb86debc137dc702d3a78fde733b17a1934267c003f6360ad16873b1d7b48dd52d089de5c72e50e163e4f1f12aef80fd011c675ac35d9f52c7a6ebb43eb784d502fc785327065e5fb7a83515e3675eb6d762ef8977b1c260881bed726414e435cedf0534c555f745c306566af41063f37687816df8e5aa8489662bb35b7246a43914ed0c94cefd7a0633cb189a00b0a29b627d34defb09ed10337118304175570fad7d56b50d7269d7240703bad2b7a1cd1b3c1043f2bb1deb6d1fe6f90009255baa93b6981076fc3b0801b5036a3238f21abd44bbb60b33c06be510f21a693def159aecf34c21610f246576fbff63b681efdb68d1f58262a7a731db25fdb6558aeafc3b0161709744e77709b55727ed97836f99517a960fadfe3e9c0c2cc6afe20f99cabfc6648ba1d2fa324a06a2a59a4aefa0c20a903435cfc1dcf4b4cd2e71184e77e4496202889492c9fb93af7f24e4f000b8515e5208e4036038d4b30ab799ee0ce5b33098d2e78441b89a78fdc0b627b2167303281af24ad63fd7cec854c1d687e2d7036762a613c99d047023445fe5bc286080f8c1f15176c235bea0b434bb256947a3eeec558cfb21cac41b5b30e7c51fe7ce40ea552ea28bcb31ea316508d22701320ce8afd9a339ffffeeaf6d43676365e0aba386646b2ccfdaf4de28d9992ccfce5a0a3608d5a0c2f954f79b5b601765b850569f31d867f08e15316d6ea035e284e5e70bb009fbb8fa494df145bdc1927d5ce979c4b4d561d756c18f6c9b774b2238c257f6de700940296b855378648732a503883ba868d7d425d62d3535ad2fdce16bb64f227dbcad0846f465bd0ea92bfee1d549b6aa54728b0603a1047e805332fa98c3779b4f76464d1e5af2031bbd020045985bf64670a5065e9ceee06754670d0ce375c5c0d4d0e5bb1b9ae58229cb0d4e5b528022d9721fbcb30cc287c037a1f70635de20ec9502a4bd32d72ba82c0ad9c7f010050092fa6065ad1b172c914740c023b2efbea772b2d200b8d285bc73146335157fa339039c79d73561dfe7de6e9efe6bdd7175575c5db79435bdde8d7c4e39171519080175f2106e8acf90755ea2ecaa1e915c316d7eb193f0ff6f5206f2aa0904de56f4e0a8dece388fb864ea2ec81f089aca717fd42851837ee2a3a768e8f8da46303f057246c586e941c969ff36a8cc8e5615b295072a309183899c917420341137f3432f661e7e416fe559deff0dd1420a0e759cf37e148f01303934d0a362ff5855e6e919b867a75ed4fb78e26198eb0af0f5ff5ef9709b8a37cfe8d72a92ee45e8333300e34884b25fa01856e530a1fd5710bd6b5e21d9c81ca4583f09922aa42ff1b0a3e607c47a138e1a808b8802c14821127b201f4047849216fffa81b812694839b4d7bc39e86387dd003985a3e899e858a237b55aa1d830e561342a7e26aa1281c7fe3824a93419786f04db307439e93a12f83ccbb9e6a4002eb7dc09c2c13940a6b3c6fde81f2ca92ca909f38dc337480b44aee3333ec9555b97f9fd78f34a1800f720dd8919ac7d08abf12e3ecc9b668aac7ed73fe0fb41662636e2bfc38353cae9af15788f39a58d2d1b7e5e293900f1f99bdb2ae9aa0db461e52804997b10143ea04d51592617a5d9e48b6bdea95f4ea1eb0cabe710a4e1ba36bec237262aad8ed652074086f26693d79b353a4df041aa0f466687a957c2ab58bca701f9143cecb153d460df1bf38e7fd878c38ae4b3bfa309c5c0ace910c6fc2e0820e510f3e375864d536707dbbfcf519dce84e31f3601874736bed95e2313f8c2a44cf51b2af8ecfb99df65c38121bf81ca684559f3a7652e82fc0a8875046e2ad59e96562924ce13f9a6c7b31d76847c74943af978388270fc8261beac4d43f6293d0f7d6d2496c2a1ddc7c139086f55d45102ad36b4fe6a0667e5951dc5fa2fb3beacd5157c0e4c9d82e7ec85b892132d4235e6bae91f687f81e3af910c71723fd117cf2988543f1518722dbdfbb09a836ea36297bc83f1f9c10f107f1f15cb7050f025d48b2dd615e6474cad498cd374cd2d55dd1f5adba3d2fb129aa50f8f7869b30fc0eb7f2cbf66a86594ed63ca1d9dec93507bb3840d95afbf568ed82e5faca49d1a6702dec0388f4ba9b2061ffe1f430a637fffbd1d3b3f316dae1439d00185c667bbb3e6e74f15bf8fc51150d362b8533c03c009a0f11e6e55acc5ef727b0b2b60b72178bd9d7c961078c5b64ce81ab6756a6b53a50fa6c234d588edc5ae4811b5b220e6f8da839b444f35dcdf82e04732c8c56ef2863efcebb72f1a67561801e55a5e33847ed7e9714e393319eed1a412e035f4f19eb09fc98f7a544d6ee8e8acb7d13e9428ae8cb9849935aa87dd5c7e0dbb92086b730927ba74a4e49b6e9b8274459c9d77caba02ad5de167d7db9da3abcb0dd1574d6e838f094f57c7971704f398e914495f292e180438c8785bacaa9b1668d6cd1b094bbcf1fc452db12b349dcd0cab243a88a4e1f9b7d8bffa46882712eaef641a498168743e4529ccd1e1b68640440fa2d30909e34e87c1432fd6ad223b8f3f12c0184b6d1249e79ea40590d721e8bce5adee2e24897a572ecacf6a7ce124a7ae43923e80e59b5ddbfd2bfbb8bebbadea669186735772a8cd7f123cf957a5d138a6ae3d12da28d59d0a3f1fc35f4d574ac01dab38f982adaf0ba84a89e02f8f064deddf790fd2af44fac9e1f42e9bb951ce154d0befe8876761212f28cec1f6e75ad9fc7bc373b9044a8014d05d70d02cad12960f48f5e749a45081df4c04820de87ffcdd10a013adf019b1f86890b944d32616a336928cae5200245b186bf8f9f1359f8b4309e0488435fedb2b8048fad805fb56756be89049e7b78ec6ceba35baa8b9ad6a08c8e4cfd1b5fd28d136b1c7930d3be80b737eaaf13b91291340223c7918985bb83ad0031b55dae2a138a4a6ad7b158ab0367bef20b914e5b7987b3b3bc75c84351ef44931d1493d1ab4f357f5995e7f05df673f7c2bb9d5fafadf5814a6c04359f76f343bc623e1a7ba91c86cbf8de53ce129d90e002864506cc69f6de39bab758dd910c2c9c3477dac2617c5b396c5f7ec66b9653434993e417b86a49e3bd19d31981d13411520a844912ba90fd85a45530137124583c2e3afcd186541b0779e0de82fffaeb463cadc6c7e36b930f6ff71b8bfd14ea6e90741590d62a16af0a57a755b0ad262ef401984b276cfd436cbe63cc692f091e396f451219379a03b11d98412bd2d542c3d98753767059a1441e366877a9cc3cf7f1ea434579c5d93b0a38a839d8a25a673726950557d5060d413e77a9f31beb0afbd42ef639f785bb86261af8cedc6bf09f2211f1d347e354330647c7044bb38a134fd74bf69d7a3a8d2b148f5036bfee49ccee861f7f547049d2745e25d01b320b97aa913d9d2d7cddb862e69e62211203619b4ce916c1502a458a87a3fabe8ee2cefb95646993122d3ea92b51df3ef4729a80c0c17f6ad796bb0ab5a0d99baf2e0eb4028bbe9012fe25e4056d6a5d01a2e6febc39d3b33254e19917a898ee4f3d0295a5dafc802a5436c81a1c57d42a258106e5b6e9053770ddc968a32a023e628735eaef19247f0d030bcda624d02b4c2a163b8a3c295235a7ed4939c7958ae4b80f53444163a28eed37f3972055388c4f2cb4bfad3ef205ef58ba7f8a2919e6c649ff0e0c159411c981c797a5c3ef9aa9647ebba14e34348ab49661bb394793facc9d9cb9e87fe27ff36326d6c8d6e53fc9182fb51e316277ca284872d7f3e07d94701f952ad81d4a0429bbc3fa3ebc46028242963820d48caa6e87ecbd9a99b72547c2b15a233f6ed8a7ac37cc69ce183e452b4c59f118a1267bd6ef2edea2681bcb2cc5a4fa5e8a0eb717dee407583a857fff6a125e358bc6c407f3af53de0cddcce5e49b0c1fe5edb5b3dd00c9019e8ef0df374c0ef0bfcd1b5d55fbb841ddeb40c973f2e84102af0d8a053486877531d6d874cd89bf10743025d2531b181da06a5691a61a30b897e82480043341bc9b7ae643a16ace0aea4cee05c0c95e1d1546cb5ea786a95baff5d0ae8e3aa231fdb6ec5168d3f7ee22b0d0b5ef3334acc29c18bf625bdc85a6876ba47f12def7614cf74dfe06a64af7ad3f53decab1388532ddf8e0286a1aa1a2da92da0f2a8572ec5515a27c1694f4073596def602eb4c3c79c841ce46ff75693ae3dd5cccbbb8f89fb6059d398735ece36fb1efa9a56434e2a576d71c2d3086a296dd78ab80fe3b4a7135feccc2e824972300efaef2dbc31d2cd6e016987265362905b2c56959b6e3b734c5419a7d81a0626bf3880d33e35a7259793da9eb1eea9c4a6e52c2aeacb0244b99934bb84fd725b452953b7bcd956887cbbf9315e1aa72e3f5f206d9ea4e09c40afbc9d0307112cf4145e7527667767e05918614f6a4b22fe65a5502dc2fd086285472c4431fe2ecf0b1e81cdcc010d065d703bbc8e5b0d12b5d5ae85cc832119803b9cee05f013f63caee4aa58e6ae07ce3ee3e8edd849c5b09eded34e00cfaf617b2c5213cf3acc0d5647470f87ab9c435a85c9bad098669af676a07edc80c8648fb85e724643b7147895955a27825e80d3cfa5cc3bc36a71f72bd83f9f0d6e94ee65578f97a8acde640010dc075595348d0ec93f88161cd35a1752e59554dbb6cb0f70a41e3c3af69eab11c684dea74342a3229c96ccc2a0bc6425f2fb463721a6415b20e096afcc66e9ddb72652eaa239202d02ebb3d0c9d2abb7b37a7c6cd4776672dd559d6b202dfd3bfcee905d3f0d98f841d71ebc0efd4d831ada3857ec56e91725c907a61c435a5cc4022b8c72af3705e5854796465f3bef5519d9a8f865b43d1ab38dbe9490dc53eee7e5c42509ba1e36053448110665930f93fc5be77de3b1c849e5dfa782f24b8938783a441b7b895dfcb3e5ef2c31b60c2614ea1a258593d418c3ccb06620372b74023d90bff82e18b93871a78b8c64093a07edc22f4da29b09286f7efa4b59b8cea2940f3f099201bd379b543693c561372e17ff83cd8223ac78764a871edfef6ab1394aae22a21ee2f40805b22e340d27ddb140b6a1725898b5c75df700b2504a69b8f9f5aeab858db82167db4a9e85cb863fb7d0bc69a032f9adc0f68fdc8981e87dd55c9db9d56eb0c9c1b5c96c77703ae477e6e6b2fe6796563de13b832b4072cb318a07d7c0ea6fecd3472e265f09bbc5c12e34347841ca70eafe1b1446de9594a229c4cfe548f2ecdf012f80338b279480c20dc12f63fa49a6872dcb0b7673567349cd4dfdea474b84f8afb548919bfe81715fad878bcbbe0471fafeb7192d715b55e213eee22b79a15fecedbb4d8e82792caefd1f2cb0751f8b35e54bb841d62ba6173a7be5cfd80d5dcd9959887d03103b921c623b8945f19c7ea24c0cd37171844d8852bc12126dc0279dbb6f3215c9020c94e9629908819a47895c8f855e840f5c6dad1c0326be89d03f525eb9fea75f4c3e422e39968667ec27a5db61baccc69afbf2b64fcc08d7487471de5c9f48e4cc41d811a9a7686cc790f055187d271b098349cb293713a2072e7e7177947272e528b857993c53bc24e64db1f35dffe25b361f2b11944395b6cf8fc34a6a0b089ca12483b4131add3d2b6fc4e966a218ba4e994d200846f40a48a643cd5fac5c60f3160591648edf5574b7731e0daeb8774532ce22121d40614f1791c225d70f93fcc77ba1c0097db3dad4a011b38b334ae5035374c27b851f4578481329540e58e08361c4775b00a856d2d2c2c21e8bc5ef181521787123528ac960f7ed97f61822a01688c3798df85311bdacc2d5c231254e22d340940dff51c3637c478dd1b1f877d58b81200ae2890df5f2c83eb0f14dfb7ac98ecc192d4d5ed4f2603e9a48bea86b2c995427b737de2218a74d6b87eb24cc1aaf5a96a1d4b7ce065834c88d621bfe92872f13555778e72a7189211e6bb5707901189d5aaab1d3f0aa2ebb4cfb6919d9d28ad272405077401fc7a9c17110d44c76c8e449b59ca9a9604d89cbb9b52fa45de981773688180ffee9b33420dd85f164abbd05b47d7339e03be2ecef86fd3f0c113955a72ead25644f9bde7945ba6880c238fee666fc35927699f57a48fd9c1b4aa8502abbec9e8672225b55cacbac486f0bb6f0e86dd044337e384d7be4d325ea6c210aa4f6d25243790a0604cc8f2a23657ab3a0a04025ef83bf5051ff97f2ccc9f34b09053aa8eea50c2ddd47ae99deeea33b118af80204d0cc548984c0bb2a4abc7a5a314563e58c229b7abb7e995a7bc473a71138e1aa59ff704dbdd59c4aa21ffd643c2c8b6791363b7e1f255110ff53a7b531e6d1d0d65f619aef06ff6904c40085128ebd70c8b73fb2b8e5e2aad347e41fad16890394eb9a83b97cb5e29074390ab427d07b560d1584df67b7fff0aff6a800ad8171cfdbec7777c24520d0a4526671d038c396190c1b989183a2c708e46a7818316ceb3d03fcf9cd835eff646dab4f62d8ab31e78ec76806e20f54f0f76e894c4ae3d315715b5c2f3b28c47f6e64067a7efcabc46b1c9df6f1654bbc399b671caa62d676d182a58c99a7d6404e54b254cc593968c3a4c5c11277eb0e6c931c2e8fb64686908ea1be0a998745760dd44d178ecac0e569aafd31de7dd585db511fdd5afdaec3b1037ef72752cfd63053d30da3dc7e4e9320fe69aa49f3e361e184ba5c1989ae100aa0465bf288609da8fa2481c2245bdc637dd318965223d47773cc57b98660aade523a0a610b2607375564f48b7f0f669d68d64c84652b08110c5b9908b92814176696cb544728ddd27237a38f3b915cf078dbe37b7a5526571cfff30f928325f46a1c561407585bab97dfdb2e5c4ed8496f9567a7b5011754afb06176ea9cbe6cc5ef64878b79107d8836fe17f3f2f74dc0dbf82d79fce19de7b661e99b4a685ca9072abaf2eae7c1cb6b45414fbb8beb264ed1a6bda64a8944ca654eb4b1c140e10bbbc816ca5832a3a1b1129c515c3aea2e154f782de3de188096c7173bca3dd0e79e00877a7cada463566403b38f402da25da10670767179c291632ccf4d2a13cb339d95fce89c897260694767f5bfa37f34ff2e9aeb95abfff44e16ade09c1ea81ed510ac551adb58597a54011b2978acb6ced4b2373f19ffbdf4fccdcd3c3ab2786b81c968349c74edd0433748396877961ffcfd5ac4a4420d03f1d58163f0e1dfa77bff68b4148dc7ab4f443b0bd714ef9df8270672359b73c6c8df0754fe5226dbe1c0b53e242a076e8c6f7c2624c4e0147d337abdfff906da036b6aba92e1ab9d80df6db2d6aa4c7bf5b6e3f9df4bcf329e5d62fff2385683444cb5586e844e361468f5ad61f0fb4cdc7b19c823f060acbf8453a57c8674c684f7ad8b7512f394bddd345e5c152c5a3233d8c12e35335a3922e19858063acc3586591bd9d5789ef05a22ca3dd2fcfa27d0950f3d8ab742092919172b3fb9e6fad509b4c93d0679753c6e38ad39c9b5348058decdfd25f45bebfd75f73555073d06059a219ffe85a405050b4dbddb3c428fedcba6e4fc6b4fe2abedeff98e777e5441e87fc4691e8099a654e82605315ecd39ff37087831cb4f77db816c464e0bfa238d45e176fac4ff5e5bd72927f3d62f7d702a4ad68b07e9d1c29abe33c097a086e2bcef18283c5b05ecf4a289416b605ce295755c25f2a6368ab1cab9dffe1bab4d153660d78bfa08fadece67b2d11c9525eed52c03372bbca45ec366e6e99ae7deb78878eb25d002dcdb7a9e68b97c446d666e406c919f7b1b14befec7a59a9082c859f0254420e4ad039e478a88c171806aab7c36443ae36795a220b0abe911771bf953cd0c625bbcb8dc5255375610f3e3de8c7fa7591a86b94300e1f0febd29c56cfdac6ed799a2d84d9959bacc46323c7e4104f51b767fcedf20080c90ba0197d9819268377f34604f63d5de7414e468b4c397b96b2e5153dc741bdf3e6957a755de88de20695234dae69b5027239c3afbaf4aacfc3f775a951e23c0a36cb723a2b65855701e6e37878e77f7dfd9ef59530e1425971fa92f02a57a16edc44cc4751dd7255b5a4b17797509243926826205d358fe916d3d9652952f92d971937715b10dc3ed69e1cf6531f25565c00ba3979cf51e9f8e01d5e154a1d42336d64e110bc04cff5151c66139f47d88936fcd988c8e83a720d6e559218cd63d19df05b8e2909e3ae8455791effc2cc4b135677ba513526007d7432da2d64ce5e18606d6734a5cdbb7779ce69e3314c9bfec5ef9c637cf5070f1a8121acfdf14e82008b41d315e18e5b451cbd948d9a29ff78c4e1c8bbb814eaa7419365daae728dd226f2e39d327a4dc8b1d91a99b381c3755cc493974dc95608889e224a155c1443c3880544fb2078d3536d161b2ae6f129b200e053b005d0d67c5fe0dcb39c859b3c3728eadcceb07d0343304484fecfb553ca6e8279d37dbb75dc7810348c76c63d8ff98585ded4467bd456b5f104a9bde4ea0b8f795b004a00325c993dc487dfbbbbfd950248c82a35f22c0023006cb4cab37fe668289031b8041370f28d6a9a52e6f17898ca2fea54c0cf2a96b6308b431bc19bb5bdf4608be77d89714a369bde067cae3543ce252e1965c52905248f5464304ead7f7cc359aad43cda54b88454f1f0b57b3fd738ff09ca390509452cb84ea616c427f7a56727b8432ea19baf0df1c29ed173d0786c66e6db3bbdb0cbcaeeed592eeae5e208cfe82a75961e2a35279b8100d7e6dae21e39cf1e887fdc37d3d7670c632d66c563eddf26caf06ec1db3763dba35be5dcb9add81e01e300e775b2bfadc1e3fe445501342b1a7935133c5840891f06bb69ef817a826e401671322ac9498d547d986e1050fcbc76d3e94a7f6281503e78b2e7a1da86dcba1d00ad0e5706fcebc8549da39adc67dcb4069835d5ac1cea07c9089657136ab38ae79866ea9f6ca39503a7c9ecb1affda1d663f7f07253daeab39b1cd3d582046005ad5866a725612c4a6836a7f8866a15a01068f033b28bd2d6f8f2bcc61141921d1dda2b2778ae3cdb17d73e1aa30990bad15899b5487d70b466fa849e31f813696f36e89f4ef8134299cba529541e1e330f94ab149654a44bebf134b6745c0db6989490980ff2680c9f0c2b1d90890b2e0ae9c8e567a83a1469e178091643b5508a86ef78b64a9d7932845c4aabe409f3cb02f529fb9aa5c76eeec4c5fe9fc609b6c39619ef178f598c39a6c696a213ae868725f9c250a7dabe793b47edd638e4c9ae3f786236bac8a3b465671c67e6543997eb15c779ef0b94d228999c2d207e751aafa919c86fd43128cad38a20e11ae12dfcb963b32f795a5dbae16b6dd29be1e3614b82addb2d10344a986d61c02c03426aaf7f5fa72e767859b8654b24c92ff6d128c3e433e6ea69f54a20aba4790e9672e54762f30daa326de44b2e5cac7c7d1e47a9b9096831e06bcec4cdd619e60d7c3c6d74162ca85ee4ba5dd36282635e322a8169be5f1028db897ef8a0ffa74e1fd06f48f171d6c8113452cd4159d421bdf0ed0d1f51dcbd001994c551b713195863592eb6f4601db009fb67bef8e11431d00fdd9365bf99645ad428c4fda537d46df0ca099d935b482f4672e9e775fd83991729260bc89d9006385ca8041c3d79d2c4580364767bd2775a1d4f6c06e945ad09b5be341cc90d4312d1306cc6c5a3beafd5325f65bbab2923a0a22335aa677a1de15b8d89bb4a67683f472d1b5474b189fb50c2defacb17427a726d2a6a59679b37a434c21144c1851951ccfef5a2ee12cbad4c7d418d6ffdbb934ceff935df88dc769ad786f41dd1fd04b0946cff7222947ca47505c5fdc334d383624cb4919d89ce8e5350577b14738382fb6381f4b66430a751dceeecdb1105ced9d275987eac14094904d2b43de37822a26dd6f67e6dc1764c514b4211a83eb0edfbb8a75b6c7150c015470428199abe9d9c38d834b4197f66e45fd8b6e1ef6d8235cfe46068c698a9ce68d8a85190e4d14ee2eb31513d8ffd3096b659fdad228b0bb6302d61c135e8c2b67e5b54111a7f0c033137af8d2d12d19f0bd2e8daf7306cdf82d63f3ebe890c7241db474f38aa6ba429dab5cc0a06c4f3384d912410cb4acce6e834c3f4874461d78f38deac05058010d17a333916fabae0feb597c6e7aeaeccb672afee7538250780eec6746aecb2a992a845c0f882785f7bb488e69405b8721ffdc18cd8cfae235f8350e6c5ccfc23e134a834f6bd08ccb6493ca379cc8c55e8ea4b2b1147171f987f8a14654cb7ccfb71b9be4bb6e91dd29a9fe4afb0b580bf77c60356b810100ff7c214ce5a38162b619929bfa4cf94e79aac0e0cdfb6ca31e30339a8426dced157d186bb92063f2d51da9d60baf2cb95e9ab65068f3fdff840a30a3cfd5a2b8bbba4b04be36f1f6ee4663143a8ccb1e60a5cf23ea0dc131edb153cb6873c632497d6703f04dac05cefccc219c12bc8b4c53eb5263df4bb52f0b18497a6db3b84e5a5404e452d913efba93a7059bbbbe4de94e5855ab289d69fbe5002143dcdb23f126e9c8b5d4e91e8c2059a106158a833020c2ed256c08aee35df8c32f9e09ec2d1a43b18c7427d70b0907793e6e0add1f07b411f24875b85797a564b7e8dd608163ba91cba9f219636c87c9ea714cb2bcc7a1d9b2c40a9621c81454fc4cb0ad74b34519f32e8152c1c4b192cb5e344e37b246172ebc5afe9ffec7a171fe4087b1d9", 0x2000, &(0x7f0000004f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004980)={0x90, 0x0, 0x4, {0x2, 0x2, 0x7, 0x1ff, 0x0, 0x8, {0x5, 0x3, 0x10001, 0x3ffffffffffffff, 0x7b7, 0x2, 0xf29e, 0x0, 0x4, 0xa000, 0x3, r5, r8, 0xffffffff, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETFMT(0x3, &(0x7f0000000100)=@sr0, r5, &(0x7f0000000200)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r9, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r9, 0x40045010, &(0x7f0000000300)=0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000049c0)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) syz_usb_connect$uac1(0x5, 0x7d, &(0x7f0000000400)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x7d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6b, 0x3, 0x1, 0x0, 0x48, 0xf3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x6, 0x7, '-rs'}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x3, 0x7f, {0x7, 0x25, 0x1, 0xc, 0x0, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x9, 0x6, 0x3, {0x7, 0x25, 0x1, 0x4, 0x9, 0xa4b8}}}}}}}}]}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') writev(r11, &(0x7f0000000540)=[{&(0x7f00000000c0)="1234", 0x2}], 0x1) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r11, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) 4.436322747s ago: executing program 6 (id=10306): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000000140)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x9, "2a161d2d7137f20a8f"}}) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) ioprio_get$pid(0x1, 0xffffffffffffffff) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000004800)={0xc, {"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", 0x1000}}, 0x1006) syz_usb_connect$uac1(0x2, 0xb4, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$inet6(0xa, 0x3, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000000)={0x1, r3}) close_range(r2, r3, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) ioctl$CEC_ADAP_G_CONNECTOR_INFO(0xffffffffffffffff, 0x8044610a, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) getpid() sync() syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 4.250803775s ago: executing program 1 (id=10307): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7980, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x800, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xc5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x80, 0x0, 0xfffffff7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x53ec9c99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffd, 0x0, 0xa4e, 0x0, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x1000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x100003, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3bf, 0x0, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x10001, 0x0, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff, 0x8, 0x0, 0x0, 0xffffff74, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x934a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1b19, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x20000080) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004402400000f0800014000000000340005800c0001007061796c6f6164000e000280080004400000005608000340000000b9080001400000000a08000240000000040900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) r4 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000340)={0x24e, 0x70000, 0x2, r7, 0x11}) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r7, 0x1}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x221c0, 0xac) r10 = fanotify_init(0x200, 0x0) fanotify_mark(r10, 0x201, 0x1036, r9, 0x0) close(r9) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000001c0)='team_slave_1\x00', 0x10) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='\x98G\xcd],Q\x1b\a\x00\xc3(\xb3W\xd7\t\xabyw\xf3EFn\x94\a\x8c`h\xc3\x92\xe4\x9fC]CL6Y\x8fj\xe7c', &(0x7f00000003c0)='-\xd4\xea-\x00'/22, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f0000000080)={@hyper}) r11 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r11, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)) close_range(r2, 0xffffffffffffffff, 0x0) 4.061536231s ago: executing program 1 (id=10308): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100)={0x2, 'veth0_to_batadv\x00', {0xfffff801}, 0x96}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000080)={{@hyper, 0x60}}) syz_usb_connect$cdc_ncm(0x2, 0x75, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000082505a1a44000010203010902630002010000000904800001020900"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x54, 0x10, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b04f, 0x15b30}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x18, 0xc, 0x0, 0x1, [{0x14, 0x308, {0x0, 0x9e7, 0xffffffff, 0x8100}}]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0xc1}, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.55623081s ago: executing program 7 (id=10309): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) timer_delete(r3) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x5b07, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000180)) pipe2(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x1}, 0x80, 0x0}, 0x40810) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) unshare(0x2a020400) pidfd_send_signal(r6, 0x2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0xae, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xfdffffff}, 0x0) sched_getattr(0x0, &(0x7f0000000100)={0x38}, 0x38, 0x0) madvise(&(0x7f00003c5000/0x3000)=nil, 0x3000, 0x13) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r7, 0xc0045006, &(0x7f0000000080)=0x7f) 2.089706252s ago: executing program 4 (id=10311): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002100)={0xb, {"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", 0x1000}}, 0x1006) r2 = syz_open_dev$vcsu(&(0x7f0000000540), 0xc803, 0x1a5c0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000600)={0x0, 0x3d6fe80, 0x180, 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r3, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x7fff, 0x2a}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@broadcast}, @NL80211_ATTR_PMKID={0x14, 0x55, "19e289a4c0b04a2191a8ca019fe3ae3e"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "d72bfef0878888a7b2faba16052d68a1"}, @NL80211_ATTR_SSID={0x11, 0x34, @random="78bb99499c9ce9220c9326c4e1"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_PMKID={0x14, 0x55, "ffb2e70d76de92e8998447873906b37b"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x27}, @NL80211_ATTR_PMKID={0x14, 0x55, "b6f71e5b923d40f15e883479509d0286"}]}, 0xb4}}, 0x4000000) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="dd6dec07e5bb7044000000", @ANYRES16=r6, @ANYBLOB="00082bbd7000fedbdf250100000008000600", @ANYRES32=r7, @ANYBLOB="080032000300000008003a0000010000050030000000000005002d000100000005002a0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0xc000) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000180)={0x101, 0xbb3, &(0x7f0000000040)="18789e41e4d840ab136e59c22da9ac2fee1b0c7988f6d2b17db78435114b4b5a6d4ec363018594469e4b61b680752de6aad6376e3b82861f8bc7884db1ff39ede831eaa629eb", &(0x7f00000000c0)="466b7a62d3dd570be91a30433f4b850a21232ae2f15e720dbdd276f23ac5bec28902ced02e2197a561faba885dbf8c7d5153c4e48e7a174cbeb6b9de8fff51e6aeef9223a09ac4f09de54766801ce0455f4a2804641ac87f7d51b043d543fb13ad14916a02eca61bbaf4e0c465266cb3eaf02feb79a6f569d5d655c73f3520b40ec23421cd321412aa1df3ed1992bea8eaee748075de", 0x46, 0x96}) 1.959238s ago: executing program 4 (id=10312): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) set_mempolicy(0x4, &(0x7f0000000640)=0x4, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) futex(&(0x7f0000000100)=0x40020000, 0x3, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000003c0)=[0x0], 0x1, r2, r3, 0x2, 0x0, 0x2, 0x1, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xb, 0xb2bb, 0x3, "fe1d00003413000000000300000caa000000090000000000000004b427180010"}}) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/rpc\x00') getdents64(r4, &(0x7f0000000140)=""/117, 0x75) getdents64(r4, &(0x7f0000001f80)=""/4096, 0x1000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280), 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="02"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000300), 0x8) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000140)={'full'}, 0xfffffdef) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x1, 0xfffffffffffffffa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x2}) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000240)=0x3) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000001012302000000758c186ad4c96e0000000000001a00"/36], 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x4) 1.901011924s ago: executing program 4 (id=10313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x40c0) 1.804410816s ago: executing program 4 (id=10314): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000540)={0x11, 0x1, 0x200, "d30580c9043bc70900ffff07050000010000fad3000000000000000000000008", 0x32525942}) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000200)={0x0, 0x0, r3, 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r5, 0x5423) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000140)={r4, 0x3, 0xffff, 0x4, &(0x7f0000000100)=[{0x25, 0xf72, 0x3, 0x4}, {0x0, 0x7, 0x4, 0x8}, {0x5, 0x0, 0x3ba, 0x3}, {0xfe01, 0x8, 0xb, 0x8de8}]}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000a40)={0x28, 0x2, r8, r7, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r6, 0x3b8b, &(0x7f0000000180)={0x10, 0x0, r9}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r11 = socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0xffffffff, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.760763246s ago: executing program 7 (id=10315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x2}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x3000000}, 0x8000) 1.640032562s ago: executing program 4 (id=10317): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100200000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060108000000000000000007000003050001000700e6a0"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 1.233809679s ago: executing program 3 (id=10318): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x41000000, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x1a0, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x174, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5000000"}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x7}}}, 0x1c8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 1.225007275s ago: executing program 6 (id=10319): r0 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000080)) sendto$packet(r4, &(0x7f0000000100)="f257a8ea7b4da7384ae8095c0106", 0xe, 0x804, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/4079, 0xfef}, {&(0x7f0000001ac0)=""/14, 0xe}, {0x0}], 0x3) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000001200)=ANY=[@ANYBLOB="1400f6002d00010125bd70ad0afeb18fa2080a130000fbdbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x40040080}, 0xc000) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000001240)={r3, 0x3, 0x6, @random="7c9797bead69"}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001280)=@getchain={0x24, 0x11, 0x100, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0xd, 0xffff}, {0xd, 0x9}, {0x8, 0xa}}}, 0x9a52c044c3a8236d}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYRES8=r0], 0x7c}}, 0x4080) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)=ANY=[], 0xe0}, 0x1, 0x0, 0x0, 0x4880}, 0x20004010) r10 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r10, 0xc040564a, &(0x7f00000013c0)={0xf000000, 0x7, 0x1005, 0xffffffffffffffff, 0x0, 0x0}) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r11, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r9, @ANYRES16=r1], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r12, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private1, 0x1, 0x1}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) 1.07746095s ago: executing program 3 (id=10320): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) fcntl$setpipe(r1, 0x407, 0xc000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r3, 0x0, r4, 0x0, 0x7c1c, 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {r1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010068bd7000fedbdf25140000000c0007800800020084d755fd"], 0x20}, 0x1, 0x0, 0x0, 0x8404}, 0x8040) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="000000dbb24d645b76d2f7eb5f608fa5af33bf27abc5e161d225530fcbdc690273cf9b479a3993874aeb3cce40744bb2ea93babd9a8ae92424fb3ea9819a1fdf3fc8964aad0fc948057d52b1626f24a9c1bcc95e1bafbdde95764aa44d96aed62b8c2a3e56229b05f597491ac070ba38ccec04f3074f7f798f0d9d9677e68d3388d5271788eaed799d0875292135ffdadac46f5606147a82ba9e93a9f4e80f608ad2181788062e929b06c785", @ANYRES16=r6, @ANYBLOB="000428bd7000fedbdf25110000001c000980080002000000000008000100010000000800010004000000300007800c000300030000000000000008000200070000000c00040000000000000000000c00040003000000000000005400068008000600010100004600040067636d28616573290000000000000000000000000000000000000000000000001e000000c38c65b21aa78f52eaa5a55d2c353427ce854510d0fa2a2050d84c259836000034000980080001000000000008000100040000000800010003000000080002000700000008000200080000000800010000010000"], 0xe8}, 0x1, 0x0, 0x0, 0x4}, 0x10) 937.96737ms ago: executing program 1 (id=10321): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x40}}, 0x4014) 789.195865ms ago: executing program 6 (id=10322): r0 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000003240), 0x4000000000000e4, 0x41000000) close_range(r0, 0xffffffffffffffff, 0x0) 747.581585ms ago: executing program 1 (id=10323): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x73, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100)=0x3, 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x60000000) 413.436817ms ago: executing program 6 (id=10324): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x40c0) 327.179655ms ago: executing program 6 (id=10325): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x20, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff08004600002000000000fb02907800000000e09603009404000000009078006400d2"], 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=ANY=[], 0x3c}], 0x1, 0x0, 0x0, 0x80}, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x600181, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x6080, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) r4 = socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES32], 0x7c}, 0x1, 0x0, 0x0, 0x1c4}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x810) dup3(0xffffffffffffffff, r0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x5, &(0x7f0000000540)=ANY=[@ANYRES32=0x0], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000000), &(0x7f0000000140)=r7}, 0x20) 144.056561ms ago: executing program 3 (id=10326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f0000000040)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) r4 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x4}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x800) getdents64(r4, &(0x7f0000000fc0)=""/224, 0xe0) mknodat$null(r4, &(0x7f0000000940)='./file0\x00', 0xc000, 0x103) r6 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x80080) ioctl$BLKSECDISCARD(r6, 0x127d, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rcotmode=00#00000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000cfc600010000000000000000000500000ac0000000080a030000000000000000000a00000a990007404e8f514e3601c8f5f6dfb166a8d797643fdefe3a115a9d9cc56f4343104dc0159e5d68f9a5d315c1b0fb94fe961181cc5ea5e21410481e5e679c576812cad531ff60f9d87138e287e0144a9d535b93392a37e143b9b8d11cbdb593e11cad6e95e7b256e320aa10cbfc4b018631abfd15197b1e9258bde5edac40d2002dc65f8591064e56a948232cf80a6db69fe434d3ef8e7f78d7000000040004000000000001140000001100010000000000000000000100000a"], 0xe8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) r9 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}, 0x2020) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x130, 0xfffffffffffffffe, 0x2, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x5ff, 0xae3, 0xc, r10, 0x0, 0x4000, '\x00', 0x6, 0x81, 0x7, 0x3, {0x1, 0x6}, {0x4000000000006, 0xb}, {0x2000002, 0xd}, {0x1000000000, 0xa00}, 0x2, 0x6, 0x4, 0x7}}}}) syz_open_dev$dri(&(0x7f0000000000), 0xfffffffffffffc01, 0xa0001) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0xfff3}, {0x1}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r12 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x80880) ioctl$DRM_IOCTL_RES_CTX(r11, 0xc0106426, &(0x7f00000003c0)={0x0, &(0x7f0000000380)}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r12, 0xc010641d, &(0x7f0000000480)={0x0, &(0x7f0000000400)=""/93}) 131.389059ms ago: executing program 1 (id=10327): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x4}, 0x50) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="81100200000000009500000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, 0x94) close(r2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x498042, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060108000000000000000007000003050001000700e6a0"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40400) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20000080) r5 = shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getpid() socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 0s ago: executing program 4 (id=10328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r2 = socket(0x15, 0xa, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r0) unshare(0x60000000) pipe2(0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44001}, 0x4040850) r4 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4048041}, 0x8000) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002380)={'hsr0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000380)="010000000300f8ffff00000d892f", 0xe, 0x4, &(0x7f0000000240)={0x11, 0x11, r7, 0x1, 0x5, 0x6, @random="85c63f10be36"}, 0x14) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) sendfile(r10, r9, &(0x7f0000000080)=0xb, 0x8) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5, @ANYRES16=r0, @ANYRESOCT=r1, @ANYRESOCT=r8, @ANYRESHEX=r9, @ANYRESHEX=r5, @ANYRES16=0x0, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r4, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000280)={0x20, 0x13, 0x1a, "b00c4fc7db9437539e3c3f6b26395954ac9d76a136bcc7d17525"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000940)={0x40, 0x11, 0x1, '\t'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a48000000030a010200000000000000000a0000050900030093797a30000000000900010073797a3100000000080007006e617400140004800800024054dd5e54080001400000000014000000110001"], 0x70}}, 0x24044850) flock(r3, 0x8) close(r3) kernel console output (not intermixed with test programs): ] [ 2145.490477][ T5281] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2145.639489][ T6414] usb 2-1: Using ep0 maxpacket: 32 [ 2145.848839][ T6414] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2145.866199][ T5288] input: syz0 as /devices/virtual/input/input246 [ 2145.893240][ T6414] usb 2-1: config 0 has no interface number 0 [ 2145.953017][ T6414] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2145.971520][ T5296] __nla_validate_parse: 4 callbacks suppressed [ 2145.971537][ T5296] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10080'. [ 2145.980095][ T5299] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2145.994251][ T6414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2146.002780][ T6414] usb 2-1: Product: syz [ 2146.007078][ T6414] usb 2-1: Manufacturer: syz [ 2146.028876][ T6414] usb 2-1: SerialNumber: syz [ 2146.052620][ T5299] tipc: Enabled bearer , priority 0 [ 2146.065494][ T6414] usb 2-1: config 0 descriptor?? [ 2146.086689][ T6414] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2146.107878][ T6414] usb 2-1: selecting invalid altsetting 1 [ 2146.158630][ T6414] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2146.198110][ T6414] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2146.220535][ T6414] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2146.242454][ T5297] tipc: Disabling bearer [ 2146.253487][ T6414] usb 2-1: media controller created [ 2146.315844][ T6414] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2146.461529][ T5305] syzkaller0: entered promiscuous mode [ 2146.480048][ T5305] 0: reclassify loop, rule prio 0, protocol 700 [ 2146.700956][ T5311] lo: Caught tx_queue_len zero misconfig [ 2146.909905][ T6415] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 2147.069244][ T6415] usb 7-1: Using ep0 maxpacket: 16 [ 2147.082535][ T6415] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2147.096166][ T3261] usb 8-1: new full-speed USB device number 37 using dummy_hcd [ 2147.104458][ T6415] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.113698][ T6415] usb 7-1: Product: syz [ 2147.118606][ T6415] usb 7-1: Manufacturer: syz [ 2147.128546][ T6415] usb 7-1: SerialNumber: syz [ 2147.136609][ T6415] usb 7-1: config 0 descriptor?? [ 2147.261707][ T5320] syz_tun: entered allmulticast mode [ 2147.272639][ T3261] usb 8-1: unable to get BOS descriptor or descriptor too short [ 2147.281720][ T3261] usb 8-1: not running at top speed; connect to a high speed hub [ 2147.294197][ T3261] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 2147.316183][ T5319] syz_tun: left allmulticast mode [ 2147.326751][ T3261] usb 8-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 2147.356495][ T3261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.373567][ T3261] usb 8-1: Product: syz [ 2147.378187][ T3261] usb 8-1: Manufacturer: syz [ 2147.384556][ T3261] usb 8-1: SerialNumber: syz [ 2147.452105][ T5324] fuse: Bad value for 'fd' [ 2147.505682][ T5326] FAULT_INJECTION: forcing a failure. [ 2147.505682][ T5326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2147.529527][ T6414] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2147.547870][ T6414] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2147.560363][ T5326] CPU: 1 UID: 0 PID: 5326 Comm: syz.4.10091 Tainted: G L syzkaller #0 PREEMPT(full) [ 2147.560388][ T5326] Tainted: [L]=SOFTLOCKUP [ 2147.560395][ T5326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2147.560405][ T5326] Call Trace: [ 2147.560413][ T5326] [ 2147.560421][ T5326] dump_stack_lvl+0xe8/0x150 [ 2147.560447][ T5326] should_fail_ex+0x412/0x560 [ 2147.560472][ T5326] _copy_from_iter+0x1d3/0x1670 [ 2147.560491][ T5326] ? __pfx__copy_from_iter+0x10/0x10 [ 2147.560507][ T5326] ? raw_sendmsg+0x74d/0x1a50 [ 2147.560605][ T5326] raw_sendmsg+0x112c/0x1a50 [ 2147.560632][ T5326] ? __pfx_raw_sendmsg+0x10/0x10 [ 2147.560653][ T5326] ? aa_sk_perm+0x6d5/0x900 [ 2147.560668][ T5326] ? __pfx_aa_sk_perm+0x10/0x10 [ 2147.560682][ T5326] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 2147.560705][ T5326] ? sock_rps_record_flow+0x19/0x350 [ 2147.560722][ T5326] ? __pfx_inet_sendmsg+0x10/0x10 [ 2147.560737][ T5326] ? inet_sendmsg+0x2f4/0x370 [ 2147.560752][ T5326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2147.560774][ T5326] ? __pfx_inet_sendmsg+0x10/0x10 [ 2147.560791][ T5326] __sys_sendto+0x5de/0x710 [ 2147.560809][ T5326] ? __pfx___sys_sendto+0x10/0x10 [ 2147.560819][ T5326] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2147.560840][ T5326] ? __fget_files+0x3a0/0x420 [ 2147.560865][ T5326] ? ksys_write+0x242/0x270 [ 2147.560888][ T5326] ? __pfx_ksys_write+0x10/0x10 [ 2147.560912][ T5326] __x64_sys_sendto+0xde/0x100 [ 2147.560931][ T5326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.560948][ T5326] do_syscall_64+0x15f/0xf80 [ 2147.560972][ T5326] ? clear_bhb_loop+0x40/0x90 [ 2147.560993][ T5326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.561006][ T5326] RIP: 0033:0x7fb98eb9ce59 [ 2147.561022][ T5326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2147.561036][ T5326] RSP: 002b:00007fb98cdee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2147.561054][ T5326] RAX: ffffffffffffffda RBX: 00007fb98ee15fa0 RCX: 00007fb98eb9ce59 [ 2147.561066][ T5326] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003 [ 2147.561076][ T5326] RBP: 00007fb98cdee090 R08: 0000200000000300 R09: 0000000000000010 [ 2147.561088][ T5326] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 2147.561098][ T5326] R13: 00007fb98ee16038 R14: 00007fb98ee15fa0 R15: 00007fb98ef3fa48 [ 2147.561116][ T5326] [ 2147.584217][ T6415] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2147.778251][ T5314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2147.830032][ T5312] FAULT_INJECTION: forcing a failure. [ 2147.830032][ T5312] name failslab, interval 1, probability 0, space 0, times 0 [ 2147.845797][ T5312] CPU: 0 UID: 0 PID: 5312 Comm: syz.6.10085 Tainted: G L syzkaller #0 PREEMPT(full) [ 2147.845824][ T5312] Tainted: [L]=SOFTLOCKUP [ 2147.845830][ T5312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2147.845839][ T5312] Call Trace: [ 2147.845848][ T5312] [ 2147.845855][ T5312] dump_stack_lvl+0xe8/0x150 [ 2147.845879][ T5312] should_fail_ex+0x412/0x560 [ 2147.845904][ T5312] should_failslab+0xa8/0x100 [ 2147.845926][ T5312] __kmalloc_noprof+0xe8/0x760 [ 2147.845947][ T5312] ? tomoyo_encode+0x28b/0x550 [ 2147.845971][ T5312] tomoyo_encode+0x28b/0x550 [ 2147.845994][ T5312] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2147.846023][ T5312] ? tomoyo_path_number_perm+0x219/0x630 [ 2147.846043][ T5312] tomoyo_path_number_perm+0x246/0x630 [ 2147.846065][ T5312] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2147.846082][ T5312] ? __lock_acquire+0x6b5/0x2cf0 [ 2147.846114][ T5312] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2147.846155][ T5312] ? __fget_files+0x2a/0x420 [ 2147.846176][ T5312] ? __fget_files+0x2a/0x420 [ 2147.846192][ T5312] ? __fget_files+0x3a0/0x420 [ 2147.846210][ T5312] ? __fget_files+0x2a/0x420 [ 2147.846230][ T5312] security_file_ioctl+0xc3/0x2a0 [ 2147.846251][ T5312] __se_sys_ioctl+0x47/0x170 [ 2147.846273][ T5312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.846290][ T5312] do_syscall_64+0x15f/0xf80 [ 2147.846312][ T5312] ? clear_bhb_loop+0x40/0x90 [ 2147.846332][ T5312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2147.846347][ T5312] RIP: 0033:0x7fd99919ce59 [ 2147.846363][ T5312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2147.846377][ T5312] RSP: 002b:00007fd99a0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2147.846394][ T5312] RAX: ffffffffffffffda RBX: 00007fd999415fa0 RCX: 00007fd99919ce59 [ 2147.846405][ T5312] RDX: 0000200000000040 RSI: 0000000000000707 RDI: 0000000000000004 [ 2147.846415][ T5312] RBP: 00007fd99a0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 2147.846424][ T5312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2147.846433][ T5312] R13: 00007fd999416038 R14: 00007fd999415fa0 R15: 00007fd99953fa48 [ 2147.846459][ T5312] [ 2147.846504][ T5312] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2147.865391][ T5314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2147.916991][ T6415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2148.069229][ T5334] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10092'. [ 2148.075869][ T5328] fuse: Unknown parameter '' [ 2148.108986][ T6415] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2148.117184][ T6415] usb 7-1: media controller created [ 2148.274539][ T6415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2148.304609][ T5337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2148.340049][T21726] usb 2-1: USB disconnect, device number 57 [ 2148.354853][ T6415] zl10353_read_register: readreg error (reg=127, ret==0) [ 2148.376417][ T5337] tipc: Enabled bearer , priority 0 [ 2148.395493][ T5336] tipc: Disabling bearer [ 2148.406011][ T6415] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2148.426300][ T3261] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2148.436538][ T6415] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2148.449861][ T3261] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 2148.473781][ T3261] usb 8-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 2148.492106][ T6415] usb 7-1: USB disconnect, device number 16 [ 2148.523328][ T3261] usb 8-1: found format II with max.bitrate = 512, frame size=4095 [ 2148.562781][ T3261] usb 8-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 2148.605657][ T6415] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2148.720747][ T3261] usb 8-1: USB disconnect, device number 37 [ 2148.832331][ T5350] udevd[5350]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2148.929678][T21726] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2149.028797][ T5355] netlink: 96 bytes leftover after parsing attributes in process `syz.7.10100'. [ 2149.099459][T21726] usb 4-1: Using ep0 maxpacket: 8 [ 2149.106350][T21726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 2149.119595][ T6414] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 2149.141208][T21726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2149.175141][T21726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2149.206991][T21726] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 2149.218896][T21726] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2149.229530][T21726] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 2149.238614][T21726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2149.258410][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10101'. [ 2149.280019][T21726] usb 4-1: config 0 descriptor?? [ 2149.287504][ T5348] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2149.290758][ T6414] usb 7-1: device descriptor read/64, error -71 [ 2149.555114][ C1] Bluetooth: hci5: Unexpected continuation: 1 bytes [ 2149.558622][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.569288][ T6414] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 2149.576318][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.586660][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.593765][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.603838][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.611442][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.621281][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.628321][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.635425][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.642610][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.649879][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.656885][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.664139][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.671417][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.678352][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.685938][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.693077][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.700238][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.707244][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.714322][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.721416][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.728437][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.735530][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.743367][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.744665][ T6414] usb 7-1: device descriptor read/64, error -71 [ 2149.753374][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.764782][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.772136][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.782744][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.793918][ T3084] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2149.864945][ T5370] FAULT_INJECTION: forcing a failure. [ 2149.864945][ T5370] name failslab, interval 1, probability 0, space 0, times 0 [ 2149.878648][ T5370] CPU: 0 UID: 0 PID: 5370 Comm: syz.1.10106 Tainted: G L syzkaller #0 PREEMPT(full) [ 2149.878674][ T5370] Tainted: [L]=SOFTLOCKUP [ 2149.878681][ T5370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2149.878691][ T5370] Call Trace: [ 2149.878699][ T5370] [ 2149.878706][ T5370] dump_stack_lvl+0xe8/0x150 [ 2149.878732][ T5370] should_fail_ex+0x412/0x560 [ 2149.878759][ T5370] should_failslab+0xa8/0x100 [ 2149.878784][ T5370] __kmalloc_noprof+0xe8/0x760 [ 2149.878806][ T5370] ? tnode_new+0xc3/0x3b0 [ 2149.878898][ T5370] tnode_new+0xc3/0x3b0 [ 2149.878923][ T5370] fib_insert_alias+0x9f7/0x1100 [ 2149.878954][ T5370] fib_table_insert+0x695/0x1b50 [ 2149.878984][ T5370] ? fib_magic+0x146/0x510 [ 2149.879004][ T5370] ? fib_new_table+0x10a/0x2d0 [ 2149.879031][ T5370] fib_magic+0x434/0x510 [ 2149.879049][ T5370] ? __pfx_fib_magic+0x10/0x10 [ 2149.879067][ T5370] ? __queue_work+0xc4f/0x1040 [ 2149.879094][ T5370] ? lockdep_hardirqs_on+0x7a/0x110 [ 2149.879117][ T5370] ? addr_event+0x34f/0x470 [ 2149.879139][ T5370] fib_add_ifaddr+0x144/0x5f0 [ 2149.879162][ T5370] ? __pfx_inetaddr_event+0x10/0x10 [ 2149.879185][ T5370] fib_inetaddr_event+0x12e/0x190 [ 2149.879204][ T5370] notifier_call_chain+0x1ad/0x3d0 [ 2149.879231][ T5370] blocking_notifier_call_chain+0x6a/0x90 [ 2149.879252][ T5370] __inet_insert_ifa+0x9e9/0xbc0 [ 2149.879282][ T5370] ? __pfx___inet_insert_ifa+0x10/0x10 [ 2149.879302][ T5370] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2149.879332][ T5370] devinet_ioctl+0x12ff/0x1b30 [ 2149.879365][ T5370] ? __pfx_devinet_ioctl+0x10/0x10 [ 2149.879387][ T5370] ? get_user_ifreq+0x12b/0x180 [ 2149.879402][ T5370] inet_ioctl+0x42a/0x560 [ 2149.879420][ T5370] ? __pfx_inet_ioctl+0x10/0x10 [ 2149.879453][ T5370] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2149.879482][ T5370] sock_do_ioctl+0x101/0x320 [ 2149.879502][ T5370] ? __pfx_sock_do_ioctl+0x10/0x10 [ 2149.879516][ T5370] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2149.879555][ T5370] sock_ioctl+0x5c6/0x7f0 [ 2149.879581][ T5370] ? __pfx_sock_ioctl+0x10/0x10 [ 2149.879597][ T5370] ? __fget_files+0x2a/0x420 [ 2149.879615][ T5370] ? __fget_files+0x3a0/0x420 [ 2149.879629][ T5370] ? __fget_files+0x2a/0x420 [ 2149.879649][ T5370] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2149.879670][ T5370] ? __pfx_sock_ioctl+0x10/0x10 [ 2149.879684][ T5370] __se_sys_ioctl+0xfc/0x170 [ 2149.879707][ T5370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.879725][ T5370] do_syscall_64+0x15f/0xf80 [ 2149.879746][ T5370] ? trace_irq_disable+0x3b/0x140 [ 2149.879769][ T5370] ? clear_bhb_loop+0x40/0x90 [ 2149.879788][ T5370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2149.879803][ T5370] RIP: 0033:0x7f2ecab9ce59 [ 2149.879819][ T5370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2149.879832][ T5370] RSP: 002b:00007f2ecba4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2149.879849][ T5370] RAX: ffffffffffffffda RBX: 00007f2ecae15fa0 RCX: 00007f2ecab9ce59 [ 2149.879860][ T5370] RDX: 0000200000000040 RSI: 0000000000008916 RDI: 0000000000000004 [ 2149.879871][ T5370] RBP: 00007f2ecba4e090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.879881][ T5370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2149.879891][ T5370] R13: 00007f2ecae16038 R14: 00007f2ecae15fa0 R15: 00007f2ecaf3fa48 [ 2149.879920][ T5370] [ 2149.895043][ T5767] usb 4-1: USB disconnect, device number 120 [ 2150.215771][ T6414] usb usb7-port1: attempt power cycle [ 2150.223260][T27664] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 2150.387146][ T5377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2150.413335][ T5377] tipc: Enabled bearer , priority 0 [ 2150.423669][ T5375] tipc: Disabling bearer [ 2150.450510][ T5379] netlink: 'syz.3.10109': attribute type 13 has an invalid length. [ 2150.489269][T21726] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 2150.557400][ T5379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10109'. [ 2150.622617][ T6414] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 2150.653719][ T6414] usb 7-1: device descriptor read/8, error -71 [ 2150.669272][T21726] usb 8-1: Using ep0 maxpacket: 32 [ 2150.684786][T21726] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 2150.693995][T21726] usb 8-1: config 0 has no interface number 0 [ 2150.715829][T21726] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2150.725569][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.733750][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.741922][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.750073][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2150.787614][T21726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2150.796289][T21726] usb 8-1: Product: syz [ 2150.804033][T21726] usb 8-1: Manufacturer: syz [ 2150.808819][T21726] usb 8-1: SerialNumber: syz [ 2150.817985][T21726] usb 8-1: config 0 descriptor?? [ 2150.833121][T21726] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2150.842799][T21726] usb 8-1: selecting invalid altsetting 1 [ 2150.848658][T21726] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2150.858612][T21726] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2150.872830][T21726] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2150.883406][T21726] usb 8-1: media controller created [ 2150.898462][T21726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2150.899424][ T6414] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 2150.950525][ T6414] usb 7-1: device descriptor read/8, error -71 [ 2151.059607][ T6414] usb usb7-port1: unable to enumerate USB device [ 2151.209549][ T3261] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2151.371495][ T3261] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2151.380088][ T3261] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2151.393488][ T3261] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.422746][ T3261] usb 4-1: config 220 has no interface number 2 [ 2151.443233][ T3261] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2151.466794][ T3261] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2151.474152][ T3261] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2151.482954][ T3261] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2151.504128][ T3261] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2151.513738][ T3261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.524426][ T3261] usb 4-1: Product: syz [ 2151.531147][ T3261] usb 4-1: Manufacturer: syz [ 2151.535862][ T3261] usb 4-1: SerialNumber: syz [ 2151.652518][ T5395] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10113'. [ 2151.675393][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10113'. [ 2151.807764][ T3261] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 2151.835539][ T3261] uvcvideo 4-1:220.0: No valid video chain found. [ 2151.852185][ T3261] usb 4-1: selecting invalid altsetting 0 [ 2151.899306][ T3261] usb 4-1: selecting invalid altsetting 0 [ 2151.913998][ T3261] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 2151.984642][ T3261] usb 4-1: USB disconnect, device number 121 [ 2152.002518][ T5400] fuse: Bad value for 'fd' [ 2152.012563][T21726] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2152.042455][ T3084] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2152.072098][ T3084] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2152.085009][ T3084] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2152.102154][ T3084] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2152.110224][ T3084] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2152.122814][T21726] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2152.507832][ T5410] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10118'. [ 2152.713677][ T5418] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2152.727714][T27666] syz_tun (unregistering): left allmulticast mode [ 2152.823176][ T5420] FAULT_INJECTION: forcing a failure. [ 2152.823176][ T5420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2152.837787][ T5420] CPU: 0 UID: 0 PID: 5420 Comm: syz.1.10121 Tainted: G L syzkaller #0 PREEMPT(full) [ 2152.837813][ T5420] Tainted: [L]=SOFTLOCKUP [ 2152.837820][ T5420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2152.837828][ T5420] Call Trace: [ 2152.837836][ T5420] [ 2152.837842][ T5420] dump_stack_lvl+0xe8/0x150 [ 2152.837866][ T5420] should_fail_ex+0x412/0x560 [ 2152.837892][ T5420] _copy_from_user+0x2d/0xb0 [ 2152.837914][ T5420] sctp_getsockopt_delayed_ack+0xba/0x7b0 [ 2152.837939][ T5420] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2152.837964][ T5420] ? __pfx_sctp_getsockopt_delayed_ack+0x10/0x10 [ 2152.837985][ T5420] ? sctp_getsockopt+0x12f/0xb90 [ 2152.838005][ T5420] ? __local_bh_enable_ip+0xd0/0x130 [ 2152.838026][ T5420] sctp_getsockopt+0x7ad/0xb90 [ 2152.838044][ T5420] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2152.838062][ T5420] do_sock_getsockopt+0x51d/0x7e0 [ 2152.838090][ T5420] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2152.838125][ T5420] ? __fget_files+0x3a0/0x420 [ 2152.838142][ T5420] ? __fget_files+0x2a/0x420 [ 2152.838165][ T5420] __x64_sys_getsockopt+0x1a4/0x240 [ 2152.838191][ T5420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.838208][ T5420] do_syscall_64+0x15f/0xf80 [ 2152.838230][ T5420] ? trace_irq_disable+0x3b/0x140 [ 2152.838252][ T5420] ? clear_bhb_loop+0x40/0x90 [ 2152.838273][ T5420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2152.838289][ T5420] RIP: 0033:0x7f2ecab9ce59 [ 2152.838304][ T5420] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.838319][ T5420] RSP: 002b:00007f2ecba4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2152.838336][ T5420] RAX: ffffffffffffffda RBX: 00007f2ecae15fa0 RCX: 00007f2ecab9ce59 [ 2152.838348][ T5420] RDX: 0000000000000010 RSI: 0000000000000084 RDI: 0000000000000003 [ 2152.838359][ T5420] RBP: 00007f2ecba4e090 R08: 0000200000000400 R09: 0000000000000000 [ 2152.838370][ T5420] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000001 [ 2152.838381][ T5420] R13: 00007f2ecae16038 R14: 00007f2ecae15fa0 R15: 00007f2ecaf3fa48 [ 2152.838408][ T5420] [ 2153.064430][ T5418] tipc: Enabled bearer , priority 0 [ 2153.097135][ T5417] tipc: Disabling bearer [ 2153.215260][ T5404] bridge0: port 1(bridge_slave_0) entered blocking state [ 2153.253800][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 2153.277674][ T5404] bridge_slave_0: entered allmulticast mode [ 2153.307755][ T5404] bridge_slave_0: entered promiscuous mode [ 2153.328262][ T5404] bridge0: port 2(bridge_slave_1) entered blocking state [ 2153.349362][ T3261] usb 8-1: USB disconnect, device number 38 [ 2153.392445][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 2153.421202][ T5404] bridge_slave_1: entered allmulticast mode [ 2153.431329][ T5404] bridge_slave_1: entered promiscuous mode [ 2153.449227][T21726] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 2153.604153][T21726] usb 4-1: config 0 has an invalid interface number: 243 but max is 0 [ 2153.616941][T21726] usb 4-1: config 0 has no interface number 0 [ 2153.629916][T21726] usb 4-1: config 0 interface 243 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2153.655772][ T5404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2153.675748][T21726] usb 4-1: config 0 interface 243 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2153.701591][ T5404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2153.715468][ T5450] FAULT_INJECTION: forcing a failure. [ 2153.715468][ T5450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2153.716931][T21726] usb 4-1: config 0 interface 243 has no altsetting 0 [ 2153.745138][ T5450] CPU: 1 UID: 0 PID: 5450 Comm: syz.7.10128 Tainted: G L syzkaller #0 PREEMPT(full) [ 2153.745166][ T5450] Tainted: [L]=SOFTLOCKUP [ 2153.745172][ T5450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2153.745182][ T5450] Call Trace: [ 2153.745189][ T5450] [ 2153.745197][ T5450] dump_stack_lvl+0xe8/0x150 [ 2153.745221][ T5450] should_fail_ex+0x412/0x560 [ 2153.745247][ T5450] _copy_from_user+0x2d/0xb0 [ 2153.745271][ T5450] ___sys_recvmsg+0x175/0x590 [ 2153.745304][ T5450] ? __pfx____sys_recvmsg+0x10/0x10 [ 2153.745330][ T5450] ? __fget_files+0x2a/0x420 [ 2153.745376][ T5450] do_recvmmsg+0x334/0x800 [ 2153.745407][ T5450] ? __pfx_do_recvmmsg+0x10/0x10 [ 2153.745439][ T5450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2153.745478][ T5450] __x64_sys_recvmmsg+0x198/0x250 [ 2153.745505][ T5450] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 2153.745535][ T5450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.745553][ T5450] do_syscall_64+0x15f/0xf80 [ 2153.745574][ T5450] ? trace_irq_disable+0x3b/0x140 [ 2153.745597][ T5450] ? clear_bhb_loop+0x40/0x90 [ 2153.745616][ T5450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.745632][ T5450] RIP: 0033:0x7ff73039ce59 [ 2153.745647][ T5450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2153.745660][ T5450] RSP: 002b:00007ff73123b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2153.745678][ T5450] RAX: ffffffffffffffda RBX: 00007ff730615fa0 RCX: 00007ff73039ce59 [ 2153.745689][ T5450] RDX: 0000000000000002 RSI: 0000200000007e80 RDI: 0000000000000003 [ 2153.745699][ T5450] RBP: 00007ff73123b090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.745709][ T5450] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 2153.745718][ T5450] R13: 00007ff730616038 R14: 00007ff730615fa0 R15: 00007ff73073fa48 [ 2153.745745][ T5450] [ 2153.755985][T21726] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 2153.950044][T21726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2153.961547][T21726] usb 4-1: config 0 descriptor?? [ 2153.993420][ T5404] team0: Port device team_slave_0 added [ 2154.003225][ T5404] team0: Port device team_slave_1 added [ 2154.056246][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2154.065873][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2154.099908][ T3261] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2154.101565][ T5404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2154.122508][ T5404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2154.130084][ T5404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2154.156673][ T5404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2154.233250][ T5404] hsr_slave_0: entered promiscuous mode [ 2154.241263][T27664] Bluetooth: hci5: command tx timeout [ 2154.259238][ T3261] usb 2-1: Using ep0 maxpacket: 32 [ 2154.261841][ T5404] hsr_slave_1: entered promiscuous mode [ 2154.268047][ T3261] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 2154.280325][ T3261] usb 2-1: config 0 has no interface number 0 [ 2154.281458][ T5404] debugfs: 'hsr0' already exists in 'hsr' [ 2154.286705][ T3261] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2154.303513][ T5404] Cannot create hsr debugfs directory [ 2154.341488][ T3261] usb 2-1: config 0 interface 85 has no altsetting 0 [ 2154.362268][ T3261] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 2154.392196][ T3261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.438117][T21726] uclogic 0003:28BD:0905.0091: interface is invalid, ignoring [ 2154.446437][ T3261] usb 2-1: Product: syz [ 2154.451153][ T3261] usb 2-1: Manufacturer: syz [ 2154.459299][ T3261] usb 2-1: SerialNumber: syz [ 2154.471734][ T3261] usb 2-1: config 0 descriptor?? [ 2154.609923][ T5463] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 2154.660963][ T5463] netlink: 'syz.6.10132': attribute type 1 has an invalid length. [ 2154.670976][ T5463] netlink: 'syz.6.10132': attribute type 2 has an invalid length. [ 2154.675391][T21726] usb 4-1: USB disconnect, device number 122 [ 2154.717240][ T5404] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2154.865031][ T5467] FAULT_INJECTION: forcing a failure. [ 2154.865031][ T5467] name failslab, interval 1, probability 0, space 0, times 0 [ 2154.886381][ T5467] CPU: 1 UID: 0 PID: 5467 Comm: syz.7.10133 Tainted: G L syzkaller #0 PREEMPT(full) [ 2154.886408][ T5467] Tainted: [L]=SOFTLOCKUP [ 2154.886415][ T5467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2154.886424][ T5467] Call Trace: [ 2154.886431][ T5467] [ 2154.886438][ T5467] dump_stack_lvl+0xe8/0x150 [ 2154.886460][ T5467] should_fail_ex+0x412/0x560 [ 2154.886481][ T5467] should_failslab+0xa8/0x100 [ 2154.886501][ T5467] __kmalloc_cache_noprof+0x88/0x660 [ 2154.886517][ T5467] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 2154.886536][ T5467] ? sctp_add_bind_addr+0x8c/0x370 [ 2154.886562][ T5467] sctp_add_bind_addr+0x8c/0x370 [ 2154.886582][ T5467] sctp_copy_local_addr_list+0x314/0x4f0 [ 2154.886602][ T5467] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 2154.886618][ T5467] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 2154.886637][ T5467] ? sctp_v6_is_any+0x64/0x80 [ 2154.886649][ T5467] ? sctp_copy_one_addr+0x93/0x360 [ 2154.886668][ T5467] sctp_bind_addr_copy+0xb3/0x3c0 [ 2154.886689][ T5467] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 2154.886709][ T5467] sctp_connect_new_asoc+0x2ff/0x6b0 [ 2154.886725][ T5467] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 2154.886743][ T5467] ? __local_bh_enable_ip+0xd0/0x130 [ 2154.886759][ T5467] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 2154.886775][ T5467] ? security_sctp_bind_connect+0x7e/0x2c0 [ 2154.886792][ T5467] sctp_sendmsg+0x1576/0x2c50 [ 2154.886822][ T5467] ? __pfx_sctp_sendmsg+0x10/0x10 [ 2154.886841][ T5467] ? aa_sk_perm+0x6d5/0x900 [ 2154.886862][ T5467] ? __pfx_aa_sk_perm+0x10/0x10 [ 2154.886878][ T5467] ? sock_rps_record_flow+0x19/0x350 [ 2154.886893][ T5467] ? inet_sendmsg+0x2f4/0x370 [ 2154.886907][ T5467] ____sys_sendmsg+0x80a/0x9f0 [ 2154.886931][ T5467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2154.886964][ T5467] ? import_iovec+0x73/0xa0 [ 2154.886985][ T5467] ___sys_sendmsg+0x2a5/0x360 [ 2154.887000][ T5467] ? __lock_acquire+0x6b5/0x2cf0 [ 2154.887016][ T5467] ? __pfx____sys_sendmsg+0x10/0x10 [ 2154.887036][ T5467] ? kstrtouint+0x6e/0xe0 [ 2154.887069][ T5467] ? __fget_files+0x2a/0x420 [ 2154.887082][ T5467] ? __fget_files+0x3a0/0x420 [ 2154.887109][ T5467] __sys_sendmmsg+0x27c/0x4e0 [ 2154.887132][ T5467] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2154.887147][ T5467] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2154.887182][ T5467] ? ksys_write+0x242/0x270 [ 2154.887200][ T5467] ? __pfx_ksys_write+0x10/0x10 [ 2154.887220][ T5467] __x64_sys_sendmmsg+0xa0/0xc0 [ 2154.887237][ T5467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.887255][ T5467] do_syscall_64+0x15f/0xf80 [ 2154.887271][ T5467] ? trace_irq_disable+0x3b/0x140 [ 2154.887289][ T5467] ? clear_bhb_loop+0x40/0x90 [ 2154.887304][ T5467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2154.887316][ T5467] RIP: 0033:0x7ff73039ce59 [ 2154.887329][ T5467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2154.887340][ T5467] RSP: 002b:00007ff73123b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2154.887353][ T5467] RAX: ffffffffffffffda RBX: 00007ff730615fa0 RCX: 00007ff73039ce59 [ 2154.887362][ T5467] RDX: 03ffffffffffffd1 RSI: 0000200000000000 RDI: 0000000000000003 [ 2154.887370][ T5467] RBP: 00007ff73123b090 R08: 0000000000000000 R09: 0000000000000000 [ 2154.887379][ T5467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2154.887389][ T5467] R13: 00007ff730616038 R14: 00007ff730615fa0 R15: 00007ff73073fa48 [ 2154.887411][ T5467] [ 2155.274556][ T5448] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10127'. [ 2155.359940][ T5404] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.397285][ T5473] syzkaller1: entered promiscuous mode [ 2155.403028][ T5473] syzkaller1: entered allmulticast mode [ 2155.469989][ T5404] team0: Port device netdevsim1 removed [ 2155.478595][ T5404] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.597929][ T3261] appletouch 2-1:0.85: Geyser mode initialized. [ 2155.608403][ T3261] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input247 [ 2155.649328][T21726] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 2155.817231][ T5404] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2155.847788][ T5483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10139'. [ 2155.872098][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10139'. [ 2155.881468][T21726] usb 8-1: Using ep0 maxpacket: 16 [ 2155.894972][T21726] usb 8-1: config 0 has an invalid interface number: 34 but max is 0 [ 2155.913982][T21726] usb 8-1: config 0 has no interface number 0 [ 2155.929131][ T5483] netlink: 31 bytes leftover after parsing attributes in process `syz.3.10139'. [ 2155.948832][T21726] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 2155.961294][T21726] usb 8-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 2155.977409][ T5483] netlink: 'syz.3.10139': attribute type 3 has an invalid length. [ 2156.004041][ T5483] netlink: 'syz.3.10139': attribute type 2 has an invalid length. [ 2156.020722][T21726] usb 8-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 2156.026323][ T30] kauditd_printk_skb: 110 callbacks suppressed [ 2156.026339][ T30] audit: type=1326 audit(1778940972.963:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.030843][ T5483] netlink: 31 bytes leftover after parsing attributes in process `syz.3.10139'. [ 2156.040797][ T30] audit: type=1326 audit(1778940972.973:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.076191][T21726] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.094673][ T30] audit: type=1326 audit(1778940972.973:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.127564][T21726] usb 8-1: Product: syz [ 2156.132494][ T5483] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10139'. [ 2156.143498][T21726] usb 8-1: Manufacturer: syz [ 2156.148200][T21726] usb 8-1: SerialNumber: syz [ 2156.197093][T21726] usb 8-1: config 0 descriptor?? [ 2156.205790][ T5475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2156.213945][ T5475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2156.220995][ T30] audit: type=1326 audit(1778940972.973:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.248235][ T3261] usb 2-1: USB disconnect, device number 58 [ 2156.273443][ T30] audit: type=1326 audit(1778940972.973:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.304784][ T3261] appletouch 2-1:0.85: input: appletouch disconnected [ 2156.321981][T27664] Bluetooth: hci5: command tx timeout [ 2156.390642][ T30] audit: type=1326 audit(1778940972.973:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.429345][ T5475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2156.450220][ T30] audit: type=1326 audit(1778940973.043:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.454534][ T5475] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 2156.484161][T25754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.492355][T25754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.500580][T25754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.508700][T25754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2156.557597][ T30] audit: type=1326 audit(1778940973.043:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.618700][ T30] audit: type=1326 audit(1778940973.083:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30d999ce59 code=0x7ffc0000 [ 2156.677593][ T5404] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2156.679161][ T30] audit: type=1326 audit(1778940973.093:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5482 comm="syz.3.10139" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30d999cbc2 code=0x7ffc0000 [ 2156.714866][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2156.717298][T21726] asix 8-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 2156.732070][ T5404] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2156.745136][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2156.755211][ T5404] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2156.767288][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2156.788815][ T5404] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2156.789014][ T5496] netlink: 'syz.6.10143': attribute type 13 has an invalid length. [ 2156.807744][ T5404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2156.920358][T21726] asix 8-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2156.958391][T21726] asix 8-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 2156.993195][T21726] asix 8-1:0.34: probe with driver asix failed with error -61 [ 2157.225880][ T5511] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2157.346626][ T5504] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10143'. [ 2157.372846][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10148'. [ 2157.495933][ T5521] FAULT_INJECTION: forcing a failure. [ 2157.495933][ T5521] name failslab, interval 1, probability 0, space 0, times 0 [ 2157.499817][T21726] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2157.528436][ T5521] CPU: 1 UID: 0 PID: 5521 Comm: syz.1.10149 Tainted: G L syzkaller #0 PREEMPT(full) [ 2157.528460][ T5521] Tainted: [L]=SOFTLOCKUP [ 2157.528466][ T5521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2157.528475][ T5521] Call Trace: [ 2157.528481][ T5521] [ 2157.528489][ T5521] dump_stack_lvl+0xe8/0x150 [ 2157.528514][ T5521] should_fail_ex+0x412/0x560 [ 2157.528540][ T5521] should_failslab+0xa8/0x100 [ 2157.528562][ T5521] ? skb_clone+0x212/0x3a0 [ 2157.528584][ T5521] kmem_cache_alloc_noprof+0x87/0x650 [ 2157.528605][ T5521] ? __netlink_lookup+0xc6/0x8b0 [ 2157.528631][ T5521] skb_clone+0x212/0x3a0 [ 2157.528655][ T5521] __netlink_deliver_tap+0x404/0x850 [ 2157.528685][ T5521] ? netlink_deliver_tap+0x2e/0x1b0 [ 2157.528707][ T5521] netlink_deliver_tap+0x19c/0x1b0 [ 2157.528729][ T5521] netlink_unicast+0x730/0x8e0 [ 2157.528769][ T5521] netlink_sendmsg+0x813/0xb40 [ 2157.528798][ T5521] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2157.528822][ T5521] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2157.528844][ T5521] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2157.528867][ T5521] ____sys_sendmsg+0x972/0x9f0 [ 2157.528890][ T5521] ? __might_fault+0xaf/0x130 [ 2157.528916][ T5521] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2157.528946][ T5521] ? import_iovec+0x73/0xa0 [ 2157.528971][ T5521] ___sys_sendmsg+0x2a5/0x360 [ 2157.528991][ T5521] ? __lock_acquire+0x6b5/0x2cf0 [ 2157.529013][ T5521] ? __pfx____sys_sendmsg+0x10/0x10 [ 2157.529063][ T5521] ? __fget_files+0x2a/0x420 [ 2157.529080][ T5521] ? __fget_files+0x3a0/0x420 [ 2157.529106][ T5521] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2157.529129][ T5521] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2157.529160][ T5521] ? __pfx_ksys_write+0x10/0x10 [ 2157.529189][ T5521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.529207][ T5521] do_syscall_64+0x15f/0xf80 [ 2157.529228][ T5521] ? trace_irq_disable+0x3b/0x140 [ 2157.529250][ T5521] ? clear_bhb_loop+0x40/0x90 [ 2157.529270][ T5521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2157.529286][ T5521] RIP: 0033:0x7f2ecab9ce59 [ 2157.529301][ T5521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2157.529314][ T5521] RSP: 002b:00007f2ecba4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2157.529332][ T5521] RAX: ffffffffffffffda RBX: 00007f2ecae15fa0 RCX: 00007f2ecab9ce59 [ 2157.529344][ T5521] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 2157.529358][ T5521] RBP: 00007f2ecba4e090 R08: 0000000000000000 R09: 0000000000000000 [ 2157.529368][ T5521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2157.529377][ T5521] R13: 00007f2ecae16038 R14: 00007f2ecae15fa0 R15: 00007f2ecaf3fa48 [ 2157.529405][ T5521] [ 2157.531311][ T5404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2157.851776][ T5404] 8021q: adding VLAN 0 to HW filter on device team0 [ 2157.866723][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 2157.873916][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2157.899835][T21726] usb 4-1: Using ep0 maxpacket: 32 [ 2157.906640][T21726] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2157.916723][T21726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2157.929169][T21726] usb 4-1: config 0 descriptor?? [ 2157.936302][ T5533] syzkaller1: entered promiscuous mode [ 2157.943427][ T5533] syzkaller1: entered allmulticast mode [ 2157.955571][T21726] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2157.964028][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 2157.971150][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2158.052697][ T5404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2158.061558][T32736] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 2158.103036][ T5404] veth0_vlan: entered promiscuous mode [ 2158.115709][ T5404] veth1_vlan: entered promiscuous mode [ 2158.150842][ T5404] veth0_macvtap: entered promiscuous mode [ 2158.163951][ T5404] veth1_macvtap: entered promiscuous mode [ 2158.188089][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2158.204301][ T5404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2158.219514][T32736] usb 7-1: Using ep0 maxpacket: 8 [ 2158.228690][T32736] usb 7-1: config 0 has an invalid interface number: 33 but max is 1 [ 2158.237911][T32736] usb 7-1: config 0 has no interface number 1 [ 2158.239292][T25758] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.247111][T32736] usb 7-1: config 0 interface 33 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 2158.254782][T25758] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.264902][T32736] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 247 [ 2158.297920][T25758] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.310866][T25758] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2158.316010][T32736] usb 7-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 2158.327063][ T5534] netlink: 'syz.7.10136': attribute type 1 has an invalid length. [ 2158.333356][T32736] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2158.400770][T27664] Bluetooth: hci5: command tx timeout [ 2158.452159][T32736] usb 7-1: Product: syz [ 2158.468208][T32736] usb 7-1: Manufacturer: syz [ 2158.498626][T32736] usb 7-1: SerialNumber: syz [ 2158.524430][T32736] usb 7-1: config 0 descriptor?? [ 2158.534851][T25754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.549135][T32736] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2158.557917][T25754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.587556][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2158.595975][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2158.886304][ T5530] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 2158.913908][T32736] pvrusb2: Hardware description: WinTV PVR USB2 Model 29xxx [ 2158.930947][ T2367] pvrusb2: Invalid read control endpoint [ 2158.959258][T32736] usb 7-1: USB disconnect, device number 21 [ 2158.974344][ T5511] binder: 5510:5511 ioctl c0306201 2000000003c0 returned -14 [ 2158.983986][ T5511] binder: 5510:5511 ioctl c0306201 2000000003c0 returned -14 [ 2159.003382][T21726] gspca_sunplus: reg_r err -71 [ 2159.011071][T21726] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2159.032789][ T2367] usb 7-1: Direct firmware load for v4l-pvrusb2-29xxx-01.fw failed with error -2 [ 2159.045709][T21726] usb 4-1: USB disconnect, device number 123 [ 2159.057386][ T2367] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-29xxx-01.fw [ 2159.196089][ T5553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10158'. [ 2159.231366][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.870596][ T5767] usb 8-1: USB disconnect, device number 39 [ 2159.935400][ T5567] syz_tun: entered allmulticast mode [ 2159.959230][ T6414] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2160.077486][ T5567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2160.097204][ T5567] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 2160.127414][ T5569] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2160.153253][ T6414] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 2160.164313][ T5569] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2160.172235][ T6414] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2160.189826][ T6414] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 2160.199358][ T6414] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2160.207514][ T6414] usb 4-1: Product: syz [ 2160.212313][ T6414] usb 4-1: Manufacturer: syz [ 2160.219757][ T6414] usb 4-1: SerialNumber: syz [ 2160.221129][ T5569] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2160.366133][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.372613][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.681350][ T5567] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2160.693698][ T5567] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 2161.344133][ T5567] syz_tun: left allmulticast mode [ 2161.556762][ T5592] syzkaller0: entered promiscuous mode [ 2161.571446][ T5592] syzkaller0: entered allmulticast mode [ 2161.848706][ T30] kauditd_printk_skb: 115 callbacks suppressed [ 2161.848719][ T30] audit: type=1800 audit(1778940978.783:3760): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10170" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 2162.199329][ T5767] usb 8-1: new full-speed USB device number 40 using dummy_hcd [ 2162.246703][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.254942][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.263126][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.271289][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2162.365433][ T5767] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 2162.382181][ T5767] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2162.397683][ T5767] usb 8-1: Product: syz [ 2162.403958][ T5767] usb 8-1: Manufacturer: syz [ 2162.409488][ T5767] usb 8-1: SerialNumber: syz [ 2162.761586][ T6415] usb 4-1: USB disconnect, device number 124 [ 2162.832832][ T5767] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 2163.092034][ T5622] bridge0: left allmulticast mode [ 2163.125954][ T5622] dummy0: left allmulticast mode [ 2163.276081][ T5622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.307764][ T5622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.342015][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10179'. [ 2163.352139][ T5628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10179'. [ 2163.390830][ T5630] FAULT_INJECTION: forcing a failure. [ 2163.390830][ T5630] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2163.405996][ T5630] CPU: 0 UID: 0 PID: 5630 Comm: syz.4.10180 Tainted: G L syzkaller #0 PREEMPT(full) [ 2163.406022][ T5630] Tainted: [L]=SOFTLOCKUP [ 2163.406029][ T5630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2163.406039][ T5630] Call Trace: [ 2163.406045][ T5630] [ 2163.406052][ T5630] dump_stack_lvl+0xe8/0x150 [ 2163.406076][ T5630] should_fail_ex+0x412/0x560 [ 2163.406101][ T5630] _copy_from_user+0x2d/0xb0 [ 2163.406125][ T5630] __sys_sendto+0x2b0/0x710 [ 2163.406147][ T5630] ? __pfx___sys_sendto+0x10/0x10 [ 2163.406187][ T5630] ? exc_page_fault+0x6a/0xc0 [ 2163.406210][ T5630] ? do_user_addr_fault+0xc6f/0x1340 [ 2163.406232][ T5630] __x64_sys_sendto+0xde/0x100 [ 2163.406252][ T5630] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.406269][ T5630] do_syscall_64+0x15f/0xf80 [ 2163.406290][ T5630] ? trace_irq_disable+0x3b/0x140 [ 2163.406311][ T5630] ? clear_bhb_loop+0x40/0x90 [ 2163.406331][ T5630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2163.406347][ T5630] RIP: 0033:0x7fe3a715d68e [ 2163.406362][ T5630] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2163.406375][ T5630] RSP: 002b:00007fe3a7fc6e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2163.406393][ T5630] RAX: ffffffffffffffda RBX: 00007fe3a7fc86c0 RCX: 00007fe3a715d68e [ 2163.406404][ T5630] RDX: 0000000000000020 RSI: 00007fe3a7fc7000 RDI: 0000000000000003 [ 2163.406415][ T5630] RBP: 0000000000000000 R08: 00007fe3a7fc6f04 R09: 000000000000000c [ 2163.406425][ T5630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 2163.406435][ T5630] R13: 00007fe3a7fc6f58 R14: 00007fe3a7fc7000 R15: 0000000000000000 [ 2163.406460][ T5630] [ 2163.649770][T11821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2163.686002][T30123] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.706832][T30123] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.721313][T30123] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.731929][T30123] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.743186][ T5637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10182'. [ 2163.758141][T30123] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.772893][T30123] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.788251][T30123] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 2163.789323][T11821] usb 2-1: device descriptor read/64, error -71 [ 2163.798000][T30123] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.821840][ T5634] netlink: 32 bytes leftover after parsing attributes in process `syz.6.10181'. [ 2164.029473][ T5685] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2164.059636][T11821] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2164.199819][ T5685] usb 4-1: Using ep0 maxpacket: 32 [ 2164.205046][T11821] usb 2-1: device descriptor read/64, error -71 [ 2164.213880][ T5685] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2164.222496][ T5685] usb 4-1: config 0 has no interface number 0 [ 2164.231274][ T5685] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 2164.240722][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2164.248810][ T5685] usb 4-1: Product: syz [ 2164.253349][ T5685] usb 4-1: Manufacturer: syz [ 2164.258016][ T5685] usb 4-1: SerialNumber: syz [ 2164.265455][ T5685] usb 4-1: config 0 descriptor?? [ 2164.281762][ T5685] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2164.292261][ T5685] usb 4-1: selecting invalid altsetting 1 [ 2164.298000][ T5685] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2164.308112][ T5685] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2164.320075][ T5685] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2164.328429][ T5685] usb 4-1: media controller created [ 2164.334500][T11821] usb usb2-port1: attempt power cycle [ 2164.352082][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2164.679220][T11821] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2164.720581][T11821] usb 2-1: device descriptor read/8, error -71 [ 2164.959388][T11821] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2164.996712][ T6415] usb 8-1: USB disconnect, device number 40 [ 2165.005490][T11821] usb 2-1: device descriptor read/8, error -71 [ 2165.034515][ T6415] usblp0: removed [ 2165.149796][T11821] usb usb2-port1: unable to enumerate USB device [ 2165.439951][ T5685] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 2165.452200][ T5685] zl10353_read_register: readreg error (reg=127, ret==-110) [ 2165.749600][ T30] audit: type=1800 audit(1778940982.693:3761): pid=5668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10190" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2166.037445][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10191'. [ 2166.047891][ T5670] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10191'. [ 2166.130308][ T5673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2166.502396][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10195'. [ 2166.577160][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.694382][ T5695] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 2166.704151][ T5695] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10197'. [ 2166.717989][ T5695] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2166.838662][ T5685] usb 4-1: USB disconnect, device number 125 [ 2166.956483][ T5704] syzkaller0: entered promiscuous mode [ 2166.969421][ T6415] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2166.983757][ T5704] syzkaller0: entered allmulticast mode [ 2167.149530][ T6415] usb 2-1: Using ep0 maxpacket: 8 [ 2167.167275][ T6415] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 2167.216913][ T6415] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2167.237389][ T6415] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2167.249211][ T6415] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 2167.261241][ T6415] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2167.285774][ T6415] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2167.336667][ T6415] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2167.364496][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.372805][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.380951][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.389104][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2167.406414][ T6415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2167.470367][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10202'. [ 2167.546506][ T5726] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10202'. [ 2167.589659][ T5728] FAULT_INJECTION: forcing a failure. [ 2167.589659][ T5728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2167.628607][ T5728] CPU: 1 UID: 0 PID: 5728 Comm: syz.6.10203 Tainted: G L syzkaller #0 PREEMPT(full) [ 2167.628638][ T5728] Tainted: [L]=SOFTLOCKUP [ 2167.628643][ T5728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2167.628651][ T5728] Call Trace: [ 2167.628658][ T5728] [ 2167.628667][ T5728] dump_stack_lvl+0xe8/0x150 [ 2167.628693][ T5728] should_fail_ex+0x412/0x560 [ 2167.628719][ T5728] _copy_from_user+0x2d/0xb0 [ 2167.628742][ T5728] do_ipt_set_ctl+0x6a5/0xe00 [ 2167.628756][ T5728] ? rcu_is_watching+0x15/0xb0 [ 2167.628768][ T5728] ? trace_contention_end+0x3d/0x140 [ 2167.628781][ T5728] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 2167.628799][ T5728] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 2167.628817][ T5728] ? __pfx___mutex_lock+0x10/0x10 [ 2167.628841][ T5728] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2167.628870][ T5728] ? __pfx_aa_sk_perm+0x10/0x10 [ 2167.628894][ T5728] nf_setsockopt+0x26f/0x290 [ 2167.628907][ T5728] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2167.628919][ T5728] do_sock_setsockopt+0x17c/0x1b0 [ 2167.628934][ T5728] __x64_sys_setsockopt+0x13d/0x1b0 [ 2167.628947][ T5728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2167.628961][ T5728] do_syscall_64+0x15f/0xf80 [ 2167.628984][ T5728] ? clear_bhb_loop+0x40/0x90 [ 2167.629005][ T5728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2167.629021][ T5728] RIP: 0033:0x7fd99919ce59 [ 2167.629037][ T5728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2167.629049][ T5728] RSP: 002b:00007fd99a0b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2167.629065][ T5728] RAX: ffffffffffffffda RBX: 00007fd999415fa0 RCX: 00007fd99919ce59 [ 2167.629075][ T5728] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 2167.629085][ T5728] RBP: 00007fd99a0b2090 R08: 0000000000000428 R09: 0000000000000000 [ 2167.629094][ T5728] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.629104][ T5728] R13: 00007fd999416038 R14: 00007fd999415fa0 R15: 00007fd99953fa48 [ 2167.629131][ T5728] [ 2167.901550][ T6415] usb 2-1: GET_CAPABILITIES returned 0 [ 2167.911326][ T6415] usbtmc 2-1:16.0: can't read capabilities [ 2168.349173][T11821] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 2168.544568][T11821] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.568681][T11821] usb 8-1: config 0 has no interfaces? [ 2168.584480][T11821] usb 8-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 2168.596341][T11821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2168.608412][T11821] usb 8-1: Product: syz [ 2168.612998][T11821] usb 8-1: Manufacturer: syz [ 2168.618402][T11821] usb 8-1: SerialNumber: syz [ 2168.632339][T11821] usb 8-1: config 0 descriptor?? [ 2168.786511][ T5748] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10207'. [ 2168.797456][ T5748] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10207'. [ 2168.829494][ T5767] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2168.989577][ T5767] usb 4-1: Using ep0 maxpacket: 8 [ 2169.005800][ T5767] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2169.071233][ T5767] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2169.142914][ T5767] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2169.232399][ T5767] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2169.283994][ T5767] usb 4-1: New USB device found, idVendor=17ef, idProduct=60a4, bcdDevice= 0.00 [ 2169.368839][ T5767] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.453241][ T5767] usb 4-1: config 0 descriptor?? [ 2170.129382][ T5767] hid_parser_main: 13 callbacks suppressed [ 2170.129408][ T5767] lenovo 0003:17EF:60A4.0092: unknown main item tag 0x2 [ 2170.160404][ T6415] usb 2-1: USB disconnect, device number 63 [ 2170.202038][ T5747] netlink: 'syz.3.10206': attribute type 1 has an invalid length. [ 2170.306715][ T5767] lenovo 0003:17EF:60A4.0092: unknown main item tag 0x0 [ 2170.606826][ T5767] lenovo 0003:17EF:60A4.0092: hidraw0: USB HID vff.fc Device [HID 17ef:60a4] on usb-dummy_hcd.3-1/input0 [ 2171.004990][ T30] audit: type=1800 audit(1778940987.943:3762): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10212" name="SYSV00000000" dev="hugetlbfs" ino=5 res=0 errno=0 [ 2171.487577][ T5767] usb 4-1: USB disconnect, device number 126 [ 2171.580447][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10214'. [ 2171.598970][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10214'. [ 2171.780281][ T5775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2171.807169][ T5775] tipc: Enabled bearer , priority 0 [ 2171.818252][ T5774] tipc: Disabling bearer [ 2171.974049][ T5784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2171.995691][ T5784] tipc: Enabled bearer , priority 0 [ 2172.023237][ T5783] tipc: Disabling bearer [ 2172.101851][T24304] usb 8-1: USB disconnect, device number 41 [ 2172.294576][ T5794] lo: Caught tx_queue_len zero misconfig [ 2172.304911][ T5794] netlink: 200 bytes leftover after parsing attributes in process `syz.1.10220'. [ 2172.529284][T24304] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 2172.689256][T24304] usb 8-1: Using ep0 maxpacket: 8 [ 2172.703489][T24304] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2172.719452][T24304] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2172.744937][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2172.770011][T24304] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2172.795404][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2172.821152][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2172.832948][ T6414] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2172.855571][T24304] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2172.888802][T24304] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2172.898238][T24304] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2172.909495][T24304] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2172.929331][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2172.944078][T24304] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2172.963019][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2172.975016][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2172.988246][T24304] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2173.006553][T24304] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2173.020133][T24304] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 2173.029496][T24304] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2173.042004][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2173.054646][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2173.076821][ T6414] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 2173.087793][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2173.099773][ T6414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2173.107795][T24304] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2173.123475][ T6414] usb 4-1: config 0 descriptor?? [ 2173.129652][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2173.143887][T24304] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2173.148258][T30123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.155623][T24304] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2173.163644][T30123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.163695][T30123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.163735][T30123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2173.242394][T24304] usb 8-1: config 168 interface 0 has no altsetting 0 [ 2173.263152][T24304] usb 8-1: string descriptor 0 read error: -22 [ 2173.269998][T24304] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2173.287997][T24304] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2173.317131][T24304] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2173.588606][ T5802] netlink: 'syz.1.10225': attribute type 3 has an invalid length. [ 2173.612934][ T6414] cp2112 0003:10C4:EA90.0093: unknown main item tag 0x0 [ 2173.644416][ T6414] cp2112 0003:10C4:EA90.0093: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 2173.805376][ T6414] cp2112 0003:10C4:EA90.0093: Part Number: 0xE1 Device Version: 0x47 [ 2173.856122][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.873704][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.891899][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2173.905274][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2173.913998][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10226'. [ 2173.931986][ T5807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10226'. [ 2174.057174][ T5814] cp2112 0003:10C4:EA90.0093: pid 5814 passed too short report [ 2174.072560][ T6414] cp2112 0003:10C4:EA90.0093: error requesting SMBus config [ 2174.131606][ T6414] cp2112 0003:10C4:EA90.0093: probe with driver cp2112 failed with error -32 [ 2174.326492][ T5817] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 2174.344942][ T5804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2174.358084][ T5804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2174.371750][ T6414] usb 8-1: USB disconnect, device number 42 [ 2174.640097][T24304] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2174.789178][T24304] usb 2-1: Using ep0 maxpacket: 32 [ 2174.796240][T24304] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.807915][T24304] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2174.821662][T24304] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2174.828337][T24304] usb 2-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.00 [ 2174.837950][T24304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.851396][T24304] usb 2-1: config 0 descriptor?? [ 2174.954610][ T5819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2174.980965][ T5819] tipc: Started in network mode [ 2174.985872][ T5819] tipc: Node identity 0a8f14520a63, cluster identity 4711 [ 2174.993293][ T5819] tipc: Enabled bearer , priority 0 [ 2175.005793][ T5818] tipc: Disabling bearer [ 2175.228028][ T5767] IPVS: starting estimator thread 0... [ 2175.274038][ T5827] syz.4.10234 (5827): drop_caches: 2 [ 2175.319283][ T5828] IPVS: using max 35 ests per chain, 84000 per kthread [ 2175.363991][ T5831] syz.4.10235 (5831): drop_caches: 2 [ 2175.429583][ T5685] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 2175.465145][ T5834] FAULT_INJECTION: forcing a failure. [ 2175.465145][ T5834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2175.478849][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: syz.4.10236 Tainted: G L syzkaller #0 PREEMPT(full) [ 2175.478866][ T5834] Tainted: [L]=SOFTLOCKUP [ 2175.478870][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2175.478876][ T5834] Call Trace: [ 2175.478882][ T5834] [ 2175.478887][ T5834] dump_stack_lvl+0xe8/0x150 [ 2175.478903][ T5834] should_fail_ex+0x412/0x560 [ 2175.478920][ T5834] _copy_from_user+0x2d/0xb0 [ 2175.478934][ T5834] sctp_getsockopt_maxburst+0x189/0x670 [ 2175.478955][ T5834] ? __pfx_sctp_getsockopt_maxburst+0x10/0x10 [ 2175.478968][ T5834] ? sctp_getsockopt+0x12f/0xb90 [ 2175.478979][ T5834] ? __local_bh_enable_ip+0xd0/0x130 [ 2175.478992][ T5834] sctp_getsockopt+0x8b9/0xb90 [ 2175.479002][ T5834] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 2175.479017][ T5834] do_sock_getsockopt+0x51d/0x7e0 [ 2175.479033][ T5834] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2175.479064][ T5834] ? __fget_files+0x3a0/0x420 [ 2175.479082][ T5834] ? __fget_files+0x2a/0x420 [ 2175.479104][ T5834] __x64_sys_getsockopt+0x1a4/0x240 [ 2175.479128][ T5834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.479146][ T5834] do_syscall_64+0x15f/0xf80 [ 2175.479165][ T5834] ? trace_irq_disable+0x3b/0x140 [ 2175.479186][ T5834] ? clear_bhb_loop+0x40/0x90 [ 2175.479206][ T5834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2175.479216][ T5834] RIP: 0033:0x7fe3a719ce59 [ 2175.479226][ T5834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2175.479234][ T5834] RSP: 002b:00007fe3a7fa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2175.479246][ T5834] RAX: ffffffffffffffda RBX: 00007fe3a7416090 RCX: 00007fe3a719ce59 [ 2175.479253][ T5834] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 2175.479258][ T5834] RBP: 00007fe3a7fa7090 R08: 0000200000000080 R09: 0000000000000000 [ 2175.479265][ T5834] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2175.479271][ T5834] R13: 00007fe3a7416128 R14: 00007fe3a7416090 R15: 00007fe3a753fa48 [ 2175.479286][ T5834] [ 2175.692107][ T5685] usb 8-1: Using ep0 maxpacket: 16 [ 2175.705304][ T5685] usb 8-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 2175.714734][ T5685] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.735728][ T5685] usb 8-1: config 0 descriptor?? [ 2175.752615][ T5685] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 2175.763539][ T6414] usb 4-1: USB disconnect, device number 127 [ 2175.996665][ T5685] gspca_sonixj: reg_w1 err -71 [ 2176.013489][ T5685] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 2176.043793][ T5685] usb 8-1: USB disconnect, device number 43 [ 2176.113871][ T5846] FAULT_INJECTION: forcing a failure. [ 2176.113871][ T5846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2176.127507][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.7.10240 Tainted: G L syzkaller #0 PREEMPT(full) [ 2176.127532][ T5846] Tainted: [L]=SOFTLOCKUP [ 2176.127539][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2176.127549][ T5846] Call Trace: [ 2176.127556][ T5846] [ 2176.127564][ T5846] dump_stack_lvl+0xe8/0x150 [ 2176.127590][ T5846] should_fail_ex+0x412/0x560 [ 2176.127620][ T5846] _copy_from_user+0x2d/0xb0 [ 2176.127644][ T5846] kstrtouint_from_user+0xd6/0x180 [ 2176.127666][ T5846] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2176.127702][ T5846] proc_fail_nth_write+0x8e/0x210 [ 2176.127724][ T5846] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2176.127749][ T5846] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2176.127771][ T5846] vfs_write+0x29a/0xb90 [ 2176.127801][ T5846] ? __pfx_vfs_write+0x10/0x10 [ 2176.127825][ T5846] ? __fget_files+0x2a/0x420 [ 2176.127848][ T5846] ? __fget_files+0x3a0/0x420 [ 2176.127866][ T5846] ? __fget_files+0x2a/0x420 [ 2176.127893][ T5846] ksys_write+0x150/0x270 [ 2176.127913][ T5846] ? __irq_exit_rcu+0xca/0x220 [ 2176.127939][ T5846] ? __pfx_ksys_write+0x10/0x10 [ 2176.127958][ T5846] ? handle_softirqs+0x715/0x840 [ 2176.127983][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.128001][ T5846] do_syscall_64+0x15f/0xf80 [ 2176.128026][ T5846] ? clear_bhb_loop+0x40/0x90 [ 2176.128046][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2176.128063][ T5846] RIP: 0033:0x7ff73035d68e [ 2176.128079][ T5846] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2176.128093][ T5846] RSP: 002b:00007ff73123afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2176.128111][ T5846] RAX: ffffffffffffffda RBX: 00007ff73123b6c0 RCX: 00007ff73035d68e [ 2176.128123][ T5846] RDX: 0000000000000001 RSI: 00007ff73123b0a0 RDI: 0000000000000005 [ 2176.128133][ T5846] RBP: 00007ff73123b090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.128143][ T5846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.128153][ T5846] R13: 00007ff730616038 R14: 00007ff730615fa0 R15: 00007ff73073fa48 [ 2176.128181][ T5846] [ 2176.409447][T11821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 2176.506592][ T5848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2176.532125][ T5848] tipc: Enabled bearer , priority 0 [ 2176.542076][ T5847] tipc: Disabling bearer [ 2176.585350][T11821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2176.598530][T11821] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2176.616774][T11821] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 2176.627154][T11821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.675582][T11821] usb 4-1: config 0 descriptor?? [ 2176.918942][ T5844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2176.936825][ T5844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2176.953333][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10239'. [ 2176.994326][ T5862] syz.4.10246 (5862): drop_caches: 2 [ 2176.994587][ T5844] macvtap1: entered promiscuous mode [ 2177.006918][ T5844] bridge0: entered promiscuous mode [ 2177.007207][ T5863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10239'. [ 2177.025607][ T5844] macvtap1: entered allmulticast mode [ 2177.031400][ T5844] bridge0: entered allmulticast mode [ 2177.072852][ T5863] bridge0: left allmulticast mode [ 2177.086220][ T5863] bridge0: left promiscuous mode [ 2177.111954][ T3261] usb 4-1: USB disconnect, device number 2 [ 2177.199725][T11821] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 2177.223469][ T30] audit: type=1326 audit(1778940994.163:3763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.275033][ T5869] veth0_to_bond: Caught tx_queue_len zero misconfig [ 2177.281956][ T30] audit: type=1326 audit(1778940994.163:3764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.320679][ T30] audit: type=1326 audit(1778940994.173:3765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.371386][T11821] usb 8-1: Using ep0 maxpacket: 16 [ 2177.389947][T11821] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 2177.398920][T11821] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.408023][T11821] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.417213][T11821] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 2177.426325][T11821] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2177.449955][ T30] audit: type=1326 audit(1778940994.173:3766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.453465][T11821] usb 8-1: config 0 has no interface number 0 [ 2177.504002][T11821] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2177.528043][T11821] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2177.538694][T11821] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2177.551804][ T30] audit: type=1326 audit(1778940994.193:3767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.554507][T11821] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2177.606701][T11821] usb 8-1: config 0 interface 125 has no altsetting 0 [ 2177.625433][T11821] usb 8-1: config 0 interface 125 has no altsetting 2 [ 2177.647010][T11821] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2177.662711][ T30] audit: type=1326 audit(1778940994.193:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.670787][T11821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2177.698184][ T30] audit: type=1326 audit(1778940994.193:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.760145][T11821] usb 8-1: Product: syz [ 2177.767264][T11821] usb 8-1: Manufacturer: syz [ 2177.775694][T11821] usb 8-1: SerialNumber: syz [ 2177.793460][T11821] usb 8-1: config 0 descriptor?? [ 2177.810148][T11821] usb 8-1: selecting invalid altsetting 2 [ 2177.824864][ T30] audit: type=1326 audit(1778940994.203:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.900936][ T30] audit: type=1326 audit(1778940994.203:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2177.957544][ T30] audit: type=1326 audit(1778940994.203:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5868 comm="syz.6.10249" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd99919ce59 code=0x7ffc0000 [ 2178.119267][ T6414] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 2178.256172][ T5860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2178.269256][ T6414] usb 4-1: Using ep0 maxpacket: 8 [ 2178.278682][ T6414] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2178.295200][ T5860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2178.311436][ T6414] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 7 [ 2178.341578][ T6414] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 2178.389205][ T6414] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 2178.410601][ T6414] usb 4-1: Product: syz [ 2178.425125][ T6414] usb 4-1: Manufacturer: syz [ 2178.429965][ T6414] usb 4-1: SerialNumber: syz [ 2178.449794][ T6414] usb 4-1: config 0 descriptor?? [ 2178.587727][ T5879] tipc: Enabling of bearer rejected, already enabled [ 2178.614677][T24304] usb 2-1: string descriptor 0 read error: -71 [ 2178.626087][T24304] uclogic 0003:5543:3031.0094: failed retrieving string descriptor #200: -71 [ 2178.635379][T24304] uclogic 0003:5543:3031.0094: failed retrieving pen parameters: -71 [ 2178.645145][T24304] uclogic 0003:5543:3031.0094: failed probing pen v2 parameters: -71 [ 2178.653757][T24304] uclogic 0003:5543:3031.0094: failed probing parameters: -71 [ 2178.661729][T24304] uclogic 0003:5543:3031.0094: probe with driver uclogic failed with error -71 [ 2178.694455][T24304] usb 2-1: USB disconnect, device number 64 [ 2178.806736][ T3261] usb 4-1: USB disconnect, device number 3 [ 2178.890049][T11821] get_1284_register timeout [ 2178.890548][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.894909][ C0] usb 8-1: async_complete: urb error -104 [ 2178.902941][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.909101][ C0] usb 8-1: async_complete: urb error -104 [ 2178.916730][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2178.922859][ C0] usb 8-1: async_complete: urb error -104 [ 2178.930472][ T1177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2179.259417][T11821] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 2179.432132][T11821] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2179.449268][T11821] usb 2-1: config 0 has no interface number 0 [ 2179.457555][T11821] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2179.467989][T11821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2179.476092][T11821] usb 2-1: Product: syz [ 2179.482008][T11821] usb 2-1: Manufacturer: syz [ 2179.486630][T11821] usb 2-1: SerialNumber: syz [ 2179.493853][T11821] usb 2-1: config 0 descriptor?? [ 2179.503205][T11821] usb 2-1: selecting invalid altsetting 1 [ 2179.509031][T11821] dvb_ttusb_budget: ttusb_init_controller: error [ 2179.516200][T11821] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2179.554696][T11821] DVB: Unable to find symbol stv0299_attach() [ 2179.582075][T11821] DVB: Unable to find symbol tda8083_attach() [ 2179.588177][T11821] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2179.712437][ T6414] usb 2-1: USB disconnect, device number 65 [ 2179.938272][T24304] usb 8-1: USB disconnect, device number 44 [ 2180.022236][ T5893] vlan0: entered promiscuous mode [ 2180.027403][ T5893] veth0_to_bond: entered promiscuous mode [ 2180.033592][ T5893] vlan0: entered allmulticast mode [ 2180.038776][ T5893] veth0_to_bond: entered allmulticast mode [ 2180.322821][ T5898] syz.1.10258 (5898): drop_caches: 2 [ 2180.338763][ T5900] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10259'. [ 2180.383911][ T5901] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10259'. [ 2180.425261][ T5901] syz.6.10259 (5901): drop_caches: 2 [ 2180.439717][ T5900] syz.6.10259 (5900): drop_caches: 2 [ 2180.523474][ T5908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2180.652644][ T5912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10261'. [ 2180.669464][ T6414] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2180.839492][ T6414] usb 2-1: Using ep0 maxpacket: 8 [ 2180.859645][ T6414] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2180.871535][ T6414] usb 2-1: config 4 has an invalid interface number: 163 but max is 0 [ 2180.887822][ T6414] usb 2-1: config 4 has no interface number 0 [ 2180.896935][ T6414] usb 2-1: config 4 interface 163 has no altsetting 0 [ 2180.913796][ T6414] usb 2-1: New USB device found, idVendor=106c, idProduct=caa3, bcdDevice=49.b0 [ 2180.932392][ T6414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.954985][ T6414] usb 2-1: Product: syz [ 2180.976202][ T6414] usb 2-1: Manufacturer: syz [ 2180.988738][ T6414] usb 2-1: SerialNumber: syz [ 2181.230221][ T5903] netlink: 'syz.1.10260': attribute type 1 has an invalid length. [ 2181.278679][ T5903] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2181.310275][ T5767] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 2181.368175][ T5903] veth3: entered promiscuous mode [ 2181.395615][ T5903] bond3: (slave veth3): Enslaving as an active interface with a down link [ 2181.424037][ T5921] erspan0: entered allmulticast mode [ 2181.448473][ T5921] bond3: (slave erspan0): making interface the new active one [ 2181.459193][ T5767] usb 8-1: device descriptor read/64, error -71 [ 2181.502510][ T5921] erspan0: entered promiscuous mode [ 2181.518186][ T5921] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 2181.540085][ T5922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2181.596729][ T5922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2181.723050][ T6414] qmi_wwan 2-1:4.163: bogus CDC Union: master=0, slave=0 [ 2181.731277][ T5767] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 2181.753308][ T6414] qmi_wwan 2-1:4.163: probe with driver qmi_wwan failed with error -22 [ 2181.770794][ T6414] usb 2-1: USB disconnect, device number 66 [ 2181.879383][ T5767] usb 8-1: device descriptor read/64, error -71 [ 2181.989581][ T5767] usb usb8-port1: attempt power cycle [ 2182.350249][ T5767] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 2182.394165][ T5767] usb 8-1: device descriptor read/8, error -71 [ 2182.629298][T11821] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2182.659268][ T5767] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 2182.691846][ T5767] usb 8-1: device descriptor read/8, error -71 [ 2182.799443][T11821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2182.815513][T11821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2182.819986][ T5767] usb usb8-port1: unable to enumerate USB device [ 2182.826223][T11821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2182.842443][T11821] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2182.852844][T11821] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2182.864237][T11821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2182.875813][T11821] usb 2-1: config 0 descriptor?? [ 2183.111995][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.126293][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.144028][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2183.154586][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2183.168957][T11821] hdpvr 2-1:0.0: firmware version 0xf4 dated М~FLjuK-M/h&O8b< [ 2183.178706][T11821] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 2183.221822][ T5938] SET target dimension over the limit! [ 2183.417487][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 2183.417516][ T30] audit: type=1800 audit(1778941000.353:3833): pid=5944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.10275" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2183.630382][T11821] hdpvr 2-1:0.0: Could not setup controls [ 2183.663168][T11821] hdpvr 2-1:0.0: registering videodev failed [ 2183.698142][T11821] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -71 [ 2183.730696][T11821] usb 2-1: USB disconnect, device number 67 [ 2183.774056][ T5946] FAULT_INJECTION: forcing a failure. [ 2183.774056][ T5946] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.798565][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: syz.6.10276 Tainted: G L syzkaller #0 PREEMPT(full) [ 2183.798591][ T5946] Tainted: [L]=SOFTLOCKUP [ 2183.798597][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2183.798607][ T5946] Call Trace: [ 2183.798617][ T5946] [ 2183.798624][ T5946] dump_stack_lvl+0xe8/0x150 [ 2183.798642][ T5946] should_fail_ex+0x412/0x560 [ 2183.798658][ T5946] should_failslab+0xa8/0x100 [ 2183.798673][ T5946] ? skb_clone+0x212/0x3a0 [ 2183.798687][ T5946] kmem_cache_alloc_noprof+0x87/0x650 [ 2183.798701][ T5946] ? __netlink_lookup+0xc6/0x8b0 [ 2183.798719][ T5946] skb_clone+0x212/0x3a0 [ 2183.798734][ T5946] __netlink_deliver_tap+0x404/0x850 [ 2183.798752][ T5946] ? netlink_deliver_tap+0x2e/0x1b0 [ 2183.798765][ T5946] netlink_deliver_tap+0x19c/0x1b0 [ 2183.798778][ T5946] netlink_unicast+0x730/0x8e0 [ 2183.798795][ T5946] netlink_sendmsg+0x813/0xb40 [ 2183.798812][ T5946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2183.798826][ T5946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2183.798840][ T5946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2183.798856][ T5946] ____sys_sendmsg+0x972/0x9f0 [ 2183.798869][ T5946] ? __might_fault+0xaf/0x130 [ 2183.798884][ T5946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2183.798901][ T5946] ? import_iovec+0x73/0xa0 [ 2183.798916][ T5946] ___sys_sendmsg+0x2a5/0x360 [ 2183.798928][ T5946] ? __lock_acquire+0x6b5/0x2cf0 [ 2183.798940][ T5946] ? __pfx____sys_sendmsg+0x10/0x10 [ 2183.798970][ T5946] ? __fget_files+0x2a/0x420 [ 2183.798980][ T5946] ? __fget_files+0x3a0/0x420 [ 2183.798996][ T5946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2183.799010][ T5946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2183.799027][ T5946] ? __pfx_ksys_write+0x10/0x10 [ 2183.799054][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.799070][ T5946] do_syscall_64+0x15f/0xf80 [ 2183.799092][ T5946] ? trace_irq_disable+0x3b/0x140 [ 2183.799108][ T5946] ? clear_bhb_loop+0x40/0x90 [ 2183.799120][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2183.799130][ T5946] RIP: 0033:0x7fd99919ce59 [ 2183.799140][ T5946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2183.799149][ T5946] RSP: 002b:00007fd99a0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2183.799161][ T5946] RAX: ffffffffffffffda RBX: 00007fd999415fa0 RCX: 00007fd99919ce59 [ 2183.799168][ T5946] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2183.799174][ T5946] RBP: 00007fd99a0b2090 R08: 0000000000000000 R09: 0000000000000000 [ 2183.799180][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2183.799186][ T5946] R13: 00007fd999416038 R14: 00007fd999415fa0 R15: 00007fd99953fa48 [ 2183.799200][ T5946] [ 2184.304982][ T5950] FAULT_INJECTION: forcing a failure. [ 2184.304982][ T5950] name failslab, interval 1, probability 0, space 0, times 0 [ 2184.320355][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.6.10277 Tainted: G L syzkaller #0 PREEMPT(full) [ 2184.320371][ T5950] Tainted: [L]=SOFTLOCKUP [ 2184.320376][ T5950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2184.320382][ T5950] Call Trace: [ 2184.320387][ T5950] [ 2184.320392][ T5950] dump_stack_lvl+0xe8/0x150 [ 2184.320408][ T5950] should_fail_ex+0x412/0x560 [ 2184.320424][ T5950] should_failslab+0xa8/0x100 [ 2184.320440][ T5950] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 2184.320455][ T5950] ? __alloc_skb+0x1d0/0x7d0 [ 2184.320466][ T5950] ? __local_bh_enable_ip+0xd0/0x130 [ 2184.320478][ T5950] __alloc_skb+0x1d0/0x7d0 [ 2184.320492][ T5950] skb_segment+0xf87/0x4090 [ 2184.320514][ T5950] ? skb_checksum+0x7c7/0x8c0 [ 2184.320533][ T5950] inet_gso_segment+0x643/0x14f0 [ 2184.320550][ T5950] ? __pfx_inet_gso_segment+0x10/0x10 [ 2184.320560][ T5950] skb_mac_gso_segment+0x31c/0x690 [ 2184.320647][ T5950] ? skb_mac_gso_segment+0x182/0x690 [ 2184.320663][ T5950] ? __pfx_skb_mac_gso_segment+0x10/0x10 [ 2184.320678][ T5950] ? __pfx_netif_skb_features+0x10/0x10 [ 2184.320695][ T5950] __skb_gso_segment+0x376/0x540 [ 2184.320712][ T5950] validate_xmit_skb+0xa21/0x14a0 [ 2184.320725][ T5950] ? netdev_pick_tx+0x624/0xf30 [ 2184.320744][ T5950] __dev_queue_xmit+0xb2f/0x3950 [ 2184.320761][ T5950] ? __dev_queue_xmit+0x2b6/0x3950 [ 2184.320780][ T5950] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2184.320797][ T5950] ? virtio_net_hdr_to_skb+0xa0e/0x1630 [ 2184.320818][ T5950] ? __pfx_virtio_net_hdr_to_skb+0x10/0x10 [ 2184.320831][ T5950] ? packet_xmit+0x68/0x320 [ 2184.320845][ T5950] packet_sendmsg+0x3c81/0x4fb0 [ 2184.320861][ T5950] ? __lock_acquire+0x6b5/0x2cf0 [ 2184.320877][ T5950] ? __lock_acquire+0x6b5/0x2cf0 [ 2184.320896][ T5950] ? __pfx_packet_sendmsg+0x10/0x10 [ 2184.320905][ T5950] ? aa_sk_perm+0x6d5/0x900 [ 2184.320921][ T5950] ? __pfx_aa_sk_perm+0x10/0x10 [ 2184.320930][ T5950] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 2184.320947][ T5950] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2184.320960][ T5950] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2184.320973][ T5950] ? __pfx_packet_sendmsg+0x10/0x10 [ 2184.320983][ T5950] __sys_sendto+0x672/0x710 [ 2184.320997][ T5950] ? __pfx___sys_sendto+0x10/0x10 [ 2184.321008][ T5950] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2184.321028][ T5950] ? __fget_files+0x3a0/0x420 [ 2184.321044][ T5950] ? ksys_write+0x242/0x270 [ 2184.321058][ T5950] ? __pfx_ksys_write+0x10/0x10 [ 2184.321072][ T5950] __x64_sys_sendto+0xde/0x100 [ 2184.321084][ T5950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.321094][ T5950] do_syscall_64+0x15f/0xf80 [ 2184.321107][ T5950] ? trace_irq_disable+0x3b/0x140 [ 2184.321121][ T5950] ? clear_bhb_loop+0x40/0x90 [ 2184.321132][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2184.321145][ T5950] RIP: 0033:0x7fd99919ce59 [ 2184.321155][ T5950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2184.321164][ T5950] RSP: 002b:00007fd99a0b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 2184.321174][ T5950] RAX: ffffffffffffffda RBX: 00007fd999415fa0 RCX: 00007fd99919ce59 [ 2184.321181][ T5950] RDX: 000000000001fffc RSI: 0000200000000180 RDI: 0000000000000004 [ 2184.321187][ T5950] RBP: 00007fd99a0b2090 R08: 0000200000000140 R09: 0000000000000014 [ 2184.321193][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2184.321199][ T5950] R13: 00007fd999416038 R14: 00007fd999415fa0 R15: 00007fd99953fa48 [ 2184.321213][ T5950] [ 2184.989364][ T29] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 2185.019832][ T6414] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 2185.167086][ T29] usb 8-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 2185.177225][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2185.188360][ T6414] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2185.211504][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2185.223370][ T29] usb 8-1: Product: syz [ 2185.231351][ T29] usb 8-1: Manufacturer: syz [ 2185.241094][ T29] usb 8-1: SerialNumber: syz [ 2185.247468][ T6414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2185.268140][ T29] usb 8-1: config 0 descriptor?? [ 2185.281421][ T6414] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2185.302689][ T29] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 2185.331381][ T6414] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2185.344619][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2185.363299][ T6414] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2185.375664][ T29] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 2185.389202][ T6414] usb 4-1: Manufacturer: syz [ 2185.396913][ T29] usb 8-1: media controller created [ 2185.404442][ T6414] usb 4-1: config 0 descriptor?? [ 2185.434437][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2185.508558][ T29] DVB: Unable to find symbol mt352_attach() [ 2185.523105][ T5951] FAULT_INJECTION: forcing a failure. [ 2185.523105][ T5951] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.537630][ T5951] CPU: 1 UID: 0 PID: 5951 Comm: syz.7.10278 Tainted: G L syzkaller #0 PREEMPT(full) [ 2185.537657][ T5951] Tainted: [L]=SOFTLOCKUP [ 2185.537662][ T5951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2185.537673][ T5951] Call Trace: [ 2185.537680][ T5951] [ 2185.537687][ T5951] dump_stack_lvl+0xe8/0x150 [ 2185.537712][ T5951] should_fail_ex+0x412/0x560 [ 2185.537742][ T5951] should_failslab+0xa8/0x100 [ 2185.537767][ T5951] __kmalloc_noprof+0xe8/0x760 [ 2185.537788][ T5951] ? tomoyo_encode+0x28b/0x550 [ 2185.537815][ T5951] tomoyo_encode+0x28b/0x550 [ 2185.537840][ T5951] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2185.537867][ T5951] ? tomoyo_path_number_perm+0x219/0x630 [ 2185.537885][ T5951] tomoyo_path_number_perm+0x246/0x630 [ 2185.537905][ T5951] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2185.537921][ T5951] ? __lock_acquire+0x6b5/0x2cf0 [ 2185.537952][ T5951] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2185.537988][ T5951] ? __fget_files+0x2a/0x420 [ 2185.538008][ T5951] ? __fget_files+0x2a/0x420 [ 2185.538032][ T5951] ? __fget_files+0x3a0/0x420 [ 2185.538049][ T5951] ? __fget_files+0x2a/0x420 [ 2185.538071][ T5951] security_file_ioctl+0xc3/0x2a0 [ 2185.538092][ T5951] __se_sys_ioctl+0x47/0x170 [ 2185.538114][ T5951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.538132][ T5951] do_syscall_64+0x15f/0xf80 [ 2185.538152][ T5951] ? trace_irq_disable+0x3b/0x140 [ 2185.538174][ T5951] ? clear_bhb_loop+0x40/0x90 [ 2185.538194][ T5951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.538210][ T5951] RIP: 0033:0x7ff73039ce59 [ 2185.538226][ T5951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2185.538240][ T5951] RSP: 002b:00007ff73123b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2185.538257][ T5951] RAX: ffffffffffffffda RBX: 00007ff730615fa0 RCX: 00007ff73039ce59 [ 2185.538269][ T5951] RDX: 0000200000000500 RSI: 0000000000000707 RDI: 0000000000000004 [ 2185.538280][ T5951] RBP: 00007ff73123b090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.538289][ T5951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.538299][ T5951] R13: 00007ff730616038 R14: 00007ff730615fa0 R15: 00007ff73073fa48 [ 2185.538327][ T5951] [ 2185.804033][ T29] DVB: Unable to find symbol nxt6000_attach() [ 2185.810464][ T29] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 2185.820258][ T5951] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2185.831112][ T29] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input248 [ 2185.853648][ T29] dvb-usb: schedule remote query interval to 1000 msecs. [ 2185.861137][ T29] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 2185.871696][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 2185.877469][ T29] dvb-usb: bulk message failed: -22 (7/0) [ 2185.914503][ T6415] usb 8-1: USB disconnect, device number 49 [ 2185.997815][ T6414] appleir 0003:05AC:8243.0095: unknown main item tag 0x0 [ 2186.011442][ T6414] appleir 0003:05AC:8243.0095: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 2186.071469][ T6415] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 2186.249949][ T5955] FAULT_INJECTION: forcing a failure. [ 2186.249949][ T5955] name failslab, interval 1, probability 0, space 0, times 0 [ 2186.263312][ T5955] CPU: 1 UID: 0 PID: 5955 Comm: syz.3.10279 Tainted: G L syzkaller #0 PREEMPT(full) [ 2186.263339][ T5955] Tainted: [L]=SOFTLOCKUP [ 2186.263345][ T5955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2186.263355][ T5955] Call Trace: [ 2186.263362][ T5955] [ 2186.263370][ T5955] dump_stack_lvl+0xe8/0x150 [ 2186.263395][ T5955] should_fail_ex+0x412/0x560 [ 2186.263421][ T5955] should_failslab+0xa8/0x100 [ 2186.263446][ T5955] __kmalloc_noprof+0xe8/0x760 [ 2186.263469][ T5955] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2186.263496][ T5955] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2186.263519][ T5955] ? tomoyo_domain+0xd7/0x130 [ 2186.263545][ T5955] ? tomoyo_path_number_perm+0x219/0x630 [ 2186.263564][ T5955] tomoyo_path_number_perm+0x246/0x630 [ 2186.263585][ T5955] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2186.263603][ T5955] ? __lock_acquire+0x6b5/0x2cf0 [ 2186.263635][ T5955] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2186.263678][ T5955] ? __fget_files+0x2a/0x420 [ 2186.263699][ T5955] ? __fget_files+0x2a/0x420 [ 2186.263716][ T5955] ? __fget_files+0x3a0/0x420 [ 2186.263733][ T5955] ? __fget_files+0x2a/0x420 [ 2186.263755][ T5955] security_file_ioctl+0xc3/0x2a0 [ 2186.263775][ T5955] __se_sys_ioctl+0x47/0x170 [ 2186.263798][ T5955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.263815][ T5955] do_syscall_64+0x15f/0xf80 [ 2186.263837][ T5955] ? trace_irq_disable+0x3b/0x140 [ 2186.263860][ T5955] ? clear_bhb_loop+0x40/0x90 [ 2186.263883][ T5955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2186.263900][ T5955] RIP: 0033:0x7f30d999ce59 [ 2186.263915][ T5955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2186.263935][ T5955] RSP: 002b:00007f30da855028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2186.263953][ T5955] RAX: ffffffffffffffda RBX: 00007f30d9c15fa0 RCX: 00007f30d999ce59 [ 2186.263965][ T5955] RDX: 0000200000000400 RSI: 0000000081044804 RDI: 0000000000000004 [ 2186.263975][ T5955] RBP: 00007f30da855090 R08: 0000000000000000 R09: 0000000000000000 [ 2186.263985][ T5955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2186.263995][ T5955] R13: 00007f30d9c16038 R14: 00007f30d9c15fa0 R15: 00007f30d9d3fa48 [ 2186.264023][ T5955] [ 2186.264094][ T5955] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2186.789604][ T6415] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 2186.966552][ T6415] usb 8-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 2186.989175][ T6415] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2187.004112][ T6415] usb 8-1: config 0 descriptor?? [ 2187.022008][ T6415] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2187.220929][ T6415] gp8psk: usb in 128 operation failed. [ 2187.229349][ T6415] gp8psk: usb in 137 operation failed. [ 2187.234859][ T6415] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2187.245160][ T6415] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 2187.254113][ T6415] usb 8-1: media controller created [ 2187.269858][ T6415] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2187.299339][ T6415] gp8psk_fe: Frontend attached [ 2187.305114][ T6415] usb 8-1: DVB: registering adapter 4 frontend 0 (Genpix DVB-S)... [ 2187.320847][ T6415] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2187.568575][ T6415] gp8psk: usb in 137 operation failed. [ 2187.577790][ T6415] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 2187.587497][ T6415] gp8psk: found Genpix USB device pID = 203 (hex) [ 2187.597229][ T6415] usb 8-1: USB disconnect, device number 50 [ 2187.675142][ T6415] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 2187.935611][ T5984] syz.3.10287 (5984): drop_caches: 2 [ 2188.060567][T24304] usb 4-1: USB disconnect, device number 4 [ 2188.469285][T24304] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 2188.481199][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.489451][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.497614][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.505813][T25756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2188.691410][T24304] usb 4-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 2188.713631][T24304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2188.752939][T24304] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2188.778592][T24304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2188.812321][T24304] usb 4-1: SerialNumber: syz [ 2189.864206][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10293'. [ 2189.873969][ T6005] netlink: 38543 bytes leftover after parsing attributes in process `syz.7.10293'. [ 2189.885449][ T6006] netlink: 38543 bytes leftover after parsing attributes in process `syz.7.10293'. [ 2189.981622][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.7.10294'. [ 2190.218056][ T6013] FAULT_INJECTION: forcing a failure. [ 2190.218056][ T6013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2190.251272][ T6013] CPU: 1 UID: 0 PID: 6013 Comm: syz.7.10296 Tainted: G L syzkaller #0 PREEMPT(full) [ 2190.251299][ T6013] Tainted: [L]=SOFTLOCKUP [ 2190.251305][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2190.251316][ T6013] Call Trace: [ 2190.251322][ T6013] [ 2190.251329][ T6013] dump_stack_lvl+0xe8/0x150 [ 2190.251353][ T6013] should_fail_ex+0x412/0x560 [ 2190.251379][ T6013] _copy_from_user+0x2d/0xb0 [ 2190.251402][ T6013] generic_map_update_batch+0x69a/0x990 [ 2190.251432][ T6013] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2190.251452][ T6013] ? __fget_files+0x2a/0x420 [ 2190.251477][ T6013] ? __pfx_generic_map_update_batch+0x10/0x10 [ 2190.251495][ T6013] bpf_map_do_batch+0x39b/0x630 [ 2190.251534][ T6013] __sys_bpf+0x7c1/0x950 [ 2190.251559][ T6013] ? __pfx___sys_bpf+0x10/0x10 [ 2190.251595][ T6013] ? ksys_write+0x242/0x270 [ 2190.251618][ T6013] ? __pfx_ksys_write+0x10/0x10 [ 2190.251635][ T6013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.251655][ T6013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.251672][ T6013] __x64_sys_bpf+0x7c/0x90 [ 2190.251692][ T6013] do_syscall_64+0x15f/0xf80 [ 2190.251714][ T6013] ? trace_irq_disable+0x3b/0x140 [ 2190.251735][ T6013] ? clear_bhb_loop+0x40/0x90 [ 2190.251755][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.251771][ T6013] RIP: 0033:0x7ff73039ce59 [ 2190.251788][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2190.251800][ T6013] RSP: 002b:00007ff73121a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2190.251819][ T6013] RAX: ffffffffffffffda RBX: 00007ff730616090 RCX: 00007ff73039ce59 [ 2190.251830][ T6013] RDX: 0000000000000038 RSI: 00002000000001c0 RDI: 000000000000001a [ 2190.251841][ T6013] RBP: 00007ff73121a090 R08: 0000000000000000 R09: 0000000000000000 [ 2190.251851][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2190.251860][ T6013] R13: 00007ff730616128 R14: 00007ff730616090 R15: 00007ff73073fa48 [ 2190.251884][ T6013] [ 2190.739998][ T6023] syz.7.10299 (6023): drop_caches: 2 [ 2190.925373][ T6028] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10301'. [ 2190.966893][ T6028] netlink: 52 bytes leftover after parsing attributes in process `syz.7.10301'. [ 2191.160447][T24304] usb 4-1: 0:2 : does not exist [ 2191.183034][T24304] usb 4-1: unit 5 not found! [ 2191.216776][ T6032] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2191.238732][ T6032] tipc: Enabled bearer , priority 0 [ 2191.256426][ T6031] tipc: Disabling bearer [ 2191.286336][T24304] usb 4-1: USB disconnect, device number 5 [ 2191.431302][ T6415] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 2191.448921][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10304'. [ 2191.472463][ T6034] hsr_slave_1 (unregistering): left promiscuous mode [ 2191.596055][ T6415] usb 8-1: Using ep0 maxpacket: 32 [ 2191.610913][ T6415] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 2191.645128][ T6415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 2191.656956][ T6415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 2191.667683][ T6415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 2191.698291][ T6415] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 2191.713178][ T6415] usb 8-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 2191.722651][ T6415] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.731319][ T6415] usb 8-1: Product: syz [ 2191.735590][ T6415] usb 8-1: Manufacturer: syz [ 2191.741434][ T6415] usb 8-1: SerialNumber: syz [ 2191.756852][ T6415] usb 8-1: config 0 descriptor?? [ 2191.777144][ T6010] Set syz1 is full, maxelem 65536 reached [ 2191.853800][ T6041] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2191.979461][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2191.992640][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.003936][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.013712][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.020366][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.026693][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.035096][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.041693][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.047966][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.055685][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.063042][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.069527][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.075807][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.085484][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.092181][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.098460][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.099307][T25942] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 2192.105304][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.119523][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.130985][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.137284][ T6415] iforce 8-1:0.0: usb_submit_urb failed: -71 [ 2192.144036][ T6415] input input249: Timeout waiting for response from device. [ 2192.157615][ T6415] usb 8-1: USB disconnect, device number 51 [ 2192.259473][T25942] usb 4-1: Using ep0 maxpacket: 32 [ 2192.266224][T25942] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2192.280227][T25942] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 2192.289674][T25942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.297727][T25942] usb 4-1: Product: syz [ 2192.302075][T25942] usb 4-1: Manufacturer: syz [ 2192.306885][T25942] usb 4-1: SerialNumber: syz [ 2192.318583][T25942] snd-ua101 4-1:1.1: invalid format type [ 2192.326417][T25942] snd-ua101 4-1:1.0: invalid num_altsetting [ 2192.381184][T11821] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 2192.561339][T11821] usb 2-1: config 1 has an invalid interface number: 128 but max is 1 [ 2192.569959][T11821] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2192.580496][T11821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2192.589503][T11821] usb 2-1: config 1 has no interface number 0 [ 2192.595774][T11821] usb 2-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2192.611228][T11821] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2192.620646][T11821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.628664][T11821] usb 2-1: Product: syz [ 2192.633599][T11821] usb 2-1: Manufacturer: syz [ 2192.638219][T11821] usb 2-1: SerialNumber: syz [ 2192.649746][T11821] cdc_wdm 2-1:1.128: probe with driver cdc_wdm failed with error -22 [ 2192.769484][ T6415] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 2192.929577][ T6415] usb 8-1: Using ep0 maxpacket: 8 [ 2192.937254][ T6415] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 2192.945975][ T6415] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2192.955934][ T6415] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2192.968057][ T6415] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2192.978285][ T6415] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2192.991707][ T6415] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2193.001074][ T6415] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.214993][ T6415] usb 8-1: GET_CAPABILITIES returned 0 [ 2193.220848][ T6415] usbtmc 8-1:16.0: can't read capabilities [ 2193.583035][T25942] usb 8-1: USB disconnect, device number 52 [ 2193.592603][ T6049] usb 8-1: usbtmc_ioctl_clear_in_halt returned -19 [ 2193.679554][T13127] erspan0: left promiscuous mode [ 2194.239814][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.246633][ T6060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2194.248012][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.262910][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.270693][ T6060] tipc: Enabled bearer , priority 0 [ 2194.271196][T13127] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 2194.302474][ T6059] tipc: Disabling bearer [ 2194.576883][ T3084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2194.589993][ T3084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2194.599934][ T3084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2194.613228][ T3084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2194.627923][ T3084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2194.725260][ T6415] usb 4-1: USB disconnect, device number 6 [ 2194.869828][ T30] audit: type=1800 audit(1778941011.803:3834): pid=6067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10317" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2194.942210][ T6074] EXT4-fs: Conflicting test_dummy_encryption options [ 2194.963406][ T6074] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2194.969954][ T6074] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2195.055787][T25942] usb 2-1: USB disconnect, device number 68 [ 2195.065613][ T6075] hsr0: entered promiscuous mode [ 2195.868362][ T6093] syz_tun: entered allmulticast mode [ 2196.002886][ T6093] syz_tun: left allmulticast mode [ 2196.037219][ T6101] fuse: Unknown parameter 'rcotmode' [ 2196.122693][ T6070] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.156141][ T6070] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.173498][ T6110] netlink: 'syz.3.10326': attribute type 13 has an invalid length. [ 2196.201914][ T6070] bridge_slave_0: entered allmulticast mode [ 2196.210998][ T6110] netlink: 'syz.3.10326': attribute type 17 has an invalid length. [ 2196.228631][ T6070] bridge_slave_0: entered promiscuous mode [ 2196.331266][ T6110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2196.341754][ T6110] 8021q: adding VLAN 0 to HW filter on device team0 [ 2196.356442][ T6110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2196.417531][ T30] audit: type=1800 audit(1778941013.353:3835): pid=6114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.10327" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 2196.448428][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2196.458905][ T6110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2196.478730][ T6110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2196.494869][ T6110] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2196.558633][ T6070] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.577679][ T6070] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.592822][ T6070] bridge_slave_1: entered allmulticast mode [ 2196.601320][ T6070] bridge_slave_1: entered promiscuous mode [ 2196.611468][T30123] bridge0: port 1(bridge_slave_0) entered blocking state [ 2196.618571][T30123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2196.649570][T30123] bridge0: port 2(bridge_slave_1) entered blocking state [ 2196.656767][T30123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2196.719479][T27664] Bluetooth: hci2: command 0x0409 tx timeout [ 2196.719977][ T6414] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 2196.797803][ T6414] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 2197.022190][ T6070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2197.096803][ T6070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2197.364739][ T6070] team0: Port device team_slave_0 added [ 2197.382948][ T6070] team0: Port device team_slave_1 added [ 2197.478034][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2197.495442][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2197.522345][ T6070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2197.538726][ T6070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2197.546479][ T6070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2197.576129][ T6070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2197.723253][T10542] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.755174][ T6126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10335'. [ 2197.851387][ T6070] hsr_slave_0: entered promiscuous mode [ 2197.858430][ T6070] hsr_slave_1: entered promiscuous mode [ 2197.866537][ T6070] debugfs: 'hsr0' already exists in 'hsr' [ 2197.873100][ T6070] Cannot create hsr debugfs directory [ 2197.933806][T10542] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.077439][T10542] netdevsim netdevsim7 netdevsim1 (unregistering): left promiscuous mode [ 2198.105562][T10542] netdevsim netdevsim7 netdevsim1 (unregistering): left allmulticast mode [ 2198.123148][T10542] team0: Port device netdevsim1 removed [ 2198.132621][T10542] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.247672][T10542] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.510769][T10542] bridge_slave_1: left allmulticast mode [ 2198.520917][T10542] bridge_slave_1: left promiscuous mode [ 2198.535283][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.552532][T10542] bridge_slave_0: left allmulticast mode [ 2198.564893][T10542] bridge_slave_0: left promiscuous mode [ 2198.575667][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.669270][ C0] ------------[ cut here ]------------ [ 2198.677809][ C0] ODEBUG: free active (active state 0) object: ffff88804f942278 object type: timer_list hint: br_ip6_multicast_port_query_expired+0x0/0x380 [ 2198.692188][ C0] WARNING: lib/debugobjects.c:632 at debug_check_no_obj_freed+0x405/0x550, CPU#0: dhcpcd-run-hook/6138 [ 2198.703370][ C0] Modules linked in: [ 2198.710179][ C0] CPU: 0 UID: 0 PID: 6138 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 2198.721523][ C0] Tainted: [L]=SOFTLOCKUP [ 2198.725888][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2198.736005][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 2198.742412][ C0] Code: 89 44 24 20 e8 67 2e 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b7 28 8c 48 c7 c2 a0 bc 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 2198.762077][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010246 [ 2198.768162][ C0] RAX: ffffffff8a7e71f0 RBX: ffffffff9a63ebd0 RCX: 0000000000000000 [ 2198.776199][ C0] RDX: ffffffff8c28bca0 RSI: ffffffff8c28b720 RDI: ffffffff903bb0e0 [ 2198.784220][ C0] RBP: ffffffff8bcf3a20 R08: ffff88804f942278 R09: ffffffff8bcf4d80 [ 2198.792253][ C0] R10: dffffc0000000000 R11: ffffffff81b220d0 R12: ffff88804f942400 [ 2198.800265][ C0] R13: ffffffff903bb0e0 R14: ffff88804f942000 R15: ffff88804f942278 [ 2198.808640][ C0] FS: 0000000000000000(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 2198.817635][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2198.824282][ C0] CR2: 00007f5b8d5a0286 CR3: 00000000403f0000 CR4: 00000000003526f0 [ 2198.832302][ C0] Call Trace: [ 2198.835599][ C0] [ 2198.838454][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 2198.845558][ C0] kfree+0x13e/0x640 [ 2198.849511][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 2198.854564][ C0] ? kobject_put+0x228/0x560 [ 2198.859209][ C0] ? fill_pool+0x156/0x580 [ 2198.863646][ C0] kobject_put+0x228/0x560 [ 2198.868080][ C0] ? rcu_core+0x751/0x1070 [ 2198.872640][ C0] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 2198.877980][ C0] rcu_core+0x7cd/0x1070 [ 2198.882320][ C0] ? __pfx_rcu_core+0x10/0x10 [ 2198.887019][ C0] ? sched_balance_domains+0x7ea/0x900 [ 2198.892543][ C0] ? sched_balance_domains+0xf9/0x900 [ 2198.897944][ C0] handle_softirqs+0x22a/0x840 [ 2198.902755][ C0] ? __irq_exit_rcu+0xca/0x220 [ 2198.907577][ C0] __irq_exit_rcu+0xca/0x220 [ 2198.912209][ C0] irq_exit_rcu+0x9/0x30 [ 2198.916470][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2198.922149][ C0] [ 2198.925111][ C0] [ 2198.928048][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2198.934166][ C0] RIP: 0010:lock_release+0xb/0x3c0 [ 2198.939323][ C0] Code: be 2f 00 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 79 97 11 48 [ 2198.958987][ C0] RSP: 0018:ffffc9000398eeb0 EFLAGS: 00000202 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 2198.965105][ C0] RAX: 0000000000000001 RBX: ffffffff90c42c01 RCX: 0000000080000001 [ 2198.973305][ C0] RDX: ffffc9000398f001 RSI: ffffffff8176f256 RDI: ffffffff8e95cde0 [ 2198.981314][ C0] RBP: dffffc0000000000 R08: ffffc9000398f090 R09: 0000000000000000 [ 2198.989334][ C0] R10: ffffc9000398f058 R11: fffff52000731e0d R12: ffffc9000398f0a0 [ 2198.997355][ C0] R13: ffffc90003988000 R14: ffffc9000398f008 R15: ffffffff8176f256 [ 2199.005381][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.010586][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.015807][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.020992][ C0] unwind_next_frame+0x1bba/0x2550 [ 2199.026162][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.031326][ C0] ? arch_stack_walk+0xe3/0x150 [ 2199.036205][ C0] __unwind_start+0x5b8/0x760 [ 2199.040964][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2199.047155][ C0] arch_stack_walk+0xe3/0x150 [ 2199.051894][ C0] ? stack_trace_save+0xa9/0x100 [ 2199.056894][ C0] ? fill_pool+0x156/0x580 [ 2199.061359][ C0] stack_trace_save+0xa9/0x100 [ 2199.066155][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2199.071586][ C0] ? stack_depot_save_flags+0x33/0x810 [ 2199.077108][ C0] ? fill_pool+0x156/0x580 [ 2199.081570][ C0] kasan_save_track+0x3e/0x80 [ 2199.086320][ C0] __kasan_slab_alloc+0x6c/0x80 [ 2199.091239][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 2199.096720][ C0] ? fill_pool+0x156/0x580 [ 2199.101176][ C0] ? __mmput+0x118/0x430 [ 2199.105432][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 2199.111134][ C0] fill_pool+0x156/0x580 [ 2199.115391][ C0] ? debug_object_activate+0x47a/0x580 [ 2199.120899][ C0] ? __pfx_fill_pool+0x10/0x10 [ 2199.125713][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2199.131909][ C0] ? debug_object_activate+0x47a/0x580 [ 2199.137385][ C0] debug_object_activate+0x4a3/0x580 [ 2199.142734][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2199.148905][ C0] ? tear_down_vmas+0x312/0x520 [ 2199.153803][ C0] call_rcu+0x43/0x890 [ 2199.157927][ C0] ? tear_down_vmas+0x312/0x520 [ 2199.162821][ C0] kmem_cache_free+0x462/0x650 [ 2199.167609][ C0] tear_down_vmas+0x312/0x520 [ 2199.172335][ C0] exit_mmap+0x4b6/0x9e0 [ 2199.176616][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2199.181438][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2199.187100][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2199.192192][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2199.196897][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 2199.202576][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 2199.207833][ C0] __mmput+0x118/0x430 [ 2199.211954][ C0] exec_mmap+0x3b4/0x440 [ 2199.216220][ C0] begin_new_exec+0x134a/0x2480 [ 2199.221118][ C0] ? rw_verify_area+0x2a6/0x4d0 [ 2199.226027][ C0] ? load_elf_phdrs+0x1ac/0x240 [ 2199.230930][ C0] ? __pfx_begin_new_exec+0x10/0x10 [ 2199.236164][ C0] load_elf_binary+0xa47/0x2980 [ 2199.241101][ C0] ? load_misc_binary+0x10f/0xc40 [ 2199.246161][ C0] ? lock_acquire+0x106/0x350 [ 2199.250910][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 2199.256231][ C0] bprm_execve+0x94a/0x1510 [ 2199.260826][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 2199.265793][ C0] ? count+0x1e0/0x230 [ 2199.269924][ C0] do_execveat_common+0x50d/0x690 [ 2199.275017][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.281144][ C0] __x64_sys_execve+0x97/0xc0 [ 2199.285848][ C0] do_syscall_64+0x15f/0xf80 [ 2199.290519][ C0] ? trace_irq_disable+0x3b/0x140 [ 2199.295571][ C0] ? clear_bhb_loop+0x40/0x90 [ 2199.300288][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2199.306194][ C0] RIP: 0033:0x7f5b8d4e6107 [ 2199.310700][ C0] Code: Unable to access opcode bytes at 0x7f5b8d4e60dd. [ 2199.317724][ C0] RSP: 002b:00007ffc22f5ed88 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2199.326222][ C0] RAX: ffffffffffffffda RBX: 0000564e6b0fb078 RCX: 00007f5b8d4e6107 [ 2199.334235][ C0] RDX: 0000564e6b0fb0a0 RSI: 0000564e6b0fb078 RDI: 0000564e6b0fb130 [ 2199.342277][ C0] RBP: 0000564e6b0fb130 R08: 00007ffc22f63e77 R09: 0000000000000000 [ 2199.350290][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000564e6b0fb0a0 [ 2199.358300][ C0] R13: 00007f5b8d6abe8b R14: 0000564e6b0fb0a0 R15: 0000000000000000 [ 2199.366367][ C0] [ 2199.369449][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2199.376738][ C0] CPU: 0 UID: 0 PID: 6138 Comm: dhcpcd-run-hook Tainted: G L syzkaller #0 PREEMPT(full) [ 2199.388037][ C0] Tainted: [L]=SOFTLOCKUP [ 2199.392363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2199.402411][ C0] Call Trace: [ 2199.405680][ C0] [ 2199.408513][ C0] vpanic+0x56c/0xa60 [ 2199.412514][ C0] ? __pfx__printk+0x10/0x10 [ 2199.417096][ C0] ? __pfx_vpanic+0x10/0x10 [ 2199.421584][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 2199.426860][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 2199.432047][ C0] panic+0xc5/0xd0 [ 2199.435758][ C0] ? __pfx_panic+0x10/0x10 [ 2199.440177][ C0] __warn+0x315/0x4c0 [ 2199.444148][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2199.449863][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2199.455573][ C0] __report_bug+0x29a/0x540 [ 2199.460173][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.465281][ C0] ? debug_check_no_obj_freed+0x405/0x550 [ 2199.470988][ C0] ? __pfx___report_bug+0x10/0x10 [ 2199.476010][ C0] ? kmem_cache_alloc_noprof+0x2bc/0x650 [ 2199.481631][ C0] ? fill_pool+0x156/0x580 [ 2199.486037][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2199.492187][ C0] report_bug_entry+0x19a/0x290 [ 2199.497036][ C0] ? debug_check_no_obj_freed+0x44a/0x550 [ 2199.502748][ C0] ? debug_check_no_obj_freed+0x44f/0x550 [ 2199.508452][ C0] handle_bug+0xce/0x200 [ 2199.512681][ C0] exc_invalid_op+0x1a/0x50 [ 2199.517175][ C0] asm_exc_invalid_op+0x1a/0x20 [ 2199.522016][ C0] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 2199.528340][ C0] Code: 89 44 24 20 e8 67 2e 74 fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 20 b7 28 8c 48 c7 c2 a0 bc 28 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 2199.547932][ C0] RSP: 0018:ffffc90000007c70 EFLAGS: 00010246 [ 2199.554000][ C0] RAX: ffffffff8a7e71f0 RBX: ffffffff9a63ebd0 RCX: 0000000000000000 [ 2199.561974][ C0] RDX: ffffffff8c28bca0 RSI: ffffffff8c28b720 RDI: ffffffff903bb0e0 [ 2199.569941][ C0] RBP: ffffffff8bcf3a20 R08: ffff88804f942278 R09: ffffffff8bcf4d80 [ 2199.577909][ C0] R10: dffffc0000000000 R11: ffffffff81b220d0 R12: ffff88804f942400 [ 2199.585874][ C0] R13: ffffffff903bb0e0 R14: ffff88804f942000 R15: ffff88804f942278 [ 2199.593847][ C0] ? __pfx_timer_debug_hint+0x10/0x10 [ 2199.599216][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 2199.606237][ C0] ? __pfx_br_ip6_multicast_port_query_expired+0x10/0x10 [ 2199.613256][ C0] kfree+0x13e/0x640 [ 2199.617144][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 2199.622164][ C0] ? kobject_put+0x228/0x560 [ 2199.626745][ C0] ? fill_pool+0x156/0x580 [ 2199.631153][ C0] kobject_put+0x228/0x560 [ 2199.635562][ C0] ? rcu_core+0x751/0x1070 [ 2199.639964][ C0] ? __pfx_destroy_nbp_rcu+0x10/0x10 [ 2199.645246][ C0] rcu_core+0x7cd/0x1070 [ 2199.649494][ C0] ? __pfx_rcu_core+0x10/0x10 [ 2199.654161][ C0] ? sched_balance_domains+0x7ea/0x900 [ 2199.659614][ C0] ? sched_balance_domains+0xf9/0x900 [ 2199.664974][ C0] handle_softirqs+0x22a/0x840 [ 2199.669729][ C0] ? __irq_exit_rcu+0xca/0x220 [ 2199.674489][ C0] __irq_exit_rcu+0xca/0x220 [ 2199.679069][ C0] irq_exit_rcu+0x9/0x30 [ 2199.683313][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2199.688943][ C0] [ 2199.691866][ C0] [ 2199.694783][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2199.700751][ C0] RIP: 0010:lock_release+0xb/0x3c0 [ 2199.705849][ C0] Code: be 2f 00 00 00 e9 0e ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 30 49 89 f5 49 89 fe 65 48 8b 05 f0 79 97 11 48 [ 2199.725441][ C0] RSP: 0018:ffffc9000398eeb0 EFLAGS: 00000202 [ 2199.731497][ C0] RAX: 0000000000000001 RBX: ffffffff90c42c01 RCX: 0000000080000001 [ 2199.739456][ C0] RDX: ffffc9000398f001 RSI: ffffffff8176f256 RDI: ffffffff8e95cde0 [ 2199.747415][ C0] RBP: dffffc0000000000 R08: ffffc9000398f090 R09: 0000000000000000 [ 2199.755371][ C0] R10: ffffc9000398f058 R11: fffff52000731e0d R12: ffffc9000398f0a0 [ 2199.763326][ C0] R13: ffffc90003988000 R14: ffffc9000398f008 R15: ffffffff8176f256 [ 2199.771285][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.776396][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.781499][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.786597][ C0] unwind_next_frame+0x1bba/0x2550 [ 2199.791705][ C0] ? unwind_next_frame+0xa6/0x2550 [ 2199.796805][ C0] ? arch_stack_walk+0xe3/0x150 [ 2199.801649][ C0] __unwind_start+0x5b8/0x760 [ 2199.806317][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2199.812465][ C0] arch_stack_walk+0xe3/0x150 [ 2199.817133][ C0] ? stack_trace_save+0xa9/0x100 [ 2199.822062][ C0] ? fill_pool+0x156/0x580 [ 2199.826464][ C0] stack_trace_save+0xa9/0x100 [ 2199.831222][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2199.836589][ C0] ? stack_depot_save_flags+0x33/0x810 [ 2199.842048][ C0] ? fill_pool+0x156/0x580 [ 2199.846466][ C0] kasan_save_track+0x3e/0x80 [ 2199.851172][ C0] __kasan_slab_alloc+0x6c/0x80 [ 2199.856025][ C0] kmem_cache_alloc_noprof+0x2bc/0x650 [ 2199.861474][ C0] ? fill_pool+0x156/0x580 [ 2199.865880][ C0] ? __mmput+0x118/0x430 [ 2199.870109][ C0] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 2199.875746][ C0] fill_pool+0x156/0x580 [ 2199.880001][ C0] ? debug_object_activate+0x47a/0x580 [ 2199.885467][ C0] ? __pfx_fill_pool+0x10/0x10 [ 2199.890236][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2199.896379][ C0] ? debug_object_activate+0x47a/0x580 [ 2199.901827][ C0] debug_object_activate+0x4a3/0x580 [ 2199.907109][ C0] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 2199.913254][ C0] ? tear_down_vmas+0x312/0x520 [ 2199.918100][ C0] call_rcu+0x43/0x890 [ 2199.922170][ C0] ? tear_down_vmas+0x312/0x520 [ 2199.927007][ C0] kmem_cache_free+0x462/0x650 [ 2199.931768][ C0] tear_down_vmas+0x312/0x520 [ 2199.936443][ C0] exit_mmap+0x4b6/0x9e0 [ 2199.940683][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 2199.945447][ C0] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 2199.951083][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 2199.956108][ C0] ? __pfx_exit_aio+0x10/0x10 [ 2199.960784][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 2199.966406][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 2199.971599][ C0] __mmput+0x118/0x430 [ 2199.975671][ C0] exec_mmap+0x3b4/0x440 [ 2199.979905][ C0] begin_new_exec+0x134a/0x2480 [ 2199.984747][ C0] ? rw_verify_area+0x2a6/0x4d0 [ 2199.989593][ C0] ? load_elf_phdrs+0x1ac/0x240 [ 2199.994432][ C0] ? __pfx_begin_new_exec+0x10/0x10 [ 2199.999632][ C0] load_elf_binary+0xa47/0x2980 [ 2200.004482][ C0] ? load_misc_binary+0x10f/0xc40 [ 2200.009499][ C0] ? lock_acquire+0x106/0x350 [ 2200.014177][ C0] ? __pfx_load_elf_binary+0x10/0x10 [ 2200.019463][ C0] bprm_execve+0x94a/0x1510 [ 2200.023972][ C0] ? __pfx_bprm_execve+0x10/0x10 [ 2200.028907][ C0] ? count+0x1e0/0x230 [ 2200.032971][ C0] do_execveat_common+0x50d/0x690 [ 2200.037995][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.044050][ C0] __x64_sys_execve+0x97/0xc0 [ 2200.048718][ C0] do_syscall_64+0x15f/0xf80 [ 2200.053303][ C0] ? trace_irq_disable+0x3b/0x140 [ 2200.058319][ C0] ? clear_bhb_loop+0x40/0x90 [ 2200.062984][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2200.068864][ C0] RIP: 0033:0x7f5b8d4e6107 [ 2200.073272][ C0] Code: Unable to access opcode bytes at 0x7f5b8d4e60dd. [ 2200.080274][ C0] RSP: 002b:00007ffc22f5ed88 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 2200.088675][ C0] RAX: ffffffffffffffda RBX: 0000564e6b0fb078 RCX: 00007f5b8d4e6107 [ 2200.096809][ C0] RDX: 0000564e6b0fb0a0 RSI: 0000564e6b0fb078 RDI: 0000564e6b0fb130 [ 2200.104767][ C0] RBP: 0000564e6b0fb130 R08: 00007ffc22f63e77 R09: 0000000000000000 [ 2200.112726][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 0000564e6b0fb0a0 [ 2200.120682][ C0] R13: 00007f5b8d6abe8b R14: 0000564e6b0fb0a0 R15: 0000000000000000 [ 2200.128656][ C0] [ 2200.132148][ C0] Kernel Offset: disabled [ 2200.136461][ C0] Rebooting in 86400 seconds..