last executing test programs: 35m33.99167515s ago: executing program 0 (id=997): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x2}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000fa3000/0x3000)=nil, 0x3000, 0x0) 35m33.642591763s ago: executing program 0 (id=998): socket$kcm(0x2, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x2}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0xd, 0x2}, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) open_by_handle_at(r1, 0x0, 0x20000) alarm(0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x306, @local}, 0x48, {0x2, 0x0, @dev}}) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r5, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x8, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x10001, 0x8000004, 0x7, 0x7, 0xffff, 0x0, 0x4, 0x9, 0x401, 0xc, 0x9, 0x4, 0x2, 0x9, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x3, 0x8, 0x5, 0x80000001, 0xd77, 0x5, 0x6, 0x1, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x8001, 0x12, 0x800, 0xc, 0x0, 0x4, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0x3, 0x5, 0x10004, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0x1c, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0x2, 0x9, 0xf8, 0xfffffffc, 0x8, 0x2, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0x403, 0x4, 0x8, 0x1, 0xffffff00, 0x100, 0x7, 0x2, 0x4, 0x230, 0x80000001, 0x1, 0x9, 0xc3, 0x20ffff, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0x1, 0x4, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0x0, 0x1, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0xa, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x1, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x581, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r6 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) 35m31.36703074s ago: executing program 0 (id=1003): r0 = socket$netlink(0x10, 0x3, 0xa) writev(r0, &(0x7f0000000000), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001100010029bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000103040008003c"], 0x30}}, 0x800) syz_emit_ethernet(0x7e, &(0x7f00000005c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x0, 0x80, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x64, 0x1000, 0x0, 0x1, 0xa, @local, @rand_addr=0x64010102, {[@ssrr={0x89, 0xf, 0x18, [@multicast2, @remote, @multicast2]}, @cipso={0x86, 0x2e, 0xffffffffffffffff, [{0x5, 0x7, "2016e44527"}, {0x5, 0x9, "cda155f8446838"}, {0x2, 0xb, "1adbfd38959d4c8d63"}, {0x5, 0xd, "86d299388651838be571c4"}]}]}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x2002, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000000880)=[{{&(0x7f0000000080)=@qipcrtr={0x2a, 0x3, 0x4000}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff}, 0x80, 0x0}}], 0x2, 0x45) 35m31.122424408s ago: executing program 0 (id=1005): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020001b039f54fc3855dfcdee02000004000000000f"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r0 = fsopen(&(0x7f0000000040)='ceph\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r1 = syz_io_uring_setup(0x222f, &(0x7f0000000280)={0x0, 0x2, 0x10100}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000380)={0x28880, 0x0, 0x12}, 0x18) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x7}}]}}]}, 0x48}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r11, &(0x7f0000000440)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "25beb819521eb41d", "cae5e9937ba539347092d917d39ed975", "98999999", "50f641306280c4e9"}, 0x28) setsockopt$inet6_tcp_int(r11, 0x11a, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002280)=@newtfilter={0x34f4, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x2, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}, @filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff3, 0xe}}, @TCA_FLOW_MASK={0x8, 0x6, 0xb}, @TCA_FLOW_KEYS={0x8, 0x1, 0x127fb}, @TCA_FLOW_XOR={0x8, 0x7, 0x9f4}]}}, @filter_kind_options=@f_fw={{0x7}, {0x3460, 0x2, [@TCA_FW_ACT={0x3448, 0x4, [@m_mirred={0x110, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x9, 0x2, 0x1}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xea4bbb86, 0xe7, 0x1, 0x3d8000, 0x8}, 0x0, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x7, 0x1, 0x3, 0x4}, 0x1, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xb3a, 0xb7, 0xffffffffffffffff, 0x4}, 0x3, r10}}]}, {0x62, 0x6, "a2c491805d79f53e1031f58a72dec32b4d53cafbf523a760d8ca0207875c88e0f3f42d20e028a22407a59ce8ac1288611a074b64d3569d6868de84ed9b8bdaa0270dde873cbceccb38189994baa6f5f570f2fd51591936072b7dff917916"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0x1ac, 0x1e, 0x0, 0x0, {{0xa}, {0x118, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x114, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}]}]}, {0x6b, 0x6, "a577179b29e00122c3eb2a695ab1425774b0946a767d7f46a9637ecd36dbf0283e091329e84e4007210bcfc386154127af3396c00f0f54e4f9e0812d8381beb5904fdc0ae9ced3e9e9b39f6d1818452ed0ad40190b56f4734b1facf350d497e77c5a1dccdf8c41"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_police={0x2e24, 0x1, 0x0, 0x0, {{0xb}, {0x2df4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6f}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x2, 0x0, 0x6116, 0x3, {0x81, 0x1, 0x1, 0x5, 0x6, 0xfffffffc}, {0x8, 0x0, 0x4, 0x1, 0xd, 0x3}, 0x3, 0xee5}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x10000, 0x8001, 0x0, 0xfffffffa, 0x17, 0x9, 0x2, 0x4, 0x69f, 0x10001, 0x9, 0x8, 0x711c, 0xa456, 0x6, 0xc, 0x8, 0x2, 0x7, 0x6, 0x11c8, 0x7, 0x4, 0x7f, 0x6, 0x6, 0x40, 0xffffffff, 0xfffffffd, 0x9, 0x1, 0x1, 0xa, 0xdbfc, 0xac30, 0x6, 0x8001, 0x7f, 0x6e4e, 0x296, 0x10001, 0x3, 0x3, 0x2, 0x847, 0x2, 0x7, 0x6, 0x100, 0x5, 0x0, 0x1ff, 0x773, 0x7, 0x5, 0x5, 0x2, 0x677, 0x986, 0x82, 0x3, 0x1, 0x9, 0x2, 0x4, 0x8000, 0x6, 0x57d, 0xf, 0x9, 0x8, 0xd5a, 0x6, 0x8, 0x7, 0x0, 0x4000000, 0x1, 0xffffffff, 0x7, 0x7784, 0x8, 0x1, 0xffffffff, 0x3, 0x3, 0x6, 0x9, 0x7fff, 0x8, 0x9, 0x8000, 0x777c, 0x2, 0x1, 0xa, 0x6, 0x10, 0x7d5a, 0xfd6, 0xfffffffe, 0xfffffffc, 0x8, 0xd9b6, 0x6, 0xecb1, 0x8, 0x4, 0x4, 0xff, 0xfff, 0xff, 0x80000000, 0x1, 0x6b7, 0x0, 0x8, 0xffff, 0xcd, 0x5, 0x2, 0x5, 0xe, 0x5, 0x4, 0x0, 0x0, 0x4, 0x10001, 0x800, 0x8001, 0x2, 0x9, 0xa1, 0x0, 0x6, 0x4, 0xf976, 0x3, 0x1, 0x0, 0x81, 0x5, 0x26, 0x7fff, 0x7f, 0x10000, 0x808, 0x0, 0x7, 0x5, 0x669aa674, 0x1, 0x5fa8914, 0x7, 0x0, 0xfffffff8, 0x6, 0x101, 0x6, 0x1, 0x1, 0x4, 0x8, 0x3, 0x8000, 0x5, 0xa, 0x6, 0x8, 0x3, 0x47, 0x4, 0x4861, 0x5, 0x8, 0x0, 0x85, 0x40000000, 0x0, 0x1, 0xfd54, 0x3, 0x0, 0x6, 0x8, 0x2, 0x3, 0x2800, 0x0, 0xfffffff4, 0x6004b971, 0x2, 0x8, 0x1, 0xe, 0x65e, 0x3, 0xa, 0x180, 0xea7f, 0x0, 0x9, 0x8000000, 0x5, 0xd, 0x0, 0x6, 0x4, 0x4, 0x9, 0x7, 0x2, 0x3, 0x7153, 0x7, 0x1, 0x3, 0x5, 0x7fffffff, 0xffff, 0x6, 0x2, 0xd, 0xb8b, 0x1000, 0x3, 0x7, 0xb1a1, 0x6, 0x0, 0x2, 0xe, 0x2, 0x8, 0x6, 0x2, 0x4, 0x6, 0xff, 0x6, 0x6, 0x5, 0x6, 0x5, 0x9, 0x9, 0x8000, 0x2, 0x200, 0xe6, 0xcca, 0xb, 0xc025f9e, 0x7, 0x8]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x40, 0x0, 0x81, {0xe9, 0x0, 0x8001, 0xf77b, 0x81, 0x5}, {0x5, 0x0, 0xfffa, 0x80, 0x3, 0x9}, 0xfff, 0x15, 0x5}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x69}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0xf21, 0x3, 0x3ff, 0x843, 0x9, 0x4c2, 0x1, 0x9, 0x800, 0xfff, 0x100, 0xd, 0x4, 0x7, 0x5, 0x6, 0x8, 0x8, 0x8, 0xc, 0xfe, 0x2, 0x82, 0x10001, 0x8, 0x9, 0x200, 0x6, 0x7f, 0xa0, 0x5, 0x55, 0x8001, 0xfffffffa, 0x0, 0x2, 0x3, 0x2, 0xfffffff8, 0xfffffff7, 0x3, 0x839, 0x9, 0x5, 0xa1, 0xf, 0x19fb0623, 0x3, 0x5, 0x1000, 0x5, 0x6ee0, 0x4, 0x5, 0x2, 0x7, 0x0, 0x4, 0x5, 0xd5, 0x2, 0x8000, 0x401, 0x3, 0x97, 0x400, 0xe831, 0x4, 0x3, 0x4, 0x100, 0x325, 0x0, 0xffffffdd, 0x80000001, 0x9, 0x2, 0x3, 0x3ff, 0x8, 0x7, 0x7ff, 0x0, 0x8, 0x47273a11, 0x3, 0x942, 0x6, 0x1, 0x2, 0x7, 0x890f, 0x3, 0x3ff, 0x3ff, 0x4, 0x9, 0x76c3, 0x1ff, 0x9, 0x5, 0x7, 0x7ff, 0x8001, 0xfffffffb, 0x5, 0x6, 0x0, 0x7f, 0x8d57, 0x2, 0x8000, 0x6, 0x81, 0x3, 0x5, 0x1, 0x4, 0x5, 0x5, 0x7, 0x7f, 0x2, 0x1, 0x7ff, 0x1, 0x1, 0x4, 0x9, 0x7, 0x8, 0x973, 0x2, 0x4, 0x7, 0x3, 0x8d8, 0x7, 0x2, 0x2, 0x200, 0x0, 0xf55f, 0xfff, 0x80, 0x6, 0x9, 0x5, 0x2, 0x9, 0x3, 0x4, 0x5, 0xffffffff, 0x6, 0xa, 0x4, 0x3, 0x3, 0x9, 0x8, 0x4, 0xffffffff, 0x0, 0x1c54, 0x8, 0x1, 0xc8f8, 0x100, 0x7, 0x4, 0x7, 0x0, 0x4, 0x1, 0x2, 0x40, 0x9, 0xfffffffa, 0xfffff574, 0x40e47a98, 0x1, 0x3ff, 0x1, 0x7fff, 0x2, 0xa1a4, 0x5, 0x3ff, 0x70, 0xa, 0x1ff, 0x9, 0x3, 0x6ad6, 0x8, 0x962c, 0x3, 0xfffffffd, 0x4, 0x1ff, 0x1, 0x6, 0x8e6, 0xfffff15e, 0x3, 0x1fda3c69, 0xd37a, 0x120b, 0xd1, 0x6904784b, 0x8, 0x1800, 0x1, 0x6, 0x137, 0xe, 0x800, 0x4, 0x3ff, 0x0, 0xe8, 0x19ef, 0xb8, 0x6, 0x9, 0x7ff, 0x6, 0xc2f, 0x6, 0x2, 0x3e1b, 0x6, 0x100, 0x2, 0x6, 0x1, 0x3, 0x0, 0x0, 0x5, 0x2, 0x200, 0x101, 0xd, 0xb3, 0x1607, 0x3, 0xa2a, 0x3, 0x8, 0x8, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2ed3000, 0x20000000, 0x40, 0x1ac7, 0x2, {0x2, 0x1, 0x9c2, 0x4000, 0x1, 0x1000}, {0x0, 0x1, 0x6, 0x4, 0x97, 0x4}, 0x4, 0x6, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffff0b8}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4fbaa08d, 0x8, 0x19, 0x367, 0xfffffffc, 0x9, 0x7ff, 0x4, 0x3f8, 0x1, 0x1000, 0x7f, 0x5, 0x0, 0x5, 0xffffffff, 0x3, 0xff, 0x0, 0x47, 0xa, 0x4, 0x0, 0x81, 0x6, 0x7, 0x3ff, 0x9, 0xb954, 0x1, 0x7f, 0x3ff, 0x5, 0xd, 0x4, 0x3, 0x6d986245, 0x80000000, 0x5, 0x200, 0x7, 0x10001, 0x4, 0x7, 0xfffffffb, 0xfddc, 0x4, 0xdcbe, 0x4, 0x9, 0x0, 0x24b, 0x2, 0xf, 0x13fe5b60, 0x6, 0x6, 0x8, 0xfff, 0x200, 0xbb, 0xe, 0xec, 0x3, 0x6, 0xe, 0x7, 0x3, 0x2, 0x6, 0x7, 0x7, 0xe, 0x4, 0x5, 0x8000, 0x8, 0x8, 0x1800000, 0x280, 0x0, 0x9, 0x0, 0x7, 0x4, 0x10001, 0x4, 0x5, 0x7, 0x6, 0x3, 0x5, 0xd, 0x6, 0xff, 0xb, 0x3, 0x76e66c0, 0x401, 0x4, 0x6, 0x3, 0x7c, 0x3, 0x6, 0xfffffeff, 0x8, 0x0, 0xff, 0x2, 0x0, 0x2, 0x9, 0xee, 0x10001, 0x3, 0x66, 0x7fffffff, 0x1000, 0x9, 0x6, 0xf2, 0x401, 0x1, 0x4, 0x2, 0x1ff, 0x10, 0xd, 0x5, 0x9, 0xe57d, 0x1, 0x857d, 0x5, 0x6, 0x6, 0x1, 0x0, 0x10001, 0x40, 0x2, 0x4, 0xe986, 0xc9, 0x484d, 0xfffffffe, 0x9, 0x5307, 0xef03, 0x4, 0x9, 0x9, 0x0, 0x0, 0xffff, 0x7, 0x1, 0xfffffff9, 0x63, 0xfffffffb, 0x99, 0x2, 0x8, 0x1ff, 0x2, 0x8, 0x2, 0x7f, 0x217, 0x6, 0x8, 0x6, 0x4, 0x1, 0x19, 0x1, 0x8001, 0x4, 0x7, 0x9, 0x3, 0x8001, 0x7, 0x5, 0x8, 0x6, 0x10001, 0x2, 0x0, 0x1, 0x8, 0xffffffff, 0x7, 0x6, 0x8000, 0x6e, 0xb78, 0xfffffffd, 0x8, 0x5, 0x8731, 0x7, 0xffff331a, 0xe48f, 0x4, 0x7, 0x7, 0x5fe3, 0x4, 0x0, 0x80000001, 0xa, 0x6, 0x3, 0x5, 0x400, 0xd, 0x4, 0x2, 0x7, 0x5, 0xadaf, 0x13, 0x8, 0x714f, 0x0, 0x9, 0x80, 0x7, 0x1, 0xb0fd, 0x5, 0x40, 0x6, 0x800, 0x5, 0x1, 0x7, 0x1000, 0x0, 0x2, 0x7fffffff, 0x6, 0x10, 0x400, 0x40, 0x5, 0x7ff, 0x3, 0x10001, 0x0, 0x3, 0x2, 0x918, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x897, 0x8, 0x800, 0x1, 0x6, {0x3, 0x2, 0x7, 0xb9, 0x6}, {0x5d, 0x2, 0x0, 0x9, 0x7, 0x86}, 0x40, 0x2, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x4, 0xfffffffa, 0x7, 0x5, 0xfff, 0x200, 0x101, 0xfef, 0x4, 0x632, 0xfff00, 0xaa, 0x9, 0xd, 0x3, 0x9, 0xfc, 0x2, 0x2, 0xdcd, 0x80000000, 0x211, 0x9, 0x8, 0xaba6, 0x2, 0x7, 0x5, 0x100, 0x200, 0x267f, 0x0, 0x7c5, 0x1, 0xfff, 0x1, 0x9, 0xb5df, 0x9, 0x52f6, 0xde8, 0x6, 0x4, 0x1, 0xe9c, 0x4, 0x7f, 0x8, 0x2, 0xc, 0xff, 0x6, 0xb, 0x4b3, 0x3, 0x9, 0x7, 0x7f, 0x1, 0xfffffffb, 0x6, 0x1, 0x80000001, 0xffffffff, 0x76143779, 0x2, 0xf05b, 0x6, 0x4, 0x8, 0x0, 0x80000000, 0x8, 0x6, 0x21a, 0x8, 0x4, 0x7597a40, 0x4, 0x1000, 0x963e, 0x5, 0x0, 0x2, 0x6, 0x2, 0x1ff, 0x400, 0xa1, 0x81, 0x101, 0xc0de, 0x0, 0x8, 0xffffffff, 0x4, 0x4, 0x2, 0x5, 0xd, 0x1ff, 0x8, 0xcf0, 0x8, 0x10000, 0x9, 0x81, 0xfffffffc, 0x6, 0x7fff, 0x80000001, 0x8000, 0xffff, 0x10, 0x7fffffff, 0x0, 0x149, 0x6, 0xffff, 0x4a00, 0x2, 0x8, 0x1000, 0x8000, 0x10000, 0x214b, 0x6, 0x4, 0x9, 0x38521269, 0xd, 0xfffffff9, 0x3, 0x1, 0x3, 0xf, 0x1, 0xe0, 0x5, 0x8001, 0x0, 0x10001, 0x2e6c, 0x5, 0xffff, 0x7, 0x2, 0x80000000, 0xf2, 0x9, 0xcb, 0x70, 0x2, 0x746, 0xcf4, 0x40, 0x7, 0x273, 0x10001, 0x2, 0x0, 0x7, 0x4, 0x8, 0x9, 0x1, 0x40, 0x3f3b, 0x2800000, 0x3ea6, 0x8, 0x52, 0x2e, 0x7, 0x3, 0x0, 0x7, 0x6, 0x1, 0x71, 0x2, 0x6, 0x5, 0x3, 0x30e6, 0x0, 0x2, 0x2, 0x5, 0xf, 0x5, 0x9, 0x5, 0x200, 0x0, 0x7c, 0xe17a, 0x28a, 0x1, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x9, 0x401, 0x8, 0x6, 0x200, 0x7ff, 0x7, 0x5, 0x401, 0x1, 0x3, 0x2, 0x2b9, 0x1000, 0x7, 0x144d, 0xffffffff, 0x8, 0x5, 0x1, 0x2, 0x6, 0x9, 0xe, 0x9, 0xffff, 0x160, 0x1, 0x7f, 0x9, 0xfffff000, 0x9, 0x0, 0x0, 0xdda00, 0x1, 0x0, 0xe2d, 0x200, 0x7ff, 0x5, 0x21, 0x1, 0x101, 0x9, 0x1, 0x8, 0xce7, 0x7666, 0x40000000, 0x80000000]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7c, 0x8, 0x6, 0xcfce, 0xdb8d, 0xb, 0x2, 0x0, 0xe9d3, 0x0, 0xe, 0x8ae, 0x5, 0xfff, 0x3, 0x7fffffff, 0x1, 0xd2, 0x3, 0x200, 0x1d65, 0x5, 0x4, 0x4b, 0x7, 0x5, 0x800, 0x7, 0xa4, 0x4, 0x8, 0x800, 0x8, 0x7, 0x1, 0x1, 0x7, 0x0, 0x0, 0x6, 0xfffffff9, 0x4, 0x6, 0x1781, 0x8, 0xa34f, 0x1, 0x1, 0xba, 0x4, 0x101, 0x9, 0x5, 0x3, 0xb6e, 0x1, 0x9, 0x70a00, 0x2, 0x0, 0x1, 0x4, 0x7fffffff, 0x1, 0x7, 0x3, 0x5, 0xe0000000, 0x3, 0x8001, 0x4, 0x7, 0x800, 0xddef, 0xc, 0x80000001, 0x7ff, 0x8, 0x5, 0x7, 0xd918, 0x6, 0xffffc0cb, 0x9, 0x1, 0x2, 0x9, 0xfffffffb, 0x7fff, 0x2, 0xb061, 0x0, 0x2, 0xfffffff7, 0x7, 0x4, 0x8, 0x300000, 0x3, 0x3, 0x5d, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0xe8, 0x9, 0x9, 0x2, 0x10, 0xffff05be, 0x4, 0x80, 0x1, 0x80800000, 0x7, 0x9, 0x74c, 0x3, 0x80, 0x9, 0x7fffffff, 0x7, 0x2, 0xd5b1, 0x513716a1, 0xe6c8, 0x3, 0x3, 0x9, 0x1, 0x7, 0x40000, 0x9, 0x2, 0x7f, 0x8ac, 0x40, 0x2, 0x2, 0x3, 0x4d, 0x7, 0x9, 0x4, 0xc, 0x1f4e, 0x5, 0x8, 0x7, 0x1, 0x7, 0x5, 0x30000, 0xffff15bc, 0x3ff, 0x7, 0x8, 0x2, 0x2, 0xd41, 0x4, 0x7, 0x2, 0x9, 0x4, 0x780000, 0x7, 0x100, 0x5, 0x80000001, 0x3, 0x7fff, 0x4, 0x9, 0x4, 0xdb9, 0x80000001, 0x9, 0x3ff, 0xedf, 0x990, 0x3a30, 0x7, 0x7, 0x5, 0x8, 0x7, 0x1, 0xcb4, 0x6, 0x5, 0x639, 0x9, 0x17b, 0x68ad, 0x6, 0x80000000, 0xc, 0xe, 0xf, 0x5, 0x5, 0xab72, 0x9, 0x1, 0x6, 0x8000, 0x7ff, 0x6, 0x8, 0x80000001, 0xc56f546, 0x4, 0x6, 0x9d, 0x0, 0x40, 0x9f8, 0x0, 0x1, 0x10, 0xd5, 0xfff, 0x4, 0xa, 0x4fec1c22, 0xa4a, 0x13e, 0x8000, 0x5, 0x4, 0x67b, 0xffff, 0x10000, 0x0, 0x3, 0x1, 0x0, 0x7, 0x8, 0x6, 0x6, 0x4, 0xff, 0x3, 0x0, 0x9, 0x8, 0x23, 0x7, 0xbdb1, 0x7, 0xfffffff2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xf, 0x1, 0xa7d4, 0x5, 0x81, {0x2, 0x0, 0x6, 0x4, 0x7, 0x7}, {0x2, 0x0, 0x401, 0x40, 0x200, 0x8}, 0xd, 0x1d, 0x8}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xe3ae, 0x5, 0x80000000, 0x800, 0x3, 0x40, 0x6, 0x6, 0x9, 0x7, 0x6, 0xc095, 0x101, 0x5, 0x9, 0xe44, 0x5, 0x3, 0x800, 0x80, 0x4, 0x6, 0xee77, 0x7, 0x9, 0x3a, 0xb063, 0x95, 0x54, 0x916, 0xa00000, 0x4, 0x6, 0xf27, 0x4c, 0x8000, 0x7, 0x3e, 0x0, 0x7, 0x9, 0x1, 0x2d, 0x0, 0x7, 0x80000001, 0x6, 0xf, 0x8, 0x7, 0x6, 0x7, 0x9, 0x8, 0x6, 0x10001, 0xed4, 0xf, 0xc0000000, 0xd2f, 0xffff463e, 0x0, 0x401, 0x1ff, 0x6458ca9, 0x9, 0x4, 0x8, 0x0, 0x6, 0x4, 0x1, 0x80000000, 0x5, 0xd60b, 0x1ff, 0x6, 0xd5, 0x0, 0x6, 0x8, 0xa9, 0xffffff7f, 0x6, 0x100, 0xf4a, 0x401, 0x6df, 0xed, 0x80, 0x0, 0x8000, 0x0, 0x1, 0x4, 0x3f7d, 0x9, 0x7, 0x3, 0x8, 0x800, 0x5, 0x7, 0x5, 0x1000, 0x0, 0x9f4, 0x2, 0x6, 0xfffff04f, 0xffffffa5, 0x9e8, 0x1e00, 0x7, 0xda8, 0x0, 0x8, 0x7f7e, 0xf2, 0x1, 0xff, 0xffffff54, 0xf158, 0x9, 0xff, 0x380000, 0x8000, 0xfffffffe, 0x7, 0x2, 0x3, 0xb2, 0x7fd, 0xffffff6a, 0x7, 0xfffffffc, 0x7f, 0x4, 0x6f1, 0x20000, 0x7, 0x6, 0xa4, 0x1, 0x7, 0x7fff, 0x3ff, 0x795b, 0x4, 0xffffffef, 0x8, 0x6, 0x8, 0xfffffffc, 0x7fff, 0x3ff, 0x6, 0x6, 0xfff, 0x3ff, 0x3, 0x4, 0x8, 0x3, 0x2, 0xc0a, 0x0, 0x1, 0x8, 0x3, 0x2, 0x2, 0xfffffff9, 0x9, 0x2, 0x5, 0x3, 0x5, 0xfffffffd, 0x3, 0x0, 0x1000, 0x4, 0x0, 0x1, 0x0, 0x1, 0x5, 0xe, 0x7, 0x40, 0x2, 0x8000, 0x10, 0x4, 0xff, 0x5, 0x4, 0x65c, 0x1, 0xffff, 0x4, 0x3, 0x1, 0x4, 0x7fff, 0x3, 0x8000, 0x3, 0x134, 0x7, 0x3, 0xf, 0x8, 0x6, 0x26, 0xffffffc5, 0x1, 0xd1a5, 0x6, 0xa9ea, 0x3, 0xffffffff, 0x0, 0xae, 0x1, 0xffff, 0x3, 0x4, 0x401, 0x10, 0xfffffffa, 0x3, 0x1, 0xd87, 0x9, 0x7ff, 0x40, 0x10000, 0x10001, 0xfdb4, 0x3, 0x6, 0xba3, 0xfffffff7, 0x98b9, 0x0, 0x7, 0xffffffff, 0xc3, 0x7, 0xffffff28, 0xffffffff, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x80000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0x6eb8, 0xfffff000, 0x0, 0x6, 0x9, 0x3ff, 0x5b0, 0x2, 0x49, 0x0, 0x1bd, 0x7, 0x2, 0x2, 0x401, 0x6, 0xffffc7b3, 0xf70, 0x3, 0x0, 0xff, 0x2, 0x2d5b2260, 0xfff, 0x6, 0x1, 0x8, 0x7, 0x9, 0x1, 0x1, 0x7, 0x5, 0x9, 0x7, 0xee7, 0x1, 0x8, 0x6, 0x401, 0x900, 0x10, 0x100, 0x9, 0x6, 0x6, 0x80000001, 0x72b8, 0x0, 0x1, 0x1, 0xc8000000, 0xff, 0x8, 0x7, 0xcc, 0x1, 0x9, 0x6, 0x7, 0x8, 0xc4a, 0xf, 0xfffffffa, 0x10, 0xa9, 0x3, 0xc9c, 0x3, 0x5, 0x3ff, 0x2000000, 0x9, 0xa, 0xffff, 0x8000, 0x5, 0x2, 0xa, 0xa8400000, 0x0, 0xb18e, 0x3f6a, 0x80, 0x7, 0x401, 0x7ff, 0x9, 0x3, 0x7, 0x6, 0xff, 0xb, 0x1, 0x280, 0x2, 0x5, 0x401, 0x1, 0x0, 0x7, 0x2, 0x80000000, 0xfffff2b1, 0x2, 0x6, 0x7, 0x7, 0x5, 0x5, 0x4, 0x8001, 0x8, 0xb03f, 0x0, 0xe, 0x5, 0x0, 0x5, 0x7, 0x3, 0xafb8, 0x4, 0x6, 0xb, 0x0, 0x0, 0x5, 0xf0, 0x7, 0x8ab, 0x6, 0x9, 0x3, 0x9, 0x5, 0x0, 0x1ff, 0x3, 0x5d26, 0x2, 0x1, 0xe, 0x5, 0x9, 0x8, 0x9, 0x594, 0x9, 0x8, 0xd32, 0xaac3, 0x6, 0x4, 0x6, 0x800, 0x1, 0x3, 0x3, 0xa, 0x2, 0x1, 0x3, 0x8d4b, 0x1, 0xf2, 0x0, 0x2, 0x6, 0x3ff, 0x1, 0x9, 0x9, 0x2, 0x101, 0xe0, 0x9, 0x9, 0x220, 0x6, 0xb, 0x8, 0x6, 0x6, 0x3, 0x3, 0x3, 0xffff, 0x3, 0x1, 0x4, 0xb58, 0x5, 0x10, 0xfffffffe, 0xfff, 0x5, 0xfa2, 0xaf, 0x7fff, 0x6, 0x40, 0x6, 0x5, 0x34, 0x6, 0x10, 0xa2b, 0x1000, 0x0, 0x400, 0xadc, 0x0, 0x2, 0x9, 0x5, 0x9, 0xe, 0x9e, 0x9, 0x0, 0x5, 0x0, 0x3, 0x9, 0x4, 0x4d, 0xfffffff8, 0x2, 0x3, 0x3ff, 0xf58, 0x21, 0x2, 0x0, 0x2, 0x4, 0x9, 0x80, 0x9, 0x664, 0x6, 0x3, 0xfff, 0x1, 0x10001, 0x7, 0x2, 0x10, 0x6, 0x8, 0x3, 0x10, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0xfffffff8, 0x2, 0x41d, 0xffffffc0, 0x8, 0x7, 0x40, 0x4, 0x3, 0x3, 0x4, 0x4, 0x6, 0x1, 0x7fff, 0x2, 0x9, 0x1, 0x17, 0x2, 0x1000, 0x3, 0xc0000000, 0x4, 0x80, 0x200, 0xfc, 0x6, 0xd, 0xc, 0x8, 0x37a, 0x6, 0x0, 0xfffffff7, 0x80000001, 0x10001, 0x5, 0x5, 0x5, 0x7fff, 0x6, 0x6, 0x0, 0x9, 0x101, 0x8e, 0x400, 0x31, 0x81, 0x2, 0x31f7, 0x3, 0xffff, 0x53, 0x1d2, 0x671, 0x0, 0x8, 0xffffffc0, 0x5, 0x3, 0x8, 0x3, 0x7, 0x79dc19b8, 0x8, 0x7, 0x9, 0xfffffffb, 0x7, 0x500, 0x7, 0x4, 0x2, 0x3, 0xc, 0x6, 0x7fff, 0x5, 0x30, 0xc, 0xe9, 0x7fff, 0x9e4, 0x38, 0x2, 0x1, 0xc, 0xe, 0x80000001, 0xf623, 0x472, 0x4, 0x7ff, 0x80000000, 0x9, 0x800, 0x80000001, 0x4, 0x1, 0x7, 0x3, 0x80000001, 0xffff, 0x0, 0x6, 0x3, 0x4, 0x36a1, 0xa534, 0x3, 0xca, 0xffffff31, 0x7ff, 0x4, 0x44e7faed, 0x90, 0x2, 0x9, 0x2, 0x40, 0x6, 0x6, 0x6, 0x0, 0x66, 0x200, 0x3, 0x7fffffff, 0xd23, 0x7, 0x5, 0x6, 0xda, 0x6, 0x6, 0xc658, 0x3ff, 0x7f, 0x3, 0x3, 0xffff8001, 0x58, 0x2, 0x80000000, 0xfffffff9, 0x9, 0x5, 0x3, 0x450, 0x4, 0x8, 0x3, 0x4203, 0xc1c, 0x1, 0x2, 0x100, 0x10, 0x40, 0x8, 0x0, 0x8, 0xef, 0x4, 0x2d32702d, 0x2, 0x2, 0xffff0001, 0xe15, 0x3, 0x9, 0x4, 0xfffff236, 0xb, 0xffff, 0x2, 0x0, 0x1, 0x9, 0x80000000, 0x1, 0x93, 0x1ff, 0x1, 0x5, 0x4, 0x2, 0xca73, 0x7, 0x1, 0x16, 0x7, 0x9, 0x7f, 0x10000, 0x4, 0x3, 0x4, 0x80000001, 0x4, 0x3, 0xc, 0x0, 0x6, 0x3, 0x7fffffff, 0x100, 0x2, 0x1, 0x400, 0x7, 0x4, 0x0, 0x10, 0x9, 0x1, 0x0, 0x4, 0x10, 0x2, 0x9, 0x7, 0x58, 0x1b4b, 0x4, 0x6, 0x2, 0x5, 0x40, 0x6, 0x40, 0x80000000, 0x81, 0x1, 0x6, 0x80, 0x400, 0x5, 0x4, 0xa, 0x401, 0x8, 0x4, 0xff14, 0x8, 0x2, 0x5, 0xfffffffe, 0xfffffffc, 0x8000, 0x0, 0x7, 0xfffffff8]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x200, 0x11, 0x0, 0x400, 0x81, 0x7, 0x9, 0x88d, 0x0, 0x3950, 0x9, 0x101, 0x3, 0xd, 0x4, 0xd62, 0x101, 0x2, 0x3, 0x2, 0x10001, 0xe, 0x7fff, 0xa, 0x0, 0x10, 0x2, 0xfffffff7, 0x9, 0x3, 0x7, 0xcd3448b, 0x8001, 0x0, 0x80000001, 0x1, 0x7ff, 0x2, 0x3, 0x36, 0xfffffffa, 0xfffffff6, 0xfffffffd, 0x8, 0xfffffffc, 0x3, 0x401, 0x8, 0xbf20, 0x8, 0x3, 0x5, 0x9fc, 0x5, 0x8, 0x7, 0xaf7b, 0xfc4, 0xb, 0x6, 0x3ff, 0x6, 0x6, 0x7f, 0x80000001, 0x4, 0x401, 0x3, 0x6, 0x27be, 0xffff8000, 0x2e6, 0x1, 0x7, 0x10, 0x191, 0x7fffffff, 0x200, 0x3, 0x6, 0x5, 0xffff0001, 0x1000, 0x19d5a82f, 0x7, 0x3, 0x7, 0x9, 0x19, 0xffffffff, 0xd274, 0x100, 0x1, 0x93b, 0x4, 0x8, 0x101, 0x0, 0x1, 0x5, 0x7, 0x200, 0x4, 0x7, 0x7, 0x5, 0xf42a, 0xfffffff8, 0x5, 0x8, 0x3957, 0x4, 0x2, 0xa, 0x3, 0xfffffffa, 0x7fffffff, 0x5, 0x6, 0xffffffff, 0x3, 0x5, 0x5, 0x1000, 0x101, 0x8, 0x520, 0x9, 0xfffffff5, 0x5, 0x9, 0x9, 0x1, 0x5, 0x8, 0x3, 0x9, 0x0, 0x4, 0x9, 0xfffffff5, 0x8001, 0xfffffff6, 0x8000, 0xf9, 0x10000, 0x2, 0xfff, 0x54, 0xffff, 0x10001, 0x9, 0x400, 0x98b, 0x8, 0x4, 0x2, 0x177, 0x7, 0x3, 0xfffffff0, 0x0, 0xe, 0x5, 0x7fffffff, 0x6, 0x2, 0xec8, 0x0, 0x7, 0x8, 0x6, 0x3, 0x7, 0x8, 0x8001, 0x5fd9c0da, 0x5, 0x1ff, 0x4, 0x9, 0x3, 0x8, 0xd, 0xfffffff9, 0x7, 0x5, 0x0, 0x9, 0x80000001, 0xe256, 0x1, 0xffff, 0x401, 0xffff, 0x6, 0x4, 0x8, 0x4970, 0xfa65, 0x2, 0xffff8169, 0x0, 0x1, 0x3, 0x6, 0x8, 0x3, 0x8, 0x7, 0x4, 0x0, 0xc2, 0x1, 0x687a, 0x4, 0xffffffff, 0x2, 0x7, 0x6, 0x7, 0x2, 0xd737, 0x400, 0x5, 0xffffffff, 0x8, 0x6247f7da, 0x154, 0x4, 0x5, 0xffff, 0xb794, 0xffffff81, 0x0, 0xc, 0x3, 0x3, 0x4, 0x8, 0xffffffff, 0x2, 0x1, 0x80, 0x4, 0x7ff, 0x200, 0x9, 0x81, 0x8, 0x6, 0x80000001, 0x6, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xa71c, 0x3, 0x3, 0xff, 0xd, 0x5, 0x1ff, 0xde, 0x8, 0x7ff, 0x40, 0x8, 0xfffffffe, 0xfff, 0x6, 0x3, 0x8, 0x9, 0x81, 0x3, 0x2, 0x8, 0xd, 0x9, 0x80, 0x5, 0x2, 0x23, 0x10, 0x886, 0x1, 0x4, 0x5, 0x6, 0x1ab85723, 0x5, 0x1, 0x2, 0x7f, 0x0, 0x2264ba45, 0x6, 0xfffffff8, 0x2, 0x7, 0x6e, 0x5, 0x1, 0xffffff9f, 0x2, 0x1, 0x4, 0x7f, 0x2, 0x7, 0x8001, 0x7, 0x5, 0xfffffffe, 0x6, 0x1, 0x6, 0x5, 0x5, 0x8000, 0x2, 0x9, 0x2, 0x2, 0xdb7, 0x8, 0xcef, 0xfffff7fd, 0x7fffffff, 0x1, 0x7fff, 0x8, 0x9, 0x8, 0x1, 0xc6, 0x6, 0x0, 0x10001, 0x80, 0xfff, 0x6, 0x5, 0x0, 0xfffffffc, 0xfffffd93, 0x52, 0x400, 0xd, 0x2, 0x7, 0x3, 0x0, 0x7, 0x9, 0x5, 0xfffffffb, 0x9, 0xcfa3, 0x890, 0x454, 0x7f, 0x1, 0x955, 0x81, 0x0, 0x7, 0xfff, 0x1, 0x5, 0x9, 0xfffffff7, 0x200, 0x4, 0x2ff, 0xacb, 0x10001, 0x5, 0x5, 0x3, 0xfffff3b6, 0x5, 0xfffffff8, 0x48f, 0x0, 0xffff7554, 0x9, 0x6, 0x1000, 0x4, 0x9, 0x8c, 0x6, 0x9, 0x2, 0x3, 0x9, 0x400, 0x380, 0xc000000, 0x0, 0xda5, 0x5, 0x3c4, 0x6, 0x4, 0x7, 0x0, 0x1, 0x3, 0x25, 0xfffffff8, 0x8, 0x99, 0x0, 0xf, 0xf14, 0x0, 0x0, 0x7, 0x8, 0x4, 0xffffffff, 0x5, 0x9, 0x4, 0x9, 0x40, 0x8, 0x9, 0x4, 0x80, 0x7f, 0xfffffffc, 0xfffffff8, 0xffff0001, 0x7, 0x8, 0x9, 0x400, 0x6, 0xe94, 0x0, 0x40, 0x40, 0x2086, 0x2, 0xfffffffe, 0x3, 0x0, 0xffffffff, 0x2, 0xffffffff, 0x3, 0xfffffffc, 0x7, 0x5, 0x8, 0x8, 0x3, 0xffff0d22, 0x6, 0x5, 0x9223, 0x40, 0x7, 0x7fffffff, 0x3ff, 0x2, 0x0, 0x8001, 0x2, 0x9, 0xe, 0x8, 0x9a, 0x0, 0x0, 0x31, 0xfffffa8c, 0x5, 0xf, 0x200, 0xe, 0x1, 0x547b, 0x10000, 0x2, 0x80000000, 0x4, 0x7, 0x6c2, 0x4, 0x100, 0x276ad1c6, 0x7, 0x5, 0x2, 0x788e, 0x0, 0x10, 0x6, 0x8, 0x3, 0x0, 0x3d8, 0x3, 0xc, 0x10, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x6ff6099f, 0x6, 0x80000001, 0x4, 0x1ff, 0x392b, 0xfffffff7, 0x1, 0x8, 0x5, 0x3, 0x8, 0x1, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x8, 0x4, 0x0, 0x3, 0x5, 0xf, 0x0, 0x1, 0x8, 0x9, 0x1000, 0x44d, 0x80000000, 0x8, 0x8001, 0xc8, 0x2, 0x9, 0xfffff050, 0xed2, 0xc94fae31, 0x52f, 0x9, 0x7, 0x5, 0xa21, 0xb330, 0x7, 0x9, 0xf, 0x2, 0x2, 0xfffffffa, 0x592, 0x81, 0x5, 0x2, 0x7, 0x4, 0x8, 0x3, 0x7, 0x7, 0x6, 0x7, 0x2, 0x6, 0xe33, 0x7, 0x238, 0x3, 0x3, 0x5, 0x0, 0x4, 0x8, 0x1, 0x9, 0x1, 0x1, 0x3, 0xfc5, 0x3, 0x7, 0x0, 0x4, 0x1, 0xfb2, 0x8001, 0x2, 0x7, 0x3, 0x5, 0x8001, 0x10000, 0x7, 0x7fff, 0x7, 0x842, 0x7, 0xbfbc, 0x0, 0x7f, 0x4, 0x8, 0xfffffb9a, 0xc, 0x52, 0x6, 0x90, 0xd0, 0x1, 0x80000000, 0x4, 0x6, 0x3b6436da, 0x8, 0x401, 0x5465750e, 0xfff, 0x3, 0x8, 0x1, 0x80000000, 0x9, 0xfffffffd, 0x7fffffff, 0x8b, 0x800, 0x4, 0x8, 0x3, 0x1, 0x2, 0x3, 0xc0000, 0x8001, 0xa, 0x3, 0x6, 0x0, 0x10000, 0x80000000, 0x7, 0x10000, 0x5, 0x2, 0x0, 0x1, 0x398, 0xdfe6, 0x3ff, 0x2, 0x3, 0x5, 0x3, 0x80, 0x8, 0x52d5, 0x0, 0x1, 0x9, 0x4, 0x8ac9, 0xfffffffe, 0x6, 0x4, 0xb, 0xfbcb, 0x4, 0xffff, 0x7f, 0x400, 0xf, 0x192eec0d, 0x4, 0xacf, 0x25, 0xc, 0x3, 0x0, 0xec0, 0x2, 0x3, 0x80000001, 0x3b6b, 0x7, 0xf, 0x0, 0x3, 0x0, 0x3, 0x2aa7, 0x478, 0xa, 0x3, 0x3, 0x5, 0xc, 0x5, 0x6, 0x2, 0xcd58, 0x0, 0xa, 0x3e6, 0x924, 0x3, 0x10, 0xc5, 0x8, 0x0, 0xffffff49, 0x8, 0xfffffffe, 0xc3, 0x4, 0xc4, 0x7ab, 0x7fffffff, 0xfffffffb, 0x1ff, 0x1, 0x1, 0x7fffffff, 0x2, 0x0, 0xba5, 0x1000, 0xa6, 0x8, 0x3, 0x6, 0x7, 0xc, 0x5, 0x1, 0x4, 0x80000001, 0x80000000, 0x172, 0x4, 0x2, 0x1, 0x1, 0x1ff, 0x2e, 0x1000, 0x3ff, 0x3, 0x7, 0x9, 0x9, 0x9, 0xfffffff0]}]]}, {0x5, 0x6, '.'}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x13c, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}]}, {0xe8, 0x6, "e602f311cc76ae889017f8165dd37be7a8b4aa75967518f5c789f7f734faf152154bc6e33900d6af9e92d648e209ecb6ea89dc02a89c9fef60e3cefbd39ec946173c8d22e4fe15507487c6f78cbc2fc072e52667d07518a43a99c855ae783db530d87c198bf0e8f5630a6947dbe066eaabb76d5ae1dffa04ba1a210d6b19e093e25e7714ada5c2243a15bb3afddc24787d0ab4c50391ac93ed00dc96fe5b7fb713b2e05c62cf94fcdb78767bfae79f6d534c73e5421c55a287d8bb7d92e2a8fa8272bbd11133afcc1392b8008b7478edbe2789abe030f6395b74c46c4532992d245e19f7"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0xf4, 0x19, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}]}, {0xbf, 0x6, "66509372d818ae3f0bc7cba0d4394df87c075d1dd4b464a0b4fcad755be8ab7f74dc175d5a2db8d23855b473acba2f06ed84ccff53e1799e5542dd9979c33d0ab316f025cc75f4b453f479f3cfcf6efe10bbcff710e6c23ee848a2fcc8d10dbee2673af525e2af9a3e8d134144cd6c5d219211109338d58abe35d54747c66711487d12cb4f51c5c0a0464cb2557c8f5046bfbd8d2a2bf2631f8da0489e60ca834190a00ba60973c6208e53fa275f34d9824fa2b664c8f4a0d53d13"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0x90, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xaa43, 0x7, 0x2, 0x6, 0x8}}]}, {0x49, 0x6, "da6cbddb65cd0357594472eee00145fb47a7ab43a0b140cead7385a88d0be2bdcfcb4eb287ef9463e3b0621b411749a903964c76d88bccd888d19650f0fc7c14868b9cd682"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0xa4, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0xc, 0x70, 0x0, 0x7, 0x4}}]}, {0x5f, 0x6, "8c301f9fdd3f8d48523463f8b6f57d6b3b6e61680ca45e1c7d38554e57c0a65dc40dcb86bf02e8169d7602a95b61cc65e162b37e383fd918e17f194cc3a97d8446cf81793c8936a8a49f4c5a4b1f1b9b4ab8b1cbe127579705e813"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip_vti0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0xf2e}, @TCA_RATE={0x6, 0x5, {0x7, 0xde}}, @TCA_RATE={0x6, 0x5, {0x10, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x34f4}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x6000, @fd_index=0x3, 0x800000, 0x0, 0x0, 0x13}) syz_usb_connect(0x1, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100006edb10082505a0635c0204a4b66f0102030109021200014100000009045fb579831c000059710820"], &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) io_uring_enter(r1, 0x53d1, 0x0, 0x4, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) socket$nl_route(0x10, 0x3, 0x0) 35m27.806233755s ago: executing program 0 (id=1019): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x202, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffe, 0x0, 0x6}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x2000000}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0_to_hsr\x00', &(0x7f0000000540)=@ethtool_per_queue_op={0x4b, 0xf, [0x7, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x6615, 0x1, 0x6, 0x5, 0x101, 0x100a, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0x6, 0x9, 0x4, 0x7, 0x5, 0xe8, 0x0, 0x40, 0xd, 0x7, 0x1, 0x400100, 0x4, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4, 0xa, 0x7, 0xf, 0x101, 0x3, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0x12, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x82, 0x6, 0x9, 0xc, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x4, 0x0, 0x10001, 0xe, 0xffffffff, 0x8, 0x6, 0x9, 0x80000000, 0xfdfffffc, 0x2, 0x2, 0x4, 0x100, 0x6, 0x252, 0x81, 0x5d102cf1, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x48, 0x8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff], "1d9b3579fe6b95c862ccd9d573ed34156036408adfece5f91dd032258a847be11321abad5a9a102d53c97fe788"}}) socket$inet6_tcp(0xa, 0x1, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 35m27.617313295s ago: executing program 0 (id=1020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup(r1) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000400)={{0x100000, 0xffffffff, 0x3, 0xae, 0x8, 0x8, 0x4, 0x7, 0x7d, 0x9, 0x8, 0xa6}, {0x58000, 0x70000, 0x9, 0x2, 0xc3, 0x7, 0xb, 0xf, 0x1, 0x2, 0x40, 0x6}, {0x5000, 0x75000, 0x10, 0x2, 0x9, 0x6, 0x83, 0xf, 0x3, 0xc5, 0x2, 0x7}, {0x9000, 0xb000, 0xc, 0x5, 0x30, 0xfc, 0x80, 0x8, 0x4, 0x3, 0x5, 0x3}, {0xffffffff, 0x41000, 0x0, 0x1, 0x71, 0x17, 0xfa, 0x9, 0x1, 0x7, 0x40, 0xc}, {0xddddb001, 0xe000, 0x3, 0x9, 0x40, 0x7, 0x10, 0x8b, 0x4, 0x8, 0x7, 0x5}, {0xdddd1000, 0x58000, 0xd, 0x6, 0x6, 0x4, 0xd6, 0x4, 0x1, 0x1, 0x6, 0xfe}, {0x9000, 0x8080000, 0xf, 0xa, 0xe, 0x2, 0x45, 0xb3, 0x80, 0xb, 0x5, 0x1}, {0x10000, 0x100}, {0x70000, 0xfffa}, 0xc, 0x0, 0x4, 0x9240a0, 0x3, 0x1400, 0xe000, 0x1, [0x3, 0x8, 0x100000001, 0x7]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000040)=""/3, &(0x7f0000000240)=0x3) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000002030300000000000000000003000000080300000000000068dc8a887e2ccf0e9bec431199c805299724960d662b24ebc607d7731643f599d136d4c54d785c38f3fba2de70abc00666e0ad825ac3031cbed82ac40238dd6edcf79b4a175e164061d40ebad31bf657ce7433c9d8860a8226c97827d4aed3bbe6ba1731346b6c4d4ad3cb"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000200)={0x5002, 0x80000008, &(0x7f0000000100)=[0x3, 0xf1c1, 0x9], &(0x7f0000000140)=[0x8], &(0x7f0000000180)=[0x2, 0x4, 0x5, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) r10 = epoll_create1(0x0) r11 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r12, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r11, 0x6, 0x0, 0x0, 0x2}) io_uring_enter(r11, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000140)={0x40000002}) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) 35m27.218746187s ago: executing program 32 (id=1020): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80000, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = dup(r1) ioctl$KVM_SET_SREGS2(r3, 0x4140aecd, &(0x7f0000000400)={{0x100000, 0xffffffff, 0x3, 0xae, 0x8, 0x8, 0x4, 0x7, 0x7d, 0x9, 0x8, 0xa6}, {0x58000, 0x70000, 0x9, 0x2, 0xc3, 0x7, 0xb, 0xf, 0x1, 0x2, 0x40, 0x6}, {0x5000, 0x75000, 0x10, 0x2, 0x9, 0x6, 0x83, 0xf, 0x3, 0xc5, 0x2, 0x7}, {0x9000, 0xb000, 0xc, 0x5, 0x30, 0xfc, 0x80, 0x8, 0x4, 0x3, 0x5, 0x3}, {0xffffffff, 0x41000, 0x0, 0x1, 0x71, 0x17, 0xfa, 0x9, 0x1, 0x7, 0x40, 0xc}, {0xddddb001, 0xe000, 0x3, 0x9, 0x40, 0x7, 0x10, 0x8b, 0x4, 0x8, 0x7, 0x5}, {0xdddd1000, 0x58000, 0xd, 0x6, 0x6, 0x4, 0xd6, 0x4, 0x1, 0x1, 0x6, 0xfe}, {0x9000, 0x8080000, 0xf, 0xa, 0xe, 0x2, 0x45, 0xb3, 0x80, 0xb, 0x5, 0x1}, {0x10000, 0x100}, {0x70000, 0xfffa}, 0xc, 0x0, 0x4, 0x9240a0, 0x3, 0x1400, 0xe000, 0x1, [0x3, 0x8, 0x100000001, 0x7]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6b3a6e7e216920a8}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r4, 0x0, 0xc, &(0x7f0000000040)=""/3, &(0x7f0000000240)=0x3) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c00000002030300000000000000000003000000080300000000000068dc8a887e2ccf0e9bec431199c805299724960d662b24ebc607d7731643f599d136d4c54d785c38f3fba2de70abc00666e0ad825ac3031cbed82ac40238dd6edcf79b4a175e164061d40ebad31bf657ce7433c9d8860a8226c97827d4aed3bbe6ba1731346b6c4d4ad3cb"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfffffd9d) r9 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUTCMAP(r9, 0x4605, &(0x7f0000000200)={0x5002, 0x80000008, &(0x7f0000000100)=[0x3, 0xf1c1, 0x9], &(0x7f0000000140)=[0x8], &(0x7f0000000180)=[0x2, 0x4, 0x5, 0x5, 0x7, 0x7f, 0x84f3], &(0x7f00000001c0)}) r10 = epoll_create1(0x0) r11 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r12, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r11, 0x6, 0x0, 0x0, 0x2}) io_uring_enter(r11, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000140)={0x40000002}) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000001c0)='highspeed', 0x9) 24m40.610037846s ago: executing program 2 (id=3442): socket$nl_netfilter(0x10, 0x3, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101) socket(0xa, 0x1, 0x84) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = io_uring_setup(0xad5, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1, 0xe9}) close(r3) r4 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) mq_getsetattr(r4, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffd, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad, 0x0, 0xc2c5}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0x5e51, 0x0, 0x7}, 0x0, 0x0, 0x0, 0x0) 24m39.466959532s ago: executing program 2 (id=3446): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffbfffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000000706010200000000000000000a00000a08000640000000040900020073797a3100000900020073797a3100000000050001000700"/68], 0x44}, 0x1, 0x0, 0x0, 0x4008888}, 0x20088081) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = memfd_create(0x0, 0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x59, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x0, &(0x7f0000000100), &(0x7f0000000300)=""/89}, &(0x7f0000000100)=0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0) userfaultfd(0x80001) 24m35.440115593s ago: executing program 2 (id=3456): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r0 = socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_io_uring_setup(0x15c0, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x3, 0x145}, &(0x7f0000000100), &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x8, 0x0, 0x2}]}) setns(r4, 0x24020000) r5 = landlock_create_ruleset(&(0x7f0000000040)={0xa, 0x3}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x14) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x2, &(0x7f0000000440)=[{0x3, 0x7, 0x40, 0x400}, {0x1, 0x9, 0x6, 0x400}]}, 0x8) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x4, 0x0) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f00000003c0)=""/10, 0x214000, 0x800}, 0x1c) 24m33.137685586s ago: executing program 2 (id=3461): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x48) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x2c, 0x1a, 0x10, 0x0, 0x0, {}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_ENCAP_TYPE={0x6}]}, 0x2c}}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x15c}}, 0x0) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x1, 0x2000000000000000, 0x80000004000000, 0xffffffffffffffff], 0x8000000, 0x2010d3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000200)="440f20c0350b000000440f22c0360f09c4217d700c9d0000000028b8010000000f01c166b82e000f00d80f20d835080000000f22d82e0f019885000000b9b1060000b86f8d0000ba0000000066b8b5008ec036363ef3420f51a600000000b9e30b0000b8f233278fba000000000f30", 0x6f}], 0x1, 0x13, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r6 = dup(r1) write$UHID_INPUT(r6, &(0x7f0000004000)={0xf, {"a2e3ad21ed0d09f91b50090987f70906d038e7ff7fc6e5539b0d3d0e8b089b33396d63060890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5d31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0xfffffffffffffe59}}, 0xfa) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0700000000000000000000000000000000000000eb0edc20419d75a1c722947dd5674c968db5eb7e4dd23642f0f610a603a222eb98ca82d80d38cee10ddc31c16d47388fa98f69ae42b3a2b6abd1e564e2ca7a1df91fbdc33555d8c52d08466c1f39d2c8ba1c505068e304c01e24e7809eb2a12fbc66fe24011ebd24d258ad7cf24e6dd2a65457f1797a82f962048c646f9fc52e4743e697106980b1afa3109d1ce3453e97888e7423be72c46be171d5fd62c4261762183130ff228a485f88dbc562ca5ee6b34ebf67bfe6771cc8ea959adbb0462088d887b2ef3b3e3f1210fcb2c23258e3756580f5ee36f105948bd3b031aa715c6061fc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r10, &(0x7f0000000080)={0x11, 0x1a, r11, 0x1, 0x8, 0x6, @broadcast}, 0x14) sendto$packet(r7, &(0x7f0000000e80)="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", 0x1000, 0x40040, &(0x7f0000000080)={0x11, 0x7, r11, 0x1, 0xc9, 0x6, @multicast}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000ff00000000000000fbffffff18110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000001200007b2af0ff00000000d609080000000000db9af0ff41000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000a7050000080000001500000076000000bf9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 24m32.160239157s ago: executing program 2 (id=3467): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffbfffff}, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="440000000706010200000000000000000a00000a08000640000000040900020073797a3100000900020073797a3100000000050001000700"/68], 0x44}, 0x1, 0x0, 0x0, 0x4008888}, 0x20088081) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x89\xbf3:\x99\x1e\xac\xd2\x00\b\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x00'/137, 0x2) mkdir(0x0, 0x16) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') unlinkat(r5, &(0x7f0000000280)='./file0\x00', 0x200) write$binfmt_script(r4, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '[\v\xdb\x06\x00\x00\x00\x00\x00\x00\x00\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x00\x00\x80\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xcc\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8cI\xdcn\x9b\xa5\xd4\x13\xc0\x82^\x10,\xfa\x88\x93\xc6K2\xf2\xce\x95\x1bG\xb2m\xad\xe7\xd1P.XT\xc1\xc5\xd9\xaf\v\x8d\xcf\x8f`{F\xc7\x95!\xcc\vq0\xd0\x80\x06{\x97\xb0\xdb+Z\xc5\x9d\xf4\x0eS\xd2\xd4\xb5\\\x96\x1dN\xe6\xfd\\\xe32_p\xee\x15JU\x11\x1f\xc6\xeb\xafm\x1e\xb3\xb5\xfe\x02\xe24\x90Uo\xaf\xce/\x9c\xd4\vE \x81\x14\xdf\x9b\x12b\x1a\x173\x8d\t\xab\xec\xf0n\xa5\x95\x9c\xc3\xf2\xb6CS\xf3\xa8p\t!\xb3\x912`\n\xd2\xe2S\x9cU\xcc\"\xf2d(Ec\xb2\x7f\x02'}]}, 0x130) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x3) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) recvmmsg(0xffffffffffffffff, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x100, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0}) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x4, 0x59, [0x3ff, 0xef8, 0x800, 0x0, 0x5, 0x1], 0x0, &(0x7f0000000100), &(0x7f0000000300)=""/89}, &(0x7f0000000100)=0x50) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0) userfaultfd(0x80001) 24m31.047235755s ago: executing program 2 (id=3470): syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x184411, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 24m29.892323208s ago: executing program 33 (id=3470): syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x184411, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=0xee00, @ANYBLOB=',\x00'], 0x0, 0x0, 0x0) 3m3.612280768s ago: executing program 5 (id=7447): mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9) syz_clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) shutdown(r2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05001700000000000a0000000000000000000000000000000000000000000000000000000000000005001a00ff020000000000000000000000000001fc02000000000000df0c0000000000002900101000"/96], 0x60}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x30, r1, 0x5, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}, @NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000016c0)) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x4, 0x4, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2001, 0x8e) close(r4) writev(r6, &(0x7f0000001840)=[{&(0x7f00000002c0)="ca", 0x1}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x9, {0x20000000000000, 0x0, 0x0, {0x5, 0xfffffffffffffffc, 0x15, 0x80000001, 0x0, 0xa0, 0x9e9, 0x0, 0xb877, 0x4000, 0x7, 0x0, 0xee01, 0x3d, 0x86}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x0fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0xc7) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3m2.160291019s ago: executing program 3 (id=7452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x4, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @global=@item_4={0x3, 0x1, 0xa, "1914d838"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r2, 0xc0104811, &(0x7f00000019c0)={0x4bbbce6a, 0x900000, 0xfff, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001e0000010200002000000000010000000800b200", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 3m1.81058158s ago: executing program 1 (id=7454): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={&(0x7f0000000040)=""/2, 0x0, 0x2}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x1d45, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a00020000000000000000010000000900010073797a30000000000900030073797a310000000014000480080002400000000008000140000000003c000000060a010400000000000000000100000008000b40000000001400048010000180090001006d617371000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) syz_mount_image$fuse(&(0x7f0000003640), &(0x7f0000003680)='./file0\x00', 0x400, &(0x7f00000036c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}]}}, 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000002c0), 0x80, &(0x7f0000000140)=[{&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/204, 0xcc}, {&(0x7f00000006c0)=""/143, 0x8f}, {&(0x7f0000000780)=""/241, 0xf1}], 0x4, &(0x7f00000009c0)=""/170, 0xaa}, 0x80000000}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001000)=""/130, 0x82}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f0000000940)=""/122, 0x7a}, {&(0x7f0000000a80)=""/77, 0x4d}, {&(0x7f0000000b00)=""/195, 0xc3}], 0x6, &(0x7f0000000c00)=""/164, 0xa4}, 0x4}, {{&(0x7f0000000cc0)=@pppol2tpv3, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/6, 0x6}, {&(0x7f0000000d80)=""/170, 0xaa}, {&(0x7f0000000e40)=""/32, 0x20}], 0x55, &(0x7f0000000ec0)=""/68, 0x54}, 0x9}], 0x3, 0x40000000, &(0x7f0000000fc0)={0x77359400}) writev(r5, &(0x7f0000000280)=[{&(0x7f00000049c0)="a1ff", 0x2}], 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) close(r2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f0000000100)) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000040)={0x0, 0x4999, 0x7fffffff}) r8 = syz_usb_connect$hid(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000400b060a70000002000001090224000100000000090400000103000000092100000001220500090581030000"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f00000003c0)={0x18, &(0x7f0000000680)=ANY=[@ANYBLOB="0000570000005700a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) 3m1.128615977s ago: executing program 5 (id=7455): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) ptrace$poke(0x5, 0x0, 0x0, 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x51, 0x0, 0x0, 0x0, &(0x7f0000002000/0x4000)=nil, 0x4000, 0x14}) io_uring_enter(r2, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000005001900010000000800160000000100080017"], 0x44}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) r8 = timerfd_create(0x0, 0x0) read(r8, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)='R', 0x1}], 0x1}}], 0x1, 0x4040040) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x1}, 0x8) 3m0.920276805s ago: executing program 6 (id=7457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{0x0, 0xdd12}, {0x0}], 0x2}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)='\f', 0x1}, {0x0}], 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)=[{0x0, 0xdd12}, {0x0}], 0x2}, 0x0) (async) socket$inet(0x2, 0x3, 0x4) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) (async) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) (async) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000140)='\f', 0x1}, {0x0}], 0x2) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x325) (async) 3m0.796242476s ago: executing program 5 (id=7458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) 3m0.674535327s ago: executing program 4 (id=7459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffe, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x1, 0x4, 'snmp\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0xff], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa43a}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 3m0.618394303s ago: executing program 6 (id=7460): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket(0x22, 0x4, 0x99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfd, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYBLOB="1400020000000000000000000000ffff000800000000080081060000c06e408587b312b52253e1d239953ab02cc44bb6887c184509840bf1237ac697d031130bd63af08f701b4b0ed5ed45288205de918c757b33"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3m0.374847939s ago: executing program 4 (id=7461): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket(0x22, 0x4, 0x99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfd, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000ffff000800000000080081060000c06e408587b312b52253e1d239953ab02cc44bb6887c184509840bf1237ac697d031130bd63af08f701b4b0ed5ed45288205de918c757b"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 3m0.186562476s ago: executing program 6 (id=7462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffe, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x1, 0x4, 'snmp\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0xff], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa43a}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 3m0.112788255s ago: executing program 4 (id=7463): io_uring_setup(0x63eb, &(0x7f0000000000)={0x0, 0x5fc2, 0x8, 0x1, 0x1d7}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) r2 = syz_io_uring_setup(0xb7f, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f00000000c0)={&(0x7f0000002000)={[{0x0, 0x0, 0x4, 0xf4}, {&(0x7f0000000140)="6e6f82e5e8bf21ed4e1a02367f8b3cf61b4a16a146dfb1851626bda845094856f52489d817e92e5a8ecce479ffc846d58c6297467e", 0x35}]}, 0x2, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m59.832072076s ago: executing program 6 (id=7464): syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 2m59.554857827s ago: executing program 6 (id=7465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r5, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xe}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x141100, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", 0xffffffffffffffff, 0xffffffffffffffff}) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x80a0000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x1000000000000, 0x1]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000000040)={0x2000}) close_range(0xffffffffffffffff, r7, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000ffff27bd706cfbdbdf2500009fd2", @ANYRES32=0x0, @ANYBLOB="00000000278205002400128009000100626f6e640000000014000280050006000100000008000700b4000000"], 0x44}, 0x1, 0x0, 0x0, 0x88c4}, 0x20040040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) gettid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24000800) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) 2m59.052439092s ago: executing program 3 (id=7466): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x1e, 0x1, 0x20000002, 0x0, {0x1}, [@nested={0x8, 0x3, 0x0, 0x1, [@typed={0x4, 0xa5, 0x0, 0x0, @binary}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) (fail_nth: 3) 45.291598ms ago: executing program 5 (id=7467): socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x10, 0x5, 0x0) (async) socket$kcm(0x10, 0x5, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0xd0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x18557f, 0x0) socket$inet(0x2, 0x2, 0x0) r3 = accept4$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x8, 0x80000) pwritev2(r3, &(0x7f0000000840)=[{&(0x7f0000000380)="4b9e28e8679847faba3e8cdf6f1e3830c8b240ccb8a5f9d06a64fb9fc12c93989b4e3b93672ffae55b012de7de73b54aad5594b46b25c3a4c0a802911585e9e8a254fe72a765ed82b19772d57ac170bf84fc81d0c0dd0201bab4885747deb2371b8c4014a26e5455a4446da5da8a3c92f5f332dae66eca7d9f0000000000", 0x7e}, {&(0x7f0000000280)="c081f784e09e15e643f131d7407fd78182a6effaa9bd2d8a06ea25de068d777b976eef9e563e8b08e6a46d4619203b5c89344afc70d516b4985ccad3ef317223bfa191198a40efc036c2c96ef15c0d72bcc72212c31b5134593e61cc25a5cc57fb661d33602d8120dd08f14b6038", 0x6e}, {&(0x7f0000000440)="f6eab7eb64438900fcd4b4b8def235606d6eac00e6bf8d3abdef6bda239a9e9c692a18760f8aba5b25fe65b1e8507aa7c161438b45f854411a97f0fd8bee82d8828bea0f105e2a41915310f4e9f28a7f3e27c4c995376a79f5748f8128db8785be88b0dd9079897c6e2985da7adda8616d6b59d21127c90887d65480deb56034d1b33765823794e7aceeb21aa2fa67e901e4ebaa44b09a750983f70aa047dfbede55f36882fdd23c84fd3132559719ccf17a0958b2fbd2d8ad738253e45aa3013541d73e84c85d2bf5255cea7bd53134fdc329a9b638d39062a07203ee47bfb2be3001f78cecf5191602c6573b57", 0xee}, {&(0x7f00000008c0)="937af9564c7dbb", 0x7}, {&(0x7f0000000580)="99acbfa519dc55788c865be5580444fa97b36fb4e00d2b23adea4883fd03062bff4786de1d73837158a630792f5f93104fa272f31a14d8d1", 0x38}, {&(0x7f00000005c0)="99d1f9b885d7d755e05ad3c5de61af96b65a561c88e153cd6fa2032861d9231976ddf5a7961f4c17a9c9fab964ee0ed0c005fb4113b7698f73cf7f78c73dbd00976b14af3a1c43f6c457999e340b12dee06f015841b97b7d778dc86a4f86a1169fc4e19249b3488ad8da9e4c92413ef91cbf38ae44a00d325d644767f5a4382906aec9a42a12da3db1ff06da82bb3ba281f53ad7b46d5d5f887090b81ddb901e425a241f6ba4251e7ba196ef0e128d", 0xaf}, {&(0x7f0000000680)="e75d0841a942119f0d7330e64aee42452ebdda5e97023c3727e15268e1ac4ac511285714087babb6178f4289c64b5d1bd20ff8e82a0a9cf8c39fe1dfc8d7f65c716b4580af8c0eb14766663bf9", 0x4d}, {&(0x7f0000000900)="5c152eba3c269bec9b7d0dd733c6de2aa42e50477707260ce3cf74be4ba17cc0de8fbc658dba13c51cad1a73b1a960751182771737a6ba4aad9b0b7ef4671c3752072bdcf998efd7c8775cbd697a60236cbe9d85b8dd297903671ffa06f255cca7fd56fa18b27a5fe4cb5730", 0x6c}, {&(0x7f0000000780)="32a69bf4a88c63162879a9721234c82f6c7b94b71bed59a587c1f0711362afe029a64d8c7f469683112ea38b42862f2f0cec3c707434ebd3df9b138016ba31656d3afccd750628c551eae195c61ce7969caa939de0afb4e47c2098ddb900db63ff2f20b4298c55e0b92f7e75bb37af2236d8f00344f6ac00"/134, 0x86}], 0x9, 0xfffff33c, 0x401, 0x6) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) (async) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) (async) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x32c, 0x0, 0x9403, 0x0, 0x1e0, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x154, 0x0, {}, [@common=@srh1={{0x8c}, {0x16, 0xb9, 0x50, 0x40, 0x3, @remote, @private2={0xfc, 0x2, '\x00', 0xfe}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, [0xff, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xff000000, 0xff000000], [0x0, 0xffffffff, 0x0, 0xff000000], 0x407, 0x1060}}]}, @common=@unspec=@CLASSIFY={0x24}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x388) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109021b00020000000009049c0000010351000904"], 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109021b00020000000009049c0000010351000904"], 0x0) 36.190271ms ago: executing program 1 (id=7468): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x1000000}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}]}]}, 0x1bc}}, 0x20000000) (fail_nth: 3) 35.620747ms ago: executing program 3 (id=7469): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="000000000080000014001280090001007665746800000000040002800800200001"], 0x3c}}, 0x0) 34.032926ms ago: executing program 1 (id=7470): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_SREGS2(r0, 0x4140aecd, &(0x7f0000000000)={{0xc000, 0x8085000, 0xe, 0x3, 0xf3, 0x2, 0xf2, 0x0, 0x1, 0x9, 0x0, 0x4}, {0x26000, 0x30000, 0xa, 0x1, 0x2, 0x9, 0x4, 0x80, 0x2, 0x1, 0x8, 0x7}, {0xffff1000, 0x6000, 0x10, 0x6, 0xff, 0x2, 0x12, 0x9, 0x2, 0x9, 0x0, 0x3}, {0x4, 0x70000, 0x8, 0x9, 0xdf, 0xf7, 0x2, 0x6, 0xf9, 0x4, 0x1, 0x80}, {0x25000, 0x0, 0xa, 0x40, 0xc, 0x2, 0x5b, 0x4, 0xff, 0x3c, 0x2f, 0x80}, {0x4, 0x9000, 0xc, 0x39, 0x1, 0x6, 0xc, 0x73, 0x0, 0xa8, 0x40, 0x6}, {0xc000, 0xf000, 0x10, 0xfa, 0x5, 0xdc, 0x4, 0xf7, 0x7, 0x7f, 0xf7, 0xbd}, {0x8000000, 0x10000, 0xc, 0x2, 0x77, 0x81, 0x2, 0x4, 0xfa, 0x7, 0xb}, {0xb68eb0acdd22bde3, 0x7}, {0x41000, 0x8}, 0x40000026, 0x0, 0x2, 0x402280, 0x3, 0x2400, 0x25000, 0x1, [0x1, 0x1ff, 0x5, 0x8000000000000001]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000000180)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000140)=0x7}) fsopen(&(0x7f00000001c0)='iso9660\x00', 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="c269b4fd2db19e0b3e1160e455bb7bd7b92b4e41001690a2d78125dc5c02c694cd7f242cd2f7601d6238b02a3c80831eeb472110c710732bc374401e90b3d44f67f34af3a5b16f3827e8aac2ddf877e411357da2de232825677dc6912b5372616ba7d9f8c1bc9ce19a404e075c1ce2319d19f0489251a56d48cf54e9e4dbde912352cdd94979b1612ce9250f062504bda97df62216563cd07bd02810e4c9cfe64892c4491413ea7ce656", 0xaa, 0x4040004, &(0x7f00000002c0)={0x2, 0x4e21, @empty}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000340)={0x3, &(0x7f0000000300)=[{0x4, 0x2, 0x1, 0xff}, {0x8, 0xe6, 0x2, 0x5}, {0x401, 0x74, 0x6, 0x6}]}) r2 = openat(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x200000, 0x40) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000003c0)={0x0, 0x7d95b29c, 0xc5de, 0x400, 0x6d21, 0xbc, 0x8, 0x9, {0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x9, 0xa5, 0x4, 0x6, 0xffffffff}}, &(0x7f0000000480)=0xb0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000004c0)={r3, 0x3}, &(0x7f0000000500)=0x8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000540)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff}}, './file0\x00'}) ioctl$BTRFS_IOC_SPACE_INFO(r4, 0xc0109414, &(0x7f0000000580)={0x3af, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000005e00)={0x80, "a69ee74cdb891d8495194b132da5491e5026fdaeaad2295b928267bf9ac6db43", 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000005e80), r4) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r4, &(0x7f0000005f40)={&(0x7f0000005e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005f00)={&(0x7f0000005ec0)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) ioctl$KVM_CAP_HYPERV_SEND_IPI(r2, 0x4068aea3, &(0x7f0000005f80)) socket$inet(0x2, 0xa, 0x54) read$FUSE(r4, &(0x7f0000006000)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000008040)={0x50, 0x0, r7, {0x7, 0x2b, 0x4, 0x200, 0x1, 0x830, 0x9, 0x9, 0x0, 0x0, 0x20}}, 0x50) ioctl$FS_IOC_MEASURE_VERITY(r4, 0xc0046686, &(0x7f00000080c0)={0x5, 0x1000, "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"}) r8 = openat$ocfs2_control(0xffffff9c, &(0x7f0000009100), 0x400000, 0x0) ioctl$BLKREPORTZONE(r8, 0xc0101282, &(0x7f0000009140)={0x4, 0x2, 0x0, [{0xa0cb, 0x2, 0xffffffffffffffff, 0x1, 0xfd, 0x8, 0x5, '\x00', 0x2}, {0x9, 0x0, 0x7fffffff, 0xe7, 0x5, 0x8, 0xd, '\x00', 0xff}]}) r9 = syz_io_uring_setup(0x42d5, &(0x7f0000009200)={0x0, 0x3283, 0x10, 0x3, 0x260, 0x0, r4}, &(0x7f0000009280), &(0x7f00000092c0)) r10 = openat$fuse(0xffffff9c, &(0x7f0000009300), 0x2, 0x0) read$FUSE(r10, &(0x7f0000009340)={0x2020}, 0x2020) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r8, &(0x7f000000b440)={&(0x7f000000b380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f000000b400)={&(0x7f000000b3c0)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) r11 = pidfd_getfd(r2, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f000000b480)=[r5, r11, r9, r4, r10, r5, r0, r10], 0x8) r12 = syz_open_dev$audion(&(0x7f000000b4c0), 0x5, 0x448000) ioctl$HIDIOCGREPORTINFO(r12, 0xc00c4809, &(0x7f000000b500)={0x2, 0x3, 0x1}) getsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f000000b540), &(0x7f000000b580)=0x4) 31.702787ms ago: executing program 4 (id=7471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffe, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x1, 0x4, 'snmp\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0xff], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa43a}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) 27.834186ms ago: executing program 1 (id=7472): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) socket(0x22, 0x4, 0x99) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x10681, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfd, {0xa, 0x40, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYBLOB="1400020000000000000000000000ffff000800000000080081060000c06e408587b312b52253e1d239953ab02cc44bb6887c184509840bf1237ac697d031130bd63af08f701b4b0ed5ed45288205de918c757b33"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2, @ANYBLOB="01"], 0x3c}}, 0x0) 26.093908ms ago: executing program 3 (id=7473): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3}]}]}, 0x17c}}, 0x20000000) 23.548106ms ago: executing program 3 (id=7474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket(0x2b, 0x1, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000014000100ff"], 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2d0, 0x2e8, 0x2e8, 0x2d0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0xfffe, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1, 0x3}}, @common=@inet=@socket1={{0x24}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x1, 0x4, 'snmp\x00', {0x3}}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, [0xffffff00, 0xffffffff, 0xff, 0xff000000], [0xff, 0x0, 0xff], 'team_slave_0\x00', 'bridge_slave_1\x00', {0xff}, {0xff}, 0x73, 0x2, 0x2, 0x8}, 0x0, 0xa4, 0x100}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev, [], 0x0, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa43a}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3f4) bind$inet6(r0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x8) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x28) mkdirat(r4, &(0x7f0000000140)='./bus\x00', 0x0) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x400000, 0x4}, 0x2c) listen(r0, 0x5) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_REG_LIST(r8, 0xc008aeb0, &(0x7f0000000140)={0x7, [0xe, 0x4, 0x41b, 0x2, 0x1, 0x7, 0xa2d3]}) syz_emit_ethernet(0x4a, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a964600140600fe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="fb650250b65bacf71693faa70572b4a6909bb917543f639f7f4ee785a5b00be479873da126feeaf5436cc316584a147dbd0bfcaf8b047eae28cf690e5f769d360bf274114304078d517acb4175bb7949b6e0dc3590be6877d5fb5b1a5cf6"], 0x0) 17.193278ms ago: executing program 4 (id=7475): syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 2.360651ms ago: executing program 5 (id=7476): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000002060500000000000000000000000000050004000000000005000100070000000900020073797a320000000005000500000000001400078008001240000008cd0800130000000e760d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r5 = dup(r3) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETLINK(r6, 0x400454cd, 0x325) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0xc) fcntl$notify(r7, 0x402, 0x8000002d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r9 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r10 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x66c00) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000dd380)={0x7, [], 0x1, "a4bc9bfbc13d94"}) r11 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r10, r11, 0x3, 0x0) r12 = syz_io_uring_setup(0x4010e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r13, r14, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r5, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r12, 0x47f5, 0x0, 0x0, 0x0, 0x0) 1.747142ms ago: executing program 1 (id=7477): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001}) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x33) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1.062388ms ago: executing program 6 (id=7478): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xd, 0x4, 0xec, 0x9, 0x1000}, &(0x7f00000001c0)=0x14) openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x52340, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r7, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x7, r6, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000200)={r2, 0x52, "57b2f92ec514acd2ee271f50d92b406cbb1e2c3f07350c17de943df3a36f77e7c1ed7d590c862e4d0024c61755d1dce86327ed6e936fa3337fd785ca0ff3784cbfd5a8a55310601732b7743f9a101095cd1a"}, &(0x7f0000000300)=0x5a) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x0) r10 = syz_io_uring_setup(0x1e1e, &(0x7f00000000c0)={0x0, 0x86f7, 0x10100, 0x0, 0x1}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_enter(r10, 0x48e9, 0x0, 0x2, 0x0, 0x0) syz_io_uring_setup(0x1a1d, &(0x7f00000000c0)={0x0, 0x79b2, 0x3101, 0x3, 0x80400250, 0x0, r10}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$media(&(0x7f0000000380), 0xcf7, 0x0) bind$vsock_stream(r11, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r11, 0x0) 525.173µs ago: executing program 3 (id=7479): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xa, &(0x7f0000ffb000/0x3000)=nil) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8982, &(0x7f0000000000)={0x6, 'veth0_to_team\x00', {0x2}, 0xff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x101640, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x28, r4, 0x311, 0x70bd2b, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x20000880) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0xc005, &(0x7f0000000040)=0x1001, 0x5) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010140)=ANY=[], 0x20}}, 0x0) r6 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae\x01\x91&6n \xf2<\xd6\xcf\x15\xd3\xd7\x1d\xa7=\xef\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa0\xbbL}\xcc\'(;\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1b\b>Z\x8e\xb1\xc3j$v\xef,\x06/\x00\x00\x00\x00\x00\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81\x00\x00', 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r9, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 0s ago: executing program 4 (id=7480): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x28, 0x1, 0x0) r3 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r3) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f020}) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r6, 0x89e0, &(0x7f0000000040)) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814) gettid() timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000080)="b2db227bae9c53fc9b205e696f49356b904829a73111d8d3af49d917b72f06bd51f449", &(0x7f00000000c0)="77f68bdba021cfc2bf698a3d8d307cc688a605927037f8de7742c23325095e861757"}}, &(0x7f0000bbdffc)) madvise(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x9) kernel console output (not intermixed with test programs): 326083][ T777] skb_clone+0x212/0x3a0 [ 2269.326114][ T777] __netlink_deliver_tap+0x404/0x850 [ 2269.326168][ T777] ? netlink_deliver_tap+0x2e/0x1b0 [ 2269.326198][ T777] netlink_deliver_tap+0x19c/0x1b0 [ 2269.326228][ T777] netlink_unicast+0x7fa/0x9e0 [ 2269.326263][ T777] ? __pfx_netlink_unicast+0x10/0x10 [ 2269.326286][ T777] ? __alloc_skb+0x198/0x3a0 [ 2269.326310][ T777] ? netlink_sendmsg+0x642/0xb30 [ 2269.326336][ T777] ? skb_put+0x11b/0x210 [ 2269.326362][ T777] netlink_sendmsg+0x805/0xb30 [ 2269.326399][ T777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2269.326431][ T777] ? __import_iovec+0x5d4/0x7f0 [ 2269.326456][ T777] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2269.326486][ T777] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2269.326507][ T777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2269.326536][ T777] __sock_sendmsg+0x21c/0x270 [ 2269.326572][ T777] ____sys_sendmsg+0x52d/0x820 [ 2269.326605][ T777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2269.326648][ T777] ___sys_sendmsg+0x21f/0x2a0 [ 2269.326677][ T777] ? __pfx____sys_sendmsg+0x10/0x10 [ 2269.326709][ T777] ? kstrtoull+0x12f/0x1d0 [ 2269.326745][ T777] ? kstrtouint+0x6e/0xe0 [ 2269.326805][ T777] ? __fget_files+0x2a/0x420 [ 2269.326831][ T777] ? __fget_files+0x3a0/0x420 [ 2269.326869][ T777] __sys_sendmmsg+0x28e/0x430 [ 2269.326902][ T777] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2269.326925][ T777] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2269.326974][ T777] ? ksys_write+0x22a/0x250 [ 2269.326996][ T777] ? __pfx_ksys_write+0x10/0x10 [ 2269.327022][ T777] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2269.327053][ T777] __do_fast_syscall_32+0x1dc/0x560 [ 2269.327077][ T777] ? lockdep_hardirqs_on+0x7b/0x110 [ 2269.327097][ T777] ? do_fast_syscall_32+0x34/0x80 [ 2269.327121][ T777] ? irqentry_exit+0x10f/0x660 [ 2269.327147][ T777] do_fast_syscall_32+0x34/0x80 [ 2269.327171][ T777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2269.327198][ T777] RIP: 0023:0xf7fe7539 [ 2269.327218][ T777] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2269.327237][ T777] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2269.327259][ T777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2269.327275][ T777] RDX: 0000000000000235 RSI: 0000000000000000 RDI: 0000000000000000 [ 2269.327288][ T777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2269.327301][ T777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2269.327314][ T777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2269.327345][ T777] [ 2270.272316][ T783] pim6reg: entered allmulticast mode [ 2271.027667][ T783] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7096'. [ 2271.145139][ T797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7102'. [ 2271.196237][ T798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7103'. [ 2271.216289][ T798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2271.229576][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 2271.229594][ T30] audit: type=1326 audit(1766635929.720:3635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2271.464626][ T30] audit: type=1326 audit(1766635929.720:3636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2271.519966][ T798] IPVS: Scheduler module ip_vs_ not found [ 2271.529948][ T30] audit: type=1326 audit(1766635929.720:3637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2271.961986][ T30] audit: type=1326 audit(1766635929.720:3638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.437461][ T30] audit: type=1326 audit(1766635929.720:3639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.490226][ T30] audit: type=1326 audit(1766635929.730:3640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.557029][ T30] audit: type=1326 audit(1766635929.730:3641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.634167][ T30] audit: type=1326 audit(1766635929.730:3642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.684431][ T30] audit: type=1326 audit(1766635929.730:3643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2272.983053][ T30] audit: type=1326 audit(1766635929.730:3644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=796 comm="syz.4.7103" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2273.029063][ T819] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2273.353848][ T831] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.7107'. [ 2275.564864][T18988] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 2277.219682][ T879] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7115'. [ 2277.555389][T26562] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 2277.757992][T26562] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 2277.789514][T26562] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2277.838007][T26562] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2277.864599][T26562] usb 2-1: Manufacturer: syz [ 2277.885566][T26562] usb 2-1: config 0 descriptor?? [ 2277.966790][ T887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7117'. [ 2278.174923][T26562] rc_core: IR keymap rc-hauppauge not found [ 2278.180979][T26562] Registered IR keymap rc-empty [ 2278.258260][T26562] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2278.501010][T26562] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input101 [ 2278.633590][ T900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7120'. [ 2279.503624][ T913] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7123'. [ 2280.882835][ T931] fuse: Unknown parameter 'fdY0x00000000000000060xffffffffffffffff00000000000000000000' [ 2281.236167][T26562] usb 2-1: USB disconnect, device number 119 [ 2282.621628][ T956] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7129'. [ 2283.487245][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7127'. [ 2285.102938][ T987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7132'. [ 2285.328095][T18988] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2285.471018][T18988] usb 5-1: device descriptor read/64, error -71 [ 2285.724864][T18988] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2285.914889][T18988] usb 5-1: device descriptor read/64, error -71 [ 2286.025453][T18988] usb usb5-port1: attempt power cycle [ 2286.071276][ T997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7135'. [ 2286.194825][T26683] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2286.506153][T26683] usb 6-1: Using ep0 maxpacket: 32 [ 2286.513093][T26683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.533632][T26683] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 2286.553339][T26683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2286.573679][T18988] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2286.584643][T26683] usb 6-1: config 0 descriptor?? [ 2286.604627][T18988] usb 5-1: device descriptor read/8, error -71 [ 2286.700146][T26683] dvb-usb: found a 'TeVii S662' in warm state. [ 2286.713204][T26683] dw2102: su3000_power_ctrl: 1, initialized 0 [ 2286.732511][T26683] dvb-usb: bulk message failed: -22 (2/0) [ 2286.742632][T26683] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2286.763369][T26683] dvbdev: DVB: registering new adapter (TeVii S662) [ 2286.771354][T26683] usb 6-1: media controller created [ 2286.778497][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2286.796768][T26683] dw2102: i2c transfer failed. [ 2286.802045][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2286.810409][T26683] dw2102: i2c transfer failed. [ 2286.893156][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2286.902581][T26683] dw2102: i2c transfer failed. [ 2286.908556][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2287.228118][T18988] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2287.254851][T26683] dw2102: i2c transfer failed. [ 2287.277014][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2287.305541][T26683] dw2102: i2c transfer failed. [ 2287.310351][T26683] dvb-usb: bulk message failed: -22 (6/0) [ 2287.326007][T18988] usb 5-1: device descriptor read/8, error -71 [ 2287.354854][T26683] dw2102: i2c transfer failed. [ 2287.422552][T26683] dvb-usb: MAC address: 02:02:02:02:02:02 [ 2287.445698][T18988] usb usb5-port1: unable to enumerate USB device [ 2287.509666][T26683] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2287.584897][T26683] dvb-usb: bulk message failed: -22 (3/0) [ 2287.594114][T26683] dw2102: command 0x0e transfer failed. [ 2287.599996][T26683] dvb-usb: bulk message failed: -22 (3/0) [ 2287.609210][T26683] dw2102: command 0x0e transfer failed. [ 2287.754932][T18988] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 2287.947786][ T1025] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7141'. [ 2287.979473][T26683] dvb-usb: bulk message failed: -22 (3/0) [ 2287.986708][T26683] dw2102: command 0x0e transfer failed. [ 2287.992290][T26683] dvb-usb: bulk message failed: -22 (3/0) [ 2288.000474][T26683] dw2102: command 0x0e transfer failed. [ 2288.007189][T26683] dvb-usb: bulk message failed: -22 (1/0) [ 2288.013070][T26683] dw2102: command 0x51 transfer failed. [ 2288.022268][T26683] dvb-usb: bulk message failed: -22 (5/0) [ 2288.055140][T26683] dw2102: i2c probe for address 0x68 failed. [ 2288.061904][T26683] dvb-usb: bulk message failed: -22 (5/0) [ 2288.068034][T26683] dw2102: i2c probe for address 0x69 failed. [ 2288.089094][T26683] dvb-usb: bulk message failed: -22 (5/0) [ 2288.109452][T26683] dw2102: i2c probe for address 0x6a failed. [ 2288.274364][T26683] dw2102: probing for demodulator failed. Is the external power switched on? [ 2288.302467][T26683] dvb-usb: no frontend was attached by 'TeVii S662' [ 2288.317298][ T1027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7142'. [ 2288.583159][T26683] rc_core: IR keymap rc-tt-1500 not found [ 2288.654874][T26683] Registered IR keymap rc-empty [ 2288.680270][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.686784][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2288.917240][T26683] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 2288.933830][T26683] input: TeVii S662 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input102 [ 2288.948226][T26683] dvb-usb: schedule remote query interval to 250 msecs. [ 2288.959265][T26683] dw2102: su3000_power_ctrl: 0, initialized 1 [ 2288.967890][T26683] dvb-usb: TeVii S662 successfully initialized and connected. [ 2289.227006][T26683] usb 6-1: USB disconnect, device number 92 [ 2289.840935][T26683] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 2290.289096][ T1065] netlink: 'syz.6.7149': attribute type 6 has an invalid length. [ 2290.490196][ T1066] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7147'. [ 2290.735634][ T1071] Cannot find map_set index 256 as target [ 2290.983378][ T1079] netlink: 'syz.3.7153': attribute type 1 has an invalid length. [ 2292.500067][ T1101] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7160'. [ 2292.988869][ T1104] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 2293.492323][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2293.492338][ T30] audit: type=1326 audit(1766635951.980:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2293.592815][ T30] audit: type=1326 audit(1766635952.020:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2293.690358][ T30] audit: type=1326 audit(1766635952.020:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2293.917607][ T1116] IPVS: Scheduler module ip_vs_ not found [ 2294.094502][ T1121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7164'. [ 2294.113739][ T1121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7164'. [ 2294.284883][ T30] audit: type=1326 audit(1766635952.020:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2294.402068][ T30] audit: type=1326 audit(1766635952.020:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2294.543333][ T30] audit: type=1326 audit(1766635952.020:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2294.959814][ T30] audit: type=1326 audit(1766635952.020:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2295.079046][ T30] audit: type=1326 audit(1766635952.020:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2295.941934][ T30] audit: type=1326 audit(1766635952.020:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2296.236492][ T30] audit: type=1326 audit(1766635952.020:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1115 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2296.464452][ T1137] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7167'. [ 2297.243549][ T1158] IPVS: Scheduler module ip_vs_ not found [ 2298.167303][ T1175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7175'. [ 2298.177024][ T1175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7175'. [ 2298.500329][ T1156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7170'. [ 2299.410741][ T1186] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7178'. [ 2299.716951][ T1193] FAULT_INJECTION: forcing a failure. [ 2299.716951][ T1193] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2299.798068][ T1193] CPU: 1 UID: 0 PID: 1193 Comm: syz.4.7179 Tainted: G L syzkaller #0 PREEMPT(full) [ 2299.798104][ T1193] Tainted: [L]=SOFTLOCKUP [ 2299.798112][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2299.798125][ T1193] Call Trace: [ 2299.798135][ T1193] [ 2299.798145][ T1193] dump_stack_lvl+0xe8/0x150 [ 2299.798180][ T1193] should_fail_ex+0x414/0x560 [ 2299.798219][ T1193] prepare_alloc_pages+0x22b/0x650 [ 2299.798253][ T1193] __alloc_frozen_pages_noprof+0x123/0x370 [ 2299.798283][ T1193] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 2299.798318][ T1193] ? policy_nodemask+0x27c/0x720 [ 2299.798343][ T1193] ? do_raw_spin_lock+0x121/0x290 [ 2299.798372][ T1193] ? lock_acquire+0x107/0x340 [ 2299.798397][ T1193] alloc_pages_mpol+0x232/0x4a0 [ 2299.798428][ T1193] alloc_pages_noprof+0xa9/0x190 [ 2299.798456][ T1193] get_free_pages_noprof+0xf/0x80 [ 2299.798482][ T1193] __pollwait+0x263/0x430 [ 2299.798508][ T1193] ? __pfx___pollwait+0x10/0x10 [ 2299.798553][ T1193] pipe_poll+0x16f/0x470 [ 2299.798579][ T1193] ? __pfx_pipe_poll+0x10/0x10 [ 2299.798603][ T1193] do_sys_poll+0x8c9/0x1070 [ 2299.798634][ T1193] ? do_sys_poll+0x3d1/0x1070 [ 2299.798666][ T1193] ? __pfx_do_sys_poll+0x10/0x10 [ 2299.798698][ T1193] ? aa_file_perm+0x139/0x1530 [ 2299.798729][ T1193] ? __pfx___pollwait+0x10/0x10 [ 2299.798757][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798784][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798824][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798852][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798881][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798909][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798936][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798964][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.798992][ T1193] ? __pfx_pollwake+0x10/0x10 [ 2299.799054][ T1193] ? set_compat_user_sigmask+0xbb/0x240 [ 2299.799079][ T1193] ? __pfx_set_compat_user_sigmask+0x10/0x10 [ 2299.799102][ T1193] ? lock_vma_under_rcu+0x42c/0x4a0 [ 2299.799122][ T1193] ? do_sys_openat2+0x15a/0x200 [ 2299.799160][ T1193] __ia32_compat_sys_ppoll_time32+0x299/0x300 [ 2299.799196][ T1193] ? __pfx___ia32_compat_sys_ppoll_time32+0x10/0x10 [ 2299.799226][ T1193] ? __pfx_ksys_write+0x10/0x10 [ 2299.799260][ T1193] __do_fast_syscall_32+0x1dc/0x560 [ 2299.799285][ T1193] ? lockdep_hardirqs_on+0x7b/0x110 [ 2299.799306][ T1193] ? do_fast_syscall_32+0x34/0x80 [ 2299.799330][ T1193] ? irqentry_exit+0x10f/0x660 [ 2299.799357][ T1193] do_fast_syscall_32+0x34/0x80 [ 2299.799383][ T1193] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2299.799411][ T1193] RIP: 0023:0xf70cd539 [ 2299.799430][ T1193] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2299.799450][ T1193] RSP: 002b:00000000f547b55c EFLAGS: 00000206 ORIG_RAX: 0000000000000135 [ 2299.799474][ T1193] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 00000000000000dc [ 2299.799491][ T1193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2299.799504][ T1193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2299.799527][ T1193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2299.799541][ T1193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2299.799573][ T1193] [ 2299.801022][ T1195] FAULT_INJECTION: forcing a failure. [ 2299.801022][ T1195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2300.264918][ T1195] CPU: 0 UID: 0 PID: 1195 Comm: syz.6.7181 Tainted: G L syzkaller #0 PREEMPT(full) [ 2300.264944][ T1195] Tainted: [L]=SOFTLOCKUP [ 2300.264950][ T1195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2300.264960][ T1195] Call Trace: [ 2300.264967][ T1195] [ 2300.264975][ T1195] dump_stack_lvl+0xe8/0x150 [ 2300.265000][ T1195] should_fail_ex+0x414/0x560 [ 2300.265029][ T1195] _copy_to_user+0x31/0xb0 [ 2300.265051][ T1195] simple_read_from_buffer+0xe1/0x170 [ 2300.265074][ T1195] proc_fail_nth_read+0x1b3/0x220 [ 2300.265094][ T1195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2300.265113][ T1195] ? rw_verify_area+0x2a6/0x4d0 [ 2300.265138][ T1195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2300.265156][ T1195] vfs_read+0x200/0xa30 [ 2300.265170][ T1195] ? fdget_pos+0x247/0x320 [ 2300.265194][ T1195] ? __pfx___mutex_lock+0x10/0x10 [ 2300.265212][ T1195] ? __pfx_vfs_read+0x10/0x10 [ 2300.265228][ T1195] ? __fget_files+0x2a/0x420 [ 2300.265251][ T1195] ? __fget_files+0x3a0/0x420 [ 2300.265270][ T1195] ? __fget_files+0x2a/0x420 [ 2300.265296][ T1195] ksys_read+0x145/0x250 [ 2300.265313][ T1195] ? __pfx_ksys_read+0x10/0x10 [ 2300.265328][ T1195] ? rcu_is_watching+0x15/0xb0 [ 2300.265354][ T1195] __do_fast_syscall_32+0x1dc/0x560 [ 2300.265373][ T1195] ? lockdep_hardirqs_on+0x7b/0x110 [ 2300.265387][ T1195] ? do_fast_syscall_32+0x34/0x80 [ 2300.265404][ T1195] ? irqentry_exit+0x10f/0x660 [ 2300.265423][ T1195] do_fast_syscall_32+0x34/0x80 [ 2300.265441][ T1195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2300.265460][ T1195] RIP: 0023:0xf700d539 [ 2300.265474][ T1195] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2300.265487][ T1195] RSP: 002b:00000000f53fd590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 2300.265504][ T1195] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53fd620 [ 2300.265515][ T1195] RDX: 000000000000000f RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 2300.265525][ T1195] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 2300.265534][ T1195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2300.265543][ T1195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2300.265565][ T1195] [ 2300.702808][ T1203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7184'. [ 2300.785467][ T1203] kAFS: unparsable volume name [ 2301.647033][ T1218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7186'. [ 2301.659882][ T1218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7186'. [ 2301.765677][ T1204] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2301.774015][ T1204] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2301.811062][ T1204] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2303.845707][ T1221] Bluetooth: hci3: command 0x0c1a tx timeout [ 2304.043141][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 2304.043168][ T30] audit: type=1800 audit(1766635962.530:3732): pid=1247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7192" name="nullb0" dev="devtmpfs" ino=3987 res=0 errno=0 [ 2304.565901][ T1249] netlink: 80 bytes leftover after parsing attributes in process `syz.5.7193'. [ 2304.688766][ T1251] FAULT_INJECTION: forcing a failure. [ 2304.688766][ T1251] name failslab, interval 1, probability 0, space 0, times 0 [ 2304.754938][ T1251] CPU: 0 UID: 0 PID: 1251 Comm: syz.3.7194 Tainted: G L syzkaller #0 PREEMPT(full) [ 2304.754973][ T1251] Tainted: [L]=SOFTLOCKUP [ 2304.754982][ T1251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2304.754996][ T1251] Call Trace: [ 2304.755005][ T1251] [ 2304.755016][ T1251] dump_stack_lvl+0xe8/0x150 [ 2304.755048][ T1251] should_fail_ex+0x414/0x560 [ 2304.755086][ T1251] should_failslab+0xa8/0x100 [ 2304.755113][ T1251] __kmalloc_node_track_caller_noprof+0xe2/0x820 [ 2304.755138][ T1251] ? ip6_setup_cork+0x6c1/0x10e0 [ 2304.755162][ T1251] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 2304.755182][ T1251] ? xfrm_lookup_with_ifid+0x152f/0x1a70 [ 2304.755219][ T1251] kmemdup_noprof+0x2b/0x70 [ 2304.755246][ T1251] ip6_setup_cork+0x6c1/0x10e0 [ 2304.755283][ T1251] ip6_append_data+0x237/0x380 [ 2304.755319][ T1251] ? __pfx_raw6_getfrag+0x10/0x10 [ 2304.755355][ T1251] rawv6_sendmsg+0x1286/0x1830 [ 2304.755405][ T1251] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 2304.755462][ T1251] ? __pfx_aa_sk_perm+0x10/0x10 [ 2304.755491][ T1251] ? sock_rps_record_flow+0x19/0x410 [ 2304.755523][ T1251] ? inet_sendmsg+0x2f4/0x370 [ 2304.755550][ T1251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2304.755575][ T1251] __sock_sendmsg+0x19c/0x270 [ 2304.755609][ T1251] sock_write_iter+0x279/0x360 [ 2304.755643][ T1251] ? __pfx_sock_write_iter+0x10/0x10 [ 2304.755684][ T1251] ? bpf_lsm_file_permission+0x9/0x20 [ 2304.755707][ T1251] ? security_file_permission+0x75/0x290 [ 2304.755737][ T1251] vfs_write+0x5c9/0xb30 [ 2304.755764][ T1251] ? __pfx_sock_write_iter+0x10/0x10 [ 2304.755794][ T1251] ? __pfx_vfs_write+0x10/0x10 [ 2304.755826][ T1251] ? __fget_files+0x2a/0x420 [ 2304.755863][ T1251] ksys_write+0x145/0x250 [ 2304.755887][ T1251] ? __pfx_ksys_write+0x10/0x10 [ 2304.755920][ T1251] __do_fast_syscall_32+0x1dc/0x560 [ 2304.755945][ T1251] ? lockdep_hardirqs_on+0x7b/0x110 [ 2304.755965][ T1251] ? do_fast_syscall_32+0x34/0x80 [ 2304.755989][ T1251] ? irqentry_exit+0x10f/0x660 [ 2304.756015][ T1251] do_fast_syscall_32+0x34/0x80 [ 2304.756040][ T1251] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2304.756066][ T1251] RIP: 0023:0xf7fe7539 [ 2304.756085][ T1251] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2304.756105][ T1251] RSP: 002b:00000000f54d655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2304.756127][ T1251] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 2304.756143][ T1251] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 2304.756156][ T1251] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2304.756169][ T1251] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2304.756182][ T1251] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2304.756214][ T1251] [ 2305.336517][ T1264] FAULT_INJECTION: forcing a failure. [ 2305.336517][ T1264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2305.405363][ T1264] CPU: 0 UID: 0 PID: 1264 Comm: syz.3.7199 Tainted: G L syzkaller #0 PREEMPT(full) [ 2305.405399][ T1264] Tainted: [L]=SOFTLOCKUP [ 2305.405408][ T1264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2305.405422][ T1264] Call Trace: [ 2305.405432][ T1264] [ 2305.405442][ T1264] dump_stack_lvl+0xe8/0x150 [ 2305.405477][ T1264] should_fail_ex+0x414/0x560 [ 2305.405518][ T1264] _copy_from_user+0x2d/0xb0 [ 2305.405546][ T1264] get_compat_msghdr+0xad/0x4a0 [ 2305.405582][ T1264] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2305.405626][ T1264] ___sys_sendmsg+0x193/0x2a0 [ 2305.405656][ T1264] ? __pfx____sys_sendmsg+0x10/0x10 [ 2305.405689][ T1264] ? preempt_schedule_thunk+0x16/0x30 [ 2305.405740][ T1264] ? __fget_files+0x2a/0x420 [ 2305.405767][ T1264] ? __fget_files+0x3a0/0x420 [ 2305.405806][ T1264] __sys_sendmsg+0x164/0x220 [ 2305.405836][ T1264] ? __pfx___sys_sendmsg+0x10/0x10 [ 2305.405878][ T1264] ? __pfx_ksys_write+0x10/0x10 [ 2305.405913][ T1264] __do_fast_syscall_32+0x1dc/0x560 [ 2305.405943][ T1264] ? lockdep_hardirqs_on+0x7b/0x110 [ 2305.405965][ T1264] ? do_fast_syscall_32+0x34/0x80 [ 2305.405989][ T1264] ? irqentry_exit+0x10f/0x660 [ 2305.406011][ T1264] ? rcu_is_watching+0x15/0xb0 [ 2305.406042][ T1264] do_fast_syscall_32+0x34/0x80 [ 2305.406068][ T1264] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2305.406101][ T1264] RIP: 0023:0xf7fe7539 [ 2305.406120][ T1264] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2305.406140][ T1264] RSP: 002b:00000000f549455c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2305.406164][ T1264] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000200 [ 2305.406181][ T1264] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2305.406194][ T1264] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2305.406208][ T1264] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2305.406222][ T1264] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2305.406259][ T1264] [ 2305.751269][ T1269] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7198'. [ 2305.906931][ T1269] tipc: Started in network mode [ 2305.911839][ T1269] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 2305.925043][ T1269] tipc: Enabling of bearer rejected, failed to enable media [ 2305.933390][ T1221] Bluetooth: hci3: command 0x0c1a tx timeout [ 2305.966568][ T1275] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7200'. [ 2306.353579][ T1280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7201'. [ 2306.666250][ T1279] hub 9-0:1.0: USB hub found [ 2306.679144][ T1279] hub 9-0:1.0: 1 port detected [ 2306.787053][ T1287] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7203'. [ 2306.931947][ T1288] vlan3: entered allmulticast mode [ 2306.937841][ T1290] FAULT_INJECTION: forcing a failure. [ 2306.937841][ T1290] name failslab, interval 1, probability 0, space 0, times 0 [ 2306.953334][ T1288] bridge0: entered allmulticast mode [ 2306.959193][ T1288] bridge1: port 1(vlan3) entered blocking state [ 2306.971030][ T1288] bridge1: port 1(vlan3) entered disabled state [ 2306.976839][ T1290] CPU: 1 UID: 0 PID: 1290 Comm: syz.6.7204 Tainted: G L syzkaller #0 PREEMPT(full) [ 2306.976931][ T1290] Tainted: [L]=SOFTLOCKUP [ 2306.976953][ T1290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2306.976987][ T1290] Call Trace: [ 2306.977015][ T1290] [ 2306.977038][ T1290] dump_stack_lvl+0xe8/0x150 [ 2306.977117][ T1290] should_fail_ex+0x414/0x560 [ 2306.977219][ T1290] should_failslab+0xa8/0x100 [ 2306.977311][ T1290] kmem_cache_alloc_noprof+0x88/0x710 [ 2306.977345][ T1290] ? __netlink_lookup+0xbd/0x8a0 [ 2306.977375][ T1290] ? skb_clone+0x212/0x3a0 [ 2306.977406][ T1290] skb_clone+0x212/0x3a0 [ 2306.977442][ T1290] __netlink_deliver_tap+0x404/0x850 [ 2306.977527][ T1290] ? netlink_deliver_tap+0x2e/0x1b0 [ 2306.977632][ T1290] netlink_deliver_tap+0x19c/0x1b0 [ 2306.977715][ T1290] netlink_unicast+0x7fa/0x9e0 [ 2306.977813][ T1290] ? __pfx_netlink_unicast+0x10/0x10 [ 2306.977877][ T1290] ? __alloc_skb+0x198/0x3a0 [ 2306.977938][ T1290] ? netlink_sendmsg+0x642/0xb30 [ 2306.978011][ T1290] ? skb_put+0x11b/0x210 [ 2306.978078][ T1290] netlink_sendmsg+0x805/0xb30 [ 2306.978172][ T1290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.978259][ T1290] ? __import_iovec+0x5d4/0x7f0 [ 2306.978323][ T1290] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2306.978397][ T1290] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2306.978451][ T1290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2306.978531][ T1290] __sock_sendmsg+0x21c/0x270 [ 2306.978617][ T1290] ____sys_sendmsg+0x505/0x820 [ 2306.978700][ T1290] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2306.978790][ T1290] ? kstrtouint+0x6e/0xe0 [ 2306.978904][ T1290] ___sys_sendmsg+0x21f/0x2a0 [ 2306.978997][ T1290] ? __pfx____sys_sendmsg+0x10/0x10 [ 2306.979082][ T1290] ? get_pid_task+0x20/0x1f0 [ 2306.979152][ T1290] ? get_pid_task+0x20/0x1f0 [ 2306.979217][ T1290] ? get_pid_task+0x20/0x1f0 [ 2306.979371][ T1290] ? __fget_files+0x2a/0x420 [ 2306.979437][ T1290] ? __fget_files+0x3a0/0x420 [ 2306.979540][ T1290] __sys_sendmsg+0x164/0x220 [ 2306.979614][ T1290] ? __pfx___sys_sendmsg+0x10/0x10 [ 2306.979714][ T1290] ? __pfx_ksys_write+0x10/0x10 [ 2306.979796][ T1290] __do_fast_syscall_32+0x1dc/0x560 [ 2306.979869][ T1290] ? lockdep_hardirqs_on+0x7b/0x110 [ 2306.979921][ T1290] ? do_fast_syscall_32+0x34/0x80 [ 2306.979983][ T1290] ? irqentry_exit+0x10f/0x660 [ 2306.980051][ T1290] do_fast_syscall_32+0x34/0x80 [ 2306.980118][ T1290] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2306.980190][ T1290] RIP: 0023:0xf700d539 [ 2306.980234][ T1290] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2306.980278][ T1290] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2306.980345][ T1290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 2306.980401][ T1290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2306.980447][ T1290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2306.980482][ T1290] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2306.980514][ T1290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2306.980599][ T1290] [ 2307.399904][ T1288] vlan3: entered promiscuous mode [ 2308.055666][ T1221] Bluetooth: hci3: command 0x0c1a tx timeout [ 2308.673511][T29179] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 2308.854812][T29179] usb 7-1: Using ep0 maxpacket: 16 [ 2308.877504][T29179] usb 7-1: config 0 has an invalid interface number: 9 but max is 0 [ 2308.901905][T29179] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2308.937090][T29179] usb 7-1: config 0 has no interface number 0 [ 2308.968993][T29179] usb 7-1: config 0 interface 9 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 2309.027707][T29179] usb 7-1: New USB device found, idVendor=19d2, idProduct=ffeb, bcdDevice=51.25 [ 2309.054796][T29179] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2309.121960][T29179] usb 7-1: Product: syz [ 2309.144433][T29179] usb 7-1: Manufacturer: syz [ 2309.154791][T29179] usb 7-1: SerialNumber: syz [ 2309.167076][T29179] usb 7-1: config 0 descriptor?? [ 2309.186709][T29179] option 7-1:0.9: GSM modem (1-port) converter detected [ 2309.696945][ T1325] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7211'. [ 2309.757277][ T1326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7211'. [ 2311.115324][ T1344] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7215'. [ 2311.146163][T29179] usb 7-1: USB disconnect, device number 115 [ 2311.154210][T29179] option 7-1:0.9: device disconnected [ 2311.977912][ T1362] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7219'. [ 2312.467943][ T1360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7220'. [ 2312.693319][ T1377] netlink: 'syz.4.7224': attribute type 10 has an invalid length. [ 2312.735033][ T1377] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7224'. [ 2313.132801][ T1379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7223'. [ 2313.144258][ T1379] tipc: Started in network mode [ 2313.155238][ T1379] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711 [ 2313.245016][ T1379] tipc: Enabling of bearer rejected, failed to enable media [ 2313.254282][ T1377] ipvlan1: entered promiscuous mode [ 2313.273620][ T1377] ipvlan1: entered allmulticast mode [ 2313.279403][ T1377] veth0_vlan: entered allmulticast mode [ 2313.331641][ T1377] bridge0: port 4(ipvlan1) entered blocking state [ 2313.385021][ T1377] bridge0: port 4(ipvlan1) entered disabled state [ 2313.421114][ T1377] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2313.567617][ T30] audit: type=1326 audit(1766635972.040:3733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2313.667331][ T30] audit: type=1326 audit(1766635972.040:3734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2313.696882][ T1383] IPVS: Scheduler module ip_vs_ not found [ 2313.759375][ T30] audit: type=1326 audit(1766635972.040:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2313.824843][ T30] audit: type=1326 audit(1766635972.040:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2313.918240][ T30] audit: type=1326 audit(1766635972.040:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2313.947574][ T1391] FAULT_INJECTION: forcing a failure. [ 2313.947574][ T1391] name failslab, interval 1, probability 0, space 0, times 0 [ 2314.017619][ T1391] CPU: 0 UID: 0 PID: 1391 Comm: syz.5.7228 Tainted: G L syzkaller #0 PREEMPT(full) [ 2314.017655][ T1391] Tainted: [L]=SOFTLOCKUP [ 2314.017664][ T1391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2314.017679][ T1391] Call Trace: [ 2314.017689][ T1391] [ 2314.017698][ T1391] dump_stack_lvl+0xe8/0x150 [ 2314.017732][ T1391] should_fail_ex+0x414/0x560 [ 2314.017770][ T1391] should_failslab+0xa8/0x100 [ 2314.017799][ T1391] kmem_cache_alloc_noprof+0x88/0x710 [ 2314.017834][ T1391] ? security_inode_alloc+0x39/0x330 [ 2314.017871][ T1391] security_inode_alloc+0x39/0x330 [ 2314.017903][ T1391] inode_init_always_gfp+0x9ed/0xdc0 [ 2314.017937][ T1391] ? __pfx_sock_alloc_inode+0x10/0x10 [ 2314.017968][ T1391] alloc_inode+0x82/0x1b0 [ 2314.017996][ T1391] __sock_create+0x12d/0x9d0 [ 2314.018042][ T1391] mptcp_subflow_create_socket+0xf0/0x800 [ 2314.018070][ T1391] ? tcp_assign_congestion_control+0x51c/0x780 [ 2314.018102][ T1391] ? percpu_counter_add_batch+0xea/0x1e0 [ 2314.018136][ T1391] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 2314.018169][ T1391] ? do_raw_spin_lock+0x121/0x290 [ 2314.018198][ T1391] ? lock_sock_nested+0x6a/0x100 [ 2314.018234][ T1391] __mptcp_nmpc_sk+0x148/0x760 [ 2314.018265][ T1391] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 2314.018297][ T1391] ? __local_bh_enable_ip+0xd0/0x130 [ 2314.018326][ T1391] mptcp_pm_nl_add_addr_doit+0xacb/0x1460 [ 2314.018351][ T1391] ? __nla_validate_parse+0x2400/0x2d40 [ 2314.018387][ T1391] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 2314.018425][ T1391] ? __pfx___nla_validate_parse+0x10/0x10 [ 2314.018495][ T1391] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 2314.018528][ T1391] genl_family_rcv_msg_doit+0x215/0x300 [ 2314.018559][ T1391] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2314.018596][ T1391] ? bpf_lsm_capable+0x9/0x20 [ 2314.018623][ T1391] ? security_capable+0x7e/0x2e0 [ 2314.018656][ T1391] genl_rcv_msg+0x60e/0x790 [ 2314.018685][ T1391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2314.018706][ T1391] ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10 [ 2314.018731][ T1391] ? __asan_memcpy+0x40/0x70 [ 2314.018750][ T1391] ? __pfx_ref_tracker_free+0x10/0x10 [ 2314.018771][ T1391] ? __skb_clone+0x63/0x7a0 [ 2314.018804][ T1391] netlink_rcv_skb+0x208/0x470 [ 2314.018832][ T1391] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2314.018854][ T1391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2314.018879][ T1391] ? genl_rcv+0x19/0x40 [ 2314.018929][ T1391] ? down_read+0x274/0x2e0 [ 2314.018952][ T1391] ? genl_rcv+0xd/0x40 [ 2314.018985][ T1391] genl_rcv+0x28/0x40 [ 2314.019016][ T1391] netlink_unicast+0x82f/0x9e0 [ 2314.019051][ T1391] ? __pfx_netlink_unicast+0x10/0x10 [ 2314.019076][ T1391] ? __alloc_skb+0x198/0x3a0 [ 2314.019100][ T1391] ? netlink_sendmsg+0x642/0xb30 [ 2314.019127][ T1391] ? skb_put+0x11b/0x210 [ 2314.019157][ T1391] netlink_sendmsg+0x805/0xb30 [ 2314.019197][ T1391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2314.019230][ T1391] ? __import_iovec+0x5d4/0x7f0 [ 2314.019255][ T1391] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2314.019286][ T1391] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2314.019307][ T1391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2314.019337][ T1391] __sock_sendmsg+0x21c/0x270 [ 2314.019371][ T1391] ____sys_sendmsg+0x505/0x820 [ 2314.019422][ T1391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2314.019453][ T1391] ? kstrtouint+0x6e/0xe0 [ 2314.019493][ T1391] ___sys_sendmsg+0x21f/0x2a0 [ 2314.019521][ T1391] ? __pfx____sys_sendmsg+0x10/0x10 [ 2314.019545][ T1391] ? get_pid_task+0x20/0x1f0 [ 2314.019571][ T1391] ? get_pid_task+0x20/0x1f0 [ 2314.019594][ T1391] ? get_pid_task+0x20/0x1f0 [ 2314.019654][ T1391] ? __fget_files+0x2a/0x420 [ 2314.019681][ T1391] ? __fget_files+0x3a0/0x420 [ 2314.019718][ T1391] __sys_sendmsg+0x164/0x220 [ 2314.019747][ T1391] ? __pfx___sys_sendmsg+0x10/0x10 [ 2314.019784][ T1391] ? __pfx_ksys_write+0x10/0x10 [ 2314.019818][ T1391] __do_fast_syscall_32+0x1dc/0x560 [ 2314.019843][ T1391] ? lockdep_hardirqs_on+0x7b/0x110 [ 2314.019864][ T1391] ? do_fast_syscall_32+0x34/0x80 [ 2314.019888][ T1391] ? irqentry_exit+0x10f/0x660 [ 2314.019915][ T1391] do_fast_syscall_32+0x34/0x80 [ 2314.019939][ T1391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2314.019965][ T1391] RIP: 0023:0xf7f11539 [ 2314.019984][ T1391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2314.020004][ T1391] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2314.020027][ T1391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 2314.020043][ T1391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2314.020057][ T1391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2314.020069][ T1391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2314.020082][ T1391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2314.020116][ T1391] [ 2314.023663][ T30] audit: type=1326 audit(1766635972.040:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2314.525585][ T30] audit: type=1326 audit(1766635972.040:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2314.575437][ T30] audit: type=1326 audit(1766635972.040:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2314.576118][ T1391] socket: no more sockets [ 2314.606470][ T30] audit: type=1326 audit(1766635972.040:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2314.680692][ T30] audit: type=1326 audit(1766635972.040:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1382 comm="syz.6.7225" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf700d539 code=0x7ffc0000 [ 2314.850853][ T1401] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 2314.879366][ T1400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7231'. [ 2315.220636][ T1406] lo: entered promiscuous mode [ 2315.237278][ T1406] tunl0: entered promiscuous mode [ 2315.242932][ T1406] gre0: entered promiscuous mode [ 2315.283433][ T1406] gretap0: entered promiscuous mode [ 2315.355857][ T1406] erspan0: entered promiscuous mode [ 2315.372732][ T1406] ip_vti0: entered promiscuous mode [ 2315.385064][ T1406] ip6_vti0: entered promiscuous mode [ 2315.420947][ T1406] sit0: entered promiscuous mode [ 2315.501901][ T1406] ip6tnl0: entered promiscuous mode [ 2315.711720][ T1406] ip6gre0: entered promiscuous mode [ 2315.798601][ T1406] syz_tun: entered promiscuous mode [ 2315.825582][ T1406] ip6gretap0: entered promiscuous mode [ 2315.879608][ T1406] vcan0: entered promiscuous mode [ 2315.924629][ T1406] bond0: entered promiscuous mode [ 2315.989625][ T1406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2316.021880][ T1406] dummy0: entered promiscuous mode [ 2316.076732][ T1406] nlmon0: entered promiscuous mode [ 2316.111543][ T1406] caif0: entered promiscuous mode [ 2316.119206][ T1406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2316.160660][ T1413] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7235'. [ 2316.169704][ T1423] FAULT_INJECTION: forcing a failure. [ 2316.169704][ T1423] name failslab, interval 1, probability 0, space 0, times 0 [ 2316.169743][ T1423] CPU: 1 UID: 0 PID: 1423 Comm: syz.6.7237 Tainted: G L syzkaller #0 PREEMPT(full) [ 2316.169773][ T1423] Tainted: [L]=SOFTLOCKUP [ 2316.169782][ T1423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2316.169796][ T1423] Call Trace: [ 2316.169806][ T1423] [ 2316.169814][ T1423] dump_stack_lvl+0xe8/0x150 [ 2316.169848][ T1423] should_fail_ex+0x414/0x560 [ 2316.169887][ T1423] should_failslab+0xa8/0x100 [ 2316.169914][ T1423] kmem_cache_alloc_noprof+0x88/0x710 [ 2316.169948][ T1423] ? __netlink_lookup+0xbd/0x8a0 [ 2316.169977][ T1423] ? skb_clone+0x212/0x3a0 [ 2316.170010][ T1423] skb_clone+0x212/0x3a0 [ 2316.170099][ T1423] __netlink_deliver_tap+0x404/0x850 [ 2316.170235][ T1423] ? netlink_deliver_tap+0x2e/0x1b0 [ 2316.170310][ T1423] netlink_deliver_tap+0x19c/0x1b0 [ 2316.170385][ T1423] netlink_unicast+0x7fa/0x9e0 [ 2316.170489][ T1423] ? __pfx_netlink_unicast+0x10/0x10 [ 2316.170552][ T1423] ? __alloc_skb+0x198/0x3a0 [ 2316.170629][ T1423] ? netlink_sendmsg+0x642/0xb30 [ 2316.170694][ T1423] ? skb_put+0x11b/0x210 [ 2316.170768][ T1423] netlink_sendmsg+0x805/0xb30 [ 2316.170864][ T1423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.170942][ T1423] ? __import_iovec+0x5d4/0x7f0 [ 2316.170998][ T1423] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2316.171081][ T1423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2316.171135][ T1423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2316.171220][ T1423] __sock_sendmsg+0x21c/0x270 [ 2316.171319][ T1423] ____sys_sendmsg+0x505/0x820 [ 2316.171412][ T1423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2316.171489][ T1423] ? kstrtouint+0x6e/0xe0 [ 2316.171626][ T1423] ___sys_sendmsg+0x21f/0x2a0 [ 2316.171697][ T1423] ? __pfx____sys_sendmsg+0x10/0x10 [ 2316.171768][ T1423] ? get_pid_task+0x20/0x1f0 [ 2316.171841][ T1423] ? get_pid_task+0x20/0x1f0 [ 2316.171906][ T1423] ? get_pid_task+0x20/0x1f0 [ 2316.172055][ T1423] ? __fget_files+0x2a/0x420 [ 2316.172120][ T1423] ? __fget_files+0x3a0/0x420 [ 2316.172230][ T1423] __sys_sendmsg+0x164/0x220 [ 2316.172303][ T1423] ? __pfx___sys_sendmsg+0x10/0x10 [ 2316.172396][ T1423] ? __pfx_ksys_write+0x10/0x10 [ 2316.172481][ T1423] __do_fast_syscall_32+0x1dc/0x560 [ 2316.172545][ T1423] ? lockdep_hardirqs_on+0x7b/0x110 [ 2316.172598][ T1423] ? do_fast_syscall_32+0x34/0x80 [ 2316.172662][ T1423] ? irqentry_exit+0x10f/0x660 [ 2316.172727][ T1423] do_fast_syscall_32+0x34/0x80 [ 2316.172806][ T1423] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2316.172871][ T1423] RIP: 0023:0xf700d539 [ 2316.172946][ T1423] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2316.173006][ T1423] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2316.173076][ T1423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 2316.173119][ T1423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2316.173152][ T1423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2316.173195][ T1423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2316.173229][ T1423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2316.173313][ T1423] [ 2316.495549][T28988] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 2316.673285][T28988] usb 5-1: not running at top speed; connect to a high speed hub [ 2316.682919][T28988] usb 5-1: config 0 has an invalid interface number: 101 but max is 0 [ 2316.691272][T28988] usb 5-1: config 0 has an invalid interface descriptor of length 6, skipping [ 2316.713835][T28988] usb 5-1: config 0 has no interface number 0 [ 2316.735624][T28988] usb 5-1: config 0 interface 101 altsetting 255 endpoint 0x3 has invalid maxpacket 49938, setting to 64 [ 2316.772996][T28988] usb 5-1: config 0 interface 101 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 2316.817828][T28988] usb 5-1: config 0 interface 101 has no altsetting 0 [ 2316.835775][T28988] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=48.d8 [ 2316.854903][T28988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2316.873672][T28988] usb 5-1: Product: syz [ 2316.889375][T28988] usb 5-1: Manufacturer: syz [ 2316.894003][T28988] usb 5-1: SerialNumber: syz [ 2316.924053][T28988] usb 5-1: config 0 descriptor?? [ 2316.935304][T20041] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 2316.944094][ T1419] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2317.074875][T20041] usb 7-1: device descriptor read/64, error -71 [ 2317.127099][ T1429] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7239'. [ 2317.246518][T28988] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 2317.289413][T28988] dvb-usb: bulk message failed: -22 (3/0) [ 2317.315571][T20041] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 2317.407858][T28988] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 2317.454814][T20041] usb 7-1: device descriptor read/64, error -71 [ 2317.469002][T28988] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 2317.482126][T28988] usb 5-1: media controller created [ 2317.499185][T28988] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2317.538214][T28988] dvb-usb: bulk message failed: -22 (6/0) [ 2317.550705][T28988] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 2317.570255][T28988] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input103 [ 2317.582009][T20041] usb usb7-port1: attempt power cycle [ 2317.592331][T28988] dvb-usb: schedule remote query interval to 150 msecs. [ 2317.606302][T28988] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 2317.629856][T28988] usb 5-1: USB disconnect, device number 19 [ 2317.661302][T28988] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 2317.945045][T20041] usb 7-1: new high-speed USB device number 118 using dummy_hcd [ 2317.976971][T20041] usb 7-1: device descriptor read/8, error -71 [ 2318.404808][T20041] usb 7-1: new high-speed USB device number 119 using dummy_hcd [ 2318.446736][T20041] usb 7-1: device descriptor read/8, error -71 [ 2318.575016][T20041] usb usb7-port1: unable to enumerate USB device [ 2318.980054][ T1457] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7247'. [ 2318.991902][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2319.017494][ T1457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2319.026403][ T1457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2319.349824][ T1467] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7248'. [ 2319.400918][ T1471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7248'. [ 2319.551740][ T1475] ipvlan2: entered promiscuous mode [ 2319.558547][ T1475] bridge0: port 4(ipvlan2) entered blocking state [ 2319.566351][ T1475] bridge0: port 4(ipvlan2) entered disabled state [ 2319.583285][ T1475] ipvlan2: entered allmulticast mode [ 2319.593227][ T1475] bridge0: entered allmulticast mode [ 2319.647562][ T1475] ipvlan2: left allmulticast mode [ 2319.823541][ T1475] bridge0: left allmulticast mode [ 2320.763287][ T1498] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.7256'. [ 2320.832297][ T1497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7257'. [ 2320.846740][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7257'. [ 2320.922614][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2320.922630][ T30] audit: type=1800 audit(1766635979.410:3767): pid=1475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7251" name="nullb0" dev="devtmpfs" ino=3987 res=0 errno=0 [ 2322.272274][ T1517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7261'. [ 2322.282549][ T1517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7261'. [ 2323.164443][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7266'. [ 2323.179285][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7266'. [ 2323.189483][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7266'. [ 2323.200607][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7266'. [ 2323.518072][ T1546] MPI: mpi too large (107144 bits) [ 2323.781355][ T1546] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 2323.947136][ T30] audit: type=1326 audit(1766635982.440:3768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2323.987695][ T30] audit: type=1326 audit(1766635982.440:3769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.016957][ T30] audit: type=1326 audit(1766635982.460:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.095589][T28988] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2324.147267][ T30] audit: type=1326 audit(1766635982.460:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.170885][ T30] audit: type=1326 audit(1766635982.460:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.244607][ T1551] IPVS: Scheduler module ip_vs_ not found [ 2324.268967][ T30] audit: type=1326 audit(1766635982.460:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.291425][T28988] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2324.325810][T28988] usb 6-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 2324.368349][T28988] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2324.375061][ T30] audit: type=1326 audit(1766635982.460:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.435181][ T30] audit: type=1326 audit(1766635982.460:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.481370][T28988] usb 6-1: config 0 descriptor?? [ 2324.545128][ T30] audit: type=1326 audit(1766635982.460:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1548 comm="syz.3.7271" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2324.741516][ T1550] FAULT_INJECTION: forcing a failure. [ 2324.741516][ T1550] name failslab, interval 1, probability 0, space 0, times 0 [ 2324.785853][ T1558] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7274'. [ 2324.817538][ T1550] CPU: 0 UID: 0 PID: 1550 Comm: syz.5.7272 Tainted: G L syzkaller #0 PREEMPT(full) [ 2324.817576][ T1550] Tainted: [L]=SOFTLOCKUP [ 2324.817585][ T1550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2324.817598][ T1550] Call Trace: [ 2324.817607][ T1550] [ 2324.817618][ T1550] dump_stack_lvl+0xe8/0x150 [ 2324.817650][ T1550] should_fail_ex+0x414/0x560 [ 2324.817686][ T1550] should_failslab+0xa8/0x100 [ 2324.817712][ T1550] __kmalloc_cache_noprof+0x84/0x700 [ 2324.817732][ T1550] ? lockdep_hardirqs_on+0x7b/0x110 [ 2324.817751][ T1550] ? __request_module+0x2a5/0x5d0 [ 2324.817777][ T1550] __request_module+0x2a5/0x5d0 [ 2324.817802][ T1550] ? rtnl_link_ops_get+0x23/0x250 [ 2324.817830][ T1550] ? __pfx___request_module+0x10/0x10 [ 2324.817865][ T1550] ? rtnl_link_ops_get+0x23/0x250 [ 2324.817890][ T1550] ? rtnl_link_ops_get+0x23/0x250 [ 2324.817916][ T1550] ? rtnl_link_ops_get+0x215/0x250 [ 2324.817945][ T1550] rtnl_newlink+0x65d/0x1c90 [ 2324.817970][ T1550] ? kasan_save_track+0x3e/0x80 [ 2324.817991][ T1550] ? kasan_save_free_info+0x46/0x50 [ 2324.818020][ T1550] ? __kasan_slab_free+0x5c/0x80 [ 2324.818043][ T1550] ? nlmon_xmit+0xb0/0x100 [ 2324.818071][ T1550] ? netlink_deliver_tap+0x19c/0x1b0 [ 2324.818098][ T1550] ? netlink_unicast+0x7fa/0x9e0 [ 2324.818121][ T1550] ? netlink_sendmsg+0x805/0xb30 [ 2324.818150][ T1550] ? __pfx_rtnl_newlink+0x10/0x10 [ 2324.818172][ T1550] ? __do_fast_syscall_32+0x1dc/0x560 [ 2324.818196][ T1550] ? do_fast_syscall_32+0x34/0x80 [ 2324.818229][ T1550] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2324.818291][ T1550] ? kasan_quarantine_put+0xbb/0x1f0 [ 2324.818314][ T1550] ? lockdep_hardirqs_on+0x7b/0x110 [ 2324.818341][ T1550] ? kmem_cache_free+0x197/0x620 [ 2324.818363][ T1550] ? nlmon_xmit+0xb0/0x100 [ 2324.818401][ T1550] ? __lock_acquire+0x6b6/0x2cf0 [ 2324.818434][ T1550] ? __local_bh_enable_ip+0xd0/0x130 [ 2324.818458][ T1550] ? lockdep_hardirqs_on+0x7b/0x110 [ 2324.818480][ T1550] ? __dev_queue_xmit+0x289/0x3140 [ 2324.818508][ T1550] ? __local_bh_enable_ip+0xd0/0x130 [ 2324.818529][ T1550] ? __dev_queue_xmit+0x289/0x3140 [ 2324.818566][ T1550] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2324.818603][ T1550] ? __pfx_rtnl_newlink+0x10/0x10 [ 2324.818627][ T1550] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2324.818655][ T1550] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2324.818678][ T1550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2324.818700][ T1550] ? ref_tracker_free+0x63a/0x7d0 [ 2324.818723][ T1550] ? __asan_memcpy+0x40/0x70 [ 2324.818743][ T1550] ? __pfx_ref_tracker_free+0x10/0x10 [ 2324.818763][ T1550] ? __skb_clone+0x63/0x7a0 [ 2324.818801][ T1550] netlink_rcv_skb+0x208/0x470 [ 2324.818830][ T1550] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2324.818855][ T1550] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2324.818894][ T1550] ? netlink_deliver_tap+0x2e/0x1b0 [ 2324.818932][ T1550] netlink_unicast+0x82f/0x9e0 [ 2324.818966][ T1550] ? __pfx_netlink_unicast+0x10/0x10 [ 2324.818991][ T1550] ? __alloc_skb+0x198/0x3a0 [ 2324.819015][ T1550] ? netlink_sendmsg+0x642/0xb30 [ 2324.819042][ T1550] ? skb_put+0x11b/0x210 [ 2324.819070][ T1550] netlink_sendmsg+0x805/0xb30 [ 2324.819109][ T1550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2324.819141][ T1550] ? __import_iovec+0x5d4/0x7f0 [ 2324.819164][ T1550] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2324.819195][ T1550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2324.819217][ T1550] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2324.819267][ T1550] __sock_sendmsg+0x21c/0x270 [ 2324.819302][ T1550] ____sys_sendmsg+0x505/0x820 [ 2324.819334][ T1550] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2324.819366][ T1550] ? kstrtouint+0x6e/0xe0 [ 2324.819423][ T1550] ___sys_sendmsg+0x21f/0x2a0 [ 2324.819453][ T1550] ? __pfx____sys_sendmsg+0x10/0x10 [ 2324.819491][ T1550] ? get_pid_task+0x20/0x1f0 [ 2324.819518][ T1550] ? get_pid_task+0x20/0x1f0 [ 2324.819543][ T1550] ? get_pid_task+0x20/0x1f0 [ 2324.819600][ T1550] ? __fget_files+0x2a/0x420 [ 2324.819627][ T1550] ? __fget_files+0x3a0/0x420 [ 2324.819664][ T1550] __sys_sendmsg+0x164/0x220 [ 2324.819693][ T1550] ? __pfx___sys_sendmsg+0x10/0x10 [ 2324.819728][ T1550] ? __pfx_ksys_write+0x10/0x10 [ 2324.819761][ T1550] __do_fast_syscall_32+0x1dc/0x560 [ 2324.819786][ T1550] ? lockdep_hardirqs_on+0x7b/0x110 [ 2324.819806][ T1550] ? do_fast_syscall_32+0x34/0x80 [ 2324.819830][ T1550] ? irqentry_exit+0x10f/0x660 [ 2324.819856][ T1550] do_fast_syscall_32+0x34/0x80 [ 2324.819881][ T1550] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2324.819907][ T1550] RIP: 0023:0xf7f11539 [ 2324.819944][ T1550] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2324.819964][ T1550] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 2324.819987][ T1550] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 2324.820003][ T1550] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2324.820017][ T1550] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2324.820030][ T1550] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2324.820044][ T1550] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2324.820077][ T1550] [ 2325.329230][ T1558] vlan2: entered promiscuous mode [ 2325.334355][ T1558] bond0: entered promiscuous mode [ 2325.339523][ T1558] bond_slave_0: entered promiscuous mode [ 2325.345601][ T1558] bond_slave_1: entered promiscuous mode [ 2325.514678][T28988] usbhid 6-1:0.0: can't add hid device: -71 [ 2325.520968][T28988] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2325.542023][T28988] usb 6-1: USB disconnect, device number 93 [ 2326.135066][T29179] usb 7-1: new high-speed USB device number 120 using dummy_hcd [ 2326.304440][T29179] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2326.334857][T29179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2326.367901][T29179] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2326.394947][T29179] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2326.426381][T29179] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2326.467604][T29179] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2326.539781][ T1572] [U]  [ 2326.551175][T29179] usb 7-1: config 0 descriptor?? [ 2326.577747][ T1572] [U] K{‘ [ 2326.592943][ T1572] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 2326.641159][ T1572] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 2326.702848][ T1572] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 2326.838442][ T1572] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 2326.975939][ T1572] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 2327.017874][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.034919][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.050547][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.064997][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.083182][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.102776][ T1572] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 2327.114531][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.132516][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.148107][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.164925][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.182876][T29179] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 2327.191303][ T1572] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 2327.223923][T29179] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 2327.246344][ T1572] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 2327.527656][ T1572] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆȽ [ 2327.576267][ T1572] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 2327.594872][ T1572] [U] 22½“Æ©ÐÛ©X?0;3U± [ 2327.649913][ T1572] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 2327.749663][ T1592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7283'. [ 2327.817600][ T1572] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 2327.865760][ T1596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7283'. [ 2327.940992][ T1588] fido_id[1588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 2328.159254][ T1572] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 2328.497325][ T1572] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 2328.545656][ T1572] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 2328.634460][ T1572] [U] ¹ EC [ 2328.680778][ T1572] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙßÆË,ÎLÂ,Õ [ 2329.142012][ T1610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7287'. [ 2329.306874][ T1610] vlan2: entered promiscuous mode [ 2329.312180][ T1610] bond0: entered promiscuous mode [ 2329.800491][ T1616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7289'. [ 2329.884208][ T1616] vlan2: entered promiscuous mode [ 2329.904690][ T1616] batadv0: entered promiscuous mode [ 2330.104117][ T1567] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 2330.243965][ T1620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7291'. [ 2330.638783][ T1632] netlink: 'syz.1.7295': attribute type 1 has an invalid length. [ 2330.697472][ T1632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2330.765065][ T1634] macvlan2: entered promiscuous mode [ 2330.770426][ T1634] macvlan2: entered allmulticast mode [ 2330.828547][ T1636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7294'. [ 2330.898694][ T1638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7294'. [ 2330.967693][ T1632] bond3: (slave ip6gretap1): making interface the new active one [ 2331.021857][ T1632] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 2331.102631][ T1631] delete_channel: no stack [ 2331.208024][ T1646] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7297'. [ 2332.671972][ T1663] FAULT_INJECTION: forcing a failure. [ 2332.671972][ T1663] name failslab, interval 1, probability 0, space 0, times 0 [ 2332.706017][ T1663] CPU: 1 UID: 0 PID: 1663 Comm: syz.5.7302 Tainted: G L syzkaller #0 PREEMPT(full) [ 2332.706054][ T1663] Tainted: [L]=SOFTLOCKUP [ 2332.706063][ T1663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2332.706076][ T1663] Call Trace: [ 2332.706085][ T1663] [ 2332.706095][ T1663] dump_stack_lvl+0xe8/0x150 [ 2332.706131][ T1663] should_fail_ex+0x414/0x560 [ 2332.706159][ T1663] should_failslab+0xa8/0x100 [ 2332.706204][ T1663] kmem_cache_alloc_noprof+0x88/0x710 [ 2332.706240][ T1663] ? security_file_alloc+0x34/0x330 [ 2332.706266][ T1663] security_file_alloc+0x34/0x330 [ 2332.706291][ T1663] init_file+0x93/0x2f0 [ 2332.706321][ T1663] alloc_empty_file+0x6e/0x1d0 [ 2332.706350][ T1663] path_openat+0x108/0x3dd0 [ 2332.706370][ T1663] ? stack_trace_save+0x9c/0xe0 [ 2332.706395][ T1663] ? __pfx_stack_trace_save+0x10/0x10 [ 2332.706420][ T1663] ? stack_depot_save_flags+0x33/0x810 [ 2332.706449][ T1663] ? kasan_save_track+0x4f/0x80 [ 2332.706463][ T1663] ? kasan_save_track+0x3e/0x80 [ 2332.706482][ T1663] ? __kasan_slab_alloc+0x6c/0x80 [ 2332.706498][ T1663] ? kmem_cache_alloc_noprof+0x37d/0x710 [ 2332.706520][ T1663] ? getname_flags+0xb8/0x540 [ 2332.706537][ T1663] ? do_sys_openat2+0xbc/0x200 [ 2332.706557][ T1663] ? __pfx_path_openat+0x10/0x10 [ 2332.706573][ T1663] ? __lock_acquire+0x6b6/0x2cf0 [ 2332.706599][ T1663] do_filp_open+0x1fa/0x410 [ 2332.706614][ T1663] ? __pfx_do_filp_open+0x10/0x10 [ 2332.706643][ T1663] ? _raw_spin_unlock+0x28/0x50 [ 2332.706666][ T1663] ? alloc_fd+0x64c/0x6c0 [ 2332.706691][ T1663] do_sys_openat2+0x121/0x200 [ 2332.706714][ T1663] ? __pfx_do_sys_openat2+0x10/0x10 [ 2332.706744][ T1663] __se_sys_openat2+0x226/0x2c0 [ 2332.706767][ T1663] ? __pfx___se_sys_openat2+0x10/0x10 [ 2332.706798][ T1663] __do_fast_syscall_32+0x1dc/0x560 [ 2332.706816][ T1663] ? lockdep_hardirqs_on+0x7b/0x110 [ 2332.706830][ T1663] ? do_fast_syscall_32+0x34/0x80 [ 2332.706847][ T1663] ? irqentry_exit+0x10f/0x660 [ 2332.706864][ T1663] do_fast_syscall_32+0x34/0x80 [ 2332.706882][ T1663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2332.706902][ T1663] RIP: 0023:0xf7f11539 [ 2332.706916][ T1663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2332.706930][ T1663] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 00000000000001b5 [ 2332.706946][ T1663] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 2332.706957][ T1663] RDX: 0000000080000080 RSI: 0000000000000018 RDI: 0000000000000000 [ 2332.706968][ T1663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2332.706977][ T1663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2332.706986][ T1663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2332.707007][ T1663] [ 2333.614834][T20041] usb 6-1: new full-speed USB device number 94 using dummy_hcd [ 2333.634907][T29179] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2333.780167][T20041] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2333.790504][T20041] usb 6-1: config 0 has no interface number 0 [ 2333.798756][T29179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2333.816180][T29179] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2333.828564][T20041] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 2333.840206][T29179] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 2333.849908][T20041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2333.858188][T29179] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2333.867766][T20041] usb 6-1: Product: syz [ 2333.872035][T20041] usb 6-1: Manufacturer: syz [ 2333.878987][T29179] usb 5-1: config 0 descriptor?? [ 2333.889086][T20041] usb 6-1: SerialNumber: syz [ 2333.913980][T20041] usb 6-1: config 0 descriptor?? [ 2333.935936][T20041] usb 6-1: selecting invalid altsetting 1 [ 2333.942088][T20041] dvb_ttusb_budget: ttusb_init_controller: error [ 2333.948767][T20041] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2334.031018][T20041] DVB: Unable to find symbol stv0299_attach() [ 2334.192252][T20041] DVB: Unable to find symbol tda8083_attach() [ 2334.201039][T20041] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 2334.334648][T29179] elan 0003:04F3:0755.0037: failed to start in urb: -90 [ 2334.348056][T29179] elan 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 2334.569505][ T1675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2334.579315][ T1675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2334.659814][T26683] usb 5-1: USB disconnect, device number 20 [ 2334.740970][ T1687] fido_id[1687]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 2334.783287][ T1691] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7309'. [ 2335.854874][T26683] usb 7-1: new high-speed USB device number 121 using dummy_hcd [ 2336.004857][T26683] usb 7-1: Using ep0 maxpacket: 8 [ 2336.056769][T26683] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 2336.073568][T26683] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 2336.105800][T26683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2336.116708][T26683] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 2336.129868][T26683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 2336.216899][T26683] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2336.247620][T26683] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2336.278277][T26683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2336.408115][T20041] usb 6-1: USB disconnect, device number 94 [ 2336.583341][T26683] usb 7-1: GET_CAPABILITIES returned 0 [ 2336.621005][T26683] usbtmc 7-1:16.0: can't read capabilities [ 2336.764014][ T1717] FAULT_INJECTION: forcing a failure. [ 2336.764014][ T1717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2336.805497][T26683] usb 7-1: USB disconnect, device number 121 [ 2336.852253][ T1717] CPU: 0 UID: 0 PID: 1717 Comm: syz.5.7318 Tainted: G L syzkaller #0 PREEMPT(full) [ 2336.852288][ T1717] Tainted: [L]=SOFTLOCKUP [ 2336.852297][ T1717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2336.852311][ T1717] Call Trace: [ 2336.852320][ T1717] [ 2336.852330][ T1717] dump_stack_lvl+0xe8/0x150 [ 2336.852363][ T1717] should_fail_ex+0x414/0x560 [ 2336.852402][ T1717] strncpy_from_user+0x36/0x2c0 [ 2336.852438][ T1717] getname_flags+0xf3/0x540 [ 2336.852469][ T1717] __ia32_sys_renameat2+0xad/0xe0 [ 2336.852499][ T1717] __do_fast_syscall_32+0x1dc/0x560 [ 2336.852535][ T1717] ? lockdep_hardirqs_on+0x7b/0x110 [ 2336.852556][ T1717] ? do_fast_syscall_32+0x34/0x80 [ 2336.852580][ T1717] ? irqentry_exit+0x10f/0x660 [ 2336.852606][ T1717] do_fast_syscall_32+0x34/0x80 [ 2336.852631][ T1717] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2336.852661][ T1717] RIP: 0023:0xf7f11539 [ 2336.852677][ T1717] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2336.852709][ T1717] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 2336.852733][ T1717] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 2336.852748][ T1717] RDX: 0000000000000004 RSI: 0000000080000440 RDI: 0000000000000002 [ 2336.852780][ T1717] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2336.852794][ T1717] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2336.852807][ T1717] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2336.852844][ T1717] [ 2337.519614][ T1727] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7322'. [ 2338.512480][ T1753] netlink: 'syz.4.7327': attribute type 1 has an invalid length. [ 2338.922187][ T1760] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2338.938588][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2338.938601][ T30] audit: type=1326 audit(1766635997.430:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2338.980519][ T30] audit: type=1326 audit(1766635997.460:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.026093][ T30] audit: type=1326 audit(1766635997.460:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.056682][ T30] audit: type=1326 audit(1766635997.460:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.079200][ T1760] IPVS: Scheduler module ip_vs_ not found [ 2339.098548][ T30] audit: type=1326 audit(1766635997.460:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.205764][ T30] audit: type=1326 audit(1766635997.460:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.283071][ T30] audit: type=1326 audit(1766635997.460:3814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.315017][ T30] audit: type=1326 audit(1766635997.460:3815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.347228][ T30] audit: type=1326 audit(1766635997.460:3816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2339.374917][ T30] audit: type=1326 audit(1766635997.460:3817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1757 comm="syz.5.7330" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f11539 code=0x7ffc0000 [ 2340.350901][ T1784] fuse: Bad value for 'rootmode' [ 2340.376474][ T1787] netlink: 'syz.1.7339': attribute type 1 has an invalid length. [ 2340.514957][T29179] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2340.674983][T29179] usb 5-1: Using ep0 maxpacket: 32 [ 2340.683113][T29179] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 2340.691870][T29179] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2340.702463][T29179] usb 5-1: config 0 has no interface number 0 [ 2340.708944][T29179] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 2340.719611][T29179] usb 5-1: config 0 interface 133 altsetting 0 endpoint 0xF has invalid maxpacket 46383, setting to 1024 [ 2340.737066][T29179] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 2340.755569][T29179] usb 5-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2340.780150][T29179] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 2340.794936][T29179] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2340.806659][T29179] usb 5-1: Product: syz [ 2340.815676][T29179] usb 5-1: Manufacturer: syz [ 2340.821846][T29179] usb 5-1: SerialNumber: syz [ 2340.842168][T29179] usb 5-1: config 0 descriptor?? [ 2340.852224][ T1783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2340.859970][ T1783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2342.202094][ T1803] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7342'. [ 2342.236287][ T1783] syzkaller0: entered promiscuous mode [ 2342.241805][ T1783] syzkaller0: entered allmulticast mode [ 2342.354326][ T1805] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 2342.883328][ T1813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7344'. [ 2343.028249][ T1817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2343.202365][ T1817] IPVS: Scheduler module ip_vs_ not found [ 2343.386426][ T1825] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 2343.538538][T29179] usb 5-1: probing VID:PID(0424:012C) [ 2343.555904][T29179] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 2343.563870][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7348'. [ 2343.573247][T29179] usb 5-1: vub300 testing BULK OUT EndPoint(1) 0F [ 2343.593561][T29179] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 2343.614075][T29179] vub300 5-1:0.133: probe with driver vub300 failed with error -22 [ 2343.628892][ T1830] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7348'. [ 2343.641166][T29179] usb 5-1: USB disconnect, device number 21 [ 2343.702030][ T1833] fuse: Bad value for 'user_id' [ 2343.733506][ T1833] fuse: Bad value for 'user_id' [ 2344.127929][ T1850] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7357'. [ 2344.225622][ T7221] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 2344.225622][T29179] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 2344.426070][ T5926] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2344.448165][T29179] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2344.469060][T29179] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2344.525668][T29179] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2344.534910][ T7221] usb 2-1: Using ep0 maxpacket: 16 [ 2344.540998][T29179] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2344.546253][ T7221] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2344.551695][T29179] usb 5-1: Product: syz [ 2344.578836][T29179] usb 5-1: Manufacturer: syz [ 2344.578897][ T7221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2344.595099][ T5926] usb 6-1: Using ep0 maxpacket: 32 [ 2344.596777][ T7221] usb 2-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 2344.618983][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2344.638308][ T5926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2344.638332][ T7221] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2344.647228][ T7221] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2344.652109][T29179] usb 5-1: SerialNumber: syz [ 2344.675342][ T7221] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2344.683433][ T7221] usb 2-1: Manufacturer: syz [ 2344.683435][ T5926] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2344.683464][ T5926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2344.707654][ T7221] usb 2-1: config 0 descriptor?? [ 2344.730393][T29179] usb 5-1: config 0 descriptor?? [ 2344.743457][ T5926] usb 6-1: config 0 descriptor?? [ 2344.786032][T29179] usb 5-1: selecting invalid altsetting 0 [ 2345.105909][T29179] usb 5-1: USB disconnect, device number 22 [ 2345.320261][ T1854] FAULT_INJECTION: forcing a failure. [ 2345.320261][ T1854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2345.352279][ T1854] CPU: 0 UID: 0 PID: 1854 Comm: syz.1.7356 Tainted: G L syzkaller #0 PREEMPT(full) [ 2345.352315][ T1854] Tainted: [L]=SOFTLOCKUP [ 2345.352323][ T1854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2345.352335][ T1854] Call Trace: [ 2345.352343][ T1854] [ 2345.352352][ T1854] dump_stack_lvl+0xe8/0x150 [ 2345.352386][ T1854] should_fail_ex+0x414/0x560 [ 2345.352422][ T1854] _copy_from_user+0x2d/0xb0 [ 2345.352447][ T1854] get_compat_msghdr+0xad/0x4a0 [ 2345.352478][ T1854] ? __pfx_get_compat_msghdr+0x10/0x10 [ 2345.352505][ T1854] ? rcu_is_watching+0x15/0xb0 [ 2345.352531][ T1854] ? ___sys_sendmsg+0x22f/0x2a0 [ 2345.352562][ T1854] ___sys_sendmsg+0x193/0x2a0 [ 2345.352587][ T1854] ? __pfx____sys_sendmsg+0x10/0x10 [ 2345.352609][ T1854] ? kstrtoull+0x12f/0x1d0 [ 2345.352640][ T1854] ? kstrtouint+0x6e/0xe0 [ 2345.352708][ T1854] __sys_sendmmsg+0x28e/0x430 [ 2345.352743][ T1854] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2345.352764][ T1854] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2345.352811][ T1854] ? ksys_write+0x22a/0x250 [ 2345.352841][ T1854] ? __pfx_ksys_write+0x10/0x10 [ 2345.352865][ T1854] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2345.352893][ T1854] __do_fast_syscall_32+0x1dc/0x560 [ 2345.352915][ T1854] ? lockdep_hardirqs_on+0x7b/0x110 [ 2345.352933][ T1854] ? do_fast_syscall_32+0x34/0x80 [ 2345.352957][ T1854] ? irqentry_exit+0x10f/0x660 [ 2345.352981][ T1854] do_fast_syscall_32+0x34/0x80 [ 2345.353003][ T1854] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2345.353026][ T1854] RIP: 0023:0xf7f95539 [ 2345.353044][ T1854] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2345.353061][ T1854] RSP: 002b:00000000f546555c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2345.353082][ T1854] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000000 [ 2345.353098][ T1854] RDX: 0000000000000235 RSI: 0000000000000000 RDI: 0000000000000000 [ 2345.353112][ T1854] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2345.353122][ T1854] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2345.353134][ T1854] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2345.353161][ T1854] [ 2345.855790][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7358'. [ 2346.400156][ T1865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7359'. [ 2346.723094][ T1874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2347.148025][ T7221] usb 2-1: USB disconnect, device number 121 [ 2347.170744][ T30] kauditd_printk_skb: 69 callbacks suppressed [ 2347.170763][ T30] audit: type=1326 audit(1766636005.660:3887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.253405][ T30] audit: type=1326 audit(1766636005.660:3888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.334365][ T30] audit: type=1326 audit(1766636005.670:3889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.415180][ T5926] usb 6-1: string descriptor 0 read error: -71 [ 2347.453885][ T30] audit: type=1326 audit(1766636005.670:3890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.513980][ T30] audit: type=1326 audit(1766636005.670:3891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.565361][ T1874] IPVS: Scheduler module ip_vs_ not found [ 2347.601140][ T5926] usbhid 6-1:0.0: can't add hid device: -71 [ 2347.619952][ T30] audit: type=1326 audit(1766636005.700:3892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.653095][ T5926] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2347.696888][ T5926] usb 6-1: USB disconnect, device number 95 [ 2347.742472][ T30] audit: type=1326 audit(1766636005.700:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.786543][ T30] audit: type=1326 audit(1766636005.700:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.851067][ T30] audit: type=1326 audit(1766636005.710:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.921596][ T30] audit: type=1326 audit(1766636005.710:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1873 comm="syz.3.7362" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2347.957845][ T1886] netlink: 'syz.5.7364': attribute type 1 has an invalid length. [ 2348.386701][ T1887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7365'. [ 2348.397636][ T1887] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7365'. [ 2350.120083][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2350.128323][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2350.781736][ T1924] FAULT_INJECTION: forcing a failure. [ 2350.781736][ T1924] name failslab, interval 1, probability 0, space 0, times 0 [ 2350.824175][ T1924] CPU: 0 UID: 0 PID: 1924 Comm: syz.5.7376 Tainted: G L syzkaller #0 PREEMPT(full) [ 2350.824209][ T1924] Tainted: [L]=SOFTLOCKUP [ 2350.824219][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2350.824233][ T1924] Call Trace: [ 2350.824243][ T1924] [ 2350.824257][ T1924] dump_stack_lvl+0xe8/0x150 [ 2350.824298][ T1924] should_fail_ex+0x414/0x560 [ 2350.824327][ T1924] should_failslab+0xa8/0x100 [ 2350.824348][ T1924] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2350.824380][ T1924] ? __alloc_skb+0x198/0x3a0 [ 2350.824396][ T1924] ? __alloc_skb+0x1dc/0x3a0 [ 2350.824411][ T1924] ? __local_bh_enable_ip+0xd0/0x130 [ 2350.824428][ T1924] ? __alloc_skb+0x198/0x3a0 [ 2350.824445][ T1924] __alloc_skb+0x1dc/0x3a0 [ 2350.824464][ T1924] alloc_skb_with_frags+0xca/0x890 [ 2350.824492][ T1924] sock_alloc_send_pskb+0x84d/0x980 [ 2350.824529][ T1924] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2350.824551][ T1924] ? do_raw_spin_lock+0x121/0x290 [ 2350.824575][ T1924] ? __lock_acquire+0x6b6/0x2cf0 [ 2350.824596][ T1924] __ip_append_data+0x2ce8/0x40c0 [ 2350.824628][ T1924] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2350.824661][ T1924] ? __pfx___ip_append_data+0x10/0x10 [ 2350.824677][ T1924] ? ipv4_mtu+0x53b/0x650 [ 2350.824724][ T1924] ? ip_setup_cork+0x577/0x9a0 [ 2350.824751][ T1924] ip_make_skb+0x1de/0x3f0 [ 2350.824785][ T1924] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2350.824803][ T1924] ? __pfx_ip_make_skb+0x10/0x10 [ 2350.824835][ T1924] udp_sendmsg+0x1925/0x2170 [ 2350.824868][ T1924] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 2350.824887][ T1924] ? __pfx_udp_sendmsg+0x10/0x10 [ 2350.824910][ T1924] ? __lock_acquire+0x6b6/0x2cf0 [ 2350.824933][ T1924] ? do_wp_page+0x1622/0x5810 [ 2350.824968][ T1924] ? sock_rps_record_flow+0x19/0x410 [ 2350.824991][ T1924] ? inet_sendmsg+0x29c/0x370 [ 2350.825011][ T1924] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2350.825028][ T1924] __sock_sendmsg+0x19c/0x270 [ 2350.825053][ T1924] ____sys_sendmsg+0x52d/0x820 [ 2350.825076][ T1924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2350.825100][ T1924] ? __pfx_handle_mm_fault+0x10/0x10 [ 2350.825128][ T1924] ___sys_sendmsg+0x21f/0x2a0 [ 2350.825148][ T1924] ? __pfx____sys_sendmsg+0x10/0x10 [ 2350.825169][ T1924] ? do_user_addr_fault+0xbbc/0x1380 [ 2350.825196][ T1924] ? lockdep_hardirqs_on+0x7b/0x110 [ 2350.825232][ T1924] __sys_sendmmsg+0x28e/0x430 [ 2350.825255][ T1924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2350.825280][ T1924] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 2350.825315][ T1924] ? ksys_write+0x22a/0x250 [ 2350.825332][ T1924] ? __pfx_ksys_write+0x10/0x10 [ 2350.825351][ T1924] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 2350.825375][ T1924] __do_fast_syscall_32+0x1dc/0x560 [ 2350.825393][ T1924] ? lockdep_hardirqs_on+0x7b/0x110 [ 2350.825408][ T1924] ? do_fast_syscall_32+0x34/0x80 [ 2350.825425][ T1924] ? irqentry_exit+0x10f/0x660 [ 2350.825444][ T1924] do_fast_syscall_32+0x34/0x80 [ 2350.825462][ T1924] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2350.825482][ T1924] RIP: 0023:0xf7f11539 [ 2350.825496][ T1924] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2350.825510][ T1924] RSP: 002b:00000000f540655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 2350.825527][ T1924] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007fc0 [ 2350.825538][ T1924] RDX: 000000000800001d RSI: 0000000000000300 RDI: 0000000000000000 [ 2350.825548][ T1924] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2350.825558][ T1924] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2350.825567][ T1924] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2350.825590][ T1924] [ 2351.512773][ T1927] fuse: Bad value for 'user_id' [ 2351.518294][ T1927] fuse: Bad value for 'user_id' [ 2351.711965][ T1938] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 2351.876250][ T1944] netlink: 'syz.5.7379': attribute type 10 has an invalid length. [ 2351.935682][T29179] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 2351.983321][ T1945] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2352.083696][ T1945] sctp: [Deprecated]: syz.4.7382 (pid 1945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2352.083696][ T1945] Use struct sctp_sack_info instead [ 2352.126750][T29179] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2352.136798][T29179] usb 7-1: config 0 interface 0 has no altsetting 0 [ 2352.146311][T29179] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2352.161915][T29179] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2352.199231][T29179] usb 7-1: Product: syz [ 2352.205961][T29179] usb 7-1: Manufacturer: syz [ 2352.212207][T29179] usb 7-1: SerialNumber: syz [ 2352.234600][T29179] usb 7-1: config 0 descriptor?? [ 2352.247648][T29179] usb 7-1: selecting invalid altsetting 0 [ 2352.759626][T29179] usb 7-1: USB disconnect, device number 122 [ 2352.902026][ T1950] netlink: 'syz.4.7384': attribute type 3 has an invalid length. [ 2353.381944][ T1961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7387'. [ 2353.414511][ T1961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7387'. [ 2353.714842][T29179] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2353.904876][T29179] usb 6-1: Using ep0 maxpacket: 32 [ 2353.933343][T29179] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 2353.941906][T29179] usb 6-1: config 0 has no interface number 0 [ 2353.950288][T29179] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2353.960976][T29179] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2353.971604][T29179] usb 6-1: config 0 interface 126 has no altsetting 0 [ 2354.104187][T29179] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2354.163488][T29179] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2354.174837][ T1970] bond4 (unregistering): Released all slaves [ 2354.504968][T29179] usb 6-1: Product: syz [ 2354.509258][T29179] usb 6-1: Manufacturer: syz [ 2354.513894][T29179] usb 6-1: SerialNumber: syz [ 2354.534424][T29179] usb 6-1: config 0 descriptor?? [ 2354.595706][ T1975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7389'. [ 2354.609012][ T1962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2354.617114][ T1962] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 2355.474042][ T1983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2355.499887][ T1983] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2355.780593][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7393'. [ 2357.342758][ T2003] netlink: 'syz.3.7398': attribute type 1 has an invalid length. [ 2357.542022][T29179] ir_usb 6-1:0.126: IR Dongle converter detected [ 2357.588160][T29179] usb 6-1: IRDA class descriptor not found, device not bound [ 2357.616704][ T2009] FAULT_INJECTION: forcing a failure. [ 2357.616704][ T2009] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2357.644249][T29179] usb 6-1: USB disconnect, device number 96 [ 2357.653839][ T2005] bond1: (slave bridge5): making interface the new active one [ 2357.671875][ T2005] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 2357.694879][ T2009] CPU: 0 UID: 0 PID: 2009 Comm: syz.1.7399 Tainted: G L syzkaller #0 PREEMPT(full) [ 2357.694915][ T2009] Tainted: [L]=SOFTLOCKUP [ 2357.694924][ T2009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2357.694939][ T2009] Call Trace: [ 2357.694948][ T2009] [ 2357.694958][ T2009] dump_stack_lvl+0xe8/0x150 [ 2357.694992][ T2009] should_fail_ex+0x414/0x560 [ 2357.695032][ T2009] _copy_from_user+0x2d/0xb0 [ 2357.695061][ T2009] video_usercopy+0x349/0x13f0 [ 2357.695092][ T2009] ? __pfx___video_do_ioctl+0x10/0x10 [ 2357.695115][ T2009] ? __pfx_video_usercopy+0x10/0x10 [ 2357.695156][ T2009] ? __fget_files+0x2a/0x420 [ 2357.695188][ T2009] v4l2_ioctl+0x18d/0x1e0 [ 2357.695227][ T2009] v4l2_compat_ioctl32+0x1d7/0x290 [ 2357.695265][ T2009] __ia32_compat_sys_ioctl+0x543/0x840 [ 2357.695291][ T2009] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2357.695314][ T2009] ? __fget_files+0x3a0/0x420 [ 2357.695349][ T2009] ? fput+0xa0/0xd0 [ 2357.695380][ T2009] ? ksys_write+0x22a/0x250 [ 2357.695405][ T2009] ? __pfx_ksys_write+0x10/0x10 [ 2357.695440][ T2009] __do_fast_syscall_32+0x1dc/0x560 [ 2357.695467][ T2009] ? lockdep_hardirqs_on+0x7b/0x110 [ 2357.695489][ T2009] ? do_fast_syscall_32+0x34/0x80 [ 2357.695513][ T2009] ? irqentry_exit+0x10f/0x660 [ 2357.695538][ T2009] do_fast_syscall_32+0x34/0x80 [ 2357.695563][ T2009] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2357.695590][ T2009] RIP: 0023:0xf7f95539 [ 2357.695609][ T2009] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2357.695631][ T2009] RSP: 002b:00000000f548655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2357.695655][ T2009] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565e [ 2357.695671][ T2009] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 2357.695685][ T2009] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2357.695699][ T2009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2357.695713][ T2009] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2357.695746][ T2009] [ 2358.034105][T20041] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2358.122415][ T2018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2358.140692][ T2018] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2358.421053][T20041] usb 5-1: Using ep0 maxpacket: 16 [ 2358.435843][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2358.435863][ T30] audit: type=1326 audit(1766636016.700:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.439772][T20041] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2358.463474][ T30] audit: type=1326 audit(1766636016.700:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.466623][T20041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2358.543151][T20041] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2358.558271][ T30] audit: type=1326 audit(1766636016.700:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.583441][T20041] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2358.593457][T20041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2358.632278][T20041] usb 5-1: Product: syz [ 2358.636597][T20041] usb 5-1: Manufacturer: syz [ 2358.641474][T20041] usb 5-1: SerialNumber: syz [ 2358.653187][T29179] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2358.675373][ T30] audit: type=1326 audit(1766636016.700:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.714423][ T30] audit: type=1326 audit(1766636016.700:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.757758][ T30] audit: type=1326 audit(1766636016.700:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.825440][T29179] usb 6-1: Using ep0 maxpacket: 16 [ 2358.838872][T29179] usb 6-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 2358.853971][T29179] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2358.874226][ T30] audit: type=1326 audit(1766636016.700:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2358.907891][T29179] usb 6-1: config 0 descriptor?? [ 2359.003080][ T30] audit: type=1326 audit(1766636016.700:3930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2359.087824][ T30] audit: type=1326 audit(1766636016.700:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2359.161446][ T30] audit: type=1326 audit(1766636016.700:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2015 comm="syz.3.7403" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2359.194905][T20041] usb 5-1: 0:2 : does not exist [ 2359.672002][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7408'. [ 2359.741504][ T2036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7408'. [ 2360.017213][T29179] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 2360.356446][ T2041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7410'. [ 2360.536659][T29179] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 2360.945166][ T2046] FAULT_INJECTION: forcing a failure. [ 2360.945166][ T2046] name failslab, interval 1, probability 0, space 0, times 0 [ 2360.974375][ T2046] CPU: 0 UID: 0 PID: 2046 Comm: syz.6.7411 Tainted: G L syzkaller #0 PREEMPT(full) [ 2360.974408][ T2046] Tainted: [L]=SOFTLOCKUP [ 2360.974420][ T2046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2360.974431][ T2046] Call Trace: [ 2360.974438][ T2046] [ 2360.974445][ T2046] dump_stack_lvl+0xe8/0x150 [ 2360.974488][ T2046] should_fail_ex+0x414/0x560 [ 2360.974548][ T2046] should_failslab+0xa8/0x100 [ 2360.974581][ T2046] __kmalloc_noprof+0xdf/0x800 [ 2360.974605][ T2046] ? tomoyo_encode+0x28b/0x550 [ 2360.974630][ T2046] tomoyo_encode+0x28b/0x550 [ 2360.974669][ T2046] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2360.974702][ T2046] ? tomoyo_domain+0xd8/0x130 [ 2360.974736][ T2046] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2360.974761][ T2046] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2360.974782][ T2046] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2360.974799][ T2046] ? __lock_acquire+0x6b6/0x2cf0 [ 2360.974833][ T2046] ? get_pid_task+0x20/0x1f0 [ 2360.974873][ T2046] ? get_pid_task+0x20/0x1f0 [ 2360.974918][ T2046] ? __fget_files+0x2a/0x420 [ 2360.974952][ T2046] ? __fget_files+0x3a0/0x420 [ 2360.974978][ T2046] ? __fget_files+0x2a/0x420 [ 2360.975011][ T2046] security_file_ioctl_compat+0xcb/0x2d0 [ 2360.975044][ T2046] __ia32_compat_sys_ioctl+0x128/0x840 [ 2360.975071][ T2046] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2360.975094][ T2046] ? __fget_files+0x3a0/0x420 [ 2360.975130][ T2046] ? fput+0xa0/0xd0 [ 2360.975161][ T2046] ? ksys_write+0x22a/0x250 [ 2360.975186][ T2046] ? __pfx_ksys_write+0x10/0x10 [ 2360.975243][ T2046] __do_fast_syscall_32+0x1dc/0x560 [ 2360.975270][ T2046] ? lockdep_hardirqs_on+0x7b/0x110 [ 2360.975292][ T2046] ? do_fast_syscall_32+0x34/0x80 [ 2360.975315][ T2046] ? irqentry_exit+0x10f/0x660 [ 2360.975341][ T2046] do_fast_syscall_32+0x34/0x80 [ 2360.975365][ T2046] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2360.975393][ T2046] RIP: 0023:0xf700d539 [ 2360.975413][ T2046] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2360.975434][ T2046] RSP: 002b:00000000f53fd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2360.975459][ T2046] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004018aee2 [ 2360.975476][ T2046] RDX: 00000000800001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2360.975489][ T2046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2360.975503][ T2046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2360.975516][ T2046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2360.975550][ T2046] [ 2361.336554][ T2046] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2361.383322][ T5926] usb 6-1: USB disconnect, device number 97 [ 2361.404040][T20041] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 2361.500055][T20041] usb 5-1: USB disconnect, device number 23 [ 2361.882771][ T5202] loop2: [POWERTEC] p1 p2 [ 2361.897633][ T5202] loop2: p1 size 65536 extends beyond EOD, truncated [ 2361.951443][ T2052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2362.006925][ T2058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2362.036053][ T5202] loop2: p2 size 4294901760 extends beyond EOD, truncated [ 2362.180227][ T2058] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2362.375011][ T2062] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7417'. [ 2363.738168][ T2079] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7421'. [ 2363.808147][ T2079] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7421'. [ 2364.227277][ T2088] hsr0: entered promiscuous mode [ 2364.234432][ T2088] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7423'. [ 2364.254324][ T2088] hsr_slave_0: left promiscuous mode [ 2364.266555][ T2088] hsr_slave_1: left promiscuous mode [ 2364.472541][ T2088] hsr0 (unregistering): left promiscuous mode [ 2364.925949][ T2094] ima: Can not allocate md4 (reason: -2) [ 2364.932373][ T30] kauditd_printk_skb: 29 callbacks suppressed [ 2364.932391][ T30] audit: type=1800 audit(1766636023.420:3962): pid=2094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7425" name="/" dev="fuse" ino=1 res=0 errno=0 [ 2364.958051][T29179] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 2365.116182][T29179] usb 2-1: Using ep0 maxpacket: 16 [ 2365.125747][T29179] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2365.139488][T29179] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2365.152915][T29179] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2365.163939][T29179] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2365.174889][T29179] usb 2-1: Product: syz [ 2365.197024][T29179] usb 2-1: Manufacturer: syz [ 2365.212683][T29179] usb 2-1: SerialNumber: syz [ 2365.442520][ T2093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7424'. [ 2365.707976][T29179] usb 2-1: 0:2 : does not exist [ 2365.731314][T29179] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2365.928105][T29179] usb 2-1: USB disconnect, device number 122 [ 2366.038909][T32745] udevd[32745]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2366.583310][ T2110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7427'. [ 2366.941275][ T2113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2366.995350][ T2113] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 2367.682865][ T2128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7434'. [ 2367.704308][ T2128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7434'. [ 2368.092764][ T2119] trusted_key: encrypted_key: insufficient parameters specified [ 2368.450255][ T30] audit: type=1326 audit(1766636026.940:3963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.473262][ T30] audit: type=1326 audit(1766636026.940:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.533854][ T30] audit: type=1326 audit(1766636026.960:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.567689][ T30] audit: type=1326 audit(1766636026.960:3966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.665431][ T30] audit: type=1326 audit(1766636026.960:3967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.730973][ T30] audit: type=1326 audit(1766636026.990:3968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.760539][ T30] audit: type=1326 audit(1766636026.990:3969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.802598][ T30] audit: type=1326 audit(1766636026.990:3970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2368.827100][ T30] audit: type=1326 audit(1766636026.990:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2140 comm="syz.3.7438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fe7539 code=0x7ffc0000 [ 2370.268739][ T2168] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2370.326267][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2370.326288][ T30] audit: type=1326 audit(1766636028.810:3985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.430301][ T30] audit: type=1326 audit(1766636028.820:3986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.532122][ T30] audit: type=1326 audit(1766636028.820:3987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.583432][ T30] audit: type=1326 audit(1766636028.820:3988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.614622][ T30] audit: type=1326 audit(1766636028.820:3989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.755705][ T30] audit: type=1326 audit(1766636028.820:3990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2370.874832][ T30] audit: type=1326 audit(1766636028.820:3991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2371.019744][ T30] audit: type=1326 audit(1766636028.820:3992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2371.092775][ T30] audit: type=1326 audit(1766636028.820:3993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2371.194856][ T30] audit: type=1326 audit(1766636028.850:3994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2167 comm="syz.4.7448" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2371.845777][ T7221] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 2372.027054][ T2189] tap0: tun_chr_ioctl cmd 1074025677 [ 2372.051937][ T2189] tap0: linktype set to 774 [ 2372.064840][ T7221] usb 7-1: Using ep0 maxpacket: 8 [ 2372.072247][ T2189] FAULT_INJECTION: forcing a failure. [ 2372.072247][ T2189] name failslab, interval 1, probability 0, space 0, times 0 [ 2372.072719][ T7221] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 2372.104278][ T7221] usb 7-1: config 0 has no interface number 0 [ 2372.184180][ T2189] CPU: 1 UID: 0 PID: 2189 Comm: syz.4.7453 Tainted: G L syzkaller #0 PREEMPT(full) [ 2372.184216][ T2189] Tainted: [L]=SOFTLOCKUP [ 2372.184225][ T2189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2372.184239][ T2189] Call Trace: [ 2372.184258][ T2189] [ 2372.184269][ T2189] dump_stack_lvl+0xe8/0x150 [ 2372.184303][ T2189] should_fail_ex+0x414/0x560 [ 2372.184345][ T2189] should_failslab+0xa8/0x100 [ 2372.184375][ T2189] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 2372.184413][ T2189] ? __alloc_skb+0x1dc/0x3a0 [ 2372.184434][ T2189] ? __local_bh_enable_ip+0xd0/0x130 [ 2372.184458][ T2189] ? __alloc_skb+0x198/0x3a0 [ 2372.184482][ T2189] __alloc_skb+0x1dc/0x3a0 [ 2372.184510][ T2189] rtmsg_ifinfo_build_skb+0x84/0x260 [ 2372.184555][ T2189] rtnetlink_event+0x1b7/0x270 [ 2372.184585][ T2189] notifier_call_chain+0x19d/0x3a0 [ 2372.184623][ T2189] call_netdevice_notifiers+0x88/0xc0 [ 2372.184659][ T2189] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 2372.184700][ T2189] ? tun_get+0x1c/0x2f0 [ 2372.184733][ T2189] __tun_chr_ioctl+0x16cb/0x1df0 [ 2372.184770][ T2189] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 2372.184799][ T2189] ? __fget_files+0x2a/0x420 [ 2372.184833][ T2189] ? __fget_files+0x3a0/0x420 [ 2372.184867][ T2189] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 2372.184897][ T2189] __ia32_compat_sys_ioctl+0x543/0x840 [ 2372.184924][ T2189] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2372.184947][ T2189] ? __fget_files+0x3a0/0x420 [ 2372.184990][ T2189] ? fput+0xa0/0xd0 [ 2372.185020][ T2189] ? ksys_write+0x22a/0x250 [ 2372.185045][ T2189] ? __pfx_ksys_write+0x10/0x10 [ 2372.185087][ T2189] __do_fast_syscall_32+0x1dc/0x560 [ 2372.185114][ T2189] ? lockdep_hardirqs_on+0x7b/0x110 [ 2372.185134][ T2189] ? do_fast_syscall_32+0x34/0x80 [ 2372.185160][ T2189] ? irqentry_exit+0x10f/0x660 [ 2372.185187][ T2189] do_fast_syscall_32+0x34/0x80 [ 2372.185213][ T2189] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2372.185241][ T2189] RIP: 0023:0xf70cd539 [ 2372.185261][ T2189] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2372.185281][ T2189] RSP: 002b:00000000f54bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2372.185305][ T2189] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454cd [ 2372.185321][ T2189] RDX: 0000000000000306 RSI: 0000000000000000 RDI: 0000000000000000 [ 2372.185336][ T2189] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2372.185350][ T2189] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2372.185364][ T2189] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2372.185397][ T2189] [ 2372.448781][ T7221] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2372.460200][ T7221] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 2372.472134][ T7221] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2372.483240][ T7221] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 2372.663499][ T2191] fuse: blksize only supported for fuseblk [ 2372.713743][ T7221] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 2372.754001][ T7221] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2372.790714][ T7221] usb 7-1: Product: syz [ 2372.814833][ T7221] usb 7-1: Manufacturer: syz [ 2372.820669][ T7221] usb 7-1: SerialNumber: syz [ 2372.916413][ T7221] usb 7-1: config 0 descriptor?? [ 2372.931618][ T7221] usb 7-1: can't set config #0, error -71 [ 2372.948064][ T7221] usb 7-1: USB disconnect, device number 124 [ 2373.313465][ T7221] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 2373.366663][ T2212] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2373.393783][ T2211] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7460'. [ 2373.448756][ T2213] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7460'. [ 2373.496638][ T7221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2373.517922][ T7221] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2373.534631][ T2215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7461'. [ 2373.549347][ T7221] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 2373.558851][ T7221] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2373.571858][ T7221] usb 2-1: Manufacturer: syz [ 2373.582807][ T2215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7461'. [ 2373.599939][ T7221] usb 2-1: config 0 descriptor?? [ 2373.780804][ T2217] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2374.018826][ T7221] cougar 0003:060B:700A.0038: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 2374.233234][T18988] usb 2-1: USB disconnect, device number 123 [ 2374.362022][ T2224] fido_id[2224]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 2374.669084][ T2228] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2375.391265][ T2242] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7469'. [ 2375.560058][ T2246] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2375.569974][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 2375.569993][ T30] audit: type=1326 audit(1766636034.060:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2375.642584][ T2248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7473'. [ 2375.660652][ T30] audit: type=1326 audit(1766636034.060:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2375.752341][ T30] audit: type=1326 audit(1766636034.060:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2375.824385][ T30] audit: type=1326 audit(1766636034.060:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=431 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2375.872730][ T2251] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2375.919675][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7472'. [ 2375.960323][ T2252] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7472'. [ 2375.969590][ T30] audit: type=1326 audit(1766636034.060:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2376.045819][ T30] audit: type=1326 audit(1766636034.150:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2376.153940][ T30] audit: type=1326 audit(1766636034.220:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=432 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2376.160546][ T2251] IPVS: Scheduler module ip_vs_ not found [ 2376.247248][ T30] audit: type=1326 audit(1766636034.220:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2376.330842][ T30] audit: type=1326 audit(1766636034.220:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2376.365126][ T30] audit: type=1326 audit(1766636034.220:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2245 comm="syz.4.7471" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 2411.529276][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2411.535714][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2472.971638][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2472.978160][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2534.418382][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 2534.426552][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 2555.628337][ T933] ================================================================== [ 2555.636458][ T933] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x698/0x7e0 [ 2555.644281][ T933] Read of size 1 at addr ffff88805a538cc9 by task kworker/u8:6/933 [ 2555.652172][ T933] [ 2555.654524][ T933] CPU: 0 UID: 0 PID: 933 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2555.654546][ T933] Tainted: [L]=SOFTLOCKUP [ 2555.654552][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2555.654569][ T933] Workqueue: events_unbound linkwatch_event [ 2555.654605][ T933] Call Trace: [ 2555.654614][ T933] [ 2555.654622][ T933] dump_stack_lvl+0xe8/0x150 [ 2555.654644][ T933] print_report+0xca/0x240 [ 2555.654660][ T933] ? __linkwatch_run_queue+0x698/0x7e0 [ 2555.654682][ T933] kasan_report+0x118/0x150 [ 2555.654702][ T933] ? __linkwatch_run_queue+0x698/0x7e0 [ 2555.654727][ T933] __linkwatch_run_queue+0x698/0x7e0 [ 2555.654751][ T933] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2555.654775][ T933] ? process_scheduled_works+0x9ef/0x1770 [ 2555.654790][ T933] ? process_scheduled_works+0x9ef/0x1770 [ 2555.654806][ T933] linkwatch_event+0x4c/0x60 [ 2555.654826][ T933] process_scheduled_works+0xad1/0x1770 [ 2555.654852][ T933] ? __pfx_process_scheduled_works+0x10/0x10 [ 2555.654867][ T933] ? do_raw_spin_lock+0x121/0x290 [ 2555.654896][ T933] worker_thread+0x8a0/0xda0 [ 2555.654917][ T933] ? __kthread_parkme+0x7b/0x200 [ 2555.654938][ T933] kthread+0x711/0x8a0 [ 2555.654964][ T933] ? __pfx_worker_thread+0x10/0x10 [ 2555.654980][ T933] ? __pfx_kthread+0x10/0x10 [ 2555.655001][ T933] ? _raw_spin_unlock_irq+0x23/0x50 [ 2555.655025][ T933] ? __pfx_kthread+0x10/0x10 [ 2555.655045][ T933] ret_from_fork+0x510/0xa50 [ 2555.655061][ T933] ? __pfx_ret_from_fork+0x10/0x10 [ 2555.655075][ T933] ? __switch_to+0xc9e/0x1480 [ 2555.655098][ T933] ? __pfx_kthread+0x10/0x10 [ 2555.655118][ T933] ret_from_fork_asm+0x1a/0x30 [ 2555.655145][ T933] [ 2555.655151][ T933] [ 2555.822377][ T933] The buggy address belongs to the physical page: [ 2555.828791][ T933] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805a53a3c0 pfn:0x5a538 [ 2555.838938][ T933] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 2555.846057][ T933] raw: 00fff00000000000 ffffea0000e3e208 ffff8880b8640c00 0000000000000000 [ 2555.854635][ T933] raw: ffff88805a53a3c0 0000000000000000 00000000ffffffff 0000000000000000 [ 2555.863212][ T933] page dumped because: kasan: bad access detected [ 2555.869651][ T933] page_owner tracks the page as freed [ 2555.875016][ T933] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x446dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP), pid 2285, tgid 2271 (syz.5.7476), ts 2554036475053, free_ts 2555626898520 [ 2555.896734][ T933] post_alloc_hook+0x234/0x290 [ 2555.901501][ T933] get_page_from_freelist+0x24e0/0x2580 [ 2555.907045][ T933] __alloc_frozen_pages_noprof+0x181/0x370 [ 2555.912849][ T933] alloc_pages_mpol+0x232/0x4a0 [ 2555.917700][ T933] ___kmalloc_large_node+0x4e/0x150 [ 2555.922892][ T933] __kmalloc_large_node_noprof+0x18/0x90 [ 2555.928529][ T933] __kvmalloc_node_noprof+0x6e/0x920 [ 2555.933869][ T933] alloc_netdev_mqs+0xa6/0x11b0 [ 2555.938743][ T933] tun_set_iff+0x532/0xf00 [ 2555.943171][ T933] __tun_chr_ioctl+0x788/0x1df0 [ 2555.948030][ T933] __ia32_compat_sys_ioctl+0x543/0x840 [ 2555.953496][ T933] __do_fast_syscall_32+0x1dc/0x560 [ 2555.958701][ T933] do_fast_syscall_32+0x34/0x80 [ 2555.963559][ T933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2555.969889][ T933] page last free pid 2271 tgid 2271 stack trace: [ 2555.976214][ T933] __free_frozen_pages+0xbc8/0xd30 [ 2555.981325][ T933] device_release+0x9e/0x1d0 [ 2555.985920][ T933] kobject_put+0x228/0x570 [ 2555.990337][ T933] netdev_run_todo+0xd2c/0xea0 [ 2555.995101][ T933] tun_chr_close+0x13c/0x1c0 [ 2555.999686][ T933] __fput+0x44c/0xa70 [ 2556.003668][ T933] task_work_run+0x1d4/0x260 [ 2556.008264][ T933] exit_to_user_mode_loop+0xef/0x4e0 [ 2556.013544][ T933] __do_fast_syscall_32+0x38e/0x560 [ 2556.018740][ T933] do_fast_syscall_32+0x34/0x80 [ 2556.023596][ T933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2556.030012][ T933] [ 2556.032334][ T933] Memory state around the buggy address: [ 2556.037958][ T933] ffff88805a538b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2556.046012][ T933] ffff88805a538c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2556.054070][ T933] >ffff88805a538c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2556.062124][ T933] ^ [ 2556.068533][ T933] ffff88805a538d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2556.076597][ T933] ffff88805a538d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 2556.084649][ T933] ================================================================== [ 2556.709804][ T933] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2556.717078][ T933] CPU: 0 UID: 0 PID: 933 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 2556.728025][ T933] Tainted: [L]=SOFTLOCKUP [ 2556.732373][ T933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2556.742446][ T933] Workqueue: events_unbound linkwatch_event [ 2556.748361][ T933] Call Trace: [ 2556.751666][ T933] [ 2556.754971][ T933] vpanic+0x1e0/0x670 [ 2556.758995][ T933] panic+0xb9/0xc0 [ 2556.762754][ T933] ? __pfx_panic+0x10/0x10 [ 2556.767223][ T933] ? __linkwatch_run_queue+0x698/0x7e0 [ 2556.772720][ T933] check_panic_on_warn+0x89/0xb0 [ 2556.777698][ T933] ? __linkwatch_run_queue+0x698/0x7e0 [ 2556.783194][ T933] end_report+0x6f/0x140 [ 2556.787466][ T933] kasan_report+0x129/0x150 [ 2556.791984][ T933] ? __linkwatch_run_queue+0x698/0x7e0 [ 2556.797460][ T933] __linkwatch_run_queue+0x698/0x7e0 [ 2556.802768][ T933] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 2556.808599][ T933] ? process_scheduled_works+0x9ef/0x1770 [ 2556.814360][ T933] ? process_scheduled_works+0x9ef/0x1770 [ 2556.820115][ T933] linkwatch_event+0x4c/0x60 [ 2556.824734][ T933] process_scheduled_works+0xad1/0x1770 [ 2556.830315][ T933] ? __pfx_process_scheduled_works+0x10/0x10 [ 2556.836314][ T933] ? do_raw_spin_lock+0x121/0x290 [ 2556.841370][ T933] worker_thread+0x8a0/0xda0 [ 2556.845991][ T933] ? __kthread_parkme+0x7b/0x200 [ 2556.850960][ T933] kthread+0x711/0x8a0 [ 2556.855063][ T933] ? __pfx_worker_thread+0x10/0x10 [ 2556.860208][ T933] ? __pfx_kthread+0x10/0x10 [ 2556.864831][ T933] ? _raw_spin_unlock_irq+0x23/0x50 [ 2556.870064][ T933] ? __pfx_kthread+0x10/0x10 [ 2556.874690][ T933] ret_from_fork+0x510/0xa50 [ 2556.879315][ T933] ? __pfx_ret_from_fork+0x10/0x10 [ 2556.884540][ T933] ? __switch_to+0xc9e/0x1480 [ 2556.889245][ T933] ? __pfx_kthread+0x10/0x10 [ 2556.893861][ T933] ret_from_fork_asm+0x1a/0x30 [ 2556.898663][ T933] [ 2556.902307][ T933] Kernel Offset: disabled [ 2556.906702][ T933] Rebooting in 86400 seconds..