last executing test programs: 2m14.723019324s ago: executing program 1 (id=3362): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x2, 0x3, 0x8}}, 0x28) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000080)={0x0, 0x8, 0x4, 0xf2c, 0x9, 0x0, [{0xe, 0x7fffffffffffffff, 0x2, '\x00', 0x800}, {0x0, 0x200, 0x7, '\x00', 0x407}, {0xffff, 0x8000000000000001, 0x8, '\x00', 0x2c02}, {0x3, 0xdae, 0x9}, {0x2, 0x3, 0x3b, '\x00', 0x2008}, {0x8, 0x7, 0x9, '\x00', 0x808}, {0x6, 0xffffffffffffa888, 0x3, '\x00', 0x2b02}, {0xc, 0x9, 0x2, '\x00', 0x4}, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x7, '\x00', 0x202}]}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x33) ioctl$KVM_TDX_CAPABILITIES(r2, 0xc008aeba, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/2000, {0x2, 0x0, [{}, {}]}}}) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000b80), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000bc0), 0x9) r4 = syz_open_dev$hidraw(&(0x7f0000000c00), 0x8, 0x600) ioctl$HIDIOCGRAWPHYS(r4, 0x80404805, &(0x7f0000000c40)) r5 = socket$key(0xf, 0x3, 0x2) read$FUSE(r1, &(0x7f0000000c80)={0x2020, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000002dc0)) r7 = getegid() ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000002ec0)={0xffffffff, 0x8, {}, {0xee00}, 0x7, 0x6}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0, 0x0}, &(0x7f0000002f40)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002f80)={{{@in=@multicast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000003080)=0xe8) statx(r0, &(0x7f00000030c0)='./file0\x00', 0x1000, 0x40, &(0x7f0000003100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) stat(&(0x7f00000032c0)='./file0\x00', 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000003380)={0x348, 0xfffffffffffffffe, r6, [{{0x3, 0x2, 0xb, 0x2, 0x0, 0xfffffffe, {0x1, 0x6, 0x848, 0xd5d0, 0xb9, 0x0, 0x20ee, 0x3, 0x1, 0xa000, 0x0, 0x0, 0xee01, 0x3, 0x8}}, {0x2, 0x5}}, {{0x5, 0x1, 0x9, 0x4, 0x4, 0x6, {0x6, 0x4, 0x6a5, 0x5, 0x5, 0x8000000000000000, 0x200, 0x4, 0x200, 0x2000, 0x2, 0x0, r7, 0x7, 0x1}}, {0x1, 0x8, 0xc, 0x80000001, 'cgroup.type\x00'}}, {{0x4, 0x1, 0x81, 0x1b, 0xfffffffd, 0x3ff, {0x2, 0x4, 0x9, 0x9, 0x10000, 0x8, 0x9, 0x5, 0x7, 0xa000, 0x80, r8, r9, 0x7, 0x10}}, {0x0, 0xd5, 0xd, 0x2, '\'+\':,^@/$,*#)'}}, {{0x5, 0x3, 0x8, 0xfffffffffffffffb, 0x571, 0x3, {0x2, 0x4b, 0xd, 0xea48, 0xcb08, 0x4, 0xffffff0a, 0xfffffff7, 0x5, 0x4000, 0x4, r10, r11, 0x6, 0xd}}, {0x4, 0x0, 0xc, 0x7, 'cgroup.type\x00'}}, {{0x4, 0x2, 0x5, 0xffffffffffffbe31, 0x2, 0xd, {0x6, 0xfffffffffffffff7, 0x7f, 0x1, 0xbdb, 0x6, 0x0, 0x2, 0x1, 0x6000, 0x7f1, r12, 0x0, 0x3, 0x401}}, {0x2, 0xa79, 0xc, 0x0, 'cgroup.type\x00'}}]}, 0x348) r13 = openat$autofs(0xffffffffffffff9c, &(0x7f0000003700), 0x420000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r13, 0xc0189377, &(0x7f0000003740)={{0x1, 0x1, 0x18, r1, {0xffffffd3, 0x5}}, './file0\x00'}) mount_setattr(r14, &(0x7f0000003780)='./file0\x00', 0x9c00, &(0x7f00000037c0)={0xc, 0xf6, 0x100000, {r14}}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r14, 0xc0106426, &(0x7f0000003840)={0x6, &(0x7f0000003800)=[{}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_CTX(r14, 0xc0086423, &(0x7f0000003880)={r15, 0x2}) recvmmsg(r14, &(0x7f0000008dc0)=[{{&(0x7f00000038c0)=@x25, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000003940)=""/205, 0xcd}, {&(0x7f0000003a40)=""/176, 0xb0}, {&(0x7f0000003b00)=""/177, 0xb1}, {&(0x7f0000003bc0)=""/154, 0x9a}, {&(0x7f0000003c80)}, {&(0x7f0000003cc0)=""/4096, 0x1000}, {&(0x7f0000004cc0)=""/114, 0x72}, {&(0x7f0000004d40)=""/99, 0x63}], 0x8, &(0x7f0000004e40)=""/170, 0xaa}, 0x2}, {{&(0x7f0000004f00)=@rc={0x1f, @none}, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004f80)=""/151, 0x97}, {&(0x7f0000005040)=""/175, 0xaf}, {&(0x7f0000005100)=""/113, 0x71}, {&(0x7f0000005180)=""/82, 0x52}, {&(0x7f0000005200)=""/155, 0x9b}], 0x5, &(0x7f0000005340)=""/30, 0x1e}, 0x8}, {{&(0x7f0000005380)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005580)=[{&(0x7f0000005400)=""/97, 0x61}, {&(0x7f0000005480)=""/239, 0xef}], 0x2, &(0x7f00000055c0)=""/4096, 0x1000}, 0xe44}, {{&(0x7f00000065c0)=@hci, 0x80, &(0x7f0000007740)=[{&(0x7f0000006640)=""/208, 0xd0}, {&(0x7f0000006740)=""/4096, 0x1000}], 0x2, &(0x7f0000007780)=""/234, 0xea}, 0x9}, {{&(0x7f0000007880)=@ax25={{}, [@null, @rose, @netrom, @netrom, @rose, @null, @rose, @default]}, 0x80, &(0x7f0000007a40)=[{&(0x7f0000007900)=""/94, 0x5e}, {&(0x7f0000007980)=""/173, 0xad}], 0x2, &(0x7f0000007a80)=""/70, 0x46}, 0x6}, {{&(0x7f0000007b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000007d80)=[{&(0x7f0000007b80)}, {&(0x7f0000007bc0)=""/246, 0xf6}, {&(0x7f0000007cc0)=""/189, 0xbd}], 0x3, &(0x7f0000007dc0)=""/4096, 0x1000}}], 0x6, 0x12001, 0x0) r16 = fsopen(&(0x7f0000008f40)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r16, 0x1, &(0x7f0000008f80)=')@}}\x00', &(0x7f0000008fc0)='/dev/hidraw#\x00', 0x0) 2m13.570814552s ago: executing program 1 (id=3364): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock2(&(0x7f0000099000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$search(0x1f, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') getpid() syz_open_procfs(0x0, 0x0) unshare(0x22020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x1020, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xfe8, 0x2, [@TCA_CGROUP_ACT={0xfe4, 0x1, [@m_connmark={0xa4, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x88, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x64, 0xf, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x10000000, 0x9, 0x7ff}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x9, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6c, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0xffc, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x2, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x4, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x5, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "5c63276f6c86622447091eb03d61b1ffdd853af779c6f8f41898be5e40ef"}}) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 2m11.532076012s ago: executing program 1 (id=3368): prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x2, 0x10, 0x0, 0x89}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x9d}, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) (async) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="fe"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4040004) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x43}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040805}, 0x40044) (async) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8000, 0x43}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040805}, 0x40044) socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000300)={r1, 0xef, "a9db88a318388f39a523a713ca9d01411e7c25b036be04e7eb3da74dba0efe61a0f24c4ae2138389e1a5e1987cfe1d69d92a7864048d7d1426d99135c753ef835d16fee71364408c8963162e6b9ccf101247d523bfc81439429b74ea02bd8b5f05fb0918825f8defcf645e221cb6842d991fa9eae0105eb1467e2e66818835d36022acf62fad470552f96ce2e56ebe616614642bf90506d598f6ddb8539f0277b40a2f6bb2857ee8e457dcaeafe3f9aaece79de4bfb34e4330065349b2a99dc981f02a9dc5dddae80e4ba4bc6f9466946cb4d19158b2db252ffe08256828711afa49c75ae435365f905fabf4f42bcb"}, &(0x7f0000000400)=0xf7) fchmod(r4, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r2) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x10001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008041}, 0x40) (async) sendmsg$TIPC_CMD_SET_NETID(r2, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x10001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008041}, 0x40) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x10000, &(0x7f00000005c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 2m9.706330459s ago: executing program 1 (id=3374): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = socket$inet6(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e00000000000000000000007a02500003ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) write$UHID_INPUT(r0, &(0x7f0000000840)={0x9, {"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", 0x1000}}, 0x214) 2m9.416089914s ago: executing program 1 (id=3375): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e", 0x8b}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8b", 0x8e}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512f", 0x6b}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2m8.853746512s ago: executing program 1 (id=3378): prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/6, 0x6}], 0x1}, 0x9}], 0x1, 0x40002001, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r5, &(0x7f0000000040), 0x18) 59.082226484s ago: executing program 3 (id=3518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x800041, &(0x7f00000001c0)='discard') 57.768830386s ago: executing program 3 (id=3521): rseq(0x0, 0x0, 0x50000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x58, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 56.514169641s ago: executing program 3 (id=3524): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock2(&(0x7f0000099000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$search(0x1f, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') getpid() syz_open_procfs(0x0, 0x0) unshare(0x22020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=@deltfilter={0x1020, 0x2d, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xfe8, 0x2, [@TCA_CGROUP_ACT={0xfe4, 0x1, [@m_connmark={0xa4, 0x0, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x10000, 0xffffffffffffffff, 0xc, 0xa00}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x88, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x1d, 0x6, "091574d9000173335e5beb79fe5c3f08f569883f9e847a92ca"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_mpls={0x64, 0xf, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x7, 0x10000000, 0x9, 0x7ff}, 0x1}}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_pedit={0xe50, 0x5, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x400}, 0xb1, 0x3}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x2, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x9, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cb, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6c, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0xffc, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x2, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x4, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x40, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x5, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x1020}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "5c63276f6c86622447091eb03d61b1ffdd853af779c6f8f41898be5e40ef"}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 55.11278191s ago: executing program 3 (id=3528): r0 = syz_io_uring_setup(0x937, &(0x7f00000007c0)={0x0, 0x10086f3, 0x2, 0x3, 0x2df}, &(0x7f0000000000), &(0x7f0000000680), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) 54.870182643s ago: executing program 3 (id=3530): r0 = syz_io_uring_setup(0x937, &(0x7f00000007c0)={0x0, 0x10086f3, 0x2, 0x3, 0x2df}, &(0x7f0000000000), &(0x7f0000000680), &(0x7f0000000000)) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008bd2878000000000000010902240001000000000904000009030001000921ffff0c01222800090581031000000bfec9089594d9c3d60e9b28b8ababd87537165af2d5c9b94f8e7d6ff3132aa1dd2826782faa5a"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="40082a0000002a31f70ba38103000000000000000854f3"], 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x9b, r4, 0x917, 0x70bd24, 0x0, {0x1, 0x0, 0xffff}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x620b}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x5452, &(0x7f000000d840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) io_uring_enter(r0, 0x0, 0x0, 0x9, &(0x7f0000000040), 0x18) 49.248263768s ago: executing program 3 (id=3545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x2ca, 0x0, 0x1000}}}}}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000002ac0)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1, 0x1}, {0x7c, 0xff, 0x5}, {0x6, 0x1, 0x81, 0x2b}]}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_setup(0x7d, 0x0) 11.201913527s ago: executing program 0 (id=3659): r0 = socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1a1841, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10.755989516s ago: executing program 0 (id=3660): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mlock2(&(0x7f0000099000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) keyctl$search(0x1f, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') getpid() syz_open_procfs(0x0, 0x0) unshare(0x22020400) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x48}}, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000540)={'team_slave_1\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x1e, "5c63276f6c86622447091eb03d61b1ffdd853af779c6f8f41898be5e40ef"}}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x1) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 10.129571694s ago: executing program 4 (id=3662): unshare(0x6020400) r0 = add_key$fscrypt_v1(&(0x7f0000001c00), &(0x7f0000001c40)={'fscrypt:', @desc2}, &(0x7f0000001c80)={0x0, "e5455594ad217555d1395340dbc16f783c852f4e99bb4a906b5f007abc1459d1ed825d28e1db7f6ea96ac5bb912fdab0db51a5b334e2bc9e21b731a58edd6d14", 0x1d}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0) keyctl$get_keyring_id(0x0, r0, 0xd349) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) 9.487127306s ago: executing program 4 (id=3664): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f21", 0x5f}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.40742597s ago: executing program 4 (id=3665): r0 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) r1 = dup(r0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/reserved_size', 0x20002, 0x26) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0x7, 0x4}) (fail_nth: 1) 8.23695225s ago: executing program 2 (id=3666): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xa0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0x883, 0x0, 0x80000, 0x8000, 0x0, 0x0, r2, 0x5, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) (fail_nth: 1) 7.569760608s ago: executing program 4 (id=3667): r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x20000000000006) sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x4, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x2400c098}, 0x80c0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4001850}, 0x24000840) socket$kcm(0xa, 0x922000000003, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) 7.372687658s ago: executing program 0 (id=3668): unshare(0x2000400) r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x201) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)={0x6}) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x4, 0x9}) r4 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)="1d", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) r5 = add_key$keyring(&(0x7f0000000880), &(0x7f00000008c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate_iov(0x14, r4, &(0x7f0000000800)=[{&(0x7f0000000140)="0f77b96909837c7927ebb6b303dacc8f50fec8f3af6e19a750bc4919a72429b38dc551c1ba6c154c738b221608dd7d7325080732113adcc4fb17c992606e42eb323b787c9e59ce31db2a7fa13ba91c112a66c97cb89a667c6a396b6b2b2d5632e640e5d05c526ec7b4bfd2cce039184c955cfab27fb160f39992f6266c2941cccb4d2c62521180892a0902bb2605dd4ec558226a7ac3d8", 0x97}, {&(0x7f0000000200)="ee164edd87c5c368a789a5dd67145924d79b07e2d17faf7d3655aa1c96882b350984e30a4e1d31dc23fa2fd91e7f4366fe05ccc42753f7374f0ba03d610f5ebe8440a73d5d653f57078036e62c28bb70afabef78c60e70e3c659f69e82", 0x5d}, {&(0x7f00000002c0)="c143f54deca846442213121018439d725de62d5063cb25037e7f16b6fa5b6a79cf84d6986c9d4f", 0x27}, {&(0x7f0000000300)="3e0cfbf9beaf1e3032f3a89b8044c397a7d9c3e72b11bfc8121bf90a685d1b506dcea61a8a174ef2252a13326584f15ea528db42938fb7de49ca6b8bb2f90c272ecb", 0x42}, {&(0x7f0000000380)="e536b67740650afa507930e49d620af52625ff4a9f90bfddb6bcceaad0b6acbac21ad4ffbfabfdd0627a9f048c522718a81325ddb7c497cad780bb9d00688965f70ea1f1a324fecc64417332108ad41d3498ad8c3035c6970fc1", 0x5a}, {&(0x7f0000000600)="eb2df9c9f43dfde95824c515bcda2c46c1bf0fa6c340e88abdec983868df58a1c1003adf8204a49cd53f077b9bf604443a11946c76113fa9b8c746cccecf12792ee5f6331b23f3f657a50a40cf43f5313bb2043ca0b3c580b6b95663f81e83ba7433938997e07f677eed738fb64300e4d2a7acdca5e3459285f95340092080f4cf24a06d187684120e821a7c1849f029d10a1d3c53e9ae8fc122aa1feefbe122a1032e4943bab81559bb8a7becbc964872ee54a4ffdedba0f4f3cf4c11349dfae9d695183d2ddcc713b5c8e4e9cd088794b2c384547b4341abde3949de18f8d3bd2e52974a4f", 0xe6}, {&(0x7f0000000700)="effd93543956037cd3c3d1623acf47d60b3fb1359dc5a1d83f93ef0079e7a57dcb2391c1410dfad984c0f0ef61673fb52371f2770febaccfebc81261ea46c6d88244bba3e2a23033595e28f6d1e22b6298a8af0541d36c5994356b087df3102868457d2178eba8025a1a00b7fe2e411488812d3bff1c14b17e1802426d78ecd3adf1a66f985be5c9d2f117c93e1dddcdbd457b10ec292c0d8e175b88955c0ca0f6dc199900bf03222f4c62b00ec471bb54c63c902a59086d6e7d7a228139115be726299f04b1db7d", 0xc8}], 0x7, r5) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) fcntl$setsig(r6, 0xa, 0x1f) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = inotify_init() r8 = open(&(0x7f0000002200)='./file0\x00', 0x9841, 0xa0) fcntl$setlease(r8, 0x400, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x1000101) close_range(r7, 0xffffffffffffffff, 0x0) r9 = memfd_secret(0x0) ioctl$BINDER_SET_CONTEXT_MGR(r9, 0x40046207, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0x3) close(r0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, 0x0, 0x0) 7.064126153s ago: executing program 2 (id=3669): prctl$PR_SCHED_CORE(0x39, 0x0, 0x0, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000000, 0x4, &(0x7f0000006680)) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffd0}, @generic={0x66, 0x8, 0x0, 0x0, 0xffffffd0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x600}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/6, 0x6}], 0x1}, 0x9}], 0x1, 0x40002001, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000240)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) io_uring_setup(0x4822, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0xfb}) connect$caif(0xffffffffffffffff, &(0x7f0000000040), 0x18) 5.513844548s ago: executing program 2 (id=3670): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = semget(0x3, 0x6, 0x79d) semctl$SETVAL(r1, 0x1, 0x10, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x48, 0x37, 0x0, 0x9}, {0x0, 0x1, 0xf7, 0xfffff00c}, {0x6, 0x6, 0x8, 0x57c}]}, 0x24) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000043f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c000280080003404c00028008000340"], 0x164}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.160410987s ago: executing program 0 (id=3671): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x341) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000000300)={{0x80}, 'port1\x00', 0x72, 0x111cf9, 0x8, 0x8000008, 0x3, 0x7, 0x7, 0x0, 0xb, 0x20}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0xfd03}, 0x4) close(r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000200)={0x7, 0x747, 0x0, 'queue0\x00', 0x3ff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'team0\x00'}) syz_emit_ethernet(0x2e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x24, 0x0, @void}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6}}}}}}}, 0x0) sendmsg$can_raw(r4, 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000003c0), 0xaa02) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x6, r1, &(0x7f0000000440), 0x0, 0x2a21}]) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0}) 4.793827659s ago: executing program 2 (id=3672): setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000440)={0x81, 0x8, 0x0, 0x1}, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x1b, 0x4e23, @empty}}}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42442, 0x1c1) socket(0x28, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, &(0x7f00000001c0)) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000003, 0xfffffefa, 0x6}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) 4.522778469s ago: executing program 2 (id=3673): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/vmcoreinfo', 0xe8bc956a668f3e3f, 0x146) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0x1, 0x1}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c00000020c80c86d8852e1d570000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x119d00, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x2005}], 0x1, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000040)=0xfe) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0301, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000240)=@ethtool_test={0x1a, 0x5, 0x10, 0x1, [0x3]}}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x7, &(0x7f00000001c0)=[{0x8, 0x0, 0x43, 0x7fffffff}, {0x400, 0x3, 0x5, 0x7a}, {0x0, 0x5, 0x8, 0x9}, {0xcd5d, 0x1, 0x3, 0x2}, {0x5, 0x8, 0xb, 0xc}, {0xe, 0xd, 0x9, 0xfffff49c}, {0x4, 0x8, 0xf, 0x9}]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 1.492324093s ago: executing program 0 (id=3674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f21", 0x5f}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede488", 0x6e}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}], 0x48}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.028420221s ago: executing program 2 (id=3675): r0 = syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000180)) syz_usb_connect$uac1(0x0, 0x98, &(0x7f0000000080)=ANY=[], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) 822.989954ms ago: executing program 0 (id=3676): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x49108}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5735, 0x3}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600296f00000000fddbdf2522000000", @ANYRES32=0x0, @ANYBLOB="140001"], 0x2c}}, 0x24080) getsockopt$ax25_int(r1, 0x101, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x22) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000240)={'veth1\x00', {0x2, 0x4e24, @private=0xa010102}}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000200)={0x1, 0x6, 0x300, 0x4, 0x1f, 0xfffe, 0x0}) brk(0x20000005b000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000009c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc4, 0xc4, 0x2, [@union={0xc, 0x9, 0x0, 0x5, 0x0, 0xb6, [{0xffff, 0x7, 0x2}, {0x9, 0x5, 0xdb}, {0x5, 0x4, 0xfffffffd}, {0x3, 0xbde, 0x7f}, {0xc, 0x4, 0x3}, {0xb, 0x1, 0xffffffff}, {0x5, 0x5, 0x7fffffff}, {0xe, 0x2, 0x76f}, {0xd, 0x1, 0x1ba921a4}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x80000b, 0x1}]}, @fwd={0xc}, @func={0x3, 0x0, 0x0, 0xc, 0x1}, @typedef={0x9, 0x0, 0x0, 0x8, 0x4}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x1}]}]}}, &(0x7f0000000680)=""/209, 0xde, 0xd1, 0x1, 0x90}, 0x28) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000b0ff0000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000006b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000002000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@type_tag={0x1, 0x0, 0x0, 0x12, 0x5}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x1a6, [{0x4, 0x4}]}, @typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x3}, @float={0x6, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x61, 0x61, 0x5f, 0x5f, 0x2e]}}, 0x0, 0x67}, 0x28) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1b1c, 0x1b1c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0xc0, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0x2, {0x9, 0x21, 0x7, 0x8, 0x1, {0x22, 0x40d}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xd7, 0x1b, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x4, 0xa, 0x5}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x62, 0x4, 0xf7, 0x8, 0x7}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x4, [{0x2e, &(0x7f0000000200)=@string={0x2e, 0x3, "e7b7dfe49a5d62e466fdb83066cf523f6968e6f4002ae51ff247f4c92ca107a008802217d25b46c3d4952f98"}}, {0xcd, &(0x7f0000000300)=@string={0xcd, 0x3, "17af5072c615f29a3f342a75927b8c9b3f22447bdc0cedf041e84e5f8ae269aee154aded66bed49c889bf2e1570e026eabfa0945c571774a753fa783bcc60dd2dbce9d909f3c77db8f5306bd94e1ed1bed8dace1985181125ac92839df7b6805d70abc2b446a4fdfaa370878e0e6cd353458b94f8fd5878ee3f29afe6a443df3847c10d78cbb8e3a1df376a9847897292bed61152e240163182d36fb03b1cf2a6f29c8fc9f25fa20195db3938c4193ac032a8ce33a48d44bf102bafeb9a8f008b6793882ec3f754284ed2d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x816}}, {0x58, &(0x7f0000000440)=@string={0x58, 0x3, "7504579813581cd94143d8e2f753b29d07331ca88ae186162409f5a81f916814323b0f1256897bc73349fd7f87dc17f5b722d2b20114acb54bf636852dd3b186b764c13cdb06ae487ca17c70b35c804795ed17adb48a"}}]}) 155.257314ms ago: executing program 4 (id=3677): pipe(&(0x7f0000000080)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 4 (id=3678): syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000a13de30840205029f1850102030109022d0002000000000904210001d553e5000905060500000000000904"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): eed USB device number 52 using dummy_hcd [ 710.089141][ T10] usb 4-1: device descriptor read/64, error -71 [ 710.397393][ T823] usb 5-1: Using ep0 maxpacket: 16 [ 710.953088][T15338] veth0_vlan: entered promiscuous mode [ 710.980850][ T823] usb 5-1: config 1 interface 0 has no altsetting 0 [ 710.987055][ T823] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 710.987089][ T823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.987109][ T823] usb 5-1: Product: syz [ 710.987122][ T823] usb 5-1: Manufacturer: syz [ 710.987136][ T823] usb 5-1: SerialNumber: syz [ 711.029234][ T10] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 711.040538][T15338] veth1_vlan: entered promiscuous mode [ 711.124788][T15338] veth0_macvtap: entered promiscuous mode [ 711.137522][T15338] veth1_macvtap: entered promiscuous mode [ 711.159211][ T10] usb 4-1: device descriptor read/64, error -71 [ 711.186720][T15338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.260675][T15338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.280245][ T10] usb usb4-port1: attempt power cycle [ 711.405784][ T165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.433204][ T165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.435285][ T165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.474633][ T165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.661366][ T823] usbhid 5-1:1.0: can't add hid device: -71 [ 711.661505][ T823] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 711.679414][ T10] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 711.706285][ T10] usb 4-1: device descriptor read/8, error -71 [ 711.752100][ T823] usb 5-1: USB disconnect, device number 52 [ 711.994758][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 712.024471][ T10] usb 4-1: device descriptor read/8, error -71 [ 712.209808][ T10] usb usb4-port1: unable to enumerate USB device [ 714.463768][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.463791][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 714.863921][ T5822] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 715.012906][ T5822] usb 5-1: device descriptor read/64, error -71 [ 715.062390][ T3530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.062416][ T3530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.145284][ T5891] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 715.289601][ T5822] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 715.314328][ T5891] usb 3-1: Using ep0 maxpacket: 32 [ 715.318961][ T5891] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 715.319080][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.319103][ T5891] usb 3-1: Product: syz [ 715.319119][ T5891] usb 3-1: Manufacturer: syz [ 715.319132][ T5891] usb 3-1: SerialNumber: syz [ 715.333642][ T5891] usb 3-1: config 0 descriptor?? [ 715.348482][ T5891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 715.436817][ T5822] usb 5-1: device descriptor read/64, error -71 [ 715.561262][ T5822] usb usb5-port1: attempt power cycle [ 716.535854][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.536471][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.538962][ T5891] gspca_ov534_9: reg_w failed -110 [ 716.780306][ T5822] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 716.826583][ T5822] usb 5-1: device descriptor read/8, error -71 [ 717.852986][ T5891] gspca_ov534_9: Unknown sensor 0000 [ 717.853099][ T5891] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 717.919113][ T5822] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 717.923712][ T5891] usb 3-1: USB disconnect, device number 33 [ 717.949415][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 717.949548][ T5822] usb 5-1: device descriptor read/8, error -32 [ 718.070606][ T5822] usb usb5-port1: unable to enumerate USB device [ 719.128062][T15922] FAULT_INJECTION: forcing a failure. [ 719.128062][T15922] name failslab, interval 1, probability 0, space 0, times 0 [ 719.128101][T15922] CPU: 1 UID: 0 PID: 15922 Comm: syz.2.3381 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 719.128125][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.128137][T15922] Call Trace: [ 719.128146][T15922] [ 719.128155][T15922] dump_stack_lvl+0xe8/0x150 [ 719.128196][T15922] should_fail_ex+0x46b/0x600 [ 719.128241][T15922] should_failslab+0xa8/0x100 [ 719.128265][T15922] __kmalloc_noprof+0xdf/0x7b0 [ 719.128284][T15922] ? kfree+0x4d/0x6c0 [ 719.128318][T15922] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.128350][T15922] tomoyo_realpath_from_path+0xe3/0x5d0 [ 719.128377][T15922] ? tomoyo_domain+0xd8/0x130 [ 719.128406][T15922] ? tomoyo_path_number_perm+0x219/0x630 [ 719.128427][T15922] tomoyo_path_number_perm+0x246/0x630 [ 719.128450][T15922] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 719.128470][T15922] ? __lock_acquire+0x6b5/0x2cf0 [ 719.128498][T15922] ? do_raw_spin_lock+0x12b/0x2f0 [ 719.128550][T15922] ? __fget_files+0x2a/0x420 [ 719.128586][T15922] ? __fget_files+0x2a/0x420 [ 719.128611][T15922] ? __fget_files+0x3a6/0x420 [ 719.128635][T15922] ? __fget_files+0x2a/0x420 [ 719.128666][T15922] security_file_ioctl+0xc3/0x2a0 [ 719.128691][T15922] __se_sys_ioctl+0x47/0x170 [ 719.128712][T15922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.128739][T15922] do_syscall_64+0x15f/0xf80 [ 719.128763][T15922] ? trace_irq_disable+0x3b/0x140 [ 719.128787][T15922] ? clear_bhb_loop+0x40/0x90 [ 719.128812][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.128831][T15922] RIP: 0033:0x7f217c3cc819 [ 719.128850][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.128868][T15922] RSP: 002b:00007f217a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.128889][T15922] RAX: ffffffffffffffda RBX: 00007f217c645fa0 RCX: 00007f217c3cc819 [ 719.128902][T15922] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 719.128914][T15922] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 719.128926][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.128944][T15922] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 719.128976][T15922] [ 719.133525][T15922] ERROR: Out of memory at tomoyo_realpath_from_path. [ 719.528645][T15934] FAULT_INJECTION: forcing a failure. [ 719.528645][T15934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.528696][T15934] CPU: 0 UID: 0 PID: 15934 Comm: syz.0.3385 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 719.528720][T15934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 719.528733][T15934] Call Trace: [ 719.528742][T15934] [ 719.528751][T15934] dump_stack_lvl+0xe8/0x150 [ 719.528789][T15934] should_fail_ex+0x46b/0x600 [ 719.528822][T15934] strncpy_from_user+0x36/0x2b0 [ 719.528868][T15934] path_removexattrat+0x130/0x750 [ 719.528900][T15934] ? __pfx_path_removexattrat+0x10/0x10 [ 719.528922][T15934] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 719.528977][T15934] ? __pfx_ksys_write+0x10/0x10 [ 719.529001][T15934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.529019][T15934] __x64_sys_fremovexattr+0x62/0x70 [ 719.529055][T15934] do_syscall_64+0x15f/0xf80 [ 719.529076][T15934] ? trace_irq_disable+0x3b/0x140 [ 719.529095][T15934] ? clear_bhb_loop+0x40/0x90 [ 719.529120][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.529137][T15934] RIP: 0033:0x7f92da28c819 [ 719.529155][T15934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.529171][T15934] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 719.529190][T15934] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 719.529204][T15934] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 719.529215][T15934] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 719.529226][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 719.529236][T15934] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 719.529261][T15934] [ 719.766863][T15936] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 719.766911][T15936] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 719.766960][T15936] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 719.846103][T15936] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 719.904419][T15936] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 721.494086][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 721.579927][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 721.603693][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 721.637124][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 721.641017][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 722.701410][T15956] NILFS (nullb0): couldn't find nilfs on the device [ 722.787933][T15951] ALSA: mixer_oss: invalid OSS volume '' [ 725.723129][T15974] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3393'. [ 725.749379][ T5135] Bluetooth: hci2: command tx timeout [ 726.123168][T15968] input: syz1 as /devices/virtual/input/input45 [ 727.038422][T15980] FAULT_INJECTION: forcing a failure. [ 727.038422][T15980] name failslab, interval 1, probability 0, space 0, times 0 [ 727.038451][T15980] CPU: 1 UID: 0 PID: 15980 Comm: syz.0.3396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 727.038464][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.038472][T15980] Call Trace: [ 727.038478][T15980] [ 727.038484][T15980] dump_stack_lvl+0xe8/0x150 [ 727.038509][T15980] should_fail_ex+0x46b/0x600 [ 727.038528][T15980] should_failslab+0xa8/0x100 [ 727.038542][T15980] __kmalloc_noprof+0xdf/0x7b0 [ 727.038552][T15980] ? kfree+0x4d/0x6c0 [ 727.038567][T15980] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 727.038584][T15980] tomoyo_realpath_from_path+0xe3/0x5d0 [ 727.038600][T15980] ? tomoyo_domain+0xd8/0x130 [ 727.038615][T15980] ? tomoyo_path_number_perm+0x219/0x630 [ 727.038627][T15980] tomoyo_path_number_perm+0x246/0x630 [ 727.038640][T15980] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 727.038651][T15980] ? __lock_acquire+0x6b5/0x2cf0 [ 727.038673][T15980] ? do_raw_spin_lock+0x12b/0x2f0 [ 727.038700][T15980] ? __fget_files+0x2a/0x420 [ 727.038716][T15980] ? __fget_files+0x2a/0x420 [ 727.038729][T15980] ? __fget_files+0x3a6/0x420 [ 727.038742][T15980] ? __fget_files+0x2a/0x420 [ 727.038757][T15980] security_file_ioctl+0xc3/0x2a0 [ 727.038771][T15980] __se_sys_ioctl+0x47/0x170 [ 727.038783][T15980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.038796][T15980] do_syscall_64+0x15f/0xf80 [ 727.038810][T15980] ? trace_irq_disable+0x3b/0x140 [ 727.038822][T15980] ? clear_bhb_loop+0x40/0x90 [ 727.038836][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.038848][T15980] RIP: 0033:0x7f92da28c819 [ 727.038860][T15980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.038869][T15980] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 727.038882][T15980] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 727.038890][T15980] RDX: 0000200000000040 RSI: 000000004010ae68 RDI: 0000000000000004 [ 727.038898][T15980] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 727.038905][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.038911][T15980] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 727.038928][T15980] [ 727.038935][T15980] ERROR: Out of memory at tomoyo_realpath_from_path. [ 728.043231][ T5135] Bluetooth: hci2: command tx timeout [ 730.140381][ T5135] Bluetooth: hci2: command tx timeout [ 731.615936][ T165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.885170][T16019] FAULT_INJECTION: forcing a failure. [ 731.885170][T16019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.885205][T16019] CPU: 0 UID: 0 PID: 16019 Comm: syz.0.3408 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 731.885223][T16019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 731.885233][T16019] Call Trace: [ 731.885240][T16019] [ 731.885246][T16019] dump_stack_lvl+0xe8/0x150 [ 731.885279][T16019] should_fail_ex+0x46b/0x600 [ 731.885303][T16019] _copy_from_user+0x2d/0xb0 [ 731.885327][T16019] ___sys_sendmsg+0x1c6/0x360 [ 731.885343][T16019] ? __lock_acquire+0x6b5/0x2cf0 [ 731.885365][T16019] ? __pfx____sys_sendmsg+0x10/0x10 [ 731.885403][T16019] ? __fget_files+0x2a/0x420 [ 731.885423][T16019] ? __fget_files+0x3a6/0x420 [ 731.885449][T16019] __x64_sys_sendmsg+0x1c3/0x2a0 [ 731.885471][T16019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 731.885494][T16019] ? __pfx_ksys_write+0x10/0x10 [ 731.885515][T16019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.885533][T16019] do_syscall_64+0x15f/0xf80 [ 731.885553][T16019] ? trace_irq_disable+0x3b/0x140 [ 731.885571][T16019] ? clear_bhb_loop+0x40/0x90 [ 731.885592][T16019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.885608][T16019] RIP: 0033:0x7f92da28c819 [ 731.885626][T16019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.885640][T16019] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 731.885657][T16019] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 731.885667][T16019] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 731.885677][T16019] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 731.885686][T16019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.885695][T16019] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 731.885718][T16019] [ 732.153782][T16023] 9p: Could not find request transport: fI;d [ 732.291277][ T5135] Bluetooth: hci2: command tx timeout [ 733.644502][T16028] FAULT_INJECTION: forcing a failure. [ 733.644502][T16028] name failslab, interval 1, probability 0, space 0, times 0 [ 733.644537][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.4.3412 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 733.644561][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 733.644574][T16028] Call Trace: [ 733.644582][T16028] [ 733.644591][T16028] dump_stack_lvl+0xe8/0x150 [ 733.644631][T16028] should_fail_ex+0x46b/0x600 [ 733.644664][T16028] should_failslab+0xa8/0x100 [ 733.644688][T16028] __kmalloc_noprof+0xdf/0x7b0 [ 733.644708][T16028] ? kfree+0x4d/0x6c0 [ 733.644734][T16028] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 733.644768][T16028] tomoyo_realpath_from_path+0xe3/0x5d0 [ 733.644804][T16028] ? tomoyo_domain+0xd8/0x130 [ 733.644834][T16028] ? tomoyo_path_number_perm+0x219/0x630 [ 733.644856][T16028] tomoyo_path_number_perm+0x246/0x630 [ 733.644879][T16028] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 733.644899][T16028] ? __lock_acquire+0x6b5/0x2cf0 [ 733.644928][T16028] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.644979][T16028] ? __fget_files+0x2a/0x420 [ 733.645010][T16028] ? __fget_files+0x2a/0x420 [ 733.645034][T16028] ? __fget_files+0x3a6/0x420 [ 733.645062][T16028] ? __fget_files+0x2a/0x420 [ 733.645091][T16028] security_file_ioctl+0xc3/0x2a0 [ 733.645116][T16028] __se_sys_ioctl+0x47/0x170 [ 733.645137][T16028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.645159][T16028] do_syscall_64+0x15f/0xf80 [ 733.645183][T16028] ? trace_irq_disable+0x3b/0x140 [ 733.645204][T16028] ? clear_bhb_loop+0x40/0x90 [ 733.645228][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.645248][T16028] RIP: 0033:0x7fc33b67c819 [ 733.645267][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.645284][T16028] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 733.645305][T16028] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 733.645320][T16028] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 733.645333][T16028] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 733.645345][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.645357][T16028] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 733.645389][T16028] [ 733.645457][T16028] ERROR: Out of memory at tomoyo_realpath_from_path. [ 737.322716][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 738.948139][T16062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3420'. [ 739.008253][ T165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 739.076579][ T5891] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 739.280863][ T5891] usb 4-1: Using ep0 maxpacket: 32 [ 739.300711][ T5891] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 739.300750][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.300773][ T5891] usb 4-1: Product: syz [ 739.300790][ T5891] usb 4-1: Manufacturer: syz [ 739.300806][ T5891] usb 4-1: SerialNumber: syz [ 739.347574][ T5891] usb 4-1: config 0 descriptor?? [ 739.365096][ T5891] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 739.371488][T16071] FAULT_INJECTION: forcing a failure. [ 739.371488][T16071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.371524][T16071] CPU: 0 UID: 0 PID: 16071 Comm: syz.4.3422 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 739.371547][T16071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 739.371559][T16071] Call Trace: [ 739.371568][T16071] [ 739.371576][T16071] dump_stack_lvl+0xe8/0x150 [ 739.371616][T16071] should_fail_ex+0x46b/0x600 [ 739.371648][T16071] _copy_to_user+0x31/0xb0 [ 739.371679][T16071] simple_read_from_buffer+0xe1/0x170 [ 739.371711][T16071] proc_fail_nth_read+0x1be/0x230 [ 739.371742][T16071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.371771][T16071] ? rw_verify_area+0x2ac/0x4e0 [ 739.371799][T16071] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 739.371825][T16071] vfs_read+0x212/0xa80 [ 739.371861][T16071] ? __pfx_vfs_read+0x10/0x10 [ 739.371890][T16071] ? move_addr_to_user+0x10b/0x210 [ 739.371920][T16071] ? __sys_getsockname+0x24e/0x2d0 [ 739.371948][T16071] ? __pfx___sys_getsockname+0x10/0x10 [ 739.371981][T16071] ksys_read+0x156/0x270 [ 739.372001][T16071] ? __pfx_ksys_read+0x10/0x10 [ 739.372027][T16071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.372048][T16071] do_syscall_64+0x15f/0xf80 [ 739.372071][T16071] ? trace_irq_disable+0x3b/0x140 [ 739.372094][T16071] ? clear_bhb_loop+0x40/0x90 [ 739.372117][T16071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.372137][T16071] RIP: 0033:0x7fc33b63d04e [ 739.372157][T16071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 739.372186][T16071] RSP: 002b:00007fc3398cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.372207][T16071] RAX: ffffffffffffffda RBX: 00007fc3398ce6c0 RCX: 00007fc33b63d04e [ 739.372221][T16071] RDX: 000000000000000f RSI: 00007fc3398ce0a0 RDI: 0000000000000004 [ 739.372233][T16071] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 739.372245][T16071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.372257][T16071] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 739.372286][T16071] [ 739.446947][T15939] chnl_net:caif_netlink_parms(): no params data found [ 739.553849][ T5135] Bluetooth: hci5: unexpected event for opcode 0x2035 [ 739.928823][T16082] sd 0:0:1:0: device reset [ 739.974669][ T823] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 740.059067][ T5891] gspca_ov534_9: reg_w failed -71 [ 740.117659][ T823] usb 3-1: device descriptor read/64, error -71 [ 740.423545][ T5891] gspca_ov534_9: Unknown sensor 0000 [ 740.423670][ T5891] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 740.428615][ T5891] usb 4-1: USB disconnect, device number 79 [ 740.519187][ T823] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 741.356701][ T165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.379124][ T823] usb 3-1: device descriptor read/64, error -71 [ 741.489727][ T823] usb usb3-port1: attempt power cycle [ 741.593806][T15939] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.594006][T15939] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.594206][T15939] bridge_slave_0: entered allmulticast mode [ 741.596869][T15939] bridge_slave_0: entered promiscuous mode [ 741.634269][T15939] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.634486][T15939] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.634699][T15939] bridge_slave_1: entered allmulticast mode [ 741.637415][T15939] bridge_slave_1: entered promiscuous mode [ 741.709787][T15939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.713815][T15939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.773758][T15939] team0: Port device team_slave_0 added [ 741.777684][T15939] team0: Port device team_slave_1 added [ 741.829147][ T823] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 741.831295][T15939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.831311][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.831337][T15939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.834304][T15939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.834318][T15939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.834344][T15939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.899970][ T823] usb 3-1: device descriptor read/8, error -71 [ 742.989263][ T823] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 743.199187][ T823] usb 3-1: device not accepting address 37, error -71 [ 743.199828][ T823] usb usb3-port1: unable to enumerate USB device [ 743.357531][T16106] 9p: Bad value for 'rfdno' [ 743.513250][ T5891] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 743.663845][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 743.666985][ T5891] usb 5-1: unable to get BOS descriptor or descriptor too short [ 743.684057][ T5891] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 743.686693][ T5891] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 743.686730][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.686751][ T5891] usb 5-1: Product: syz [ 743.686767][ T5891] usb 5-1: Manufacturer: syz [ 743.686782][ T5891] usb 5-1: SerialNumber: syz [ 743.695842][T16123] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3435'. [ 743.826555][ T165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.052377][T16114] program syz.4.3432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 744.129868][T15939] hsr_slave_0: entered promiscuous mode [ 744.131318][T15939] hsr_slave_1: entered promiscuous mode [ 744.132208][T15939] debugfs: 'hsr0' already exists in 'hsr' [ 744.132233][T15939] Cannot create hsr debugfs directory [ 744.150147][ T5891] usb 5-1: Cannot retrieve CPort count: -71 [ 744.150203][ T5891] usb 5-1: Cannot retrieve CPort count: -71 [ 744.150241][ T5891] es2_ap_driver 5-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 744.174666][ T5891] usb 5-1: USB disconnect, device number 57 [ 744.481123][T16131] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 16131 comm: syz.2.3437) [ 745.531609][ T824] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 745.596074][ T37] kauditd_printk_skb: 48 callbacks suppressed [ 745.596094][ T37] audit: type=1326 audit(1776879397.142:3039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.597464][ T37] audit: type=1326 audit(1776879397.142:3040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.598622][ T37] audit: type=1326 audit(1776879397.142:3041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.600576][ T37] audit: type=1326 audit(1776879397.142:3042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.682168][ T37] audit: type=1326 audit(1776879397.212:3043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f217c3cc582 code=0x7ffc0000 [ 745.708941][ T37] audit: type=1326 audit(1776879397.232:3044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f217c3cc582 code=0x7ffc0000 [ 745.739628][ T37] audit: type=1326 audit(1776879397.292:3045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.740406][ T37] audit: type=1326 audit(1776879397.292:3046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.801803][ T37] audit: type=1326 audit(1776879397.352:3047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 745.802802][ T37] audit: type=1326 audit(1776879397.352:3048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16130 comm="syz.2.3437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f217c3cc582 code=0x7ffc0000 [ 747.820027][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.820099][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.027061][T16150] FAULT_INJECTION: forcing a failure. [ 748.027061][T16150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.027097][T16150] CPU: 1 UID: 0 PID: 16150 Comm: syz.4.3441 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 748.027119][T16150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 748.027132][T16150] Call Trace: [ 748.027141][T16150] [ 748.027150][T16150] dump_stack_lvl+0xe8/0x150 [ 748.027188][T16150] should_fail_ex+0x46b/0x600 [ 748.027219][T16150] _copy_from_user+0x2d/0xb0 [ 748.027249][T16150] ___sys_sendmsg+0x1c6/0x360 [ 748.027271][T16150] ? __lock_acquire+0x6b5/0x2cf0 [ 748.027299][T16150] ? __pfx____sys_sendmsg+0x10/0x10 [ 748.027323][T16150] ? kstrtouint+0x6e/0xe0 [ 748.027369][T16150] ? __fget_files+0x2a/0x420 [ 748.027394][T16150] ? __fget_files+0x3a6/0x420 [ 748.027426][T16150] __sys_sendmmsg+0x282/0x4e0 [ 748.027450][T16150] ? __pfx___sys_sendmmsg+0x10/0x10 [ 748.027475][T16150] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 748.027517][T16150] ? ksys_write+0x248/0x270 [ 748.027538][T16150] ? __pfx_ksys_write+0x10/0x10 [ 748.027563][T16150] __x64_sys_sendmmsg+0xa0/0xc0 [ 748.027592][T16150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.027612][T16150] do_syscall_64+0x15f/0xf80 [ 748.027633][T16150] ? trace_irq_disable+0x3b/0x140 [ 748.027658][T16150] ? clear_bhb_loop+0x40/0x90 [ 748.027682][T16150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.027702][T16150] RIP: 0033:0x7fc33b67c819 [ 748.027720][T16150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.027736][T16150] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 748.027758][T16150] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 748.027772][T16150] RDX: 0000000000000001 RSI: 0000200000000980 RDI: 0000000000000003 [ 748.027784][T16150] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 748.027797][T16150] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.027816][T16150] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 748.027846][T16150] [ 748.456724][T16153] netlink: 'syz.2.3443': attribute type 10 has an invalid length. [ 748.509197][ T824] usb 4-1: device descriptor read/64, error -71 [ 748.779200][ T824] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 748.966016][T16161] NILFS (nullb0): couldn't find nilfs on the device [ 749.400517][T16154] ALSA: mixer_oss: invalid OSS volume '' [ 749.802809][T16168] FAULT_INJECTION: forcing a failure. [ 749.802809][T16168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 749.802847][T16168] CPU: 0 UID: 0 PID: 16168 Comm: syz.0.3447 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 749.802878][T16168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 749.802890][T16168] Call Trace: [ 749.802897][T16168] [ 749.802905][T16168] dump_stack_lvl+0xe8/0x150 [ 749.802948][T16168] should_fail_ex+0x46b/0x600 [ 749.802979][T16168] _copy_from_user+0x2d/0xb0 [ 749.803008][T16168] sk_setsockopt+0x2b3/0x2a90 [ 749.803035][T16168] ? get_pid_task+0x20/0x1f0 [ 749.803057][T16168] ? get_pid_task+0x20/0x1f0 [ 749.803077][T16168] ? __pfx_sk_setsockopt+0x10/0x10 [ 749.803096][T16168] ? __lock_acquire+0x6b5/0x2cf0 [ 749.803116][T16168] ? do_raw_spin_lock+0x12b/0x2f0 [ 749.803139][T16168] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 749.803160][T16168] ? __fget_files+0x2a/0x420 [ 749.803184][T16168] unix_setsockopt+0x158/0x2a0 [ 749.803207][T16168] ? __pfx_unix_setsockopt+0x10/0x10 [ 749.803227][T16168] ? __fget_files+0x2a/0x420 [ 749.803243][T16168] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 749.803271][T16168] ? __pfx_unix_setsockopt+0x10/0x10 [ 749.803290][T16168] do_sock_setsockopt+0x17c/0x1b0 [ 749.803319][T16168] __x64_sys_setsockopt+0x143/0x1b0 [ 749.803344][T16168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.803363][T16168] do_syscall_64+0x15f/0xf80 [ 749.803382][T16168] ? trace_irq_disable+0x3b/0x140 [ 749.803401][T16168] ? clear_bhb_loop+0x40/0x90 [ 749.803422][T16168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.803437][T16168] RIP: 0033:0x7f92da28c819 [ 749.803453][T16168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 749.803471][T16168] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 749.803488][T16168] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 749.803499][T16168] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 749.803509][T16168] RBP: 00007f92d84de090 R08: 0000000000000010 R09: 0000000000000000 [ 749.803519][T16168] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 749.803529][T16168] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 749.803553][T16168] [ 753.935978][T16189] NILFS (nullb0): couldn't find nilfs on the device [ 754.118478][T16183] ALSA: mixer_oss: invalid OSS volume '' [ 754.419116][ T824] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 754.862913][T16153] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 755.124031][T16198] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 755.409440][ T165] bridge_slave_1: left allmulticast mode [ 755.409480][ T165] bridge_slave_1: left promiscuous mode [ 755.519612][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.580895][ T165] bridge_slave_0: left allmulticast mode [ 755.580931][ T165] bridge_slave_0: left promiscuous mode [ 755.581231][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.739753][T16207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 755.739792][T16207] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3456'. [ 755.947659][T16205] FAULT_INJECTION: forcing a failure. [ 755.947659][T16205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.947685][T16205] CPU: 1 UID: 0 PID: 16205 Comm: syz.0.3455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 755.947698][T16205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.947705][T16205] Call Trace: [ 755.947711][T16205] [ 755.947716][T16205] dump_stack_lvl+0xe8/0x150 [ 755.947741][T16205] should_fail_ex+0x46b/0x600 [ 755.947760][T16205] _copy_to_user+0x31/0xb0 [ 755.947778][T16205] simple_read_from_buffer+0xe1/0x170 [ 755.947795][T16205] proc_fail_nth_read+0x1be/0x230 [ 755.947813][T16205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.947829][T16205] ? rw_verify_area+0x2ac/0x4e0 [ 755.947845][T16205] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 755.947860][T16205] vfs_read+0x212/0xa80 [ 755.947879][T16205] ? __pfx_vfs_read+0x10/0x10 [ 755.947896][T16205] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 755.947910][T16205] ? lockdep_hardirqs_on+0x7a/0x110 [ 755.947924][T16205] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 755.947936][T16205] ? mutex_lock_nested+0x152/0x1d0 [ 755.947951][T16205] ? fdget_pos+0x252/0x320 [ 755.947970][T16205] ksys_read+0x156/0x270 [ 755.947982][T16205] ? __pfx_ksys_read+0x10/0x10 [ 755.947994][T16205] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 755.948007][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.948019][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.948030][T16205] do_syscall_64+0x15f/0xf80 [ 755.948043][T16205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.948053][T16205] ? clear_bhb_loop+0x40/0x90 [ 755.948067][T16205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.948078][T16205] RIP: 0033:0x7f92da24d04e [ 755.948088][T16205] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 755.948098][T16205] RSP: 002b:00007f92d84ddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 755.948110][T16205] RAX: ffffffffffffffda RBX: 00007f92d84de6c0 RCX: 00007f92da24d04e [ 755.948118][T16205] RDX: 000000000000000f RSI: 00007f92d84de0a0 RDI: 0000000000000003 [ 755.948125][T16205] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 755.948131][T16205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 755.948138][T16205] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 755.948154][T16205] [ 756.373298][ T37] kauditd_printk_skb: 44 callbacks suppressed [ 756.373320][ T37] audit: type=1326 audit(1776879407.922:3093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.373362][ T37] audit: type=1326 audit(1776879407.922:3094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.373402][ T37] audit: type=1326 audit(1776879407.922:3095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.373941][ T37] audit: type=1326 audit(1776879407.922:3096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.373986][ T37] audit: type=1326 audit(1776879407.922:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.378190][ T37] audit: type=1326 audit(1776879407.922:3098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.378710][ T37] audit: type=1326 audit(1776879407.922:3099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.378833][ T37] audit: type=1326 audit(1776879407.922:3100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.429416][ T37] audit: type=1326 audit(1776879407.922:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 756.429482][ T37] audit: type=1326 audit(1776879407.932:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16215 comm="syz.3.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e4289c819 code=0x7ffc0000 [ 757.512229][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.589962][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.653134][ T165] bond0 (unregistering): Released all slaves [ 757.684271][ T165] bond1 (unregistering): Released all slaves [ 758.053379][ T5481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 758.084642][ T165] m1Ie5: left promiscuous mode [ 758.744546][T16237] FAULT_INJECTION: forcing a failure. [ 758.744546][T16237] name failslab, interval 1, probability 0, space 0, times 0 [ 758.744592][T16237] CPU: 0 UID: 0 PID: 16237 Comm: syz.4.3466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 758.744617][T16237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 758.744630][T16237] Call Trace: [ 758.744638][T16237] [ 758.744648][T16237] dump_stack_lvl+0xe8/0x150 [ 758.744689][T16237] should_fail_ex+0x46b/0x600 [ 758.744721][T16237] should_failslab+0xa8/0x100 [ 758.744745][T16237] kmem_cache_alloc_noprof+0x87/0x680 [ 758.744776][T16237] ? prepare_creds+0x30/0x820 [ 758.744807][T16237] prepare_creds+0x30/0x820 [ 758.744836][T16237] lookup_user_key+0x319/0x1170 [ 758.744868][T16237] ? _parse_integer_limit+0x1ae/0x1f0 [ 758.744895][T16237] ? __pfx_lookup_user_key+0x10/0x10 [ 758.744921][T16237] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 758.744949][T16237] ? get_pid_task+0x20/0x1f0 [ 758.744981][T16237] keyctl_get_persistent+0x26b/0x770 [ 758.745011][T16237] ? get_pid_task+0x20/0x1f0 [ 758.745031][T16237] ? get_pid_task+0x20/0x1f0 [ 758.745054][T16237] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 758.745093][T16237] ? do_raw_spin_lock+0x12b/0x2f0 [ 758.745120][T16237] __se_sys_keyctl+0x73d/0x9e0 [ 758.745145][T16237] ? __pfx___se_sys_keyctl+0x10/0x10 [ 758.745167][T16237] ? lockdep_hardirqs_on+0x7a/0x110 [ 758.745191][T16237] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 758.745214][T16237] ? rt_mutex_slowunlock+0x1cb/0x300 [ 758.745250][T16237] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 758.745283][T16237] ? fput+0xa0/0xd0 [ 758.745306][T16237] ? ksys_write+0x248/0x270 [ 758.745325][T16237] ? __pfx_ksys_write+0x10/0x10 [ 758.745338][T16237] ? __task_pid_nr_ns+0x28/0x470 [ 758.745363][T16237] ? __x64_sys_keyctl+0x20/0xc0 [ 758.745379][T16237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.745399][T16237] do_syscall_64+0x15f/0xf80 [ 758.745423][T16237] ? clear_bhb_loop+0x40/0x90 [ 758.745444][T16237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.745459][T16237] RIP: 0033:0x7fc33b67c819 [ 758.745476][T16237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.745492][T16237] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 758.745510][T16237] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 758.745525][T16237] RDX: fffffffffffffffe RSI: ffffffffffffffff RDI: 0000000000000016 [ 758.745538][T16237] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 758.745549][T16237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.745560][T16237] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 758.745592][T16237] [ 760.063954][ T5832] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 761.045017][ T5832] usb 3-1: config 1 has an invalid interface number: 187 but max is 0 [ 761.045101][ T5832] usb 3-1: config 1 has no interface number 0 [ 761.045530][ T5832] usb 3-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 761.045610][ T5832] usb 3-1: config 1 interface 187 has no altsetting 0 [ 761.071453][ T5832] usb 3-1: string descriptor 0 read error: -22 [ 761.071595][ T5832] usb 3-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 761.071621][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.129198][ T5932] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 761.162145][T16247] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 761.176795][ T5832] smsc95xx 3-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 761.192504][ T5832] smsc95xx 3-1:1.187: probe with driver smsc95xx failed with error -22 [ 761.520268][T16260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3470'. [ 764.575776][ T5832] usb 3-1: USB disconnect, device number 38 [ 766.722623][T16279] FAULT_INJECTION: forcing a failure. [ 766.722623][T16279] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 766.722659][T16279] CPU: 1 UID: 0 PID: 16279 Comm: syz.2.3479 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 766.722683][T16279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.722695][T16279] Call Trace: [ 766.722704][T16279] [ 766.722714][T16279] dump_stack_lvl+0xe8/0x150 [ 766.722754][T16279] should_fail_ex+0x46b/0x600 [ 766.722788][T16279] prepare_alloc_pages+0x22a/0x6b0 [ 766.722820][T16279] __alloc_frozen_pages_noprof+0x12f/0x380 [ 766.722847][T16279] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 766.722874][T16279] ? __pfx_policy_nodemask+0x10/0x10 [ 766.722896][T16279] ? __lock_acquire+0x6b5/0x2cf0 [ 766.722927][T16279] alloc_pages_mpol+0xd1/0x380 [ 766.722952][T16279] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 766.722976][T16279] vma_alloc_folio_noprof+0xe1/0x1e0 [ 766.722998][T16279] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 766.723015][T16279] ? __pte_offset_map+0x29/0x200 [ 766.723042][T16279] do_pte_missing+0x822/0x2950 [ 766.723071][T16279] handle_mm_fault+0xd0a/0x13c0 [ 766.723098][T16279] ? handle_mm_fault+0xe7/0x13c0 [ 766.723123][T16279] ? __pfx_handle_mm_fault+0x10/0x10 [ 766.723143][T16279] ? lock_vma_under_rcu+0x45a/0x500 [ 766.723178][T16279] do_user_addr_fault+0xa73/0x1340 [ 766.723199][T16279] ? rcu_is_watching+0x15/0xb0 [ 766.723219][T16279] ? trace_page_fault_user+0x84/0x1e0 [ 766.723240][T16279] exc_page_fault+0x6a/0xc0 [ 766.723260][T16279] asm_exc_page_fault+0x26/0x30 [ 766.723276][T16279] RIP: 0033:0x7f217c28dfcb [ 766.723292][T16279] Code: 00 00 00 48 8d 3d bd a6 1a 00 48 89 c1 31 c0 e8 5b 32 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d f1 a6 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 766.723306][T16279] RSP: 002b:00007f217a61cfa0 EFLAGS: 00010206 [ 766.723321][T16279] RAX: 0000000000000000 RBX: 00007f217c645fa0 RCX: 0000000000000000 [ 766.723332][T16279] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000040 [ 766.723343][T16279] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 766.723353][T16279] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001 [ 766.723363][T16279] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 766.723387][T16279] [ 766.723435][T16279] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 767.025476][ T5932] usb 1-1: device descriptor read/all, error -71 [ 767.412864][T16281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3480'. [ 768.734188][T16298] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.3484'. [ 769.093150][T16305] vxcan0: tx address claim with different name [ 770.046461][ T5932] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 770.087602][T16309] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 770.234321][ T5932] usb 5-1: config 1 has an invalid interface number: 187 but max is 0 [ 770.234352][ T5932] usb 5-1: config 1 has no interface number 0 [ 770.234414][ T5932] usb 5-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 770.234441][ T5932] usb 5-1: config 1 interface 187 has no altsetting 0 [ 770.240091][ T5932] usb 5-1: string descriptor 0 read error: -22 [ 770.240226][ T5932] usb 5-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 770.240250][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.257086][T16307] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 770.269930][ T5932] smsc95xx 5-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 770.270187][ T5932] smsc95xx 5-1:1.187: probe with driver smsc95xx failed with error -22 [ 770.665020][ T5891] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 771.397644][ T5891] usb 4-1: config 1 has an invalid interface number: 187 but max is 0 [ 771.397675][ T5891] usb 4-1: config 1 has no interface number 0 [ 771.397716][ T5891] usb 4-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 771.397743][ T5891] usb 4-1: config 1 interface 187 has no altsetting 0 [ 771.511639][ T5891] usb 4-1: string descriptor 0 read error: -22 [ 771.511753][ T5891] usb 4-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 771.511776][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.548171][T16313] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 771.566354][ T5891] smsc95xx 4-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 771.566619][ T5891] smsc95xx 4-1:1.187: probe with driver smsc95xx failed with error -22 [ 771.689268][ T5932] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 771.889653][T16328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3488'. [ 771.919509][ T165] hsr_slave_0: left promiscuous mode [ 771.959329][ T165] hsr_slave_1: left promiscuous mode [ 771.960897][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.960930][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.998227][ T165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.998352][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.048267][ T165] batman_adv: batadv0: Removing interface: ipvlan2 [ 772.202465][ T165] veth1_macvtap: left promiscuous mode [ 772.202588][ T165] veth0_macvtap: left promiscuous mode [ 772.203085][ T165] veth1_vlan: left promiscuous mode [ 772.203268][ T165] veth0_vlan: left promiscuous mode [ 772.577618][ T5891] usb 5-1: USB disconnect, device number 58 [ 773.846352][ T165] team0 (unregistering): Port device team_slave_1 removed [ 774.781502][ T165] team0 (unregistering): Port device team_slave_0 removed [ 775.277142][T16330] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 775.378076][ T823] usb 4-1: USB disconnect, device number 82 [ 778.131964][T16368] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 778.318258][ T5891] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 778.791105][ T5891] usb 3-1: Using ep0 maxpacket: 16 [ 778.795488][ T5891] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 778.797931][ T5891] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 778.797965][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.797987][ T5891] usb 3-1: Product: syz [ 778.798001][ T5891] usb 3-1: Manufacturer: syz [ 778.798014][ T5891] usb 3-1: SerialNumber: syz [ 779.883236][ T5891] r8152-cfgselector 3-1: Unknown version 0x0000 [ 779.883269][ T5891] r8152-cfgselector 3-1: config 0 descriptor?? [ 780.162219][ T5932] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 780.391830][ T5932] usb 1-1: config 1 has an invalid interface number: 187 but max is 0 [ 780.391867][ T5932] usb 1-1: config 1 has no interface number 0 [ 780.391915][ T5932] usb 1-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 780.391943][ T5932] usb 1-1: config 1 interface 187 has no altsetting 0 [ 780.395753][ T5932] usb 1-1: string descriptor 0 read error: -22 [ 780.395899][ T5932] usb 1-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 780.395925][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.414757][T16381] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 780.422926][ T5932] smsc95xx 1-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 780.423200][ T5932] smsc95xx 1-1:1.187: probe with driver smsc95xx failed with error -22 [ 780.960047][T16393] NILFS (nullb0): couldn't find nilfs on the device [ 781.516679][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3506'. [ 783.009562][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 783.053738][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 783.055379][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 783.116799][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 783.135861][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 783.171885][ T31] usb 1-1: USB disconnect, device number 75 [ 783.370489][ T5891] r8152-cfgselector 3-1: Unknown version 0x0000 [ 783.371012][ T5891] r8152-cfgselector 3-1: No union descriptors [ 783.419259][ T5822] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 783.423695][ T5891] r8152-cfgselector 3-1: USB disconnect, device number 40 [ 783.782043][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 784.550906][ T5822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 784.584465][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 784.584501][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.584521][ T5822] usb 5-1: Product: syz [ 784.584537][ T5822] usb 5-1: Manufacturer: syz [ 784.584552][ T5822] usb 5-1: SerialNumber: syz [ 785.389358][T14239] Bluetooth: hci1: command tx timeout [ 785.396438][T16427] FAULT_INJECTION: forcing a failure. [ 785.396438][T16427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.396473][T16427] CPU: 0 UID: 0 PID: 16427 Comm: syz.0.3516 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 785.396491][T16427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 785.396500][T16427] Call Trace: [ 785.396506][T16427] [ 785.396514][T16427] dump_stack_lvl+0xe8/0x150 [ 785.396544][T16427] should_fail_ex+0x46b/0x600 [ 785.396567][T16427] _copy_from_user+0x2d/0xb0 [ 785.396589][T16427] ___sys_sendmsg+0x1c6/0x360 [ 785.396604][T16427] ? __lock_acquire+0x6b5/0x2cf0 [ 785.396627][T16427] ? __pfx____sys_sendmsg+0x10/0x10 [ 785.396644][T16427] ? kstrtouint+0x6e/0xe0 [ 785.396677][T16427] ? __fget_files+0x2a/0x420 [ 785.396696][T16427] ? __fget_files+0x3a6/0x420 [ 785.396721][T16427] __sys_sendmmsg+0x282/0x4e0 [ 785.396740][T16427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 785.396760][T16427] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 785.396793][T16427] ? ksys_write+0x248/0x270 [ 785.396809][T16427] ? __pfx_ksys_write+0x10/0x10 [ 785.396826][T16427] __x64_sys_sendmmsg+0xa0/0xc0 [ 785.396841][T16427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.396857][T16427] do_syscall_64+0x15f/0xf80 [ 785.396873][T16427] ? trace_irq_disable+0x3b/0x140 [ 785.396889][T16427] ? clear_bhb_loop+0x40/0x90 [ 785.396907][T16427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.396921][T16427] RIP: 0033:0x7f92da28c819 [ 785.396936][T16427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.396949][T16427] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 785.396965][T16427] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 785.396976][T16427] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003 [ 785.396985][T16427] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 785.396994][T16427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.397003][T16427] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 785.397025][T16427] [ 785.712348][T14239] Bluetooth: hci0: command 0x0406 tx timeout [ 785.996924][ T5822] usbhid 5-1:1.0: can't add hid device: -71 [ 785.997076][ T5822] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 786.009528][ T5822] usb 5-1: USB disconnect, device number 59 [ 786.281807][T16436] NILFS (nullb0): couldn't find nilfs on the device [ 786.765885][T16430] Bluetooth: hci0: unsupported parameter 255 [ 786.765912][T16430] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 787.120501][T16442] vlan0: entered promiscuous mode [ 787.300601][T16443] usb usb9: usbfs: process 16443 (syz.2.3520) did not claim interface 4 before use [ 787.751936][ T5135] Bluetooth: hci1: command tx timeout [ 788.349439][ T5905] usb 5-1: new low-speed USB device number 60 using dummy_hcd [ 788.509147][ T823] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 788.513719][ T5905] usb 5-1: config 1 has an invalid interface number: 187 but max is 0 [ 788.513753][ T5905] usb 5-1: config 1 has no interface number 0 [ 788.513803][ T5905] usb 5-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 788.513833][ T5905] usb 5-1: config 1 interface 187 has no altsetting 0 [ 788.518570][ T5905] usb 5-1: string descriptor 0 read error: -22 [ 788.518726][ T5905] usb 5-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 788.518751][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.593159][T16402] chnl_net:caif_netlink_parms(): no params data found [ 788.618247][T16451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 788.630387][ T5905] smsc95xx 5-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 788.630941][ T5905] smsc95xx 5-1:1.187: probe with driver smsc95xx failed with error -22 [ 788.671934][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 788.676141][ T823] usb 3-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 788.676182][ T823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 788.679249][ T823] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.40 [ 788.679283][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.679304][ T823] usb 3-1: Product: ࠖ [ 788.679319][ T823] usb 3-1: Manufacturer: 꼗牐ᗆ髲㐿甪箒鮌∿筄೜彎깩員빦鳔鮈๗渂磌䔉燅䩷㽵莧욼툍컛邝㲟厏봆ᯭ跭冘ኁ쥚㤨篟ը૗⮼橄㞪砈㗍場侹햏躇ﺚ䑪粄휐뮌㪎ꥶ碄⦗ᕡ␮持ⴘזּ넃⫏⥯ﳈ▟⃺崙鎳䆌겓⨃䠺䯔˱ﺺꢹࣰ禶舸㿬䉵 [ 788.679359][ T823] usb 3-1: SerialNumber: ѵ顗堓䍁号鶲㌇ꠜᚆतꣵ鄟ᑨ㬲ሏ襖읻䤳翽⊷닒ᐁ떬蔶팭蚱撷㳁ۛ䢮ꅼ灼岳䞀괗誴 [ 788.967350][ T823] usbhid 3-1:1.0: can't add hid device: -71 [ 788.967482][ T823] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 788.993731][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3522'. [ 788.999225][ T823] usb 3-1: USB disconnect, device number 41 [ 789.213125][T16462] netlink: 'syz.0.3526': attribute type 72 has an invalid length. [ 789.329482][T15939] netdevsim netdevsim1: probe with driver netdevsim failed with error -12 [ 789.501737][T16466] vlan0: entered promiscuous mode [ 789.652463][T16466] usb usb9: usbfs: process 16466 (syz.0.3527) did not claim interface 4 before use [ 789.846755][T16474] FAULT_INJECTION: forcing a failure. [ 789.846755][T16474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.846792][T16474] CPU: 1 UID: 0 PID: 16474 Comm: syz.2.3529 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 789.846814][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 789.846828][T16474] Call Trace: [ 789.846836][T16474] [ 789.846845][T16474] dump_stack_lvl+0xe8/0x150 [ 789.846884][T16474] should_fail_ex+0x46b/0x600 [ 789.846914][T16474] _copy_to_user+0x31/0xb0 [ 789.846950][T16474] simple_read_from_buffer+0xe1/0x170 [ 789.846982][T16474] proc_fail_nth_read+0x1be/0x230 [ 789.847023][T16474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.847052][T16474] ? rw_verify_area+0x2ac/0x4e0 [ 789.847080][T16474] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 789.847106][T16474] vfs_read+0x212/0xa80 [ 789.847140][T16474] ? __pfx_vfs_read+0x10/0x10 [ 789.847170][T16474] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 789.847194][T16474] ? lockdep_hardirqs_on+0x7a/0x110 [ 789.847217][T16474] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 789.847237][T16474] ? mutex_lock_nested+0x152/0x1d0 [ 789.847264][T16474] ? fdget_pos+0x252/0x320 [ 789.847298][T16474] ksys_read+0x156/0x270 [ 789.847319][T16474] ? __pfx_ksys_read+0x10/0x10 [ 789.847345][T16474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.847367][T16474] do_syscall_64+0x15f/0xf80 [ 789.847388][T16474] ? trace_irq_disable+0x3b/0x140 [ 789.847409][T16474] ? clear_bhb_loop+0x40/0x90 [ 789.847434][T16474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.847454][T16474] RIP: 0033:0x7f217c38d04e [ 789.847472][T16474] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.847489][T16474] RSP: 002b:00007f217a61dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 789.847512][T16474] RAX: ffffffffffffffda RBX: 00007f217a61e6c0 RCX: 00007f217c38d04e [ 789.847527][T16474] RDX: 000000000000000f RSI: 00007f217a61e0a0 RDI: 0000000000000004 [ 789.847539][T16474] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 789.847552][T16474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 789.847564][T16474] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 789.847597][T16474] [ 789.867744][T16402] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.867959][T16402] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.868235][T16402] bridge_slave_0: entered allmulticast mode [ 789.869126][ T5135] Bluetooth: hci1: command tx timeout [ 789.879646][T16402] bridge_slave_0: entered promiscuous mode [ 789.888733][T16402] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.891002][T16402] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.893822][T16402] bridge_slave_1: entered allmulticast mode [ 789.905839][T16402] bridge_slave_1: entered promiscuous mode [ 790.000167][ T5932] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 790.219190][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 790.222652][ T5932] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 790.222687][ T5932] usb 1-1: config 1 interface 0 has no altsetting 0 [ 790.241439][T16402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.275876][ T5932] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.40 [ 790.275916][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.275941][ T5932] usb 1-1: Product: ࠖ [ 790.275958][ T5932] usb 1-1: Manufacturer: 꼗牐ᗆ髲㐿甪箒鮌∿筄೜彎깩員빦鳔鮈๗渂磌䔉燅䩷㽵莧욼툍컛邝㲟厏봆ᯭ跭冘ኁ쥚㤨篟ը૗⮼橄㞪砈㗍場侹햏躇ﺚ䑪粄휐뮌㪎ꥶ碄⦗ᕡ␮持ⴘזּ넃⫏⥯ﳈ▟⃺崙鎳䆌겓⨃䠺䯔˱ﺺꢹࣰ禶舸㿬䉵 [ 790.276001][ T5932] usb 1-1: SerialNumber: ѵ顗堓䍁号鶲㌇ꠜᚆतꣵ鄟ᑨ㬲ሏ襖읻䤳翽⊷닒ᐁ떬蔶팭蚱撷㳁ۛ䢮ꅼ灼岳䞀괗誴 [ 790.304835][T16402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.460657][ T5822] usb 5-1: USB disconnect, device number 60 [ 790.536153][T16402] team0: Port device team_slave_0 added [ 790.547078][T16402] team0: Port device team_slave_1 added [ 790.565348][ T823] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 791.045600][T16484] NILFS (nullb0): couldn't find nilfs on the device [ 791.502720][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 791.502760][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 791.502790][ T823] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 791.502843][ T823] usb 4-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00 [ 791.502869][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.529933][ T823] usb 4-1: config 0 descriptor?? [ 791.530945][T16477] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 791.554489][ T5932] usbhid 1-1:1.0: can't add hid device: -71 [ 791.554619][ T5932] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 792.023497][ T5135] Bluetooth: hci1: command tx timeout [ 792.499880][ T5932] usb 1-1: USB disconnect, device number 76 [ 792.503189][ T823] usbhid 4-1:0.0: can't add hid device: -71 [ 792.503317][ T823] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 792.578848][T16491] vxcan0: tx address claim with different name [ 792.612488][ T823] usb 4-1: USB disconnect, device number 83 [ 792.760718][T16402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.760736][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.760763][T16402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.763136][T16402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.763153][T16402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.763179][T16402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.795920][ T5832] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 794.072911][T16497] netlink: 'syz.0.3536': attribute type 72 has an invalid length. [ 794.159330][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 794.162382][ T5832] usb 5-1: config 1 interface 0 has no altsetting 0 [ 794.242813][ T5832] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 794.242850][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.242875][ T5832] usb 5-1: Product: syz [ 794.242893][ T5832] usb 5-1: Manufacturer: syz [ 794.242908][ T5832] usb 5-1: SerialNumber: syz [ 794.663076][ T5832] usbhid 5-1:1.0: can't add hid device: -71 [ 794.664753][ T5832] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 794.710344][ T5832] usb 5-1: USB disconnect, device number 61 [ 794.817088][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 794.817108][ T37] audit: type=1326 audit(1776879446.362:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.817155][ T37] audit: type=1326 audit(1776879446.362:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.818142][ T37] audit: type=1326 audit(1776879446.362:3113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.818196][ T37] audit: type=1326 audit(1776879446.362:3114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.818486][ T37] audit: type=1326 audit(1776879446.362:3115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.818877][ T37] audit: type=1326 audit(1776879446.362:3116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.818930][ T37] audit: type=1326 audit(1776879446.362:3117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.827295][ T37] audit: type=1326 audit(1776879446.372:3118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.828422][ T37] audit: type=1326 audit(1776879446.372:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 794.828467][ T37] audit: type=1326 audit(1776879446.372:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16505 comm="syz.0.3539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92da28c819 code=0x7ffc0000 [ 795.299280][ T5905] usb 3-1: new low-speed USB device number 42 using dummy_hcd [ 795.347554][T16402] hsr_slave_0: entered promiscuous mode [ 795.356552][T16402] hsr_slave_1: entered promiscuous mode [ 795.488449][ T5905] usb 3-1: config 1 has an invalid interface number: 187 but max is 0 [ 795.488471][ T5905] usb 3-1: config 1 has no interface number 0 [ 795.488499][ T5905] usb 3-1: config 1 interface 187 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 795.488515][ T5905] usb 3-1: config 1 interface 187 has no altsetting 0 [ 795.505209][ T5905] usb 3-1: string descriptor 0 read error: -22 [ 795.505356][ T5905] usb 3-1: New USB device found, idVendor=0424, idProduct=9e01, bcdDevice=51.fc [ 795.505380][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.512089][T16513] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 795.559792][T16520] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 795.566385][ T5905] smsc95xx 3-1:1.187 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 795.568422][ T5905] smsc95xx 3-1:1.187: probe with driver smsc95xx failed with error -22 [ 795.601589][ T165] bridge_slave_1: left allmulticast mode [ 795.601622][ T165] bridge_slave_1: left promiscuous mode [ 795.601906][ T165] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.805751][ T165] bridge_slave_0: left allmulticast mode [ 795.805787][ T165] bridge_slave_0: left promiscuous mode [ 795.806082][ T165] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.903574][T16524] netlink: 'syz.2.3541': attribute type 17 has an invalid length. [ 795.903601][T16524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3541'. [ 796.233506][ T5905] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 796.258572][T14239] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 796.321993][T14239] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 796.323802][T14239] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.325054][T14239] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.330736][T14239] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 796.391781][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 796.394031][ T5905] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 796.396839][ T5905] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 796.396874][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 796.396900][ T5905] usb 5-1: Product: syz [ 796.396920][ T5905] usb 5-1: Manufacturer: syz [ 796.396940][ T5905] usb 5-1: SerialNumber: syz [ 796.448862][ T5905] r8152-cfgselector 5-1: Unknown version 0x0000 [ 796.448891][ T5905] r8152-cfgselector 5-1: config 0 descriptor?? [ 796.690120][ T165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.770220][ T165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.832462][ T165] bond0 (unregistering): Released all slaves [ 797.247892][ T5905] r8152-cfgselector 5-1: Unknown version 0x0000 [ 797.266193][ T5905] r8152-cfgselector 5-1: No union descriptors [ 797.292183][ T5905] r8152-cfgselector 5-1: USB disconnect, device number 62 [ 797.377390][T16534] FAULT_INJECTION: forcing a failure. [ 797.377390][T16534] name failslab, interval 1, probability 0, space 0, times 0 [ 797.377414][T16534] CPU: 0 UID: 0 PID: 16534 Comm: syz.0.3548 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 797.377428][T16534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 797.377435][T16534] Call Trace: [ 797.377441][T16534] [ 797.377446][T16534] dump_stack_lvl+0xe8/0x150 [ 797.377471][T16534] should_fail_ex+0x46b/0x600 [ 797.377491][T16534] should_failslab+0xa8/0x100 [ 797.377505][T16534] kmem_cache_alloc_noprof+0x87/0x680 [ 797.377522][T16534] ? ioctx_alloc+0xf6/0x850 [ 797.377536][T16534] ioctx_alloc+0xf6/0x850 [ 797.377546][T16534] ? __might_fault+0xaf/0x130 [ 797.377560][T16534] __se_sys_io_setup+0x7b/0x1d0 [ 797.377577][T16534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.377588][T16534] do_syscall_64+0x15f/0xf80 [ 797.377603][T16534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.377614][T16534] ? clear_bhb_loop+0x40/0x90 [ 797.377627][T16534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.377638][T16534] RIP: 0033:0x7f92da28c819 [ 797.377649][T16534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.377659][T16534] RSP: 002b:00007f92d84de028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 797.377672][T16534] RAX: ffffffffffffffda RBX: 00007f92da505fa0 RCX: 00007f92da28c819 [ 797.377680][T16534] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 797.377687][T16534] RBP: 00007f92d84de090 R08: 0000000000000000 R09: 0000000000000000 [ 797.377694][T16534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.377700][T16534] R13: 00007f92da506038 R14: 00007f92da505fa0 R15: 00007ffea39ff0d8 [ 797.377716][T16534] [ 797.622232][ T165] hsr_slave_0: left promiscuous mode [ 797.669284][ T165] hsr_slave_1: left promiscuous mode [ 797.670201][ T165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 797.722229][ T165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.997437][ T5905] usb 3-1: USB disconnect, device number 42 [ 798.148029][T16548] netlink: 'syz.2.3554': attribute type 10 has an invalid length. [ 798.148053][T16548] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3554'. [ 798.209729][ T10] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 798.280721][ T165] team0 (unregistering): Port device team_slave_1 removed [ 798.309796][ T165] team0 (unregistering): Port device team_slave_0 removed [ 798.479166][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 798.482475][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 798.484376][ T10] usb 5-1: config 9 has an invalid interface number: 120 but max is 0 [ 798.484405][ T10] usb 5-1: config 9 has no interface number 0 [ 798.484488][ T10] usb 5-1: config 9 interface 120 has no altsetting 0 [ 798.491178][T16548] team0: entered promiscuous mode [ 798.491201][T16548] team_slave_0: entered promiscuous mode [ 798.491462][T16548] team_slave_1: entered promiscuous mode [ 798.491702][T16548] team0: entered allmulticast mode [ 798.491724][T16548] team_slave_0: entered allmulticast mode [ 798.491742][T16548] team_slave_1: entered allmulticast mode [ 798.492567][T16548] bridge0: port 3(team0) entered blocking state [ 798.492747][T16548] bridge0: port 3(team0) entered disabled state [ 798.497043][T16548] bridge0: port 3(team0) entered blocking state [ 798.501281][T16548] bridge0: port 3(team0) entered forwarding state [ 798.549740][ T10] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=e4.4e [ 798.549829][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.549851][ T10] usb 5-1: Product: Ь [ 798.549866][ T10] usb 5-1: SerialNumber:  [ 798.669148][ T5135] Bluetooth: hci2: command tx timeout [ 798.947043][ T10] usbhid 5-1:9.120: couldn't find an input interrupt endpoint [ 798.952380][ T10] usb 5-1: USB disconnect, device number 63 [ 799.083676][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 799.083701][T16556] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3557'. [ 799.448041][T16566] FAULT_INJECTION: forcing a failure. [ 799.448041][T16566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.448077][T16566] CPU: 1 UID: 0 PID: 16566 Comm: syz.2.3560 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 799.448100][T16566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 799.448113][T16566] Call Trace: [ 799.448121][T16566] [ 799.448129][T16566] dump_stack_lvl+0xe8/0x150 [ 799.448166][T16566] should_fail_ex+0x46b/0x600 [ 799.448197][T16566] _copy_from_user+0x2d/0xb0 [ 799.448227][T16566] __sys_bpf+0x229/0x950 [ 799.448251][T16566] ? __pfx___sys_bpf+0x10/0x10 [ 799.448269][T16566] ? rt_mutex_slowunlock+0x1cb/0x300 [ 799.448316][T16566] ? ksys_write+0x248/0x270 [ 799.448341][T16566] ? __pfx_ksys_write+0x10/0x10 [ 799.448364][T16566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.448387][T16566] __x64_sys_bpf+0x7c/0x90 [ 799.448415][T16566] do_syscall_64+0x15f/0xf80 [ 799.448436][T16566] ? trace_irq_disable+0x3b/0x140 [ 799.448456][T16566] ? clear_bhb_loop+0x40/0x90 [ 799.448477][T16566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.448496][T16566] RIP: 0033:0x7f217c3cc819 [ 799.448515][T16566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.448532][T16566] RSP: 002b:00007f217a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.448550][T16566] RAX: ffffffffffffffda RBX: 00007f217c645fa0 RCX: 00007f217c3cc819 [ 799.448565][T16566] RDX: 0000000000000020 RSI: 0000200000000640 RDI: 0000000000000004 [ 799.448579][T16566] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 799.448591][T16566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.448602][T16566] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 799.448627][T16566] [ 800.793237][ T5135] Bluetooth: hci2: command tx timeout [ 801.449849][T16587] sd 0:0:1:0: device reset [ 802.633237][T16596] FAULT_INJECTION: forcing a failure. [ 802.633237][T16596] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 802.633266][T16596] CPU: 1 UID: 0 PID: 16596 Comm: syz.4.3568 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 802.633285][T16596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 802.633303][T16596] Call Trace: [ 802.633310][T16596] [ 802.633316][T16596] dump_stack_lvl+0xe8/0x150 [ 802.633344][T16596] should_fail_ex+0x46b/0x600 [ 802.633367][T16596] _copy_from_user+0x2d/0xb0 [ 802.633390][T16596] ___sys_sendmsg+0x1c6/0x360 [ 802.633408][T16596] ? __lock_acquire+0x6b5/0x2cf0 [ 802.633432][T16596] ? __pfx____sys_sendmsg+0x10/0x10 [ 802.633471][T16596] ? __fget_files+0x2a/0x420 [ 802.633492][T16596] ? __fget_files+0x3a6/0x420 [ 802.633519][T16596] __x64_sys_sendmsg+0x1c3/0x2a0 [ 802.633537][T16596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 802.633562][T16596] ? __pfx_ksys_write+0x10/0x10 [ 802.633583][T16596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.633601][T16596] do_syscall_64+0x15f/0xf80 [ 802.633620][T16596] ? trace_irq_disable+0x3b/0x140 [ 802.633637][T16596] ? clear_bhb_loop+0x40/0x90 [ 802.633657][T16596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.633681][T16596] RIP: 0033:0x7fc33b67c819 [ 802.633697][T16596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.633711][T16596] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 802.633728][T16596] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 802.633740][T16596] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 802.633749][T16596] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 802.633759][T16596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 802.633768][T16596] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 802.633792][T16596] [ 802.685030][T16529] chnl_net:caif_netlink_parms(): no params data found [ 802.859478][T16598] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3569'. [ 802.909428][ T5135] Bluetooth: hci2: command tx timeout [ 802.962673][T16600] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.3570'. [ 803.353110][T16608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 804.122198][T16402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 804.201586][T16402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 804.286478][T16402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 804.342906][T16402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 804.343311][T16529] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.343923][T16529] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.344094][T16529] bridge_slave_0: entered allmulticast mode [ 804.345649][T16529] bridge_slave_0: entered promiscuous mode [ 804.668918][T10950] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.806721][T16402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 804.832668][T16402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 804.833067][T16529] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.833202][T16529] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.833407][T16529] bridge_slave_1: entered allmulticast mode [ 804.836003][T16529] bridge_slave_1: entered promiscuous mode [ 804.837953][T16402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 804.914844][T16402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 804.989423][ T5135] Bluetooth: hci2: command tx timeout [ 805.188190][T10950] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.258887][T16529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.276230][T16529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.311324][T16529] team0: Port device team_slave_0 added [ 805.423458][T16529] team0: Port device team_slave_1 added [ 805.666891][T10950] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.721187][T16529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.721201][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.721217][T16529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.725026][T16529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.725039][T16529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.725055][T16529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.866933][T16529] hsr_slave_0: entered promiscuous mode [ 805.870820][T16529] hsr_slave_1: entered promiscuous mode [ 805.875668][T16529] debugfs: 'hsr0' already exists in 'hsr' [ 805.875702][T16529] Cannot create hsr debugfs directory [ 806.325004][T16632] sctp: [Deprecated]: syz.4.3579 (pid 16632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 806.325004][T16632] Use struct sctp_sack_info instead [ 807.468341][T16641] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 807.538735][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3582'. [ 807.680676][T10950] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 807.799459][T16650] netlink: 1688 bytes leftover after parsing attributes in process `syz.0.3583'. [ 808.099192][ T5822] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 808.249750][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 808.257362][ T5822] usb 5-1: config 1 interface 0 has no altsetting 0 [ 808.278640][T16402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.301978][ T5822] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.40 [ 808.302008][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.302028][ T5822] usb 5-1: Product: syz [ 808.302042][ T5822] usb 5-1: Manufacturer: syz [ 808.302056][ T5822] usb 5-1: SerialNumber: syz [ 808.487103][T16402] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.568007][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.568254][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.845819][ T5822] usbhid 5-1:1.0: can't add hid device: -71 [ 808.845939][ T5822] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 808.857346][ T5822] usb 5-1: USB disconnect, device number 64 [ 809.017389][T12693] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.017560][T12693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.165130][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.165208][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.367472][T16671] fuse: Bad value for 'fd' [ 809.633345][T16679] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 809.762521][T16680] sctp: [Deprecated]: syz.2.3591 (pid 16680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.762521][T16680] Use struct sctp_sack_info instead [ 809.905300][T16683] netlink: 'syz.0.3593': attribute type 72 has an invalid length. [ 810.131506][T16696] FAULT_INJECTION: forcing a failure. [ 810.131506][T16696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.131541][T16696] CPU: 0 UID: 0 PID: 16696 Comm: syz.4.3595 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 810.131563][T16696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.131574][T16696] Call Trace: [ 810.131581][T16696] [ 810.131590][T16696] dump_stack_lvl+0xe8/0x150 [ 810.131625][T16696] should_fail_ex+0x46b/0x600 [ 810.131656][T16696] _copy_from_user+0x2d/0xb0 [ 810.131685][T16696] ___sys_sendmsg+0x1c6/0x360 [ 810.131706][T16696] ? __lock_acquire+0x6b5/0x2cf0 [ 810.131731][T16696] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.131787][T16696] ? __fget_files+0x2a/0x420 [ 810.131810][T16696] ? __fget_files+0x3a6/0x420 [ 810.131840][T16696] __x64_sys_sendmsg+0x1c3/0x2a0 [ 810.131863][T16696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.131890][T16696] ? __pfx_ksys_write+0x10/0x10 [ 810.131916][T16696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.131936][T16696] do_syscall_64+0x15f/0xf80 [ 810.131959][T16696] ? trace_irq_disable+0x3b/0x140 [ 810.131979][T16696] ? clear_bhb_loop+0x40/0x90 [ 810.132002][T16696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.132021][T16696] RIP: 0033:0x7fc33b67c819 [ 810.132040][T16696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.132058][T16696] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.132079][T16696] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 810.132093][T16696] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 810.132105][T16696] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 810.132117][T16696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.132136][T16696] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 810.132168][T16696] [ 810.859389][T16708] FAULT_INJECTION: forcing a failure. [ 810.859389][T16708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.859445][T16708] CPU: 1 UID: 0 PID: 16708 Comm: syz.4.3597 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 810.859469][T16708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.859481][T16708] Call Trace: [ 810.859492][T16708] [ 810.859502][T16708] dump_stack_lvl+0xe8/0x150 [ 810.859540][T16708] should_fail_ex+0x46b/0x600 [ 810.859573][T16708] _copy_to_user+0x31/0xb0 [ 810.859604][T16708] simple_read_from_buffer+0xe1/0x170 [ 810.859637][T16708] proc_fail_nth_read+0x1be/0x230 [ 810.859669][T16708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.859700][T16708] ? rw_verify_area+0x2ac/0x4e0 [ 810.859729][T16708] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 810.859756][T16708] vfs_read+0x212/0xa80 [ 810.859789][T16708] ? preempt_schedule_thunk+0x16/0x30 [ 810.859819][T16708] ? __pfx_vfs_read+0x10/0x10 [ 810.859847][T16708] ? preempt_schedule_thunk+0x16/0x30 [ 810.859878][T16708] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 810.859903][T16708] ? mutex_lock_nested+0x152/0x1d0 [ 810.859931][T16708] ? fdget_pos+0x252/0x320 [ 810.859965][T16708] ksys_read+0x156/0x270 [ 810.859987][T16708] ? __pfx_ksys_read+0x10/0x10 [ 810.860023][T16708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.860045][T16708] do_syscall_64+0x15f/0xf80 [ 810.860070][T16708] ? clear_bhb_loop+0x40/0x90 [ 810.860095][T16708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.860116][T16708] RIP: 0033:0x7fc33b63d04e [ 810.860135][T16708] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 810.860153][T16708] RSP: 002b:00007fc33988bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 810.860174][T16708] RAX: ffffffffffffffda RBX: 00007fc33988c6c0 RCX: 00007fc33b63d04e [ 810.860190][T16708] RDX: 000000000000000f RSI: 00007fc33988c0a0 RDI: 0000000000000008 [ 810.860204][T16708] RBP: 00007fc33988c090 R08: 0000000000000000 R09: 0000000000000000 [ 810.860216][T16708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.860229][T16708] R13: 00007fc33b8f6218 R14: 00007fc33b8f6180 R15: 00007fff190e96c8 [ 810.860261][T16708] [ 811.611349][T16715] fuse: Bad value for 'fd' [ 811.746036][T16722] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 811.875740][T16727] program syz.2.3604 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 811.892209][T10950] bridge_slave_1: left allmulticast mode [ 811.892239][T10950] bridge_slave_1: left promiscuous mode [ 811.892500][T10950] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.901594][ T823] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 812.019837][T16734] sg_write: data in/out 1108040255/46 bytes for SCSI command 0x0-- guessing data in; [ 812.019837][T16734] program syz.4.3606 not setting count and/or reply_len properly [ 812.055418][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 812.056810][ T823] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 812.056827][ T823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.056839][ T823] usb 1-1: config 0 has no interface number 0 [ 812.056863][ T823] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 812.056877][ T823] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 812.058695][ T823] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 812.058712][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.058725][ T823] usb 1-1: Product: syz [ 812.058733][ T823] usb 1-1: Manufacturer: syz [ 812.058741][ T823] usb 1-1: SerialNumber: syz [ 812.083962][ T823] usb 1-1: config 0 descriptor?? [ 812.093042][ T823] iowarrior 1-1:0.186: no interrupt-in endpoint found [ 812.115108][T10950] bridge_slave_0: left allmulticast mode [ 812.115138][T10950] bridge_slave_0: left promiscuous mode [ 812.115352][T10950] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.126983][T16735] sctp: [Deprecated]: syz.2.3607 (pid 16735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.126983][T16735] Use struct sctp_sack_info instead [ 812.329269][ T5932] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 812.439495][ T823] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 812.479165][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 812.489273][ T5932] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 812.489301][ T5932] usb 5-1: config 0 has no interface number 0 [ 812.489347][ T5932] usb 5-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 812.489371][ T5932] usb 5-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 812.535385][ T5932] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 812.535415][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.535435][ T5932] usb 5-1: Product: syz [ 812.535449][ T5932] usb 5-1: Manufacturer: syz [ 812.535464][ T5932] usb 5-1: SerialNumber: syz [ 812.561631][ T5932] usb 5-1: config 0 descriptor?? [ 812.595531][ T5932] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 812.629309][ T823] usb 3-1: Using ep0 maxpacket: 8 [ 812.632441][ T823] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 812.635203][ T823] usb 3-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 812.635236][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.635286][ T823] usb 3-1: Product: syz [ 812.635296][ T823] usb 3-1: Manufacturer: syz [ 812.635304][ T823] usb 3-1: SerialNumber: syz [ 812.784512][ T5932] usb 5-1: qt2_setup_urbs - submit read urb failed -90 [ 812.784817][ T5932] quatech2 5-1:0.51: probe with driver quatech2 failed with error -90 [ 812.991871][T16734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3606'. [ 814.819590][ T5905] usb 1-1: USB disconnect, device number 77 [ 815.086438][ T823] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 815.086468][ T823] usb 3-1: 1:1 : unsupported sample bitwidth 5 in 15 bytes [ 816.668202][ T823] usb 3-1: USB disconnect, device number 43 [ 816.717915][T16753] fuse: Bad value for 'fd' [ 816.784182][T10950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.804641][T16653] udevd[16653]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 816.883033][T10950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.922892][T10950] bond0 (unregistering): Released all slaves [ 816.925753][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 816.925770][ T37] audit: type=1326 audit(1776879468.472:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.926104][ T37] audit: type=1326 audit(1776879468.472:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.926369][ T37] audit: type=1326 audit(1776879468.472:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.926719][ T37] audit: type=1326 audit(1776879468.472:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.928548][ T37] audit: type=1326 audit(1776879468.472:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.949363][ T37] audit: type=1326 audit(1776879468.492:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.949423][ T37] audit: type=1326 audit(1776879468.492:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.949463][ T37] audit: type=1326 audit(1776879468.492:3136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.950249][ T37] audit: type=1326 audit(1776879468.502:3137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 816.950292][ T37] audit: type=1326 audit(1776879468.502:3138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16754 comm="syz.2.3613" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f217c3cc819 code=0x7ffc0000 [ 817.190881][ T5481] 8021q: adding VLAN 0 to HW filter on device eth1 [ 817.347297][ T824] usb 5-1: USB disconnect, device number 65 [ 817.631890][T16769] FAULT_INJECTION: forcing a failure. [ 817.631890][T16769] name failslab, interval 1, probability 0, space 0, times 0 [ 817.631922][T16769] CPU: 1 UID: 0 PID: 16769 Comm: syz.0.3616 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 817.631940][T16769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 817.631951][T16769] Call Trace: [ 817.631958][T16769] [ 817.631965][T16769] dump_stack_lvl+0xe8/0x150 [ 817.632001][T16769] should_fail_ex+0x46b/0x600 [ 817.632025][T16769] should_failslab+0xa8/0x100 [ 817.632043][T16769] __kmalloc_noprof+0xdf/0x7b0 [ 817.632056][T16769] ? kfree+0x4d/0x6c0 [ 817.632077][T16769] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 817.632104][T16769] tomoyo_realpath_from_path+0xe3/0x5d0 [ 817.632127][T16769] ? tomoyo_domain+0xd8/0x130 [ 817.632152][T16769] ? tomoyo_path_number_perm+0x219/0x630 [ 817.632170][T16769] tomoyo_path_number_perm+0x246/0x630 [ 817.632199][T16769] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 817.632213][T16769] ? __lock_acquire+0x6b5/0x2cf0 [ 817.632233][T16769] ? do_raw_spin_lock+0x12b/0x2f0 [ 817.632272][T16769] ? __fget_files+0x2a/0x420 [ 817.632295][T16769] ? __fget_files+0x2a/0x420 [ 817.632313][T16769] ? __fget_files+0x3a6/0x420 [ 817.632331][T16769] ? __fget_files+0x2a/0x420 [ 817.632353][T16769] security_file_ioctl+0xc3/0x2a0 [ 817.632373][T16769] __se_sys_ioctl+0x47/0x170 [ 817.632389][T16769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.632578][T16769] do_syscall_64+0x15f/0xf80 [ 817.632602][T16769] ? trace_irq_disable+0x3b/0x140 [ 817.632630][T16769] ? clear_bhb_loop+0x40/0x90 [ 817.632652][T16769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.632669][T16769] RIP: 0033:0x7f92da28c819 [ 817.632688][T16769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 817.632702][T16769] RSP: 002b:00007f92d84bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.632717][T16769] RAX: ffffffffffffffda RBX: 00007f92da506090 RCX: 00007f92da28c819 [ 817.632728][T16769] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 817.632737][T16769] RBP: 00007f92d84bd090 R08: 0000000000000000 R09: 0000000000000000 [ 817.632747][T16769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.632755][T16769] R13: 00007f92da506128 R14: 00007f92da506090 R15: 00007ffea39ff0d8 [ 817.632779][T16769] [ 817.632919][T16769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 817.685007][T10950] m1Ie5: left promiscuous mode [ 817.876842][ T824] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 818.180163][ T824] usb 5-1: Using ep0 maxpacket: 8 [ 818.192183][ T824] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 818.192215][ T824] usb 5-1: config 0 has no interface number 0 [ 818.192268][ T824] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 818.192292][ T824] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 818.194997][ T824] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 818.195028][ T824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.195049][ T824] usb 5-1: Product: syz [ 818.195064][ T824] usb 5-1: Manufacturer: syz [ 818.195079][ T824] usb 5-1: SerialNumber: syz [ 818.357870][ T824] usb 5-1: config 0 descriptor?? [ 818.956336][ T824] iowarrior 5-1:0.186: no interrupt-in endpoint found [ 820.015927][T16402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.242769][T16787] fuse: Bad value for 'fd' [ 821.058830][ T5932] usb 5-1: USB disconnect, device number 66 [ 822.219216][ T5932] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 822.369256][ T5932] usb 5-1: Using ep0 maxpacket: 32 [ 822.373254][ T5932] usb 5-1: unable to get BOS descriptor or descriptor too short [ 822.374760][ T5932] usb 5-1: config 9 has an invalid interface number: 120 but max is 0 [ 822.374787][ T5932] usb 5-1: config 9 has no interface number 0 [ 822.374817][ T5932] usb 5-1: config 9 interface 120 has no altsetting 0 [ 822.392819][ T5932] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=e4.4e [ 822.392848][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.392868][ T5932] usb 5-1: Product: Ь [ 822.392900][ T5932] usb 5-1: SerialNumber: Н [ 823.502193][ T5932] usbhid 5-1:9.120: couldn't find an input interrupt endpoint [ 823.518955][ T5932] usb 5-1: USB disconnect, device number 67 [ 823.755567][T16827] fuse: Bad value for 'fd' [ 823.915930][ T823] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 824.564927][ T823] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 824.564975][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.564995][ T823] usb 1-1: Product: syz [ 824.565010][ T823] usb 1-1: Manufacturer: syz [ 824.565025][ T823] usb 1-1: SerialNumber: syz [ 824.942086][T16825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 824.943396][T16825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.875289][ T823] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 825.919341][ T823] usb 1-1: USB disconnect, device number 78 [ 826.072929][ T823] usblp0: removed [ 826.182202][T16840] program syz.4.3635 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 826.329378][ T824] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 826.442748][T16849] overlayfs: failed to clone lowerpath [ 826.489392][ T824] usb 3-1: Using ep0 maxpacket: 8 [ 826.492002][ T824] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 826.492031][ T824] usb 3-1: config 0 has no interface number 0 [ 826.492072][ T824] usb 3-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 826.492132][ T824] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 826.494539][ T824] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 826.494570][ T824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.494582][ T824] usb 3-1: Product: syz [ 826.494595][ T824] usb 3-1: Manufacturer: syz [ 826.494604][ T824] usb 3-1: SerialNumber: syz [ 826.503319][ T824] usb 3-1: config 0 descriptor?? [ 826.503784][T10950] hsr_slave_0: left promiscuous mode [ 826.530492][ T824] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 826.619344][T10950] hsr_slave_1: left promiscuous mode [ 826.624067][T10950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.624089][T10950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 826.677984][T16851] FAULT_INJECTION: forcing a failure. [ 826.677984][T16851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.678006][T16851] CPU: 1 UID: 0 PID: 16851 Comm: syz.4.3641 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 826.678020][T16851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 826.678027][T16851] Call Trace: [ 826.678032][T16851] [ 826.678038][T16851] dump_stack_lvl+0xe8/0x150 [ 826.678060][T16851] should_fail_ex+0x46b/0x600 [ 826.678078][T16851] _copy_from_user+0x2d/0xb0 [ 826.678098][T16851] copy_bpf_fprog_from_user+0x17c/0x2d0 [ 826.678113][T16851] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 826.678130][T16851] fanout_set_data+0x22d/0x430 [ 826.678148][T16851] ? __pfx_fanout_set_data+0x10/0x10 [ 826.678161][T16851] ? get_pid_task+0x20/0x1f0 [ 826.678174][T16851] ? get_pid_task+0x20/0x1f0 [ 826.678193][T16851] packet_setsockopt+0x8b6/0x1510 [ 826.678206][T16851] ? sb_end_write+0xe9/0x1c0 [ 826.678220][T16851] ? __pfx_packet_setsockopt+0x10/0x10 [ 826.678232][T16851] ? vfs_write+0x9ce/0xba0 [ 826.678246][T16851] ? __pfx_vfs_write+0x10/0x10 [ 826.678257][T16851] ? do_sys_openat2+0x14c/0x200 [ 826.678269][T16851] ? kmem_cache_free+0x187/0x6c0 [ 826.678280][T16851] ? do_sys_openat2+0x14c/0x200 [ 826.678300][T16851] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 826.678318][T16851] ? __pfx_packet_setsockopt+0x10/0x10 [ 826.678331][T16851] do_sock_setsockopt+0x17c/0x1b0 [ 826.678351][T16851] __x64_sys_setsockopt+0x143/0x1b0 [ 826.678368][T16851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.678380][T16851] do_syscall_64+0x15f/0xf80 [ 826.678392][T16851] ? trace_irq_disable+0x3b/0x140 [ 826.678403][T16851] ? clear_bhb_loop+0x40/0x90 [ 826.678415][T16851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.678426][T16851] RIP: 0033:0x7fc33b67c819 [ 826.678437][T16851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.678447][T16851] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 826.678459][T16851] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 826.678467][T16851] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000003 [ 826.678474][T16851] RBP: 00007fc3398ce090 R08: 0000000000000010 R09: 0000000000000000 [ 826.678482][T16851] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 826.678489][T16851] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 826.678505][T16851] [ 826.704600][T10950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.704628][T10950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 826.833492][T10950] team_slave_0: left promiscuous mode [ 826.833600][T10950] team_slave_1: left promiscuous mode [ 826.833761][T10950] veth1_macvtap: left promiscuous mode [ 826.834127][T10950] veth0_macvtap: left promiscuous mode [ 826.834372][T10950] veth1_vlan: left promiscuous mode [ 826.834533][T10950] veth0_vlan: left promiscuous mode [ 826.862787][T16853] fuse: Bad value for 'fd' [ 827.837787][T16861] FAULT_INJECTION: forcing a failure. [ 827.837787][T16861] name failslab, interval 1, probability 0, space 0, times 0 [ 827.837817][T16861] CPU: 0 UID: 0 PID: 16861 Comm: syz.4.3644 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 827.837835][T16861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 827.837844][T16861] Call Trace: [ 827.837851][T16861] [ 827.837858][T16861] dump_stack_lvl+0xe8/0x150 [ 827.837890][T16861] should_fail_ex+0x46b/0x600 [ 827.837914][T16861] should_failslab+0xa8/0x100 [ 827.837931][T16861] __kmalloc_noprof+0xdf/0x7b0 [ 827.837944][T16861] ? kfree+0x4d/0x6c0 [ 827.837962][T16861] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 827.837994][T16861] tomoyo_realpath_from_path+0xe3/0x5d0 [ 827.838014][T16861] ? tomoyo_domain+0xd8/0x130 [ 827.838035][T16861] ? tomoyo_path_number_perm+0x219/0x630 [ 827.838050][T16861] tomoyo_path_number_perm+0x246/0x630 [ 827.838068][T16861] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 827.838086][T16861] ? sb_end_write+0xe9/0x1c0 [ 827.838106][T16861] ? vfs_write+0x9ce/0xba0 [ 827.838146][T16861] ? ksys_write+0x202/0x270 [ 827.838166][T16861] security_file_ioctl+0xc3/0x2a0 [ 827.838185][T16861] __se_sys_ioctl+0x47/0x170 [ 827.838202][T16861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.838221][T16861] do_syscall_64+0x15f/0xf80 [ 827.838240][T16861] ? trace_irq_disable+0x3b/0x140 [ 827.838257][T16861] ? clear_bhb_loop+0x40/0x90 [ 827.838278][T16861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.838292][T16861] RIP: 0033:0x7fc33b67c819 [ 827.838307][T16861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.838321][T16861] RSP: 002b:00007fc3398ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 827.838336][T16861] RAX: ffffffffffffffda RBX: 00007fc33b8f5fa0 RCX: 00007fc33b67c819 [ 827.838347][T16861] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003 [ 827.838357][T16861] RBP: 00007fc3398ce090 R08: 0000000000000000 R09: 0000000000000000 [ 827.838367][T16861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 827.838376][T16861] R13: 00007fc33b8f6038 R14: 00007fc33b8f5fa0 R15: 00007fff190e96c8 [ 827.838400][T16861] [ 827.838408][T16861] ERROR: Out of memory at tomoyo_realpath_from_path. [ 829.223824][ T5832] usb 3-1: USB disconnect, device number 44 [ 829.329852][T16869] vxcan0: tx address claim with different name [ 830.295385][T16873] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 830.750016][T10950] team0 (unregistering): Port device team_slave_1 removed [ 830.831264][T10950] team0 (unregistering): Port device team_slave_0 removed [ 830.943356][T16885] fuse: Bad value for 'fd' [ 831.866960][T16402] veth0_vlan: entered promiscuous mode [ 831.898649][T16894] FAULT_INJECTION: forcing a failure. [ 831.898649][T16894] name failslab, interval 1, probability 0, space 0, times 0 [ 831.898679][T16894] CPU: 0 UID: 0 PID: 16894 Comm: syz.2.3655 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 831.898697][T16894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 831.898707][T16894] Call Trace: [ 831.898714][T16894] [ 831.898721][T16894] dump_stack_lvl+0xe8/0x150 [ 831.898751][T16894] should_fail_ex+0x46b/0x600 [ 831.898775][T16894] should_failslab+0xa8/0x100 [ 831.898794][T16894] __kmalloc_noprof+0xdf/0x7b0 [ 831.898808][T16894] ? kfree+0x4d/0x6c0 [ 831.898832][T16894] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 831.898856][T16894] tomoyo_realpath_from_path+0xe3/0x5d0 [ 831.898877][T16894] ? tomoyo_domain+0xd8/0x130 [ 831.898900][T16894] ? tomoyo_path_number_perm+0x219/0x630 [ 831.898916][T16894] tomoyo_path_number_perm+0x246/0x630 [ 831.898934][T16894] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 831.898948][T16894] ? __lock_acquire+0x6b5/0x2cf0 [ 831.898968][T16894] ? do_raw_spin_lock+0x12b/0x2f0 [ 831.899007][T16894] ? __fget_files+0x2a/0x420 [ 831.899030][T16894] ? __fget_files+0x2a/0x420 [ 831.899049][T16894] ? __fget_files+0x3a6/0x420 [ 831.899068][T16894] ? __fget_files+0x2a/0x420 [ 831.899090][T16894] security_file_ioctl+0xc3/0x2a0 [ 831.899109][T16894] __se_sys_ioctl+0x47/0x170 [ 831.899126][T16894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.899143][T16894] do_syscall_64+0x15f/0xf80 [ 831.899161][T16894] ? trace_irq_disable+0x3b/0x140 [ 831.899177][T16894] ? clear_bhb_loop+0x40/0x90 [ 831.899197][T16894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.899213][T16894] RIP: 0033:0x7f217c3cc819 [ 831.899230][T16894] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.899244][T16894] RSP: 002b:00007f217a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 831.899264][T16894] RAX: ffffffffffffffda RBX: 00007f217c645fa0 RCX: 00007f217c3cc819 [ 831.899276][T16894] RDX: 0000200000000140 RSI: 0000000000004b72 RDI: 0000000000000003 [ 831.899288][T16894] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 831.899300][T16894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.899311][T16894] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 831.899337][T16894] [ 831.903605][T16894] ERROR: Out of memory at tomoyo_realpath_from_path. [ 832.003487][T16402] veth1_vlan: entered promiscuous mode [ 832.139222][ T5822] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 832.339131][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 832.348450][ T5822] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 832.355453][ T5822] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 832.355484][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.355503][ T5822] usb 5-1: Product: syz [ 832.355518][ T5822] usb 5-1: Manufacturer: syz [ 832.355532][ T5822] usb 5-1: SerialNumber: syz [ 832.374147][T16529] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 832.611510][ T5822] r8152-cfgselector 5-1: Unknown version 0x0000 [ 832.611539][ T5822] r8152-cfgselector 5-1: config 0 descriptor?? [ 833.516805][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.621585][T16529] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 833.733321][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.803486][T16529] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 833.870541][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.896277][T16529] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 833.921367][ T5822] r8152-cfgselector 5-1: Unknown version 0x0000 [ 833.921950][ T5822] r8152-cfgselector 5-1: No union descriptors [ 833.944402][ T5822] r8152-cfgselector 5-1: USB disconnect, device number 68 [ 834.037007][T16529] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 834.214422][T16402] veth0_macvtap: entered promiscuous mode [ 834.405371][T16402] veth1_macvtap: entered promiscuous mode [ 834.532133][T16402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.648826][T16402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.883230][ T3530] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.885771][ T3530] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.907837][ T3530] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.084170][T12692] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 835.133760][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3663'. [ 836.017493][T16949] vxlan1: entered promiscuous mode [ 836.599626][T16966] FAULT_INJECTION: forcing a failure. [ 836.599626][T16966] name failslab, interval 1, probability 0, space 0, times 0 [ 836.599663][T16966] CPU: 1 UID: 0 PID: 16966 Comm: syz.4.3665 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 836.599682][T16966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 836.599693][T16966] Call Trace: [ 836.599700][T16966] [ 836.599708][T16966] dump_stack_lvl+0xe8/0x150 [ 836.599740][T16966] should_fail_ex+0x46b/0x600 [ 836.599769][T16966] should_failslab+0xa8/0x100 [ 836.599789][T16966] __kmalloc_noprof+0xdf/0x7b0 [ 836.599805][T16966] ? kfree+0x4d/0x6c0 [ 836.599829][T16966] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 836.599857][T16966] tomoyo_realpath_from_path+0xe3/0x5d0 [ 836.599879][T16966] ? tomoyo_domain+0xd8/0x130 [ 836.599901][T16966] ? tomoyo_path_number_perm+0x219/0x630 [ 836.599917][T16966] tomoyo_path_number_perm+0x246/0x630 [ 836.599935][T16966] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 836.599950][T16966] ? __lock_acquire+0x6b5/0x2cf0 [ 836.599972][T16966] ? do_raw_spin_lock+0x12b/0x2f0 [ 836.600011][T16966] ? __fget_files+0x2a/0x420 [ 836.600035][T16966] ? __fget_files+0x2a/0x420 [ 836.600056][T16966] ? __fget_files+0x3a6/0x420 [ 836.600088][T16966] ? __fget_files+0x2a/0x420 [ 836.600111][T16966] security_file_ioctl+0xc3/0x2a0 [ 836.600133][T16966] __se_sys_ioctl+0x47/0x170 [ 836.600152][T16966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.600172][T16966] do_syscall_64+0x15f/0xf80 [ 836.600193][T16966] ? trace_irq_disable+0x3b/0x140 [ 836.600212][T16966] ? clear_bhb_loop+0x40/0x90 [ 836.600234][T16966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.600251][T16966] RIP: 0033:0x7fc33b67c819 [ 836.600270][T16966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.600287][T16966] RSP: 002b:00007fc3398ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.600306][T16966] RAX: ffffffffffffffda RBX: 00007fc33b8f6090 RCX: 00007fc33b67c819 [ 836.600317][T16966] RDX: 0000200000000000 RSI: 0000000040305829 RDI: 0000000000000004 [ 836.600332][T16966] RBP: 00007fc3398ad090 R08: 0000000000000000 R09: 0000000000000000 [ 836.600343][T16966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.600353][T16966] R13: 00007fc33b8f6128 R14: 00007fc33b8f6090 R15: 00007fff190e96c8 [ 836.600376][T16966] [ 836.600416][T16966] ERROR: Out of memory at tomoyo_realpath_from_path. [ 837.187838][T16529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 837.308740][T16967] FAULT_INJECTION: forcing a failure. [ 837.308740][T16967] name failslab, interval 1, probability 0, space 0, times 0 [ 837.308777][T16967] CPU: 0 UID: 0 PID: 16967 Comm: syz.2.3666 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 837.308799][T16967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 837.308810][T16967] Call Trace: [ 837.308819][T16967] [ 837.308827][T16967] dump_stack_lvl+0xe8/0x150 [ 837.308866][T16967] should_fail_ex+0x46b/0x600 [ 837.308899][T16967] should_failslab+0xa8/0x100 [ 837.308923][T16967] kmem_cache_alloc_noprof+0x87/0x680 [ 837.308955][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.308976][T16967] ? fuse_get_req+0x7da/0x10d0 [ 837.309003][T16967] fuse_get_req+0x7da/0x10d0 [ 837.309026][T16967] ? unwind_next_frame+0xa6/0x2550 [ 837.309050][T16967] ? __pfx_fuse_get_req+0x10/0x10 [ 837.309069][T16967] ? unwind_next_frame+0xa6/0x2550 [ 837.309090][T16967] ? is_bpf_text_address+0x26/0x2b0 [ 837.309118][T16967] __fuse_simple_request+0x2cf/0x1db0 [ 837.309144][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309169][T16967] ? __pfx___fuse_simple_request+0x10/0x10 [ 837.309190][T16967] ? kernel_text_address+0xa5/0xe0 [ 837.309217][T16967] ? __kernel_text_address+0xd/0x30 [ 837.309240][T16967] ? unwind_get_return_address+0x4d/0x90 [ 837.309261][T16967] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 837.309281][T16967] ? arch_stack_walk+0xfb/0x150 [ 837.309308][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309343][T16967] fuse_do_getattr+0x378/0x6a0 [ 837.309383][T16967] ? __pfx_fuse_do_getattr+0x10/0x10 [ 837.309408][T16967] ? do_raw_spin_lock+0x12b/0x2f0 [ 837.309439][T16967] ? lockdep_hardirqs_on+0x7a/0x110 [ 837.309464][T16967] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 837.309503][T16967] ? try_to_take_rt_mutex+0x840/0xb00 [ 837.309528][T16967] fuse_update_get_attr+0x601/0x12d0 [ 837.309561][T16967] ? __pfx_fuse_update_get_attr+0x10/0x10 [ 837.309588][T16967] ? __pfx_smack_log+0x10/0x10 [ 837.309612][T16967] ? tomoyo_check_open_permission+0x1d3/0x470 [ 837.309643][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309671][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309693][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309723][T16967] ? unwind_next_frame+0xa6/0x2550 [ 837.309748][T16967] ? unwind_next_frame+0xa6/0x2550 [ 837.309772][T16967] ? is_bpf_text_address+0x26/0x2b0 [ 837.309801][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309831][T16967] fuse_file_write_iter+0x41b/0x1130 [ 837.309859][T16967] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 837.309879][T16967] ? look_up_lock_class+0x57/0x110 [ 837.309900][T16967] ? register_lock_class+0x31/0x2e0 [ 837.309927][T16967] ? __lock_acquire+0x6b5/0x2cf0 [ 837.309956][T16967] ? kstrtoull+0x12f/0x1d0 [ 837.309986][T16967] do_iter_readv_writev+0x62b/0x8d0 [ 837.310010][T16967] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 837.310045][T16967] vfs_writev+0x345/0x9a0 [ 837.310074][T16967] ? __pfx_vfs_writev+0x10/0x10 [ 837.310109][T16967] ? __fget_files+0x2a/0x420 [ 837.310137][T16967] ? __fget_files+0x3a6/0x420 [ 837.310159][T16967] ? __fget_files+0x2a/0x420 [ 837.310189][T16967] do_writev+0x15a/0x2e0 [ 837.310212][T16967] ? __pfx_do_writev+0x10/0x10 [ 837.310244][T16967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.310267][T16967] do_syscall_64+0x15f/0xf80 [ 837.310289][T16967] ? trace_irq_disable+0x3b/0x140 [ 837.310310][T16967] ? clear_bhb_loop+0x40/0x90 [ 837.310334][T16967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.310355][T16967] RIP: 0033:0x7f217c3cc819 [ 837.310381][T16967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.310398][T16967] RSP: 002b:00007f217a61e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 837.310421][T16967] RAX: ffffffffffffffda RBX: 00007f217c645fa0 RCX: 00007f217c3cc819 [ 837.310436][T16967] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000005 [ 837.310448][T16967] RBP: 00007f217a61e090 R08: 0000000000000000 R09: 0000000000000000 [ 837.310460][T16967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.310471][T16967] R13: 00007f217c646038 R14: 00007f217c645fa0 R15: 00007ffdbb8c5118 [ 837.310499][T16967] [ 837.781881][T12693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.781904][T12693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.964886][T16529] 8021q: adding VLAN 0 to HW filter on device team0 [ 837.993162][T12692] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.993387][T12692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 838.021757][ T2321] bridge0: port 2(bridge_slave_1) entered blocking state [ 838.021970][ T2321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.638792][T10950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 839.638814][T10950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 839.882209][ T5832] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 840.029255][ T5832] usb 1-1: Using ep0 maxpacket: 16 [ 840.042145][ T5832] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 840.045126][ T5832] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 840.045159][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.045182][ T5832] usb 1-1: Product: syz [ 840.045197][ T5832] usb 1-1: Manufacturer: syz [ 840.045213][ T5832] usb 1-1: SerialNumber: syz [ 840.090514][ T5832] r8152-cfgselector 1-1: Unknown version 0x0000 [ 840.090543][ T5832] r8152-cfgselector 1-1: config 0 descriptor?? [ 843.165984][ T5832] r8152-cfgselector 1-1: Unknown version 0x0000 [ 843.166329][ T5832] r8152-cfgselector 1-1: No union descriptors [ 843.188254][T16529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 843.305064][ T5832] r8152-cfgselector 1-1: USB disconnect, device number 79 [ 843.327005][T14239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.383145][T14239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.386320][T14239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.409981][T14239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.434502][T14239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 843.829568][T16529] veth0_vlan: entered promiscuous mode [ 843.889872][T16529] veth1_vlan: entered promiscuous mode [ 843.991297][ T5832] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 844.067996][T16529] veth0_macvtap: entered promiscuous mode [ 844.129290][ T5832] usb 3-1: device descriptor read/64, error -71 [ 844.159294][T16529] veth1_macvtap: entered promiscuous mode [ 844.167569][T17024] usb usb9: usbfs: process 17024 (syz.0.3676) did not claim interface 4 before use [ 844.409827][ T5832] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 844.523542][T16529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 844.585632][T16529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 844.609218][ T5832] usb 3-1: device descriptor read/64, error -71 [ 844.619220][ T5932] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 844.700424][T12692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.725654][T12692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.731265][ T5832] usb usb3-port1: attempt power cycle [ 844.759521][T12692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.763888][T12692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 844.769552][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 844.796493][ T5932] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 215, changing to 11 [ 844.796535][ T5932] usb 1-1: config 1 interface 0 has no altsetting 0 [ 844.852759][ T5932] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.40 [ 844.852796][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.852818][ T5932] usb 1-1: Product: ࠖ [ 844.852834][ T5932] usb 1-1: Manufacturer: 꼗牐ᗆ髲㐿甪箒鮌∿筄೜彎깩員빦鳔鮈๗渂磌䔉燅䩷㽵莧욼툍컛邝㲟厏봆ᯭ跭冘ኁ쥚㤨篟ը૗⮼橄㞪砈㗍場侹햏躇ﺚ䑪粄휐뮌㪎ꥶ碄⦗ᕡ␮持ⴘזּ넃⫏⥯ﳈ▟⃺崙鎳䆌겓⨃䠺䯔˱ﺺꢹࣰ禶舸㿬䉵 [ 844.852869][ T5932] usb 1-1: SerialNumber: ѵ顗堓䍁号鶲㌇ꠜᚆतꣵ鄟ᑨ㬲ሏ襖읻䤳翽⊷닒ᐁ떬蔶팭蚱撷㳁ۛ䢮ꅼ灼岳䞀괗誴 [ 844.938080][ T823] ================================================================== [ 844.938098][ T823] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 844.938186][ T823] Read of size 8 at addr ffffc900068b1008 by task kworker/0:2/823 [ 844.938198][ T823] [ 844.938212][ T823] CPU: 0 UID: 0 PID: 823 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 844.938225][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 844.938235][ T823] Workqueue: usb_hub_wq hub_event [ 844.938253][ T823] Call Trace: [ 844.938259][ T823] [ 844.938266][ T823] dump_stack_lvl+0xe8/0x150 [ 844.938287][ T823] print_address_description+0x55/0x1e0 [ 844.938305][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.938318][ T823] print_report+0x58/0x70 [ 844.938332][ T823] kasan_report+0x117/0x150 [ 844.938349][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.938363][ T823] __list_del_entry_valid_or_report+0xb5/0x190 [ 844.938377][ T823] kcov_remote_start+0x2af/0x710 [ 844.938398][ T823] hub_event+0x150/0x4f60 [ 844.938412][ T823] ? __lock_acquire+0x6b5/0x2cf0 [ 844.938426][ T823] ? look_up_lock_class+0x57/0x110 [ 844.938442][ T823] ? __lock_acquire+0x6b5/0x2cf0 [ 844.938454][ T823] ? trace_hrtimer_start+0x82/0x200 [ 844.938473][ T823] ? lock_acquire+0x106/0x350 [ 844.938486][ T823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 844.938499][ T823] ? __pfx_hub_event+0x10/0x10 [ 844.938519][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.938540][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.938555][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.938570][ T823] process_scheduled_works+0xb5d/0x1860 [ 844.938593][ T823] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.938611][ T823] ? assign_work+0x3d5/0x5e0 [ 844.938636][ T823] worker_thread+0xa53/0xfc0 [ 844.938652][ T823] kthread+0x388/0x470 [ 844.938670][ T823] ? __pfx_worker_thread+0x10/0x10 [ 844.938680][ T823] ? __pfx_kthread+0x10/0x10 [ 844.938693][ T823] ret_from_fork+0x514/0xb70 [ 844.938705][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 844.938715][ T823] ? __switch_to+0xc79/0x1410 [ 844.938732][ T823] ? __pfx_kthread+0x10/0x10 [ 844.938746][ T823] ret_from_fork_asm+0x1a/0x30 [ 844.938765][ T823] [ 844.938770][ T823] [ 844.938774][ T823] The buggy address belongs to a vmalloc virtual mapping [ 844.938792][ T823] Memory state around the buggy address: [ 844.938802][ T823] ffffc900068b0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 844.938822][ T823] ffffc900068b0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 844.938831][ T823] >ffffc900068b1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 844.938837][ T823] ^ [ 844.938843][ T823] ffffc900068b1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 844.938851][ T823] ffffc900068b1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 844.938857][ T823] ================================================================== [ 844.939216][ T823] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 844.939233][ T823] CPU: 0 UID: 0 PID: 823 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 844.939250][ T823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 844.939261][ T823] Workqueue: usb_hub_wq hub_event [ 844.939283][ T823] Call Trace: [ 844.939290][ T823] [ 844.939297][ T823] vpanic+0x56c/0xa60 [ 844.939317][ T823] ? __pfx_vpanic+0x10/0x10 [ 844.939333][ T823] panic+0xc5/0xd0 [ 844.939347][ T823] ? __pfx_panic+0x10/0x10 [ 844.939361][ T823] ? preempt_schedule_thunk+0x16/0x30 [ 844.939384][ T823] ? preempt_schedule_thunk+0x16/0x30 [ 844.939402][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.939421][ T823] check_panic_on_warn+0x89/0xb0 [ 844.939441][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.939457][ T823] end_report+0x73/0x170 [ 844.939474][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.939491][ T823] kasan_report+0x128/0x150 [ 844.939518][ T823] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 844.939538][ T823] __list_del_entry_valid_or_report+0xb5/0x190 [ 844.939557][ T823] kcov_remote_start+0x2af/0x710 [ 844.939588][ T823] hub_event+0x150/0x4f60 [ 844.939613][ T823] ? __lock_acquire+0x6b5/0x2cf0 [ 844.939630][ T823] ? look_up_lock_class+0x57/0x110 [ 844.939655][ T823] ? __lock_acquire+0x6b5/0x2cf0 [ 844.939676][ T823] ? trace_hrtimer_start+0x82/0x200 [ 844.939704][ T823] ? lock_acquire+0x106/0x350 [ 844.939720][ T823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 844.939738][ T823] ? __pfx_hub_event+0x10/0x10 [ 844.939756][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.939789][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.939815][ T823] ? process_scheduled_works+0xa70/0x1860 [ 844.939842][ T823] process_scheduled_works+0xb5d/0x1860 [ 844.939881][ T823] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.939911][ T823] ? assign_work+0x3d5/0x5e0 [ 844.939940][ T823] worker_thread+0xa53/0xfc0 [ 844.939970][ T823] kthread+0x388/0x470 [ 844.939993][ T823] ? __pfx_worker_thread+0x10/0x10 [ 844.940009][ T823] ? __pfx_kthread+0x10/0x10 [ 844.940030][ T823] ret_from_fork+0x514/0xb70 [ 844.940050][ T823] ? __pfx_ret_from_fork+0x10/0x10 [ 844.940068][ T823] ? __switch_to+0xc79/0x1410 [ 844.940096][ T823] ? __pfx_kthread+0x10/0x10 [ 844.940117][ T823] ret_from_fork_asm+0x1a/0x30 [ 844.940144][ T823] [ 844.949225][ T823] Kernel Offset: disabled