last executing test programs:

2m4.239604289s ago: executing program 1 (id=24):
r0 = syz_usb_connect(0x0, 0x120, &(0x7f0000000000)=ANY=[@ANYBLOB="120101007cde0440720c130049b30000000109020e0101000000000904"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r1)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x224}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
sched_setattr(r4, &(0x7f0000000140)={0x38, 0x6, 0x3c, 0xe, 0x2, 0x2, 0x3fc0000000000, 0x40, 0x9, 0x8}, 0x0)
creat(&(0x7f0000000240)='./file0\x00', 0x122)
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000400)=@v3={0x3000000, [{0x9, 0x1}, {0x0, 0x3d9b}]}, 0x18, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_current(r5, &(0x7f0000000180)=ANY=[], 0xff)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f0000002600)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0})

1m59.931799494s ago: executing program 1 (id=38):
ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000000)={0x5, 0x4, 0x3})
r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
r1 = dup(r0)
ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000040)=0x4)
ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000080)={0x2f2d47b1, <r2=>0x0})
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f00000000c0)={0x6, r2})
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000100))
read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_GETXATTR(r1, &(0x7f0000002180)={0x18, 0x0, r3, {0xffffffff}}, 0x18)
r6 = userfaultfd(0x800)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000021c0)={0xaa, 0x2})
fcntl$getown(r0, 0x9)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000002200)={{0x1, 0x1, 0x18, <r7=>r0}, './file0\x00'})
write$FUSE_STATX(r1, &(0x7f0000002240)={0x130, 0x0, r3, {0x1, 0x8, 0x0, '\x00', {0x400, 0xa, 0x7fffffff, 0xbdac, r4, r5, 0xa000, '\x00', 0x7, 0xd573, 0x5, 0x3ff, {0x9, 0x10}, {0xb7, 0x71}, {0x9, 0x1}, {0xffff, 0x947d9500}, 0xfffffffb, 0x6, 0x80000001, 0x3}}}, 0x130)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)=@gettaction={0x1c, 0x32, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffff33}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x100)
ioctl$KDGKBDIACR(r7, 0x4b4a, &(0x7f0000002480)=""/118)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000025c0)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x20, 0x1404, 0x10, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x840)
r9 = socket$vsock_stream(0x28, 0x1, 0x0)
r10 = openat$hwrng(0xffffff9c, &(0x7f0000002600), 0x200000, 0x0)
close_range(r9, r10, 0x0)

1m59.386536291s ago: executing program 1 (id=39):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x416400)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x271b, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
timerfd_create(0x0, 0x0)
shutdown(0xffffffffffffffff, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/file0\x00', 0xfffffe92)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)
pread64(0xffffffffffffffff, &(0x7f0000000340)=""/251, 0xfb, 0xacab)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$inet6(0xa, 0x80002, 0x88)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
readv(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1)
setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4)
syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r5, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000)

1m57.289022907s ago: executing program 1 (id=54):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="02011400a8dc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x2, 0x7c}, [@nested={0x18, 0x1c2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}]}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0xff}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0x400c800)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190a0101000000000000001e0000000009000200626b3bbb000000000900010073797a3100000000"], 0x2c}}, 0x8004)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000003c0)='./file0/file0\x00', 0x8)
r8 = socket$kcm(0x2b, 0x1, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0)
getdents(r9, &(0x7f0000000200)=""/226, 0x13)
getdents(r9, 0x0, 0x18)
sendmsg$inet(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f0000000080), 0x24)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r10, 0xc25c4110, &(0x7f0000000400)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000], [0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x40000000, 0x10000000]], '\x00', [{0x0, 0x2000}, {}, {}, {0xfffffffc, 0x1}, {}, {}, {}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000})
close(r8)

1m56.125172003s ago: executing program 1 (id=64):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x1, {0x1, 0xf0, 0x2}, 0x1}, 0x18)
writev(r1, &(0x7f0000000240)=[{&(0x7f0000000280)="b7d6e8", 0x3}], 0x1)

1m55.59795682s ago: executing program 1 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x529, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xffe0}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x200, 0x7, "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", 0xfd, 0x56, 0x6, 0x3, 0x2, 0xff, 0x2, 0xff}}}, 0x120)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe4)
ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000340)=<r12=>0x0)
sendmsg$nl_generic(r10, &(0x7f0000002740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000005100)={0x2328, 0x36, 0x1, 0x70bd2c, 0x25dfdbfe, {0x17}, [@typed={0x4, 0x73}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x107c, 0xe3, 0x0, 0x1, [@nested={0x58, 0x11a, 0x0, 0x1, [@typed={0x9, 0x138, 0x0, 0x0, @str='*[)%\x00'}, @typed={0x47, 0x10e, 0x0, 0x0, @binary="60e70cd417fc1d05ecd08c0d83333fca273f610530d2e0768f63f5a02d8c011bb88412ee5560977e72a25ad11503d50c79bd74c3ccb7a7d0aac2b1f7994f692815759d"}]}, @typed={0x1004, 0xda, 0x0, 0x0, @binary="cc13b6eccec6564d451d042790ae283d8ae3f29507f25e35d69351203bdbc06e79e2c27f06498a2633712aabf662a998ab0e71b3d2244664e8412670ce086646fb4db8e9a2c3d4bd04a7ee60b5c79368fddd19107b7c045d6cb8cde96f0f4347e8b4f2d3435c26206f7f16a09219b324b82e33c68778c551dfb2d9cb48d2ac1e85fc37375701a6f7a29ed9c266a79f83c0247e6f89d1a1d901301356f072902239dc40dae7854e36825100afd14314a2cb842837363921b6387e8ce079c6754fe821b403be3eb4643e9217538c66118ea231fa601680cceecda4cfaa41447a844da8205b98e14f04f28d73f217b751532708a63e87cf4190a3dc660e9e98968116ac3145139a2027100d32fd6335a89f665b26e5e84aecb8bb1debdbbad5c12b8358bfd7092d95fe525c7ef4d6d8d873b1a9a188cebc7f771807e4fe3a0c63484a7141fb615c7724292328cacef5618569a0a1d765bbebc9094b685688bc3519ca9595c64f9d081c4d92f6374b71f295ac5a0a99da07f7c3ac255d64fec85ab03d1721a14f7cf4ee18da6c4f7128e8714d04363398dcf765ac758b7346517c4118bb45e79448d7fbeb149cf06c67c4697a6c188cc768fcabc68ac1ab9849d874922ff25e58a826d28afdc059f8753519d59efcadcf4508fc7768c6307078d138a0ab165be2faeb3230c292283558a25206ff12b8619f3f26f4315aa8beac338a1c61d9e0bfc1777ef42a18a7a0cc682867a8af0afcecae6b9428989f3310fb186c174c2e236eb8288228658e6e94c66061e48839d4659d05393652eb06709abc36a30e5026b335b0e39373f57eabcae16bda9cc7947fc8b05db25c6bc41eb32e98208d6f9dbb0831e70d72f905b1f9c0fcbc2b9cb9aed2deaf9eb332130be06b786fd911e3652d2a34d6d054c6a86006bfafcaf4c695e0dd303e4b3a57d76fe3bf05edd9f66c99fb0c9ad5413ad9ba7a1e31cbc16398a544b4b8fe0cffafaead1e6c3f5ce9ee886b2bdd2a53c54c6e91a3c6f67ad61ef9068463c9092ba593bb160dd554ae753dab9b512b2dd810fc915d1e1aa02d83d4ed634418839bc67adc2e47d9fa3dafd6c278f5e02cecd34ffe0f4498101ae177b0fd800b916d161b504a1cac6d48b051ecfdac7b2405449e9d49677762afef5d86cc52d2a7d2e81914098240211b236a8f92ac2869a358c3c2c5dde1951f6844d88d4aa1118e142de08e9d20b061b4a7d8bd90afbfa06dbd1989bf0575ba8a74c44ed3e92dcfc7dc7c19bb9334ca4fac243b2d93890bec7f911519f7a8cd62dd463118d50b6029f0ab7700ab2c503dba0a0158091a30b95cd98460dd5394e135a34675f15dfe70f2840fb4f81a5e6cb5f3d6aaf0497ef1455b0828061a64e0b135918841291c20fcaba8c46845f7cb0c11e1f1b33a311416e0bf4c406d30a5dae92027c4717e5452154ca206afe8057ebf01ff3584ea6030f54847d3a062395b9d4c39a17975c547e12e01a2f1b941b302aebeda0406a330f1ef46c97bb351acc855c4dcec9dd77d3e4960c3595c9a218e485e7b08ff753a1f131b3aa1c05a4a5fc1ed55e716d6e3df239fbda15797e73802a5f142ddf63c94883ea71c9d0f1f3c01552fe3d09b852a30d6ee28e473b2f7ecb36157c195273d61a1f467996754e55a8d189af9a5a9b534236a1d5c0213c1d9a40d53b72b0b5b8514c73fac19ed18bc5dc3cd38e3e7f5f911cf7b0e9d121db1b96ef60ff730ee413b51b2c9304b64928add04555e5dbdcbe239ea80920ae50b61dd07d17d26bc5b73b82edbd7a93c502c2b0b12a0f7d5e6ac2536dacaa1e684f569fe4a39ce714718646a478e493378000c3434990e4e6188a3bd8eeba5867a778d67c5e356eaa7247c780fb247376577c706a99a5e46fec49a77f0f1fc471a80f1b4fd9969da5d6300f0dd318784d260e216ce7a516966ec157751971dc254a21941bb65d5f223bcb0d782ce48e5b80e375f58f94787b034abf0cceefc1de87c7935276e39cf91a8389d1841f97e49be5b3340daaa31bfa2c20f8b03f7e69283f7bbf3bd686e9216b98a86a0dba00c7bb69c67e40b99f9a6c529f453f1aba86c1d643bf5fd71b5ff878905836160f09ae63dbdeb7449aad5701b01755586912614e8f0d4ef72d7c28a074d5ed83cfee06d3e31c1289ebc069f096c95e2aa9559465cc46f797c35c4ffba18106de75c7553676e3dbede254033c2d6fc8220de69498a2679f5167768a3079e4020360fbba0a987c28ffeaf106973441cc4282819b2f91abf7b1e933f32cb1dcada1c6fdef170084faeb67d6313e9f55cf1898408e5cc76fe6f9ab0398d78b1ac3469fcf61b8f07024703f4c6ad691835d0f6a392123e0288eb36cd79af5f4179b751e2c469160da4ad822f540295383acf41dcc4c75ba97bf9bd4df944836ad563b8d4e76a0d92d69d8c0e50b711226dd8de46fdbe9492a47893d8a0c26239148ff300d84fedffc11f2e47a3276bfcb77a4e1451f2a7d3e529d6eb9e3d0a82555aaf14aac00e8e998a249641e0e70a601fb2e10c3424693d1daeb384454b225aad9f0859277e3fac65728e05400e582a2d1fa1ca6b635f9f2cff1a76f2fcf3216115aabb6e9fe88437c0f8b152249aa8262c97ecc37126ae7eea71673e444bed5815545424c499119561cbb8750c95beb15f12d8dd3ca9d7c0f6cee1ce5a773e8f6989903d1965844dd02354f71c645633aee08a5de1735eedee28703ebc1c606d366e6b98bbd960cfeafb67f1a0503dc1d1d1d37966b0767f0be63045dfc6c0bfa2a2bfda96d5fae45faa6371951a8798b75aee29257267c8c048bf2839df6a5291ec7e5c178eda2b29c883918e50353277707a0e775c3991b1d6804140adf536c40c708532827d16e878adaec90e793cec330c66b4cbf7081d3a50cb6687e6012b2e97a89c0874d7165478ad399f1405560b25bd63743d1e1a71158e4692ba8b1eba8708294ed3e8d6d58a92f47148a8f33bbea45e74d8f60f8283b89f8273e5240d052af5334f4c3bf11170abda2d97ee6f9bb0e833128eca26ca738d1c03a60dd4663f4b7a68b6e63602a4a457fa5e6dd3d31b64935b9bc438c75c955d858c426a8133e4a4035d9cff91e383d9e188954f2064b27b547e62292e330f6b2b5a30afc34481b55f2dfc6ff9193a3cb74a43aa878b51944494959938db22424ff195ad767d3028b96abc87f628406eb061f624ffbd5fa07910f8a278e3d2080786143cd9911b1c0abbc006d9157a7a7c371388d4cb2ead7c3b64e2bc31189e713211d49d19f88a6883176df261eed45fc44829ec2c3b408108afb717dae64e2e07062e5b13bd24936b65be99818bfd0c08a06fac2fdb0f77aad3751394144accf8bd9dfccc33f8fefd8d50636ac300a226c6314129933251fdffbf365d930688cda0479719f09598851ccf66d9cbb84a2247d840c99eeba668d05c28fe97c6b9100829417203e8cb1b93758bebf63e83b1242e2ef35a9222eece043dd62f7032f6ddea74e4fec410b6491b9e3ac8ce1c8a6c088dffee597655fbde3d549178cc21d3d4e7a0f1d6e215b8e991553f7875fed21f0a58f18f15a8932dc5b345a1dbe7cf62bdba96c06f630b6094183310c9d958e7b53f41929b15a1f04bb9dc3a391ed9d2636aa02992dce6c753524ca037288dfffdc38c5f5229ccd6952b415827f1b1c78604ba156caad03248a62b1c80a677803cd26ff6b54542e600d92e8134d01511f5dfb1592660228123dca38e86b92bc904b0982a001c37dd1ccaf1a902ce545ed9dd3208096752776d70fca70cded9c504fa8e2eb3b3f6325eac6b854468dccfe06a1772d37d3d5bee1c70df6fac4cc7cda0e7dcdfda9e172e2b6e6923a8be29592426a9df5ddfe075e9b15d082065789b5d181153dbdc148e2c57cc752a5fd248d97956105c8bfe82e2ab8bd739f5a7f04b334c72a74e7f4626b2c405b7695353effcf4ecb2a72411498c26297137f0c67036ea3fd18d3994a4835f6af9881b2c37f5a1bf98849a0a85f594847dc9605db5ffe5be27761fa276949b91ccd6047c2eec46ca0fb0c2ffd69af2ba1d15b084e5a43425654d49161bae32a394e3501158ee7ab1764b1bfc7a54abb84759e9dc238c2d958a42dfb23c7a14c1978dc9e3fc3b00ae188a293e0b9e516e4bf8418b141eb410b81f695254be2bae120c34d9c11e2199197290b3eaaa788ee5d889febc798f1ca7f350f003663cd82c4a48940198e6d96c2b0181f22c118fead90053ed5677a7de1d153d08ef392aa867fd928bf2b1966faa42ee5ae5a2eebc02a09be6c420bee0b9b4fc19a8659be063371af333ff68051cda6b3c65367629e69747ad821ee2bbb6e5fb40b9be1d075cabd4c53446a089ec2c745c72a0ead702161a1a906cf6bb76c1ee9bfec1b55852b0014f8ce1fb76110774e2ef0a9964ece15c6dbd02ef5d3c7675447876d98a7fd26b1aa5139831c5e2624a2b770cfb7c989053ea898f536796d5d8b48dca9219bd537d4c1f0a7c519632fedcb23d4e978b8d705b8d2a7bee20558064c5431f127e4545298a5fe1eb68107d703ed22593490649b7d466dcff726ae26bde49a3f6cd68b0169fef3f28172c9392edf604f64ef92c2b9902114948cc739b2edfe449b3de86f560dff9568a863aaffc18036e6cf720b9a5658da109ef5ae02a0bcb8be30ab359989dfc3ca8d16cf91811e7a730d701cf12d9061c4b05d9a688de355240bb6d56617cc19b2ccfac9dc1de837ff708edd688217c9d7b58cc29e7cb49a94aef9471a0c882b9f9a39a26d5fbabff42fc359bfe8849f6572d26a7f4c202b73fd15862a9b497824ebf016ba1e8107a4642a105e4e4256b5a86e6a996719516a8cf86f4aa2213ed711bca6d390b93f3777252620a47809bf40dc79a6e7f145213b979b6269ddb3dedf7ef721ee358d09664e97a4fefad2a0183beb013d3b576a5a1f4c3694ab2f8fbecbe8d2425a38cd3f1f5deac29321fdb53a7a8538584cdda4b352ddab18c3b88536ac50a79d826d4c7fd3a0618ff63a8de44655d0e2537472e164253bfd71d55f39ad36e10e3548aa08442763f904c2cab38a9d2445c303b3270e7a97f04089e3d31eb3673b835a62d12e5fe3f9ad7d934bfe6c76946801283fa9e6cf7ccbf8cd53e6f17a4cde94531b3b42f818237b6124c00c2b65fe2193630340304a5246194925c1e1da99afeec537744646b7d7d8e79c088a844bc4f0c77e8a56dd151e0b7f886936d73ab31c360f3eb6599d5dc0c1a8c23915d44f4c6fe335e8159870fd7fcd133d26bf5af81777ca683da51b3326f664ba8632a3bb009fd1280b58f8d4bae36bc0e4f4d07f98b7e52bcb248cdd4a14c57b73f60e0503d14e8287bc951da3059e5a21c0f5b4aa6c35755a0ac9008b73008298b566b1af1879ae7046773254f833783a26e3e90e6eaa930be4987375f781d1107b1bc3ab62332b568a879c03e26a0d63bab2a685d0ae9bac84cd411d960ca1abc6b142c2372c5f795255d13e3bbffcbd8b277323da004fa99d6afe7b5697ae330b1f4f88a4b522cbd2a08230c6412aa5d90b91a06430d0a21f1293b3a1b3b5370e9566c43b4f40500974c2a2c3a9e0c283cc43ce2ff0a220b4daaade0e051dd17bd9ac63401bc6e1f92797733f088ce909f402962fdbca777b0b5367ef094368aaac607e420303e062811b59d104e5c23aa6dddb6eee238ec0f1673f545a75125f81d8dee36a166aa23649842da57eaaab6d332b2485c68c46fd618749fd9faf530c9d401cd6032938e"}, @typed={0x8, 0x98, 0x0, 0x0, @pid=r12}, @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0xe6, 0x0, 0x0, @uid}, @generic="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", @typed={0xc, 0x49, 0x0, 0x0, @u64=0x2}, @generic="9e3bf994f61541d126ef1842d8b3c88e1d6590aa00125b7c936401054d3c531432146116ff1717fb6c1f9eeda877630865cb0507576abe69751c8c1bfa4b0d257c480d1788246cccf06db33973c589a377cb0072ecfa1119a7cc251a6aa44adb50515de38a2445de614751ecc69de4ab3ef35f5287f9eb901d4194e8121ce3f04327a02fc1203a053d4b0524c497e52bcf8ff25f52e4cf5e7bf8682f0e78", @generic="990bf19bc0f7fcce7d8df7ded76a64ca2f9266bf3fbf9995a5967649431c39f266cfe9b637aa7de7f68fefc2aa93ad94e52a965dac044e4bd678b2970f484f4fe7ad0d8af45f4b597e418576c4071a6ee2529c1d45332d2537cfa31e83ac5111a167fdbd1adff10056d63ec9e44ad48e9e2d1ff5a31f9e14e81845f59e27e63dfb8eab6912f02dd99c46e36e834fb5dd71fa8b42104e8ba05c91e57ce4692a015859cd3934ae104185c4f0ff2e76688b858ccb47336235e683fb9ca948eab61f7a6996ad722069e6d3735b5da7257452714a295146c5f36ec55007b589cdf723ef7f29cd83270d70b1", @nested={0xf0, 0x98, 0x0, 0x1, [@generic="27e45d96389a9f07874a8890bb9f365a9bd52063e8c791347a97f0158b28fa76512c3dc05ea8f96db14c2637c05456d2fc085fa9d69e63b3970c51523ac571a23d77ad8ac28035a2c157ce7067b2f6f42dca61b658138b8c6a5f9b53a5582df0f007ca36be7fd1124a40ce6bc7ff213077a1d744ebaad8c62e5855bf9ba92a9911c946cdd6f00eb48a059737c1f8d9c9fea3d7c88054b751fe483f2bbb0240715281f909642d8fa29337e64799f237479da3e58576cb4d7e021258dc6495bafbd357257c26f5c56d96420cd7cfcb6c1de34b39d721bba02cb60357476beb93f5492eb6a7fbef49039b1a8030"]}]}, 0x2328}, 0x1, 0x0, 0x0, 0x80}, 0xc015)
connect$can_bcm(r10, &(0x7f0000002780)={0x1d, r11}, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', <r14=>0x0, 0x2f, 0x9, 0x5, 0x7, 0x1c, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x7, 0xffff48f5, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x800, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r14}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c044}, 0x4810)
r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000002ac0)=""/63, 0xcc, 0x3f, 0x0, 0x80000000, 0x10000, @value=r3}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002bc0)={0x6, <r16=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x1e, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000080000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="00000000000000b70500000800000085000000a51e00008500000027000000db35300011000000bf910000009e46c027020000008500000084000000b70000000000000095f900000000000000"], &(0x7f00000028c0)='syzkaller\x00', 0x75, 0x88, &(0x7f0000002900)=""/136, 0x41100, 0x8, '\x00', r14, @sk_msg, r15, 0x8, &(0x7f0000002b40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002b80)={0x2, 0xa, 0x5, 0x972}, 0x10, r16, r10, 0x0, &(0x7f0000002c00)=[r10, r10, r3, r10], 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000fddbdf25440000000800036d", @ANYRES32=r17, @ANYBLOB="0a001800030303030303000008006b0014000000"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)

1m54.003759988s ago: executing program 32 (id=68):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
r5 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x529, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xffe0}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004)
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x200, 0x7, "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", 0xfd, 0x56, 0x6, 0x3, 0x2, 0xff, 0x2, 0xff}}}, 0x120)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000440)={{{@in, @in6=@ipv4={""/10, ""/2, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000300)=0xe4)
ioctl$TIOCGPGRP(r10, 0x540f, &(0x7f0000000340)=<r12=>0x0)
sendmsg$nl_generic(r10, &(0x7f0000002740)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000005100)={0x2328, 0x36, 0x1, 0x70bd2c, 0x25dfdbfe, {0x17}, [@typed={0x4, 0x73}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x107c, 0xe3, 0x0, 0x1, [@nested={0x58, 0x11a, 0x0, 0x1, [@typed={0x9, 0x138, 0x0, 0x0, @str='*[)%\x00'}, @typed={0x47, 0x10e, 0x0, 0x0, @binary="60e70cd417fc1d05ecd08c0d83333fca273f610530d2e0768f63f5a02d8c011bb88412ee5560977e72a25ad11503d50c79bd74c3ccb7a7d0aac2b1f7994f692815759d"}]}, @typed={0x1004, 0xda, 0x0, 0x0, @binary="cc13b6eccec6564d451d042790ae283d8ae3f29507f25e35d69351203bdbc06e79e2c27f06498a2633712aabf662a998ab0e71b3d2244664e8412670ce086646fb4db8e9a2c3d4bd04a7ee60b5c79368fddd19107b7c045d6cb8cde96f0f4347e8b4f2d3435c26206f7f16a09219b324b82e33c68778c551dfb2d9cb48d2ac1e85fc37375701a6f7a29ed9c266a79f83c0247e6f89d1a1d901301356f072902239dc40dae7854e36825100afd14314a2cb842837363921b6387e8ce079c6754fe821b403be3eb4643e9217538c66118ea231fa601680cceecda4cfaa41447a844da8205b98e14f04f28d73f217b751532708a63e87cf4190a3dc660e9e98968116ac3145139a2027100d32fd6335a89f665b26e5e84aecb8bb1debdbbad5c12b8358bfd7092d95fe525c7ef4d6d8d873b1a9a188cebc7f771807e4fe3a0c63484a7141fb615c7724292328cacef5618569a0a1d765bbebc9094b685688bc3519ca9595c64f9d081c4d92f6374b71f295ac5a0a99da07f7c3ac255d64fec85ab03d1721a14f7cf4ee18da6c4f7128e8714d04363398dcf765ac758b7346517c4118bb45e79448d7fbeb149cf06c67c4697a6c188cc768fcabc68ac1ab9849d874922ff25e58a826d28afdc059f8753519d59efcadcf4508fc7768c6307078d138a0ab165be2faeb3230c292283558a25206ff12b8619f3f26f4315aa8beac338a1c61d9e0bfc1777ef42a18a7a0cc682867a8af0afcecae6b9428989f3310fb186c174c2e236eb8288228658e6e94c66061e48839d4659d05393652eb06709abc36a30e5026b335b0e39373f57eabcae16bda9cc7947fc8b05db25c6bc41eb32e98208d6f9dbb0831e70d72f905b1f9c0fcbc2b9cb9aed2deaf9eb332130be06b786fd911e3652d2a34d6d054c6a86006bfafcaf4c695e0dd303e4b3a57d76fe3bf05edd9f66c99fb0c9ad5413ad9ba7a1e31cbc16398a544b4b8fe0cffafaead1e6c3f5ce9ee886b2bdd2a53c54c6e91a3c6f67ad61ef9068463c9092ba593bb160dd554ae753dab9b512b2dd810fc915d1e1aa02d83d4ed634418839bc67adc2e47d9fa3dafd6c278f5e02cecd34ffe0f4498101ae177b0fd800b916d161b504a1cac6d48b051ecfdac7b2405449e9d49677762afef5d86cc52d2a7d2e81914098240211b236a8f92ac2869a358c3c2c5dde1951f6844d88d4aa1118e142de08e9d20b061b4a7d8bd90afbfa06dbd1989bf0575ba8a74c44ed3e92dcfc7dc7c19bb9334ca4fac243b2d93890bec7f911519f7a8cd62dd463118d50b6029f0ab7700ab2c503dba0a0158091a30b95cd98460dd5394e135a34675f15dfe70f2840fb4f81a5e6cb5f3d6aaf0497ef1455b0828061a64e0b135918841291c20fcaba8c46845f7cb0c11e1f1b33a311416e0bf4c406d30a5dae92027c4717e5452154ca206afe8057ebf01ff3584ea6030f54847d3a062395b9d4c39a17975c547e12e01a2f1b941b302aebeda0406a330f1ef46c97bb351acc855c4dcec9dd77d3e4960c3595c9a218e485e7b08ff753a1f131b3aa1c05a4a5fc1ed55e716d6e3df239fbda15797e73802a5f142ddf63c94883ea71c9d0f1f3c01552fe3d09b852a30d6ee28e473b2f7ecb36157c195273d61a1f467996754e55a8d189af9a5a9b534236a1d5c0213c1d9a40d53b72b0b5b8514c73fac19ed18bc5dc3cd38e3e7f5f911cf7b0e9d121db1b96ef60ff730ee413b51b2c9304b64928add04555e5dbdcbe239ea80920ae50b61dd07d17d26bc5b73b82edbd7a93c502c2b0b12a0f7d5e6ac2536dacaa1e684f569fe4a39ce714718646a478e493378000c3434990e4e6188a3bd8eeba5867a778d67c5e356eaa7247c780fb247376577c706a99a5e46fec49a77f0f1fc471a80f1b4fd9969da5d6300f0dd318784d260e216ce7a516966ec157751971dc254a21941bb65d5f223bcb0d782ce48e5b80e375f58f94787b034abf0cceefc1de87c7935276e39cf91a8389d1841f97e49be5b3340daaa31bfa2c20f8b03f7e69283f7bbf3bd686e9216b98a86a0dba00c7bb69c67e40b99f9a6c529f453f1aba86c1d643bf5fd71b5ff878905836160f09ae63dbdeb7449aad5701b01755586912614e8f0d4ef72d7c28a074d5ed83cfee06d3e31c1289ebc069f096c95e2aa9559465cc46f797c35c4ffba18106de75c7553676e3dbede254033c2d6fc8220de69498a2679f5167768a3079e4020360fbba0a987c28ffeaf106973441cc4282819b2f91abf7b1e933f32cb1dcada1c6fdef170084faeb67d6313e9f55cf1898408e5cc76fe6f9ab0398d78b1ac3469fcf61b8f07024703f4c6ad691835d0f6a392123e0288eb36cd79af5f4179b751e2c469160da4ad822f540295383acf41dcc4c75ba97bf9bd4df944836ad563b8d4e76a0d92d69d8c0e50b711226dd8de46fdbe9492a47893d8a0c26239148ff300d84fedffc11f2e47a3276bfcb77a4e1451f2a7d3e529d6eb9e3d0a82555aaf14aac00e8e998a249641e0e70a601fb2e10c3424693d1daeb384454b225aad9f0859277e3fac65728e05400e582a2d1fa1ca6b635f9f2cff1a76f2fcf3216115aabb6e9fe88437c0f8b152249aa8262c97ecc37126ae7eea71673e444bed5815545424c499119561cbb8750c95beb15f12d8dd3ca9d7c0f6cee1ce5a773e8f6989903d1965844dd02354f71c645633aee08a5de1735eedee28703ebc1c606d366e6b98bbd960cfeafb67f1a0503dc1d1d1d37966b0767f0be63045dfc6c0bfa2a2bfda96d5fae45faa6371951a8798b75aee29257267c8c048bf2839df6a5291ec7e5c178eda2b29c883918e50353277707a0e775c3991b1d6804140adf536c40c708532827d16e878adaec90e793cec330c66b4cbf7081d3a50cb6687e6012b2e97a89c0874d7165478ad399f1405560b25bd63743d1e1a71158e4692ba8b1eba8708294ed3e8d6d58a92f47148a8f33bbea45e74d8f60f8283b89f8273e5240d052af5334f4c3bf11170abda2d97ee6f9bb0e833128eca26ca738d1c03a60dd4663f4b7a68b6e63602a4a457fa5e6dd3d31b64935b9bc438c75c955d858c426a8133e4a4035d9cff91e383d9e188954f2064b27b547e62292e330f6b2b5a30afc34481b55f2dfc6ff9193a3cb74a43aa878b51944494959938db22424ff195ad767d3028b96abc87f628406eb061f624ffbd5fa07910f8a278e3d2080786143cd9911b1c0abbc006d9157a7a7c371388d4cb2ead7c3b64e2bc31189e713211d49d19f88a6883176df261eed45fc44829ec2c3b408108afb717dae64e2e07062e5b13bd24936b65be99818bfd0c08a06fac2fdb0f77aad3751394144accf8bd9dfccc33f8fefd8d50636ac300a226c6314129933251fdffbf365d930688cda0479719f09598851ccf66d9cbb84a2247d840c99eeba668d05c28fe97c6b9100829417203e8cb1b93758bebf63e83b1242e2ef35a9222eece043dd62f7032f6ddea74e4fec410b6491b9e3ac8ce1c8a6c088dffee597655fbde3d549178cc21d3d4e7a0f1d6e215b8e991553f7875fed21f0a58f18f15a8932dc5b345a1dbe7cf62bdba96c06f630b6094183310c9d958e7b53f41929b15a1f04bb9dc3a391ed9d2636aa02992dce6c753524ca037288dfffdc38c5f5229ccd6952b415827f1b1c78604ba156caad03248a62b1c80a677803cd26ff6b54542e600d92e8134d01511f5dfb1592660228123dca38e86b92bc904b0982a001c37dd1ccaf1a902ce545ed9dd3208096752776d70fca70cded9c504fa8e2eb3b3f6325eac6b854468dccfe06a1772d37d3d5bee1c70df6fac4cc7cda0e7dcdfda9e172e2b6e6923a8be29592426a9df5ddfe075e9b15d082065789b5d181153dbdc148e2c57cc752a5fd248d97956105c8bfe82e2ab8bd739f5a7f04b334c72a74e7f4626b2c405b7695353effcf4ecb2a72411498c26297137f0c67036ea3fd18d3994a4835f6af9881b2c37f5a1bf98849a0a85f594847dc9605db5ffe5be27761fa276949b91ccd6047c2eec46ca0fb0c2ffd69af2ba1d15b084e5a43425654d49161bae32a394e3501158ee7ab1764b1bfc7a54abb84759e9dc238c2d958a42dfb23c7a14c1978dc9e3fc3b00ae188a293e0b9e516e4bf8418b141eb410b81f695254be2bae120c34d9c11e2199197290b3eaaa788ee5d889febc798f1ca7f350f003663cd82c4a48940198e6d96c2b0181f22c118fead90053ed5677a7de1d153d08ef392aa867fd928bf2b1966faa42ee5ae5a2eebc02a09be6c420bee0b9b4fc19a8659be063371af333ff68051cda6b3c65367629e69747ad821ee2bbb6e5fb40b9be1d075cabd4c53446a089ec2c745c72a0ead702161a1a906cf6bb76c1ee9bfec1b55852b0014f8ce1fb76110774e2ef0a9964ece15c6dbd02ef5d3c7675447876d98a7fd26b1aa5139831c5e2624a2b770cfb7c989053ea898f536796d5d8b48dca9219bd537d4c1f0a7c519632fedcb23d4e978b8d705b8d2a7bee20558064c5431f127e4545298a5fe1eb68107d703ed22593490649b7d466dcff726ae26bde49a3f6cd68b0169fef3f28172c9392edf604f64ef92c2b9902114948cc739b2edfe449b3de86f560dff9568a863aaffc18036e6cf720b9a5658da109ef5ae02a0bcb8be30ab359989dfc3ca8d16cf91811e7a730d701cf12d9061c4b05d9a688de355240bb6d56617cc19b2ccfac9dc1de837ff708edd688217c9d7b58cc29e7cb49a94aef9471a0c882b9f9a39a26d5fbabff42fc359bfe8849f6572d26a7f4c202b73fd15862a9b497824ebf016ba1e8107a4642a105e4e4256b5a86e6a996719516a8cf86f4aa2213ed711bca6d390b93f3777252620a47809bf40dc79a6e7f145213b979b6269ddb3dedf7ef721ee358d09664e97a4fefad2a0183beb013d3b576a5a1f4c3694ab2f8fbecbe8d2425a38cd3f1f5deac29321fdb53a7a8538584cdda4b352ddab18c3b88536ac50a79d826d4c7fd3a0618ff63a8de44655d0e2537472e164253bfd71d55f39ad36e10e3548aa08442763f904c2cab38a9d2445c303b3270e7a97f04089e3d31eb3673b835a62d12e5fe3f9ad7d934bfe6c76946801283fa9e6cf7ccbf8cd53e6f17a4cde94531b3b42f818237b6124c00c2b65fe2193630340304a5246194925c1e1da99afeec537744646b7d7d8e79c088a844bc4f0c77e8a56dd151e0b7f886936d73ab31c360f3eb6599d5dc0c1a8c23915d44f4c6fe335e8159870fd7fcd133d26bf5af81777ca683da51b3326f664ba8632a3bb009fd1280b58f8d4bae36bc0e4f4d07f98b7e52bcb248cdd4a14c57b73f60e0503d14e8287bc951da3059e5a21c0f5b4aa6c35755a0ac9008b73008298b566b1af1879ae7046773254f833783a26e3e90e6eaa930be4987375f781d1107b1bc3ab62332b568a879c03e26a0d63bab2a685d0ae9bac84cd411d960ca1abc6b142c2372c5f795255d13e3bbffcbd8b277323da004fa99d6afe7b5697ae330b1f4f88a4b522cbd2a08230c6412aa5d90b91a06430d0a21f1293b3a1b3b5370e9566c43b4f40500974c2a2c3a9e0c283cc43ce2ff0a220b4daaade0e051dd17bd9ac63401bc6e1f92797733f088ce909f402962fdbca777b0b5367ef094368aaac607e420303e062811b59d104e5c23aa6dddb6eee238ec0f1673f545a75125f81d8dee36a166aa23649842da57eaaab6d332b2485c68c46fd618749fd9faf530c9d401cd6032938e"}, @typed={0x8, 0x98, 0x0, 0x0, @pid=r12}, @typed={0x14, 0xcd, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @typed={0x8, 0xe6, 0x0, 0x0, @uid}, @generic="91331167298bc55b3e04a27941ca24021fe08d75915fdb17eeca49ba23795e37ba51783b008be378ead641cddea96edb99c22a02afc21212bf2e5a26708ff3891617685241f38fddd9cc0c11f4a4e58c3ac0bfdb4ff7d7e29822e91cf7841fc75cef4e7b64833ea6d5a5c577f5a6e7b0aad5715d660161cbd84548939c0e3dd089961a7f28859cbb84b78a7526b9921872b6e4c55b5cb389ccc60ffa88b21bfc57bb7e80da9b3a3c862f7e25656bb42e9e7cd26611c9b5efd346d3eaa77244f0a4b24050a8513a8446c012e6c67e788b35d3c452a7c12dd79f5299689271a63a01419cb1a60be7a3f68fd7921b3bde207e2adfc6008bc82f261e2c7a4d34c833ff609d22ed8d5c22855a576fdf0d65f9acab249901118f2cce635326b1c56c9340afc6781ec11e259f2529c2d735800ff4f5089c6eb6f38bf1aa15676db5e51905012035eb698b5fe6d108baf18b4b5f9e433adb183989b43aedafc710bf7c97046dfd60e04990ad917fd75297dbb4d1bb557999cd914169aff9b22a899f03776ac5dbb46b702253f5137f63cef07e2626f6dace742e853408aee3c51433e2cfddaf99e4cf7e6700337aa6ef4c66cad9971df07f3c49bbcdb5fe636ead33fc546fc8decf22b84065a40ac5c47edefceeb6ac966181e6576396fc5e233423a222f81289b334dfad3dee1247de10e3969e588f2fd2530db60b088fd1b1e906e594f4b0dd2722694f38063f92cb534829f9fdd3626a832021ebc606d52d843f0788b40240641149239517013ab67d9ebfb5a3740316ae79ead85be6eaad6098d35ab1a60e6ce9d48b37871212a7139159fa10659758f1625edcff25a8eb9494ccdd92afab6366dd94c7b9dd66f19235c29c7892e28ec0bb617f77db3afbccf5126f2334917925b0092b3ff0c690d3f87a9d3a94c78b777d82e2815039f0f2c279953d8f481bc2030b5e0015c0d769f9bf1d8f9d8be8dba66100231d969e746c2d26c8e59955037bef91727b76581495e3a72ae12544d0848418aaec9d62d2bbae8685d12bbfe61ea2db1a207185ddc73c15d9ddd8e50fe8687a03fd0dd0912be0ee5ad6100a6e8d493d3b86b4361d9e348311c617eef1d758237eda293a3d9838cdac3d240abbbea467acd9ec9bacfccb3c5b7954e7253e21c3e8b069cc2723d9c1f63f26aa22951de168327805e83eb85185916c0ff7b203b256b38d60dbdcc5585bad8784e64e84e436569587f8fa8d7888b649ad74f60a632b0c0318b6ffc8034c3f0a0050dee001a5a09d12314c0407652cd00030183cfbd654583346b812809f5ac9b3f402dc69b48a0a2b7b3e2118d9786a61544bb7464cb0dcd096e691c48a8dfd6b316c54f37ffb6f2e7a293de97c417f66e644e49e8a24a5fff8180d4e6c069591b5f3d77a2c2a506b5251e2d57c609f9fed6b52aa8afee586b8c0961ac472c2a86477e99cf4aaed59365b04770c4b564d53295afe3b9ef5626a1af2a44cf0953aa7313dfd2d439ea7183a87ef79439ea6f013213b640afc21bf4e1ec44fe42c89c7d37b0fd62f8f79b0bdc23150261179b7d8a0257039e3620bcdd3ac0262b98f7847ea0af1e87fe0a804d6c22bbd170ba407394beb0b8419c70082427ac91a5af6988c216465c380b676b46b775055b87a3bb73be78f4efeaa04a7b6ad7398bad4bb50c30ee8fc6cc59fb322e536b2bb1553dedc8e5c759fbf471bb3c884dbd13ee9137123b2a16f06588309566c1cbe2792eccbcebaf73c238c99611d0ebba417f070248f50b578f773b647e333910c0f38d559ca661a432ecce72064c57b61a2f9ca53bf4ad54f7f78dd26b7505a9e4fc5770cb98b4961c56382cc5ca5a059c842bacd79b1f609f84ec11c85713566be2c4ae8eacba57163c7c10cc0a50284c492ee3c5bd590dae8fc63f8a127ca3c72304d7f0ce30020a591ac1c0861307f070015dcab247001004051e4731951aa66d06b69e41a23bc79e0d2830050c7d3c9496fe524d7a73015923cddbbcfb14098175b74d2cd32eaa49037abaa9dfa784e971c1f6d6094363d63562d471a82906dd86da6779b49d7498bf70ecf6dba98099a38153323e46e9a4cc0a469113250c8494c3e7d26cb586ece5bcf49616d6c9c0794916c6bcc28892894fe8ded0eebbc54ec4679e783fb3109f355a2ade6850feba18ae3d59196824fe4c198cf27d0ad5a4016039c1b6c36113c67b3b5bc8c0ba3b8f70729b9c38b024cff0edb0c879dade044f11fb1ef22059c2e231b03ea5996a676123a37f8c2459c3d6d5f44f0f0163d793a415c499a7f16286a64cf2eb35bcd412af93c367ca908b8685eae83a962ff517aa186da1bf2e59dd40853f8dca3ce99ad82c23bf700cf4cc69ef6b8e6eb84d3f021f8677f33568bc2e8597813142631a46147e2a866c287d1bc16b150efbd8c5951c2a0041010588f00a9fad758e25f8ff67cf1dc204d23cce7785fa043e52321b73dac6e1c8f3b6e846c28e8546ab0a441a781ce2239d31f9f19e8a754437b20ba69762c30de417126a8e2a70d17fa2f7554499ae42cd98b5468fcd9eec830e6597450de9e02ac4673a166b9c0cb63c9a50b21c5b91b92d4cf73e31ff76f86b1ff65dc5024636a0dc98023780ed17095a798a962d84d7f62b42812222ff071dd2d7e65c5aa660103e8c1e7eabb6afdc41091dcc177a5cd79c5021ef32a6887cc735b019afe75655e09b777c6642f790270aa7f29dd0f6b0f096e1224268cb86453f42602b80c8ff1c823bb4bd527e0a980fbe163e22cf8b28d24cba860933315a482ec735483cae8023c1db266cb69b1ca52c2e056f48372e0ab0fcb42c1c779b2b2f5d2afa34e7394bb42a9102809fbc8e8523eabfa4b0b1fc4054043c93d7ed62b4b1205cee4701a17687fc474b0dbb5f1a6d9825d265bf3b615bb15b48e96784c9dd491f3fb4746ed72961203fb54cbc80e9d9e426cbe78c369af06ff498a94fd7af0218964f3423c10ebb388dbf27d27ee05e522f1581bb53d7764544a5718a2c9b3562def2c493a37fec3b9d3466ec300b4a96bfed12bb96e412ad26d9adf7cc8edfedf598335520dc1ac2170b08537e604e7fd83416a905524a7a82198b360cd84c50b328613f3c8a8cb9d9ef39b4bb76c9ff67aef36b914d2884e622205ca9560790b965c82bbd72675a2bd2d51dafe967c0dec289786e57fb1b7450a38a56eb4c6f4c98bc5d987b399db6e4a3ceeaaf5a1fb69ec6a4ca12d2de3192af42f67869536bd336497d81967756d9ec6b9d3b2d48da0a186cb68573c50ce029d55f6b7e9dbed2705ee8e6d9e744485136a29be22b5c0e3c0a68eb57b3524b29177362b2ddab0f02aa1acbd19b6a38a3116cc9d29f4a9030d2ae4642e2fa9965cf4531fe426941700fe5c4a8f5f84bfac613caedf30b94494451325c6f3a02dbbbfa29eb756b2727291722e0d8e9c12a60141820891b329f61971043033d36f1662880b68510b4dc18d0964f6173dc8305cc3a5d2446de7ae2516f8993c7acc71011061d2a0fa62b01da3cf3c861272b3e28b0d0647845c5fa0af028ffd6e31885375fd0ce26bf5e00e4d4aaf2abab6b5b7ce4bc43103d2fad8fdad405140c13e62f1620231ec3210259777550e8d9a26d59249b28ee94a58304039ac9b8b1121b32d28369e76a2dea47dce23a502985460364cab6c4dced215bad02f65eef737093cd8617029549e024f9ede8431ed9ae3b6e12578e5d0b52fe2f086563579b57d28d16b0e64c31b76aaa8d8df0a5f8803ced67d0a8288cd16b972ff1ef5fc0c4a36cea2da77003207db2628c1476cf5ca5d40e123142a36dc40792d5618301020f1630b6d85f6650605258d0c25519605686d2e59a92603fe056db9416f566af90f19d3c270b621e523dab26c82e99072b6bacdd072251c1e5fcea2a920f2ef7bcf8aec5fcabaae6c625b24ffadf4686f575cfb9024d5863633f4f2d0c26d16823c9357f7b717c6c381c94bde45dc0df5ce90587c2022eb24f820c6b8309364bc360c5549ea6b053057b6db6ac8dcec2049a93522c70d29c3232e8668b03a3ec215fd4075f813a759c953ac9eb02ae5e2feded3ca5d94a040307d82f8af251d01694c18e3ac4a688d494a65f4f5fc33892ffc5e0bb0ea8e83cee6f9a6e1a8b47ebab7b16b3288765b8457e643a308663508588462bd37a6c0bc565b4d74d8e42bf58a1a92143fcce2995a30d0e14a47dcbd1b57b4719320496b335437a38245e9244c94c270aa24604994cc3d011bb8a7a8ef4a8d0705fb350beacd539a3ea932116d107f42e4b68f4c6c5c3ebcc6f431fdd81ba088c1d41f71938ef76ec457f17bc0ae06dde6628f9b2a0b3098f3cad9280fd8c4de663cdcbb1a05c5aab6dd1d57a13152dfd0408ff434a6d92ae475f0c93c53daa54a0cb532e6b34a9b5130611d558ca017a81c760ed359401f65f20d0ed92e4447f3eba40709a5ed5fee8dd644010fc0fd6dba38b7858b0f92d5fab04b1cda022d047aa9c6f6e5f00517af60b1669bd5ad8e8f0c52f18cfb3f3608ebca6624ff39049d302cb3bdd43bdb11a30e69c8adb65c3af65f9bdb8d3b0fbc9b0d1b020062ca6faed220b1654a96c770ae282abb778c09caf143135f962b8513c0a257164a3ec0ded249b3c2390d65ee764ac9c28d390cd75b34ac15bf8f080672f39125aa79c0f7087ac2746ecde7e5940945a096eec8d944ff9fb44804c9bf5ea919572ce0e568fc546b7a8703ecdaf3fbd1497bff4c60b66d8788af3a2994d82471a378fbee9f5d96dec6cc1a60457ab69c1e9453b66e1056e5613e04c188be19e5b0769ddf506b00a31bae36e72ea165d0e65b0eb66c6d52e7eac96de45c679d7e30e3e892b2587e3dbca2f69131bca065c56d3334d25fa261adcdf137f90ae78862e2d752b23bd85a3d367df91de80bdb1d13e05d6684d9526dff20bd1081e2342541579c6a73e1938bb2581126e726ffae4acb57b9f83815a7627d20f76d0c34daa6060fd7b1eaeaf5074ba93fcb710d899fc19a4535b88c56cba0436e47faad87f934fac92db78120eea3bbfd908d85a665765b5a51384aa3beb6a9a401ebbeb633b737330d993642368dedee0cf26b8a0251402efdc9916c9640ab95c93e89d94f7735574a84c021c6596c3a01e8a4b4882e8b3b0bb9d49a8dc04b5d1d965625df697327019f4e532595f53c486c1fc397d92d7a7a76313c0e78100f3d7929ae4c98eb7187731892a1a78b3cfd98f05e01237887e6fe5768a018e75b6d107a0a0f79e867b813ecfcfefd53554e96889f0aff4e6086941879a2288b07f7174f2210fe85656f2ac6b15c8df7011291a23193fb8f54f0fff12661ad095c42c2282cb3c5741eafdd281abe12ddd25d08e2e268351361c83ee6292c103673a5f071468e3cf2c7f9f38dc831dd4351d70fa763e4342b5a650944bd2fab3ec919938ee870d4252d7b039e953a852657cd2ba735433c81297721f8cc6dbba1ad906409b5c8c32f1378b08cca7afb2e21df930016135b4e908bf69a80b0ce5fdf2d930e4f2d492593b5ce2d436774a6e0676336ed13a742b826a1549657ef5554e561c34ca37c4129cee5f1b940fb53030b0fc2a5ae98f8a2df0efbc7cdca3b63616f3c685af0c3d51dc4c52483005d62110a2f0f5ec6e8f9bd9d752a01c086116e3447fe3dea4fb96129b0c6af8a572c6cc7fdab31c76bf3b75615901f41ea5e9f91c1861a26ade7d22dbc941df2dec6fda8889660e897d4c0108bf60cf60be7b9e56bc4b9bae84e3a237b1da7252e1f7f800d8427", @typed={0xc, 0x49, 0x0, 0x0, @u64=0x2}, @generic="9e3bf994f61541d126ef1842d8b3c88e1d6590aa00125b7c936401054d3c531432146116ff1717fb6c1f9eeda877630865cb0507576abe69751c8c1bfa4b0d257c480d1788246cccf06db33973c589a377cb0072ecfa1119a7cc251a6aa44adb50515de38a2445de614751ecc69de4ab3ef35f5287f9eb901d4194e8121ce3f04327a02fc1203a053d4b0524c497e52bcf8ff25f52e4cf5e7bf8682f0e78", @generic="990bf19bc0f7fcce7d8df7ded76a64ca2f9266bf3fbf9995a5967649431c39f266cfe9b637aa7de7f68fefc2aa93ad94e52a965dac044e4bd678b2970f484f4fe7ad0d8af45f4b597e418576c4071a6ee2529c1d45332d2537cfa31e83ac5111a167fdbd1adff10056d63ec9e44ad48e9e2d1ff5a31f9e14e81845f59e27e63dfb8eab6912f02dd99c46e36e834fb5dd71fa8b42104e8ba05c91e57ce4692a015859cd3934ae104185c4f0ff2e76688b858ccb47336235e683fb9ca948eab61f7a6996ad722069e6d3735b5da7257452714a295146c5f36ec55007b589cdf723ef7f29cd83270d70b1", @nested={0xf0, 0x98, 0x0, 0x1, [@generic="27e45d96389a9f07874a8890bb9f365a9bd52063e8c791347a97f0158b28fa76512c3dc05ea8f96db14c2637c05456d2fc085fa9d69e63b3970c51523ac571a23d77ad8ac28035a2c157ce7067b2f6f42dca61b658138b8c6a5f9b53a5582df0f007ca36be7fd1124a40ce6bc7ff213077a1d744ebaad8c62e5855bf9ba92a9911c946cdd6f00eb48a059737c1f8d9c9fea3d7c88054b751fe483f2bbb0240715281f909642d8fa29337e64799f237479da3e58576cb4d7e021258dc6495bafbd357257c26f5c56d96420cd7cfcb6c1de34b39d721bba02cb60357476beb93f5492eb6a7fbef49039b1a8030"]}]}, 0x2328}, 0x1, 0x0, 0x0, 0x80}, 0xc015)
connect$can_bcm(r10, &(0x7f0000002780)={0x1d, r11}, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', <r14=>0x0, 0x2f, 0x9, 0x5, 0x7, 0x1c, @mcast1, @ipv4={'\x00', '\xff\xff', @remote}, 0x8000, 0x7, 0xffff48f5, 0x8}})
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@bridge_delvlan={0x24, 0x71, 0x800, 0x70bd2d, 0x25dfdbfc, {0x7, 0x0, 0x0, r14}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c044}, 0x4810)
r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002b00)={&(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000002ac0)=""/63, 0xcc, 0x3f, 0x0, 0x80000000, 0x10000, @value=r3}, 0x28)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002bc0)={0x6, <r16=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x1e, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000000080000000000000100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000018000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="00000000000000b70500000800000085000000a51e00008500000027000000db35300011000000bf910000009e46c027020000008500000084000000b70000000000000095f900000000000000"], &(0x7f00000028c0)='syzkaller\x00', 0x75, 0x88, &(0x7f0000002900)=""/136, 0x41100, 0x8, '\x00', r14, @sk_msg, r15, 0x8, &(0x7f0000002b40)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000002b80)={0x2, 0xa, 0x5, 0x972}, 0x10, r16, r10, 0x0, &(0x7f0000002c00)=[r10, r10, r3, r10], 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r17=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010025bd7000fddbdf25440000000800036d", @ANYRES32=r17, @ANYBLOB="0a001800030303030303000008006b0014000000"], 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r8)

13.104061301s ago: executing program 3 (id=497):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0)
r2 = add_key$keyring(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @private1}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
r8 = syz_open_dev$usbfs(0x0, 0x8, 0x240)
ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r7)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000200)})
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0x1, 'D'}, 0x0, 0x0})

10.599168389s ago: executing program 5 (id=504):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0xbd, 0x8b, 0x8, 0x4e8, 0xff30, 0xa6d1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x29, 0xfd, 0xdd, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "94ef6333ef"}]}}]}}]}}]}}, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc8c5}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0xc4, 0x2c, 0x0, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xc}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0xa, 0x2, 0x8, 0x0, 0x1, 0x6, 0x6, 0x9, [{0x2, 0x53ea, 0x8, 0x10000}, {0x7686, 0x1000000, 0x126, 0x3}, {0xf, 0x8, 0x4b, 0x6}, {0xbdac, 0x7fffffff, 0xa55, 0x7fff}, {0x0, 0x0, 0xfffffffa, 0xd3}, {0x0, 0x3, 0x4, 0x3}, {0x3ff00000, 0x80000000, 0x100, 0x9}, {0xfffffff2, 0x3, 0xe, 0x3}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x400885c}, 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000400)={0x200, r1, 'id0\x00'})
openat$dsp1(0xffffff9c, &(0x7f0000000040), 0x52542, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000002140)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x7, &(0x7f0000000100)="fdffbf5d", 0x4)
r5 = socket$inet6(0xa, 0x80002, 0x0)
r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x18)
symlinkat(&(0x7f0000000340)='.\x00', r7, &(0x7f0000000140)='./file0\x00')
openat2(r7, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r8=>0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000190001000000000000000000fc020000b81442680500a70000000000000000000000030000000000000000000000000000000000000000000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000fdffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000008400050000000000000000000000000000000000000000006c00000000000000ff010000000000000000000000000001000000000000ff0000000000000000000100000020010000000000000000000000000001000000006c0000001fce0000ff02000000000000000000000000000100000000040200"/240], 0x13c}}, 0x50)
timer_settime(r8, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
timer_settime(r8, 0x1ddb76ba2fb3ce66, &(0x7f0000000200)={{0x0, 0x989680}, {0x77359400}}, 0x0)
landlock_create_ruleset(&(0x7f00000000c0)={0xa0, 0x0, 0x7}, 0x18, 0x0)
setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000000080)=0x4, 0x4)
openat$dsp1(0xffffff9c, &(0x7f00000002c0), 0x40, 0x0)
r10 = openat$dsp(0xffffff9c, &(0x7f0000000300), 0x80200, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(r10, 0x40045010, &(0x7f0000000280)=0x7)

10.151311975s ago: executing program 4 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000c748aa0b1c001a8018000a8014000700200100000000000000000000000000001400350077673100000000000000000000000000080004"], 0x58}}, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x60400, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
io_uring_setup(0x788e, &(0x7f0000000240)={0x0, 0xae4a, 0x4, 0x1, 0x12c, 0x0, r2}) (async)
r3 = io_uring_setup(0x788e, &(0x7f0000000240)={0x0, 0xae4a, 0x4, 0x1, 0x12c, 0x0, r2})
socket$inet6(0xa, 0x1, 0x100) (async)
r4 = socket$inet6(0xa, 0x1, 0x100)
listen(r4, 0x0)
r5 = syz_io_uring_setup(0x23c, &(0x7f0000000380)={0x0, 0x126, 0x2, 0x7ffff, 0x0, 0x0, r3}, &(0x7f0000000200)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1}) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x1})
io_uring_enter(r5, 0x2ded, 0x25d2, 0x0, 0x0, 0x0) (async)
io_uring_enter(r5, 0x2ded, 0x25d2, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000000c0)={0xf00, 0x714, 0x30, 0x1a90be3989cde9cc, 0xffffff7f, 0xc1, 0x10, 0x1, {0xfffffffa, 0xf, 0x1}, {0x7, 0x2, 0x1}, {0xe4}, {0x0, 0x1, 0x1}, 0x3, 0x10, 0xffffffff, 0x5, 0x0, 0x67d2, 0x98bb, 0x1, 0xa, 0x1, 0x3, 0x9, 0xe, 0x200, 0x0, 0xa})
pread64(r1, &(0x7f00000002c0)=""/89, 0x59, 0x0)

9.858371331s ago: executing program 4 (id=508):
socket(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
unshare(0x60600)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8})
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd8f87, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x0, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r6 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4)
close(r6)
memfd_create(&(0x7f0000000480)='-B\xd5N4\xa6Ey\xdb\a\x00\x00\x00\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0^\xec\xbb\xa0\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xab\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xa0\x05Dv\xee\a^\xe3\x18\x1eLr\x90N\x9c\xbe\x85\x9aqS\xe4\xad\xfe\xcb\xa7\xd6\xcdG\x91`\xd4\xdc\xe8n\xb0XC\x91\xa5{r3\xb8t\b\x03a\xa2\xb7\x92\x82\x8a?\x8a\xe5\v\x1d\xba\xba\xe5\xb7\xc0\xc9ZJj\xefml\xe66\xf1c!\xe4\xc8\xdaD\xf7\xa0\xec\x968h\xb5\xe3\xecQ\\\x90r3RGM\xe3\\\xa5\x1cU\xd8\xf1*-^CS\xf3s\xc1\xbb{\x8e\xcc\x83\xeb\x8d9l\xb1\xb7#v\xe85\xa1\xdc\xd3\xdb\xd9\xbf \xcao\xd7\xc4\b(\xc6\xe5T\x87EK\xb1\x1b\xbczKl\xd1\x0e^s;\x9c&\xc0[\x05\x12\xd9 \xb5p\xac\v\x8f\xc2\xfdq\x1d4\xb5\b\ae\xeecA\x04\r%\xf1Q\x81\xd2\xd3\x88`\x11\xf3\xb6\xe1\x10h\xfcZK\xe1\xc33\'g\xdc\xea\x01\xc5h\x05\x05\x06\xd0\x12\xcd\xaa\xbe\x9b \x96\xc5\xd1z\xa4^\xba\x03,\t\vw\xdaZt \xb7g\xd1j\x04\xd6ZQ\xd6\n\xb4S\xcb\x19\xda\xc4\xf0\x1c\xeb\x88\xac\xc8\xd4 D\x06\xcb\xcc\xf8\xb4\x1dkC\xd8\xa3\xf5b\x02\xf8A\xef-\n\x9b:\x0f\x93\xba`\xa4', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824)

9.104786424s ago: executing program 2 (id=509):
fsopen(&(0x7f0000000100)='reiserfs\x00', 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x3c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r1, &(0x7f0000000040)="2400030000005f0000000000000008000f00fd00"/36, 0xfffffffffffffe3c)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x6400cc45}, 0x4048054)
r5 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl(r6, 0xbffff000, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000190c0)={0x0, 0x4, 0x6}, &(0x7f0000019100)=0x8)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x4000)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00')

8.790488744s ago: executing program 3 (id=510):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
lsm_set_self_attr(0x0, &(0x7f0000001a80)={0x0, 0x0, 0x20}, 0x20, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r2, 0x0)
recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40880}, 0xc808)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r3, 0x0)
socket$netlink(0x10, 0x3, 0x14)
ftruncate(r3, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="bfffffff8000000769108a000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94)

7.587512326s ago: executing program 3 (id=511):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
mq_timedsend(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x30, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x3, {0xd, 0x6, "50a2a8", 0x5, 0x2c, 0x1, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}}}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004084)
r4 = socket$packet(0x11, 0x3, 0x300)
sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="ea973618f8cf718d3d94cc2cb08579e433b020c9e310b9534a3f228d37d41d401af72dc7354d136cac8aa44a45e6f2163b96e8d40b73f832910765b190", 0x3d}, {&(0x7f00000003c0)="a4b0877a46ca765fbde5fe9109b1e99c9bd0f61becbb84975c7ff8abfd6f93c1f70bbe2413c61af397cba51b49e75b285b9b758e053cd937a0dfc4b4c6b0ea18c2a4f6b9168f144c2bd97ba27eb230bad85b9313556c08d84e765d8609b56a4bad4c013799fd877c8fa1d3f55d94b537d042c8e68a2372cfd4c67bf56b2c835fbc00f9c00015f3d7a0", 0x89}, {&(0x7f0000000480)="b9f03a5514be9eb7ef6c9c0b76b22890f5d37d9cc5f4044f56d14abeed115a2bc1bef8978cdcc069957b89b0569b2012608da23ea73dd8b8442b3de77367d705e44612f211edce5324d3270f990ef71e47081d3f2408b055ceedf82ba6b7c33d0466abbe8cfd147817a972a4ad49ca0d2c3ec73324348f35064675c79e09f7b3a1c1689be12bac11b149bccedba4f83be6d5c0b26bdbd3e1a2d10b", 0x9b}], 0x3}, 0x80)
poll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x282}], 0x1, 0x5)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00000ab000/0x1000)=nil, 0x1000, 0x6, 0x11012, r5, 0xffffe000)
r6 = socket$rxrpc(0x21, 0x2, 0xa)
sendmsg$inet(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x10, 0x110, 0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfa}}], 0x20, 0x4c00}, 0x0)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800)

7.399238514s ago: executing program 5 (id=512):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
syz_pidfd_open(0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
syz_usb_connect(0x0, 0xfffffffffffffdf4, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0x33, 0x91, 0x8, 0xd8e, 0x7802, 0x33bb, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x344, 0x1, 0x44, 0x2, 0x30, 0x1, [{{0x9, 0x4, 0x3c, 0x4, 0x9, 0xba, 0xdb, 0x2b, 0x1, [], [{{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x9, 0x3, [@generic={0xb8, 0x40eef7295c59c599, "12c3bedfe290f1e6a4d389c787bbfbb42f6b25d9b77f3b8f5b9da9bb7c9090598de09b1e35787e1a76731751f1740c2d7f5f6145d8108c9b783ebaa47d58a8c0e78375414978305afc98c58be143b5723d5d5cc6b3f23d4723d396160d03253a774cb16aeddb59049c9dd6390bf99ef550d6264cc5d675fee599d780ba09cac95953084cefcee605037971624828cf046cdca51f3d1c13a6d48278212af237e5f4f724840142957b4f38edf84165cc63a4287de116a5"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x47, 0x5, 0x7}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x80, 0x3, 0xc3, [@generic={0x12, 0x21, "ef169685c7e5612854627255456a06c3"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x8, 0xff, 0x6, 0xf}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x8, 0x2, 0x7f, [@generic={0x92, 0x2, "57ad969b28dee438874d96cb115df6eb1009d969582aac76bb55efbf046edc0f1ed437504cbc34c8019b7b698207acea0f79899844341a8286b822d6460494a719a2c5bf0d1796b2b5417dc214f877381cd7261292b70050a4ad7df60ef7b162451a692c23f5470a73cca77b0439672d3fd33a2ea85c9bb18256d3a98701a2fd05e033a4d151e5fa53e968b7dff6b987"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x40, 0x4, 0x5, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x87, 0x8, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x3}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x1, 0x64, 0x50, [@generic={0xea, 0x2, "a8e47b83cf7955c403a988dae92a12607931e1afbeea1ad8d2ab0a019ba9cac45f59d4d7dbe2802bbf8360c27fee2ccece87d672b9c5fd2e519b2026d20bce1024560e4e5ecefdc9275fb484079f1fa72ffd5d65905b66798f71c95e09c3b141a7ca8de0518616db70b3ffcdd15f34771c47c47b6669a81e054c8804df4a5b5717397189b428dd64923da48d02525939e19ddbe9a9071343b46dbebbc7c008bbd2228213143f624ad4e71df4de4a064b9c6b985f3384565fc7f4b4c50d3bf6df1a1f341870d4762bb0fb2c1c0fda3ce79b89a16274894fdb34b9c7ef6f10aaf72d57600b26458f40"}, @generic={0x7f, 0x21, "8c7bfbfafccea3e3c6f034ea375188a3f583a9b6fdb2cc065ec2b34e4ee922229def700bc26bc3ecd1b616ad0a34d2b084333f5cf1eed4bddd3033f6c25e5819fcf7fb43f2e31c867cfa9c738d66c5f7b4f56cf0c0fecfa6865acbc5682ab964ac4c35f387e11c949439bdaa7018a8f81187270adc4cb1563894dfa56e"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x9, 0x0, 0x6c, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x6d2}]}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xd, 0x9, 0xe2}}]}}]}}]}}, 0x0)

6.897468134s ago: executing program 0 (id=513):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@timestamp, @mss={0x2, 0x2}, @window={0x3, 0x9, 0x3}, @window={0x3, 0x2537, 0x5}, @mss={0x2, 0xff}, @window={0x3, 0xfc01, 0xfffb}, @timestamp, @sack_perm], 0x8)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (fail_nth: 4)

6.415280556s ago: executing program 4 (id=514):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r1, &(0x7f00000030c0)=""/4116, 0x1014, 0x1, 0x0, 0x0)

6.267176126s ago: executing program 0 (id=515):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x20}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newroute={0x38, 0x18, 0x1, 0x70bd2c, 0x10000, {0xa, 0x10, 0x0, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0xb}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, <r4=>0x0}, 0x2020)
syz_fuse_handle_req(r3, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_io_uring_setup(0x2af4, &(0x7f0000000440)={0x0, 0x69ac, 0x40, 0x0, 0x8001}, &(0x7f0000000340), 0x0)
write$FUSE_INIT(r3, &(0x7f0000000000)={0x50, 0x0, r4, {0x7, 0x26, 0x5, 0x4348083a, 0xfffd, 0xfffc, 0x6, 0x5d2186cb, 0x0, 0x0, 0x4, 0x10001}}, 0x50)
inotify_init()
setxattr$incfs_size(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1)

6.26085488s ago: executing program 2 (id=516):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fcdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="040081000a000600080211000001000006001a01040000000600100063"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80c0)

6.13739702s ago: executing program 4 (id=517):
socket$kcm(0x21, 0x2, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x18, 0x68, 0x5fb9a818fb7378e9}, 0x18}}, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f00000000c0)={0x4f7, <r3=>0xffffffffffffffff, 'id1\x00'})
r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x29, &(0x7f0000000200)=""/41, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
socket$nl_sock_diag(0x10, 0x3, 0x4)

6.012381678s ago: executing program 0 (id=518):
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000000)=@data_frame={@msdu=@type00={{0x0, 0x2, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x81}, @broadcast, @device_b, @from_mac=@broadcast, {0x2, 0x4}, "", @void, @value=@ver_80211n={0x0, 0xe, 0x2, 0x1, 0x0, 0x3}}, @a_msdu=[{@broadcast, @device_b, 0x82, "2bd3f624f85d08a332c88a207296cac6ae077b3c2183f743e91b02f72a35afac3a4a5dfc76a121d9d712d9a7487db857169faa5ab4634696d2fe22022308f17a53dfb2669b9e9cd73512407d2ac2c1e8eb4693deb2ff3c847c453a36915fc0c71b50819646e9fa2bfac6e76d62afc14ee861df40d5312b088070b44a583d16a698c1"}, {@device_b, @device_b, 0xbd, "881c9666d2bc9f21d78ee66bc661856f7693e55a5ef7cfdd8dc85e2f627f0cb539df093b63e1031d37406568653c469d40a495741a9ec94713ea36ab6efbcc273c0c9e7e98f64ad6f7d78e1730d9aa78ab7b5e52bb98e4430a1ba2c68664bbef5243acbaed303e5a67704ccd8d710987594f772b2c7944212091e46d491fa4cc7e78e3bbf8d6cfe7e571fe3c407df0eef30964c3b7286671e610ff12b799328501e2d63fb62ba289e013a386c52da0a1f250214a32e5e100d2ea957787"}, {@device_b, @broadcast, 0xf6, "2a4e1b0f7b973629bbb723901c2cce29b91052a12686bd4558ceea348951c9d1dc36091e0993afca2aa8b3dd780864890575c20fcae4e21c26d2227b906a024ed81814a4e7bf26cdaf14cef143dd3bd1c6189466aec51544dba55f6cc9274f26b5c3ef0ef52179dd262ad1f795ed0eb32a5a8133179f19758a91ff7d2a1d496b2302576b98a566cce528cf1774a18814224cd64f1ff0b1c3ad3dc7e939e617ad172777385c55599784779c290fcad7f7b3b52bcceebb90801d95621fe0e9403424137a9f967a2fac933a82cc7d27e64249b23b0c9a1e421b57e69b6378e32a6b95e0b02be5ef9b29023d85e10a5c3f7f6347c74e99d1"}, {@broadcast}, {@broadcast, @broadcast, 0x9b, "2ac23445bff8e7edb270e7ea6b2b5e9370ff4e64401a61fdb1db1cee24cf00f24330c438f14d6c4cd30b0cb88194b2edde2d3353b93fe91587a42a7e99e13c9bdf1d0a8d823bf8bbd02dd7ded600d44cfb1a37acd83a7aad627a6990dfb471e30795be296fad008a6e84126c06abcb6cf0f9816eb5e8942ea7c017e08f19087911c8e3e3d8ed01d66ad1d5ae5525cadcd74db0a8ae4cff8d5ce6fe"}]}, 0x338)

5.849636431s ago: executing program 2 (id=519):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18)
sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004)
readv(r1, &(0x7f00000002c0), 0x44)

5.088757623s ago: executing program 0 (id=520):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0)
r2 = add_key$keyring(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2)
r3 = socket(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80}, [@FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @private1}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r6, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
r8 = syz_open_dev$usbfs(0x0, 0x8, 0x240)
ioctl$USBDEVFS_FORBID_SUSPEND(r8, 0x5521)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r7)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc01c7c02, &(0x7f0000000100)={0x80000000, &(0x7f0000000040), &(0x7f0000000200)})
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0xf, 0x1, 'D'}, 0x0, 0x0})

4.639596022s ago: executing program 2 (id=521):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x34, 0xa, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1f}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

4.380177467s ago: executing program 3 (id=522):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0x7}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmmsg$unix(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000700)=""/218, 0xda}], 0x2}}], 0x28, 0x41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_QOS_MAP(r7, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001200)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdc00, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x50)

4.222889126s ago: executing program 2 (id=523):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x59)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000140)={0x2, 0x8})
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f00000006c0))
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0x10001, 0xffffffff}, 0x0)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000dc0)=""/72, 0x48}, {0x0}], 0x2, 0x40, 0x3)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r4 = dup(r3)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r6, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008", 0x8a)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10)
getsockopt$inet_int(r5, 0x0, 0x13, 0x0, &(0x7f0000000c00)=0xfffffffffffffe87)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100))

4.01627834s ago: executing program 4 (id=524):
socket(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
unshare(0x60600)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8})
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd8f87, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x0, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r6 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4)
close(r6)
memfd_create(&(0x7f0000000480)='-B\xd5N4\xa6Ey\xdb\a\x00\x00\x00\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0^\xec\xbb\xa0\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xab\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xa0\x05Dv\xee\a^\xe3\x18\x1eLr\x90N\x9c\xbe\x85\x9aqS\xe4\xad\xfe\xcb\xa7\xd6\xcdG\x91`\xd4\xdc\xe8n\xb0XC\x91\xa5{r3\xb8t\b\x03a\xa2\xb7\x92\x82\x8a?\x8a\xe5\v\x1d\xba\xba\xe5\xb7\xc0\xc9ZJj\xefml\xe66\xf1c!\xe4\xc8\xdaD\xf7\xa0\xec\x968h\xb5\xe3\xecQ\\\x90r3RGM\xe3\\\xa5\x1cU\xd8\xf1*-^CS\xf3s\xc1\xbb{\x8e\xcc\x83\xeb\x8d9l\xb1\xb7#v\xe85\xa1\xdc\xd3\xdb\xd9\xbf \xcao\xd7\xc4\b(\xc6\xe5T\x87EK\xb1\x1b\xbczKl\xd1\x0e^s;\x9c&\xc0[\x05\x12\xd9 \xb5p\xac\v\x8f\xc2\xfdq\x1d4\xb5\b\ae\xeecA\x04\r%\xf1Q\x81\xd2\xd3\x88`\x11\xf3\xb6\xe1\x10h\xfcZK\xe1\xc33\'g\xdc\xea\x01\xc5h\x05\x05\x06\xd0\x12\xcd\xaa\xbe\x9b \x96\xc5\xd1z\xa4^\xba\x03,\t\vw\xdaZt \xb7g\xd1j\x04\xd6ZQ\xd6\n\xb4S\xcb\x19\xda\xc4\xf0\x1c\xeb\x88\xac\xc8\xd4 D\x06\xcb\xcc\xf8\xb4\x1dkC\xd8\xa3\xf5b\x02\xf8A\xef-\n\x9b:\x0f\x93\xba`\xa4', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824)

3.769627474s ago: executing program 5 (id=525):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x31, 0xffffffffffffffff, 0x1000)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2d)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r5, 0x4068aea3, &(0x7f0000000280))
sendto$unix(r4, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r0, {0xee00, 0xee00}}, './file0\x00'})
ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000340)={0x2, 0x6, 0x80, "90b8a64775f9151aa434c8d2ba9a21be1c62a09c5ff1aae4b2c7ea86a35dd4cf", 0x3831354f})
recvfrom(r4, &(0x7f00000030c0)=""/4116, 0x1014, 0x1, 0x0, 0x0)
bind$packet(r1, &(0x7f0000000500)={0x11, 0x5, r2, 0x1, 0x3, 0x6, @broadcast}, 0x14)
socket$kcm(0x2, 0xa, 0x2)
syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd7d76b2af00042f00fc000000000000000000000000000000ff0200000000000000000000000000010000883e"], 0x0)

2.172895743s ago: executing program 3 (id=526):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) (fail_nth: 4)

1.763599753s ago: executing program 5 (id=527):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r1, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r1, &(0x7f00000030c0)=""/4116, 0x1014, 0x1, 0x0, 0x0)

1.619218911s ago: executing program 3 (id=528):
socket(0xa, 0x3, 0xff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket$rds(0x15, 0x5, 0x0)
unshare(0x60600)
setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0xa, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r3, 0xc004562f, &(0x7f0000000000)=0x1)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8})
ioctl$VIDIOC_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd8f87, 0x1, 0x2f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x0, 0xed}})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
r6 = socket$kcm(0x29, 0x2, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(r6, 0x119, 0x1, &(0x7f00000000c0)=0x7, 0x4)
close(r6)
memfd_create(&(0x7f0000000480)='-B\xd5N4\xa6Ey\xdb\a\x00\x00\x00\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0^\xec\xbb\xa0\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xab\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU\xa0\x05Dv\xee\a^\xe3\x18\x1eLr\x90N\x9c\xbe\x85\x9aqS\xe4\xad\xfe\xcb\xa7\xd6\xcdG\x91`\xd4\xdc\xe8n\xb0XC\x91\xa5{r3\xb8t\b\x03a\xa2\xb7\x92\x82\x8a?\x8a\xe5\v\x1d\xba\xba\xe5\xb7\xc0\xc9ZJj\xefml\xe66\xf1c!\xe4\xc8\xdaD\xf7\xa0\xec\x968h\xb5\xe3\xecQ\\\x90r3RGM\xe3\\\xa5\x1cU\xd8\xf1*-^CS\xf3s\xc1\xbb{\x8e\xcc\x83\xeb\x8d9l\xb1\xb7#v\xe85\xa1\xdc\xd3\xdb\xd9\xbf \xcao\xd7\xc4\b(\xc6\xe5T\x87EK\xb1\x1b\xbczKl\xd1\x0e^s;\x9c&\xc0[\x05\x12\xd9 \xb5p\xac\v\x8f\xc2\xfdq\x1d4\xb5\b\ae\xeecA\x04\r%\xf1Q\x81\xd2\xd3\x88`\x11\xf3\xb6\xe1\x10h\xfcZK\xe1\xc33\'g\xdc\xea\x01\xc5h\x05\x05\x06\xd0\x12\xcd\xaa\xbe\x9b \x96\xc5\xd1z\xa4^\xba\x03,\t\vw\xdaZt \xb7g\xd1j\x04\xd6ZQ\xd6\n\xb4S\xcb\x19\xda\xc4\xf0\x1c\xeb\x88\xac\xc8\xd4 D\x06\xcb\xcc\xf8\xb4\x1dkC\xd8\xa3\xf5b\x02\xf8A\xef-\n\x9b:\x0f\x93\xba`\xa4', 0x1)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0)
syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201)
syz_open_procfs(0x0, 0x0)

1.445112549s ago: executing program 5 (id=529):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000540)={0x1, 0x46, 0x0, 0x5, '\x00', '\x00', '\x00', 0x0, 0x20000000, 0x0, 0x0, "b6855a32674ffa64f778ddcf29c94337"})
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x119200, 0x0)
syz_io_uring_setup(0x587f, &(0x7f0000000240)={0x0, 0x7c06, 0x4, 0x1, 0x2c1, 0x0, r5}, &(0x7f0000000040), &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{0x1, 0x1}, {0xfffffffc, 0x80003}]}})
io_uring_enter(r5, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, &(0x7f0000000480))
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)={0x9c, 0x40, 0x107, 0xfffffff9, 0x25df5bfc, {0x4, 0x7c}, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x800007}, @generic="e0fb17fdd0d7e38e39ae0d0ff4695f219dd5394e3eafe4285a656aac5183955bcd1987ce19878665ed143e8672907de22eb114e33b37e6022b356ae91b4d1a3b06581254803339711c6bd83e4fee0423890deea312030cfeebea61876ebab54746f0ac63a938854c89ccba04ab287f52b714d3c39dcf6d5442ddbd"]}, 0x9c}, 0x1, 0x0, 0x0, 0x48800}, 0xc000)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='htcp', 0x4)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000040)=0x1, 0x7, 0x1)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f00000004c0)=0xffffffffffffffff, 0x7, 0x0)

852.389574ms ago: executing program 2 (id=530):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
flock(r6, 0x1)
close(r4)
ioctl$HIDIOCGUSAGES(r6, 0xd01c4813, &(0x7f0000004200)={{0x1, 0x3, 0x2, 0x400, 0x0, 0x2}, 0x382, [0x5, 0xffffffff, 0x1, 0x40, 0x6, 0xfffffffb, 0x3, 0x7fffffff, 0x67, 0x3, 0x4, 0x7, 0xfffffffd, 0x0, 0x89c, 0x7, 0x0, 0x0, 0x1000, 0x1, 0x8, 0x800, 0xfffffff7, 0xe, 0x5, 0x2ad5, 0x49, 0xc, 0x8, 0x4, 0x2, 0x1, 0x8, 0x401, 0x8, 0x100, 0xc2b, 0xffffffff, 0x7, 0x10, 0x6, 0x5004, 0x7, 0xd, 0x765, 0x40, 0x8, 0x80000000, 0x4, 0x3, 0xd, 0xb, 0x728, 0x10, 0x1000, 0x7fff, 0x5, 0x1ff, 0x3ff, 0x4000, 0x9cb, 0x7, 0x6, 0xfffffffd, 0x3, 0x6, 0xe0000000, 0x0, 0x3, 0xfffffff7, 0x3ff, 0x101, 0x35, 0xb1, 0x62, 0x4, 0x3, 0x4e, 0x0, 0xffffffff, 0x583c, 0x80000001, 0x200, 0x101, 0x2d97, 0xfffffffb, 0x80000001, 0x1, 0x3, 0x0, 0x3, 0x10001, 0x6, 0x27, 0x5, 0xfffffffe, 0xd8, 0xd2, 0x3, 0xb, 0x53c, 0x13, 0x240, 0x5, 0x8dfe, 0x2, 0x9979, 0xfffff4c2, 0x8000, 0xe3, 0x2, 0x0, 0x71c, 0xb5, 0x6, 0x5, 0x8d7a, 0xfffffffa, 0x4, 0xff, 0x6bd, 0x7, 0xb2d, 0x9, 0x3ff, 0x800, 0x9, 0x7, 0x3, 0x9, 0x70ca, 0x2, 0x1, 0x80000001, 0x2, 0x7f81, 0x3, 0x3ff, 0x3, 0x6, 0x4, 0x9, 0x80000000, 0x7, 0xfa, 0x4, 0x4, 0x6, 0x3, 0x4a4, 0x8, 0x7, 0x4, 0x7, 0xa56b, 0x2, 0x8000000, 0x0, 0x5, 0x7, 0xfffffffa, 0x8a, 0x401, 0x3, 0x1, 0x4, 0xffff, 0x5, 0x8c, 0xfffffffd, 0x3, 0x9, 0x4, 0x10001, 0x8, 0x2, 0x40, 0x3, 0x8, 0x3, 0x870, 0x2400, 0xf8693e78, 0x80000000, 0x101, 0xa, 0x3, 0x7, 0x7, 0x1, 0x9, 0x8f7, 0x100, 0x7, 0x5, 0x4, 0xffffffff, 0x3, 0x2, 0x1, 0x101, 0x4, 0x6, 0x9, 0x98c2, 0x3, 0x401, 0x3, 0x8, 0x897, 0x7, 0x0, 0x200, 0xffff2d1c, 0x1, 0x5, 0xfd87, 0x45f67b1d, 0xfff, 0xfffffffb, 0x49ffb1be, 0x7, 0x2, 0xe, 0x6, 0x9, 0x5, 0x7, 0x8, 0x2, 0x8, 0x2, 0x7, 0xd, 0x0, 0x66, 0x9, 0x3, 0xe, 0x4, 0x81, 0xc, 0x5, 0x0, 0x20000, 0x20000000, 0x514f, 0x7, 0x6, 0x0, 0x3, 0x8, 0x9673, 0x3, 0x8e, 0x5, 0x7, 0x2, 0x5, 0x9, 0x10001, 0x3a, 0x2, 0x5, 0x1000, 0x8, 0x8000, 0x1, 0xfbf, 0x7f, 0x4, 0xc6, 0x7, 0x4, 0x2, 0x4, 0x5, 0x5134, 0x3, 0x9, 0x6, 0x6, 0x95, 0x2, 0xd8, 0x9, 0x3, 0x5, 0x3b1f, 0x6, 0x101, 0x7, 0xe01, 0xffffffff, 0x80000000, 0x3, 0x800, 0x6, 0x8, 0xca0f, 0x0, 0x9, 0x1, 0x543, 0x86bc, 0x2, 0xfffffbbc, 0x43aa, 0x8000, 0x1, 0x6, 0x1f, 0xe57c000, 0x2, 0x7fffffff, 0xa, 0x1000, 0x3, 0x6, 0x536, 0x6, 0x80, 0x9, 0x7fffffff, 0x4457, 0x60000000, 0x6, 0xfffffffc, 0xeb, 0xfffffff3, 0x1, 0x5422, 0x3, 0x6f1, 0xd, 0x1578, 0xffffff80, 0x5, 0x4, 0x7, 0x2, 0x186, 0x5, 0x1, 0xeb, 0x3, 0x65bd5d88, 0xd5b9, 0x10001, 0x8, 0xb, 0xb, 0x7, 0x7ff, 0x40, 0x81, 0xff, 0x2, 0x6, 0xfff, 0x10, 0x8, 0x5, 0x77a, 0x9, 0x0, 0xa, 0x20, 0x10001, 0xfb, 0x7, 0x4, 0x10, 0x597, 0x3, 0x7, 0x5, 0xfff, 0xde, 0x101, 0x1, 0xfff, 0x7, 0x88b3, 0x2, 0x4, 0x3, 0xa, 0x9, 0x1ff, 0x9, 0x1000, 0x8, 0x0, 0xfffffe01, 0x50, 0xe, 0x3, 0xfffffffc, 0x3, 0x7, 0x1, 0x5, 0x81, 0x5, 0x100, 0x6, 0x101, 0x800, 0x2, 0x7, 0x1, 0x4, 0x1, 0x5, 0xfffffeff, 0xf0d, 0xf39, 0x940, 0x7c9, 0x4, 0x7, 0x3d0, 0xcf50, 0x2b35, 0xca44, 0x5, 0x8, 0x1000, 0x101, 0x4, 0x0, 0xe, 0x1, 0x4, 0x9, 0x5, 0x2, 0xfffffffd, 0x0, 0x7, 0x8, 0xa106, 0xf, 0x800, 0x6a9, 0xf88e, 0x0, 0x7, 0x9e, 0xfffffffd, 0x5, 0x9, 0x6, 0x7ff, 0x7, 0x2, 0x3, 0x1, 0x3, 0x6, 0xc92, 0x2, 0xffffffff, 0x7, 0x9, 0xd, 0x3, 0x5, 0x100, 0x4, 0x71f5b996, 0x0, 0x40, 0x7fffffff, 0x0, 0xffff, 0x2, 0x8, 0x8, 0x9, 0x0, 0x7, 0x5, 0x7de3, 0x3, 0x8, 0x101, 0x7, 0x7, 0x9b, 0x7, 0x49, 0x80000000, 0x3, 0x2, 0x800, 0x9, 0x3, 0x2, 0x200, 0xff, 0x8000, 0x6, 0xc61c, 0x36f, 0x9, 0xb, 0xffffff75, 0x42, 0x6, 0x3204, 0x8, 0x1, 0x0, 0x5, 0x30a8, 0x9, 0x8, 0x4da, 0x4, 0x4, 0x3, 0xfffffff9, 0x7, 0x5, 0x101, 0x6, 0x3, 0x8, 0x1, 0x5, 0x2, 0x80, 0x8, 0x8cf, 0xa1, 0x0, 0xaeae, 0x5, 0x7, 0x1ff, 0x2, 0x7, 0xffffffff, 0x9, 0xe73, 0x1d, 0x8, 0x7, 0x5, 0x1, 0x1, 0x4, 0x6, 0x3a81, 0x8, 0xdc5d, 0x40, 0x4, 0xd, 0x6, 0x4026, 0xd, 0x41, 0xb731, 0xae, 0xfe75, 0x401, 0x2, 0x0, 0x2, 0x800, 0x10000, 0xffffffff, 0x26, 0x3, 0x1, 0x8001, 0x7, 0x7, 0x1, 0x2, 0xe, 0x9, 0x8, 0x3, 0x8, 0x1, 0x6, 0x10000, 0x3, 0x5, 0x1, 0xd, 0x7ff, 0x1, 0x5, 0x2, 0x5, 0x401, 0x3, 0x3, 0x3, 0x4, 0x1, 0x6, 0x8, 0x9, 0xec3, 0x5, 0x3e4, 0x2, 0xffffffc3, 0x4, 0x2, 0x0, 0xfffffffb, 0x10, 0x6, 0x4, 0x8, 0x3, 0x3, 0xffffffff, 0x4, 0x630, 0x8, 0xc6ab, 0x6c0, 0x4, 0x0, 0x9, 0x9, 0xe, 0x1, 0x4, 0x5, 0x4, 0x4b, 0x39, 0x6, 0xd, 0x40, 0x7, 0xfffffffb, 0x81, 0x3, 0x6, 0x2, 0x1bd, 0x87c, 0x2, 0x81, 0x6, 0x8000, 0xfffffffd, 0x4, 0xb, 0x2, 0x3, 0x5, 0x1ff, 0x8000, 0x7, 0x7, 0x1, 0xe7, 0x0, 0x2, 0x4, 0x56e, 0x2, 0x7, 0x4, 0x0, 0x83, 0x7f, 0xf, 0xfffffff8, 0x5, 0xf, 0x7, 0x0, 0x40, 0x1, 0x4, 0x5, 0x6, 0xa, 0x7, 0x6, 0x0, 0x5, 0x20, 0xfff, 0x3, 0x4, 0xcfbe, 0x1, 0x5, 0x1, 0x7a48, 0x9bb8000, 0xef, 0x8, 0x8, 0x9, 0x8, 0x1, 0x0, 0x80000000, 0x0, 0xea1, 0x7, 0x7, 0x3, 0x5, 0xcaf8, 0x1, 0x3, 0xd9, 0x7, 0x5, 0x8, 0x9, 0x7, 0x9, 0x10000, 0x3, 0xd, 0x10000, 0x100, 0x401, 0xe, 0x9, 0x1, 0x7, 0x7, 0x9, 0x7, 0xf5, 0x401, 0x1, 0x80000000, 0x800, 0x401, 0x400, 0x2, 0x7ff, 0xb78, 0x3, 0x2, 0x9, 0xfffffffd, 0x401, 0x40, 0x8, 0x3, 0x80000001, 0x90, 0x6d, 0x7, 0xfffffff8, 0x2, 0x8, 0x6, 0x0, 0x8, 0x737, 0x390a, 0x9f, 0xfffffff7, 0xa69f, 0x80000001, 0x80000001, 0x3, 0x1, 0x9, 0x10, 0x3, 0x9, 0xb1, 0xcfd, 0xffff, 0x6, 0x6, 0x9, 0x6, 0x8, 0x7, 0xffffff58, 0x2, 0x1, 0x8, 0xa, 0x1, 0xfffe00, 0xfffeffff, 0x8, 0xff, 0x8, 0x9, 0x3, 0x200000, 0x5, 0x40, 0x1, 0xfffffffa, 0x9, 0x1, 0x5ace2c61, 0x7ff, 0x1, 0x2, 0x988, 0x7, 0x8, 0x3, 0x7ff, 0x200, 0x1, 0x1, 0x9, 0x0, 0x2, 0x1, 0x7, 0x8, 0x9055, 0x65, 0x8af, 0xc7, 0x8, 0xa, 0x1, 0x4, 0x2550, 0x7ff, 0x0, 0x8, 0x53e, 0x4, 0x69, 0x4, 0xa90, 0x2, 0x5, 0x0, 0x3, 0x1, 0xf, 0x2, 0x8, 0x4, 0x8, 0x7, 0x3, 0x9, 0xa2b4, 0x1008, 0x2, 0x7, 0x1e64, 0x6, 0x1, 0x800, 0x10000, 0xa3, 0x80000001, 0xff, 0x6, 0x8, 0x8, 0x4, 0xb, 0x3, 0x2, 0x8, 0x7, 0xf8b5, 0x8, 0x2, 0xfa9, 0x5, 0x5, 0x1, 0x8, 0x7, 0x5, 0x2, 0x5, 0x1e5559e3, 0x2, 0x684, 0x7fff, 0x6, 0x1, 0xb, 0x9, 0x200, 0x2, 0x6, 0x3, 0x4, 0x3, 0x6, 0x4, 0x7, 0xfffffc00, 0x7, 0xab5, 0x3, 0x3, 0xff, 0x80, 0x9, 0x7fffffff, 0x5, 0x5, 0xffff1faa, 0x2, 0x8, 0x8, 0x3, 0x1, 0x9, 0x3, 0xf7ae, 0x6, 0x2, 0x1ced81b3, 0x2, 0x401, 0xffffffff, 0x2, 0x4, 0x4, 0x7, 0x5, 0x5, 0x400, 0x4, 0x8, 0x7, 0xa13, 0x1, 0x6, 0x10000, 0xffffffff, 0xb89, 0x9, 0x800, 0xff, 0xa, 0x7fff, 0x80000000, 0x8000, 0xe, 0xda42, 0x8, 0x3ff, 0x5, 0x5, 0x10, 0x8, 0x4, 0xfffffffc, 0x5, 0x9, 0x4e0, 0x4, 0xdcf, 0x5, 0x9, 0x2, 0x40, 0x100, 0xfd, 0xc2, 0xb8d, 0xffffeefe, 0x6cc, 0xdd, 0xb1f, 0x4, 0x6, 0x7, 0x4, 0x4, 0x86e, 0x1d, 0x3, 0x0, 0x1, 0x5, 0x9, 0x7, 0x81, 0xd, 0x10000, 0x113cdc59, 0x3, 0x3, 0xffffffe4, 0x3, 0x200, 0xca4, 0x400, 0x6, 0x80000001, 0x1, 0x2, 0x1, 0x4, 0x2, 0x7, 0x3, 0x1, 0x6, 0x38a2, 0x80000001, 0xc6, 0xfffffffd]})
r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0xdc}]})
r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f00000002c0)=@arm64_fp={0x20400000001000c0, 0x0})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0)
pread64(r0, &(0x7f0000000180)=""/70, 0x46, 0x5)

821.5775ms ago: executing program 0 (id=531):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$iommufd(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e20, @local}], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x2, 0x6, 0x6, 0xb, 0x0, 0xe1}, @exit], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05})
mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x40, 0xad, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x1b, 0x800000000004}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000280)={<r4=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @id_tos={0x0, r4, 0x0, 0x0, 0x4000}}, 0x20)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x35, 0x0, 0x0)
unshare(0x13060100)
syz_emit_ethernet(0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb50a245d5cde0080048000043006500000002907800000000ffffffff440c728364010100000000010b0990780080000045140003006800017f000008ac1e01010000000017deba919bfcd0"], 0x0)
ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0)
sendmsg$unix(0xffffffffffffffff, 0x0, 0x2000c011)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
r7 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010106, 0x4e22, 0x3, 'rr\x00', 0x1, 0x5, 0x73}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000200)={{0x84, @multicast1, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x64}, {@remote, 0x4623, 0x4, 0x100000cd, 0x12d5f, 0x3}}, 0x44)
sendmmsg$sock(r6, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000)

491.791182ms ago: executing program 4 (id=532):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$packet(0x11, 0x2, 0x300)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000004, 0x31, 0xffffffffffffffff, 0x1000)
capset(&(0x7f0000002ffa)={0x20080522, 0xffffffffffffffff}, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4)
sendto$unix(r2, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0)
recvfrom(r2, &(0x7f00000030c0)=""/4116, 0x1014, 0x1, 0x0, 0x0)

187.044575ms ago: executing program 0 (id=533):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
setsockopt$inet_group_source_req(r0, 0x1000000, 0x4, &(0x7f0000000200)={0x101, {{0x2, 0x4e23, @private=0xa010102}}, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)

0s ago: executing program 5 (id=534):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2)
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r5, @ANYBLOB="7f05000000903724baa3000000"], 0x20}}, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0)
r9 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$6lowpan_enable(r9, &(0x7f0000000280)='1', 0x1)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r11, &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

26 audit(1770099739.345:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f92539 code=0x7ffc0000
[  134.739295][ T5942] usb 6-1: config 0 descriptor??
[  134.745220][   T30] audit: type=1326 audit(1770099739.345:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.2.170" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f92539 code=0x7ffc0000
[  134.947740][ T5942] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  134.993389][ T6579] syz.4.168 (6579): drop_caches: 2
[  135.543756][ T5942] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  135.598947][ T5942] usb 6-1: USB disconnect, device number 2
[  136.289172][ T5466] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  136.464677][ T5466] usb 6-1: Using ep0 maxpacket: 16
[  136.521416][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.530446][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.561995][ T5466] usb 6-1: unable to get BOS descriptor or descriptor too short
[  136.602566][ T5466] usb 6-1: unable to read config index 0 descriptor/start: -71
[  136.630584][ T5466] usb 6-1: can't read configurations, error -71
[  137.419037][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  137.639011][   T10] usb 4-1: Using ep0 maxpacket: 32
[  137.647467][   T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  137.659606][   T10] usb 4-1: config 0 has no interface number 0
[  137.685741][   T10] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  137.719617][   T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  137.748047][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.766644][   T10] usb 4-1: Product: syz
[  137.776585][   T10] usb 4-1: Manufacturer: syz
[  137.802655][   T10] usb 4-1: SerialNumber: syz
[  137.858738][   T10] usb 4-1: config 0 descriptor??
[  137.903786][   T10] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  137.925275][   T10] em28xx 4-1:0.132: Video interface 132 found:
[  137.995736][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  138.002441][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  138.306722][   T10] em28xx 4-1:0.132: chip ID is em2884
[  138.339545][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[  138.348577][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'.
[  138.419570][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.4.192'.
[  139.054051][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'.
[  139.081943][ T6683] netlink: 72 bytes leftover after parsing attributes in process `syz.2.198'.
[  139.243415][   T30] kauditd_printk_skb: 55 callbacks suppressed
[  139.243434][   T30] audit: type=1326 audit(1770099744.785:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  139.310480][   T30] audit: type=1326 audit(1770099744.795:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6669 comm="syz.0.194" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  139.427401][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  139.445786][   T10] em28xx 4-1:0.132: board has no eeprom
[  139.518935][   T10] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  139.544707][   T10] em28xx 4-1:0.132: analog set to bulk mode.
[  139.564185][ T5903] em28xx 4-1:0.132: Registering V4L2 extension
[  139.640455][   T10] usb 4-1: USB disconnect, device number 7
[  139.691783][   T10] em28xx 4-1:0.132: Disconnecting em28xx
[  140.189070][ T5903] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  140.224037][ T5903] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  140.230441][   T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  140.294954][ T5903] em28xx 4-1:0.132: No AC97 audio processor
[  140.354925][ T5903] usb 4-1: Decoder not found
[  140.385285][ T6716] bond1: option arp_interval: invalid value (18446744073709551615)
[  140.418960][   T43] usb 1-1: Using ep0 maxpacket: 32
[  140.424524][ T5903] em28xx 4-1:0.132: failed to create media graph
[  140.479125][ T5903] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  140.486508][   T43] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f
[  140.498172][ T6716] bond1: option arp_interval: allowed values 0 - 2147483647
[  140.522549][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.540654][   T43] usb 1-1: Product: syz
[  140.545186][ T5903] em28xx 4-1:0.132: Remote control support is not available for this card.
[  140.593215][   T10] em28xx 4-1:0.132: Closing input extension
[  140.612560][   T43] usb 1-1: Manufacturer: syz
[  140.631563][ T6716] bond1 (unregistering): Released all slaves
[  140.657214][   T10] em28xx 4-1:0.132: Freeing device
[  140.659003][   T43] usb 1-1: SerialNumber: syz
[  140.696466][   T43] usb 1-1: config 0 descriptor??
[  140.747060][   T43] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state.
[  140.811242][   T43] dvb-usb: bulk message failed: -22 (4/0)
[  140.831972][   T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  140.924024][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  140.945983][   T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  141.029031][   T10] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  141.057767][   T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  141.116023][   T43] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0)
[  141.158610][   T43] usb 1-1: media controller created
[  141.245180][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  141.250039][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  141.265585][ T6725] syzkaller0: entered promiscuous mode
[  141.298789][ T6725] syzkaller0: entered allmulticast mode
[  141.388585][   T43] usb 1-1: selecting invalid altsetting 3
[  141.435205][   T43] ttusb2: set interface to alts=3 failed
[  141.480370][   T10] usb 4-1: new low-speed USB device number 9 using dummy_hcd
[  141.611008][   T43] DVB: Unable to find symbol tda10086_attach()
[  141.617595][   T43] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0'
[  141.627008][   T43] dvb-usb: bulk message failed: -22 (4/0)
[  141.636237][   T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  141.662353][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  141.671386][   T10] usb usb4-port1: attempt power cycle
[  141.690977][   T43] dvb-usb: bulk message failed: -22 (5/0)
[  141.708473][   T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0)
[  141.756908][   T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected.
[  142.141655][   T10] usb 4-1: new low-speed USB device number 10 using dummy_hcd
[  142.169752][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  142.356123][   T10] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  142.395641][   T10] usb 4-1: Invalid ep0 maxpacket: 32
[  142.411544][   T10] usb usb4-port1: unable to enumerate USB device
[  142.946571][ T6705] syz.0.200 (6705): drop_caches: 2
[  143.069462][ T5942] usb 1-1: USB disconnect, device number 6
[  143.173143][ T5942] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected.
[  143.829042][ T5903] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  144.098906][ T5903] usb 4-1: Using ep0 maxpacket: 32
[  144.106304][ T5903] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  144.115001][ T5903] usb 4-1: config 0 has no interface number 0
[  144.129025][ T5903] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  144.144042][ T5903] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  144.160012][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.168245][ T5903] usb 4-1: Product: syz
[  144.182866][ T5903] usb 4-1: Manufacturer: syz
[  144.187574][ T5903] usb 4-1: SerialNumber: syz
[  144.194943][ T5903] usb 4-1: config 0 descriptor??
[  144.209014][ T5903] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  144.222078][ T5903] em28xx 4-1:0.132: Video interface 132 found:
[  144.616965][ T5903] em28xx 4-1:0.132: chip ID is em2884
[  144.898126][ T6778] CIFS: VFS: Malformed UNC in devname
[  145.633070][ T6764] ip6gre1: entered promiscuous mode
[  145.638468][ T6764] ip6gre1: entered allmulticast mode
[  145.758271][ T5903] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  145.786860][ T5903] em28xx 4-1:0.132: board has no eeprom
[  145.879039][ T5903] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  145.897416][ T5903] em28xx 4-1:0.132: analog set to bulk mode.
[  145.930191][   T10] em28xx 4-1:0.132: Registering V4L2 extension
[  145.992139][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.0.215'.
[  146.082968][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  146.127857][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  146.140842][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  146.156593][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  146.176835][   T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  146.250864][ T5903] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  146.267396][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  146.279583][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  146.292590][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  146.306148][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  146.373607][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  146.384980][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  146.404493][   T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  146.417886][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5)
[  146.428487][   T43] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  146.438506][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5)
[  146.448868][   T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  146.454722][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.475064][   T10] em28xx 4-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5)
[  146.479199][ T5942] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  146.496644][   T10] em28xx 4-1:0.132: Config register raw data: 0xfffffffb
[  146.508632][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.519033][   T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41
[  146.545208][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  146.554713][   T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  146.555322][   T43] usb 3-1: Product: syz
[  146.567009][   T10] em28xx 4-1:0.132: No AC97 audio processor
[  146.573162][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  146.586638][ T5903] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  146.609946][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.623579][   T43] usb 3-1: Manufacturer: syz
[  146.628331][   T43] usb 3-1: SerialNumber: syz
[  146.646760][   T10] usb 4-1: Decoder not found
[  146.658956][ T5942] usb 1-1: device descriptor read/64, error -71
[  146.667603][   T10] em28xx 4-1:0.132: failed to create media graph
[  146.682581][ T5903] usb 5-1: config 0 descriptor??
[  146.696960][   T10] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  146.723781][   T10] em28xx 4-1:0.132: Remote control support is not available for this card.
[  146.899907][   T43] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  146.924270][ T5896] usb 4-1: USB disconnect, device number 12
[  146.939363][ T5942] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  146.948587][ T5896] em28xx 4-1:0.132: Disconnecting em28xx
[  146.983529][ T5896] em28xx 4-1:0.132: Closing input extension
[  147.023170][ T5896] em28xx 4-1:0.132: Freeing device
[  147.082087][ T6812] netlink: 316 bytes leftover after parsing attributes in process `syz.5.222'.
[  147.129478][ T5942] usb 1-1: device descriptor read/64, error -71
[  147.131032][ T5466] usb 3-1: USB disconnect, device number 12
[  147.145528][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.156722][ T5466] usblp0: removed
[  147.162499][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.171536][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.196936][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.226868][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.234951][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.243329][ T5942] usb usb1-port1: attempt power cycle
[  147.246389][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.256843][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.278911][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.289224][ T5903] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0
[  147.346719][ T5903] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  147.417070][ T5903] usb 5-1: USB disconnect, device number 5
[  147.506756][ T6821] fido_id[6821]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  147.609506][ T5942] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  147.643807][ T5942] usb 1-1: device descriptor read/8, error -71
[  147.892438][ T5942] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  147.989755][ T5942] usb 1-1: device descriptor read/8, error -71
[  148.023801][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.226'.
[  148.111894][ T5942] usb usb1-port1: unable to enumerate USB device
[  149.298902][  T872] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  149.410135][ T6857] warning: `syz.2.230' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  149.444652][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  149.482385][  T872] usb 4-1: config 0 has an invalid interface number: 23 but max is 0
[  149.490847][  T872] usb 4-1: config 0 has no interface number 0
[  149.507009][  T872] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  149.522433][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  149.561022][  T872] usb 4-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023
[  149.591449][  T872] usb 4-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01
[  149.603666][  T872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.622473][  T872] usb 4-1: Product: syz
[  149.626714][  T872] usb 4-1: Manufacturer: syz
[  149.690169][  T872] usb 4-1: SerialNumber: syz
[  149.712079][  T872] usb 4-1: config 0 descriptor??
[  149.736701][ T6849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.744908][ T6849] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  149.757424][  T872] ums-usbat 4-1:0.23: USB Mass Storage device detected
[  149.779601][ T6862] syzkaller0: entered promiscuous mode
[  149.785143][ T6862] syzkaller0: entered allmulticast mode
[  149.808729][ T6869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'.
[  149.876004][ T6873] FAULT_INJECTION: forcing a failure.
[  149.876004][ T6873] name failslab, interval 1, probability 0, space 0, times 0
[  149.888980][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT(full) 
[  149.889000][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  149.889009][ T6873] Call Trace:
[  149.889017][ T6873]  <TASK>
[  149.889024][ T6873]  dump_stack_lvl+0xe8/0x150
[  149.889050][ T6873]  should_fail_ex+0x412/0x560
[  149.889072][ T6873]  should_failslab+0xa8/0x100
[  149.889091][ T6873]  kmem_cache_alloc_noprof+0x87/0x6e0
[  149.889113][ T6873]  ? ima_match_policy+0x2146/0x21e0
[  149.889127][ T6873]  ? sctp_get_port_local+0x6f2/0x1730
[  149.889150][ T6873]  sctp_get_port_local+0x6f2/0x1730
[  149.889168][ T6873]  ? sctp_bind_addr_match+0x30/0x2b0
[  149.889190][ T6873]  ? __pfx_sctp_get_port_local+0x10/0x10
[  149.889212][ T6873]  ? sctp_bind_addr_match+0x28b/0x2b0
[  149.889235][ T6873]  sctp_do_bind+0x4f1/0x9d0
[  149.889262][ T6873]  sctp_connect_new_asoc+0x270/0x6b0
[  149.889283][ T6873]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  149.889306][ T6873]  ? __local_bh_enable_ip+0xd0/0x130
[  149.889319][ T6873]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  149.889336][ T6873]  ? security_sctp_bind_connect+0x7e/0x2c0
[  149.889353][ T6873]  sctp_sendmsg+0x1528/0x2c10
[  149.889381][ T6873]  ? __pfx_sctp_sendmsg+0x10/0x10
[  149.889398][ T6873]  ? aa_sk_perm+0x15a/0x960
[  149.889416][ T6873]  ? aa_sk_perm+0x82d/0x960
[  149.889432][ T6873]  ? __might_fault+0xaf/0x130
[  149.889457][ T6873]  ? __pfx_aa_sk_perm+0x10/0x10
[  149.889476][ T6873]  ? sock_rps_record_flow+0x19/0x400
[  149.889498][ T6873]  ? inet_sendmsg+0x2f4/0x370
[  149.889520][ T6873]  ____sys_sendmsg+0x894/0xad0
[  149.889547][ T6873]  ? __pfx_____sys_sendmsg+0x10/0x10
[  149.889577][ T6873]  ___sys_sendmsg+0x2a5/0x360
[  149.889596][ T6873]  ? __lock_acquire+0x6b5/0x2cf0
[  149.889619][ T6873]  ? __pfx____sys_sendmsg+0x10/0x10
[  149.889639][ T6873]  ? kstrtoull+0x12f/0x1d0
[  149.889677][ T6873]  ? __fget_files+0x2a/0x420
[  149.889692][ T6873]  ? __fget_files+0x3a0/0x420
[  149.889715][ T6873]  __sys_sendmmsg+0x2e7/0x4e0
[  149.889738][ T6873]  ? __pfx___sys_sendmmsg+0x10/0x10
[  149.889764][ T6873]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  149.889798][ T6873]  ? ksys_write+0x242/0x270
[  149.889821][ T6873]  ? __pfx_ksys_write+0x10/0x10
[  149.889845][ T6873]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  149.889866][ T6873]  __do_fast_syscall_32+0x1d2/0x540
[  149.889884][ T6873]  ? lockdep_hardirqs_on+0x7a/0x110
[  149.889897][ T6873]  ? do_fast_syscall_32+0x33/0x70
[  149.889912][ T6873]  ? asm_int80_emulation+0x1a/0x20
[  149.889925][ T6873]  ? do_int80_emulation+0x20e/0x400
[  149.889945][ T6873]  do_fast_syscall_32+0x33/0x70
[  149.889961][ T6873]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  149.889979][ T6873] RIP: 0023:0xf7f92539
[  149.889993][ T6873] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  149.890005][ T6873] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  149.890020][ T6873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0
[  149.890031][ T6873] RDX: 0000000000000001 RSI: 0000000020008050 RDI: 0000000000000000
[  149.890039][ T6873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  149.890047][ T6873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  149.890056][ T6873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  149.890077][ T6873]  </TASK>
[  150.260209][ T6849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.227'.
[  150.432971][ T6862] tipc: Started in network mode
[  150.460082][ T6862] tipc: Node identity a60324b1b6c4, cluster identity 4711
[  150.467665][ T6862] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  150.557525][ T6862] tipc: Resetting bearer <eth:syzkaller0>
[  150.576702][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.585288][ T6862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  150.634009][ T6859] tipc: Resetting bearer <eth:syzkaller0>
[  150.648952][ T5942] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  150.818906][ T5942] usb 5-1: Using ep0 maxpacket: 32
[  150.932700][ T6859] tipc: Disabling bearer <eth:syzkaller0>
[  150.985329][ T5942] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  151.129398][ T5942] usb 5-1: config 0 has no interface number 0
[  151.169434][ T5942] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.312355][ T5942] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  151.354198][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.395138][ T5942] usb 5-1: Product: syz
[  151.488248][ T5942] usb 5-1: Manufacturer: syz
[  151.566612][ T5942] usb 5-1: SerialNumber: syz
[  151.626572][ T5942] usb 5-1: config 0 descriptor??
[  151.694745][ T5942] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  151.742842][ T5942] em28xx 5-1:0.132: Video interface 132 found:
[  152.062287][  T872] ums-usbat 4-1:0.23: probe with driver ums-usbat failed with error -5
[  152.126389][  T872] usb 4-1: USB disconnect, device number 13
[  152.195104][ T5942] em28xx 5-1:0.132: chip ID is em2884
[  152.408579][ T6937] loop6: detected capacity change from 0 to 1024
[  152.431285][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.439651][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.494415][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.511059][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.535657][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.568591][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.596552][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.608085][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.617641][ T6459] ldm_validate_partition_table(): Disk read failed.
[  152.653628][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.691469][ T6459] Buffer I/O error on dev loop6, logical block 0, async page read
[  152.716594][ T6459] Dev loop6: unable to read RDB block 0
[  152.742514][ T6459]  loop6: unable to read partition table
[  152.755362][ T6937] ldm_validate_partition_table(): Disk read failed.
[  152.763164][ T6937] Dev loop6: unable to read RDB block 0
[  152.783268][ T6937]  loop6: unable to read partition table
[  152.795824][ T6937] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  152.936138][ T6948] FAULT_INJECTION: forcing a failure.
[  152.936138][ T6948] name failslab, interval 1, probability 0, space 0, times 0
[  152.978246][ T6948] CPU: 0 UID: 0 PID: 6948 Comm: syz.2.248 Not tainted syzkaller #0 PREEMPT(full) 
[  152.978274][ T6948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  152.978287][ T6948] Call Trace:
[  152.978296][ T6948]  <TASK>
[  152.978305][ T6948]  dump_stack_lvl+0xe8/0x150
[  152.978338][ T6948]  should_fail_ex+0x412/0x560
[  152.978368][ T6948]  should_failslab+0xa8/0x100
[  152.978394][ T6948]  __kmalloc_noprof+0xde/0x7e0
[  152.978414][ T6948]  ? iovec_from_user+0x87/0x250
[  152.978450][ T6948]  iovec_from_user+0x87/0x250
[  152.978485][ T6948]  __import_iovec+0x163/0x7e0
[  152.978527][ T6948]  import_iovec+0x73/0xa0
[  152.978562][ T6948]  get_compat_msghdr+0x34b/0x4c0
[  152.978595][ T6948]  ? __pfx_get_compat_msghdr+0x10/0x10
[  152.978631][ T6948]  ? __lock_acquire+0x6b5/0x2cf0
[  152.978668][ T6948]  ___sys_recvmsg+0x1dd/0x590
[  152.978696][ T6948]  ? ktime_get_ts64+0xa9/0x3f0
[  152.978727][ T6948]  ? __pfx____sys_recvmsg+0x10/0x10
[  152.978765][ T6948]  ? __fget_files+0x2a/0x420
[  152.978808][ T6948]  ? __fget_files+0x3a0/0x420
[  152.978840][ T6948]  do_recvmmsg+0x3a5/0x800
[  152.978877][ T6948]  ? __pfx_do_recvmmsg+0x10/0x10
[  152.978918][ T6948]  ? _copy_from_user+0x94/0xb0
[  152.978965][ T6948]  __sys_recvmmsg+0x12f/0x290
[  152.978995][ T6948]  ? __pfx___sys_recvmmsg+0x10/0x10
[  152.979022][ T6948]  ? ksys_write+0x242/0x270
[  152.979055][ T6948]  ? __pfx_ksys_write+0x10/0x10
[  152.979088][ T6948]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  152.979119][ T6948]  __do_fast_syscall_32+0x1d2/0x540
[  152.979142][ T6948]  ? lockdep_hardirqs_on+0x7a/0x110
[  152.979161][ T6948]  ? do_fast_syscall_32+0x33/0x70
[  152.979182][ T6948]  ? asm_int80_emulation+0x1a/0x20
[  152.979200][ T6948]  ? do_int80_emulation+0x20e/0x400
[  152.979226][ T6948]  do_fast_syscall_32+0x33/0x70
[  152.979248][ T6948]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  152.979272][ T6948] RIP: 0023:0xf7f92539
[  152.979290][ T6948] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  152.979306][ T6948] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  152.979329][ T6948] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800037c0
[  152.979343][ T6948] RDX: 00000000000003b4 RSI: 0000000000002000 RDI: 0000000080003700
[  152.979356][ T6948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  152.979367][ T6948] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  152.979379][ T6948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  152.979408][ T6948]  </TASK>
[  153.366023][ T5942] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  153.375724][ T5942] em28xx 5-1:0.132: board has no eeprom
[  153.462217][ T5942] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  153.502216][ T5942] em28xx 5-1:0.132: analog set to bulk mode.
[  153.508397][   T43] em28xx 5-1:0.132: Registering V4L2 extension
[  153.559620][ T5942] usb 5-1: USB disconnect, device number 6
[  153.607586][ T5942] em28xx 5-1:0.132: Disconnecting em28xx
[  153.675538][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.251'.
[  153.707897][ T6957] netlink: 72 bytes leftover after parsing attributes in process `syz.5.251'.
[  153.871511][   T43] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  153.899072][   T43] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  153.919386][   T43] em28xx 5-1:0.132: No AC97 audio processor
[  153.930232][   T43] usb 5-1: Decoder not found
[  153.934895][   T43] em28xx 5-1:0.132: failed to create media graph
[  153.941399][ T6965] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  153.954573][   T43] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  153.966279][   T43] em28xx 5-1:0.132: Remote control support is not available for this card.
[  153.968448][ T6967] fuse: Unknown parameter 'group_i00000000000000000000'
[  153.982529][ T5942] em28xx 5-1:0.132: Closing input extension
[  154.003434][ T5942] em28xx 5-1:0.132: Freeing device
[  154.250266][ T6973] fuse: Unknown parameter 'group_i00000000000000000000'
[  154.259997][ T6973] FAULT_INJECTION: forcing a failure.
[  154.259997][ T6973] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  154.298213][ T6971] ip6gre1: entered promiscuous mode
[  154.304505][ T6973] CPU: 0 UID: 0 PID: 6973 Comm: syz.4.256 Not tainted syzkaller #0 PREEMPT(full) 
[  154.304544][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  154.304557][ T6973] Call Trace:
[  154.304566][ T6973]  <TASK>
[  154.304574][ T6973]  dump_stack_lvl+0xe8/0x150
[  154.304607][ T6973]  should_fail_ex+0x412/0x560
[  154.304636][ T6973]  _copy_to_user+0x31/0xb0
[  154.304670][ T6973]  simple_read_from_buffer+0xe1/0x170
[  154.304701][ T6973]  proc_fail_nth_read+0x1bb/0x230
[  154.304735][ T6973]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.304768][ T6973]  ? rw_verify_area+0x2a6/0x4d0
[  154.304796][ T6973]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  154.304827][ T6973]  vfs_read+0x20c/0xa70
[  154.304853][ T6973]  ? fdget_pos+0x246/0x320
[  154.304880][ T6973]  ? __pfx___mutex_lock+0x10/0x10
[  154.304902][ T6973]  ? __pfx_vfs_read+0x10/0x10
[  154.304936][ T6973]  ? __fget_files+0x2a/0x420
[  154.304963][ T6973]  ? __fget_files+0x3a0/0x420
[  154.304983][ T6973]  ? __fget_files+0x2a/0x420
[  154.305014][ T6973]  ksys_read+0x150/0x270
[  154.305045][ T6973]  ? __pfx_ksys_read+0x10/0x10
[  154.305077][ T6973]  ? asm_int80_emulation+0x1a/0x20
[  154.305101][ T6973]  ? asm_int80_emulation+0x1a/0x20
[  154.305120][ T6973]  do_int80_emulation+0x111/0x400
[  154.305144][ T6973]  ? clear_bhb_loop+0x60/0xb0
[  154.305165][ T6973]  ? clear_bhb_loop+0x60/0xb0
[  154.305189][ T6973]  asm_int80_emulation+0x1a/0x20
[  154.305208][ T6973] RIP: 0023:0xf712572b
[  154.305226][ T6973] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53
[  154.305247][ T6973] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003
[  154.305268][ T6973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0
[  154.305282][ T6973] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000
[  154.305294][ T6973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  154.305306][ T6973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  154.305317][ T6973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  154.305348][ T6973]  </TASK>
[  154.310599][ T6971] ip6gre1: entered allmulticast mode
[  154.918915][ T5942] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  154.960171][ T6993] netlink: 16 bytes leftover after parsing attributes in process `syz.3.264'.
[  155.074166][ T5942] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[  155.098989][ T5942] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  155.119232][ T5942] usb 6-1: config 0 has no interface number 0
[  155.125663][ T5942] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  155.160553][ T5942] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.201402][ T5942] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  155.219290][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.230255][ T5942] usb 6-1: Product: syz
[  155.235001][ T5942] usb 6-1: Manufacturer: syz
[  155.245139][ T5942] usb 6-1: SerialNumber: syz
[  155.266797][ T5942] usb 6-1: config 0 descriptor??
[  155.388920][  T872] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  155.388920][ T5903] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  155.561808][  T872] usb 1-1: Using ep0 maxpacket: 32
[  155.574584][  T872] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  155.592673][ T5903] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  155.609157][  T872] usb 1-1: config 0 has no interface number 0
[  155.615271][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.615309][ T5903] usb 3-1: Product: syz
[  155.615325][ T5903] usb 3-1: Manufacturer: syz
[  155.633340][ T5903] usb 3-1: SerialNumber: syz
[  155.643852][  T872] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  155.672849][  T872] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  155.695747][  T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.718868][  T872] usb 1-1: Product: syz
[  155.723099][  T872] usb 1-1: Manufacturer: syz
[  155.738866][  T872] usb 1-1: SerialNumber: syz
[  155.775504][  T872] usb 1-1: config 0 descriptor??
[  155.794068][  T872] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  155.831928][  T872] em28xx 1-1:0.132: Video interface 132 found:
[  156.025276][ T6994] bridge1: entered promiscuous mode
[  156.219525][  T872] em28xx 1-1:0.132: chip ID is em2884
[  156.305387][ T5903] rtl8150 3-1:1.0: couldn't reset the device
[  156.324180][ T5903] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[  156.358510][ T5903] usb 3-1: USB disconnect, device number 13
[  156.759587][ T5903] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  156.920104][ T5903] usb 4-1: Using ep0 maxpacket: 8
[  156.931846][ T5903] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024
[  156.959107][ T5903] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 1023
[  156.978984][ T5903] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  157.009428][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0
[  157.042049][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.061551][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  157.081329][ T5903] usb 4-1: SerialNumber: syz
[  157.092645][ T7021] syzkaller0: entered promiscuous mode
[  157.100307][ T7021] syzkaller0: entered allmulticast mode
[  157.109432][ T7008] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  157.129588][ T7008] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  157.281240][ T7026] ip6gre1: entered promiscuous mode
[  157.286737][ T7026] ip6gre1: entered allmulticast mode
[  157.337976][  T872] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  157.362685][ T5903] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  157.368181][  T872] em28xx 1-1:0.132: board has no eeprom
[  157.404509][ T5903] cdc_acm 4-1:1.0: ttyACM0: USB ACM device
[  157.443552][ T5903] usb 4-1: USB disconnect, device number 14
[  157.449272][  T872] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  157.482436][  T872] em28xx 1-1:0.132: analog set to bulk mode.
[  157.500318][   T43] em28xx 1-1:0.132: Registering V4L2 extension
[  157.628412][   T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  157.655071][   T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  157.739264][   T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  157.768355][   T43] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  157.809895][ T5903] usb 6-1: USB disconnect, device number 5
[  157.883710][ T5942] usb 1-1: USB disconnect, device number 11
[  157.891916][ T5942] em28xx 1-1:0.132: Disconnecting em28xx
[  158.402284][   T43] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  158.409535][   T43] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  158.418966][   T43] em28xx 1-1:0.132: No AC97 audio processor
[  158.433147][   T43] usb 1-1: Decoder not found
[  158.437911][   T43] em28xx 1-1:0.132: failed to create media graph
[  158.444338][   T43] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  158.473168][   T43] em28xx 1-1:0.132: Remote control support is not available for this card.
[  158.482036][ T5942] em28xx 1-1:0.132: Closing input extension
[  158.492409][ T5942] em28xx 1-1:0.132: Freeing device
[  158.849598][   T10] IPVS: starting estimator thread 0...
[  159.023991][ T7054] IPVS: using max 30 ests per chain, 72000 per kthread
[  159.271019][ T5903] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  159.480526][ T5903] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  159.523918][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.548896][ T5903] usb 6-1: Product: syz
[  159.553095][ T5903] usb 6-1: Manufacturer: syz
[  159.557683][ T5903] usb 6-1: SerialNumber: syz
[  159.592621][ T5903] usb 6-1: config 0 descriptor??
[  159.922393][ T5903] int51x1 6-1:0.0: probe with driver int51x1 failed with error -22
[  160.106638][ T7065] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  160.449143][   T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  160.601962][ T7069] ip6gre1: entered promiscuous mode
[  160.619095][ T7069] ip6gre1: entered allmulticast mode
[  160.639122][   T43] usb 1-1: Using ep0 maxpacket: 32
[  160.646825][   T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.661396][   T43] usb 1-1: config 0 has no interfaces?
[  160.672829][   T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  160.682760][ T7069] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  160.700279][   T43] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  160.713452][   T43] usb 1-1: Product: syz
[  160.719013][   T43] usb 1-1: Manufacturer: syz
[  160.736139][   T43] usb 1-1: config 0 descriptor??
[  161.180544][ T7061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  161.191559][ T7061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  161.227344][ T5942] usb 1-1: USB disconnect, device number 12
[  161.436879][ T5466] usb 6-1: USB disconnect, device number 6
[  161.448920][ T5903] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  161.518322][ T6905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.598773][ T5942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.608992][ T5903] usb 3-1: Using ep0 maxpacket: 16
[  161.614161][ T6905] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.621824][ T5903] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.674137][ T5903] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  161.695106][ T5903] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  161.704818][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.809136][ T5942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  161.966921][ T5903] usb 3-1: Product: syz
[  161.973018][ T5903] usb 3-1: Manufacturer: syz
[  161.980008][ T5903] usb 3-1: SerialNumber: syz
[  162.167926][ T5942] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  162.246704][ T5903] usb 3-1: Audio class v2/v3 interfaces need an interface association
[  162.353531][ T5903] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  162.448996][ T5466] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  162.601026][ T5903] usb 3-1: USB disconnect, device number 14
[  162.636235][ T7093] openvswitch: netlink: IP tunnel dst address not specified
[  162.648180][ T6459] udevd[6459]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  162.659291][ T5466] usb 5-1: Using ep0 maxpacket: 32
[  162.691711][ T5466] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  162.709155][ T5466] usb 5-1: config 0 has no interface number 0
[  162.732226][ T5466] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  162.748230][ T5466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.766629][ T5466] usb 5-1: Product: syz
[  162.772531][ T5466] usb 5-1: Manufacturer: syz
[  162.789243][ T5466] usb 5-1: SerialNumber: syz
[  162.820437][ T5466] usb 5-1: config 0 descriptor??
[  162.834285][ T5466] smsc95xx v2.0.0
[  162.859027][   T43] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  163.029128][   T43] usb 6-1: Using ep0 maxpacket: 32
[  163.066177][   T43] usb 6-1: config 0 has an invalid interface number: 132 but max is 0
[  163.074452][   T43] usb 6-1: config 0 has no interface number 0
[  163.096266][   T43] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  163.171006][   T43] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  163.188466][ T7104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  163.199803][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.219370][ T7104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  163.262657][ T5466] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  163.280193][   T43] usb 6-1: Product: syz
[  163.285285][   T43] usb 6-1: Manufacturer: syz
[  163.290869][ T5466] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  163.328966][   T43] usb 6-1: SerialNumber: syz
[  163.398473][   T43] usb 6-1: config 0 descriptor??
[  163.462535][ T5903] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  163.484203][   T43] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  163.588662][   T43] em28xx 6-1:0.132: Video interface 132 found:
[  163.719607][ T5903] usb 4-1: config 1 has an invalid interface number: 128 but max is 1
[  163.761875][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  163.772677][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  163.781755][ T5903] usb 4-1: config 1 has no interface number 0
[  163.811061][ T5903] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  163.844639][ T5903] usb 4-1: config 1 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.881145][   T43] em28xx 6-1:0.132: chip ID is em2884
[  163.911734][ T5903] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.922341][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.930822][ T5903] usb 4-1: Product: syz
[  163.955599][ T5903] usb 4-1: Manufacturer: syz
[  163.979138][ T5903] usb 4-1: SerialNumber: syz
[  164.024296][ T5903] usb 4-1: can't set config #1, error -71
[  164.041090][ T5903] usb 4-1: USB disconnect, device number 15
[  164.123436][ T5466] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  164.135286][ T5466] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  164.186465][ T5466] usb 5-1: USB disconnect, device number 7
[  164.330324][ T7112] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  164.878548][ T7120] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  164.928371][ T5466] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  164.987715][ T7128] FAULT_INJECTION: forcing a failure.
[  164.987715][ T7128] name failslab, interval 1, probability 0, space 0, times 0
[  165.013313][ T7128] CPU: 0 UID: 0 PID: 7128 Comm: syz.0.305 Not tainted syzkaller #0 PREEMPT(full) 
[  165.013336][ T7128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  165.013346][ T7128] Call Trace:
[  165.013351][ T7128]  <TASK>
[  165.013358][ T7128]  dump_stack_lvl+0xe8/0x150
[  165.013381][ T7128]  should_fail_ex+0x412/0x560
[  165.013403][ T7128]  should_failslab+0xa8/0x100
[  165.013422][ T7128]  __kvmalloc_node_noprof+0x166/0x8d0
[  165.013440][ T7128]  ? alloc_fdtable+0x101/0x2c0
[  165.013454][ T7128]  ? alloc_fdtable+0xc0/0x2c0
[  165.013471][ T7128]  alloc_fdtable+0x101/0x2c0
[  165.013485][ T7128]  ? dup_fd+0x847/0xb40
[  165.013500][ T7128]  dup_fd+0x84f/0xb40
[  165.013518][ T7128]  ? _raw_spin_unlock+0x28/0x50
[  165.013540][ T7128]  ? copy_fs_struct+0x1c3/0x270
[  165.013565][ T7128]  ksys_unshare+0x45f/0x900
[  165.013588][ T7128]  ? __pfx_ksys_unshare+0x10/0x10
[  165.013603][ T7128]  ? ksys_write+0x242/0x270
[  165.013626][ T7128]  ? __pfx_ksys_write+0x10/0x10
[  165.013652][ T7128]  __ia32_sys_unshare+0x37/0x40
[  165.013669][ T7128]  __do_fast_syscall_32+0x1d2/0x540
[  165.013686][ T7128]  ? lockdep_hardirqs_on+0x7a/0x110
[  165.013700][ T7128]  ? do_fast_syscall_32+0x33/0x70
[  165.013727][ T7128]  ? asm_int80_emulation+0x1a/0x20
[  165.013741][ T7128]  ? do_int80_emulation+0x20e/0x400
[  165.013760][ T7128]  do_fast_syscall_32+0x33/0x70
[  165.013777][ T7128]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.013795][ T7128] RIP: 0023:0xf7fa3539
[  165.013808][ T7128] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  165.013822][ T7128] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000136
[  165.013838][ T7128] RAX: ffffffffffffffda RBX: 0000000022020600 RCX: 0000000000000000
[  165.013848][ T7128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  165.013856][ T7128] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.013865][ T7128] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  165.013873][ T7128] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.013894][ T7128]  </TASK>
[  165.272896][   T43] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  165.302166][   T43] em28xx 6-1:0.132: board has no eeprom
[  165.308938][ T5466] usb 4-1: device descriptor read/64, error -71
[  165.449183][   T43] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  165.499109][   T43] em28xx 6-1:0.132: analog set to bulk mode.
[  165.505210][  T872] em28xx 6-1:0.132: Registering V4L2 extension
[  165.548907][ T5466] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  165.608964][   T43] usb 6-1: USB disconnect, device number 7
[  165.669018][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  165.682105][ T5466] usb 4-1: device descriptor read/64, error -71
[  165.694129][ T7140] FAULT_INJECTION: forcing a failure.
[  165.694129][ T7140] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  165.760670][ T7140] CPU: 0 UID: 0 PID: 7140 Comm: syz.5.309 Not tainted syzkaller #0 PREEMPT(full) 
[  165.760692][ T7140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  165.760702][ T7140] Call Trace:
[  165.760708][ T7140]  <TASK>
[  165.760714][ T7140]  dump_stack_lvl+0xe8/0x150
[  165.760738][ T7140]  should_fail_ex+0x412/0x560
[  165.760760][ T7140]  _copy_to_user+0x31/0xb0
[  165.760784][ T7140]  video_usercopy+0xe0a/0x1400
[  165.760811][ T7140]  ? __pfx___video_do_ioctl+0x10/0x10
[  165.760831][ T7140]  ? __pfx_video_usercopy+0x10/0x10
[  165.760862][ T7140]  ? __fget_files+0x2a/0x420
[  165.760880][ T7140]  v4l2_ioctl+0x18d/0x1e0
[  165.760906][ T7140]  v4l2_compat_ioctl32+0x1d7/0x280
[  165.760933][ T7140]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  165.760958][ T7140]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  165.760982][ T7140]  ? __fget_files+0x3a0/0x420
[  165.761002][ T7140]  ? fput+0xa0/0xd0
[  165.761020][ T7140]  ? ksys_write+0x242/0x270
[  165.761043][ T7140]  ? __pfx_ksys_write+0x10/0x10
[  165.761069][ T7140]  __do_fast_syscall_32+0x1d2/0x540
[  165.761087][ T7140]  ? lockdep_hardirqs_on+0x7a/0x110
[  165.761101][ T7140]  ? do_fast_syscall_32+0x33/0x70
[  165.761116][ T7140]  ? asm_int80_emulation+0x1a/0x20
[  165.761129][ T7140]  ? do_int80_emulation+0x20e/0x400
[  165.761148][ T7140]  do_fast_syscall_32+0x33/0x70
[  165.761165][ T7140]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  165.761182][ T7140] RIP: 0023:0xf744d539
[  165.761195][ T7140] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  165.761207][ T7140] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  165.761222][ T7140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0285628
[  165.761232][ T7140] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000
[  165.761242][ T7140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  165.761250][ T7140] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  165.761258][ T7140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  165.761279][ T7140]  </TASK>
[  165.781618][ T7142] fuse: Bad value for 'group_id'
[  165.988496][ T5466] usb usb4-port1: attempt power cycle
[  166.039776][   T43] em28xx 6-1:0.132: Disconnecting em28xx
[  166.552645][ T5466] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  166.601866][ T5466] usb 4-1: device descriptor read/8, error -71
[  166.709459][  T872] em28xx 6-1:0.132: Config register raw data: 0xffffffed
[  166.774149][  T872] em28xx 6-1:0.132: AC97 chip type couldn't be determined
[  166.812082][ T7142] fuse: Bad value for 'group_id'
[  166.813821][  T872] em28xx 6-1:0.132: No AC97 audio processor
[  166.848972][ T5466] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  166.879850][ T5466] usb 4-1: device descriptor read/8, error -71
[  166.898030][  T872] usb 6-1: Decoder not found
[  166.916352][  T872] em28xx 6-1:0.132: failed to create media graph
[  166.931899][ T7153] FAULT_INJECTION: forcing a failure.
[  166.931899][ T7153] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  166.948630][  T872] em28xx 6-1:0.132: V4L2 device video103 deregistered
[  166.966958][  T872] em28xx 6-1:0.132: Remote control support is not available for this card.
[  166.981101][ T7153] CPU: 1 UID: 0 PID: 7153 Comm: syz.5.313 Not tainted syzkaller #0 PREEMPT(full) 
[  166.981124][ T7153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  166.981133][ T7153] Call Trace:
[  166.981139][ T7153]  <TASK>
[  166.981146][ T7153]  dump_stack_lvl+0xe8/0x150
[  166.981170][ T7153]  should_fail_ex+0x412/0x560
[  166.981192][ T7153]  _copy_from_user+0x2d/0xb0
[  166.981216][ T7153]  video_usercopy+0x36f/0x1400
[  166.981243][ T7153]  ? __pfx___video_do_ioctl+0x10/0x10
[  166.981263][ T7153]  ? __pfx_video_usercopy+0x10/0x10
[  166.981294][ T7153]  ? __fget_files+0x2a/0x420
[  166.981313][ T7153]  v4l2_ioctl+0x18d/0x1e0
[  166.981335][ T7153]  v4l2_compat_ioctl32+0x1d7/0x280
[  166.981362][ T7153]  __ia32_compat_sys_ioctl+0x5ea/0x950
[  166.981387][ T7153]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  166.981411][ T7153]  ? __fget_files+0x3a0/0x420
[  166.981432][ T7153]  ? fput+0xa0/0xd0
[  166.981449][ T7153]  ? ksys_write+0x242/0x270
[  166.981472][ T7153]  ? __pfx_ksys_write+0x10/0x10
[  166.981500][ T7153]  __do_fast_syscall_32+0x1d2/0x540
[  166.981518][ T7153]  ? lockdep_hardirqs_on+0x7a/0x110
[  166.981532][ T7153]  ? do_fast_syscall_32+0x33/0x70
[  166.981547][ T7153]  ? asm_int80_emulation+0x1a/0x20
[  166.981565][ T7153]  ? do_int80_emulation+0x20e/0x400
[  166.981585][ T7153]  do_fast_syscall_32+0x33/0x70
[  166.981602][ T7153]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  166.981620][ T7153] RIP: 0023:0xf744d539
[  166.981633][ T7153] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  166.981646][ T7153] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  166.981662][ T7153] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605
[  166.981672][ T7153] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  166.981681][ T7153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  166.981689][ T7153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  166.981698][ T7153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  166.981718][ T7153]  </TASK>
[  166.994777][ T5466] usb usb4-port1: unable to enumerate USB device
[  167.250450][   T43] em28xx 6-1:0.132: Closing input extension
[  167.345667][   T43] em28xx 6-1:0.132: Freeing device
[  167.361578][ T7155] ip6gre1: entered promiscuous mode
[  167.370056][ T7155] ip6gre1: entered allmulticast mode
[  168.134384][ T7168] netlink: 68 bytes leftover after parsing attributes in process `syz.2.319'.
[  168.532741][   T30] audit: type=1326 audit(1770099774.035:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz.3.320" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fa3539 code=0x0
[  168.656066][ T7182] x_tables: duplicate underflow at hook 2
[  171.573924][ T7225] FAULT_INJECTION: forcing a failure.
[  171.573924][ T7225] name failslab, interval 1, probability 0, space 0, times 0
[  171.593415][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.0.336 Not tainted syzkaller #0 PREEMPT(full) 
[  171.593443][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  171.593457][ T7225] Call Trace:
[  171.593466][ T7225]  <TASK>
[  171.593476][ T7225]  dump_stack_lvl+0xe8/0x150
[  171.593518][ T7225]  should_fail_ex+0x412/0x560
[  171.593558][ T7225]  should_failslab+0xa8/0x100
[  171.593582][ T7225]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  171.593607][ T7225]  ? __alloc_skb+0x1d7/0x390
[  171.593629][ T7225]  __alloc_skb+0x1d7/0x390
[  171.593649][ T7225]  tcp_stream_alloc_skb+0x3d/0x350
[  171.593673][ T7225]  tcp_connect+0x1542/0x4ff0
[  171.593707][ T7225]  ? ktime_get_with_offset+0x93/0x2a0
[  171.593732][ T7225]  ? __pfx_tcp_connect+0x10/0x10
[  171.593751][ T7225]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  171.593769][ T7225]  ? lockdep_hardirqs_on+0x7a/0x110
[  171.593784][ T7225]  ? ktime_get_with_offset+0x93/0x2a0
[  171.593800][ T7225]  ? seqcount_lockdep_reader_access+0xea/0x100
[  171.593824][ T7225]  ? __asan_memset+0x22/0x50
[  171.593849][ T7225]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[  171.593872][ T7225]  ? inet6_hash_connect+0xd8/0x170
[  171.593891][ T7225]  tcp_v6_connect+0x129e/0x1920
[  171.593917][ T7225]  ? __pfx_tcp_v6_connect+0x10/0x10
[  171.593952][ T7225]  __inet_stream_connect+0x25a/0xdd0
[  171.593984][ T7225]  ? do_raw_spin_lock+0x12b/0x2f0
[  171.594000][ T7225]  ? lock_sock_nested+0x6a/0x100
[  171.594015][ T7225]  ? __pfx___inet_stream_connect+0x10/0x10
[  171.594042][ T7225]  ? __local_bh_enable_ip+0xd0/0x130
[  171.594060][ T7225]  inet_stream_connect+0x66/0xa0
[  171.594082][ T7225]  kernel_connect+0x141/0x1c0
[  171.594107][ T7225]  ? __pfx_kernel_connect+0x10/0x10
[  171.594127][ T7225]  ? do_raw_spin_lock+0x12b/0x2f0
[  171.594155][ T7225]  ? __local_bh_enable_ip+0xd0/0x130
[  171.594180][ T7225]  smc_connect+0x7a5/0xd90
[  171.594202][ T7225]  __sys_connect+0x312/0x450
[  171.594221][ T7225]  ? __pfx___sys_connect+0x10/0x10
[  171.594249][ T7225]  ? __pfx_ksys_write+0x10/0x10
[  171.594274][ T7225]  __ia32_sys_connect+0x7a/0x90
[  171.594293][ T7225]  __do_fast_syscall_32+0x1d2/0x540
[  171.594310][ T7225]  ? lockdep_hardirqs_on+0x7a/0x110
[  171.594323][ T7225]  ? do_fast_syscall_32+0x33/0x70
[  171.594339][ T7225]  ? asm_int80_emulation+0x1a/0x20
[  171.594352][ T7225]  ? do_int80_emulation+0x20e/0x400
[  171.594371][ T7225]  do_fast_syscall_32+0x33/0x70
[  171.594388][ T7225]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  171.594406][ T7225] RIP: 0023:0xf7fa3539
[  171.594419][ T7225] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  171.594432][ T7225] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 000000000000016a
[  171.594448][ T7225] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  171.594459][ T7225] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000
[  171.594467][ T7225] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  171.594476][ T7225] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  171.594485][ T7225] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  171.594507][ T7225]  </TASK>
[  173.829080][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  174.249005][ T7261] xt_policy: output policy not valid in PREROUTING and INPUT
[  176.139731][ T7290] CIFS: VFS: Malformed UNC in devname
[  176.615493][ T7296] FAULT_INJECTION: forcing a failure.
[  176.615493][ T7296] name failslab, interval 1, probability 0, space 0, times 0
[  176.672612][ T7296] CPU: 1 UID: 0 PID: 7296 Comm: syz.2.360 Not tainted syzkaller #0 PREEMPT(full) 
[  176.672642][ T7296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  176.672656][ T7296] Call Trace:
[  176.672664][ T7296]  <TASK>
[  176.672673][ T7296]  dump_stack_lvl+0xe8/0x150
[  176.672706][ T7296]  should_fail_ex+0x412/0x560
[  176.672735][ T7296]  should_failslab+0xa8/0x100
[  176.672761][ T7296]  kmem_cache_alloc_noprof+0x87/0x6e0
[  176.672792][ T7296]  ? security_file_alloc+0x34/0x310
[  176.672822][ T7296]  security_file_alloc+0x34/0x310
[  176.672845][ T7296]  init_file+0x93/0x2f0
[  176.672871][ T7296]  alloc_empty_file+0x6e/0x1d0
[  176.672896][ T7296]  path_openat+0x11e/0x3e20
[  176.672934][ T7296]  ? stack_trace_save+0xa9/0x100
[  176.672959][ T7296]  ? __pfx_stack_trace_save+0x10/0x10
[  176.672997][ T7296]  ? kasan_save_track+0x4f/0x80
[  176.673014][ T7296]  ? kasan_save_track+0x3e/0x80
[  176.673030][ T7296]  ? __kasan_slab_alloc+0x6c/0x80
[  176.673049][ T7296]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  176.673083][ T7296]  ? getname_flags+0xb7/0x540
[  176.673103][ T7296]  ? do_sys_openat2+0xca/0x220
[  176.673129][ T7296]  ? __pfx_path_openat+0x10/0x10
[  176.673159][ T7296]  ? __lock_acquire+0x6b5/0x2cf0
[  176.673202][ T7296]  do_filp_open+0x22d/0x490
[  176.673234][ T7296]  ? __pfx_do_filp_open+0x10/0x10
[  176.673284][ T7296]  ? _raw_spin_unlock+0x28/0x50
[  176.673314][ T7296]  ? alloc_fd+0x64b/0x6c0
[  176.673347][ T7296]  do_sys_openat2+0x12f/0x220
[  176.673373][ T7296]  ? __pfx_do_sys_openat2+0x10/0x10
[  176.673401][ T7296]  ? ksys_write+0x242/0x270
[  176.673436][ T7296]  __ia32_compat_sys_openat+0x131/0x160
[  176.673469][ T7296]  __do_fast_syscall_32+0x1d2/0x540
[  176.673492][ T7296]  ? lockdep_hardirqs_on+0x7a/0x110
[  176.673511][ T7296]  ? do_fast_syscall_32+0x33/0x70
[  176.673533][ T7296]  ? asm_int80_emulation+0x1a/0x20
[  176.673552][ T7296]  ? do_int80_emulation+0x20e/0x400
[  176.673574][ T7296]  ? rcu_is_watching+0x15/0xb0
[  176.673596][ T7296]  do_fast_syscall_32+0x33/0x70
[  176.673620][ T7296]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  176.673644][ T7296] RIP: 0023:0xf7f92539
[  176.673661][ T7296] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  176.673679][ T7296] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  176.673701][ T7296] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080
[  176.673716][ T7296] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
[  176.673728][ T7296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  176.673746][ T7296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  176.673759][ T7296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  176.673789][ T7296]  </TASK>
[  177.568122][ T7314] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size.
[  177.774955][ T7324] CIFS: VFS: Malformed UNC in devname
[  177.921404][ T7330] netlink: 16 bytes leftover after parsing attributes in process `syz.0.372'.
[  177.948050][ T7330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.372'.
[  179.064461][ T7341] FAULT_INJECTION: forcing a failure.
[  179.064461][ T7341] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  179.118964][ T7341] CPU: 0 UID: 0 PID: 7341 Comm: syz.2.375 Not tainted syzkaller #0 PREEMPT(full) 
[  179.118993][ T7341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  179.119007][ T7341] Call Trace:
[  179.119015][ T7341]  <TASK>
[  179.119024][ T7341]  dump_stack_lvl+0xe8/0x150
[  179.119059][ T7341]  should_fail_ex+0x412/0x560
[  179.119089][ T7341]  _copy_from_iter+0x1d3/0x1670
[  179.119124][ T7341]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  179.119159][ T7341]  ? __pfx__copy_from_iter+0x10/0x10
[  179.119188][ T7341]  ? __build_skb_around+0x22d/0x3c0
[  179.119215][ T7341]  ? __alloc_skb+0x193/0x390
[  179.119239][ T7341]  ? netlink_sendmsg+0x650/0xb40
[  179.119260][ T7341]  ? skb_put+0x11b/0x210
[  179.119289][ T7341]  netlink_sendmsg+0x6c0/0xb40
[  179.119321][ T7341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.119347][ T7341]  ? aa_sock_msg_perm+0xf1/0x1b0
[  179.119375][ T7341]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  179.119399][ T7341]  ? __pfx_netlink_sendmsg+0x10/0x10
[  179.119420][ T7341]  ____sys_sendmsg+0xa68/0xad0
[  179.119458][ T7341]  ? __pfx_____sys_sendmsg+0x10/0x10
[  179.119490][ T7341]  ? kstrtoull+0x12f/0x1d0
[  179.119522][ T7341]  ___sys_sendmsg+0x2a5/0x360
[  179.119549][ T7341]  ? __lock_acquire+0x6b5/0x2cf0
[  179.119582][ T7341]  ? __pfx____sys_sendmsg+0x10/0x10
[  179.119612][ T7341]  ? get_pid_task+0x20/0x1f0
[  179.119635][ T7341]  ? get_pid_task+0x20/0x1f0
[  179.119662][ T7341]  ? get_pid_task+0x20/0x1f0
[  179.119712][ T7341]  ? __fget_files+0x2a/0x420
[  179.119733][ T7341]  ? __fget_files+0x3a0/0x420
[  179.119767][ T7341]  __sys_sendmsg+0x183/0x260
[  179.119796][ T7341]  ? __pfx___sys_sendmsg+0x10/0x10
[  179.119837][ T7341]  ? __pfx_ksys_write+0x10/0x10
[  179.119876][ T7341]  __do_fast_syscall_32+0x1d2/0x540
[  179.119900][ T7341]  ? lockdep_hardirqs_on+0x7a/0x110
[  179.119920][ T7341]  ? do_fast_syscall_32+0x33/0x70
[  179.119942][ T7341]  ? asm_int80_emulation+0x1a/0x20
[  179.119961][ T7341]  ? do_int80_emulation+0x20e/0x400
[  179.119993][ T7341]  do_fast_syscall_32+0x33/0x70
[  179.120017][ T7341]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  179.120041][ T7341] RIP: 0023:0xf7f92539
[  179.120059][ T7341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  179.120077][ T7341] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  179.120100][ T7341] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0
[  179.120114][ T7341] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000
[  179.120127][ T7341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  179.120139][ T7341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  179.120150][ T7341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  179.120180][ T7341]  </TASK>
[  179.580559][ T7353] FAULT_INJECTION: forcing a failure.
[  179.580559][ T7353] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  179.638928][ T7353] CPU: 1 UID: 0 PID: 7353 Comm: syz.5.381 Not tainted syzkaller #0 PREEMPT(full) 
[  179.638956][ T7353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  179.638968][ T7353] Call Trace:
[  179.638983][ T7353]  <TASK>
[  179.638990][ T7353]  dump_stack_lvl+0xe8/0x150
[  179.639015][ T7353]  should_fail_ex+0x412/0x560
[  179.639036][ T7353]  prepare_alloc_pages+0x22a/0x650
[  179.639059][ T7353]  __alloc_frozen_pages_noprof+0x12f/0x380
[  179.639078][ T7353]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  179.639098][ T7353]  ? __pfx_policy_nodemask+0x10/0x10
[  179.639114][ T7353]  ? __lock_acquire+0x6b5/0x2cf0
[  179.639141][ T7353]  alloc_pages_mpol+0x232/0x4a0
[  179.639161][ T7353]  alloc_pages_noprof+0xa8/0x190
[  179.639180][ T7353]  pte_alloc_one+0x23/0x370
[  179.639195][ T7353]  ? __pte_alloc+0x1d/0x430
[  179.639212][ T7353]  __pte_alloc+0x25/0x430
[  179.639231][ T7353]  do_pte_missing+0x2edb/0x37a0
[  179.639248][ T7353]  ? do_raw_spin_unlock+0xf5/0x210
[  179.639274][ T7353]  handle_mm_fault+0x1b8c/0x32a0
[  179.639305][ T7353]  ? handle_mm_fault+0xee/0x32a0
[  179.639331][ T7353]  ? __pfx_handle_mm_fault+0x10/0x10
[  179.639361][ T7353]  ? __lock_acquire+0x6b5/0x2cf0
[  179.639385][ T7353]  ? lock_mm_and_find_vma+0xa7/0x340
[  179.639401][ T7353]  do_user_addr_fault+0x75b/0x1360
[  179.639435][ T7353]  exc_page_fault+0x6a/0xc0
[  179.639452][ T7353]  asm_exc_page_fault+0x26/0x30
[  179.639466][ T7353] RIP: 0010:rep_movs_alternative+0x4a/0x90
[  179.639486][ T7353] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  179.639499][ T7353] RSP: 0018:ffffc900039b7918 EFLAGS: 00050206
[  179.639513][ T7353] RAX: 00007ffffffff001 RBX: 0000000000000068 RCX: 0000000000000068
[  179.639523][ T7353] RDX: 0000000000000001 RSI: 0000000080000080 RDI: ffffc900039b7b00
[  179.639533][ T7353] RBP: ffffc900039b7dd0 R08: ffffc900039b7b67 R09: 1ffff92000736f6c
[  179.639544][ T7353] R10: dffffc0000000000 R11: fffff52000736f6d R12: ffffc900039b7b00
[  179.639555][ T7353] R13: ffff88802c94e200 R14: ffffc900039b7b00 R15: 0000000080000080
[  179.639579][ T7353]  _copy_from_user+0x7a/0xb0
[  179.639602][ T7353]  prctl_set_mm+0x345/0x1260
[  179.639637][ T7353]  ? __lock_acquire+0x6b5/0x2cf0
[  179.639660][ T7353]  ? _parse_integer_limit+0x1ae/0x1f0
[  179.639682][ T7353]  ? kstrtoull+0x12f/0x1d0
[  179.639701][ T7353]  ? kstrtouint+0x6e/0xe0
[  179.639719][ T7353]  ? __pfx_prctl_set_mm+0x10/0x10
[  179.639746][ T7353]  ? get_pid_task+0x20/0x1f0
[  179.639789][ T7353]  ? cap_task_prctl+0x1dd/0xaa0
[  179.639807][ T7353]  ? static_key_count+0x41/0x70
[  179.639827][ T7353]  ? security_task_prctl+0x163/0x190
[  179.639850][ T7353]  __se_sys_prctl+0x432/0x1850
[  179.639869][ T7353]  ? fput+0xa0/0xd0
[  179.639888][ T7353]  ? __pfx___se_sys_prctl+0x10/0x10
[  179.639906][ T7353]  ? __pfx_ksys_write+0x10/0x10
[  179.639931][ T7353]  ? __ia32_sys_prctl+0x20/0xc0
[  179.639951][ T7353]  __do_fast_syscall_32+0x1d2/0x540
[  179.639968][ T7353]  ? lockdep_hardirqs_on+0x7a/0x110
[  179.639982][ T7353]  ? do_fast_syscall_32+0x33/0x70
[  179.639997][ T7353]  ? asm_int80_emulation+0x1a/0x20
[  179.640010][ T7353]  ? do_int80_emulation+0x20e/0x400
[  179.640030][ T7353]  do_fast_syscall_32+0x33/0x70
[  179.640047][ T7353]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  179.640065][ T7353] RIP: 0023:0xf744d539
[  179.640077][ T7353] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  179.640089][ T7353] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 00000000000000ac
[  179.640103][ T7353] RAX: ffffffffffffffda RBX: 0000000000000023 RCX: 000000000000000e
[  179.640112][ T7353] RDX: 0000000080000080 RSI: 0000000000000068 RDI: 0000000000000000
[  179.640121][ T7353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  179.640130][ T7353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  179.640139][ T7353] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  179.640160][ T7353]  </TASK>
[  180.398452][ T7367] CIFS: VFS: Malformed UNC in devname
[  180.545890][ T7371] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.136708][ T7383] FAULT_INJECTION: forcing a failure.
[  181.136708][ T7383] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  181.167704][ T7383] CPU: 0 UID: 0 PID: 7383 Comm: syz.4.390 Not tainted syzkaller #0 PREEMPT(full) 
[  181.167735][ T7383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  181.167748][ T7383] Call Trace:
[  181.167757][ T7383]  <TASK>
[  181.167767][ T7383]  dump_stack_lvl+0xe8/0x150
[  181.167810][ T7383]  should_fail_ex+0x412/0x560
[  181.167841][ T7383]  _copy_from_iter+0x1d3/0x1670
[  181.167877][ T7383]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  181.167914][ T7383]  ? __pfx__copy_from_iter+0x10/0x10
[  181.167942][ T7383]  ? __build_skb_around+0x22d/0x3c0
[  181.167971][ T7383]  ? __alloc_skb+0x193/0x390
[  181.167996][ T7383]  ? netlink_sendmsg+0x650/0xb40
[  181.168017][ T7383]  ? skb_put+0x11b/0x210
[  181.168047][ T7383]  netlink_sendmsg+0x6c0/0xb40
[  181.168079][ T7383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.168106][ T7383]  ? aa_sock_msg_perm+0xf1/0x1b0
[  181.168135][ T7383]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  181.168160][ T7383]  ? __pfx_netlink_sendmsg+0x10/0x10
[  181.168182][ T7383]  ____sys_sendmsg+0xa68/0xad0
[  181.168220][ T7383]  ? __pfx_____sys_sendmsg+0x10/0x10
[  181.168254][ T7383]  ? kstrtoull+0x12f/0x1d0
[  181.168286][ T7383]  ___sys_sendmsg+0x2a5/0x360
[  181.168314][ T7383]  ? __lock_acquire+0x6b5/0x2cf0
[  181.168348][ T7383]  ? __pfx____sys_sendmsg+0x10/0x10
[  181.168379][ T7383]  ? get_pid_task+0x20/0x1f0
[  181.168403][ T7383]  ? get_pid_task+0x20/0x1f0
[  181.168423][ T7383]  ? get_pid_task+0x20/0x1f0
[  181.168474][ T7383]  ? __fget_files+0x2a/0x420
[  181.168497][ T7383]  ? __fget_files+0x3a0/0x420
[  181.168532][ T7383]  __sys_sendmsg+0x183/0x260
[  181.168562][ T7383]  ? __pfx___sys_sendmsg+0x10/0x10
[  181.168603][ T7383]  ? __pfx_ksys_write+0x10/0x10
[  181.168643][ T7383]  __do_fast_syscall_32+0x1d2/0x540
[  181.168669][ T7383]  ? lockdep_hardirqs_on+0x7a/0x110
[  181.168687][ T7383]  ? do_fast_syscall_32+0x33/0x70
[  181.168708][ T7383]  ? asm_int80_emulation+0x1a/0x20
[  181.168726][ T7383]  ? do_int80_emulation+0x20e/0x400
[  181.168754][ T7383]  do_fast_syscall_32+0x33/0x70
[  181.168791][ T7383]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.168816][ T7383] RIP: 0023:0xf7f26539
[  181.168834][ T7383] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  181.168851][ T7383] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  181.168873][ T7383] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  181.168888][ T7383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  181.168900][ T7383] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.168912][ T7383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  181.168924][ T7383] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.168956][ T7383]  </TASK>
[  181.819946][ T5466] tipc: Node number set to 281486513
[  182.080838][ T7388] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  182.251027][ T7392] FAULT_INJECTION: forcing a failure.
[  182.251027][ T7392] name failslab, interval 1, probability 0, space 0, times 0
[  182.289202][ T7392] CPU: 1 UID: 0 PID: 7392 Comm: syz.2.393 Not tainted syzkaller #0 PREEMPT(full) 
[  182.289231][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  182.289244][ T7392] Call Trace:
[  182.289253][ T7392]  <TASK>
[  182.289262][ T7392]  dump_stack_lvl+0xe8/0x150
[  182.289295][ T7392]  should_fail_ex+0x412/0x560
[  182.289326][ T7392]  should_failslab+0xa8/0x100
[  182.289354][ T7392]  kmem_cache_alloc_node_noprof+0x8b/0x6f0
[  182.289388][ T7392]  ? __alloc_skb+0x1d7/0x390
[  182.289412][ T7392]  ? __local_bh_enable_ip+0xd0/0x130
[  182.289440][ T7392]  ? __alloc_skb+0x193/0x390
[  182.289465][ T7392]  __alloc_skb+0x1d7/0x390
[  182.289495][ T7392]  __ip6_append_data+0x2c27/0x3f50
[  182.289546][ T7392]  ? __pfx_raw6_getfrag+0x10/0x10
[  182.289588][ T7392]  ? ip6_mtu+0x7d/0x490
[  182.289614][ T7392]  ? __pfx___ip6_append_data+0x10/0x10
[  182.289638][ T7392]  ? __pfx_ip6_mtu+0x10/0x10
[  182.289669][ T7392]  ip6_append_data+0x1c0/0x380
[  182.289701][ T7392]  ? __pfx_raw6_getfrag+0x10/0x10
[  182.289731][ T7392]  rawv6_sendmsg+0x12fc/0x18f0
[  182.289760][ T7392]  ? __lock_acquire+0x6b5/0x2cf0
[  182.289806][ T7392]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  182.289848][ T7392]  ? aa_sk_perm+0x82d/0x960
[  182.289881][ T7392]  ? __pfx_aa_sk_perm+0x10/0x10
[  182.289908][ T7392]  ? sock_rps_record_flow+0x19/0x400
[  182.289940][ T7392]  ? inet_sendmsg+0x2f4/0x370
[  182.289966][ T7392]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  182.289993][ T7392]  ____sys_sendmsg+0x894/0xad0
[  182.290031][ T7392]  ? __pfx_____sys_sendmsg+0x10/0x10
[  182.290073][ T7392]  ? kstrtoull+0x12f/0x1d0
[  182.290105][ T7392]  ___sys_sendmsg+0x2a5/0x360
[  182.290133][ T7392]  ? __lock_acquire+0x6b5/0x2cf0
[  182.290166][ T7392]  ? __pfx____sys_sendmsg+0x10/0x10
[  182.290196][ T7392]  ? get_pid_task+0x20/0x1f0
[  182.290219][ T7392]  ? get_pid_task+0x20/0x1f0
[  182.290238][ T7392]  ? get_pid_task+0x20/0x1f0
[  182.290285][ T7392]  ? __fget_files+0x2a/0x420
[  182.290305][ T7392]  ? __fget_files+0x3a0/0x420
[  182.290339][ T7392]  __sys_sendmsg+0x183/0x260
[  182.290369][ T7392]  ? __pfx___sys_sendmsg+0x10/0x10
[  182.290408][ T7392]  ? __pfx_ksys_write+0x10/0x10
[  182.290455][ T7392]  __do_fast_syscall_32+0x1d2/0x540
[  182.290478][ T7392]  ? lockdep_hardirqs_on+0x7a/0x110
[  182.290498][ T7392]  ? do_fast_syscall_32+0x33/0x70
[  182.290519][ T7392]  ? asm_int80_emulation+0x1a/0x20
[  182.290538][ T7392]  ? do_int80_emulation+0x20e/0x400
[  182.290566][ T7392]  do_fast_syscall_32+0x33/0x70
[  182.290590][ T7392]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  182.290614][ T7392] RIP: 0023:0xf7f92539
[  182.290633][ T7392] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  182.290651][ T7392] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  182.290674][ T7392] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040
[  182.290689][ T7392] RDX: 00000000040440c4 RSI: 0000000000000000 RDI: 0000000000000000
[  182.290702][ T7392] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  182.290714][ T7392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  182.290726][ T7392] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  182.290758][ T7392]  </TASK>
[  182.882061][ T7395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.394'.
[  183.147089][ T7404] CIFS: VFS: Malformed UNC in devname
[  183.421066][ T7415] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(2)
[  183.427761][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  183.583443][ T7419] netlink: 'syz.2.398': attribute type 2 has an invalid length.
[  183.624686][ T7419] : entered promiscuous mode
[  183.663888][ T7415] vhci_hcd vhci_hcd.0: Device attached
[  183.775488][ T7422] GUP no longer grows the stack in syz.2.398 (7422): 80005000-80008000 (80004000)
[  183.814036][ T7422] CPU: 1 UID: 0 PID: 7422 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(full) 
[  183.814070][ T7422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  183.814085][ T7422] Call Trace:
[  183.814094][ T7422]  <TASK>
[  183.814103][ T7422]  dump_stack_lvl+0xe8/0x150
[  183.814138][ T7422]  fixup_user_fault+0x637/0x6f0
[  183.814176][ T7422]  fault_in_user_writeable+0x71/0xd0
[  183.814207][ T7422]  futex_lock_pi+0x800/0xb00
[  183.814241][ T7422]  ? __pfx_futex_lock_pi+0x10/0x10
[  183.814293][ T7422]  ? __pfx_futex_wake_mark+0x10/0x10
[  183.814331][ T7422]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[  183.814371][ T7422]  do_futex+0x292/0x420
[  183.814411][ T7422]  ? __pfx_do_futex+0x10/0x10
[  183.814442][ T7422]  ? __vm_munmap+0x2e6/0x3d0
[  183.814470][ T7422]  __se_sys_futex_time32+0x3ab/0x440
[  183.814502][ T7422]  ? __pfx___se_sys_futex_time32+0x10/0x10
[  183.814529][ T7422]  ? rcu_is_watching+0x15/0xb0
[  183.814550][ T7422]  ? __ia32_sys_futex_time32+0x21/0xf0
[  183.814579][ T7422]  __do_fast_syscall_32+0x1d2/0x540
[  183.814599][ T7422]  ? do_fast_syscall_32+0x33/0x70
[  183.814618][ T7422]  ? irqentry_exit+0x10e/0x620
[  183.814635][ T7422]  ? rcu_is_watching+0x15/0xb0
[  183.814653][ T7422]  do_fast_syscall_32+0x33/0x70
[  183.814673][ T7422]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  183.814694][ T7422] RIP: 0023:0xf7f92539
[  183.814709][ T7422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  183.814724][ T7422] RSP: 002b:00000000f4bce50c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  183.814743][ T7422] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d
[  183.814755][ T7422] RDX: 00000000fffffffd RSI: 0000000000000000 RDI: 0000000000000000
[  183.814766][ T7422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  183.814775][ T7422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  183.814786][ T7422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  183.814810][ T7422]  </TASK>
[  184.024920][  T797] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  184.081461][ T7424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'.
[  184.256465][ T7416] vhci_hcd: connection reset by peer
[  184.329499][   T57] vhci_hcd vhci_hcd.0: stop threads
[  184.342668][   T57] vhci_hcd vhci_hcd.0: release socket
[  184.354547][   T57] vhci_hcd vhci_hcd.0: disconnect device
[  184.394342][  T797] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  184.414653][  T797] usb 33-1: enqueue for inactive port 0
[  184.512066][  T797] vhci_hcd vhci_hcd.0: vhci_device speed not set
[  186.349419][ T7457] FAULT_INJECTION: forcing a failure.
[  186.349419][ T7457] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.362799][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) 
[  186.362825][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  186.362838][ T7457] Call Trace:
[  186.362847][ T7457]  <TASK>
[  186.362855][ T7457]  dump_stack_lvl+0xe8/0x150
[  186.362888][ T7457]  should_fail_ex+0x412/0x560
[  186.362918][ T7457]  _copy_from_iter+0x1d3/0x1670
[  186.362953][ T7457]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  186.362989][ T7457]  ? __pfx__copy_from_iter+0x10/0x10
[  186.363017][ T7457]  ? __build_skb_around+0x22d/0x3c0
[  186.363043][ T7457]  ? __alloc_skb+0x193/0x390
[  186.363067][ T7457]  ? netlink_sendmsg+0x650/0xb40
[  186.363088][ T7457]  ? skb_put+0x11b/0x210
[  186.363116][ T7457]  netlink_sendmsg+0x6c0/0xb40
[  186.363147][ T7457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.363173][ T7457]  ? aa_sock_msg_perm+0xf1/0x1b0
[  186.363201][ T7457]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  186.363226][ T7457]  ? __pfx_netlink_sendmsg+0x10/0x10
[  186.363248][ T7457]  ____sys_sendmsg+0xa68/0xad0
[  186.363284][ T7457]  ? __pfx_____sys_sendmsg+0x10/0x10
[  186.363318][ T7457]  ? kstrtoull+0x12f/0x1d0
[  186.363350][ T7457]  ___sys_sendmsg+0x2a5/0x360
[  186.363378][ T7457]  ? __lock_acquire+0x6b5/0x2cf0
[  186.363411][ T7457]  ? __pfx____sys_sendmsg+0x10/0x10
[  186.363449][ T7457]  ? get_pid_task+0x20/0x1f0
[  186.363472][ T7457]  ? get_pid_task+0x20/0x1f0
[  186.363492][ T7457]  ? get_pid_task+0x20/0x1f0
[  186.363543][ T7457]  ? __fget_files+0x2a/0x420
[  186.363565][ T7457]  ? __fget_files+0x3a0/0x420
[  186.363599][ T7457]  __sys_sendmsg+0x183/0x260
[  186.363629][ T7457]  ? __pfx___sys_sendmsg+0x10/0x10
[  186.363670][ T7457]  ? __pfx_ksys_write+0x10/0x10
[  186.363709][ T7457]  __do_fast_syscall_32+0x1d2/0x540
[  186.363733][ T7457]  ? lockdep_hardirqs_on+0x7a/0x110
[  186.363752][ T7457]  ? do_fast_syscall_32+0x33/0x70
[  186.363774][ T7457]  ? asm_int80_emulation+0x1a/0x20
[  186.363792][ T7457]  ? do_int80_emulation+0x20e/0x400
[  186.363820][ T7457]  do_fast_syscall_32+0x33/0x70
[  186.363844][ T7457]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  186.363869][ T7457] RIP: 0023:0xf7fa3539
[  186.363887][ T7457] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  186.363904][ T7457] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  186.363927][ T7457] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000400
[  186.363941][ T7457] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  186.363953][ T7457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  186.363965][ T7457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  186.363977][ T7457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  186.364008][ T7457]  </TASK>
[  186.370405][ T7452] bond1: option ad_actor_sys_prio: invalid value (0)
[  186.704511][ T7452] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  186.795774][ T7452] bond1 (unregistering): Released all slaves
[  186.935160][ T7460] FAULT_INJECTION: forcing a failure.
[  186.935160][ T7460] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  186.965054][ T7460] CPU: 0 UID: 0 PID: 7460 Comm: syz.4.411 Not tainted syzkaller #0 PREEMPT(full) 
[  186.965097][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  186.965109][ T7460] Call Trace:
[  186.965119][ T7460]  <TASK>
[  186.965128][ T7460]  dump_stack_lvl+0xe8/0x150
[  186.965163][ T7460]  should_fail_ex+0x412/0x560
[  186.965197][ T7460]  _copy_from_user+0x2d/0xb0
[  186.965221][ T7460]  get_compat_msghdr+0xb3/0x4c0
[  186.965245][ T7460]  ? __pfx_get_compat_msghdr+0x10/0x10
[  186.965264][ T7460]  ? rcu_is_watching+0x15/0xb0
[  186.965278][ T7460]  ? ___sys_recvmsg+0x224/0x590
[  186.965303][ T7460]  ___sys_recvmsg+0x1dd/0x590
[  186.965327][ T7460]  ? __pfx____sys_recvmsg+0x10/0x10
[  186.965351][ T7460]  ? __fget_files+0x2a/0x420
[  186.965390][ T7460]  do_recvmmsg+0x3a5/0x800
[  186.965416][ T7460]  ? __pfx_do_recvmmsg+0x10/0x10
[  186.965459][ T7460]  __sys_recvmmsg+0x1a5/0x290
[  186.965481][ T7460]  ? __pfx___sys_recvmmsg+0x10/0x10
[  186.965500][ T7460]  ? ksys_write+0x242/0x270
[  186.965524][ T7460]  ? __pfx_ksys_write+0x10/0x10
[  186.965547][ T7460]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  186.965570][ T7460]  __do_fast_syscall_32+0x1d2/0x540
[  186.965587][ T7460]  ? lockdep_hardirqs_on+0x7a/0x110
[  186.965601][ T7460]  ? do_fast_syscall_32+0x33/0x70
[  186.965616][ T7460]  ? asm_int80_emulation+0x1a/0x20
[  186.965630][ T7460]  ? do_int80_emulation+0x20e/0x400
[  186.965649][ T7460]  do_fast_syscall_32+0x33/0x70
[  186.965666][ T7460]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  186.965684][ T7460] RIP: 0023:0xf7f26539
[  186.965697][ T7460] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  186.965710][ T7460] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  186.965726][ T7460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000840
[  186.965736][ T7460] RDX: 0000000000000414 RSI: 0000000000000000 RDI: 0000000000000000
[  186.965745][ T7460] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  186.965753][ T7460] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  186.965762][ T7460] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  186.965783][ T7460]  </TASK>
[  187.339355][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'.
[  187.432308][ T7475] netlink: 27 bytes leftover after parsing attributes in process `syz.0.414'.
[  187.622772][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.417'.
[  187.755031][   T30] audit: type=1326 audit(1770099793.285:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  187.809700][   T30] audit: type=1326 audit(1770099793.285:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  187.888965][   T30] audit: type=1326 audit(1770099793.285:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  187.983187][   T30] audit: type=1326 audit(1770099793.285:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  188.054751][   T30] audit: type=1326 audit(1770099793.285:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  188.282397][   T30] audit: type=1326 audit(1770099793.285:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  188.629149][   T30] audit: type=1326 audit(1770099793.285:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  188.697572][   T30] audit: type=1326 audit(1770099793.285:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  188.934880][   T30] audit: type=1326 audit(1770099793.285:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  189.071174][   T30] audit: type=1326 audit(1770099793.285:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7479 comm="syz.3.417" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa3539 code=0x7ffc0000
[  189.363166][ T7514] FAULT_INJECTION: forcing a failure.
[  189.363166][ T7514] name failslab, interval 1, probability 0, space 0, times 0
[  189.397786][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'.
[  189.409789][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.427177][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  189.441937][ T7516] netlink: 16 bytes leftover after parsing attributes in process `syz.3.427'.
[  189.452071][ T7514] CPU: 0 UID: 0 PID: 7514 Comm: syz.0.426 Not tainted syzkaller #0 PREEMPT(full) 
[  189.452092][ T7514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  189.452102][ T7514] Call Trace:
[  189.452108][ T7514]  <TASK>
[  189.452114][ T7514]  dump_stack_lvl+0xe8/0x150
[  189.452137][ T7514]  should_fail_ex+0x412/0x560
[  189.452159][ T7514]  should_failslab+0xa8/0x100
[  189.452178][ T7514]  kmem_cache_alloc_noprof+0x87/0x6e0
[  189.452200][ T7514]  ? __netlink_lookup+0xc6/0x8b0
[  189.452225][ T7514]  ? skb_clone+0x212/0x3a0
[  189.452250][ T7514]  skb_clone+0x212/0x3a0
[  189.452273][ T7514]  __netlink_deliver_tap+0x404/0x850
[  189.452297][ T7514]  ? netlink_deliver_tap+0x2e/0x1b0
[  189.452313][ T7514]  netlink_deliver_tap+0x19c/0x1b0
[  189.452329][ T7514]  netlink_unicast+0x7e3/0x9b0
[  189.452358][ T7514]  ? __pfx_netlink_unicast+0x10/0x10
[  189.452380][ T7514]  ? __alloc_skb+0x193/0x390
[  189.452397][ T7514]  ? netlink_sendmsg+0x650/0xb40
[  189.452411][ T7514]  ? skb_put+0x11b/0x210
[  189.452432][ T7514]  netlink_sendmsg+0x813/0xb40
[  189.452454][ T7514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.452472][ T7514]  ? aa_sock_msg_perm+0xf1/0x1b0
[  189.452492][ T7514]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  189.452510][ T7514]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.452525][ T7514]  ____sys_sendmsg+0xa68/0xad0
[  189.452552][ T7514]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.452575][ T7514]  ? kstrtoull+0x12f/0x1d0
[  189.452598][ T7514]  ___sys_sendmsg+0x2a5/0x360
[  189.452617][ T7514]  ? __lock_acquire+0x6b5/0x2cf0
[  189.452641][ T7514]  ? __pfx____sys_sendmsg+0x10/0x10
[  189.452663][ T7514]  ? get_pid_task+0x20/0x1f0
[  189.452680][ T7514]  ? get_pid_task+0x20/0x1f0
[  189.452694][ T7514]  ? get_pid_task+0x20/0x1f0
[  189.452729][ T7514]  ? __fget_files+0x2a/0x420
[  189.452745][ T7514]  ? __fget_files+0x3a0/0x420
[  189.452768][ T7514]  __sys_sendmsg+0x183/0x260
[  189.452790][ T7514]  ? __pfx___sys_sendmsg+0x10/0x10
[  189.452819][ T7514]  ? __pfx_ksys_write+0x10/0x10
[  189.452847][ T7514]  __do_fast_syscall_32+0x1d2/0x540
[  189.452865][ T7514]  ? lockdep_hardirqs_on+0x7a/0x110
[  189.452878][ T7514]  ? do_fast_syscall_32+0x33/0x70
[  189.452894][ T7514]  ? asm_int80_emulation+0x1a/0x20
[  189.452908][ T7514]  ? do_int80_emulation+0x20e/0x400
[  189.452927][ T7514]  do_fast_syscall_32+0x33/0x70
[  189.452944][ T7514]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  189.452962][ T7514] RIP: 0023:0xf7fa3539
[  189.452975][ T7514] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  189.452988][ T7514] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  189.453004][ T7514] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[  189.453014][ T7514] RDX: 0000000024000000 RSI: 0000000000000000 RDI: 0000000000000000
[  189.453023][ T7514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  189.453031][ T7514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  189.453040][ T7514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  189.453061][ T7514]  </TASK>
[  190.081382][ T7522] kAFS: unable to lookup cell '/'
[  190.086554][ T7522] kAFS: unable to lookup cell '/'
[  190.091665][ T7523] netlink: 'syz.0.429': attribute type 1 has an invalid length.
[  190.099521][ T7522] kAFS: unparsable volume name
[  190.104363][ T7522] kAFS: unparsable volume name
[  190.109542][ T7522] kAFS: unparsable volume name
[  190.115671][ T7522] kAFS: unparsable volume name
[  190.120665][ T7522] kAFS: unparsable volume name
[  190.125938][ T7522] kAFS: unparsable volume name
[  190.130878][ T7522] kAFS: unparsable volume name
[  190.135720][ T7522] kAFS: unparsable volume name
[  190.140668][ T7522] kAFS: unparsable volume name
[  190.145500][ T7522] kAFS: unparsable volume name
[  190.157488][ T7522] kAFS: unparsable volume name
[  190.178910][ T7522] kAFS: unparsable volume name
[  190.183764][ T7522] kAFS: unparsable volume name
[  190.198970][ T7522] kAFS: unparsable volume name
[  190.203847][ T7522] kAFS: unparsable volume name
[  190.219406][ T7522] kAFS: unparsable volume name
[  190.224307][ T7522] kAFS: unparsable volume name
[  190.248939][ T7522] kAFS: unparsable volume name
[  190.254645][ T7522] kAFS: unparsable volume name
[  190.388122][ T7523] 8021q: adding VLAN 0 to HW filter on device bond1
[  190.468980][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  190.582396][ T7526] macvlan2: entered promiscuous mode
[  190.587733][ T7526] macvlan2: entered allmulticast mode
[  191.173017][ T7526] bond1: entered promiscuous mode
[  191.185537][ T7526] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  191.289336][ T7526] bond1: left promiscuous mode
[  193.796525][ T7580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.443'.
[  194.419702][ T7584] netlink: 20 bytes leftover after parsing attributes in process `syz.3.444'.
[  194.597074][ T7572] netlink: 16 bytes leftover after parsing attributes in process `syz.2.441'.
[  194.858921][ T5942] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  195.273200][ T5942] usb 4-1: config 1 has an invalid interface number: 7 but max is 0
[  195.317377][ T5942] usb 4-1: config 1 has no interface number 0
[  195.346118][ T5942] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  195.365418][ T5942] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  195.375687][ T5942] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.399753][ T5942] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  195.485879][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.518963][ T5903] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  195.539099][ T5942] usb 4-1: Product: syz
[  195.543374][ T5942] usb 4-1: Manufacturer: syz
[  195.548055][ T5942] usb 4-1: SerialNumber: syz
[  195.590803][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  195.735334][ T5903] usb 5-1: Using ep0 maxpacket: 32
[  195.775521][ T5903] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  195.792204][ T5903] usb 5-1: config 0 has no interface number 0
[  195.814017][ T5903] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  195.831662][ T7584] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  195.893542][ T5903] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  196.103247][ T5942] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  196.126710][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.157263][ T5903] usb 5-1: Product: syz
[  196.167529][ T5903] usb 5-1: Manufacturer: syz
[  196.172358][   T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  196.200566][ T5903] usb 5-1: SerialNumber: syz
[  196.235750][ T5903] usb 5-1: config 0 descriptor??
[  196.266075][ T5903] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  196.276336][ T5903] em28xx 5-1:0.132: Video interface 132 found:
[  196.325942][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.345276][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.396721][   T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  196.408917][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.536539][   T10] usb 6-1: Product: syz
[  196.551715][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'.
[  196.566614][ T5942] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71
[  196.580338][ T5942] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71
[  196.598031][   T10] usb 6-1: Manufacturer: syz
[  196.599563][ T5942] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71
[  196.610086][ T5942] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71
[  196.610701][   T10] usb 6-1: SerialNumber: syz
[  196.772451][ T5903] em28xx 5-1:0.132: chip ID is em2884
[  196.802577][ T5942] usb 4-1: USB disconnect, device number 20
[  196.840449][   T10] usb 6-1: config 0 descriptor??
[  196.858633][   T10] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  196.900028][ T5942] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem
[  197.011143][ T5942] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  197.413306][   T10] usb 6-1: USB disconnect, device number 8
[  197.520965][ T7610] FAULT_INJECTION: forcing a failure.
[  197.520965][ T7610] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  197.564280][ T7610] CPU: 1 UID: 0 PID: 7610 Comm: syz.3.451 Not tainted syzkaller #0 PREEMPT(full) 
[  197.564362][ T7610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  197.564375][ T7610] Call Trace:
[  197.564383][ T7610]  <TASK>
[  197.564392][ T7610]  dump_stack_lvl+0xe8/0x150
[  197.564424][ T7610]  should_fail_ex+0x412/0x560
[  197.564447][ T7610]  strncpy_from_user+0x36/0x2b0
[  197.564483][ T7610]  getname_flags+0xf2/0x540
[  197.564512][ T7610]  __ia32_sys_rename+0x5c/0x90
[  197.564534][ T7610]  __do_fast_syscall_32+0x1d2/0x540
[  197.564559][ T7610]  ? lockdep_hardirqs_on+0x7a/0x110
[  197.564577][ T7610]  ? do_fast_syscall_32+0x33/0x70
[  197.564592][ T7610]  ? asm_int80_emulation+0x1a/0x20
[  197.564613][ T7610]  ? do_int80_emulation+0x20e/0x400
[  197.564653][ T7610]  do_fast_syscall_32+0x33/0x70
[  197.564677][ T7610]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  197.564701][ T7610] RIP: 0023:0xf7fa3539
[  197.564723][ T7610] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  197.564736][ T7610] RSP: 002b:00000000f544550c EFLAGS: 00000206 ORIG_RAX: 0000000000000026
[  197.564751][ T7610] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000100
[  197.564762][ T7610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  197.564771][ T7610] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  197.564796][ T7610] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  197.564808][ T7610] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  197.564838][ T7610]  </TASK>
[  197.972775][ T5903] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  197.983065][ T5903] em28xx 5-1:0.132: board has no eeprom
[  198.058958][ T5903] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  198.072504][ T5903] em28xx 5-1:0.132: analog set to bulk mode.
[  198.087198][   T10] em28xx 5-1:0.132: Registering V4L2 extension
[  198.167296][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  198.179269][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  198.189011][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  198.198075][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5)
[  198.271347][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  198.315433][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5)
[  198.354484][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5)
[  198.388763][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5)
[  198.402966][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5)
[  198.425050][ T7618] syzkaller0: entered promiscuous mode
[  198.440408][ T7618] syzkaller0: entered allmulticast mode
[  198.452358][ T5903] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  198.477041][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.825293][ T5903] usb 1-1: config 0 descriptor??
[  198.830531][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5)
[  198.877886][    T9] usb 5-1: USB disconnect, device number 8
[  198.885265][   T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5)
[  198.905252][    T9] em28xx 5-1:0.132: Disconnecting em28xx
[  198.935853][   T10] em28xx 5-1:0.132: Config register raw data: 0xffffffed
[  198.973099][   T10] em28xx 5-1:0.132: AC97 chip type couldn't be determined
[  198.989483][   T10] em28xx 5-1:0.132: No AC97 audio processor
[  199.073537][   T10] usb 5-1: Decoder not found
[  199.085591][   T10] em28xx 5-1:0.132: failed to create media graph
[  199.098718][   T10] em28xx 5-1:0.132: V4L2 device video103 deregistered
[  199.126629][   T10] em28xx 5-1:0.132: Remote control support is not available for this card.
[  199.156531][    T9] em28xx 5-1:0.132: Closing input extension
[  199.251654][    T9] em28xx 5-1:0.132: Freeing device
[  199.299130][ T5942] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  199.438700][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  199.449072][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  199.479928][ T5942] usb 4-1: Using ep0 maxpacket: 32
[  199.499928][ T5942] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  199.509339][ T5942] usb 4-1: config 0 has no interface number 0
[  199.522772][ T5942] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  199.562445][ T5942] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  199.571886][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.594660][ T5942] usb 4-1: Product: syz
[  199.607303][ T5942] usb 4-1: Manufacturer: syz
[  199.612620][ T5942] usb 4-1: SerialNumber: syz
[  199.677142][ T5942] usb 4-1: config 0 descriptor??
[  199.721049][ T5942] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  199.761931][ T5942] em28xx 4-1:0.132: Video interface 132 found:
[  199.823586][ T7633] bond1: option ad_actor_sys_prio: invalid value (0)
[  199.833349][ T7633] bond1: option ad_actor_sys_prio: allowed values 1 - 65535
[  199.891203][ T7633] bond1 (unregistering): Released all slaves
[  200.217703][ T5942] em28xx 4-1:0.132: chip ID is em2884
[  200.318047][ T5903] pegasus 1-1:0.0: can't reset MAC
[  200.324068][ T5903] pegasus 1-1:0.0: probe with driver pegasus failed with error -5
[  201.364276][ T5942] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  201.373845][ T5942] em28xx 4-1:0.132: board has no eeprom
[  201.468964][ T5942] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  201.479716][ T5942] em28xx 4-1:0.132: analog set to bulk mode.
[  201.505397][ T5903] usb 1-1: USB disconnect, device number 13
[  201.539289][  T872] em28xx 4-1:0.132: Registering V4L2 extension
[  201.909127][  T872] em28xx 4-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  202.059504][  T872] em28xx 4-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  202.127632][  T872] em28xx 4-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  202.134515][ T5903] usb 4-1: USB disconnect, device number 21
[  202.144048][ T5903] em28xx 4-1:0.132: Disconnecting em28xx
[  202.668628][  T872] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  202.743612][  T872] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  202.763581][  T872] em28xx 4-1:0.132: No AC97 audio processor
[  202.828514][  T872] usb 4-1: Decoder not found
[  202.848912][  T872] em28xx 4-1:0.132: failed to create media graph
[  202.915233][  T872] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  202.937400][  T872] em28xx 4-1:0.132: Remote control support is not available for this card.
[  202.956833][ T5903] em28xx 4-1:0.132: Closing input extension
[  202.973869][ T5903] em28xx 4-1:0.132: Freeing device
[  203.111541][ T5466] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  203.276642][ T5466] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  203.287437][ T5466] usb 5-1: config 0 has no interface number 0
[  203.298915][ T5466] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  203.318757][ T5466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.334181][ T5466] usb 5-1: config 0 descriptor??
[  203.354192][ T5466] usb 5-1: selecting invalid altsetting 1
[  203.383716][ T5466] dvb_ttusb_budget: ttusb_init_controller: error
[  203.397827][ T5466] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  203.591119][ T5466] DVB: Unable to find symbol cx22700_attach()
[  203.743057][ T5466] DVB: Unable to find symbol tda10046_attach()
[  203.761379][ T5466] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  203.799679][ T5466] usb 5-1: USB disconnect, device number 9
[  204.414908][ T7688] Set syz1 is full, maxelem 6117 reached
[  204.529960][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'.
[  204.626554][ T7716] FAULT_INJECTION: forcing a failure.
[  204.626554][ T7716] name failslab, interval 1, probability 0, space 0, times 0
[  205.136195][ T7716] CPU: 0 UID: 0 PID: 7716 Comm: syz.3.477 Not tainted syzkaller #0 PREEMPT(full) 
[  205.136225][ T7716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  205.136238][ T7716] Call Trace:
[  205.136246][ T7716]  <TASK>
[  205.136254][ T7716]  dump_stack_lvl+0xe8/0x150
[  205.136285][ T7716]  should_fail_ex+0x412/0x560
[  205.136314][ T7716]  should_failslab+0xa8/0x100
[  205.136339][ T7716]  __kmalloc_noprof+0xde/0x7e0
[  205.136358][ T7716]  ? kfree+0x4d/0x650
[  205.136383][ T7716]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  205.136419][ T7716]  tomoyo_realpath_from_path+0xe3/0x5d0
[  205.136449][ T7716]  ? tomoyo_domain+0xd7/0x130
[  205.136482][ T7716]  ? tomoyo_path_number_perm+0x219/0x630
[  205.136506][ T7716]  tomoyo_path_number_perm+0x246/0x630
[  205.136532][ T7716]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  205.136554][ T7716]  ? __lock_acquire+0x6b5/0x2cf0
[  205.136624][ T7716]  ? __fget_files+0x2a/0x420
[  205.136651][ T7716]  ? __fget_files+0x3a0/0x420
[  205.136673][ T7716]  ? __fget_files+0x2a/0x420
[  205.136699][ T7716]  security_file_ioctl_compat+0xc3/0x2a0
[  205.136724][ T7716]  __ia32_compat_sys_ioctl+0x139/0x950
[  205.136758][ T7716]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  205.136801][ T7716]  ? __fget_files+0x3a0/0x420
[  205.136832][ T7716]  ? fput+0xa0/0xd0
[  205.136857][ T7716]  ? ksys_write+0x242/0x270
[  205.136889][ T7716]  ? __pfx_ksys_write+0x10/0x10
[  205.136926][ T7716]  __do_fast_syscall_32+0x1d2/0x540
[  205.136951][ T7716]  ? lockdep_hardirqs_on+0x7a/0x110
[  205.136971][ T7716]  ? do_fast_syscall_32+0x33/0x70
[  205.136993][ T7716]  ? asm_int80_emulation+0x1a/0x20
[  205.137011][ T7716]  ? do_int80_emulation+0x20e/0x400
[  205.137039][ T7716]  do_fast_syscall_32+0x33/0x70
[  205.137064][ T7716]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  205.137088][ T7716] RIP: 0023:0xf7fa3539
[  205.137107][ T7716] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  205.137125][ T7716] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  205.137148][ T7716] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605
[  205.137163][ T7716] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[  205.137176][ T7716] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  205.137188][ T7716] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  205.137200][ T7716] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  205.137230][ T7716]  </TASK>
[  205.137979][ T7716] ERROR: Out of memory at tomoyo_realpath_from_path.
[  205.831379][ T7725] netlink: 72 bytes leftover after parsing attributes in process `syz.3.479'.
[  205.875771][ T7725] loop5: detected capacity change from 0 to 7
[  205.891606][ T7725]  loop5: [POWERTEC] p1 p2 p3 p4
[  205.900269][ T7725] loop5: p1 start 16779392 is beyond EOD, truncated
[  205.907116][ T7725] loop5: p2 start 768 is beyond EOD, truncated
[  205.929187][ T7725] loop5: p3 size 1702232064 extends beyond EOD, truncated
[  205.941924][ T7725] loop5: p4 start 3675586560 is beyond EOD, truncated
[  206.350799][ T6459] udevd[6459]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory
[  206.375132][ T7732] syz_tun: entered allmulticast mode
[  206.626022][ T7734] fuse: Bad value for 'fd'
[  206.878935][   T10] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  207.040867][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  207.081150][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  207.128087][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  207.198326][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.436222][   T10] usb 4-1: usb_control_msg returned -32
[  207.463334][   T10] usbtmc 4-1:16.0: can't read capabilities
[  208.124770][ T7750] IPv6: NLM_F_CREATE should be specified when creating new route
[  209.176375][ T7766] FAULT_INJECTION: forcing a failure.
[  209.176375][ T7766] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  209.191348][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.4.490 Not tainted syzkaller #0 PREEMPT(full) 
[  209.191377][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  209.191390][ T7766] Call Trace:
[  209.191399][ T7766]  <TASK>
[  209.191408][ T7766]  dump_stack_lvl+0xe8/0x150
[  209.191440][ T7766]  should_fail_ex+0x412/0x560
[  209.191470][ T7766]  _copy_from_iter+0x1d3/0x1670
[  209.191514][ T7766]  ? trace_kmem_cache_alloc+0x1f/0xb0
[  209.191548][ T7766]  ? __pfx__copy_from_iter+0x10/0x10
[  209.191577][ T7766]  ? __build_skb_around+0x22d/0x3c0
[  209.191605][ T7766]  ? __alloc_skb+0x193/0x390
[  209.191630][ T7766]  ? netlink_sendmsg+0x650/0xb40
[  209.191650][ T7766]  ? skb_put+0x11b/0x210
[  209.191679][ T7766]  netlink_sendmsg+0x6c0/0xb40
[  209.191710][ T7766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.191735][ T7766]  ? aa_sock_msg_perm+0xf1/0x1b0
[  209.191763][ T7766]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  209.191786][ T7766]  ? __pfx_netlink_sendmsg+0x10/0x10
[  209.191807][ T7766]  ____sys_sendmsg+0xa68/0xad0
[  209.191845][ T7766]  ? __pfx_____sys_sendmsg+0x10/0x10
[  209.191877][ T7766]  ? kstrtoull+0x12f/0x1d0
[  209.191909][ T7766]  ___sys_sendmsg+0x2a5/0x360
[  209.191935][ T7766]  ? __lock_acquire+0x6b5/0x2cf0
[  209.191969][ T7766]  ? __pfx____sys_sendmsg+0x10/0x10
[  209.191999][ T7766]  ? get_pid_task+0x20/0x1f0
[  209.192034][ T7766]  ? get_pid_task+0x20/0x1f0
[  209.192055][ T7766]  ? get_pid_task+0x20/0x1f0
[  209.192104][ T7766]  ? __fget_files+0x2a/0x420
[  209.192126][ T7766]  ? __fget_files+0x3a0/0x420
[  209.192160][ T7766]  __sys_sendmsg+0x183/0x260
[  209.192190][ T7766]  ? __pfx___sys_sendmsg+0x10/0x10
[  209.192231][ T7766]  ? __pfx_ksys_write+0x10/0x10
[  209.192271][ T7766]  __do_fast_syscall_32+0x1d2/0x540
[  209.192295][ T7766]  ? lockdep_hardirqs_on+0x7a/0x110
[  209.192315][ T7766]  ? do_fast_syscall_32+0x33/0x70
[  209.192336][ T7766]  ? asm_int80_emulation+0x1a/0x20
[  209.192355][ T7766]  ? do_int80_emulation+0x20e/0x400
[  209.192384][ T7766]  do_fast_syscall_32+0x33/0x70
[  209.192409][ T7766]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  209.192434][ T7766] RIP: 0023:0xf7f26539
[  209.192452][ T7766] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  209.192471][ T7766] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  209.192499][ T7766] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000240
[  209.192514][ T7766] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  209.192527][ T7766] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  209.192539][ T7766] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  209.192552][ T7766] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  209.192582][ T7766]  </TASK>
[  209.199213][ T5466] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  209.233653][ T7765] fuse: Bad value for 'fd'
[  209.234848][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  209.722544][ T7771] Cannot find del_set index 0 as target
[  209.739115][ T5466] usb 1-1: device descriptor read/64, error -71
[  209.745533][   T10] usb 6-1: device descriptor read/64, error -71
[  209.781640][  T872] usb 4-1: USB disconnect, device number 22
[  210.009000][   T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  210.016668][ T5466] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  210.189184][ T5466] usb 1-1: device descriptor read/64, error -71
[  210.245925][   T10] usb 6-1: device descriptor read/64, error -71
[  210.385047][   T10] usb usb6-port1: attempt power cycle
[  210.399725][ T5466] usb usb1-port1: attempt power cycle
[  210.809113][   T10] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  210.931165][ T5466] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  210.979939][ T5466] usb 1-1: device descriptor read/8, error -71
[  211.178896][   T10] usb 6-1: device descriptor read/8, error -71
[  211.252685][ T5466] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  211.334994][ T5466] usb 1-1: device descriptor read/8, error -71
[  211.439266][   T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  211.439600][  T872] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  211.456812][ T5466] usb usb1-port1: unable to enumerate USB device
[  211.682218][   T10] usb 6-1: device descriptor read/8, error -71
[  211.751507][ T5828] Bluetooth: hci4: command 0x0406 tx timeout
[  211.757609][ T5828] Bluetooth: hci3: command 0x0406 tx timeout
[  211.763774][ T5834] Bluetooth: hci1: command 0x0406 tx timeout
[  211.769890][ T5834] Bluetooth: hci0: command 0x0406 tx timeout
[  211.814275][  T872] usb 4-1: Using ep0 maxpacket: 32
[  211.870816][   T10] usb usb6-port1: unable to enumerate USB device
[  211.877631][  T872] usb 4-1: config 0 has an invalid interface number: 132 but max is 0
[  211.969625][  T872] usb 4-1: config 0 has no interface number 0
[  211.987590][  T872] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  212.027646][  T872] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  212.046712][  T872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.079415][  T872] usb 4-1: Product: syz
[  212.105950][  T872] usb 4-1: Manufacturer: syz
[  212.116104][  T872] usb 4-1: SerialNumber: syz
[  212.174752][  T872] usb 4-1: config 0 descriptor??
[  212.275677][  T872] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  212.364812][  T872] em28xx 4-1:0.132: Video interface 132 found:
[  212.719076][  T872] em28xx 4-1:0.132: chip ID is em2884
[  212.790436][ T5466] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  212.959634][ T5466] usb 1-1: Using ep0 maxpacket: 8
[  212.967162][ T5466] usb 1-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec
[  212.989211][ T5466] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.013763][ T7826] CIFS: VFS: Malformed UNC in devname
[  213.034943][ T5466] usb 1-1: config 0 descriptor??
[  213.074179][ T5466] ttusb_dec_send_command: command bulk message failed: error -22
[  213.091937][ T5466] ttusb-dec 1-1:0.0: probe with driver ttusb-dec failed with error -22
[  213.362339][ T5466] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  213.485744][ T7838] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  213.530625][ T5466] usb 6-1: Using ep0 maxpacket: 8
[  213.538286][ T5466] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  213.550836][ T5466] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  213.591565][ T5466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[  213.705243][ T5466] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[  213.746067][ T5466] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  213.790643][ T5466] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  213.804229][ T5466] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.820211][ T5466] usb 6-1: Product: syz
[  213.828689][ T5466] usb 6-1: Manufacturer: syz
[  213.843944][ T5466] usb 6-1: SerialNumber: syz
[  213.844681][  T872] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  213.886027][  T872] em28xx 4-1:0.132: board has no eeprom
[  214.390946][ T5466] usb 6-1: config 0 descriptor??
[  214.469832][  T872] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  214.485620][  T872] em28xx 4-1:0.132: analog set to bulk mode.
[  214.511121][   T43] em28xx 4-1:0.132: Registering V4L2 extension
[  214.569921][ T5903] usb 4-1: USB disconnect, device number 23
[  214.577287][ T5903] em28xx 4-1:0.132: Disconnecting em28xx
[  214.601180][ T5466] rc_core: IR keymap rc-imon-rsc not found
[  214.628002][ T5466] Registered IR keymap rc-empty
[  214.643164][ T7827] netlink: 136 bytes leftover after parsing attributes in process `syz.5.504'.
[  214.680328][ T5466] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  214.719074][  T872] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  214.736846][ T5466] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input7
[  214.858906][  T872] usb 5-1: device descriptor read/64, error -71
[  215.120033][   T43] em28xx 4-1:0.132: Config register raw data: 0xffffffed
[  215.134517][   T43] em28xx 4-1:0.132: AC97 chip type couldn't be determined
[  215.148955][  T872] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  215.178375][   T43] em28xx 4-1:0.132: No AC97 audio processor
[  215.346296][  T872] usb 5-1: device descriptor read/64, error -71
[  215.352961][   T43] usb 4-1: Decoder not found
[  215.394649][   T43] em28xx 4-1:0.132: failed to create media graph
[  215.430319][   T43] em28xx 4-1:0.132: V4L2 device video103 deregistered
[  215.479857][   T43] em28xx 4-1:0.132: Remote control support is not available for this card.
[  215.489464][ T5903] em28xx 4-1:0.132: Closing input extension
[  215.509523][  T872] usb usb5-port1: attempt power cycle
[  215.534313][ T5903] em28xx 4-1:0.132: Freeing device
[  215.869350][  T872] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  215.919739][  T872] usb 5-1: device descriptor read/8, error -71
[  216.060791][   T43] usb 6-1: USB disconnect, device number 13
[  216.251723][  T872] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  216.310031][  T872] usb 5-1: device descriptor read/8, error -71
[  216.424815][  T872] usb usb5-port1: unable to enumerate USB device
[  216.454474][ T7872] 8021q: adding VLAN 0 to HW filter on device bond1
[  216.528297][ T7874] bond_slave_0: entered promiscuous mode
[  216.534258][ T7874] bond_slave_1: entered promiscuous mode
[  216.577434][  T872] usb 1-1: USB disconnect, device number 18
[  216.641960][ T7874] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  216.670407][ T7874] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[  216.751051][ T7877] FAULT_INJECTION: forcing a failure.
[  216.751051][ T7877] name failslab, interval 1, probability 0, space 0, times 0
[  216.766275][ T7877] CPU: 0 UID: 0 PID: 7877 Comm: syz.0.513 Not tainted syzkaller #0 PREEMPT(full) 
[  216.766304][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  216.766316][ T7877] Call Trace:
[  216.766325][ T7877]  <TASK>
[  216.766333][ T7877]  dump_stack_lvl+0xe8/0x150
[  216.766364][ T7877]  should_fail_ex+0x412/0x560
[  216.766395][ T7877]  should_failslab+0xa8/0x100
[  216.766421][ T7877]  kmem_cache_alloc_noprof+0x87/0x6e0
[  216.766449][ T7877]  ? __netlink_lookup+0xc6/0x8b0
[  216.766473][ T7877]  ? skb_clone+0x212/0x3a0
[  216.766506][ T7877]  skb_clone+0x212/0x3a0
[  216.766537][ T7877]  __netlink_deliver_tap+0x404/0x850
[  216.766570][ T7877]  ? netlink_deliver_tap+0x2e/0x1b0
[  216.766593][ T7877]  netlink_deliver_tap+0x19c/0x1b0
[  216.766616][ T7877]  netlink_unicast+0x7e3/0x9b0
[  216.766653][ T7877]  ? __pfx_netlink_unicast+0x10/0x10
[  216.766682][ T7877]  ? __alloc_skb+0x193/0x390
[  216.766707][ T7877]  ? netlink_sendmsg+0x650/0xb40
[  216.766726][ T7877]  ? skb_put+0x11b/0x210
[  216.766756][ T7877]  netlink_sendmsg+0x813/0xb40
[  216.766788][ T7877]  ? __pfx_netlink_sendmsg+0x10/0x10
[  216.766812][ T7877]  ? __fget_files+0x2a/0x420
[  216.766834][ T7877]  ? aa_sock_msg_perm+0xf1/0x1b0
[  216.766861][ T7877]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  216.766887][ T7877]  __sys_sendto+0x709/0x7a0
[  216.766914][ T7877]  ? __pfx___sys_sendto+0x10/0x10
[  216.766974][ T7877]  ? fput+0xa0/0xd0
[  216.767000][ T7877]  ? ksys_write+0x242/0x270
[  216.767032][ T7877]  ? __pfx_ksys_write+0x10/0x10
[  216.767064][ T7877]  __ia32_sys_sendto+0xdd/0x100
[  216.767094][ T7877]  __do_fast_syscall_32+0x1d2/0x540
[  216.767118][ T7877]  ? lockdep_hardirqs_on+0x7a/0x110
[  216.767138][ T7877]  ? do_fast_syscall_32+0x33/0x70
[  216.767160][ T7877]  ? asm_int80_emulation+0x1a/0x20
[  216.767180][ T7877]  ? do_int80_emulation+0x20e/0x400
[  216.767208][ T7877]  do_fast_syscall_32+0x33/0x70
[  216.767231][ T7877]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  216.767255][ T7877] RIP: 0023:0xf7fa3539
[  216.767278][ T7877] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  216.767291][ T7877] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  216.767308][ T7877] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[  216.767318][ T7877] RDX: 000000000000004c RSI: 0000000000000000 RDI: 0000000000000000
[  216.767327][ T7877] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  216.767335][ T7877] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  216.767343][ T7877] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  216.767365][ T7877]  </TASK>
[  217.048987][ T5903] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  217.329229][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  217.360087][ T5903] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  217.368049][ T5903] usb 6-1: can't read configurations, error -22
[  217.375514][ T7881] IPv6: NLM_F_CREATE should be specified when creating new route
[  217.442723][ T7883] netlink: 44 bytes leftover after parsing attributes in process `syz.2.516'.
[  217.539021][ T5903] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  217.748155][ T7890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  217.794410][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  217.823245][ T5903] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  217.834682][ T5903] usb 6-1: can't read configurations, error -22
[  217.851013][ T5903] usb usb6-port1: attempt power cycle
[  218.208956][ T5903] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  218.239862][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  218.255154][ T5903] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  218.280371][ T5903] usb 6-1: can't read configurations, error -22
[  218.459299][ T5903] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  218.556046][ T5903] usb 6-1: Using ep0 maxpacket: 8
[  218.598637][ T5903] usb 6-1: config index 0 descriptor too short (expected 9, got 0)
[  218.657684][ T5903] usb 6-1: can't read configurations, error -22
[  218.979284][ T5903] usb usb6-port1: unable to enumerate USB device
[  219.391123][  T872] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  219.739215][  T872] usb 1-1: Using ep0 maxpacket: 32
[  219.747029][  T872] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  219.757876][  T872] usb 1-1: config 0 has no interface number 0
[  219.764677][  T872] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  219.782440][  T872] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  219.792155][  T872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.874147][  T872] usb 1-1: Product: syz
[  219.878527][  T872] usb 1-1: Manufacturer: syz
[  219.883641][  T872] usb 1-1: SerialNumber: syz
[  220.244116][ T5942] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  220.398901][ T5942] usb 5-1: device descriptor read/64, error -71
[  220.406374][  T872] usb 1-1: config 0 descriptor??
[  220.446367][  T872] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  220.482720][  T872] em28xx 1-1:0.132: Video interface 132 found:
[  220.713581][ T5942] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  220.860596][  T872] em28xx 1-1:0.132: chip ID is em2884
[  220.969002][ T5942] usb 5-1: device descriptor read/64, error -71
[  221.081631][ T5942] usb usb5-port1: attempt power cycle
[  221.558905][ T5942] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  221.628756][ T5942] usb 5-1: device descriptor read/8, error -71
[  221.839137][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  221.879692][ T5942] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  221.960940][ T5942] usb 5-1: device descriptor read/8, error -71
[  221.981641][  T872] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  222.000763][  T872] em28xx 1-1:0.132: board has no eeprom
[  222.079887][  T872] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  222.100238][ T5942] usb usb5-port1: unable to enumerate USB device
[  222.110433][  T872] em28xx 1-1:0.132: analog set to bulk mode.
[  222.145900][ T5942] em28xx 1-1:0.132: Registering V4L2 extension
[  222.365711][ T5942] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5)
[  222.409478][ T5942] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-5)
[  222.418911][ T5466] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  222.447212][ T7930] netlink: 124 bytes leftover after parsing attributes in process `syz.5.529'.
[  222.459072][ T7930] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  222.496057][ T5942] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-5)
[  222.518025][  T872] usb 1-1: USB disconnect, device number 19
[  222.557874][  T872] em28xx 1-1:0.132: Disconnecting em28xx
[  222.569141][ T5466] usb 4-1: device descriptor read/64, error -71
[  222.988963][ T5466] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  223.109120][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  223.126925][ T5942] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  223.144377][ T5466] usb 4-1: device descriptor read/64, error -71
[  223.194699][ T5942] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  223.202479][   T24] IPVS: starting estimator thread 0...
[  223.233844][ T5942] em28xx 1-1:0.132: No AC97 audio processor
[  223.273912][ T5466] usb usb4-port1: attempt power cycle
[  223.297900][ T7940] IPVS: using max 38 ests per chain, 91200 per kthread
[  223.383969][ T5942] usb 1-1: Decoder not found
[  223.388629][ T5942] em28xx 1-1:0.132: failed to create media graph
[  223.498638][ T5942] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  223.591531][ T5942] em28xx 1-1:0.132: Remote control support is not available for this card.
[  223.594665][ T7942] ==================================================================
[  223.608283][ T7942] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  223.615698][ T7942] Read of size 8 at addr ffff88805d288740 by task v4l_id/7942
[  223.623181][ T7942] 
[  223.625535][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  223.625559][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  223.625573][ T7942] Call Trace:
[  223.625581][ T7942]  <TASK>
[  223.625590][ T7942]  dump_stack_lvl+0xe8/0x150
[  223.625620][ T7942]  print_report+0xba/0x230
[  223.625643][ T7942]  ? v4l2_fh_open+0xac/0x420
[  223.625667][ T7942]  kasan_report+0x117/0x150
[  223.625691][ T7942]  ? v4l2_fh_open+0xac/0x420
[  223.625717][ T7942]  v4l2_fh_open+0xac/0x420
[  223.625742][ T7942]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  223.625768][ T7942]  em28xx_v4l2_open+0x157/0x9a0
[  223.625799][ T7942]  ? do_raw_spin_lock+0x12b/0x2f0
[  223.625827][ T7942]  v4l2_open+0x1bf/0x3a0
[  223.625854][ T7942]  chrdev_open+0x4cd/0x5e0
[  223.625876][ T7942]  ? __pfx_chrdev_open+0x10/0x10
[  223.625896][ T7942]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  223.625926][ T7942]  ? __pfx_chrdev_open+0x10/0x10
[  223.625945][ T7942]  do_dentry_open+0x7ce/0x1420
[  223.625976][ T7942]  vfs_open+0x3b/0x340
[  223.625997][ T7942]  ? path_openat+0x346e/0x3e20
[  223.626028][ T7942]  path_openat+0x3486/0x3e20
[  223.626072][ T7942]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  223.626103][ T7942]  ? getname_flags+0xb7/0x540
[  223.626125][ T7942]  ? __pfx_path_openat+0x10/0x10
[  223.626156][ T7942]  ? __lock_acquire+0x6b5/0x2cf0
[  223.626191][ T7942]  do_filp_open+0x22d/0x490
[  223.626221][ T7942]  ? __pfx_do_filp_open+0x10/0x10
[  223.626262][ T7942]  ? _raw_spin_unlock+0x28/0x50
[  223.626292][ T7942]  ? alloc_fd+0x64b/0x6c0
[  223.626319][ T7942]  do_sys_openat2+0x12f/0x220
[  223.626344][ T7942]  ? __pfx_do_sys_openat2+0x10/0x10
[  223.626369][ T7942]  ? exc_page_fault+0x6a/0xc0
[  223.626392][ T7942]  ? do_user_addr_fault+0xc7c/0x1360
[  223.626427][ T7942]  __x64_sys_openat+0x138/0x170
[  223.626455][ T7942]  do_syscall_64+0xe2/0xf80
[  223.626483][ T7942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.626504][ T7942]  ? trace_irq_disable+0x37/0x100
[  223.626524][ T7942]  ? clear_bhb_loop+0x60/0xb0
[  223.626547][ T7942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.626568][ T7942] RIP: 0033:0x7ff7d6ea7407
[  223.626587][ T7942] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  223.626605][ T7942] RSP: 002b:00007fffbed715a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  223.626627][ T7942] RAX: ffffffffffffffda RBX: 00007ff7d75c9880 RCX: 00007ff7d6ea7407
[  223.626643][ T7942] RDX: 0000000000000000 RSI: 00007fffbed72f1b RDI: ffffffffffffff9c
[  223.626658][ T7942] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  223.626671][ T7942] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  223.626683][ T7942] R13: 00007fffbed717f0 R14: 00007ff7d7730000 R15: 0000563b006204d8
[  223.626708][ T7942]  </TASK>
[  223.626716][ T7942] 
[  223.906056][ T7942] Allocated by task 5942:
[  223.910427][ T7942]  kasan_save_track+0x3e/0x80
[  223.915147][ T7942]  __kasan_kmalloc+0x93/0xb0
[  223.919921][ T7942]  __kmalloc_cache_noprof+0x3d1/0x6e0
[  223.925332][ T7942]  em28xx_v4l2_init+0x10b/0x2e70
[  223.930310][ T7942]  em28xx_init_extension+0x120/0x1c0
[  223.935634][ T7942]  process_scheduled_works+0xaec/0x17a0
[  223.941217][ T7942]  worker_thread+0xda6/0x1360
[  223.946018][ T7942]  kthread+0x726/0x8b0
[  223.950118][ T7942]  ret_from_fork+0x51b/0xa40
[  223.954774][ T7942]  ret_from_fork_asm+0x1a/0x30
[  223.959659][ T7942] 
[  223.962011][ T7942] Freed by task 5942:
[  223.966009][ T7942]  kasan_save_track+0x3e/0x80
[  223.970708][ T7942]  kasan_save_free_info+0x46/0x50
[  223.975775][ T7942]  __kasan_slab_free+0x5c/0x80
[  223.980571][ T7942]  kfree+0x1be/0x650
[  223.984521][ T7942]  em28xx_v4l2_init+0x1683/0x2e70
[  223.989584][ T7942]  em28xx_init_extension+0x120/0x1c0
[  223.994904][ T7942]  process_scheduled_works+0xaec/0x17a0
[  224.000493][ T7942]  worker_thread+0xda6/0x1360
[  224.005209][ T7942]  kthread+0x726/0x8b0
[  224.009308][ T7942]  ret_from_fork+0x51b/0xa40
[  224.013939][ T7942]  ret_from_fork_asm+0x1a/0x30
[  224.018736][ T7942] 
[  224.021089][ T7942] The buggy address belongs to the object at ffff88805d288000
[  224.021089][ T7942]  which belongs to the cache kmalloc-8k of size 8192
[  224.035173][ T7942] The buggy address is located 1856 bytes inside of
[  224.035173][ T7942]  freed 8192-byte region [ffff88805d288000, ffff88805d28a000)
[  224.049168][ T7942] 
[  224.051519][ T7942] The buggy address belongs to the physical page:
[  224.057956][ T7942] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d288
[  224.066727][ T7942] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  224.075242][ T7942] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  224.082799][ T7942] page_type: f5(slab)
[  224.086888][ T7942] raw: 00fff00000000040 ffff88813fe27280 ffffea0000c83e00 dead000000000004
[  224.095504][ T7942] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  224.104114][ T7942] head: 00fff00000000040 ffff88813fe27280 ffffea0000c83e00 dead000000000004
[  224.112900][ T7942] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  224.121593][ T7942] head: 00fff00000000003 ffffea000174a201 00000000ffffffff 00000000ffffffff
[  224.130289][ T7942] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  224.138973][ T7942] page dumped because: kasan: bad access detected
[  224.145406][ T7942] page_owner tracks the page as allocated
[  224.151132][ T7942] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6586, tgid 6581 (syz.2.170), ts 133827755150, free_ts 133713191483
[  224.172485][ T7942]  post_alloc_hook+0x228/0x280
[  224.177270][ T7942]  get_page_from_freelist+0x24dc/0x2580
[  224.182830][ T7942]  __alloc_frozen_pages_noprof+0x18d/0x380
[  224.188664][ T7942]  alloc_pages_mpol+0x232/0x4a0
[  224.193529][ T7942]  allocate_slab+0x86/0x3a0
[  224.198053][ T7942]  ___slab_alloc+0xd82/0x1760
[  224.202751][ T7942]  __slab_alloc+0x65/0x100
[  224.207183][ T7942]  __kmalloc_cache_noprof+0x40d/0x6e0
[  224.212570][ T7942]  audit_log_d_path+0xb8/0x1a0
[  224.217363][ T7942]  audit_log_d_path_exe+0x42/0x70
[  224.222421][ T7942]  audit_log_task+0x2c3/0x3d0
[  224.227133][ T7942]  audit_seccomp+0x85/0x190
[  224.231655][ T7942]  __seccomp_filter+0xd48/0x1ef0
[  224.236611][ T7942]  syscall_trace_enter+0xa9/0x160
[  224.241662][ T7942]  __do_fast_syscall_32+0x1b5/0x540
[  224.246880][ T7942]  do_fast_syscall_32+0x33/0x70
[  224.251753][ T7942] page last free pid 5847 tgid 5847 stack trace:
[  224.258101][ T7942]  __free_frozen_pages+0xbf8/0xd70
[  224.263237][ T7942]  __put_partials+0x146/0x170
[  224.267934][ T7942]  __slab_free+0x294/0x320
[  224.272374][ T7942]  qlist_free_all+0x97/0x100
[  224.276988][ T7942]  kasan_quarantine_reduce+0x148/0x160
[  224.282483][ T7942]  __kasan_slab_alloc+0x22/0x80
[  224.287343][ T7942]  kmem_cache_alloc_noprof+0x370/0x6e0
[  224.292829][ T7942]  getname_flags+0xb7/0x540
[  224.297349][ T7942]  user_path_at+0x24/0x60
[  224.301697][ T7942]  __ia32_sys_umount+0xf6/0x170
[  224.306557][ T7942]  __do_fast_syscall_32+0x1d2/0x540
[  224.311781][ T7942]  do_fast_syscall_32+0x33/0x70
[  224.316692][ T7942]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  224.323134][ T7942] 
[  224.325478][ T7942] Memory state around the buggy address:
[  224.331218][ T7942]  ffff88805d288600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.339305][ T7942]  ffff88805d288680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.347391][ T7942] >ffff88805d288700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.355472][ T7942]                                            ^
[  224.361648][ T7942]  ffff88805d288780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.369731][ T7942]  ffff88805d288800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  224.377808][ T7942] ==================================================================
[  224.418911][  T872] em28xx 1-1:0.132: Closing input extension
[  224.478891][ T5466] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  224.502830][ T7942] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.510114][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  224.519101][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  224.529192][ T7942] Call Trace:
[  224.532501][ T7942]  <TASK>
[  224.535463][ T7942]  vpanic+0x1e0/0x670
[  224.539489][ T7942]  panic+0xc5/0xd0
[  224.543246][ T7942]  ? __pfx_panic+0x10/0x10
[  224.547701][ T7942]  ? preempt_schedule_common+0x82/0xd0
[  224.553196][ T7942]  ? v4l2_fh_open+0xac/0x420
[  224.557826][ T7942]  check_panic_on_warn+0x89/0xb0
[  224.562805][ T7942]  ? v4l2_fh_open+0xac/0x420
[  224.567428][ T7942]  end_report+0x6f/0x140
[  224.571696][ T7942]  kasan_report+0x128/0x150
[  224.576235][ T7942]  ? v4l2_fh_open+0xac/0x420
[  224.580850][ T7942]  v4l2_fh_open+0xac/0x420
[  224.585309][ T7942]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  224.591308][ T7942]  em28xx_v4l2_open+0x157/0x9a0
[  224.596279][ T7942]  ? do_raw_spin_lock+0x12b/0x2f0
[  224.601325][ T7942]  v4l2_open+0x1bf/0x3a0
[  224.605595][ T7942]  chrdev_open+0x4cd/0x5e0
[  224.610031][ T7942]  ? __pfx_chrdev_open+0x10/0x10
[  224.615003][ T7942]  ? fsnotify_open_perm_and_set_mode+0x135/0x6d0
[  224.621353][ T7942]  ? __pfx_chrdev_open+0x10/0x10
[  224.626309][ T7942]  do_dentry_open+0x7ce/0x1420
[  224.631103][ T7942]  vfs_open+0x3b/0x340
[  224.635194][ T7942]  ? path_openat+0x346e/0x3e20
[  224.639982][ T7942]  path_openat+0x3486/0x3e20
[  224.644615][ T7942]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  224.650279][ T7942]  ? getname_flags+0xb7/0x540
[  224.654971][ T7942]  ? __pfx_path_openat+0x10/0x10
[  224.659927][ T7942]  ? __lock_acquire+0x6b5/0x2cf0
[  224.664891][ T7942]  do_filp_open+0x22d/0x490
[  224.669425][ T7942]  ? __pfx_do_filp_open+0x10/0x10
[  224.674484][ T7942]  ? _raw_spin_unlock+0x28/0x50
[  224.679363][ T7942]  ? alloc_fd+0x64b/0x6c0
[  224.683711][ T7942]  do_sys_openat2+0x12f/0x220
[  224.688412][ T7942]  ? __pfx_do_sys_openat2+0x10/0x10
[  224.693632][ T7942]  ? exc_page_fault+0x6a/0xc0
[  224.698331][ T7942]  ? do_user_addr_fault+0xc7c/0x1360
[  224.703651][ T7942]  __x64_sys_openat+0x138/0x170
[  224.708555][ T7942]  do_syscall_64+0xe2/0xf80
[  224.713072][ T7942]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.719152][ T7942]  ? trace_irq_disable+0x37/0x100
[  224.724197][ T7942]  ? clear_bhb_loop+0x60/0xb0
[  224.728902][ T7942]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.734823][ T7942] RIP: 0033:0x7ff7d6ea7407
[  224.739257][ T7942] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  224.758883][ T7942] RSP: 002b:00007fffbed715a0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  224.767316][ T7942] RAX: ffffffffffffffda RBX: 00007ff7d75c9880 RCX: 00007ff7d6ea7407
[  224.775305][ T7942] RDX: 0000000000000000 RSI: 00007fffbed72f1b RDI: ffffffffffffff9c
[  224.783292][ T7942] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  224.791274][ T7942] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  224.799258][ T7942] R13: 00007fffbed717f0 R14: 00007ff7d7730000 R15: 0000563b006204d8
[  224.807252][ T7942]  </TASK>
[  224.810877][ T7942] Kernel Offset: disabled
[  224.815206][ T7942] Rebooting in 86400 seconds..