last executing test programs: 14m19.009541031s ago: executing program 32 (id=1994): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffff9c, 0x0, 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000002880), 0xffffffffffffffff) modify_ldt$write(0x1, &(0x7f0000000340)={0x8, 0x20000000}, 0x10) modify_ldt$read(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000002000010000000000000000000200000000000000000000001400110067656e6576653100000000000000000008001000000000000800"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x8001, 0xd) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000780)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x44}, 0x200}, {0xa, 0x4e20, 0x40, @dev={0xfe, 0x80, '\x00', 0x32}, 0x60e3}, r5, 0x5}}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, ','}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x9, 0x7}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x793, 0xfffff801, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1}}]}, 0x80}, 0x1, 0x7}, 0x0) 12m55.662626303s ago: executing program 33 (id=2535): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6400000002060103"], 0x64}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000140)=ANY=[@ANYBLOB="6bd41bd9822aa29bde66b41b0000002057fb6705cdcaa08cede8e459b950cf9649fd2e", @ANYRESDEC=r0]) 8m12.904612471s ago: executing program 1 (id=3647): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x1a000}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x52abe154ad664f26) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r3, 0x40044104, &(0x7f0000000140)=0xd345ba0e) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 8m12.309195695s ago: executing program 1 (id=3652): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002abd7000ffdb060045000000080001007063690011de0100303030303a30303a31302e300000000008008e0001000000"], 0x38}, 0x1, 0x0, 0x0, 0x44840}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) lseek(r1, 0x851, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x1cb701, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000380)={0x1, "5660359c3245d1c451000000000000000100", 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r7 = io_uring_setup(0x2fac, &(0x7f0000000500)={0x0, 0x9d1d, 0x2, 0x1007, 0x176}) close_range(r7, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xbecd6000) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, 0x0, 0x0) splice(r4, 0x0, r6, 0x0, 0x402000784853bb, 0x0) fcntl$setpipe(r5, 0x407, 0x10001) write$P9_RLOPEN(r5, &(0x7f0000000180)={0x18, 0xd, 0x2, {{0x30, 0x3, 0x7}, 0xe}}, 0x18) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x35c, 0x0) preadv(r10, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4096, 0x5}], 0x1, 0x5, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r9, 0xffffffffffffffff}) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x10, 0x3, 0x3da}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r12, r13, r14, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd=r11, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r15 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r15, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7fffffffffffffff, 0x3a, 'Sowe%\x8e\x106v\xb6\xc2\x8c\x97ZhG\xd1\xdcrdir`1\x90\xc8\x90\xa1\x1cwJ\xf0\xd7\xc1\xd9\x16s\xdf\xc8\x02\xbb,\x13\xec:\"\xaa\x06v\x05\x90\x94\xc5', 0x3a, '-\x00\x00\x00\x00\x00\x00\x00', 0x3a, './bus'}, 0x62) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000300)={{0xff, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x2, 'dh\x00', 0xc, 0xc250, 0x3}, {@loopback, 0x4e22, 0x4, 0x6, 0x1, 0x4d1}}, 0x44) 8m12.07808365s ago: executing program 1 (id=3653): r0 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0xc0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000780)={{0x60000000, 0x6}, 0x100, './file0\x00'}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r11, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 8m11.899761074s ago: executing program 1 (id=3655): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(0xffffffffffffffff, 0x40045730, &(0x7f0000000540)) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000000)=@x86={0x0, 0x3c, 0x8, 0x0, 0x3ff, 0x7, 0x83, 0x81, 0x80, 0x8, 0x0, 0x9, 0x0, 0x8, 0xa, 0xf, 0x1, 0x7, 0xee, '\x00', 0x9, 0x200000000006}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r5], 0x3c}}, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0x7, &(0x7f0000000500)={0x401, 0x1, 0xfffffffd, 0xfffffffd}, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01042ebd7000fedbdf25160000001800018014000200766574683100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x4048810}, 0x14008080) 8m10.834576495s ago: executing program 1 (id=3662): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000003c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@assoc={0x18, 0x117, 0x4, 0x4648}], 0x18, 0x8000}], 0x1, 0x4) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000010028bd700002d4df24ffe30000", @ANYRES32=r2, @ANYBLOB="984e0600c12a01002c001280110001006272696467655f736c61766500000000140005800500060004000000050008"], 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)='0') (async, rerun: 32) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) (rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 8m10.452444738s ago: executing program 1 (id=3666): r0 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0xc0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000780)={{0x60000000, 0x6}, 0x100, './file0\x00'}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r11, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 8m9.583777966s ago: executing program 34 (id=3666): r0 = socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x19a1, 0x2, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x300, 0x2100, 0x10000004, 0x0, r7}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000023c0)={0x0, 'bridge_slave_0\x00', {0x2}, 0xc0}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$AUTOFS_IOC_EXPIRE(r8, 0x810c9365, &(0x7f0000000780)={{0x60000000, 0x6}, 0x100, './file0\x00'}) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r9, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r11 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r11, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r11, 0x0) r12 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r12, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="2feebe8d881590f656d01482831f4b036a7bb40c6782cbb5dafe72ea85766575551d40e3", 0x24}], 0x1, 0x0, 0x0, 0x40010}, 0x0) close_range(r10, 0xffffffffffffffff, 0x0) 2m40.924449166s ago: executing program 7 (id=5587): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x3000000, 0x80000000008b, 0x0, 0x0, 0x0, 0x0) 2m39.567179995s ago: executing program 7 (id=5593): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000a000000800004801300010062726f6164636173742d6c696e6b"], 0x94}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f00000050c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@dstopts={{0x14, 0x29, 0x37, {0x2e}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x8}}], 0x24}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@tclass={{0x10, 0x29, 0x43, 0x4}}, @hopopts_2292={{0x14}}], 0x24}}], 0x2, 0x20002040) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000500), &(0x7f0000000540)={'U+', 0x7ff}, 0x16, 0x1) sendmsg$nl_route_sched(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="03030800030016000c004557005c0067005c06119078ac1414aa000000004e234e240048907803000000040022e0a529160000615929421e06c3e74ce3e054a077fd19cfd314b18df4fe12bccd605d3028483bd2adaf37455d1e3148f215a4412be1a95097aa"], 0x66) r10 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$uac1(r10, &(0x7f0000000180)={0xc, &(0x7f0000000100)={0x40, 0x10, 0x14, {0x14, 0xb, "98c02907389066ebf0943381474b085d622e"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000480)={0x24, &(0x7f00000001c0)={0x0, 0x1, 0xbf, "0decc19145048f519be4bb15cfa55f005026d3431805879af781d32fd9733dc68c5beb50a9525d6757ffdcc6212f498a514d739e7a85aa911ad1a47a7b4298dd3fc958823284a873fd65914f007a57d72862cc7b1a47931c8bc7ec7fc579863bbab2b8a023de6fc5a2713a1e56cca5eaeea75324f967b74efc4835172b79320337c3897dea845e2aea4a53bdd42d315b8ad6a72aebeb02addacbbcb1f382b7a1f0f1b1cddd9899023a6fe2e4ebe17300c1e0bece72034cf1c3774a2f092b98"}, &(0x7f00000002c0)={0x0, 0xa, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x37}, &(0x7f0000000340)={0x20, 0x81, 0x2, "7b03"}, &(0x7f0000000380)={0x20, 0x82, 0x1, "d1"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '=*'}, &(0x7f0000000400)={0x20, 0x84, 0x1, "c4"}, &(0x7f0000000440)={0x20, 0x85, 0x3, "d230ec"}}) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000002b40)={0x84, &(0x7f00000026c0)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mknodat$loop(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x40, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x7fffffff, 0x2, 0x1, 0xc, 0x8, 0x81}, &(0x7f0000000040)=0x20) 2m35.625866697s ago: executing program 7 (id=5614): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) set_mempolicy(0x6005, &(0x7f0000000000)=0xfffffffffffffffd, 0x4) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x12, 0x17, 0xa4, &(0x7f0000000580)}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000200304c19700035ea59b0109022400010000a003090400080103000200092104000001222f00090581032000040800"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) socket$nl_audit(0x10, 0x3, 0x9) unshare(0x8000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="050000007b000000430000000100000000000000", @ANYRES32, @ANYRESOCT=r0, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000000000000000000000000000000000000000f2ff006d212afa688ce4ef9ce0a25adc643af1340d"], 0x50) r3 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_connect$uac1(0x2, 0xaa, &(0x7f0000000100)=ANY=[], 0x0) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000300)="03", 0x1}], 0x1) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000100)={r2, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80004000, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0xdb, 0x4) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'veth0_to_hsr\x00', 0x0}) r9 = openat$ppp(0xffffff9c, &(0x7f0000000140), 0x1, 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r10, 0x0, 0x48b, &(0x7f0000000400)={0x0, 'sit0\x00', 0x3}, 0x18) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)=ANY=[@ANYBLOB="120100030000000832151b0140000102030109022d0001018dc0fa09040006010301020309210000040122790109058103200002010509ed00030002010003"], &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x7, 0x7f, 0x7f, 0x8, 0x8}, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="9f50c2a2568bc3f123ebab56fa09507be7f6cdca78e48ad71917c519fe2556d44d414b61d74f3aeb43aa03c45acaec4af069dc1a02a203188fa8d47e396dcd224e719bae9bd2535180e15818e7bdb1f6ce8ca1a03714f1b066dbcae3287964b74069b89ceacc66bdb5e1f1a4fb881610d5f68e1b97907cb6991608f515085994ad28dd490deb42f176cfed226d3cf1a583635a850a7434af613eedcee0912a41db16d7ce61dec19c0bc7700243c8db329a755a156acd2593c7ff67"], 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x40a}}]}) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000240)=0x6) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x5, 0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x1, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x8021}, 0x4048800) 2m34.982746417s ago: executing program 4 (id=5618): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002cbd70100400000005000000080009000200000207000c00a80a0000060001000500000008000b0002000000140008006d616376746170300800000000000000"], 0x48}}, 0x20000034) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002a0000000000000000efff000000000012688ed6cc3ab97231c940328c74d7c8b8a7f73cb94a0100000000000018245a001a0da12c3b9c195729a45c4e500b9964ffff0000000000001412e84d1ddd9f4b0ba3779cb5e63c5a1d864e6834ca347a09009638da2f644f105180bea5b366d0b4e8ad7d6bedd7121968323a61918b51", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000a000600ffffffffffff0000"], 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000005) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) ftruncate(r3, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x4000, 0x0, 0x6, 0x0) mprotect(&(0x7f00008da000/0x2000)=nil, 0x2000, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) socket$kcm(0x2, 0x1, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001700010026bd7000fddbdf250800000008008f3ace4f0000bd670dba0c605abf3a0f4e002cb0c78d2a01"], 0xff2e}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, 0x0, 0x40000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r6, 0xf502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m33.727253454s ago: executing program 7 (id=5623): bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x6, 0x7, 0x603, 0xfff7, 0x14, "0000000000000200"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x8040, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f0000000300), 0x3, 0x2) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4c000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc083be1fb9a08d4cc39166000034000000130140000001100010000000000000000000100000a"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000440000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[], 0x70}}, 0x8800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x24044090}, 0x24000044) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) r6 = socket$kcm(0x2, 0x0, 0x73) socket$kcm(0x2, 0x2, 0x73) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001180)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="a3eee6a3951d2c6665503f6e37385803dc8c6c0da6883def6b6618a63d6dd541712bac4560c7d55851acac8b8a09f1d0914b101738ad814832a7fd63005042f4f8907475306934f57941dcb0489e1747477326c072e25bfc2c49a5d5a2ce352561651bd6761e7659207f3dfc62b607885ebe9b3e1958c82f8554bf5a760d366f7f2e9f4869514f797ae0e310fc52ff342c5139e4f0ca393966a9b81fb9f090981ab22ffbfde85d0de521175f4853ccf36a5ec838b8fcbba790b98c366e3fc9e0b1c0a2758f2aeadde360d7a984769583d3c5c8a929b1d463cf86be9df531739135c77110bd2a507f629239b77794d3f9f749ccff7c87826278c731dcf49952c5bae70f73dfeddc442970a06fc47e044582fe4bd6b9e5c3d69064db97219013c5ddb50f25cf8a5591a023e6cdb3435ce037ec71549fcc42efbfe958aa1b84962fef0b5eee06f10b6c35d0223e260bb59986345c093d406367020c0333163ace54ca6eec96cef288617f4af3f88ff5c70f8fff59f5a99c5c2c0b72e19fcf555c56d5140ce48e5b44a663a85c6a40fa0a7ffb1ccd15c5fc5214de93911b6f33c2af5998f83dcd52771c9b9cb3e71b94f4c74c55827bf02589b594108219f81ffda707ecd9afb4138f6e236cd4222e2478c79e946f0019ff720e402b952d89f7dc86a54098f3dc433222e2f6026bb99586177b53d9f97a2179e5f46b825802d91778986a99c796ac29be218f9b0bdf46e5aa687de1d4c74cd8d4d3e6d6a1330887a21810012cdd7184651192636ee11d4ad0fe5fe55366cd4c1799f13bd809ef40c38446470d683b14b645c5171ee7585993162c1fd2fa5c0b1e8f99e880ae7b2a58876dd7f1276aa7c8b7427b3b6c6e3daae0377c921f0be2f3c897f130656537393b3c45b9bd7ff4aed8b8fe6ca9c125eea2e52b449210a3774d610c5dba83ee030f7091fd7ff9f2cc55bb44dab9867b092280586b1f284fa365417155b650ba562d682cf999667eaa34d10ce4cfffa75b65a22bf3087c4315c2e3c74a306494f8f53edcd8516978edef243c9180882b08d7df2489bd157c99cb9a16bb5b4a2ea1caaa4ed7e2d82e5e060ccbcbaccfcc82d761a351c35153ba78adc5094aa826966a0af271ffb22abc34aa905a18c98c5b68e1ba2adeb2d553eccf2f599f54af80977070a37eb64daeaad3a8b26cdde8380d5046c394ea9d8c7d76a20bb83a1d147a25a0ffbfd6a1358e2f08acfeb2c0ad57d34390d7ea41372c92d99dcc80331b60f05c4b1d759d8217af64a474c2456e26ac90e586ff6eb497316219f140f114f901d432359d7dd9476f9f3268701c75376c7acf3ee260f4d859ef5a1587da45780f16265ea88aceee593a004b7e5f4a56865ed595f6938a1c1571dc3a2c557c707187ba4e4d23a6bd1f4d08443ae49015c253a1d5a47d5780813fabc5423785a1d01df2db343117357f81315050127af74c253efc6b8dc36e8826c3eaaa76d36fb010586553c077264ccff42ec36fc52bda0b0c7172c16ae7c9d81951f54f329c01d4966e11d4b749ee3ae9ee266c2bd3706aeac4f89b42192d2bab8b845581a2a617dc70bea8bf1b188181519ee485915cf9674b97ab751c65d13cb58655d9be580021025b5052ca9001bbbb1750327b4544c219698d367452876e94b586c9b56dbaf8209ab5b379af504a714ad3074119d3ce8f41bc0c722ff04eae93c9a4e20e5ea23ae5ab173754945cc85332bb7df5a23632409b5266df8a9f6682b89b869b401b5489a46c421a811a9e601bf8619cb619caf1c47007c97d088b333df401a7c0d29ac770d313c45bf831404c5a05f93b3c1b2bd89759a7d438810aa73fe32345bfa57b15c1957b6df6c29106dc769aa419d4a868835aed97ff59c3bc650307b35d75e95fb08f245b59a17dfe2712c18a91aceaaba0525faa96341cc736d522484cc3f356a24ee5f8d77b58072ce246f7db2ec478206ce122cc2978354f9084cef9197653df1facbfea0541e2bebb7983dfd3d7af3c21fae9a1106a97e7a3ebe9c2796718380a1c05f44b7ded931afb304fe2bd26332a1cba08858f5e4e2ce11892a430774b3c7adcef016e402078269f358d7b1dd8aa11f160dcfc6e93acda41bfabcfc3b301cb84ff62abf0de471681c61bc33e3c9da534725a8f7415f935ceecb648ca0ce0a7fce578a7a974607c76feb5fbbc492c021f71800c86c5691c209ae5a6fac6f193a820b6e154fdc541f9dbb6380632d70757a722180e764dfd55f266f84f26a3a7f5db3a3d54d12756a98801f340e032cfcf219bd9029ff72fb466c6de02e11fd491fbe74697be83fb6045b850b7c52a74a8e382f12b76ddf39e5d2fef3b9f6c3cd65190993d602a9b903f6bdae03ba9f8c511df55737ebf8f0ff1f1a88ef92b5ce3d7c77c956b580ed6adba15a9316535c89079a1fe903931d7a10d8a7c424bab9d0ca66a15f0aa264964294fa593b00eb791755748ff797847a191ddcee768abccac772c2fe9d9f09c5a2838063705893a18b5e975a64c010ea160d177b8ecedefa6bd2e96b62ecc045e2e72553d3cd0f6aa78424c8c83be1eb1e46012f39dc15ee8c4b3c804ba0b5252da80f861a67b330ea26e7cda99065c4e655ba5484c5921f5073e116f13041620e42b6857f020af810f77325578e829435072c653a58dc80162e8330898336ccf919e755b88f40c12058e857ae2c9ba06c0ce124c41986b6b7488cda211810c73069772958d033c2f144dfe4168ddf80628ca8b705f0551668fdd7d85404a21bcdb9c48e059d6f217f48eb36b8da05a99a111b7f7175e0d43e980cee1d7310d066586abe9246e77c685dcb9a574792062da7d2fc54070f9bdd357160378fc581b78401aefe2514ddc170f13d2d5c2b216c1407010540a7e8595a27c8fa17c50f15f8704a1d4a6f675351b7cc397465ea98ea5bd92b718bff719b962c4b222f4ab2d0238bd048f223ae4324674defbcbfd229d34fa2d2a7a96b9934dc3f01bcc7812a39842ed80cc7c857c530aa5e2f1cd68af3749feed052829b8ec92d1efe7de3e0cbbf356c4fe480ee8ad9d24b9cd51768c6466ee3014c2f35a8c4bbbdba4713fc700e953993f8d8482ff1b9f6674736b55be163d83df766d681e25971166faf969aabd3f2f27ec40927d75b5f4b0e79ade7e68b4ead1da5e8b4d3666eee513e958d7e26cbf428f3514f7acd4758f3cf5a0261826fabf0860c33ce34104b88b3dbbb9d9bd0582d91346d6d69388ee49c30739454bc5281459ad7b6be0ab706d2b6b72d6461c9bf7279433b6c1791e5e7cdcca504d71b39ddf4a0b27eae1aa88f834396ea06faa354f62b9dc3dfac48589fbeaa068d03b9967131c1f647b56f33628d43a846742307f2f3999c5ffbc2d49895c8430dd2789ab1b3281d6aa401f40bdec731af4977e6a75446f51f0a1cb3e51ff59b4b5acc2fbd6ec68a9760ba8d26eee0ae2223eb6316f352651182a0acce40f4d43758e46cc95f21220b586589ed4acae36ec04efee9fbe970dc155b66cc0bd4f4b073189d5739a16a921c442850f39065cc1fcd769e4062fff21f5a6e2fba5187ad72bb61803b6082ee1e995d46835b31c6229d4555e04a4c13a0be156c92b19df0f6c11b790cc1620b444cae60ce8921c3edd1da30c18080c3b44117ee362893554608478f5760ae8cf7f83e527c6efbec538397998f080a00a44850528fa79de9a2c7d8d656532d995153dc6a3eaccf2b5ad52a97ae6f2e117911834a639294502edd8d3fbbedb1616f01cb54e2b302b27525ca528decac73553cfc5fd4fa38bdaecb138cd39f792459bcece770e04e8d7f091f5424bcb6474742e4506691b355db8f84a7e3326411e903cad6427fdce0ff214c31f9f98f41283ef07d51eab9b3c142da8da329087f59f94c227b414144a4f3f718211bfcf77723aceea7628377183f031f52fc20ba492346de3e5f9b1ba65af39171f566fa25455eb927e7337fcd9973d74849cb52734044a01866a4806fcaca43405810bd09bdea864759d7dee193ba9f0437ff7f14f2d6a55c6cf4977e496996fa14a80770b74230c3fece97ecd98fcb57c328459958140bf02b87e60733fc4633bf8bac7ded94400e936921aca060024e6c69d5184bd83a77c8045e0fa156d06b2805434756cf97f9f79a2dec432a7b14fc8ab72bd4c03fe6cf013360f3b13f1a976f156cb24c9b81877d5247157a51262af46ba68aa571a40ed83788d37278317f925fe4bdac50ae858dbf5989d2ff5a076423532c3adf348389f33bb7fa2ec4a838028c0dee5c28169c9c10d4b165eeabb36db1f44a9bcf5594b7627b460661c81db35ae5f187d30286f400131452c293f0bf5faf2299741b45f3bebc736fb0b915d0adda0c50851d2717a8fd1203f4aafa3cf1321eee26bd15e79c6821faf2042a0ec983129106e41a7752dfc995077cf2c690ce0dd59c05c4f135222f6015a3e6c903aeb4a6bd8e1c7eb722bd0917a5cadff91c5e62d9305756f386d12182df302e16303a1e631b1d4a665720ae3119a4fd4b75b94bf6f5d3eda173eca9831f0d3eff8c374fd774a8b3fb49da17924820b079391c8b4850a2d82771ad28b0443c6d7d39d51904385f070516033e65e2d0f161b0129f13a137f2e523ec50ec068ab9604f7c1fd97d4128ce5f34cdce4dcc91cf78f55f4c66940b953038e61294e30aa09644a12d82bb6036e7233948c5ea06c715cc33f7bff376154c451e5c51e528fe502c74843ddf1746993a1688c9387fc9ea0c8791c651dc1ba015332fe1a261509e10c650ba242e269f8784f712be7332005140e091ffb0d246713b8a6e77280bef7735bccf75828aa8f967a9e0f65a09585edd1d520e7c398165fd613852d49de39295bca10f48eabe15e569825e5510fcd5868b67a28b83cffe1ac2e91115b49da67d3ac58dc0b7314f347cab5496871388277b6f6aafe7f7900dd72de49eae1d891b1eb1725f889773eb952a2954b955744cd108966ea85be67e566b36185821481c86adcf24460f9ef15d76bdb68e207f62dedaa0b22c7f9e5f552d5329441c0476e6c9c8db110f816f0116f099854607f8b005ba3443a96f54a8db25cec463766ac9756f4d0ff83b9f15b0854845292f51080e210acf30b80ecec0dbc47db846249e3e6262a0dd1603eed34f5455ab39e02bf56186a97ca5f94d14d61969239824537795ffd3f6a943df8b2dc6c73e88fb4102c3243f0e18ba20cfb1a43415a8e3ea4479b7794b855aa85b655406acd1c942d2989ba10cb907e9938117d8338ddc6a95eef56b4d64f597c5afb1e3b26342730fb6c2e2e6a164d8636468454bca45a587de21c294f0a7b391fdedbafc70525b760875d659c906cac5583f94e363e757fe52fcb5c90a27880b58719e016d4f026a9b70a822b912006aa5bd32c57056d7778eabfbf687209785edcc5260a75cc78991e04cbe3841a34d847dd36a5f1c210f1ccf4a46e7c54779dc878ed7028a1c01785460ec5927959079e587b138f8de5936ef5a040e764c8b52ab3d7317829b3239f7a2e9b328a8d1ddeffaaa4c6762d755987dcca5eebf271b9d2f35578fd446edbb3c1904f5a5c4a41c26e3b31d29101a09bd7924a173694f8b9e309d4aaa3c1085578e8ea53c5abcc5f2277322737700bf3b2881b02aa806b32829747e7e6a56b14bec88ef540eedbba15ae81001e882417bec4e5b45debd7db09418e7a7b40407a3389261e016768bc14d923d035abef323ec4f2289191a693c7a79ef5f0a89d6cca3e3dd10a91", @ANYBLOB="48ea804902b42a1e76735bd64f13cd0caecebb6422776a38c045e4e8c249be9db7bb60e39d91a87c0a9cd7bdca23dd347b73024c76db51b30c53e207d9224b8c6e38937db35be540feda6ae53570816071417d38f0b636ee86363a39fb4a6c741e9fe5c541d4b072448b44fa96b633602930c6d1d0ba941dd214eb9e4f5dff0a59021054393fda377a81ab63b0ce9454644cb1b5a2ae94a7577e3725f2dcd33d4653b790caeb1526d927d887bbf02612c079f27d50dba3be111dec4f0b17fd6c05dd7e6045a2aa7f530587a81d5b4fa3a563912d51cc14f84966f2af772f1835987f32c116b8d5338834abd456a7d38a306e51"], 0x68}}, 0x64000004) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x10012, r7, 0xe6284000) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000280), 0x1a9140, 0x0) 2m33.328785715s ago: executing program 7 (id=5625): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280448c, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_disconnect(r2) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x7fffffff, 0x2) getdents64(r4, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000800)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="de81e16854b26689713d0aff84ab45d2134874bdfa60471b3fe61d39a9d66a48a99763ca9058ed420db1ec0efd3182984a25bd94ac7ecefd68e361e982fe79d41d2b798cfa13dde5ca9837d4e78c0050615e620a621ddd1fbba1b6e6c3088ae56459e08e046135dc4d174de828567b249cafbedadc6fb2e244bbcf1aeeacc78493401d670327a7a9a26238f9dfcc91d9def6c01f37d5222ef75fd83cfe4d3df6746f5da703a425d669695b5c246d92ab538f27"], 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x276) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$uac3(0x0, 0xe1, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000008fd0701004000010203010902cf00030100000008c80100010030042004000000010130000a2401013b00060000000824050406a9617dbb785f340234ffffff0c001424b8660102042b000000000001ff00070004000a240c06050305f07d650904010000010230000904010101010230000a240201060106f715d00a240201e002067f1cf006240201016f06240201030809050109000904020000010230000904020101010230000624020104070a2402010203160031fe0905820900008105040a252500000000fc0600"], &(0x7f00000007c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x84, 0xff, 0x8, 0xff}, 0x21, &(0x7f0000000540)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0xf00f, 0x2fa, [0xff0000, 0x0, 0xffff00, 0xf]}]}, 0x4, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}, {0x95, &(0x7f0000000700)=@string={0x95, 0x3, "3bd602132399d2c6820fb38e0be890df50cd98a461a4645bf0974a83aa7e5f12685c493655e14d279227ff04371a5aea35a0652fe3278461c7f78a69f252be1cc34b2a04bdec25f5f124645519663fce96920cd10ec8059ad49ae7490d74c30366a1b74cf5164ee80d3eb842e6f293dda238bace8866bfa322550612126047db0d75850e34dd5fb7058aa387c110d39db1b0d3"}}]}) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) 2m31.784613237s ago: executing program 4 (id=5635): r0 = syz_ublk_setup_io_uring(0x2a8e, &(0x7f0000000700)={0x0, 0x400002, 0x1, 0xffffffff, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xfffffffffffffec8, &(0x7f0000000440)=@any_dev={0x2, 0xd60, 0x0, 0x0, 0x1000, 0xfffffffd, 0x0, 0x0, 0x80}}}, &(0x7f0000000400)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0, 0xffbffffe, 0x257, 0x0, r7}, &(0x7f0000000480)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x100, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffff8, 0x1000, 0x0, 0x19, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2000, 0x1, 0x2, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x80, 0x2, 0x2, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x0, r4, '\x00', {0x3, 0xa91, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x8) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000380)={0x8080000, 0x31000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="020300090c000000000000000000000804000100000000000000000200000000030005006c00000002000000e000000100000000000000000100140003000000010015004e1f00000300060000000e0002000000e00000090000000000000000"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r8, 0xc02064b6, &(0x7f00000003c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r13, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, 0x3e16, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0xf56a, 0x23c, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r8, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r15 = ioctl$KVM_CREATE_VM(r14, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r15, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r15, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r16 = ioctl$KVM_CREATE_VCPU(r15, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r16, r16, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r16, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) ioctl$KVM_RUN(r16, 0xae80, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new trusted:syz 02000 '], 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 2m31.377061644s ago: executing program 7 (id=5637): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045515, &(0x7f0000000100)=@usbdevfs_driver={0x80000001, 0x6, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="4007ff010000a38f41f322caa2409d3c43ed8264556f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m30.254517928s ago: executing program 4 (id=5640): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x3}, 0xc) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) get_mempolicy(0x0, 0x0, 0x5, &(0x7f0000090000/0x3000)=nil, 0x3) 2m30.002692147s ago: executing program 4 (id=5644): syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2e, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x1a, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}, "aa7eb08f2f3d29a20682"}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1ff, 0x8642) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001700)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x87fff, 0x3, 0x3e, 0xffffffec, 0x398, 0x40, 0x253, 0x0, 0x5, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0x5, 0x100000000, 0x40000000200d, 0xffffffff00000000, 0xe2, 0x4, 0x2}]}, 0x78) close(0xffffffffffffffff) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000280)=[{r1}], 0x1, 0x9e) write$FUSE_NOTIFY_RESEND(r1, &(0x7f0000000140)={0x14}, 0x14) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)=ANY=[@ANYBLOB="481800001d00000080858d82808082868f8d1007400000000000000f0d084752717b048b0f8c8a8e80"]) syz_emit_ethernet(0xc9, &(0x7f0000000180)={@broadcast, @multicast, @val={@void, {0x8100, 0x1, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x1}, {0x800}, {0x40}, {0xff, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}], @generic="d5c1c8f56d56ffde8a11897c2f70cf9f0d2137ba7a37e6661f7f9053046e7d5ec5626f45dc9fffce3fc54e6b9c5fa8d7ed6755abf2c12e41ae1989b8b54a32348e3eb97fc768d9a43561c5ccddf9bc5fee8302ff70dcb18db705f83f9b7b9d778e01af2171bac6e0df002710ff3ceb566a002341884b58c577772b02a9afa62bd6813b48e48720a13f6245624fb932b17f0ff9cb7139d3"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0x672, 0x7da, 0xc60, 0xb61]}) 2m29.71798522s ago: executing program 4 (id=5645): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x5d5, &(0x7f0000000b40)={{0x12, 0x1, 0x201, 0x2b, 0xdb, 0xe7, 0x8, 0x6cb, 0x1, 0x46d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c3, 0x1, 0x2, 0x0, 0xb0, 0x6, "", [{{0x9, 0x4, 0x1b, 0x8, 0xf, 0xd8, 0x85, 0xbd, 0x9, [], [{{0x9, 0x5, 0x0, 0x8, 0x40, 0x0, 0xa, 0xf9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xf88a}, @generic={0xc9, 0xd, "9c26554c9aad46d7674d298f1cc90db1f399303351eec324ed2e0152c459625f7ee8643e5fe086df1090bd234af763c5c19a994579a8296b3a7d11731466df4a1c401b600afc60f54af5fc2a88e48b807d27b93bcad2f58bd29a73d6522422ac0bc33cd55d8b5f81cad7c468b390e2009aa63e8a612d4f60ce8a3985904603e36f7792107daed5e214b6b7cbce0b077e1179b1f9077981c2ee1b95afc09ff6372ebef23a65528e7834866e2babd1d1838f2e68e59dc876c20d071f631a841276decd82e7554648"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x4, 0xfd, 0x27, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x10, 0x3}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x4, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x3}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x9, 0xff, 0x2}}, {{0x9, 0x5, 0x4, 0x10, 0x10, 0xf, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x9}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xd8, 0x0, 0x3, [@generic={0xbd, 0x21, "0c6705f50ed565723686ecfb201f9c55d42909bccb76da17ae59369a7c72f070039e0ab08b823be430841e3481bf676cf7f61fa21407490baeabb6299aa2a1b6347bcd602a49bee3e0b79cecc84cb14da37dccf04f470e5bbd2f3b833e9b1e805ef477794007f1a0110a304363a82e478efd3a8731d05dbee947c13d22196cf009dd9133fa652c3121bbd79d3432c894b360c681ed641464e254f7d77ef9de9c842117e04826fa4ddec215b62615d9aabb342e3b21c2b69d4b5c4a"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x81}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x5, 0x85, 0x3, [@generic={0x3a, 0xc, "7271c3b0fea5d425eab909e2d83ab4f140f07858962f8b19365dd4c5bd177f1542edb4176466ea59ca629cbe6b777c9e4656909ffbfe479d"}, @generic={0xa, 0x30, '6,Fa*j1U'}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x7, 0x9, 0xfb, [@generic={0x98, 0x10, "afaec2a46bdac66347aaf74db23d62a40a7ecf31bb6d5a11bac34606f1748e60cbbcdc02c7f2d6962d2bc6b1493fd77c2203ccd4b301e6eed85e24da8a3cb69b6d390cadb77a3b292218c98b4f72808de58b3f68b4f3b24a876b13656fa55eba4d203a63abd1e47c5cb718cb00e5fbd71080c77e1cf9cc08cbd50b947b0e9e132d1da528b2042e27dfec374e0230fb403dcc7834ac0e"}, @generic={0x100, 0x2, "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"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0xb, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0x2, 0x8, 0x20, 0x9, 0x39, 0x7, [@generic={0x68, 0x1, "e76955c5d038480b2964ade845d4ba5e8836e77cc79c2a2a031c5dad190797dff300ffcb123eff329191430b4df4671327820a5ec0398850af61d4db43127d995ed3dad724bfd92fa627e22ca7a2f9eb277a29d55527b0bbd2bd4a15dcc61a93397191887dcc"}, @generic={0x46, 0xa, "15ae91afc0cc0f899e3bbb563502d8bc8c52caec5fe32ed48505d6c8fbc1112ca1812b90e170459e4048888974dac6e9eaa671eb7d77c1340a379342af43acf9dbb27254"}]}}, {{0x9, 0x5, 0x9, 0x2, 0x40, 0x5, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xa, 0x6, 0x9}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0x4, 0x9b, 0x2, [@generic={0x1b, 0x21, "4d73a4922906a82c8b688d63bd964eee1777def0cd8e1347ef"}]}}, {{0x9, 0x5, 0xa, 0x1, 0x10, 0x1c, 0x5, 0x9, [@generic={0xc0, 0x21, "f0f97299df5b5960f162fe49ab470119d4d8f775cabd93f348588d0322baa6fb1e00435aefaffc926c1a001bd4fa039f16511dc6a398e267f3585adc624696b61fb0acdb1c754ba9046b031b6571619a7854a22b5df11432f9e759ac4b88a6285301da4c6da72aa6d19ce4c60ede4cc3b475197da64d99a98f957b9daa3b9a3d1b9ccd0af4a94a99e4c27ce01eae7455fe664ee9f475963cff894e915d4d1efdba2a388ba3649490641f7f024e02d7a568dedfcf955656c78ac9c5bc81ff"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x7, 0xea, 0x7}}]}}]}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x200, 0x0, 0x1, 0x8, 0x8, 0x7f}, 0xd9, &(0x7f0000001180)={0x5, 0xf, 0xd9, 0x3, [@generic={0xc0, 0x10, 0x4, "5e04b88b4d237f187c7cf8a095e2b1a0c3d325ef597eb333acd14dee7d6c22ee7f702fc95ca0e6457a6d3045d7ad4e3ed84b31b0c01d3350c3af4e216476b0f7e57e9b328cac65b15f6da72cffeae5c0c1391e3e2deeed4340010f8bc69a38cfb0556e5cb548aa7e92bcbdb3456bee5a2658a1d5c73669256197f56881a3e023d72be1573575f08ef063aeafa59ccaa15ab08498174af356502fbe27892a28498f6672073c82cc2d7f6d3bb2f7e6d8cd8a772f3ff862275d9b5683e2dd"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x8, 0x6, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xfb, 0x1, 0x8}]}, 0x6, [{0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0xf4ff}}, {0xe4, &(0x7f0000001380)=@string={0xe4, 0x3, "681b9a067a659a5d09490b0be785b9b091bb7251782f3030e68d346f79928515c3e2443c94d2de79fa43db999776603260dad72055fb2383689268726ad84371a323d7579e7ca6d74b3fc8018df04ce4096d801f5702c6e4b90abfa27e0ef2c5d3d30f1458d348edd9826bb946b286ef76fa53a475de8886eb042fd7d075fc3b003971770e54259d690dd9fa59a907cebdc021e633909e9582ad21d35a831182f5daee18308f83a67aed156659c883bd9399567b02acd740db42a31c8b6c7bc51ddf7c21f77cb2ae22f27d4b330dcd6c9e90bc7fbba462a8e98e5f432a1b55f98440"}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x140a}}]}) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mlockall(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 2m27.55476728s ago: executing program 4 (id=5657): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000080690e0000009fffffffc2c1414aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000500000000000000", 0x58}], 0x1) fcntl$lock(r1, 0x25, &(0x7f0000001480)={0x0, 0x0, 0x400000000d240, 0x3ff}) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xd63e, 0x2}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6e31d7d9, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1b8, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x808}, 0x8010) memfd_secret(0x0) 2m19.824103192s ago: executing program 5 (id=5679): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280448c, &(0x7f0000000380)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000500)={0x1, 0x0, [{0x0, 0x0, 0xfffffffffffffffe}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000340)=0x1) syz_usb_disconnect(r2) chdir(&(0x7f0000000540)='./cgroup\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x7fffffff, 0x2) getdents64(r4, 0x0, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000800)=ANY=[@ANYRES8=r0, @ANYRES64=r0, @ANYRES64=r1, @ANYBLOB="de81e16854b26689713d0aff84ab45d2134874bdfa60471b3fe61d39a9d66a48a99763ca9058ed420db1ec0efd3182984a25bd94ac7ecefd68e361e982fe79d41d2b798cfa13dde5ca9837d4e78c0050615e620a621ddd1fbba1b6e6c3088ae56459e08e046135dc4d174de828567b249cafbedadc6fb2e244bbcf1aeeacc78493401d670327a7a9a26238f9dfcc91d9def6c01f37d5222ef75fd83cfe4d3df6746f5da703a425d669695b5c246d92ab538f27"], 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r5, 0x0, r5, 0x0, 0x276) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) syz_usb_connect$uac3(0x0, 0xe1, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000200000008fd0701004000010203010902cf00030100000008c80100010030042004000000010130000a2401013b00060000000824050406a9617dbb785f340234ffffff0c001424b8660102042b000000000001ff00070004000a240c06050305f07d650904010000010230000904010101010230000a240201060106f715d00a240201e002067f1cf006240201016f06240201030809050109000904020000010230000904020101010230000624020104070a2402010203160031fe0905820900008105040a252500000000fc0600"], &(0x7f00000007c0)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x201, 0x84, 0xff, 0x8, 0xff}, 0x21, &(0x7f0000000540)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x9, 0xf00f, 0x2fa, [0xff0000, 0x0, 0xffff00, 0xf]}]}, 0x5, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1007}}, {0x0, 0x0}, {0x95, &(0x7f0000000700)=@string={0x95, 0x3, "3bd602132399d2c6820fb38e0be890df50cd98a461a4645bf0974a83aa7e5f12685c493655e14d279227ff04371a5aea35a0652fe3278461c7f78a69f252be1cc34b2a04bdec25f5f124645519663fce96920cd10ec8059ad49ae7490d74c30366a1b74cf5164ee80d3eb842e6f293dda238bace8866bfa322550612126047db0d75850e34dd5fb7058aa387c110d39db1b0d3"}}]}) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x7f, 0x2) socket$packet(0x11, 0x2, 0x300) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100)=r7, 0x4) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) 2m18.750578876s ago: executing program 5 (id=5684): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x1}, 'port1\x00', 0x786520dbf34c80fe, 0x20a03, 0x20000004, 0x0, 0x0, 0x4, 0x400, 0x0, 0x7, 0x5}) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) timer_create(0x5, &(0x7f0000000100)={0x0, 0x10, 0x4, @tid=r2}, &(0x7f0000000140)) r3 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) ioctl$VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f00000025c0)={0x1, @vbi={0x8, 0x449, 0x47524247, 0x0, [0x4, 0x3], [0x40, 0x2], 0x13a}}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffff}}, './file0\x00'}) bind$l2tp(r4, &(0x7f0000000040)={0x2, 0x0, @loopback, 0x2}, 0x10) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000680)="8f287828c221175d9dbcb8cc6b552704adab270a13904ca9df34c040944e63fb878c2ce6d97f558ae7f4abcdde93a871288fe46dc8f143aeb93774b9cff9261389ef526a62a75ad6ae7013c020669bf08d24124ad88216a26c27d74bbf6ea7c1d143894f76ea541367cf712142594fb8b9cf2fd1bf32766b8a21252bc1722bca1ba0233c07de52315d94a091d6aa2303f62714c2a7af5032932d2a4383c88f305713e8cfaf755e1390c1ac98a1e4904deb0a3d40f6131bd8", 0xb8}, {&(0x7f0000000740)="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", 0xac}, {&(0x7f0000000280)="fb5239f9f4e460f8080e4293c480a15ef73ce2d3623d67640fa5a43c166a5ee67ded5e2830c59426681ffa5f9d7af14dae12afd96d8b70ae35999974225933c48f02ec1329f8244b0ec1e17e394af49d03528af25dd692639fe462fb349f6a4e9a78a2e6eb4c29e0b757fd1c38494ef80e928eeb48dcf041c2f36129e9fb1f6d263cc5bbb089a957f356e53779e6e6215de35ed5952b6a6eeaa9c862a78d781d87332544915a2633e4324e4504ed579ad00ddbfc1775671036926fe7079028fa23371e7664976ca36a81e38ed62b812e28b5be433c7594ededf96f", 0xdb}, {&(0x7f0000000380)="2274e2a2d3325967d6ec44bd21e01d508740bf9488e72cce8d828f77a3343ac139e9de87df10738052b518cfaf5c5df8959388a77a440c853109d83dce822713e49de68469c8ace193f14b0451721aa913730e0dd1ccf0220842dfa094b42f97a005d69d641a3b14e6465da6ac599488f42452b31536ebac0fc7b836992c3da7f1b56e47dcd968482ba6ca6f55843d8dee220769a874a61ec2946bd87d28ddaa741914afb6cbf2262e219e5694f300931f23644e5188635fd9dbeb218109ba4175167971cb2e850a897effac5560043d8925572fb7daebe5e4530d71dc85efd090bff867c5e071fa9f", 0xe9}, {&(0x7f0000000480)="1f7dee5d70f137ed7c1b732d074865ee1b1249fdb71f6c3862778b60a02c0b04ffff66eee6e7687dc37f3ec2c59cdc29c74b6022b4eb09943576a32d0963a334d1022be9a77fe1944b06db94edd8260f498fa8d7ba738271dd3dd2143f005dad35c6d61a10860ef6f668935d9d9c8bc5e4ee62b36dd16ccc14d18238f91ccf2fbeee736be5fe6cbf4ec455938ff83ded974ec62463f0778bad0a1b4ba518d5faca5eadde06e8f2511a3e17cfac3a4c6fab6b", 0xb2}, {&(0x7f0000000600)="6c106591d9393b442bb465381aa2cff7232bc488235663d564ba38cbb64c3458ae2651617b8087abe89dcc9fba53afa68cdf0c6edf796903632805186e296261a78aff6e8b239efa16a32615c59bab0a8d14cf3dc99f5286520ebc613b611bc5dc09790ecb962efda82da41d84fa9e4b2694f82f", 0x74}], 0x6, 0x0, 0xe}, 0x48000) 2m18.439120418s ago: executing program 5 (id=5685): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x10, 0x4, 0x0, 0x0, @sint}]}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x114, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x34, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8}}, {0x18, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x13, 0x2, "8a47626ebf9f9478180d55fd34e2d6"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x10001}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xf}}, {0x6c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x68, 0x2, "5cefc317ad4e74deb2ed4adc5105d26a0511227a634a9722b293f0bd0e84c6e06a06c9fb85e0f485b623e145e1955baf10bcb9a3b5f3b0590b4faeeb446373aa50ef20ab2931b9ca510b487b3cb6ca4265d5920e6dc43dd9760b50f8db30f1844c7a95cb"}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x4}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x27, 0x2, "91ea909b8c6d0578a8841670e8d2de561cbead09b2b556eac6bfa89029087971c877d4"}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x20000084}, 0x8890) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000140)={0x10, 0x1}) 2m17.950409595s ago: executing program 5 (id=5686): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) poll(0x0, 0x0, 0x8000007) syz_usb_connect(0x3, 0x24, 0x0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x44023080}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r2, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x739, 0x2e}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c50b7af97c1ee1cf5bd2f21e225d3240a6af53baee743f2b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "428f78006f77c510ce2d90cc5cf0d21768e8eadd2106e49c"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2071f7723b517701997a5f12d1f8763853d5673e43af459e"}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}], @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4040}, 0x4000040) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r3, 0xc0045009, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000003f80)) 2m16.320448737s ago: executing program 35 (id=5637): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e60405000001010203010902200001010080320904000002080650000705810200020007050202"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x76, 0x101341) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f00000001c0), 0xed) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0x80045515, &(0x7f0000000100)=@usbdevfs_driver={0x80000001, 0x6, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="4007ff010000a38f41f322caa2409d3c43ed8264556f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2m14.831116047s ago: executing program 5 (id=5697): syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c2000000018081c2769c767977dec200040008004510001c000000006ed0d6d97a4350caef00000024"], 0x0) (async, rerun: 64) r0 = socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) syz_clone3(&(0x7f0000000240)={0x1400, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)=0x0, {0xd}, &(0x7f0000000180)=""/18, 0x12, &(0x7f00000001c0)=""/48, &(0x7f0000000200)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async, rerun: 32) mbind(&(0x7f000093d000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) (async, rerun: 32) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) prlimit64(r1, 0x2, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2m14.365720154s ago: executing program 5 (id=5700): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc101) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) socket(0x18, 0x803, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c0000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r2, 0x8, 0xffff) r3 = dup(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x6}, 0x5, 0x3, 0xb4, r2, 0x7, 0x3, 'syz0\x00', &(0x7f0000000440)=['^\x00', '#\x00', '\x00', '\x00', '-\x00', ':]))', 'connbytes\x00'], 0x16}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff", @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf250e00000008000500ff0f00002400038005000800060000000800010000000000060004000008000008000100000000004800038008000500ac14141b0800030003000000050008003400000008000500ac1e0101140006000000000000000000000000000000000108000300040000000500080001000000"], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x1, r2, 0x392) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m12.538869954s ago: executing program 36 (id=5657): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000180)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) fcntl$setlease(r2, 0x400, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) select(0x0, 0x0, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004a00003c00000000080690e0000009fffffffc2c1414aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r5, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe80000000000000007af791950000bb060004400e1f00000500070088000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c10000500000000000000", 0x58}], 0x1) fcntl$lock(r1, 0x25, &(0x7f0000001480)={0x0, 0x0, 0x400000000d240, 0x3ff}) fcntl$lock(r1, 0x24, &(0x7f0000000140)={0x2, 0x1, 0xd63e, 0x2}) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6e31d7d9, 0x3) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x1b8, 0x17, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x148, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x808}, 0x8010) memfd_secret(0x0) 1m59.302475522s ago: executing program 37 (id=5700): socket$nl_netfilter(0x10, 0x3, 0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0xc101) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) socket(0x18, 0x803, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c0000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$cont(0x21, r2, 0x8, 0xffff) r3 = dup(r1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0x6, 0x1, 0x4a7, 0x6, 'syz0\x00', 0x6}, 0x5, 0x3, 0xb4, r2, 0x7, 0x3, 'syz0\x00', &(0x7f0000000440)=['^\x00', '#\x00', '\x00', '\x00', '-\x00', ':]))', 'connbytes\x00'], 0x16}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) timer_create(0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="00082abd700001dcdf250d0000000c00028006000b000a0000000800040005000000480003800800030000000000050008000600000008000300020000000800010001000000060007004e23000014000600fc000000000000000000000000000001050008000700000050000180080008000100000008000000060002001d004000060001000200000014000300fe80000000000000000000000000001408000b0073697000060001000a0000002400028006000e004e210000080003000200000006000b000a00000006000f00040000006000018014000300ff010000000000000000000000000001080009002b000000060004004e230000060801000a00000014000300fc01000000000000000000000000000108000800000000000c000700000000002e00000008000800010000003000028006000b000a0000000800040001000080080005000600000014000100fc0000000000000000000000000000012adc0866798d2e5b336dedde0837fc63d2e015dba547e07031b5bc689178a6d5b6a20fcc1695f82b6ea739d6477ac0e47ca72305c298b5a6e644ebe8d0df1d1e14db56ba492e12d8d872aeb8ab30106726f9d48961"], 0x174}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="ff", @ANYRES16=0x0, @ANYBLOB="000826bd7000ffdbdf250e00000008000500ff0f00002400038005000800060000000800010000000000060004000008000008000100000000004800038008000500ac14141b0800030003000000050008003400000008000500ac1e0101140006000000000000000000000000000000000108000300040000000500080001000000"], 0x88}, 0x1, 0x0, 0x0, 0x4004}, 0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f000088f000/0x3000)=nil, 0x3000, 0x0) setpriority(0x1, r2, 0x392) socket$pppoe(0x18, 0x1, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1m27.482259945s ago: executing program 9 (id=5911): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x8a, &(0x7f0000000800)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfffd, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x0, r5}) sendmmsg$unix(r3, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000019c0)="ae", 0x1}], 0x1}}], 0x1, 0x4044815) write(r0, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0xffffffffffffffb6, &(0x7f0000000180)=[{&(0x7f0000000080)=ANY=[@ANYRES32=r3], 0x10}], 0x1, 0x0, 0x0, 0x5}, 0x24040850) 1m27.076401323s ago: executing program 9 (id=5913): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000c40)={0x2000000b}) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0x80) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="004008000300000000001400004500001600660000000190780a010100ac1414aa05009078e0000002406876cd297f3b3bca004ed40b0f6c0068002f053300010000000064010101442caf63ac1e010100000005ffffffff000007ff00000000000000000a010000037f00000100000005000000000456f988c00af023e097c108939efdd23d680c2a13aa47a1df2485ef0a1e177fb7225151b91b4e7447147cae92530f1f42bdc11df84fd9386eeebe24d4f26c138af751a1aec54d202c43f3ccac4b9e3cfcfa5ca7d98db8e6801baab7e35c835f9feb655ea2dd587fbf2e71761a5778bb953a896cce7efc2c573976e727bcb5399626a3a8"], 0x6a) 1m26.489584346s ago: executing program 9 (id=5916): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x300, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)=ANY=[@ANYBLOB="0c010000000000000502000004"], 0x18) 1m25.958241633s ago: executing program 9 (id=5920): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x1f, 0x0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0xff, 0xffffffff, 0x4, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x6fbe, 0x453, 0x2, 0x663e}, 0xd, 0x0, 0x2f6, 0x1ff, 0x5, 0x15, 0x14, 0xe, 0x4, 0x81, {0x2f39, 0x46e, 0x5, 0xb187, 0x8ffb, 0x34bf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x8, 0x6, 0xe, 0x0, 0xd13f, 0x6, 0x1, 0x5, 0x37, 0x94, 0x0, 0xed, 0x0, 0x2000003, 0x400001, 0xf5, 0xa, 0x80, 0x80, '\x00', 0x3, 0x2}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f0000000480)={{0x80a0000, 0xf000, 0xc, 0x80, 0x4, 0x0, 0xa, 0x6, 0x0, 0xb, 0x6, 0xa4}, {0x0, 0x6000, 0xe, 0x8, 0x5f, 0x0, 0x0, 0x9, 0xf, 0x5, 0x40, 0xf}, {0x8000000, 0x8000000, 0x4, 0x8, 0x4, 0x1, 0x8c, 0x6, 0x7, 0x99, 0xfd, 0x1}, {0x100000, 0x5000, 0x8, 0xe, 0x7, 0x5, 0x1, 0x87, 0x5, 0x2}, {0x10000, 0x1000, 0xa, 0x0, 0x5, 0x4, 0xf9, 0x6b, 0x5, 0x0, 0xfd, 0x80}, {0xeeee8000, 0xeeef0000, 0xb, 0xf, 0x30, 0x3, 0x9, 0x8, 0x8, 0x7, 0xe, 0x8}, {0xe6ef8000, 0x0, 0x0, 0x3, 0x53, 0x4, 0x0, 0xb7, 0x7, 0x5, 0x6, 0x7}, {0xeeee0000, 0x1332b2000, 0x9, 0x7, 0xfe, 0x0, 0xc, 0x3, 0x0, 0x6, 0xf9, 0x6}, {0x60000, 0x6}, {0x1, 0x3}, 0x2, 0x0, 0x2000, 0x2, 0xd, 0x2000, 0x10000, [0xfffffffffffffffc, 0x4, 0x9, 0xa]}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r12, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r13 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r13, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'xfrm0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r13, 0x80047437, &(0x7f0000000040)) recvmmsg(r13, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x21, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 1m25.619438156s ago: executing program 9 (id=5923): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x4069a064, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="4e7417f7f0afaa93ec1feb61e6ecf74becf5b64c4498ace47170e3439f9db3344aceab3d192ddef8789f7f826a9732df1f1165a989ed666ec2a96eb78b40d1fdd5d53d8c6d56a19efc82066d026cbaa27ee8352b2ab989070bacd96deb903134a387cf0cd7fa82de91ca1193f7ccbd5fb2bf8398e9e5e1bace8f81486378b42f308d9a55d3c14c642591f333cc6a6aae7abffd8de21e569c4cd0219c7b72b44c6b43a5c9b11226ac8cdb1760e405121fbe45ad7349b581cdf811c2cce1585a72ca327313353579454c3bad2460f16ba64d86984d8fd0d61be6902f1d5c92a4b1aa8ffbf256793899af036634d15895e11bbd29c1ce6f9a1114d48f9fcd624db25507c962549a97d4d21619202e112c08e486d7acc55d5ab8e591ed2da9b7e325fca61855a511c7170100f023a048978e5711eea42caa20405f64a5861b2f57e81644750a0eb3498c5ca76105ac6ab2c5c50e4f9b1ff72fcc6f3a01f98119cb4e8dafcf9e35426300018b8cc649c17fcf87999e0d6d1a4c501e9d92934f912b6740d191d9ca4c142b7782f83d3f4862989633eb043b21563a8360c47298fdbc3ce7ba271a5c317c9c66b6a535e2bfa7d7ae54c1ede664560b58e5d4de9cafb2d43cee207612e632cbab64c99b24363d2a57d064be77f0846d003dfcd2d26138a5f9b94205570e1137d5b72919551f25fcd73a5c612e4affc15a868413241eef86b65d0405de5a47384e51810784293333777efe59b8312e59f3bde54ca8a521932103473dce1d2db1f4fff7d338f98fe1243027acc019709d9eef6af6f8fcaa1b7bd6e5048955cfe725a9682bd3f5361057360fe4c163175606d89b380b295a0139dd06404aca8b1beb5a9be7e57964b74344fb1336e126d570e5cf2b64fdf6ca9d33d7b73b4c13c4ef9d1ffd2b82714a78a57b1bc630bbd6d4e63a847e1146376ed4c0585adcc053bd8acdc6df529f3b251de651d3e6398749402391c613f34a5f7e6099e76842e8d66a78cbaa590f6593bf87095bf4a1015a2cad2c13d8656db8f226387fc355a9fff471c93c3c10b265f7472523aeaa5d08f753a48b096b913f7c030d7355f68c9d71e66919373daecc64d14dba60283f49101d6360df9cfe65ea91338e31767b94a1e1463e134b6f19ba51d70da4391341231d5466dcaa39711f227d25f9b320a004243b4f8edec5d8a498b3732466e3bbb548368d20a78c172099647f5938ea6c1ff8c94a37313e871189cb9da58271add887459fc89e615e5c99a125fef828d661096f74fb8b4edb8cd703615b8c732995243b2c826b888eeeb089cf10bc187d36ece6ee30d60c46bd6fe0508aa8308dbf834fe0aaa12deaf4bb1b9337e63b13d6076c5245e27be4fd8cceb433b9608569fdc85dd6c04f37259851566f1f1983536aed757671fca1a3f6615ad5fed80ac36609c6f879f86d8c11a357a04a1113ae2d356433e11ae50169ea71ca614f7171508319cc0b7a9decdae434ed2bd3a313ab41999d09f3cfcaa80924129f77b89173b3a877b845285cbfa9e51fdc0fca6a3c72748cd88173cd8150c825bb0da72518485a3e159422dda9770dba5cb4343dbccc5fc1541e0a157a5295adb32ba7526ca16e6bca5342ce4e58e9cb567670a5acc03e2eaac39185085aba969c97174057026c1e170625c09061583142b21c91c0f8306392c2be9ed372ede666c3f1186ef70f493110e94cfebaaadba5938a29a669c94562e571e607f2fdba0c5721e2026b6a490f80afbbb5c71ac7f8a9fea566284bce2039f5b2405f811145f4ffbdd7e8febcaedfd162fc503e1a29bb63d88a465c66339f1553dde48991289451363ff349587e4099469a5052b4b337baea3cfadc28319e3a24f635d8d5ee8500503fbf1aff0bc1e6f50227cd79bc9e6c2a5ab0f0b92a1e3c6f81e3578f7ce5071e0fc77cdf1d18fe77dbf4a6bfb2587f8e8e317f98ede1f8f32a64d736f9a5c451a01cacfcc0b9099c4808840c2948cd8998abb4badbe30d93a55cfc23df97998efa139ce8681be3b4032e536db63d9c3b7ca6904ae3f0abbd740385be14fe6764c74e19d8efa9e3580252cb25d0d3e2eae1b82f4187b92173189b5f2d4d536c126e453267a6c0410b872cf0f6e2e2b82a527667f598eb0c87bf1723a63a213e22e093abb757af27a53c0f6f3e29c32aeca4c619d5c8f49d41424ddae64ab67ae7286af0fd931e93d06f711b70cc3c6a58a392392bd4623d25144e840c1539a0b8b29ad19d7768c4d2764ca5f8ee72d96a3eb5358bfcad65dc575cfdcb52c662d33321a96ab197aa4d13d984a2a18f94345373fb5dfa031967614dbf070e24c9cf11a8fe8a128aced2d75e5203099db970933abab5ef8f84b1a56c1b2384e2d9413d41226dff043fcd3d8b7bd833aa02d6016e9f756adce96405cb530e7b5d62b483d6e4a5df06cd553581bee273483c243127106df7fabf5daa98007f5178254f8b5024f994c98770cb0267b6a3bdf819d2ac74dd2b38464a6542c28c8ef9220f2dbe947efcbdac9ce81748665957b2ff1b11f73e79154dfb1729f6d6011adb99e4b30f4ae6b1409bfbed29807ad5e02150f1af53e305049ac26c2b28c8ee1f6cc40ddc48ac831ef3ed2e157cb513de06e1fe69f1d66d1a0432f75eebedee30b0523d71e36bcd0f622d95772687b59fec199087dd09c7eb88329d6aad37f3c6d4289dcb799d9349b4b8b401723ec90e06caedd02f294cafc508b03440890aeef82fae39c677d58586d973e5d8c2f00c34f12efa4c8b3b73c1b0941bf8be3ac8119e7d4ebc8e6853c459ab8a0567fbebf1e6036ed187d7f9f7ba0cb8b887389adc41dd23d027009707662ea429c71f01bdfa3f0bffdda25d2dcdc725464e3d4cf32c6f95dcf90eec4978b9af79c92a359fb5bd08776fa77b20a06ed65c64c0bb7a4e34e9e6e85d6e4f4ee34fc7a9e404bd5213f49704082558375b1a76d4e6e84e678358561425108bc7b3630d0a801971e32c037434b80add0a10d5509ef436bf9a8cb5c0a0fe125614a23688ae18dad4766b1339d7080e51af087cc2dd029dc757098d1bfb9c975af94e0d37e9a24c6a6661c99fdcdbb95d023dc016abdf81c1a09b8b4897ed1f2512aea923b362752cad64393673dcb2dce3d63e379f25c340559a98abe43589879a3537bc88526f1c8499db48bfa8d0b51118b3992930cbfc99e48d815c56aad1560c0fc25540a82e17fb931360abb23d748152280ba1603fff1cac0a041c6f9ab949a059f050144e61cbe5ffb8e272f115cbc82bd62cdfb9759a63e77d3cfdb0a25e504aa5a1e4eda15fa2e1e1a7bb18e74e62a13fce33900d760d89608c79f05b9e11be34cdffbafbdc60838f5a6f76cd8a3ff1072d90462f77abff31e054f3f552772ea750f451d091cb2fd6eef92a800a7837a28ab1be8885b6f9eb18a3093fd989f697bd23edb8075c7120ff375ac72576d625080e107843aa7523fbcea78c18b9762a89e562bf098d61b5b2f2521d709a9611e312c7691f47a503823fdf715afcc6ed3e11dcd0dd77a272cfbdbc2405e26eaf4e2698b9501279dc095c8869128af162383795ea6a14b6cd0b1cb3828b4d98cc4439d8dc51c20ae9e5328bb05a59151818d6526df969384678dd202fd4415f94b861b2ccaf8873680ca6cb9d9fd12f26c11dc6bce36cebbf7734b7bc5a16d882407e26cac42fc9e178af21478c782ac0418c2ecf1876ea2cbeb946b881e460fb81c02c2a91b859927ba4e72f7d03091b3dcc460438ee1aa7ac00f561ccafdbef63ca4286ba78b38c443d470dcfd2211ca74703d27d1cba021071da6559505ddd7f0c8b71115d7196318bff0d2a3381573f79f23c7cb8de2d2dd8d9b86268586a614880ef74c92e5fc80906f453f949afecb888337d591fad11d4efe7ed1cdac88a0569e65ef9733f0a2ab70a323ccb10fbb98df982f0ee5596665ec52a2935d0e3f9d83175b2aca4ed312e622bae00fa4171e73c168735e79bc21561ef91f83adc582bec05a44d6dcfff78556690c9b104d5e64ba7f8481c38c1b7e35038fb60f2beb7ab4a64c9426a498ac3cc1c6c192b6e95215dd8907593b523a399b583cc21808b4b7c237a069c59728f58dad4b00fcf21f70f91713b056db9b3f8a9da36fbf641e1681f6c56a45da353b116547cd4506ca1289b595b475c2596707111f05037557adf077d467b01cc787717842add3a0767d195edcb05a7598a4d1b3baee786a969e87beabf8221ce2b2f9010a85eb31911baa39f1c59f289116d8b9cd360ab400eea764537511b13c871e4b497ec78be7043cf1a737764f2dc810862d41f0c32d0a3f713e9243df3777fa053bfb646b8e1bfd6675e96404e9ffcc2bfe30d09db0684bb8ab8267a34705eb57f374cb8280964a8171c2b8b237d38d44018d79c8e375e21d55178c12bc96e429b339887a821bf0132d55e1ecb161165e9b152034ae6e468c175a71e657dfdafce9ca273ed84b4b469f2e4bd8847d0b86e8d12c19bd18083f97ee1d00b588427d09b54c1b3254e53dfe48b5c19fd6a899994fafa1b31d1f17dd20a69a3b20e9b31527c7e076ef1c9333c00c1b94d5dd71305eb096498202a276870ecd7d68e5737787b2e8ae158022397bf77829adb0b807473a139d4896e30e35aa10059e38fa8431b647dbd2ba57855a82b816d19cec134a378e9cfceb4654bfe77721c10025fa24e1149ae89822441c2fdf655e0d70bb50836352cabed3630689c35a2984671ab9c963d5860a3689c8c1562228d397d0a3cb59e8602d7e72247e29656ba04e53cd2659511274d766cb8d78755f2a3127e2c70b91dd46ba520068d80f6c4115f2b223a3f606d194f5c37bd80550ff5e9aaf4ce5ff329012239f25c12efd79a697362f90d42cac99f323f99b45b918088c2590b6cfe8a1795492d1520e51ad7a2c403901c7809616710872d0c3d67926752d308ca84916bcfcf9573501227318822d40d00742992662cd629a0cf7f688d326fbd10f201c459c7f463cb34b12f8854c4df436170e3c97840803771caf57ff87b70de5cc4a8ecf45775a4f8849df99e6eabe0bb64bb7f6af35701bf384bb04728f87a31297341a662912925e5f0806a682148efd04b099022f1aea22e3419d157dca427cea5dbbab7a0ded30641d16a83fa26e1551d4a5e8639bf175e1dd80448043539083a379aa9ab4e07f54662c9c4e45178f43cca3c61552c7db984f56d35fd41c41cf8d176d76b2ddf0a8e2c36621cd7c49b411e4dc516da4bc418b2410ff1306c639f1a17f36a62229d2cb32049022d2cffbdecf467f82c314a0388f5c74d7600e1cad70e2fedab09ec362e09c5c18d7e38fb5eb48c1dba21ca96bf9ae470de81f7231048fde18225f64f04e1f322e25e45e0a8e4240d6035bd4ac4824edf111553edb5d3e1e432460cfc48fc7783dfcf26f7e4edb510c201d097a3e4a7d24400e68c24ef57ca2e90176fc32c76b2d9d2334c0a011de42c04306664f40ba1f6d25d002e6331234b9131d6783536d49acfcd47fb83e5380df7a2c87574e26ccaf595ba6849d6f855cf19bebf271592b2bfbc2d7bf998a0012edf01fc6b00f911fd662b6c33d896f7c5c32a2f91037255a16785945e8c3a8dba19889969ec01a3da9c836365305b6c944fa95484a6a50257b9da0bd3ef7bc055c6b0abe09003200298a5ddf381e8eff042aa2eaa2f07aee41a30260fcbb042baffd6e022d725b4b7805a3550109f0d92bb33092294f2b2a84a965550e1b23d13a57f125eed60206d75db2ad5fa44f37a0d600fc7136b581a76bafd3c01ed229ad8734e1b044107713bf6c779600622ea3358ba78f1a8476d934cb9fb19f799aef8a4a232e986a5da978d14fe64e918dd34b8ba29d44f0366b527786fe469941587b0cef4a515315e78b93b52f88a3191959b66e320c2272fb115255ca0d7b88e1bca06e71f90c3dc32fdd3dd8bc1c5e71f606b648c49e9e1486fbb8f24873826faddfc876ea79a2446423f4cfe6b0e94fceaf21c6412e2f9f8e7e2ea9fef73cbb227ad9d89dcde0b92f075b57f3d82b69c297a70c4e27c143e62e13e48ae65a874381763a870cbcbddeba6fe7bf9904c492c0d433fafea50f89ea8fa66ebead1ab6e751914c45e164865ae49bb44d5db40589f5c601b8c202a62cf91ce26753e7e9656d7158a6b39e44ec92d2aacf60fd0077d14dc92bf406c99aa54971b28ed81f3f39fe8d0293e90a494b6dd9b1c90fefc859655cce4eabb4071380cc41ed628f83b0909e56456536afa595316afa012cfad467884e558565ca6f162bb8c012939800eb664c30ebbd5057c26cf67cffedef77c9af863f7293dfef1c2b7c5f54d84547606831b47e177d3edb370196afc7312325b0877676b41c625850b62b05c715fd4892e0878b36130b8e3f5bf8d8a714fc32f3b9b9b380dea0d55806c62b798947b6ad5dfe240aa95bad5407329d2a4ca1ad6fd1233507149333809b4a9d5e295f944e38a86d45c04d856d280397afff31bbe161b18f153389ec47b999b8ceb38305f801d25c60856517abd16b8e9ac4185dec46e856a0b5d95dd6d67f6e5b12a543a91493f9aa2eabbf3a5aee4218a1687919b7974d5e6f576691aafc10f105a73f676395ac6e5166b7d003f2c3737c04e7461ffda1151a7fc4776b1881460eab2877ff6204e1ed607f785a5c05ae4b171b7fed2575a75d11f73bf7d6074a011e0023fd3fa843e3c63dadb95f9ae07ad29c509e9d06e59e6b7564786a01acb67b8488d66ef21a793bfafb69df84cc2557f97b15db98ed8bdd1909c83da5890596e53f218cd980ceb75ce1b678bc222fd21c453b72852fc3aba410d666e07cf2b38c2702158768fbd489e469db093c7fefa0c27dc826db746a3c8c99e3261279c7cf79d21ae096609b8db473136c5065cfd13db955b87a7479effdf668bf10110e9f6aa8f4b711109d98e6dbab022f2f4690424e241de429c50a6de76595296a42a4bf0b2c1d9842fb0ba3ef6ef1aaf6cbb8e839764bd9677e491f23fbdc28d0ed5d9e09be429da7ed1a93e85828f9175c74446bf62baf9726e23207226b34d839a42e13c63fbef2caeba904f7b5dfa3667ade62a8e3bf5764828f9b2bdf2ea11b70e2a603d3a69b33ace06e8986fc811e03d2de5bd4bc898f67a3cb8c75abf198e9455e3a0f86b81b94f0cf367b6ea410b97feae2d9411b410179903a4df9a989f25e9ed2b5a7763e11a01874039d88d9a3cb4435301f7f922f29c8729149f90e39d6f2998875728a3b0eaccb793385abbf3735f3948aae9cf5982c6d3f3bdd5061d611cdf7209392fbb1ce6e709dedfbdbb4442e243178f93b8ec384d8fabb69de31bf3232618f05945b162406708a3151222f42c54d982db53e0cb3baba85d6c13e7f1a2a8ab296a0313ed9a476605ef876f5c3f10346a33b9e6af598d865a04a5b46613d10494b1c9d51435bb551249f06595c96a525f8cb76d2ddde641f0745161f3496726e9f4b33886180e05718ee265fab07f8ffcf95a7a985f334e33db22d0907c1ffc12abe33e880ab6b1198f5fb3c9a21e58e021ca300f333ab16e7f47fad98ac28ebfbcbe405f0d8eaf08f286dd4035b1fb922f48d34914a628fa342efb64f9f1f943bc7772333887cd2e69a16f00c51c62afb8fd1f3ebecf61d166a769427aa0d36c0ccc7b461a8a1b10d241d8a32a46e010085bf3de570861546f7b03e2887ff3aa5692b2f8602912186de386e3bcc2597a18f6c2a9ff6215110a1fcbfe3b5e8a9e893750f3a7d1063004b3b2e6d109339c2a7aed0a972993d717f960fecaf9c1565d2823ead43ccf659da1f65b45892b562a55f32005e87d2f9678a01fd3bf596c0ef873fbb0754bfe87eb36f3e68925e97602881166b4f22e4b0cb40f3835011e8d6e22bedf1f96092c4e91f3b0ef46af602e7e80694719ad08bb0e6d59f29ab5da5832ddf55dc9ec64f68f22d33c7f81a9cd754e896dcbea71a5c0ab471d496b5a40281077f96374c2cd2475a0b2b82b0f8d84568df8a05cc2be840ff8319d1bfec5f086f4a9116c68645597d78b55e483a5cf1f25b423ba35bb2e03fea1aac22a0ae233182f96fb9023be57e47f79169df21adb0c00b9f6b6dd0d1f6a14eafc2b03c27a3c38bdd1057d7e0446e64759f80bfe23e765a70d4e66cf9159da4263574761d413760951935b3b4241e188550f4a61707a7ff26c48b8941a825d7a849cdcb834880d8b9241b96dcd73ad4235bfefc4aea659d2b7116eddd99c92b290ed89ef2359cdb9e2b6ba68f3206ca035d8731e7c4b667a9baee1b4a4c5b483f7793543b33cbf59629d6e51d7d7ab52266d478510c4374e3d3ec6ead98af9257434e2548e5d8ede59ccd7a0712bd61a43c5d4d98844c52d3f97925da0959dc5640f4e168e0c3f1130bc7587272e5011bfe62ed423c0a61790b3633ee059654b12a2c405dcaed5bd154113fc63b5f934d90bfd54f6d94029cb298c88b849ddc3358e0f255362da2e229725ddd33bcdc3a3f94a4181499d0924786fc0f8a41a525326735218ae0275794e260af9d83aea4bbe4a25b8dd74ca78cc973ec4c2358cdfe7c242c19a8c986050cf9b51dcdbd8937a5f85b8979e1f95b10cb7a92bfd4ccc6d0fe36b80ad89d76bc454aee3d02edd0ada94874deda4d1db16b933ece2c3fe5dfc5ef3b81acc173da43cf92ef00bad4d6d56489bb9eef0db3e8d24973118601ee04235850f35d52975b9d062afe29c77bdf4ba424fbd2a6681e7d8a72df5a7b1e893b9a8dbce598d28860e8fdb4c25928dce80d626ec1aeccae3e11ac805ec17180cca8189927c874385111cd9e6f4e018138e4a79c02fbb01bf4381ff648f19340ecbf03db5ec984e02296a0209d2c31266b34b0336f0e11b35d504d9e8c268ead0362a5b0a7289ce069784fafed6f9f69377ccd1bdab347c2a089b82fc1555a07e3ee873705b9c8bef22443b4b2ad2019e4fc153834e3e5eef0665c6d803963dd9c2f0546f25133011fe8f725744d86b33cad127bad73e3b55ae88253386246cafa7fd563e382c1659fa147537d348bf6cd973ab8715d0d1bebf57a975a88905a1df56274b30aa480b00d2da67d750e28fe98f57c64743064f56631540cf2666e04e87fc3173e5cf7407454763ce1bd064de2023767c3b41cd4cc312d3c65bd6410a3f2f898a883da2bb8d6cee72339c28d001cfc7d142711c100a424e1bd734a6701d28d38d075b73eb1a9b422a64f3bc52901d7d4c7ff6ef97c62f661820d9a173f35c34f266694363261698cef03d0e91dc42ecbdd5c7ae60fdcf0ca19afed2414d8ae7febe31e0df02d05b0713a996587f123f9ae8254338000770d939f8540129ef761a741c312bd3286ad14dd8be2360fa78e895d328b618e1c67db72a83e2cd46a009fe48342ee87371f1d14a248c1cc8cf0bcf6bda1c2fa1551e958b8006650b0bd8e56b239b9a2f3cf0070ebd397d76bdfd3d62f236fe1ea6d4e7334e0f96182f320b98b4322691f24baabaee2d3b2ccd0c899e0261e90946c1ca7ac41cf9ec3bb321783bfb3ccec02033b11fdcc32e2064c815623aeca5cd0d5376d2aedf37a5f047fc427fc0eddec5d8cbeee8bfda52390eee341a180f43f413f7ac652e5f770a7506057e731355f9a6ef597799df7720bd494b5d2c2b02b0e7fc078f1a6fbe73005bd8cb3ae3c4edb9ae8d1dba0eb9a2007e7462de675f753b2174869534fed8e9ea4eae3a09da34eca0ab9f0560e05736aaf13504bbead2bc1e0ee97e6a6c01b79b6bacb017b8bf744aa250b38af2d4862951d0b0e588c6924f880d008d246b96be8d1e577acb271f33da415ae85a4a36d47288617232d32de0d1ae8eed9cd02d4e6081a956627e3f1bfd1f3651f06d6d61473d58591816b75961ec837a65f923e39816d620dc8e80375337c781020b85e03792a4b2774926d59075040f5ecaadd4163414547d1df0e2606106a67fe9f69652a59400bc042cb81a76e4f14d380882f579627cdd5fc478d5cd89a4dbb24c4252c89146d9b0cfe7fa99a72269ff5d5f04d8c91a9e354d10cd095fe24101e51d6be20d89fe9b21601eab458d9bc0fe73698efd2192c368f87405a413817ecfd88214dea122fb0d8d139efb395246c0790e174c9d8adb10caafeb2b6a2742c966fc687cbdb853be478befda9b89b106660854a00ced9c7028a7071f40280d91daf78d26c854051f73340431d003ce66680045b1cc4480abec0331a807d631a4560478626fd41aa8c3fdcb66d75aefb6a29030b0c94be961dce67db553863464feffc8b72c3e7219003eb942d359e777a87bd2c2e1a27f58e30e0eecc10d9b2c9f0b1552ba2965503ef2f77a35d88b82abc97837874b67bf1ae656a3b2fed7d60be4de83a83da8d98994cfb9c458fd2b883d8e9751670c62eec4bec7c7873215bf99f17e9628f1ac1fbeac4004d288fe279d2bcfeb4ed7671048de8598c7a9ae328e829e4115a5ba155ea2641b1df684d457f527339ac8ea6705ac7e73590f900bd73a434e4d72d8175aca5beade289da131374c40aa72014c6446fd943e8a2f7ac9e7bb008128bde5af3d3c1e1811f7df88329700fd40a5cb12396412283978589d04019c9e019ebad5829b15098ecd0f03b5901b2f48644a13b15558abe018087240153990dd38e9e9e60ad9bf1df3f21d574383535ea5f44298a29c1e90bce931dd45f5b4d06029929dfc88923bea8c20b56bb43868804e5e28486aa345ecc9e821d24f9e02c120066ad008ab22bb6f22bbff6036bddf2dc05c50bbcfdedd621be2410f9b8de2f364c8cd259234072bf3ad45fcb418d40c81c553bfedc91f50cd322c8cf07a8f81862dd0d3d0d02ca4acf0fe7ca0da1d90e3e74740ce6a38d69de93c01e46aafe400accfe872b76f94e4a055e1849a82a520b9ac9cebc34609843fc04bdccbd220f7a9d499553cfd9809c6084ec3ea2132ea5350bd9ce7ea7af466d3bafb0aceb86a0e72b658e8b3866fe9a28c78afcb4da501ecc357d2f4c9787f72486eee8ff03aed4ddf09b247215c134c02d50106dff1082732e750f7eb804320978873d1daf87369a56b84f8bc2fe2a98a755fbd645b3ba4d2ba3691ef05832540cfe12c7e19c5ffa35a59e77cf999eb1d38ffdea79ebcbd573d1020bb37dae73ed250be1de70230aaa346865835ddc3e38ef371f102518adbc1bfd4124146686e610457c603fcfa2c4a6f74e8c904b977f4af9475d72adfceaba7db108330983b247a63b2609daba03df9f27665343ba40e475873a2c774561a8776088663377dd330ba415261bd7e25e9ebe435542a0e2243dc1bfe7d429b43036f8c1aa8081df47e007fd54f6f6eb420bc416f1c9a6d82e572d365e881ccc6e8f48ac1b338effe51c6251801ebcbecf5732601c4bf1dbb703af33738828b69392d10091813ce2b93e6b51d2d263f44de2f7f1d17441dd72d3ee4135d8591dfe4dc96c1317f488b141a92e6f750ad60874694a4959f5488342c3f306f1eab8472615abd0fd27cfa71e9c88ea9957c7431033e127a5d3a9c774500b6899f4e3b5f2fb7367ad200", 0x2000, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x90, 0x0, 0x2, {0x0, 0x3, 0xbd16, 0x5, 0x7, 0x7f, {0x1, 0x5, 0x7, 0x6, 0x0, 0xf, 0xa734, 0x200, 0x7, 0xc890c63e415ce913, 0x101, r2, r3, 0xffff0000, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006200)="277922c31d68964cc03e9e8592c222e18acc0f5ae6346cd023fcf98cd237b648447e00e281207a7038c3997e69161f989366d7738c6a807c2726adf695efe754229a48c802d694690baf032cd88751b51245ac2ae3cb87e2da3db338e806c84063ea8ee43acea049545630a1692335e4d9ad11c42dc95224386146bcbfa6e0e32934404b4254075accf64cfd5bbc23a190ca981970738abb255a1c05a7a7261f683d10f4794ae174671d216a657598331b469a73bd985469b03b8545b5f7d48a08205ae92d6abe68819fa23e161b654b2871e649b19bd2b7d79838f3d80fc506560b33c20a6cc20877bf2eefcdaab788d15ce7e9634c272973df277427cb913d08aa0b235b1a797617e798a18c4b555c5835e17114c49a57f23f0d8f0a22e3522e5a8e9e788bcdf48c08862177ce92e00a606211b9302639bb851867acdbd7920b47618e9994a6fec653c692d733d5f6fa1305bf9f2582a3ca12fb440550ee9614932fb67d04092a8171c800c6796b44bf78eaa7506cb5f09c3e63b0e80738e09c767438f60fb1a3cc3e8c57caa6c5058d5e1c64903f9b81a90bd0221bce6d209c8123dc4381412da223ec55d193a8e5b8cbe69503b6b3b6d44ce168e48d794f2c655486ae999750f123814a3ea830cc0e9c71ce5b260414a44ffbed56791bac519504f3745012cac2384507df2cd1ff1f0c693b0a0f7aab727e5b1856b2d9b7ec809a60b96a063967389f5ff96958226292eff653ad449bda3902c1683aafa81b0c689864f3bf3929abd9c567acdbd0af6154184f55aa5b86b94a035c98aa3565dcb3394fed13e64800d3917e69b8fb7a9affa2ab0ed3b6d21ee31826979efc6f1cd62327357143e268988d072732786223ed15eae9d42c267afd9b377cc2b0c3bf5b6bc8cbdceeb336bccdc708a0cc4773e900a2778bd8c97a342147b1fae79fd6271e3b25a9a630ad38a9aa6d84806549ac07a8ca631b6b565cd45b9ad30cd047af2063a4ff070c04ee4b8b1a7152fd3d29825000bed0b237df40f01e8b59014fe8b4236381d10bf04d57aa7a1aac76e9af7466fe0b3724df3decae064c3a3d3000e285ec83e1c893e9c08eefe5f4fd86f457f90ed4b675ec7d5457cef36043bd7c1c611115c63a7d7819dcce86d71a0255193436aa96d2619fb2d52db332dbe3245f84125e221ab5a918ad13217b914cc61685761686c56f74fa5c10a6c1a586bd5abc2585ea9d6ac070647cf3f631508debe7c28d6482f0f8a2afea7a61d2f0c166a1b7dd6135ac9c7469c95ccd1025d0149cee049873cb9d69a89e9bab13a80183944876522c8f0c0c551ca7f4faa495c643bec973b92bf13dfa9803981394ff290cb1f4e48d3356224ec7df9284baef008c19949c4570b4d753c4fa0dc97175209102a38a0f3e8fa9e6b52319b81db379f4bee52bdcdc136825179ab72d9ac6f3f5a72cae5b11340f8056eb050523c5049938a2572eaafbce4e073e115a520da2f1905ec6daf637bbfc879b02fdb58bd8426526b916366bce92f87ad76d1ef5ca6946006ccf17687fdfa62cd23e441e2f6effbdd0a175ce00ca86cb0dfc2cad7f818caf7dbf64ce6e63b5320954957c100701c06024a02c28ab13250f029ae8f2dea7fcb60f5cb65f4f8bba2ac3270811bb4c12641b7fb0f80d14ffc2a9c45f2001b0d54c98465d1cd2619a1546134bad9268ff48710fa833a3f3191711d1c7bdfcb502acdc51b9f9642c1066bb01a9e912e0de1b5f8acf8d9e1177a252df26b7cb690747d2023d7cdff3904281b37218981ddb6d044360d65be09dc2efdf3cef9f9d6416d81485bed6a997ff00daa26fbd59c39705b7e590a95362bc4cb54329a89840af5c1cf587e8c05a3b4f83d45ea2b06110fdb93627da88e09c51e669ae3bc43632aa638d1549ada4f1c11d935cc9757e254c0c0417852be06a023f27a41bf1e086648a365cefaf7bc994f083a68d5643256a3cb9263c571576c6d0b1dd221dc7fbdd9cb908f631eb3f1158b41d28893ece18af0f8b8c03bd960de7868d231a6e2d19c4975d0c2f8f910f6fdae49618379bbc0d41ba2c7922409b036d08d217529cb3317f0caf97e94b679fbcaf808a1a859cd4f468e4df8ee3567c684ba1f04213c7fbff3857fbde87c722f4c3a6cf027b13706ce61b7a9fa4eb823607600e7007fc114fb5f303d5986785a680ad68101d41ca518056da41ab94ff03ae20b23e50cb5cd9345788e6e7773bb5d0423c35861f10f3484be3ce23adc4a46560463a704f8c631dddfea199ba045f5d6c20ef130fbeccb32de365d28c88108904f523d936801b846e7130e68dc843c0ddbe490f305f5884642dc1d51ba2937537ec1c1d1ba1f8b5add859132b52a8f44349d7de31486a4c017109595d07231d6329f50de6802eee32b9d6fcdb2b16f58ce1ea0fa2e7c462e4d73c8cbdbdef5c714696f6ff8b7ca46f5f8277d5181475099377763cdf5a2b20d5a6ece550919b567d412ae2523444f49f09510a5f8d2397b4545d9377f40d4d57be884b2643f6737b1c9ac2708d3e48b590e5b7362fc86f5f56e116a544f3a80c1ae66a2e42a335b015ed6ffbc3b6ad6740fdad3ee9168effce9ddb9ae97845cf2a38c79df3813a4a8408895d8dd33bdb254fd620dd3c833cb33fb3af63befd7ac09178f6f4fefbd136c727957ca25cc4e365ac2ef7cee2c88d29901c11c5d8d12d7c9bd1f1eb591d6da52b26e64144bf691059f001352598fd1ad651c9d23d8e74aaf99400e4b87a7c8141be5eb3f9a563cb76f163ec93e24e4219ea98b3191223d93b02d032e66d674e9ad844b3115fa0d07c41637db3b46b0133b9b1b8fc85d5494787f63692d18f5512f6e8515c0c14b844996db924954c59d9f1dec047b235163891edb13d05e16e212bd5003cdce8cdf7260bd90fab16d8a8032ab9b86bf62be8253e02e0c2fc0a1396b1f48a9258818626dec32d5035b1c16463a7953b4a977915898b07d1129699dbd341742357f25bbb6099503dc59878f544a84eda8011d10d273e4af343b051036556c1d31327161f76a2670cef78917915d37d9e707865b0dc1881201958856a50694ebfb8a4b850a234278ea48db61f6e322512e317d5fd55627c60084da63a6ea6d0df272faf59f26d05a88d8b400d728b975e78ef53867a68e2b6bb85c3356f062449f8b1a17ec2adf0307c98aef35da9e0d235bc730fb79a6acfd187a32b6e5f915598009bf07b398069afc19e7d42e9c2666572bf68b7d1e21aa232da07df107a1eae11424f867a9228158456e58db9d87969a68ae7837c20a5a2166324a89a193be2cb43fc9a4896583839e96dc2d2c9317e3dd217c234406f7a1704f5a958469f8c55f7073920405b2ea60e8ee9209932aba2199eb1d4146cd7870805348c5ddebf374700d6969ea1d45a5695f70e63dbba7d5659c2ac527cf95f735530c23abd9c1db64ec66b174fbef5f26fe3963879f77f42abd1dd7eac962deb43f2aa0d4b61ba37b23ad99e30a0bcfd0af86c219170a025a357ed3e3b70b520bcb0cf507ac4241e4b545d306fdf4ca2d4fb48d751c6948392691ccb5dd5a8be9534a2684ae38fac7445dc3367e9a8d96cfdaced050092959cd434b4fcebf180fc313c8f2631dc6323544ab3315cbc1d72baf9239ef7ea1412816de7fa77b05c9a999e197949e5e8ee6536318ca7d5cf15dda41fee8429533a332c1a25ae4b2fd1bf1ededee9c3d740d1e6c98cc85309e3b6f10a7cb5c5e6e4b8772621ca50d1e38f25fd82ffa3c92578c0802b457f8b33bfecf75309a85d8603b7599aabe8f1078a81a0bb5d40a4341cf0fc882ebac3d7fdc6fd8455153340dacd3c2ae558d0c6b057b98f6b533ba245221a43440f222feb40848e5c33c75ef084cce1e1f1c06261ba4035b987c09b46bff92db4022e358f2d6dc0f229d4fa63d57d49c865b7f33e490790f67fe426c691aa6feb8bc72dc759b44b61b88c02d6c23d3bb590e24813ce8c1534afeb8709d9dd41872bfef287c89b07158463de8b37016fb71ff18d78de431c4f9869d6c0719d649325a3ba437a714f36bdf59f88cf0602134a003e746efab8ef201acf73b396c9e64cc971bb81844450a92b8f11b4006cbea25ae8f4300fb98df7146c5e4a9f3ca620355f9d679e66288a8b4da298662242a8a333cdd828d91f4da4f7ce991092d49455b3da53b31ff92f5866695d5f76a033af6d2f44658ad94c1c6c601a296bd0f3e6b9e64a89653285f2ed775a8ff2cb4d1557bc491f44c5a3349ef58e25a03c3787b770c596fab20fe08248993cf28c28575ff8caeb0adea9789b667b253c3ebbd49a8977c2ff0f382bb604453d419cd6cfbad7d5a41605996bc6db74f2ddf8b29bdbb4355ffdb65a53437548154df7a8e8aec1d7435f2b33d0b83bbca7e1bb59f4ecd5502f0ab0d32bd2f38bcf730d51bbd85cacc455dee2313b7cbc37efabecb7fdeb6273fa4a84bcee0427b081ba6649faae4aa8b521b4cc80dac5e65c28dc1514e218cf06a3a10a96da464517ec03bbcefdb7e1e84c1178f083d3240df711bd80d7edc7ad037387d824e9bfbedd036615d2b8329de3d1702a4c33e928caa916665e39c01a50c030d4e3873cf3bba2d675dfe3cc8909fcaa6aaef885d4725680d544b39d29ed232a37554e29d1882d3f12391181f33b5744fd7344216aad50005525f54e401f11e95268a2a50a940f8184f142062d524bdb70d91f898251bf06bafb5c630049cdf85c4ba756d4cfb814fc95f56a188476f699026e76ca4f26dd78dc2f983589002e348db9056f46734c3235dce0268995f9f2649dfbbbfed57e823211f7260e6be507fdb9f7ec808e34cacc7777a8a9350cc5c8e16938adb959d1c34951be3a849357b7db349d7c19698ef325341f9e0c78ca0777abd83c90bdff486f0617a541b001c089d63758f85032efd2a5b6cd1d42fb8bbab3a50ba775229756fd83460f6181de4d9fa8cb24920b966df24e12652d8f1f83c3e214f10174dd7e49f41494494c03151ac77d16894ead6c8dbd76921af9d065e1fd66dee01966ec317b2394bdad5ad3bbc19d5cbd2f998a80288c3c7d4a6d920e76fd7ac967ce7ba839b3443852ca681154cf6617c2041aa129a47e6beeeb7148920b577085c22bef1c2865f93e323e6103f3a685d542c73976df029b94afb3f5442a1a0dd5a9f8dbef5eb54cfe37a2df9891ce8f5658d728fcc07932c07cf097f09f1b69e9002b742e03fd78820ede2e60e095681aa906a97df20a3cce135fbdf0f770063ede222fe5f2cadf6b55d7eab829f86919ab0dc4e4fad77c2cbdf87981240ff63b9463ccf03b890c46233c3b6e0c54a1236c3f0c1e3812903b47c4aac784e0397423667396f01cfb07d6649ab0e5d0c0ff2bbe6795068d85cd1f282212d93b97613c75199130fe6a3ee28f24be01cdf4b2d2988a144c93be0ae043fb856bb4c21b695aa5d1e9bd1161d1a986c919d4efa84a9b04b1355dafe64a503d84ab4f3b5b76a1438e4cceb5c03d1442d1bf4a69a996431f2b736c626d8354a90e53f3fbaacb91075887c854043755bd8954ab9fff18b0262e3b3925251dc124305797888bb2bbd872c9b8d57d68d2c467a8b318ffde6a44f9a5f9967bf184a97d86be0e4449413c327d203fca8719ce046343a33c1bbe48b97becbc44095192e98da87a9b2ba234d250dfdf7ae6b5e5f91058dac2b20c0b7525484fd5278c74e8276625646dbdfd47a2cb6a48177b6226e1ee6e2c9a588512a269e6037e813cd741a2cf096f32d60cd7b68e4657f5607b0a296d8633e12be7ae72f9f6f895352f6676ef8b09d01bd024ae159c5780ecc6aafebf59895ca9b736164c30e5958b9aba1b49cc27949019467fa9b3fb6518ba9a359ee9c7035eba2066c786261e11a9b0a064cf96c8be43bf3119bc403e16476b112395354cba94950512c29646ccbb031d126e7ac1e9d972738bf08d2e15f3976e5a8ca653e57cf035a6c0eeb064cfbe1839da2bce876c5e9e37c9b952879c240c94510c82b71b3419b5ee7d7d5ef81f71194d34f6ada76ec8eaf4e6e9e924b71dffd273539ff44c82a05b6a7ea584157941daed273a0e739eca5db356ed547e9080ce6b163bef52df9a7ea7d56c5997e72d4c4fca3e77dc82d53cda693a66cfaabc7a163417d1e454e34c3ed177848b006501e900d16770bbb91d3234034284079a5bca16ee53e3b4e95c61014771a7e372e3bffdf399d4311d22957f46706b7b1a748b8e2a96a6cc4dc9db1e77f1f53196da5ee1948eb88aa5aa154add1376a453366820dd0bd77d3bfa003bc481fb2e2d8defda1da351a667e46b1c0fe58ff3c65d097f731f36225ad641cbb3c043d3cad02eeae1314ba5f6e4d53182241a28c2d01e4af9fad8c10bba1e6361db8f20b65fe214db3fe3891ded443a06b3a4be7132fd5a24e9e094ed08b50b1941bc40a9b18e4bc569ad22ff082e2ee54e382e791f443121df080a1abce25cd474128dd4ca10a749b80f91a9229875d9d09d3a24480a9883b96499c6df8d6d53c80f4a46e71d4b0767b1c3ceca0223cb87dc65c2180df575f7b0c090e1aaa61d2ba8aa6c0719c75d911e4dfc00d8c328295f150f0d3b450f9503bb359ca4d15788133a848aa7629b014d3413a4bf3b9a821b63b7cabc8ac84301b2819e3f4b7a4389652f5d0683f101b9ec1a937aec026e80bb88b6e9989253ba9dd64c79f7b7ca00d8c0edf29998ba9fe0d5563c59854df5e2bc92d38ca40298132b1c02e7da32c57ef85898dc8eb92cf17e4cf834aaccecb3b5ecac9da87044f64cb43310f50ad0b72debf3e733975c6c857b37cbfeb1b016cd4f0573c8b69e54e3eeb893fea4677109a4eecc9e7f7e3fd3d40e69f9f880a6dee14dc7c27ed2c57f269ff66ef841b787583fb83ff2814e8eacc877910be60e1db93bbc3f53e9511f3948a8a8e0011e40b03f4804e8967b1e443797fb9cbb2978d71e54b6af71b9cca3d6441dbf108c625ed779bcec18d9f70f06df382732d0b49bbebe347f563081527636c025828065a1ca8ef239febacfb3d2438efe4b23c1f973f5d7d4b5a3497b94c25ea951f29e48b3dd326685d8c06bccc06822451b4d4c7b1c2f3e86eda9b175b34b7b7e8cbc1b73681b5d8c3ebd4167dffa50d718b5607975e8653767eb7e87bcb6a6fb1940a4c6ca41f916acdab7d143f685fe9714366b66076abab743c646ea8c42847ae6fb3ae7a5145b9438b9203bb818cd294127efe7c776418afaf237704488193706c1f52807a608f0b2c361a6aa13b7b2e985b364a11f876f5644b7e2b84d4b90c0ab050126ec76e9594e682ef6e00f7a3e85e260280cf2b03700a00b0c0d2990f3897f670dc6401adb6419af14bafa35d56cf65b332086deb8857d59a7487179b7d2e6c525e54324fb837541be9d8b459872964086a3f98f9b795aef6e37a8b72bdbc1d087f622b2a4213fbcebbdbe6000da8dc3733522ba74653d23487c5dcaa5f4af161e7c73999168ed0f3566de365778a63cab1c100ddcfd8de12383b60676bce46a76a25251fb666b892b366183d02a3d591dfb97edf854af890ef65ebe8506d00420a64a900e7f20cc378224410cba88dee93e2787b13aa0fb6d7d97c582da047da1f367bfd6f226e13d303bce23b35e9d994c9d54a4e6d457b07bcae49edd6de6fcfe8b0ceb8d0fb693686319dfc61fceb7c5405ad812e266d35e51181e2c5180e0a64cc685466999048db40771405142e5e08cc0417a5b87a85672828d1425354db56f148b81fc0e648e578e33f38f26190f36635e432c1e21bfbbcbf5d8bb9b291d1e18d3d311558b2a60218f492f7880f8afee557a665d7cfc4a20bfd75449af8b0f19ca7b45764a7a4c116564b3e39674adf5eb079fad35b8e743d822079875aad7dfc1ae401bdf6ea77700e9b2bb3e2c459ccd8f28c9337c2900cb84076fc0a3d45858c51417ab5412ac0a00230043a793f44183326b47b60fe15c7f22a43c767ce5c8181a9a4c44964d26fc50ece3d85b533e5eafdd87384a7c73ea7da097b0f8770b7629caddaf12de1b0a447451b6b6ced331789bf917e24a1519aec5e2125a7913f84d9a7fa088933f0e1418f6223146b8bcb6ae221ec5bbc8666958e9edd03e83a320059b5f095b074078c755d524c6584363b55bb01e183a39f4b5138ff890b1c67222fe303af951d839e3a71cce561874df1e63b5ba53aa0fb13d3ec0138a526e297b1876311f8db632876a3669c79f47d4edbebcf403e44b29d8c8d999a87961485e4ac0fd7fb66f638d3b6f3973591b9eaf528726d352c2ba39b160deeabd0d4c1387f1dd29db58477aa5e25e48be96e95c93081eb7a1ba17417db741255d2f9368d226ed665a02bbcec14c8458e255f93d1e024b0c090a66c78f362956b9aae8db13e9bb1ba6b1439b9c2f9df0cbbbff37c03b6d97e5ec0f651b9c47c44df4fdaf1e1e58ee049df8970309990bb3b3f3bb1817660a6e438bb50b5ee10739df9df4df5eede96e270402a48641752558fad1806544a739742774c5e0e20f5468faf61dbfc9fede5a07ab7a54e9d0a2932d458050485925a2581a8af3e3539c820de4ab18bc2c94fb51961eca805405adf6d2d18af8be34b2eb803dda4af4499c56397b154b28f7737242e7ff3cf7eca57f6a1e068bf357710a8caa5a870c476b712ad9b2a9b51c823a3a32604f3464246ac90fd2129c012fa2f705b5fc28c3030c34d7df1a831c549dadb62bac2d2dfdddc821b96ac589619b3179982c45062270d9abc6794cf5bbc6a5f3d5d2f7e6e2741b573de9869fad21033e7088f6b6dfd2aa8bd3e7789809ec530caf908948806045652dffb56e2741340d7fef6223ce4e3f00ae648c07be306f8d67b22066e9bc252c2ada60d3ecc79cb29cfd4deb4e22d78092445fb27de9782b7cafb541cc04f30eff09de188c1fe9bed4cdfcc9f02eace508e488673abb4f3cbb399c0f5330300270d38492fd543a84ef0904f725b29131dae600ffac79415562a1a337ac51b1ea9a2d8561eb2885d2e08feebd5ec87e9b58ffdccb9155b2a978b0a0812789d4df930653c5cdc079fb45eba1a38e9f823f40f29f5234b70d2d6e7c9b7098f0caf0cbe3fecf452c66874fd3268f765b28881e382134eceed7a0b30c8661a4d1c361d299cc0eb0f57706d2bf900433f5fc0d3466c4dfe727c7e69cb8478c9f3c66b3a98b8932af4a6a0a4dd4eeb8dce9326c539459b82af5028192d7d1b81d0c6d424bba6e976e85c0a5b7bd6cca4ec4d00ee7458112178763cc4f8dc908ea86e313ee2a2a4cc1e204157240fdaa3f7c221166ee0d7c112422f357e081b0bdab46c34c1352ccf3efc7ae1ec3737bac470f8fef5942ac97fff8c1c6642e5cf2f733f776821f7527213f213772f60c31a26e71b4980cdf6896a3d9bcb13282eaa348cee4b2257f24abdfa58ccb4d238f0b34ec9bbf9a4f1764de447b9af04f9960700c38ff26523eb4f4e77863c538c6d26ce03bf4da7241881465c447c0cb0fe1792e141290923f79993228c053f1d2cfab750a87b64f48ea27d8550623b46ffc04ce1fd168f481de2d7ce2c57c4a98d31346ce2da7ddd05d0195b77b02eb95a50aecd6181dbb545b6f9badd7def429f7b833bc98b0295e13799577aea34e3f691b0df86ee42e331bc6d3554543a9db9512b6fb67c2333814efb4a6fb897e0a85e150111b5d34be4532a1e2ba044ffefdabf428d91b10fd627d2e613f295c38d274396a502d2e7334b295be14507d7fca78c53bd5359c5ea04cbbd1edb3c31025b06e7a93b198ff525478a6b87a22b1978951b26c19603a74e79bdf29daa153bf0ea5c0205298a352e9cd4d809115012b924bf338ffd3cc800a57891b9a728978bc060dc155c69ac65af5f4b3051e938d7cd22ef1de21e8f12311e3c8417b7ba7ae3f7c5d4d840fc2e56dc3f7a9b253f13b45c0bf249cab8e0b9bf97d36153b63c3df2acdfcec0a36e45069dd0a7947bd2e2925f74d0aaa2bfc22a8333883c6ec588acd89a6601fd61a4b5407b3d6443b765074bd4dcc56fa01638c9cd2e2e54249bc41849a727ea31f3d8994b365673df134e46bd3872ac1c7c479b472215c6b3ff7af96708996bd0735ebcd0a772008e05b7feb6344b6d6010222881d3b0462dd67f06522f77f63b5bffcce98f33f3337175d880fc2bd2145ac58286938cdf75bd56504390c500123065e53a487e9634ffefe03ccea989b13af327cdd840d342308ce12ad26f40ca242c97f28cc15f8e9709e19a0be5c3ea016a62735efc2dc5c6184547003cdc897afdd30ebd086af9449ff17ad64e9ee066107b3464313c4fe7344e6126351a07683ffbfb5fde7a743ffd3053f3e751e9ba89729a9195ac0ec423cb58a8c83435e24e2fb250b527162621284d8ef4b47ae6f5278bc22d248099622dcb1cfaa8376e32908e76bb6f88818e9e9616acf7f38d7b88b80490a7229c74d012627e3995c749b57a89b18149ffc8f60c0cf9c0f527fe48e1c49e13b15d8ca641a96607ca956486631f8d01618d9cfb2985b0c6e175bba854da27821834833babcce08efc328675c78673579ec83ae8015366ecd2f844587afdc595d9dba4f2c313f1f4a31d2c482fa5c4f86fa5ede03af0cc641c873307c4239f1c66764034fb29f10b1b746cf2149e7874b2e0ece9db4aa78b46377d9b7d13f8f9555546a51af50b6d3bc54e298c9486fa50ff1ac43b9dfe35bf7ff9f99313f76a3ad51c029cbda04cf13905b9c483ca6d7921a331ad7727ea65441ed2376a0b200b0dec05f09e8b231b47166fc2b0f140e8ec95646785d5db61f6f615f1d22cf7ad7b3e5e6d56ba0b3d0a2b4c205c707399c4ebe9b0cd053e0bc04a8d4da6f88719e6d8536c1dfa5b75ba78797656084588c8a951730709161df35f21a49163b1ad35a5d692517fe2baba0f06eebb5e0695668b40742e78fcfb33cdcd97ed4d375709c191e09abf376031a514ffecfe53ab81da5b270e816204d535ae1bdffbe2cedeac400fb2e707c01c442c86f816d28ddc4ec13116fc1555d0f6f385917dee220931307aa04ab9bbbc1ca7d3fbaa3df935457363c48ecc982efd0bf1dd77d92aede03596aaeeb859ec07fc866463860134c6b61e72719a4e6bab7918c0a190339176fa31ea43b15563171d9f3fd50474aaff66dc3f2d7b893bb25ad3f3ed41282d2b068aac9fed43a1e2e175d05ca1279abb824244a8a3c5c67cc5edc6088f37bd90449278f14b1059e00cde02ce0ead4b0f15d260d275326ad2043ba38a88eeeae6647e7daf30845083ed986ff0fc432bd43bfd4f4963702632c70b8f6270930a36adb2e2681eb444f93847597e8727100fcd9eea6bb46f5e7a96e98df0bfa128381bf48d164bf7695ba8bda8e15d706bc9d5d5b079d87d8bb4a8f6be7a3f171107fa9e11a5e847dc46ce7a08f90cb66ce14293d19d2db1f0048795a99184199e28089765b931d9b4771cb1c6c5d77f18de2b36631f0b3f9ce3dc201570c9fc4179c1d01f8d9d0ebb6db01781455471107b4234e96599e8c2fe943198393a59bb401a6be7ac5930c7554eff5", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x101000001, {0x5, 0x3, 0x9, 0xe322, 0x40, 0xffff672a, {0xfffffffffffffffe, 0x6, 0x3, 0x7, 0x6, 0xfffffffffffff7b7, 0x5, 0xa, 0x7, 0xa000, 0x3, 0x0, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_io_uring_setup(0x5f37, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0x4, 0x3}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f00000006c0)=@IORING_OP_NOP128={0x3f, 0x1c, 0x0, r4, 0x1ff, 0xfffffffffffffffc, 0x8, 0x2, 0x1, {0x7fff}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000140)={0x14, 0x64, 0xfa00, {r9, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x2000000000001005, 0x19dff, 0x7}}}, 0x90) sendmsg$NFT_BATCH(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) lstat64(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r10, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={0x10, 0x1405, 0x1, 0x70bd29, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0xc880) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000000000)={0x0, r4, 0x9, {0x9, 0xd84}, 0x4}, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010200000032cd77972a6143bf00bb0000000000010000000900010073797a30000000000900030073797a310000000014000000060a010400000000000000000100fffd140000001100010000000000000000000000000a"], 0x88}}, 0x24000000) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(0x0, r11) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009240)=ANY=[@ANYRESHEX=r11, @ANYRES8=r9, @ANYBLOB="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", @ANYBLOB="140004006e69637666300000000000000000000008000500060000001400178004000500040003000400040004"], 0x4c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r12, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r13, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0xfd8c, 0x3, r15}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x269}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) futex(&(0x7f0000005600), 0xb, 0x0, &(0x7f0000005640), 0x0, 0x2) 1m25.409868564s ago: executing program 9 (id=5924): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x80000000, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x40, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x5f000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0xe4, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff80, 0xda, 0xfffffffffffffff9, 0x0, 0x8000000000000000, 0x7], 0x0, 0x1a0580}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m24.798106982s ago: executing program 38 (id=5924): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x5b, 0x0, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x80000002, 0x9, 0xfffffffffffffffd, 0x80000000, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x40, 0x102, 0x3, 0x2000000000000000, 0x80000004000000, 0xc], 0x5f000, 0x12d7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x5, 0x8000000000000000, 0x7, 0x449c, 0xe4, 0xa, 0x3, 0x1, 0x10000000000009, 0x4, 0xffffffffffffff80, 0xda, 0xfffffffffffffff9, 0x0, 0x8000000000000000, 0x7], 0x0, 0x1a0580}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.014331504s ago: executing program 2 (id=6158): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x3, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @private=0xa010100, {[@noop]}}, {{0x1, 0x4e22, 0x41424344, r1, 0x0, 0x6, 0x5, 0x0, 0x0, 0x0, 0xdadf}}}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r2, &(0x7f0000000400)="0000884700064001", 0x8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x190, 0x10, 0x1, 0x70bc28, 0xfffffffd, {{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0xd}, 0x0, 0xecdf, 0x0, 0x0, 0xa}, {@in=@loopback, 0x0, 0x32}, @in=@private=0xa010102, {0xfffffffffffffffe, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x9}, {0x3, 0x400804, 0x9, 0x294}, {0x1cb00000, 0x2}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x2c}, [@algo_crypt={0x58, 0x2, {{'cbc(twofish)\x00'}, 0x80, "1a008b80ffffff000104000000000000"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x190}}, 0x44050) r6 = socket$nl_route(0x10, 0x3, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x256f16877c8c0da9, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000006a00010f29bd7000fcdbdf2502ef0000000000db07000a"], 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x24040010) r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="200b890000008922c26113852642792c3cbd07ce918d0fb742a0054d318412c3658881ce2a52973661d6910c55a00f0174f3f09206ea8ec99f6fb4625f46526fbba2853b6aba52d840ba9d1fc351b07c0aa86c2bd6c844ea9b59b7de0542678ce9c70d48f9b4e6680c69efc9e44ad2edcf77f1ad7961aa3ae85fa6344747523d9e34b950a5fa17f3aab66635f3e4d32a5c841efe"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r7, &(0x7f00000005c0)={0x18, &(0x7f0000000340)={0x20, 0xf, 0x3f, {0x3f, 0x23, "bf54553e77c53b71dc2fa9d3296873d523cde2b0b064466838df1df796bfa331985275b1c7a2e4d0b4ebed09ab35da2782f4508d23c275c2ed10cf97fb"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, &(0x7f0000000480)={0x0, 0xf, 0x20, {0x5, 0xf, 0x20, 0x2, [@ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x101, 0xf, 0xdf, [0x3f00, 0xc000]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x5, 0x6}]}}, &(0x7f00000004c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x10, 0x2, 0xff, "6256ced4", "2d3614c6"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x80, 0x8, 0xfa, 0x1, 0xe5, 0x0, 0x8}}}, &(0x7f0000000c40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0x5d, "6c819a3b9f092e66e294285925c1cb705f3f824ab1fe080ff1186b11864f87f810871f387998d782c433265af75acad85c9e635cabd257af5779df20632a553cfbcfe1d4db59fadfa40631d0d1e02a4269cd6cd51056bc1742933f0371"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x20, 0x20}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000840)={0x40, 0xb, 0x2, "d636"}, &(0x7f0000000880)={0x40, 0xf, 0x2, 0xffff}, &(0x7f00000008c0)={0x40, 0x13, 0x6, @random="f36a041510d7"}, &(0x7f0000000900)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000940)={0x40, 0x19, 0x2, 'P,'}, &(0x7f0000000980)={0x40, 0x1a, 0x2, 0x9}, &(0x7f00000009c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000000a00)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000c00)={0x40, 0x21, 0x1}}) 9.404344795s ago: executing program 8 (id=6164): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$btrfs_control(0xffffff9c, &(0x7f0000000000), 0xa0200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="210f00000000000000002000000008000300", @ANYRES32=r4, @ANYBLOB="be000000007de85c81cfddf15241d6307c1c5ea4dd93b686eb5f891d9f3e30ea555160837352b87763efe1ee"], 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x7800, 0x10, 0x401, 0xff, {{0x10, 0x4, 0x3, 0x3, 0x40, 0x68, 0x0, 0x15, 0x4, 0x0, @remote, @broadcast, {[@timestamp_prespec={0x44, 0x2c, 0x14, 0x3, 0x7, [{@multicast2, 0x5}, {@local, 0x5}, {@loopback, 0x5}, {@local}, {@remote, 0xef}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000400)={'erspan0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x8000, 0x40, 0x3, 0xffff, {{0x20, 0x4, 0x0, 0x5, 0x80, 0x65, 0x0, 0x5, 0x2f, 0x0, @multicast2, @multicast2, {[@timestamp={0x44, 0x14, 0x2f, 0x0, 0x8, [0x0, 0x8, 0x100, 0xfff]}, @timestamp_addr={0x44, 0x1c, 0xce, 0x1, 0x0, [{@remote}, {@multicast1, 0x3}, {@multicast2, 0xf}]}, @cipso={0x86, 0x3a, 0x3, [{0x7, 0xe, "93f491fb7fc97eaf7bd7b235"}, {0x1, 0x8, "a7dddc21a741"}, {0x2, 0x10, "5f7eade24fece1ef6142b51db92b"}, {0x5, 0xe, "ff0ea47f953bdbe26a80e9cf"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000440)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x9, 0x1487, 0x62, @private0, @mcast2, 0x7, 0x40, 0x3}}) getsockname$packet(r1, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'pim6reg\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000780)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="3c0726bd7000fddbdf25100000006c0001801400020076657468305f766972745f776966690014000200636169663000000000000000000000001400020073697430000000000000000000000000140002006361696630000000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="080009000001000050000180080003000300000008000100", @ANYRES32=r8, @ANYBLOB="080003000200000008000100", @ANYRES32=r9, @ANYBLOB="140002006261746164765f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="080003000001000000000100", @ANYRES32=r10, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)={0x38, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1, 0x71}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x15cc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES16=r11], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r15 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r15, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="78c3ed41d6ac730a5af6198c1cfd57bd4f2dbbfa1344a92168d4f4", @ANYRES16=r14, @ANYBLOB="010c2cbd7000fcdbdf256000000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) sendmsg$nl_route(r12, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0xffffffffffffff9f, 0x1e, 0x1}]}, 0x24}}, 0x0) r16 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r16, 0x29, 0x48, &(0x7f0000001b40)=0x100, 0x4) socket$kcm(0x10, 0x2, 0x0) r17 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r17, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r17, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @remote, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4400046, r18}) 9.278598675s ago: executing program 8 (id=6165): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x38b5, 0x0, 0x2, 0x2bb}, &(0x7f0000000440)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000500)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x800, 0x1, 0x255}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x0, 0x15e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4177, 0x1000, 0x8, 0x0, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x6, 0x200001e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x63, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04042cbd7000fedbdf256c000000050018010e000000050019011ebe00000800a000250d00000800a1000d0000000800260064140000"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4) r7 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r8 = socket$kcm(0x2, 0x922000000001, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(r8, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x20000010) setsockopt$sock_attach_bpf(r8, 0x1, 0x23, &(0x7f0000000000), 0xff7b) syz_usb_control_io$lan78xx(r7, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)='p', 0x1}]) r9 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000100)='&', 0x1}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) connect$unix(r10, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) 8.951561765s ago: executing program 0 (id=6167): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xb904, 0x1ff, 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.610264027s ago: executing program 2 (id=6168): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth0\x00', &(0x7f0000000300)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x4, 0x7, 0x6, 0x3, 0x7, 0x3, 0x2, 0x0, 0x80000001, 0x54, 0x7f, 0x7, 0x5, 0x101, 0x88a0, 0x6, 0x9, 0x0, 0x1, 0x0, 0x6, 0xd, 0x3, 0x1, 0x8, 0xfffffffc, 0x74f, 0x9, 0x7, 0x1ff, 0x9, 0x41, 0x2, 0x8001, 0x202, 0x8, 0x3, 0x4, 0xbfb5e87, 0xfffffffb, 0x3, 0x41680, 0x13, 0x1, 0x4, 0x80000001, 0x4, 0x10000, 0x1, 0x36, 0xf72, 0x7, 0x2, 0x374b, 0x6, 0xd18, 0x7, 0x8, 0x0, 0x8, 0x5, 0x1, 0x7, 0x9, 0x5, 0xb61, 0x3, 0x400, 0x4, 0x40, 0x401, 0x200, 0x6, 0xca, 0x1, 0x7b39, 0xffff, 0x4, 0x2000000, 0x7, 0x7, 0x67e, 0x3, 0x918, 0x7, 0xffff1e9b, 0xfffffffe, 0x0, 0x400, 0x4, 0xfffffffc, 0x2, 0x10000, 0x1, 0x12b, 0x7, 0xffffffff, 0xb15, 0x7, 0x6, 0x4e7, 0x8000, 0x6fec, 0x3, 0xfffffffe, 0x7, 0x200, 0x7fffffff, 0x2, 0x3, 0xe, 0x0, 0x144, 0x1000, 0x2, 0x2, 0x1, 0x7, 0x748be365, 0x9, 0x16, 0x0, 0x3, 0x6d9c, 0xffffffff, 0x7, 0x81], "d80741f156336484b2c142212fb43b04cd6872f1dc39b5bdb2e423bb63ed46f78b8763aa176d4e283490e594fef3bac4e978e1575d183d1bead2c9bb5f21222699d50d7788dcd8eb26174d0bb50e74b7d2c6f5e2f072fc7a4670b05d824eee0caa9535ad5a8efd67b38ad03875d3882f99b7ed3a2200ba3b063d5750ddcb247b8d59cbf7c23e5e0f15e95efb5417f4c2e4754b79b6da343552569a03f7a028826ca147adf3116d304206af12aa39431ff23b19dcc93cf522d8781a6162f9516464adbb2256380892f745b11d26865e"}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c00)='/sys/power/pm_wakeup_irq', 0x2000, 0x28) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001b40)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {0x0, 0xfff1}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}}, 0x24040084) preadv2(r3, &(0x7f00000030c0)=[{&(0x7f0000002c40)=""/168, 0xa8}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x1fe, 0x3, 0xffff1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) stat64(0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x54, 0x0, &(0x7f0000000900)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee80489", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r7 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x401) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000040)=0x85) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f000905", @ANYBLOB="f3ff0f"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil}) fdatasync(r1) 6.082114662s ago: executing program 0 (id=6172): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x402) 5.855648644s ago: executing program 0 (id=6174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "1ba2ad50e4e3e408", "3a308be5a37759419aabce1ab16700c3", "6c13c111", "903c0037f2e75f19"}, 0x28) 5.606582115s ago: executing program 3 (id=6176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='Y'], 0x20) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x20000000cd}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="1c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='Y'], 0x20) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d04, 0xec000000, 0x20000000cd}]}) (async) 5.6059671s ago: executing program 2 (id=6177): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x0, 0x6a, 0x1}, {0x3, 0x4, 0x3, 0xf4e}]}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f0000000700)='\x00') r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000180)=""/87, 0x57}], 0x1) close_range(r1, 0xffffffffffffffff, 0x3f00000000000000) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x10, 0x110, 0x1}], 0x10, 0x7000000}, 0xf401}], 0x1, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000080), 0x4) ppoll(&(0x7f0000000040)=[{r0, 0x4080}, {r0, 0x280}, {r0, 0xc542}], 0x3, &(0x7f0000000100), &(0x7f0000000140)={[0x9, 0x8001]}, 0x8) sendmmsg$inet6(r5, &(0x7f000000a300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x77, @empty}, 0x1c, 0x0}}], 0x1, 0x4c040) 5.590734984s ago: executing program 0 (id=6178): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000000640)={0x2020}, 0x2020) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x400c890}, 0x404c034) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 5.213450317s ago: executing program 3 (id=6179): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x8184, 0x10000, 0x0, 0x4c}, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x37, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a01040000000000000000070000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 4.946554338s ago: executing program 3 (id=6180): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0015"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000040)={0x6, 0x101, 0x6, 0xf, 0x7, 0x1, 0x7, 0x3, r2}, &(0x7f0000000080)=0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x289, 0x0, 0xb}]}) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) syz_clone3(&(0x7f00000003c0)={0x122125000, &(0x7f00000000c0), 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 4.703933109s ago: executing program 8 (id=6181): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x7, 0x12, r0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0xe8481, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7f7ffe, 0x400, 0x2100, 0x10000003, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x20, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x80, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mount$fuse(0x20, 0x0, 0x0, 0x0, 0x0) 3.402441029s ago: executing program 8 (id=6183): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400400103000000092101000001220500090581030002"], 0x0) syz_emit_ethernet(0x44, &(0x7f0000000040)={@local, @empty, @val={@val={0x88a8, 0x1, 0x0, 0x4}, {0x8100, 0x1, 0x0, 0x1}}, {@llc_tr={0x11, {@llc={0xdc, 0x1, "81", "e5a0eb8e56dc1dbdc15262c4fdd3dbaa9bd3860db58b24899f6618db4d56acf307a3a39ddd4b577a82f955"}}}}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@getlink={0x24, 0x12, 0x1, 0x70bd25, 0x25dfdbfc, {0x7}, [@IFLA_VFINFO_LIST={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7fffffff, 0x43}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r4}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00221200000083"], 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000003c0)='a') remap_file_pages(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xc, 0x10001, 0x0) 2.863988341s ago: executing program 3 (id=6185): add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x5) bind$inet(r0, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r5 = socket(0x10, 0xa, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x300}, 0x8}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x9, [0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x7, 0xd, 0x0, 0x0, 0x3], 0x1, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) listen(r0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) keyctl$invalidate(0x15, 0x0) 2.711072391s ago: executing program 0 (id=6186): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xb904, 0x1ff, 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.700787003s ago: executing program 6 (id=6187): r0 = socket$can_raw(0x1d, 0x3, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000001b7030000000000008500000083000000790900000000000055090100000000007b0000000000000085000000a0000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) (async) r2 = socket(0x1f, 0x0, 0x101) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000100)={r2, 0x1ff}) (async) r3 = syz_io_uring_complete(0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x4) (async, rerun: 32) bind$can_raw(r0, &(0x7f0000000000), 0x10) (rerun: 32) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) (async, rerun: 64) close(r0) (async, rerun: 64) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x68, 0x14, 0xf0b, 0x70bd26, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xa}, {0x1, 0xfff3}, {0xffe0, 0xb}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xd4, 0x6, 0x200, 0xc, 0x1, 0x40000002, 0x7e}}, {0x4}}, {{0x20, 0x1, {0x0, 0x18, 0x7, 0xf, 0x0, 0x4, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10000000}, 0x8080) (async) memfd_create(&(0x7f00000000c0)='|&]]+@}],$(/]:h@)[$-\x00', 0x1) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, &(0x7f0000000080)='7', 0x1) (async, rerun: 64) landlock_create_ruleset(&(0x7f0000000140)={0x200, 0x7, 0x2, 0x14a, 0x3, 0x5}, 0x30, 0x0) (async, rerun: 64) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, &(0x7f00000009c0)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x8, "299c28fe16a935"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000019c0)={{r6, 0x4, 0x8, 0x3, 0x4, 0x40a8, 0x1, 0x1, 0x3, 0x3, 0x1, 0x6c878fe4, 0x81, 0x5, 0x6}, 0x38, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2.499855168s ago: executing program 6 (id=6188): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "1ba2ad50e4e3e408", "3a308be5a37759419aabce1ab16700c3", "6c13c111", "903c0037f2e75f19"}, 0x28) 2.334508538s ago: executing program 3 (id=6189): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 2.333834403s ago: executing program 6 (id=6190): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x106}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000000)=0x7ff, 0x4) sendto$inet(r1, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e1f, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004084, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3e, &(0x7f0000000980)=0x1000029, 0x4) r3 = syz_open_dev$vim2m(&(0x7f0000000300), 0xc, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0cc5605, &(0x7f0000000440)={0x1, @pix={0x0, 0x0, 0x34324241}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.271679957s ago: executing program 3 (id=6191): socket(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000000c0)=0x30000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000c00)=0xc, 0x6, 0x2) madvise(&(0x7f0000f7c000/0x3000)=nil, 0x3000, 0x14) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) r5 = fcntl$dupfd(r2, 0x0, r2) write$uinput_user_dev(r5, &(0x7f0000000180)={'syz1\x00', {0x10, 0x0, 0xffff}, 0x9, [0xb86, 0x7, 0x4, 0x7, 0x7ff, 0x3, 0x5, 0x100003, 0x5, 0x4, 0xd, 0x3, 0x9, 0x1f, 0xc795, 0x8, 0x7fff, 0x10001, 0x4, 0x4, 0x1, 0x6, 0xa, 0x6, 0x1, 0x5, 0x0, 0xfb82, 0x3, 0x0, 0x0, 0x1, 0xd, 0x2, 0x0, 0x1, 0x0, 0xfffffffc, 0x400, 0x5, 0x9, 0x5, 0x2, 0x6, 0x0, 0x8, 0x7, 0x4, 0x1, 0xe8, 0x5, 0x7, 0x4, 0x8, 0x2f03132e, 0x0, 0x3, 0x9, 0x3, 0x0, 0x0, 0x0, 0xdf, 0x287f], [0x101, 0x31, 0x6, 0x7, 0x23e, 0x80000001, 0x40a1, 0xe, 0x3, 0x8, 0x9, 0x7f, 0x75, 0x8, 0x7fff, 0x2, 0x7f, 0x5, 0x73, 0x8, 0xfffffffb, 0x1, 0x7ff, 0x4, 0x4d, 0x1, 0x0, 0x9, 0x0, 0x2, 0x8, 0xf, 0xd, 0x2, 0x2a, 0x8, 0x5, 0x3, 0x1, 0x8, 0x2, 0xfffffff0, 0x6, 0x8, 0x7cd, 0x8, 0x7, 0x3, 0xc6, 0x7, 0x9, 0x0, 0x10000, 0x6, 0x5, 0x0, 0x3, 0x4, 0x8, 0x0, 0x2, 0x0, 0x6], [0x0, 0xfffffff8, 0x1, 0x3, 0x9, 0x8001, 0x3, 0x3ea7, 0x6, 0xfffffff8, 0x9, 0x1, 0x700, 0x0, 0xfffffffa, 0xd, 0x7ff, 0x6, 0x80000, 0x7fffffff, 0x9, 0x48, 0x9, 0x6, 0x1, 0x9, 0x3, 0x709, 0x9, 0x9, 0x2, 0x7, 0xff, 0x7fffffff, 0x5, 0x6, 0x43cd, 0x5, 0xd, 0x8000, 0x4, 0x40, 0x20007, 0x7, 0x8, 0x10001, 0x4, 0xffff89a1, 0x1000, 0x19, 0x9, 0xa59, 0x3ff, 0x1, 0x3, 0xfffffff5, 0x9, 0x2, 0x10000, 0x1d, 0x3, 0x4, 0x40000, 0x1], [0x7, 0x8, 0x213, 0x789c, 0x40, 0x6, 0x1000, 0x8000, 0x2, 0x3, 0x2, 0x5, 0x7fffffff, 0xd, 0x6, 0x7, 0x8, 0x9, 0x7fffffff, 0x0, 0xffff, 0x0, 0x6, 0x7, 0x0, 0xda43, 0x2, 0x5, 0x14ac3b3b, 0x2, 0xb, 0x0, 0x2, 0x1, 0x1, 0x1000, 0x81, 0xff, 0xb6, 0x3, 0xffff, 0x10, 0xa114, 0x3, 0x6, 0x800, 0x4, 0x40, 0xfffffffb, 0x4, 0x0, 0xfffffff7, 0x7, 0x800, 0x0, 0x4, 0x5, 0x3, 0x2, 0x6, 0xe, 0x9a6, 0x5, 0xffffffff]}, 0x45c) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2275, &(0x7f00000018c0)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_gettime(r1, &(0x7f0000000000)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 2.166640244s ago: executing program 6 (id=6192): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x4001ab7, &(0x7f0000000300)={0x0, 0xba42, 0x8000, 0x3, 0xb0}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0xffffffff80000000, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x200000, @empty, 0x4}, 0x1c) listen(r0, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c560a84476080ffe00600004e23590f7f89000000200000000101ff0000e90209ff5bffff00c7e5ed5e00"/72, 0x48}], 0x1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0xfff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 1.506780919s ago: executing program 6 (id=6193): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@fragment={0x3c, 0x0, 0x5, 0x1, 0x0, 0x1, 0x64}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000280), 0x4) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) (fail_nth: 5) 1.354546654s ago: executing program 6 (id=6194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x0) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000080)) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000340)={0xc, &(0x7f0000000240)={0x20, 0xf, 0xb4, {0xb4, 0xd, "81e1bbb71c2e736e9c3d810ce08470e161b95daca27eaa254829a64075f0da456e5d2f316ded258d9fb6fc6a625c7f58e8b461f910dede5f6c5eb85dabe0653f0fd3a2639bb58e45dcb8fb58847c7170d7e80aede10bff8ebdb9a863dda05565d91a9ca1533255b18f6911660ddaa8a0d229e2188763e75d527e16faa558ef72ec47e877af401964678cfadf38ace6497fcca9da33f0a8747cbc6973754f97a5e66121ef1d0a1ccd8f34bd7d8c769bb0e69c"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x458}}}, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x16, 0x17, "895428a68e20fe294e3339fc2a821fec93789f4d0ccfa9"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000400)={0x0, 0x8, 0x1}, &(0x7f0000000440)={0x20, 0x0, 0x3a, {0x38, "88fca12b4dfca5231d3bfdabc61b4aa11c554e5c8d84967db04d416f46b7f4a56ce2423e485f4a7ab9ae487cdd5348b292f2e969ef585fd4"}}, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000000500)={0x20, 0x0, 0x1, 0x73}}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$EVIOCRMFF(r3, 0xc0085504, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000840)='/proc/mdstat\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x84}, {0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {0x84}, {0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x30000000}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f00000004c0)={0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0}) 1.13039628s ago: executing program 2 (id=6195): syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x8184, 0x10000, 0x0, 0x4c}, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x37, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000ab4000000060a010400000000000000000a0000010900010073797a31000000004c000480340001800b000100746172676574000024000280080003009ac4200008000240000000000d000100434c41535349465900000000140001800b00010064796e7365740000040002800900020073797a32000000003c000580080001400000890d080001400000001c080002"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 990.231175ms ago: executing program 8 (id=6196): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x37) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162", 0x3ee}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048054}, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x101241, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 877.806185ms ago: executing program 2 (id=6197): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00U\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a000000000000000000001420000100", @ANYRES32=r1], 0x58}}, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0xffffffed, 0x10000, 0x0, 0xfffffffd}, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r2, 0x9) recvfrom$inet(r2, 0x0, 0x0, 0x2, 0x0, 0x0) close(0x3) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) close_range(r3, 0xffffffffffffffff, 0x0) 361.199319ms ago: executing program 2 (id=6198): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r0, 0x409, 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @ifru_ivalue=0x8}) ioctl$sock_ifreq(r4, 0x8936, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESOCT], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, 0x0, 0x4008400) syz_usb_connect(0x5, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001accd5910a9054a264ce50102030109023e0001030f400809049bbc000e01000d0a0d020101020401727f05240600000509000500030b24130b21c4"], 0x0) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0xa}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) ioctl$sock_ifreq(r4, 0x8993, &(0x7f0000000140)={'bridge0\x00', @ifru_ivalue=0xc}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000180)={'bridge0\x00', @ifru_ivalue=0xd}) ioctl$sock_ifreq(r4, 0x89a2, &(0x7f0000000200)={'bridge0\x00', @ifru_ivalue=0xf}) ioctl$sock_ifreq(r5, 0x89a2, &(0x7f0000000300)={'bridge0\x00', @ifru_ivalue=0x13}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 134.421733ms ago: executing program 0 (id=6199): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r2, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xb904, 0x1ff, 0x39) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20100, 0x44) connect$inet6(r3, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 0s ago: executing program 8 (id=6200): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000002c0)={0x1, 'veth0_to_bridge\x00', {}, 0x4}) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@dellink={0x34, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xc0a742c700a80d57, 0x301}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}]}, 0x34}}, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x98, 0x10, 0xffffffffffffffff, 0x30bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x5564d, 0xfd6f}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @bond={{0x9}, {0x54, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x8}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x1}, @IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x9}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}, @IFLA_BOND_PRIMARY_RESELECT={0x5, 0xc, 0x2}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r1}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x98}}, 0x8000002) kernel console output (not intermixed with test programs): 96][T25639] dump_stack_lvl+0xe8/0x150 [ 1265.360030][T25639] should_fail_ex+0x410/0x560 [ 1265.360054][T25639] ? io_alloc_cache_init+0x42/0x140 [ 1265.360090][T25639] should_failslab+0xa8/0x100 [ 1265.360128][T25639] __kvmalloc_node_noprof+0x176/0x870 [ 1265.360165][T25639] ? percpu_ref_init+0xc5/0x350 [ 1265.360209][T25639] ? percpu_ref_init+0xc5/0x350 [ 1265.360242][T25639] ? io_alloc_cache_init+0x42/0x140 [ 1265.360282][T25639] io_alloc_cache_init+0x42/0x140 [ 1265.360319][T25639] io_ring_ctx_alloc+0x4d0/0xc40 [ 1265.360359][T25639] io_uring_create+0x50/0x990 [ 1265.360396][T25639] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1265.360420][T25639] ? __fget_files+0x2a/0x420 [ 1265.360442][T25639] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1265.360479][T25639] ? ksys_write+0x242/0x270 [ 1265.360515][T25639] __do_fast_syscall_32+0x27a/0x6a0 [ 1265.360542][T25639] ? do_fast_syscall_32+0x33/0x70 [ 1265.360566][T25639] ? asm_int80_emulation+0x1a/0x20 [ 1265.360588][T25639] ? do_int80_emulation+0x299/0x500 [ 1265.360612][T25639] ? trace_irq_disable+0x3b/0x140 [ 1265.360644][T25639] do_fast_syscall_32+0x33/0x70 [ 1265.360669][T25639] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1265.360696][T25639] RIP: 0023:0xf6fff0ec [ 1265.360716][T25639] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1265.360735][T25639] RSP: 002b:00000000f53ed43c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1265.360758][T25639] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000808 [ 1265.360774][T25639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1265.360786][T25639] RBP: 00000000f53ed4fc R08: 0000000000000000 R09: 0000000000000000 [ 1265.360800][T25639] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1265.360813][T25639] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1265.360838][T25639] [ 1265.638868][T25635] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5936'. [ 1265.811939][ T7478] Bluetooth: hci6: command tx timeout [ 1266.048485][T25649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.071398][T25649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.161426][T21865] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1266.251393][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.316341][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.352942][T21865] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1266.363447][T21860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1266.377449][ T35] bond0 (unregistering): Released all slaves [ 1266.393320][T21860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1266.411643][T21860] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1266.413466][T21865] usb 9-1: not running at top speed; connect to a high speed hub [ 1266.436365][T21860] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1266.507615][T21865] usb 9-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 1266.568677][T21860] usb 1-1: USB disconnect, device number 126 [ 1266.575022][T21865] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 4328, setting to 64 [ 1266.598360][T25653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1266.643043][T25653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1266.702231][T21865] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.747222][T21865] usb 9-1: Product: syz [ 1266.778958][T21865] usb 9-1: Manufacturer: syz [ 1266.797403][T21865] usb 9-1: SerialNumber: syz [ 1266.837451][T25648] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1267.483535][T25673] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5944'. [ 1267.652487][T25672] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5940'. [ 1267.669472][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5944'. [ 1267.807828][ T35] hsr_slave_0: left promiscuous mode [ 1267.839323][ T35] hsr_slave_1: left promiscuous mode [ 1267.871658][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1267.890461][ T7478] Bluetooth: hci6: command tx timeout [ 1267.909314][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1267.933471][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1267.953603][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.007033][ T35] veth1_macvtap: left promiscuous mode [ 1268.012911][ T35] veth0_macvtap: left promiscuous mode [ 1268.021371][ T35] veth1_vlan: left promiscuous mode [ 1268.042910][ T35] veth0_vlan: left promiscuous mode [ 1269.276545][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1269.360731][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1269.600235][T21885] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1269.617397][ C0] raw-gadget.5 gadget.2: ignoring, device is not running [ 1269.683833][T21868] usb 1-1: new low-speed USB device number 127 using dummy_hcd [ 1269.726398][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 1269.761348][T21885] usb 3-1: device descriptor read/64, error -32 [ 1269.827401][T25704] netlink: 'syz.6.5950': attribute type 1 has an invalid length. [ 1269.842291][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1269.883592][T21868] usb 1-1: device descriptor read/64, error -32 [ 1269.991507][ T7478] Bluetooth: hci6: command tx timeout [ 1270.000545][T21885] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1270.169137][T25702] bond2: (slave veth0_to_bond): Releasing backup interface [ 1270.185474][T21865] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1270.210284][T21868] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 1270.216535][T25704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5950'. [ 1270.239647][T21865] usb 9-1: MIDIStreaming interface descriptor not found [ 1270.319217][T25702] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1270.410889][T21868] usb 1-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1270.463075][T21868] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1270.480499][T25611] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.496399][T21865] usb 9-1: USB disconnect, device number 7 [ 1270.505236][T25611] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.517820][T21868] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1270.563755][T25611] bridge_slave_0: entered allmulticast mode [ 1270.598435][T21868] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1270.621503][T25611] bridge_slave_0: entered promiscuous mode [ 1270.636595][T21868] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.648638][T21885] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1270.665160][T25611] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.715873][T25611] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.726929][T21885] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1270.736079][T25611] bridge_slave_1: entered allmulticast mode [ 1270.754815][T21868] usb 1-1: config 0 descriptor?? [ 1270.776922][T21885] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1270.791778][T25700] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1270.859007][T25611] bridge_slave_1: entered promiscuous mode [ 1271.031776][T14573] udevd[14573]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1271.186143][T25611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1271.288564][T25611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1271.326670][T21868] kye 0003:0458:0087.005E: unexpected long global item [ 1271.375818][T21868] kye 0003:0458:0087.005E: parse failed [ 1271.401357][T21868] kye 0003:0458:0087.005E: probe with driver kye failed with error -22 [ 1271.453515][T21885] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1271.471095][T21885] usb 3-1: Product: syz [ 1271.480515][T21885] usb 3-1: Manufacturer: syz [ 1271.492453][T21885] usb 3-1: SerialNumber: syz [ 1271.566171][T21885] usb 3-1: config 0 descriptor?? [ 1271.585125][T25723] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5953'. [ 1271.611232][T25611] team0: Port device team_slave_0 added [ 1271.639760][T21885] usb 3-1: can't set config #0, error -71 [ 1271.669957][T25611] team0: Port device team_slave_1 added [ 1271.686887][T21867] usb 1-1: USB disconnect, device number 2 [ 1271.707642][T21885] usb 3-1: USB disconnect, device number 88 [ 1271.898259][T25723] syzkaller0: left promiscuous mode [ 1271.907296][T25723] syzkaller0: left allmulticast mode [ 1271.918768][T25733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1271.957413][T25733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1271.959816][T25611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.004139][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.051900][ T7478] Bluetooth: hci6: command tx timeout [ 1272.069968][T25611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.098783][T25611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.107502][T25611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1272.139138][T25611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.223381][T21885] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1272.338791][T25611] hsr_slave_0: entered promiscuous mode [ 1272.357434][T25611] hsr_slave_1: entered promiscuous mode [ 1272.372311][T25611] debugfs: 'hsr0' already exists in 'hsr' [ 1272.380252][T21885] usb 9-1: Using ep0 maxpacket: 32 [ 1272.388434][T25611] Cannot create hsr debugfs directory [ 1272.401453][T21885] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1272.424378][T21885] usb 9-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 1272.452448][T21885] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.476682][T21885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.494756][T21885] usb 9-1: Product: syz [ 1272.506634][T21885] usb 9-1: Manufacturer: syz [ 1272.520384][T21885] usb 9-1: SerialNumber: syz [ 1272.994563][T25727] syzkaller0: entered promiscuous mode [ 1273.026894][T25727] syzkaller0: entered allmulticast mode [ 1273.165751][T21885] usb 9-1: USB disconnect, device number 8 [ 1273.180220][T21860] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1273.322597][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1273.371273][T21860] usb 3-1: Using ep0 maxpacket: 8 [ 1273.391348][T21860] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1273.404613][T21860] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1273.419529][T21860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.432843][T21868] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1273.434101][T21860] usb 3-1: Product: syz [ 1273.463273][T21860] usb 3-1: Manufacturer: syz [ 1273.468075][T21860] usb 3-1: SerialNumber: syz [ 1273.486453][T21860] usb 3-1: config 0 descriptor?? [ 1273.522297][T21860] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1273.532487][T21860] usb 3-1: setting power ON [ 1273.537514][T21860] dvb-usb: bulk message failed: -22 (2/0) [ 1273.555367][T21860] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1273.586740][T21860] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1273.603431][T21868] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1273.615287][T21868] usb 1-1: not running at top speed; connect to a high speed hub [ 1273.617944][T21860] usb 3-1: media controller created [ 1273.633474][T21868] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1273.654571][T21868] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1273.667967][T21868] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1273.689345][T21868] usb 1-1: string descriptor 0 read error: -22 [ 1273.697382][T21860] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1273.708013][T21868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1273.770833][T21868] usb 1-1: 0:2 : does not exist [ 1273.799693][T21860] usb 3-1: selecting invalid altsetting 6 [ 1273.819641][T21860] usb 3-1: digital interface selection failed (-22) [ 1273.827796][T21860] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1273.841920][T21860] usb 3-1: setting power OFF [ 1273.861409][T21860] dvb-usb: bulk message failed: -22 (2/0) [ 1273.867758][T21860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1273.878381][T21860] (NULL device *): no alternate interface [ 1273.902005][T25769] FAULT_INJECTION: forcing a failure. [ 1273.902005][T25769] name failslab, interval 1, probability 0, space 1, times 0 [ 1273.932870][T25769] CPU: 0 UID: 0 PID: 25769 Comm: syz.8.5964 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.932910][T25769] Tainted: [L]=SOFTLOCKUP [ 1273.932919][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1273.932932][T25769] Call Trace: [ 1273.932941][T25769] [ 1273.932950][T25769] dump_stack_lvl+0xe8/0x150 [ 1273.932986][T25769] should_fail_ex+0x410/0x560 [ 1273.933022][T25769] should_failslab+0xa8/0x100 [ 1273.933057][T25769] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1273.933087][T25769] ? __d_alloc+0x37/0x6f0 [ 1273.933106][T25769] ? __d_alloc+0x37/0x6f0 [ 1273.933130][T25769] __d_alloc+0x37/0x6f0 [ 1273.933155][T25769] d_alloc_parallel+0xde/0x16b0 [ 1273.933190][T25769] ? __d_lookup+0x66/0x790 [ 1273.933213][T25769] ? __d_lookup+0x66/0x790 [ 1273.933237][T25769] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1273.933259][T25769] ? d_lookup+0x1f/0xa0 [ 1273.933282][T25769] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1273.933321][T25769] lookup_open+0x2c7/0x1a40 [ 1273.933373][T25769] path_openat+0x677/0x1d60 [ 1273.933415][T25769] do_file_open+0x23e/0x4a0 [ 1273.933444][T25769] ? __pfx_do_file_open+0x10/0x10 [ 1273.933491][T25769] ? _raw_spin_unlock+0x28/0x50 [ 1273.933523][T25769] ? alloc_fd+0x651/0x6c0 [ 1273.933583][T25769] do_sys_openat2+0x115/0x200 [ 1273.933625][T25769] ? __fget_files+0x3a2/0x420 [ 1273.933647][T25769] ? __pfx_do_sys_openat2+0x10/0x10 [ 1273.933683][T25769] ? fput+0xa0/0xd0 [ 1273.933713][T25769] ? ksys_write+0x242/0x270 [ 1273.933741][T25769] __ia32_compat_sys_openat+0x131/0x160 [ 1273.933780][T25769] __do_fast_syscall_32+0x27a/0x6a0 [ 1273.933807][T25769] ? do_fast_syscall_32+0x33/0x70 [ 1273.933832][T25769] ? asm_int80_emulation+0x1a/0x20 [ 1273.933853][T25769] ? do_int80_emulation+0x299/0x500 [ 1273.933883][T25769] do_fast_syscall_32+0x33/0x70 [ 1273.933909][T25769] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1273.933958][T25769] RIP: 0023:0xf6fff0ec [ 1273.933979][T25769] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1273.934006][T25769] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1273.934030][T25769] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 1273.934046][T25769] RDX: 000000000000275a RSI: 0000000000000000 RDI: 0000000000000000 [ 1273.934060][T25769] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1273.934072][T25769] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1273.934086][T25769] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1273.934117][T25769] [ 1274.287683][T21860] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1274.530997][T21860] usb 3-1: USB disconnect, device number 89 [ 1274.555596][T25765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.586542][T25765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.681411][T25765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1274.724223][T25765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1274.788834][T25783] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5968'. [ 1274.925688][T21868] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1274.979651][T25788] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5967'. [ 1275.096286][T25788] kAFS: unable to lookup cell 'ÿ' [ 1275.110907][T21860] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1275.120486][T21868] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1275.157892][T25792] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1275.179056][T21868] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 1275.236541][T25792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5969'. [ 1275.291920][T21860] usb 3-1: Using ep0 maxpacket: 16 [ 1275.307590][T21868] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1275.354519][T21860] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1275.414802][T21860] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1275.446313][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1275.467243][T21868] usb 1-1: USB disconnect, device number 3 [ 1275.477016][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1275.514349][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1275.536878][T21860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1275.577333][T21860] usb 3-1: config 0 has no interface number 0 [ 1275.599265][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1275.685722][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1275.740013][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1275.807207][T21860] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.839435][T25803] FAULT_INJECTION: forcing a failure. [ 1275.839435][T25803] name failslab, interval 1, probability 0, space 1, times 0 [ 1275.865781][T21860] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1275.892368][T21860] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1275.902634][T25803] CPU: 0 UID: 0 PID: 25803 Comm: syz.6.5971 Tainted: G L syzkaller #0 PREEMPT(full) [ 1275.902671][T25803] Tainted: [L]=SOFTLOCKUP [ 1275.902680][T25803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1275.902693][T25803] Call Trace: [ 1275.902701][T25803] [ 1275.902710][T25803] dump_stack_lvl+0xe8/0x150 [ 1275.902749][T25803] should_fail_ex+0x410/0x560 [ 1275.902777][T25803] should_failslab+0xa8/0x100 [ 1275.902825][T25803] __kmalloc_cache_noprof+0xa8/0x660 [ 1275.902856][T25803] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1275.902893][T25803] ? sctp_add_bind_addr+0x8c/0x370 [ 1275.902926][T25803] ? sctp_add_bind_addr+0x8c/0x370 [ 1275.902966][T25803] sctp_add_bind_addr+0x8c/0x370 [ 1275.903005][T25803] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1275.903043][T25803] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1275.903079][T25803] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1275.903115][T25803] ? sctp_v6_is_any+0x64/0x80 [ 1275.903136][T25803] ? sctp_copy_one_addr+0x93/0x360 [ 1275.903185][T25803] sctp_bind_addr_copy+0xb3/0x3c0 [ 1275.903218][T25803] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1275.903252][T25803] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1275.903281][T25803] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1275.903309][T25803] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.903335][T25803] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.903359][T25803] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1275.903386][T25803] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1275.903414][T25803] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1275.903452][T25803] sctp_sendmsg+0x159b/0x2d00 [ 1275.903493][T25803] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1275.903525][T25803] ? aa_sk_perm+0x6e0/0x910 [ 1275.903554][T25803] ? __might_fault+0xaf/0x130 [ 1275.903586][T25803] ? sock_rps_record_flow+0x19/0x350 [ 1275.903615][T25803] ? inet_sendmsg+0x298/0x320 [ 1275.903642][T25803] ? __pfx_inet_sendmsg+0x10/0x10 [ 1275.903665][T25803] sock_sendmsg_nosec+0x10e/0x180 [ 1275.903699][T25803] __sys_sendto+0x408/0x5a0 [ 1275.903739][T25803] ? __pfx___sys_sendto+0x10/0x10 [ 1275.903786][T25803] ? __fget_files+0x3a2/0x420 [ 1275.903825][T25803] ? ksys_write+0x242/0x270 [ 1275.903856][T25803] __ia32_sys_sendto+0xdd/0x100 [ 1275.903895][T25803] __do_fast_syscall_32+0x27a/0x6a0 [ 1275.903923][T25803] ? do_fast_syscall_32+0x33/0x70 [ 1275.903947][T25803] ? asm_int80_emulation+0x1a/0x20 [ 1275.903968][T25803] ? do_int80_emulation+0x299/0x500 [ 1275.903992][T25803] ? trace_irq_disable+0x3b/0x140 [ 1275.904025][T25803] do_fast_syscall_32+0x33/0x70 [ 1275.904052][T25803] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1275.904079][T25803] RIP: 0023:0xf7fa80ec [ 1275.904099][T25803] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1275.904119][T25803] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1275.904143][T25803] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 1275.904159][T25803] RDX: 0000000000000001 RSI: 00000000aba51c5d RDI: 0000000080000100 [ 1275.904173][T25803] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 1275.904187][T25803] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1275.904200][T25803] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1275.904232][T25803] [ 1276.493781][T21860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.502032][T21860] usb 3-1: Product: syz [ 1276.506274][T21860] usb 3-1: Manufacturer: syz [ 1276.511013][T21860] usb 3-1: SerialNumber: syz [ 1276.565274][T21860] usb 3-1: config 0 descriptor?? [ 1276.577004][T21860] usb 3-1: selecting invalid altsetting 2 [ 1276.771963][T25807] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5972'. [ 1276.886438][T25611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1276.921737][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5972'. [ 1276.941081][T25611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1276.955538][T25611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1277.020655][T25611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1277.066603][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1277.092402][T25611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1277.163356][T25611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1277.210286][T25611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1277.244112][T25611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1277.398970][ C0] usb 3-1: async_complete: urb error -32 [ 1277.416542][T21860] get_1284_register: usb error -32 [ 1277.501234][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5974'. [ 1277.637291][T25611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1277.753285][T25611] 8021q: adding VLAN 0 to HW filter on device team0 [ 1277.797183][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.804506][ T9016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.847049][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.854370][ T9016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.054125][T25611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.168422][T25611] veth0_vlan: entered promiscuous mode [ 1278.219769][T25611] veth1_vlan: entered promiscuous mode [ 1278.307382][T25844] fuse: fd is not a fuse device [ 1278.329285][T25844] loop4: detected capacity change from 0 to 7 [ 1278.361813][T25611] veth0_macvtap: entered promiscuous mode [ 1278.388384][T25611] veth1_macvtap: entered promiscuous mode [ 1278.408821][T25845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5978'. [ 1278.439649][T25844] Dev loop4: unable to read RDB block 7 [ 1278.454910][T25611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.495435][T25844] loop4: unable to read partition table [ 1278.526255][T25844] loop4: partition table beyond EOD, truncated [ 1278.551447][T25844] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1278.578938][T25611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.671383][ T9014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.685531][ T4978] Dev loop4: unable to read RDB block 7 [ 1278.703906][ T4978] loop4: unable to read partition table [ 1278.717653][ T4978] loop4: partition table beyond EOD, truncated [ 1278.830289][ T9021] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.917544][ T9021] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.017304][T21865] usb 3-1: USB disconnect, device number 90 [ 1279.030439][T20383] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1279.185480][ T9021] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.228128][ T9021] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.282481][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1279.416443][ T9014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.469407][ T9014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.615278][T21885] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1279.780299][T21885] usb 1-1: Using ep0 maxpacket: 8 [ 1279.820952][T21885] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1279.839522][T21885] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.856992][T21885] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1279.876782][T25871] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5982'. [ 1279.897732][T21885] usb 1-1: config 1 has no interface number 1 [ 1279.910357][T21885] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 1279.933914][T21885] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1279.978114][T21885] usb 1-1: config 1 interface 2 has no altsetting 0 [ 1280.017324][T21885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.045529][T21885] usb 1-1: Manufacturer: Ђ [ 1280.067155][T21885] usb 1-1: SerialNumber: ㇔薓湺⩱铘긓 [ 1280.124440][T21885] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1280.258913][T25882] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1280.368656][T21885] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1280.394836][T21885] usb 1-1: USB disconnect, device number 4 [ 1280.420981][T25882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5985'. [ 1280.448261][T14593] udevd[14593]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1280.470383][T21867] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 1280.642020][T21867] usb 4-1: Using ep0 maxpacket: 32 [ 1280.668338][T21867] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1280.693186][T21867] usb 4-1: New USB device found, idVendor=04b8, idProduct=0602, bcdDevice= 0.40 [ 1280.734373][T21867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1280.782421][T21867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.805455][T21867] usb 4-1: Product: syz [ 1280.817571][T21867] usb 4-1: Manufacturer: syz [ 1280.835977][T21867] usb 4-1: SerialNumber: syz [ 1281.384775][T25907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1281.410122][T25907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5988'. [ 1281.424183][T25904] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1281.447266][T25904] bond1 (unregistering): Released all slaves [ 1281.531836][T25878] syzkaller0: entered promiscuous mode [ 1281.539088][T25878] syzkaller0: entered allmulticast mode [ 1281.648497][T21867] usb 4-1: USB disconnect, device number 111 [ 1281.842621][T25913] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5989'. [ 1281.993895][T25913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1282.047445][T25913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1282.510339][T21885] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1282.708061][T21885] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1282.733130][T21885] usb 1-1: config 0 has no interfaces? [ 1282.802251][T21885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.822326][T21885] usb 1-1: Product: syz [ 1282.834399][T21885] usb 1-1: Manufacturer: syz [ 1282.841516][T21885] usb 1-1: SerialNumber: syz [ 1282.848706][T25930] FAULT_INJECTION: forcing a failure. [ 1282.848706][T25930] name failslab, interval 1, probability 0, space 1, times 0 [ 1282.884711][T25930] CPU: 0 UID: 0 PID: 25930 Comm: syz.8.5992 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.884748][T25930] Tainted: [L]=SOFTLOCKUP [ 1282.884757][T25930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1282.884771][T25930] Call Trace: [ 1282.884780][T25930] [ 1282.884789][T25930] dump_stack_lvl+0xe8/0x150 [ 1282.884831][T25930] should_fail_ex+0x410/0x560 [ 1282.884860][T25930] should_failslab+0xa8/0x100 [ 1282.884897][T25930] __kmalloc_noprof+0xfe/0x720 [ 1282.884927][T25930] ? bpf_lsm_capable+0x9/0x20 [ 1282.884957][T25930] ? do_handle_open+0x4f1/0xae0 [ 1282.884986][T25930] ? do_handle_open+0x4f1/0xae0 [ 1282.885024][T25930] do_handle_open+0x4f1/0xae0 [ 1282.885066][T25930] ? __pfx_do_handle_open+0x10/0x10 [ 1282.885099][T25930] ? fput+0xa0/0xd0 [ 1282.885127][T25930] ? ksys_write+0x242/0x270 [ 1282.885162][T25930] __do_fast_syscall_32+0x27a/0x6a0 [ 1282.885190][T25930] ? do_fast_syscall_32+0x33/0x70 [ 1282.885214][T25930] ? asm_int80_emulation+0x1a/0x20 [ 1282.885236][T25930] ? do_int80_emulation+0x299/0x500 [ 1282.885266][T25930] do_fast_syscall_32+0x33/0x70 [ 1282.885292][T25930] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1282.885318][T25930] RIP: 0023:0xf6fff0ec [ 1282.885338][T25930] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1282.885358][T25930] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000156 [ 1282.885381][T25930] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800021c0 [ 1282.885396][T25930] RDX: 00000000feffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1282.885409][T25930] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1282.885422][T25930] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1282.885435][T25930] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1282.885464][T25930] [ 1282.947334][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5995'. [ 1282.967956][T21885] usb 1-1: config 0 descriptor?? [ 1283.583739][T21867] usb 1-1: USB disconnect, device number 5 [ 1284.370353][T21867] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 1284.560264][T21867] usb 4-1: Using ep0 maxpacket: 8 [ 1284.589557][T21867] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 1284.647061][T21867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.701594][T21867] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1284.736824][T21867] usb 4-1: config 1 has no interface number 1 [ 1284.759258][T21867] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 129, changing to 7 [ 1284.811820][T21867] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1284.846353][T21867] usb 4-1: config 1 interface 2 has no altsetting 0 [ 1284.875026][T21867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.899778][T21867] usb 4-1: Manufacturer: Ђ [ 1284.911309][T21867] usb 4-1: SerialNumber: ㇔薓湺⩱铘긓 [ 1284.961917][T21867] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1285.040215][T21863] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1285.107483][T21867] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1285.208121][T14593] udevd[14593]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1285.233063][T21860] usb 4-1: USB disconnect, device number 112 [ 1285.240712][T21863] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1285.270370][T21863] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.314758][T21863] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1285.344656][T21863] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1285.378829][T21863] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1285.417574][T21863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.225054][T21860] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 1286.403134][T21860] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1286.457131][T21860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.493999][T21860] usb 4-1: Product: syz [ 1286.520070][T21860] usb 4-1: Manufacturer: syz [ 1286.551884][T21860] usb 4-1: SerialNumber: syz [ 1288.567088][T21863] usb 3-1: USB disconnect, device number 91 [ 1288.872697][T26006] support for cryptoloop has been removed. Use dm-crypt instead. [ 1288.981155][T21878] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1289.150238][T21878] usb 9-1: Using ep0 maxpacket: 16 [ 1289.161438][T21878] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1289.185627][T21878] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 1289.202634][T21878] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1289.231498][T21878] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1289.254811][T21878] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 1289.274849][T21878] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1289.298903][T21878] usb 9-1: config 0 has no interface number 0 [ 1289.310181][T21867] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1289.336762][T21878] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1289.363170][T21878] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1289.382151][T21878] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1289.393122][T21878] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.408949][T21878] usb 9-1: config 0 interface 125 has no altsetting 0 [ 1289.417807][T21878] usb 9-1: config 0 interface 125 has no altsetting 2 [ 1289.428712][T21878] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.445551][T21878] usb 9-1: Product: syz [ 1289.455831][T21878] usb 9-1: Manufacturer: syz [ 1289.466996][T21878] usb 9-1: SerialNumber: syz [ 1289.481531][T21867] usb 3-1: Using ep0 maxpacket: 32 [ 1289.481693][T21878] usb 9-1: config 0 descriptor?? [ 1289.492865][T21867] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1289.514496][T21878] usb 9-1: selecting invalid altsetting 2 [ 1289.518127][T21867] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.557845][T21867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.604320][T21867] usb 3-1: config 0 descriptor?? [ 1289.637147][T21867] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1289.857124][T21860] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1289.905855][T21860] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1289.947231][T21860] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1289.993453][T21860] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1290.051205][T21860] usb 4-1: USB disconnect, device number 113 [ 1290.338709][ C0] usb 9-1: async_complete: urb error -32 [ 1290.356549][T21878] get_1284_register: usb error -32 [ 1290.418675][T26028] FAULT_INJECTION: forcing a failure. [ 1290.418675][T26028] name failslab, interval 1, probability 0, space 1, times 0 [ 1290.439542][T26028] CPU: 0 UID: 0 PID: 26028 Comm: syz.0.6011 Tainted: G L syzkaller #0 PREEMPT(full) [ 1290.439580][T26028] Tainted: [L]=SOFTLOCKUP [ 1290.439601][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1290.439617][T26028] Call Trace: [ 1290.439626][T26028] [ 1290.439636][T26028] dump_stack_lvl+0xe8/0x150 [ 1290.439673][T26028] should_fail_ex+0x410/0x560 [ 1290.439702][T26028] should_failslab+0xa8/0x100 [ 1290.439739][T26028] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1290.439769][T26028] ? skb_clone+0x212/0x3a0 [ 1290.439791][T26028] ? skb_clone+0x212/0x3a0 [ 1290.439821][T26028] skb_clone+0x212/0x3a0 [ 1290.439848][T26028] __netlink_deliver_tap+0x413/0x860 [ 1290.439881][T26028] ? netlink_deliver_tap+0x2e/0x1b0 [ 1290.439905][T26028] netlink_deliver_tap+0x19c/0x1b0 [ 1290.439929][T26028] netlink_unicast+0x781/0x940 [ 1290.439972][T26028] netlink_sendmsg+0x813/0xb40 [ 1290.440004][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1290.440031][T26028] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1290.440061][T26028] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1290.440085][T26028] sock_sendmsg_nosec+0x13a/0x180 [ 1290.440116][T26028] ____sys_sendmsg+0x54e/0x850 [ 1290.440144][T26028] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1290.440175][T26028] ? ___sys_sendmsg+0x1ea/0x360 [ 1290.440203][T26028] ___sys_sendmsg+0x2a5/0x360 [ 1290.440224][T26028] ? __lock_acquire+0x683/0x2cf0 [ 1290.440258][T26028] ? __pfx____sys_sendmsg+0x10/0x10 [ 1290.440281][T26028] ? get_pid_task+0x20/0x1f0 [ 1290.440319][T26028] ? get_pid_task+0x20/0x1f0 [ 1290.440348][T26028] ? get_pid_task+0x20/0x1f0 [ 1290.440408][T26028] ? __fget_files+0x2a/0x420 [ 1290.440428][T26028] ? __fget_files+0x3a2/0x420 [ 1290.440459][T26028] __sys_sendmsg+0x177/0x240 [ 1290.440484][T26028] ? __pfx___sys_sendmsg+0x10/0x10 [ 1290.440527][T26028] __do_fast_syscall_32+0x27a/0x6a0 [ 1290.440554][T26028] ? do_fast_syscall_32+0x33/0x70 [ 1290.440579][T26028] ? asm_int80_emulation+0x1a/0x20 [ 1290.440599][T26028] ? do_int80_emulation+0x299/0x500 [ 1290.440622][T26028] ? trace_irq_disable+0x3b/0x140 [ 1290.440655][T26028] do_fast_syscall_32+0x33/0x70 [ 1290.440680][T26028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1290.440706][T26028] RIP: 0023:0xf705f0ec [ 1290.440727][T26028] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1290.440745][T26028] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1290.440767][T26028] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080006040 [ 1290.440783][T26028] RDX: 0000000004041080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1290.440797][T26028] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1290.440809][T26028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1290.440823][T26028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1290.440854][T26028] [ 1291.083610][T21867] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 1291.258889][T21867] usb 4-1: Using ep0 maxpacket: 32 [ 1291.276900][T21867] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1291.297461][T21867] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 1291.318307][T21867] usb 4-1: config 0 has no interface number 0 [ 1291.342225][T21867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.355157][T21867] usb 4-1: Product: syz [ 1291.361318][T21867] usb 4-1: Manufacturer: syz [ 1291.366150][T21867] usb 4-1: SerialNumber: syz [ 1291.395694][T21867] usb 4-1: config 0 descriptor?? [ 1291.434611][T21867] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1291.710336][T21867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1291.794778][T21867] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1291.867424][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1291.883241][ T5702] usb 9-1: USB disconnect, device number 9 [ 1291.918008][T21865] usb 4-1: USB disconnect, device number 114 [ 1292.005994][T21865] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1292.101427][T21865] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1292.156536][T21865] quatech2 4-1:0.51: device disconnected [ 1292.398375][T21860] usb 3-1: USB disconnect, device number 92 [ 1293.046865][T26080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1293.083428][T26080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1293.226637][T26083] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6021'. [ 1293.282579][T26094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1293.653034][T26095] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6022'. [ 1293.706194][T26097] netlink: 'syz.3.6022': attribute type 1 has an invalid length. [ 1294.879419][T21860] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1295.061648][T21860] usb 3-1: Using ep0 maxpacket: 16 [ 1295.086533][T21860] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1295.122655][T21860] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 1295.147419][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1295.200757][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1295.231133][T21860] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 1295.239216][T21113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1295.251278][T21860] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1295.261608][T21860] usb 3-1: config 0 has no interface number 0 [ 1295.271305][T21113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1295.280873][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1295.299172][T21113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1295.313448][T21113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1295.322279][T21113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1295.384176][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1295.431822][T21860] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1295.461302][T21860] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1295.515208][T21860] usb 3-1: config 0 interface 125 has no altsetting 0 [ 1295.557399][T21860] usb 3-1: config 0 interface 125 has no altsetting 2 [ 1295.589615][T21860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.611914][T21860] usb 3-1: Product: syz [ 1295.626229][T21860] usb 3-1: Manufacturer: syz [ 1295.652744][T21860] usb 3-1: SerialNumber: syz [ 1295.697956][T21860] usb 3-1: config 0 descriptor?? [ 1295.763748][T21860] usb 3-1: selecting invalid altsetting 2 [ 1295.768067][T26122] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 1295.836410][T26122] CUSE: unknown device info ">2¢“‰aBëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 1295.879133][T26122] CUSE: unknown device info "Ýÿÿÿ" [ 1295.909142][T26122] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 1295.957573][T26122] CUSE: DEVNAME unspecified [ 1296.254460][ T5702] usb 7-1: USB disconnect, device number 46 [ 1296.596166][ C0] usb 3-1: async_complete: urb error -32 [ 1296.613417][T21860] get_1284_register: usb error -32 [ 1297.057497][T26158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1297.414953][ T7478] Bluetooth: hci8: command tx timeout [ 1297.866004][T26171] FAULT_INJECTION: forcing a failure. [ 1297.866004][T26171] name failslab, interval 1, probability 0, space 1, times 0 [ 1297.905412][T26171] CPU: 1 UID: 0 PID: 26171 Comm: syz.0.6037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1297.905450][T26171] Tainted: [L]=SOFTLOCKUP [ 1297.905459][T26171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1297.905473][T26171] Call Trace: [ 1297.905482][T26171] [ 1297.905492][T26171] dump_stack_lvl+0xe8/0x150 [ 1297.905529][T26171] should_fail_ex+0x410/0x560 [ 1297.905560][T26171] should_failslab+0xa8/0x100 [ 1297.905598][T26171] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1297.905628][T26171] ? alloc_pages_mpol+0x24a/0x390 [ 1297.905648][T26171] ? ptlock_alloc+0x20/0x70 [ 1297.905674][T26171] ? ptlock_alloc+0x20/0x70 [ 1297.905718][T26171] ptlock_alloc+0x20/0x70 [ 1297.905745][T26171] pte_alloc_one+0x7a/0x370 [ 1297.905772][T26171] __pte_alloc+0x25/0x1a0 [ 1297.905809][T26171] do_pte_missing+0x2db7/0x34b0 [ 1297.905845][T26171] ? do_raw_spin_unlock+0xf5/0x200 [ 1297.905875][T26171] ? __pmd_alloc+0x40a/0x5c0 [ 1297.905905][T26171] handle_mm_fault+0x1b36/0x3080 [ 1297.905944][T26171] ? handle_mm_fault+0xec/0x3080 [ 1297.905978][T26171] ? __pfx_handle_mm_fault+0x10/0x10 [ 1297.906019][T26171] ? __lock_acquire+0x683/0x2cf0 [ 1297.906054][T26171] ? lock_mm_and_find_vma+0xa7/0x340 [ 1297.906089][T26171] do_user_addr_fault+0x746/0x1340 [ 1297.906137][T26171] exc_page_fault+0x6a/0xc0 [ 1297.906162][T26171] asm_exc_page_fault+0x26/0x30 [ 1297.906183][T26171] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 1297.906215][T26171] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 65 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1297.906234][T26171] RSP: 0018:ffffc9000500fb78 EFLAGS: 00050246 [ 1297.906254][T26171] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1297.906270][T26171] RDX: 0000000000000001 RSI: 0000000080000040 RDI: ffffc9000500fc80 [ 1297.906285][T26171] RBP: ffffc9000500fd30 R08: ffffc9000500fc87 R09: 1ffff92000a01f90 [ 1297.906301][T26171] R10: dffffc0000000000 R11: fffff52000a01f91 R12: 000000000000040f [ 1297.906317][T26171] R13: 1ffff92000a01f7c R14: ffffc9000500fc80 R15: 0000000080000040 [ 1297.906352][T26171] _copy_from_user+0x7a/0xb0 [ 1297.906382][T26171] do_fcntl+0xb23/0x1a30 [ 1297.906406][T26171] ? get_pid_task+0x20/0x1f0 [ 1297.906433][T26171] ? get_pid_task+0x20/0x1f0 [ 1297.906467][T26171] ? __pfx_do_fcntl+0x10/0x10 [ 1297.906501][T26171] ? sb_end_write+0xe8/0x190 [ 1297.906532][T26171] ? vfs_write+0x9ce/0xba0 [ 1297.906555][T26171] ? tomoyo_file_fcntl+0x78/0x220 [ 1297.906588][T26171] ? bpf_lsm_file_fcntl+0x9/0x20 [ 1297.906621][T26171] do_compat_fcntl64+0x50c/0x760 [ 1297.906649][T26171] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 1297.906690][T26171] ? ksys_write+0x1fc/0x270 [ 1297.906734][T26171] __do_fast_syscall_32+0x27a/0x6a0 [ 1297.906761][T26171] ? do_fast_syscall_32+0x33/0x70 [ 1297.906786][T26171] ? asm_int80_emulation+0x1a/0x20 [ 1297.906807][T26171] ? do_int80_emulation+0x299/0x500 [ 1297.906831][T26171] ? trace_irq_disable+0x3b/0x140 [ 1297.906865][T26171] do_fast_syscall_32+0x33/0x70 [ 1297.906891][T26171] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1297.906918][T26171] RIP: 0023:0xf705f0ec [ 1297.906937][T26171] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1297.906955][T26171] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 1297.906975][T26171] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000040f [ 1297.906991][T26171] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1297.907005][T26171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1297.907019][T26171] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1297.907032][T26171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1297.907064][T26171] [ 1298.583093][T21878] usb 3-1: USB disconnect, device number 93 [ 1299.131892][T21865] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1299.300157][T21865] usb 1-1: Using ep0 maxpacket: 32 [ 1299.331215][T21865] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1299.364476][T21865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1299.393038][T21865] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1299.436911][T21865] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.485553][T21865] usb 1-1: config 0 descriptor?? [ 1299.504072][ T7478] Bluetooth: hci8: command tx timeout [ 1299.539239][T21865] hub 1-1:0.0: USB hub found [ 1299.744691][T21865] hub 1-1:0.0: 1 port detected [ 1300.086322][T26202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1300.111745][T26202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1300.211807][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.220931][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.028467][T21865] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 1301.028635][T26208] FAULT_INJECTION: forcing a failure. [ 1301.028635][T26208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1301.041283][T21865] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 1301.079927][T21865] usbhid 1-1:0.0: can't add hid device: -32 [ 1301.087697][T26208] CPU: 0 UID: 0 PID: 26208 Comm: syz.2.6042 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.087734][T26208] Tainted: [L]=SOFTLOCKUP [ 1301.087747][T26208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1301.087761][T26208] Call Trace: [ 1301.087770][T26208] [ 1301.087780][T26208] dump_stack_lvl+0xe8/0x150 [ 1301.087817][T26208] should_fail_ex+0x410/0x560 [ 1301.087846][T26208] _copy_from_user+0x2d/0xb0 [ 1301.087875][T26208] cmsghdr_from_user_compat_to_kern+0x3c2/0x810 [ 1301.087918][T26208] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 1301.087962][T26208] ____sys_sendmsg+0x217/0x850 [ 1301.087992][T26208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1301.088033][T26208] ___sys_sendmsg+0x2a5/0x360 [ 1301.088056][T26208] ? __lock_acquire+0x683/0x2cf0 [ 1301.088093][T26208] ? __pfx____sys_sendmsg+0x10/0x10 [ 1301.088117][T26208] ? get_pid_task+0x20/0x1f0 [ 1301.088148][T26208] ? get_pid_task+0x20/0x1f0 [ 1301.088207][T26208] ? get_pid_task+0x20/0x1f0 [ 1301.088268][T26208] ? __fget_files+0x2a/0x420 [ 1301.088288][T26208] ? __fget_files+0x3a2/0x420 [ 1301.088319][T26208] __sys_sendmsg+0x177/0x240 [ 1301.088345][T26208] ? __pfx___sys_sendmsg+0x10/0x10 [ 1301.088389][T26208] __do_fast_syscall_32+0x27a/0x6a0 [ 1301.088417][T26208] ? do_fast_syscall_32+0x33/0x70 [ 1301.088443][T26208] ? asm_int80_emulation+0x1a/0x20 [ 1301.088474][T26208] ? do_int80_emulation+0x299/0x500 [ 1301.088499][T26208] ? trace_irq_disable+0x3b/0x140 [ 1301.088533][T26208] do_fast_syscall_32+0x33/0x70 [ 1301.088560][T26208] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.088587][T26208] RIP: 0023:0xf7f740ec [ 1301.088609][T26208] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1301.088630][T26208] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1301.088654][T26208] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1301.088671][T26208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.088685][T26208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.088698][T26208] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1301.088712][T26208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.088743][T26208] [ 1301.089907][T21865] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1301.581722][ T7478] Bluetooth: hci8: command tx timeout [ 1301.601667][T21860] usb 1-1: USB disconnect, device number 6 [ 1301.678936][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.954516][T21865] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1302.388072][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.689970][T26229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6046'. [ 1303.065096][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.658344][ T7478] Bluetooth: hci8: command tx timeout [ 1303.823970][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.938558][T26127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.982038][T26127] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.008255][T26127] bridge_slave_0: entered allmulticast mode [ 1304.058296][T26127] bridge_slave_0: entered promiscuous mode [ 1304.146797][T26127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.187271][T26127] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.225566][T26127] bridge_slave_1: entered allmulticast mode [ 1304.267425][T26127] bridge_slave_1: entered promiscuous mode [ 1304.595786][T26127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.706039][T26127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.969338][T26272] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1305.049056][T26272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1305.269708][T26127] team0: Port device team_slave_0 added [ 1305.342639][T26127] team0: Port device team_slave_1 added [ 1305.358000][ T5702] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1305.531885][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 1305.551454][ T5702] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1305.566887][ T5702] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1305.576637][T26127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1305.587654][T26127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.614889][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1305.626124][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1305.637990][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1305.654275][ T5702] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1305.664271][T26127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.677451][ T5702] usb 1-1: config 0 has no interface number 0 [ 1305.693340][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1305.708000][T26127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.716469][T26127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.745601][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1305.758383][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1305.788709][ T5702] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1305.807573][T26127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.861782][ T5702] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1305.897706][ T5702] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1305.934847][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.960440][ T5702] usb 1-1: Product: syz [ 1305.974348][ T5702] usb 1-1: Manufacturer: syz [ 1305.984307][ T35] bridge_slave_1: left allmulticast mode [ 1306.006745][ T5702] usb 1-1: SerialNumber: syz [ 1306.019172][ T35] bridge_slave_1: left promiscuous mode [ 1306.035442][ T5702] usb 1-1: config 0 descriptor?? [ 1306.047992][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.074432][ T5702] usb 1-1: selecting invalid altsetting 2 [ 1306.095932][ T35] bridge_slave_0: left allmulticast mode [ 1306.126543][ T35] bridge_slave_0: left promiscuous mode [ 1306.143812][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.200777][T21860] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1306.372614][T21860] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 1306.406277][T21860] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1306.432987][T21860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.687250][T21860] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 1306.733867][T21860] wwan wwan0: port wwan0qmi0 attached [ 1306.964788][ C1] usb 1-1: async_complete: urb error -32 [ 1306.974195][ T5702] get_1284_register: usb error -32 [ 1307.514874][ T35] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1307.783502][ T35] bond0 (unregistering): Released all slaves [ 1307.806857][ T35] bond1 (unregistering): Released all slaves [ 1307.837115][ T35] bond2 (unregistering): Released all slaves [ 1307.874442][ T35] bond3 (unregistering): Released all slaves [ 1307.904192][ T35] bond4 (unregistering): Released all slaves [ 1307.925733][ T35] bond5 (unregistering): Released all slaves [ 1307.959648][ T35] bond6 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1307.993704][ T35] bond6 (unregistering): Released all slaves [ 1308.057650][T21860] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 82:4a:22:32:44:ed [ 1308.140607][T26296] bridge1: entered promiscuous mode [ 1308.344862][ T35] : left promiscuous mode [ 1308.436104][T21860] usb 1-1: USB disconnect, device number 7 [ 1308.443893][T26312] FAULT_INJECTION: forcing a failure. [ 1308.443893][T26312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1308.498903][T26312] CPU: 1 UID: 0 PID: 26312 Comm: syz.8.6057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1308.498938][T26312] Tainted: [L]=SOFTLOCKUP [ 1308.498947][T26312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1308.498960][T26312] Call Trace: [ 1308.498968][T26312] [ 1308.498978][T26312] dump_stack_lvl+0xe8/0x150 [ 1308.499016][T26312] should_fail_ex+0x410/0x560 [ 1308.499048][T26312] _copy_to_user+0x31/0xb0 [ 1308.499079][T26312] simple_read_from_buffer+0xe1/0x170 [ 1308.499123][T26312] proc_fail_nth_read+0x1bb/0x230 [ 1308.499153][T26312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.499183][T26312] ? rw_verify_area+0x24a/0x4c0 [ 1308.499208][T26312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1308.499233][T26312] vfs_read+0x213/0xa80 [ 1308.499261][T26312] ? __pfx___mutex_lock+0x10/0x10 [ 1308.499287][T26312] ? __pfx_vfs_read+0x10/0x10 [ 1308.499312][T26312] ? __fget_files+0x2a/0x420 [ 1308.499339][T26312] ? __fget_files+0x3a2/0x420 [ 1308.499358][T26312] ? __fget_files+0x2a/0x420 [ 1308.499388][T26312] ksys_read+0x150/0x270 [ 1308.499413][T26312] ? __pfx_ksys_read+0x10/0x10 [ 1308.499441][T26312] ? asm_int80_emulation+0x1a/0x20 [ 1308.499469][T26312] do_int80_emulation+0x198/0x500 [ 1308.499495][T26312] ? trace_irq_disable+0x3b/0x140 [ 1308.499524][T26312] ? asm_int80_emulation+0x1a/0x20 [ 1308.499545][T26312] ? clear_bhb_loop+0x70/0xc0 [ 1308.499567][T26312] ? clear_bhb_loop+0x70/0xc0 [ 1308.499595][T26312] asm_int80_emulation+0x1a/0x20 [ 1308.499617][T26312] RIP: 0023:0xf71374eb [ 1308.499648][T26312] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1308.499666][T26312] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1308.499689][T26312] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53ed5d0 [ 1308.499704][T26312] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1308.499717][T26312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1308.499730][T26312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1308.499743][T26312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1308.499773][T26312] [ 1308.859950][T26127] hsr_slave_0: entered promiscuous mode [ 1308.867295][T26127] hsr_slave_1: entered promiscuous mode [ 1308.899857][T26127] debugfs: 'hsr0' already exists in 'hsr' [ 1308.905725][T26127] Cannot create hsr debugfs directory [ 1309.158035][T21865] usb 3-1: USB disconnect, device number 95 [ 1309.167962][T21865] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 1309.273259][T26316] program syz.8.6059 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1309.350639][T26325] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1309.403927][T26325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1309.569501][T21865] wwan wwan0: port wwan0qmi0 disconnected [ 1309.579344][ T5702] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1309.757509][ T5702] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1309.776973][ T5702] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1309.805473][ T5702] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1309.852584][ T5702] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.881666][ T5702] usb 9-1: config 0 descriptor?? [ 1309.921847][T21865] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1310.103990][T21865] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1310.137129][T21865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1310.160636][T21865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1310.223761][T21865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.281682][ T5702] ath6kl: Failed to submit usb control message: -71 [ 1310.325369][T21865] usb 3-1: config 0 descriptor?? [ 1310.341412][ T5702] ath6kl: unable to send the bmi data to the device: -71 [ 1310.374321][ T5702] ath6kl: Unable to send get target info: -71 [ 1310.405272][ T5702] ath6kl: Failed to init ath6kl core: -71 [ 1310.423266][ T5702] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1310.471624][ T5702] usb 9-1: USB disconnect, device number 10 [ 1310.796982][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.828982][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.889054][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.922339][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.941664][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.955668][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1310.999632][T21865] cp2112 0003:10C4:EA90.005F: unknown main item tag 0x0 [ 1311.073742][T21865] cp2112 0003:10C4:EA90.005F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1311.180787][T21865] cp2112 0003:10C4:EA90.005F: Part Number: 0x82 Device Version: 0xFE [ 1311.354943][T21865] cp2112 0003:10C4:EA90.005F: error requesting SMBus config [ 1311.373021][T21865] cp2112 0003:10C4:EA90.005F: probe with driver cp2112 failed with error -5 [ 1311.465841][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1311.493627][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1311.530183][T21867] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1311.681442][T21867] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1311.719599][T21867] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1311.728382][T21867] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.743494][T21867] usb 9-1: config 0 has no interface number 0 [ 1311.756931][T21867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1311.765578][T21867] usb 9-1: Product: syz [ 1311.769878][T21867] usb 9-1: Manufacturer: syz [ 1311.774793][T21867] usb 9-1: SerialNumber: syz [ 1311.793636][T21867] usb 9-1: config 0 descriptor?? [ 1311.841841][ T5273] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1312.023609][T21867] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1312.043121][T21867] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 82 [ 1312.074220][T21867] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1312.083453][T21867] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1312.095477][T21867] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1312.106680][ T5702] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1312.129739][T21867] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1312.145212][T21867] usb 9-1: USB disconnect, device number 11 [ 1312.170990][T21867] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1312.193224][T21867] keyspan 9-1:0.133: device disconnected [ 1312.291736][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 1312.297946][ T5702] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1312.311381][ T5702] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1312.320382][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1312.328703][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1312.339724][ T5702] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1312.353000][ T5702] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1312.362661][ T5702] usb 1-1: config 0 has no interface number 0 [ 1312.369127][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1312.410256][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1312.432870][ T5702] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1312.470853][ T5702] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1312.504362][ T5702] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1312.521121][ T5702] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1312.541820][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.592315][ T5702] usb 1-1: Product: syz [ 1312.596770][ T5702] usb 1-1: Manufacturer: syz [ 1312.602125][ T5702] usb 1-1: SerialNumber: syz [ 1312.615636][ T5702] usb 1-1: config 0 descriptor?? [ 1312.669118][ T5702] usb 1-1: selecting invalid altsetting 2 [ 1312.703850][ T35] IPVS: stop unused estimator thread 0... [ 1312.994841][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1312.994864][ T29] audit: type=1326 audit(1787178085.411:31590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1313.114994][ T29] audit: type=1326 audit(1787178085.411:31591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f117 code=0x7ffc0000 [ 1313.192375][T21860] usb 3-1: USB disconnect, device number 96 [ 1313.270914][ T29] audit: type=1326 audit(1787178085.411:31592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1313.455279][ T29] audit: type=1326 audit(1787178085.411:31593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f117 code=0x7ffc0000 [ 1313.572480][ C1] usb 1-1: async_complete: urb error -32 [ 1313.589339][ T5702] get_1284_register: usb error -32 [ 1313.627288][ T29] audit: type=1326 audit(1787178085.431:31594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1313.665348][ T29] audit: type=1326 audit(1787178085.431:31595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f117 code=0x7ffc0000 [ 1313.937872][ T29] audit: type=1326 audit(1787178085.451:31596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1314.358644][ T29] audit: type=1326 audit(1787178085.451:31597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f117 code=0x7ffc0000 [ 1314.433296][T26127] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1314.462195][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1314.470805][T26127] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1314.489660][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1314.515968][T26127] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1314.542125][T21865] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1314.571115][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1314.590739][T26127] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1314.604928][T26127] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1314.700821][T21865] usb 3-1: Using ep0 maxpacket: 32 [ 1314.707677][ T29] audit: type=1326 audit(1787178085.451:31598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 1314.713658][T21865] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1314.798127][T21865] usb 3-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1314.826632][T21865] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 1314.847109][T21865] usb 3-1: config 0 has no interface number 0 [ 1314.878665][T21865] usb 3-1: config 0 interface 251 has no altsetting 0 [ 1314.894364][ T29] audit: type=1326 audit(1787178085.451:31599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26372 comm="syz.3.6072" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf702f117 code=0x7ffc0000 [ 1314.920811][T21865] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.929737][T21865] usb 3-1: Product: syz [ 1314.936534][T21865] usb 3-1: Manufacturer: syz [ 1314.964665][T21865] usb 3-1: SerialNumber: syz [ 1315.015577][T21865] usb 3-1: config 0 descriptor?? [ 1315.021809][T26127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.199017][T26127] 8021q: adding VLAN 0 to HW filter on device team0 [ 1315.216334][T21860] usb 1-1: USB disconnect, device number 8 [ 1315.262219][T26394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.365325][T26394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.771945][T21865] usb 3-1: USB disconnect, device number 97 [ 1315.834611][ T9016] bridge0: port 1(bridge_slave_0) entered blocking state [ 1315.844187][ T9016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1316.021719][T26410] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1316.043634][T26410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1316.084587][ T9016] bridge0: port 2(bridge_slave_1) entered blocking state [ 1316.091809][ T9016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1316.549108][T26127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1316.824176][T26127] veth0_vlan: entered promiscuous mode [ 1316.943200][T26127] veth1_vlan: entered promiscuous mode [ 1317.237518][T26127] veth0_macvtap: entered promiscuous mode [ 1317.315687][T26127] veth1_macvtap: entered promiscuous mode [ 1317.458142][T26433] kvm: user requested TSC rate below hardware speed [ 1317.534979][T26127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1317.604455][T26127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.722120][ T9021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.741558][ T35] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.773215][ T35] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.905257][T26441] FAULT_INJECTION: forcing a failure. [ 1317.905257][T26441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.942210][T26441] CPU: 0 UID: 0 PID: 26441 Comm: syz.3.6083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1317.942248][T26441] Tainted: [L]=SOFTLOCKUP [ 1317.942257][T26441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1317.942271][T26441] Call Trace: [ 1317.942283][T26441] [ 1317.942293][T26441] dump_stack_lvl+0xe8/0x150 [ 1317.942332][T26441] should_fail_ex+0x410/0x560 [ 1317.942362][T26441] _copy_to_user+0x31/0xb0 [ 1317.942392][T26441] simple_read_from_buffer+0xe1/0x170 [ 1317.942434][T26441] proc_fail_nth_read+0x1bb/0x230 [ 1317.942470][T26441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1317.942500][T26441] ? rw_verify_area+0x24a/0x4c0 [ 1317.942525][T26441] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1317.942550][T26441] vfs_read+0x213/0xa80 [ 1317.942579][T26441] ? __pfx___mutex_lock+0x10/0x10 [ 1317.942605][T26441] ? __pfx_vfs_read+0x10/0x10 [ 1317.942629][T26441] ? __fget_files+0x2a/0x420 [ 1317.942654][T26441] ? __fget_files+0x3a2/0x420 [ 1317.942673][T26441] ? __fget_files+0x2a/0x420 [ 1317.942701][T26441] ksys_read+0x150/0x270 [ 1317.942726][T26441] ? __pfx_ksys_read+0x10/0x10 [ 1317.942754][T26441] ? asm_int80_emulation+0x1a/0x20 [ 1317.942782][T26441] do_int80_emulation+0x198/0x500 [ 1317.942808][T26441] ? trace_irq_disable+0x3b/0x140 [ 1317.942837][T26441] ? asm_int80_emulation+0x1a/0x20 [ 1317.942858][T26441] ? clear_bhb_loop+0x70/0xc0 [ 1317.942881][T26441] ? clear_bhb_loop+0x70/0xc0 [ 1317.942909][T26441] asm_int80_emulation+0x1a/0x20 [ 1317.942931][T26441] RIP: 0023:0xf71674eb [ 1317.942952][T26441] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1317.942971][T26441] RSP: 002b:00000000f53fc4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1317.942994][T26441] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 00000000f53fc5d0 [ 1317.943009][T26441] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1317.943021][T26441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1317.943034][T26441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1317.943047][T26441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1317.943080][T26441] [ 1318.262042][T26433] macsec1: entered promiscuous mode [ 1318.267416][T26433] dummy0: entered promiscuous mode [ 1318.275569][T26433] macsec1: entered allmulticast mode [ 1318.281131][T26433] dummy0: entered allmulticast mode [ 1318.297517][T26433] dummy0: left allmulticast mode [ 1318.343498][T21878] dummy0: left promiscuous mode [ 1318.352301][ T35] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.527116][T26444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'. [ 1318.557086][T26444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6084'. [ 1318.676997][T26445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6084'. [ 1318.796190][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.826560][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.934743][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.951893][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.960277][T21867] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1319.121071][T21867] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1319.159332][T21867] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 1319.195366][T21867] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1319.231910][T21867] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1319.254413][T21867] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1319.276435][T21867] usb 4-1: Product: syz [ 1319.288165][T21867] usb 4-1: Manufacturer: syz [ 1319.304027][T21867] usb 4-1: SerialNumber: syz [ 1319.322638][T21867] usb 4-1: config 0 descriptor?? [ 1319.339533][T21867] hub 4-1:0.0: bad descriptor, ignoring hub [ 1319.351928][T21867] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1319.379722][T21867] usb 4-1: selecting invalid altsetting 0 [ 1319.625874][T26465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6087'. [ 1319.930549][T26473] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6090'. [ 1319.968468][T26473] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6090'. [ 1320.098523][T26444] usb 4-1: reset high-speed USB device number 117 using dummy_hcd [ 1320.422404][T26481] FAULT_INJECTION: forcing a failure. [ 1320.422404][T26481] name failslab, interval 1, probability 0, space 1, times 0 [ 1320.442403][T26481] CPU: 0 UID: 0 PID: 26481 Comm: syz.0.6094 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.442443][T26481] Tainted: [L]=SOFTLOCKUP [ 1320.442451][T26481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1320.442469][T26481] Call Trace: [ 1320.442478][T26481] [ 1320.442487][T26481] dump_stack_lvl+0xe8/0x150 [ 1320.442522][T26481] should_fail_ex+0x410/0x560 [ 1320.442550][T26481] should_failslab+0xa8/0x100 [ 1320.442586][T26481] __kmalloc_noprof+0xfe/0x720 [ 1320.442621][T26481] ? tomoyo_encode+0x2ad/0x570 [ 1320.442648][T26481] ? tomoyo_encode+0x2ad/0x570 [ 1320.442683][T26481] tomoyo_encode+0x2ad/0x570 [ 1320.442725][T26481] tomoyo_realpath_from_path+0x5fa/0x640 [ 1320.442771][T26481] tomoyo_mount_permission+0x3e9/0x9e0 [ 1320.442798][T26481] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 1320.442831][T26481] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1320.442857][T26481] ? kasan_save_track+0x4f/0x80 [ 1320.442956][T26481] ? kasan_quarantine_put+0xbb/0x1f0 [ 1320.442992][T26481] security_sb_mount+0xe4/0x320 [ 1320.443024][T26481] path_mount+0xbc/0x1050 [ 1320.443062][T26481] ? user_path_at+0xd4/0x160 [ 1320.443088][T26481] __se_sys_mount+0x31d/0x420 [ 1320.443130][T26481] ? __pfx___se_sys_mount+0x10/0x10 [ 1320.443171][T26481] ? __ia32_sys_mount+0x20/0xc0 [ 1320.443209][T26481] __do_fast_syscall_32+0x27a/0x6a0 [ 1320.443238][T26481] ? do_fast_syscall_32+0x33/0x70 [ 1320.443264][T26481] ? asm_int80_emulation+0x1a/0x20 [ 1320.443285][T26481] ? do_int80_emulation+0x299/0x500 [ 1320.443311][T26481] ? trace_irq_disable+0x3b/0x140 [ 1320.443346][T26481] do_fast_syscall_32+0x33/0x70 [ 1320.443373][T26481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1320.443401][T26481] RIP: 0023:0xf705f0ec [ 1320.443422][T26481] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1320.443442][T26481] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 1320.443468][T26481] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000 [ 1320.443484][T26481] RDX: 0000000000000000 RSI: 0000000000100000 RDI: 0000000000000000 [ 1320.443498][T26481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1320.443512][T26481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1320.443537][T26481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1320.443569][T26481] [ 1320.444799][T26481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1320.874297][T26483] netlink: 'syz.8.6095': attribute type 10 has an invalid length. [ 1320.882982][T26483] ipvlan0: entered allmulticast mode [ 1320.888398][T26483] veth0_vlan: entered allmulticast mode [ 1320.902994][T26483] team0: Device ipvlan0 failed to register rx_handler [ 1320.963557][T26483] bond1: (slave bond_slave_1): Device is not our slave [ 1320.971274][T26483] bond1: option active_slave: invalid value (bond_slave_1) [ 1320.985807][T26487] FAULT_INJECTION: forcing a failure. [ 1320.985807][T26487] name failslab, interval 1, probability 0, space 1, times 0 [ 1320.998908][T26487] CPU: 1 UID: 0 PID: 26487 Comm: syz.0.6096 Tainted: G L syzkaller #0 PREEMPT(full) [ 1320.998944][T26487] Tainted: [L]=SOFTLOCKUP [ 1320.998953][T26487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1320.998965][T26487] Call Trace: [ 1320.998975][T26487] [ 1320.998984][T26487] dump_stack_lvl+0xe8/0x150 [ 1320.999018][T26487] should_fail_ex+0x410/0x560 [ 1320.999046][T26487] should_failslab+0xa8/0x100 [ 1320.999083][T26487] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1320.999112][T26487] ? vm_area_dup+0x28/0x670 [ 1320.999137][T26487] ? vm_area_dup+0x28/0x670 [ 1320.999181][T26487] vm_area_dup+0x28/0x670 [ 1320.999208][T26487] ? __split_vma+0x1c6/0xa50 [ 1320.999237][T26487] __split_vma+0x1dc/0xa50 [ 1320.999275][T26487] ? __pfx___split_vma+0x10/0x10 [ 1320.999311][T26487] ? vma_expand+0x84d/0xf40 [ 1320.999353][T26487] vms_gather_munmap_vmas+0x322/0x1370 [ 1320.999394][T26487] ? __pfx_vma_expand+0x10/0x10 [ 1320.999439][T26487] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1320.999479][T26487] ? move_page_tables+0x5cf/0x1c80 [ 1320.999531][T26487] do_vmi_align_munmap+0x2b4/0x4b0 [ 1320.999587][T26487] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1320.999662][T26487] do_vmi_munmap+0x252/0x2d0 [ 1320.999691][T26487] move_vma+0x1144/0x18a0 [ 1320.999734][T26487] ? arch_get_unmapped_area_topdown+0x269/0xb50 [ 1320.999770][T26487] ? __pfx_move_vma+0x10/0x10 [ 1320.999800][T26487] ? mtree_load+0x12a/0x780 [ 1320.999837][T26487] ? cap_mmap_addr+0xaf/0x100 [ 1320.999872][T26487] ? bpf_lsm_mmap_addr+0x9/0x50 [ 1320.999912][T26487] mremap_to+0x7e9/0x8c0 [ 1320.999943][T26487] ? mtree_load+0x12a/0x780 [ 1320.999968][T26487] ? __pfx_mremap_to+0x10/0x10 [ 1320.999996][T26487] ? may_expand_vm+0x24d/0x390 [ 1321.000033][T26487] ? check_prep_vma+0x9aa/0xc00 [ 1321.000073][T26487] __se_sys_mremap+0xe77/0x11d0 [ 1321.000105][T26487] ? ksys_write+0x1e6/0x270 [ 1321.000142][T26487] ? __pfx___se_sys_mremap+0x10/0x10 [ 1321.000174][T26487] ? __fget_files+0x3a2/0x420 [ 1321.000204][T26487] ? fput+0xa0/0xd0 [ 1321.000235][T26487] ? ksys_write+0x242/0x270 [ 1321.000267][T26487] ? __ia32_sys_mremap+0x20/0xc0 [ 1321.000293][T26487] __do_fast_syscall_32+0x27a/0x6a0 [ 1321.000322][T26487] ? do_fast_syscall_32+0x33/0x70 [ 1321.000349][T26487] ? asm_int80_emulation+0x1a/0x20 [ 1321.000372][T26487] ? do_int80_emulation+0x299/0x500 [ 1321.000397][T26487] ? trace_irq_disable+0x3b/0x140 [ 1321.000432][T26487] do_fast_syscall_32+0x33/0x70 [ 1321.000460][T26487] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.000488][T26487] RIP: 0023:0xf705f0ec [ 1321.000509][T26487] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1321.000528][T26487] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 1321.000552][T26487] RAX: ffffffffffffffda RBX: 0000000080ffa000 RCX: 0000000000001000 [ 1321.000568][T26487] RDX: 0000000000004000 RSI: 0000000000000003 RDI: 0000000080ffb000 [ 1321.000584][T26487] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1321.000597][T26487] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1321.000611][T26487] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1321.000644][T26487] [ 1321.003075][T26483] bond1 (unregistering): Released all slaves [ 1321.432066][T26488] bond1: option arp_all_targets: invalid value (1073741825) [ 1321.449416][T26488] bond1 (unregistering): Released all slaves [ 1321.824950][T21885] usb 4-1: USB disconnect, device number 117 [ 1321.953825][T26507] PKCS7: Unsupported SignedData version [ 1322.124732][T26508] netlink: 'syz.6.6101': attribute type 10 has an invalid length. [ 1322.241272][T26508] team0: Port device dummy0 added [ 1322.256058][T26520] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1322.317867][T26520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6106'. [ 1322.578546][T26522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1322.605864][T26522] block device autoloading is deprecated and will be removed. [ 1322.810927][T26540] random: crng reseeded on system resumption [ 1323.004892][T26545] program syz.6.6113 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1323.260443][T21885] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1323.261727][T21865] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1323.357832][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1323.442135][T21865] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1323.462972][T21885] usb 9-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 1323.473746][T21878] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1323.488746][T21865] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1323.496606][T21885] usb 9-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 1323.514240][T21885] usb 9-1: Product: syz [ 1323.530090][T21885] usb 9-1: Manufacturer: syz [ 1323.544989][T21885] usb 9-1: SerialNumber: syz [ 1323.549935][T21865] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1323.567884][T21885] usb 9-1: config 0 descriptor?? [ 1323.645416][T21865] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.657272][T21878] usb 4-1: device descriptor read/64, error -71 [ 1323.682701][T21865] usb 7-1: config 0 descriptor?? [ 1323.930536][T21878] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1324.060164][T21864] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 1324.145857][T21865] ath6kl: Failed to submit usb control message: -71 [ 1324.157101][T21865] ath6kl: unable to send the bmi data to the device: -71 [ 1324.165116][T21865] ath6kl: Unable to send get target info: -71 [ 1324.172589][T21878] usb 4-1: device descriptor read/64, error -71 [ 1324.193166][T21865] ath6kl: Failed to init ath6kl core: -71 [ 1324.247548][T21865] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1324.311372][T21865] usb 7-1: USB disconnect, device number 47 [ 1324.441922][T21878] usb usb4-port1: attempt power cycle [ 1324.820900][T21878] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1324.937038][T26575] FAULT_INJECTION: forcing a failure. [ 1324.937038][T26575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1324.963191][T26575] CPU: 1 UID: 0 PID: 26575 Comm: syz.6.6122 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.963228][T26575] Tainted: [L]=SOFTLOCKUP [ 1324.963235][T26575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1324.963245][T26575] Call Trace: [ 1324.963251][T26575] [ 1324.963258][T26575] dump_stack_lvl+0xe8/0x150 [ 1324.963302][T26575] should_fail_ex+0x410/0x560 [ 1324.963334][T26575] _copy_from_user+0x2d/0xb0 [ 1324.963362][T26575] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 1324.963394][T26575] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 1324.963426][T26575] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1324.963465][T26575] ? rcu_is_watching+0x16/0xb0 [ 1324.963486][T26575] ? kmem_cache_alloc_node_noprof+0x1d1/0x620 [ 1324.963521][T26575] ? alloc_pages_mpol+0x24a/0x390 [ 1324.963546][T26575] ip_generic_getfrag+0x149/0x2d0 [ 1324.963567][T26575] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1324.963583][T26575] ? raw_getfrag+0x21a/0x3a0 [ 1324.963702][T26575] __ip_append_data+0x21b6/0x3cf0 [ 1324.963734][T26575] ? __pfx_raw_getfrag+0x10/0x10 [ 1324.963786][T26575] ? __pfx___ip_append_data+0x10/0x10 [ 1324.963813][T26575] ? do_raw_spin_lock+0x12b/0x2f0 [ 1324.963847][T26575] ? ip_setup_cork+0x4ed/0x8f0 [ 1324.963867][T26575] ip_append_data+0x10d/0x190 [ 1324.963887][T26575] ? __pfx_raw_getfrag+0x10/0x10 [ 1324.963917][T26575] raw_sendmsg+0x1406/0x1a20 [ 1324.963959][T26575] ? __pfx_raw_sendmsg+0x10/0x10 [ 1324.963979][T26575] ? __lock_acquire+0x683/0x2cf0 [ 1324.964025][T26575] ? aa_sk_perm+0x6e0/0x910 [ 1324.964051][T26575] ? sock_rps_record_flow+0x19/0x350 [ 1324.964090][T26575] ? inet_sendmsg+0x298/0x320 [ 1324.964116][T26575] ? __pfx_inet_sendmsg+0x10/0x10 [ 1324.964138][T26575] sock_sendmsg_nosec+0x10e/0x180 [ 1324.964170][T26575] __sys_sendto+0x408/0x5a0 [ 1324.964199][T26575] ? __pfx___sys_sendto+0x10/0x10 [ 1324.964253][T26575] ? __fget_files+0x3a2/0x420 [ 1324.964284][T26575] ? ksys_write+0x242/0x270 [ 1324.964314][T26575] __ia32_sys_sendto+0xdd/0x100 [ 1324.964363][T26575] __do_fast_syscall_32+0x27a/0x6a0 [ 1324.964393][T26575] ? do_fast_syscall_32+0x33/0x70 [ 1324.964418][T26575] ? asm_int80_emulation+0x1a/0x20 [ 1324.964439][T26575] ? do_int80_emulation+0x299/0x500 [ 1324.964464][T26575] ? trace_irq_disable+0x3b/0x140 [ 1324.964497][T26575] do_fast_syscall_32+0x33/0x70 [ 1324.964536][T26575] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1324.964563][T26575] RIP: 0023:0xf7f640ec [ 1324.964583][T26575] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1324.964602][T26575] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1324.964625][T26575] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1324.964640][T26575] RDX: 000000000000ffec RSI: 0000000000000000 RDI: 0000000080000340 [ 1324.964654][T26575] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 1324.964668][T26575] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1324.964682][T26575] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1324.964712][T26575] [ 1324.988504][T21878] usb 4-1: device descriptor read/8, error -71 [ 1325.430181][T21864] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1325.657877][T21864] usb 1-1: Using ep0 maxpacket: 16 [ 1325.669543][T21864] usb 1-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1325.680216][T21878] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1325.699511][T21864] usb 1-1: config 3 has an invalid interface number: 155 but max is 0 [ 1325.719011][T21864] usb 1-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 1325.731508][T21878] usb 4-1: device descriptor read/8, error -71 [ 1325.752377][T21864] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.798252][T21864] usb 1-1: config 3 has no interface number 0 [ 1325.840907][T21878] usb usb4-port1: unable to enumerate USB device [ 1325.852964][T21864] usb 1-1: config 3 interface 155 has no altsetting 0 [ 1325.872703][T21864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.881206][T21864] usb 1-1: Product: syz [ 1325.885446][T21864] usb 1-1: Manufacturer: syz [ 1325.895736][T21864] usb 1-1: SerialNumber: syz [ 1326.114084][T26573] bridge0: port 3(syz_tun) entered blocking state [ 1326.129466][T26573] bridge0: port 3(syz_tun) entered disabled state [ 1326.157878][T26573] syz_tun: entered allmulticast mode [ 1326.187655][T26573] syz_tun: entered promiscuous mode [ 1326.199554][T26573] bridge0: port 3(syz_tun) entered blocking state [ 1326.206228][T26573] bridge0: port 3(syz_tun) entered forwarding state [ 1326.264978][T26573] bridge0: port 4(bond0) entered blocking state [ 1326.271937][T26573] bridge0: port 4(bond0) entered disabled state [ 1326.279468][T26573] bond0: entered allmulticast mode [ 1326.295462][T26573] bond_slave_0: entered allmulticast mode [ 1326.330468][T26573] bond_slave_1: entered allmulticast mode [ 1326.619911][T26573] bond0: entered promiscuous mode [ 1326.674544][T26573] bond_slave_0: entered promiscuous mode [ 1326.716239][T26573] bond_slave_1: entered promiscuous mode [ 1326.748512][T26592] netlink: 72 bytes leftover after parsing attributes in process `syz.8.6126'. [ 1326.794181][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6126'. [ 1326.882880][T26573] bridge0: port 4(bond0) entered blocking state [ 1326.891272][T26573] bridge0: port 4(bond0) entered forwarding state [ 1327.007536][T26582] bridge0: port 5(batadv0) entered blocking state [ 1327.022456][T26582] bridge0: port 5(batadv0) entered disabled state [ 1327.097302][T26582] batadv0: entered allmulticast mode [ 1327.157035][T26582] batadv0: entered promiscuous mode [ 1327.240681][T26582] bridge0: port 5(batadv0) entered blocking state [ 1327.247472][T26582] bridge0: port 5(batadv0) entered forwarding state [ 1327.340769][ T9017] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1327.351313][ T9017] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1327.391717][T26601] tipc: Invalid UDP bearer configuration [ 1327.391807][T26601] tipc: Enabling of bearer rejected, failed to enable media [ 1327.446555][T21864] uvcvideo 1-1:3.155: Found Unit with invalid ID 0 [ 1327.470677][T21864] uvcvideo 1-1:3.155: Found UVC 0.00 device syz (05a9:264a) [ 1327.492986][T21864] uvcvideo 1-1:3.155: No valid video chain found. [ 1327.516043][T21864] usb 1-1: USB disconnect, device number 10 [ 1327.653579][T26608] team0: Device ipvlan2 failed to register rx_handler [ 1327.689546][T26613] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6130'. [ 1327.906065][ T7478] Bluetooth: hci5: command 0x0406 tx timeout [ 1328.083393][T26620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1328.127933][T26620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1328.223362][T26623] program syz.2.6132 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1328.389522][T26629] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1328.498114][T21865] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1328.520646][T21864] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1328.760325][T21867] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1328.772903][T21865] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1328.783987][T21864] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1328.820579][T21864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1328.843868][T21865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1328.879563][T21865] usb 4-1: Product: syz [ 1328.891097][T21864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1328.915743][T21865] usb 4-1: Manufacturer: syz [ 1328.929128][T21865] usb 4-1: SerialNumber: syz [ 1328.942293][T21864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.963079][T21867] usb 1-1: Using ep0 maxpacket: 8 [ 1328.982624][T21867] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1329.028299][T21864] usb 3-1: config 0 descriptor?? [ 1329.057607][T21867] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 1329.097675][T21867] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 1329.175158][T21867] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1329.310255][T21867] usb 1-1: config 250 has no interface number 0 [ 1329.326159][T21864] ath6kl: Failed to submit usb control message: -71 [ 1329.343764][T21867] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1329.358618][T21864] ath6kl: unable to send the bmi data to the device: -71 [ 1329.391053][T21864] ath6kl: Unable to send get target info: -71 [ 1329.424905][T21867] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1329.446188][T21864] ath6kl: Failed to init ath6kl core: -71 [ 1329.453744][T21867] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 35 [ 1329.471351][T21864] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1329.494398][T21867] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1329.554197][T21864] usb 3-1: USB disconnect, device number 98 [ 1329.597860][T21867] usb 1-1: config 250 interface 228 has no altsetting 0 [ 1329.639895][T21867] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1329.665930][T21867] usb 1-1: Product: syz [ 1329.713607][T21867] usb 1-1: SerialNumber: syz [ 1329.754789][T21867] hub 1-1:250.228: bad descriptor, ignoring hub [ 1329.772839][T21867] hub 1-1:250.228: probe with driver hub failed with error -5 [ 1329.993834][T21867] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1330.042622][T26645] FAULT_INJECTION: forcing a failure. [ 1330.042622][T26645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1330.171512][T26645] CPU: 0 UID: 0 PID: 26645 Comm: syz.6.6136 Tainted: G L syzkaller #0 PREEMPT(full) [ 1330.171551][T26645] Tainted: [L]=SOFTLOCKUP [ 1330.171560][T26645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1330.171575][T26645] Call Trace: [ 1330.171585][T26645] [ 1330.171595][T26645] dump_stack_lvl+0xe8/0x150 [ 1330.171636][T26645] should_fail_ex+0x410/0x560 [ 1330.171668][T26645] _copy_from_user+0x2d/0xb0 [ 1330.171697][T26645] snd_seq_write+0x309/0x820 [ 1330.171857][T26645] ? __pfx_snd_seq_write+0x10/0x10 [ 1330.171889][T26645] ? bpf_lsm_file_permission+0x9/0x20 [ 1330.171917][T26645] ? security_file_permission+0x75/0x260 [ 1330.171953][T26645] ? rw_verify_area+0x203/0x4c0 [ 1330.171978][T26645] ? __pfx_snd_seq_write+0x10/0x10 [ 1330.172004][T26645] vfs_write+0x296/0xba0 [ 1330.172037][T26645] ? __pfx_vfs_write+0x10/0x10 [ 1330.172062][T26645] ? __fget_files+0x2a/0x420 [ 1330.172085][T26645] ? __fget_files+0x2a/0x420 [ 1330.172104][T26645] ? __fget_files+0x3a2/0x420 [ 1330.172122][T26645] ? __fget_files+0x2a/0x420 [ 1330.172151][T26645] ksys_write+0x150/0x270 [ 1330.172178][T26645] ? __pfx_ksys_write+0x10/0x10 [ 1330.172212][T26645] __do_fast_syscall_32+0x27a/0x6a0 [ 1330.172240][T26645] ? do_fast_syscall_32+0x33/0x70 [ 1330.172265][T26645] ? asm_int80_emulation+0x1a/0x20 [ 1330.172287][T26645] ? do_int80_emulation+0x299/0x500 [ 1330.172317][T26645] do_fast_syscall_32+0x33/0x70 [ 1330.172345][T26645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1330.172374][T26645] RIP: 0023:0xf7f640ec [ 1330.172395][T26645] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1330.172426][T26645] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1330.172449][T26645] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1330.172464][T26645] RDX: 000000000000ffc8 RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.172478][T26645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1330.172492][T26645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1330.172505][T26645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1330.172536][T26645] [ 1331.376307][ C0] usblp0: nonzero read bulk status received: -71 [ 1331.458624][T21885] usb 1-1: USB disconnect, device number 11 [ 1331.506067][T21885] usblp0: removed [ 1332.302030][T26669] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6141'. [ 1332.428558][T26669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6141'. [ 1332.654239][T26651] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 1333.186986][T21867] usb 9-1: USB disconnect, device number 12 [ 1333.199462][T21865] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1333.264314][T21865] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1333.333741][T21865] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1333.436221][T21865] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1333.501590][T21865] usb 4-1: USB disconnect, device number 122 [ 1333.693574][T26682] FAULT_INJECTION: forcing a failure. [ 1333.693574][T26682] name failslab, interval 1, probability 0, space 1, times 0 [ 1333.751847][T26682] CPU: 1 UID: 0 PID: 26682 Comm: syz.3.6144 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.751884][T26682] Tainted: [L]=SOFTLOCKUP [ 1333.751894][T26682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1333.751908][T26682] Call Trace: [ 1333.751918][T26682] [ 1333.751928][T26682] dump_stack_lvl+0xe8/0x150 [ 1333.751968][T26682] should_fail_ex+0x410/0x560 [ 1333.751999][T26682] should_failslab+0xa8/0x100 [ 1333.752038][T26682] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1333.752069][T26682] ? skb_clone+0x212/0x3a0 [ 1333.752093][T26682] ? skb_clone+0x212/0x3a0 [ 1333.752124][T26682] skb_clone+0x212/0x3a0 [ 1333.752152][T26682] __netlink_deliver_tap+0x413/0x860 [ 1333.752191][T26682] ? netlink_deliver_tap+0x2e/0x1b0 [ 1333.752218][T26682] netlink_deliver_tap+0x19c/0x1b0 [ 1333.752245][T26682] netlink_unicast+0x781/0x940 [ 1333.752293][T26682] netlink_sendmsg+0x813/0xb40 [ 1333.752329][T26682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.752360][T26682] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1333.752393][T26682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.752418][T26682] sock_sendmsg_nosec+0x13a/0x180 [ 1333.752452][T26682] ____sys_sendmsg+0x54e/0x850 [ 1333.752483][T26682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.752525][T26682] ___sys_sendmsg+0x2a5/0x360 [ 1333.752549][T26682] ? __lock_acquire+0x683/0x2cf0 [ 1333.752596][T26682] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.752620][T26682] ? get_pid_task+0x20/0x1f0 [ 1333.752651][T26682] ? get_pid_task+0x20/0x1f0 [ 1333.752680][T26682] ? get_pid_task+0x20/0x1f0 [ 1333.752744][T26682] ? __fget_files+0x2a/0x420 [ 1333.752764][T26682] ? __fget_files+0x3a2/0x420 [ 1333.752796][T26682] __sys_sendmsg+0x177/0x240 [ 1333.752823][T26682] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.752868][T26682] __do_fast_syscall_32+0x27a/0x6a0 [ 1333.752897][T26682] ? do_fast_syscall_32+0x33/0x70 [ 1333.752923][T26682] ? asm_int80_emulation+0x1a/0x20 [ 1333.752945][T26682] ? do_int80_emulation+0x299/0x500 [ 1333.752971][T26682] ? trace_irq_disable+0x3b/0x140 [ 1333.753010][T26682] do_fast_syscall_32+0x33/0x70 [ 1333.753037][T26682] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1333.753065][T26682] RIP: 0023:0xf702f0ec [ 1333.753086][T26682] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1333.753106][T26682] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1333.753145][T26682] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000240 [ 1333.753160][T26682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1333.753174][T26682] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1333.753186][T26682] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1333.753199][T26682] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1333.753230][T26682] [ 1333.815590][T21860] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 1334.072644][T26682] team0: Device ipvlan2 failed to register rx_handler [ 1334.428870][T21860] usb 1-1: New USB device found, idVendor=055d, idProduct=9001, bcdDevice=31.44 [ 1334.459519][T21860] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1334.483693][T21860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.517456][T21860] usb 1-1: config 0 descriptor?? [ 1334.555136][T21860] pwc: Samsung MPC-C30 USB webcam detected. [ 1334.755706][T21860] pwc: send_video_command error -71 [ 1334.774288][T21860] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1334.819074][T21860] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1334.880127][T21860] usb 1-1: USB disconnect, device number 12 [ 1335.509055][T26706] program syz.2.6147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1335.681530][T21878] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1335.780272][T21864] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1335.851565][T21878] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1335.864836][T21878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.876357][T21878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.888414][T21878] usb 1-1: config 0 descriptor?? [ 1335.942026][T21864] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1335.952698][T21864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1335.966412][T21864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1335.978745][T21864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.990501][T21864] usb 3-1: config 0 descriptor?? [ 1336.079223][T21867] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1336.105530][T21878] usbhid 1-1:0.0: can't add hid device: -71 [ 1336.112418][T21878] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1336.126762][T21878] usb 1-1: USB disconnect, device number 13 [ 1336.214332][T21864] ath6kl: Failed to submit usb control message: -71 [ 1336.235135][T21864] ath6kl: unable to send the bmi data to the device: -71 [ 1336.242970][T21864] ath6kl: Unable to send get target info: -71 [ 1336.250867][T21864] ath6kl: Failed to init ath6kl core: -71 [ 1336.284989][T21864] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1336.296887][T21867] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1336.310612][T21864] usb 3-1: USB disconnect, device number 99 [ 1336.319122][T21867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1336.362516][T21867] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.394350][T21867] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.422091][T21867] usb 7-1: config 0 descriptor?? [ 1336.590362][T21878] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1336.621689][T26727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1336.644533][T26729] tipc: Invalid UDP bearer configuration [ 1336.644639][T26729] tipc: Enabling of bearer rejected, failed to enable media [ 1336.763678][T21878] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1336.792930][T21878] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1336.820216][T21878] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1336.832364][T21878] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1336.861662][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.867320][T21878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.885574][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.890815][T21878] usb 1-1: Product: syz [ 1336.897883][T21878] usb 1-1: Manufacturer: syz [ 1336.902994][T21878] usb 1-1: SerialNumber: syz [ 1336.906557][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.929069][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.945621][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.965256][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.978719][T21867] cp2112 0003:10C4:EA90.0060: unknown main item tag 0x0 [ 1336.996374][T21867] cp2112 0003:10C4:EA90.0060: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 1337.068459][T26735] 0: reclassify loop, rule prio 0, protocol 03 [ 1337.081230][T21867] cp2112 0003:10C4:EA90.0060: error requesting version [ 1337.102816][T21867] cp2112 0003:10C4:EA90.0060: probe with driver cp2112 failed with error -5 [ 1337.141330][T26738] netlink: 'syz.2.6158': attribute type 10 has an invalid length. [ 1337.281295][T21878] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1337.440253][T21860] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1337.465694][T26751] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6160'. [ 1337.480990][T21878] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1337.499877][T21878] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 1337.511491][T21878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.525324][T21878] usb 9-1: config 0 descriptor?? [ 1337.535081][T26733] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1337.624026][T21860] usb 3-1: Using ep0 maxpacket: 32 [ 1337.632769][T21860] usb 3-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 1337.644725][T21860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1337.654752][T21860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.667989][T21860] usb 3-1: config 0 descriptor?? [ 1337.746268][T26733] trusted_key: encrypted_key: master key parameter '00000000000000004093' is invalid [ 1337.765534][T21878] ath6kl: Failed to submit usb control message: -71 [ 1337.782715][T21878] ath6kl: unable to send the bmi data to the device: -71 [ 1337.789893][T21878] ath6kl: Unable to send get target info: -71 [ 1337.802777][T21878] ath6kl: Failed to init ath6kl core: -71 [ 1337.814889][T21878] ath6kl_usb 9-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1337.831738][T21878] usb 9-1: USB disconnect, device number 13 [ 1337.930138][T21867] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 1338.080843][T21867] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1338.087420][T21860] elecom 0003:056E:00FB.0061: collection stack underflow [ 1338.097892][T21867] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1338.109651][T21867] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1338.115118][T21860] elecom 0003:056E:00FB.0061: item 0 2 0 12 parsing failed [ 1338.134056][T21860] elecom 0003:056E:00FB.0061: probe with driver elecom failed with error -22 [ 1338.135042][T21113] Bluetooth: hci1: command 0x0406 tx timeout [ 1338.177704][T21867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.406425][T21867] usb 4-1: usb_control_msg returned -32 [ 1338.419307][T21867] usbtmc 4-1:16.0: can't read capabilities [ 1338.434875][T26755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1338.446171][T26755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1338.460731][T21860] usb 1-1: USB disconnect, device number 14 [ 1338.633483][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6164'. [ 1338.865930][T21860] usb 7-1: USB disconnect, device number 48 [ 1339.000265][T21867] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1339.164580][T21867] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1339.197910][T21867] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.215589][T21867] usb 9-1: Product: syz [ 1339.223474][T21867] usb 9-1: Manufacturer: syz [ 1339.232035][T21867] usb 9-1: SerialNumber: syz [ 1339.494052][T26774] binder: 26767:26774 ioctl c0306201 800003c0 returned -14 [ 1340.087123][T21860] usb 3-1: USB disconnect, device number 100 [ 1340.547605][T26779] program syz.2.6168 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1340.724935][T21878] usb 4-1: USB disconnect, device number 123 [ 1340.890681][T21864] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1341.075696][T21864] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1341.123935][T21864] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1341.155965][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 1341.156009][ T29] audit: type=1326 audit(1787178113.571:31926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26783 comm="syz.3.6169" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x0 [ 1341.162278][T21864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1341.164479][T21864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.277141][T21864] usb 3-1: config 0 descriptor?? [ 1341.521499][T21864] ath6kl: Failed to submit usb control message: -71 [ 1341.556336][T21864] ath6kl: unable to send the bmi data to the device: -71 [ 1341.581924][T21864] ath6kl: Unable to send get target info: -71 [ 1341.609440][T21864] ath6kl: Failed to init ath6kl core: -71 [ 1341.664196][T21864] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1341.723205][T21864] usb 3-1: USB disconnect, device number 101 [ 1341.981502][T26792] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 1342.252472][T21864] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1342.420685][T21864] usb 7-1: Using ep0 maxpacket: 8 [ 1342.444011][T21864] usb 7-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1342.479556][T21864] usb 7-1: config index 0 descriptor too short (expected 5924, got 36) [ 1342.502089][T21864] usb 7-1: config 250 has an invalid interface number: 228 but max is -1 [ 1342.524656][T21864] usb 7-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1342.546531][T21864] usb 7-1: config 250 has no interface number 0 [ 1342.582456][T21864] usb 7-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1342.627189][T21864] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1342.658840][T21864] usb 7-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 35 [ 1342.700443][T26811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6178'. [ 1342.721233][T21864] usb 7-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1342.746905][T21864] usb 7-1: config 250 interface 228 has no altsetting 0 [ 1342.777958][T21864] usb 7-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1342.803841][T21864] usb 7-1: Product: syz [ 1342.810208][ T5702] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1342.829999][T21864] usb 7-1: SerialNumber: syz [ 1342.879867][T21864] hub 7-1:250.228: bad descriptor, ignoring hub [ 1342.904824][T21864] hub 7-1:250.228: probe with driver hub failed with error -5 [ 1342.958550][T21867] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1342.993142][ T5702] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1343.010227][T21867] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 1343.049551][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.066219][T21867] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1343.088462][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1343.123869][T21867] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1343.145513][T21864] usblp 7-1:250.228: usblp0: USB Bidirectional printer dev 49 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1343.158685][ T5702] usb 3-1: config 0 descriptor?? [ 1343.228163][T21867] usb 9-1: USB disconnect, device number 14 [ 1343.405308][T26818] netlink: 'syz.3.6180': attribute type 1 has an invalid length. [ 1343.452427][ T5702] usbhid 3-1:0.0: can't add hid device: -71 [ 1343.467616][ T5702] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1343.476302][T26818] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1343.526027][ T5702] usb 3-1: USB disconnect, device number 102 [ 1343.662310][T21860] usb 7-1: USB disconnect, device number 49 [ 1343.713196][T21860] usblp0: removed [ 1344.020181][ T5702] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1344.202466][ T5702] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 1344.234116][ T5702] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1344.259585][ T5702] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 1344.295013][ T5702] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1344.334960][ T5702] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.378998][ T5702] usb 3-1: Product: syz [ 1344.413766][ T5702] usb 3-1: Manufacturer: syz [ 1344.437284][ T5702] usb 3-1: SerialNumber: syz [ 1344.821709][T26837] FAULT_INJECTION: forcing a failure. [ 1344.821709][T26837] name failslab, interval 1, probability 0, space 1, times 0 [ 1344.836867][T26837] CPU: 1 UID: 0 PID: 26837 Comm: syz.6.6184 Tainted: G L syzkaller #0 PREEMPT(full) [ 1344.836906][T26837] Tainted: [L]=SOFTLOCKUP [ 1344.836916][T26837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1344.836930][T26837] Call Trace: [ 1344.836939][T26837] [ 1344.836947][T26837] dump_stack_lvl+0xe8/0x150 [ 1344.836985][T26837] should_fail_ex+0x410/0x560 [ 1344.837015][T26837] should_failslab+0xa8/0x100 [ 1344.837055][T26837] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 1344.837086][T26837] ? skb_clone+0x212/0x3a0 [ 1344.837109][T26837] ? skb_clone+0x212/0x3a0 [ 1344.837139][T26837] skb_clone+0x212/0x3a0 [ 1344.837175][T26837] __netlink_deliver_tap+0x413/0x860 [ 1344.837217][T26837] ? netlink_deliver_tap+0x2e/0x1b0 [ 1344.837249][T26837] netlink_deliver_tap+0x19c/0x1b0 [ 1344.837287][T26837] netlink_unicast+0x781/0x940 [ 1344.837336][T26837] netlink_sendmsg+0x813/0xb40 [ 1344.837373][T26837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.837403][T26837] ? aa_sock_msg_perm+0xf6/0x1c0 [ 1344.837436][T26837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1344.837462][T26837] sock_sendmsg_nosec+0x13a/0x180 [ 1344.837496][T26837] ____sys_sendmsg+0x54e/0x850 [ 1344.837527][T26837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1344.837569][T26837] ___sys_sendmsg+0x2a5/0x360 [ 1344.837593][T26837] ? __lock_acquire+0x683/0x2cf0 [ 1344.837632][T26837] ? __pfx____sys_sendmsg+0x10/0x10 [ 1344.837656][T26837] ? get_pid_task+0x20/0x1f0 [ 1344.837693][T26837] ? get_pid_task+0x20/0x1f0 [ 1344.837722][T26837] ? get_pid_task+0x20/0x1f0 [ 1344.837785][T26837] ? __fget_files+0x2a/0x420 [ 1344.837806][T26837] ? __fget_files+0x3a2/0x420 [ 1344.837835][T26837] __sys_sendmsg+0x177/0x240 [ 1344.837863][T26837] ? __pfx___sys_sendmsg+0x10/0x10 [ 1344.837909][T26837] __do_fast_syscall_32+0x27a/0x6a0 [ 1344.837938][T26837] ? do_fast_syscall_32+0x33/0x70 [ 1344.837963][T26837] ? asm_int80_emulation+0x1a/0x20 [ 1344.837986][T26837] ? do_int80_emulation+0x299/0x500 [ 1344.838012][T26837] ? trace_irq_disable+0x3b/0x140 [ 1344.838047][T26837] do_fast_syscall_32+0x33/0x70 [ 1344.838078][T26837] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1344.838107][T26837] RIP: 0023:0xf7f640ec [ 1344.838127][T26837] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1344.838147][T26837] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1344.838173][T26837] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080009b40 [ 1344.838190][T26837] RDX: 0000000020040040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1344.838204][T26837] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1344.838218][T26837] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1344.838232][T26837] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1344.838272][T26837] [ 1345.200054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1345.250508][T21878] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1345.421220][T21878] usb 9-1: Using ep0 maxpacket: 16 [ 1345.432878][T21878] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1345.467349][T21878] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1345.497683][T21878] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1345.505739][T21878] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1345.529379][T21878] usb 9-1: config 0 descriptor?? [ 1346.034728][T21878] mcp2221 0003:04D8:00DD.0062: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 1346.302626][T21867] usb 3-1: USB disconnect, device number 103 [ 1346.445570][T21863] usb 9-1: USB disconnect, device number 15 [ 1346.931729][T21860] usb 7-1: new full-speed USB device number 50 using dummy_hcd [ 1347.101493][T21860] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1347.134943][T21860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.147891][T21860] usb 7-1: Product: syz [ 1347.160401][T21860] usb 7-1: Manufacturer: syz [ 1347.185834][T21860] usb 7-1: SerialNumber: syz [ 1347.205869][T21860] usb 7-1: config 0 descriptor?? [ 1347.279507][T26873] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6197'. [ 1347.450292][T21860] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1347.540575][T21867] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1348.089079][T26882] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.160199][T21869] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1348.173501][T26882] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.213910][ T30] INFO: task syz.7.5637:24483 blocked for more than 143 seconds. [ 1348.236484][ T30] Tainted: G L syzkaller #0 [ 1348.260418][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1348.304581][ T30] task:syz.7.5637 state:D stack:27520 pid:24483 tgid:24482 ppid:18191 task_flags:0x400040 flags:0x08080002 [ 1348.321134][T21869] usb 3-1: Using ep0 maxpacket: 16 [ 1348.335325][T21869] usb 3-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c [ 1348.355587][ T30] Call Trace: [ 1348.359093][T21869] usb 3-1: config 3 has an invalid interface number: 155 but max is 0 [ 1348.367769][ T30] [ 1348.373855][T21869] usb 3-1: config 3 has an invalid interface association descriptor of length 3, skipping [ 1348.396007][T21869] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.397586][ T30] __schedule+0x17d4/0x5630 [ 1348.427412][T21869] usb 3-1: config 3 has no interface number 0 [ 1348.439175][ T30] ? __pfx___schedule+0x10/0x10 [ 1348.440397][T21869] usb 3-1: config 3 interface 155 has no altsetting 0 [ 1348.471757][T21869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.488423][T21869] usb 3-1: Product: syz [ 1348.488500][ T30] ? schedule+0x90/0x2b0 [ 1348.502069][T21869] usb 3-1: Manufacturer: syz [ 1348.517966][T21869] usb 3-1: SerialNumber: syz [ 1348.536020][ T30] schedule+0x164/0x2b0 [ 1348.553783][ T30] schedule_preempt_disabled+0x13/0x30 [ 1348.576186][ T30] __mutex_lock+0x7c1/0x1550 [ 1348.586007][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1348.599603][ T30] ? usbdev_open+0x151/0x770 [ 1348.616017][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1348.629005][ T30] ? bus_find_device+0x27d/0x2d0 [ 1348.646776][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 1348.662191][ T30] ? usbdev_open+0xa7/0x770 [ 1348.677592][ T30] ? usbdev_open+0xa7/0x770 [ 1348.688809][ T30] usbdev_open+0x151/0x770 [ 1348.698920][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 1348.713354][ T30] ? do_raw_spin_unlock+0xf5/0x200 [ 1348.731451][ T30] chrdev_open+0x4d9/0x600 [ 1348.749518][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1348.767988][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1348.781331][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1348.797690][ T30] do_dentry_open+0x816/0x1380 [ 1348.811868][ T30] vfs_open+0x3b/0x340 [ 1348.828218][ T30] ? path_openat+0x1428/0x1d60 [ 1348.834781][T26884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1348.858559][ T30] path_openat+0x1443/0x1d60 [ 1348.872832][ T30] do_file_open+0x23e/0x4a0 [ 1348.878564][T26884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1348.886542][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1348.903696][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1348.922523][ T30] ? alloc_fd+0x651/0x6c0 [ 1348.934233][ T30] do_sys_openat2+0x115/0x200 [ 1348.949225][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1348.975700][ T30] ? rcu_is_watching+0x16/0xb0 [ 1348.995143][ T30] __ia32_compat_sys_openat+0x131/0x160 [ 1349.007801][ T30] do_int80_emulation+0x198/0x500 [ 1349.023954][ T30] ? trace_irq_disable+0x3b/0x140 [ 1349.034859][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1349.061874][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1349.074245][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1349.085786][ T30] asm_int80_emulation+0x1a/0x20 [ 1349.101735][ T30] RIP: 0023:0xf71974eb [ 1349.116626][ T30] RSP: 002b:00000000f544d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1349.139206][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544d100 [ 1349.163726][ T30] RDX: 0000000000101301 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.193087][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1349.207335][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1349.237596][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.257308][ T30] [ 1349.262026][ T30] INFO: task syz.4.5657:24548 blocked for more than 144 seconds. [ 1349.270699][ T30] Tainted: G L syzkaller #0 [ 1349.280311][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1349.289083][ T30] task:syz.4.5657 state:D stack:28552 pid:24548 tgid:24547 ppid:15451 task_flags:0x400040 flags:0x08080002 [ 1349.301620][ T30] Call Trace: [ 1349.305043][ T30] [ 1349.308051][ T30] __schedule+0x17d4/0x5630 [ 1349.314922][T26882] bond0 (unregistering): Released all slaves [ 1349.339446][ T30] ? __pfx___schedule+0x10/0x10 [ 1349.350636][ T30] ? schedule+0x90/0x2b0 [ 1349.361685][ T30] schedule+0x164/0x2b0 [ 1349.372733][ T30] schedule_preempt_disabled+0x13/0x30 [ 1349.392570][ T30] __mutex_lock+0x7c1/0x1550 [ 1349.407782][ T30] ? __mutex_lock+0x5d4/0x1550 [ 1349.426629][ T30] ? usbdev_open+0x151/0x770 [ 1349.441500][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1349.454147][ T30] ? bus_find_device+0x27d/0x2d0 [ 1349.466025][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 1349.480076][ T30] ? usbdev_open+0xa7/0x770 [ 1349.491126][ T30] ? usbdev_open+0xa7/0x770 [ 1349.502830][ T30] usbdev_open+0x151/0x770 [ 1349.518175][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 1349.538122][ T30] ? do_raw_spin_unlock+0xf5/0x200 [ 1349.558126][ T30] chrdev_open+0x4d9/0x600 [ 1349.577597][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1349.595702][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1349.612079][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 1349.623634][ T30] do_dentry_open+0x816/0x1380 [ 1349.636199][ T30] vfs_open+0x3b/0x340 [ 1349.641199][ T30] ? path_openat+0x1428/0x1d60 [ 1349.646172][ T30] path_openat+0x1443/0x1d60 [ 1349.658146][ T30] do_file_open+0x23e/0x4a0 [ 1349.665917][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1349.675127][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1349.681551][ T30] ? alloc_fd+0x651/0x6c0 [ 1349.689058][ T30] do_sys_openat2+0x115/0x200 [ 1349.694098][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1349.699548][ T30] __ia32_compat_sys_openat+0x131/0x160 [ 1349.705442][ T30] do_int80_emulation+0x198/0x500 [ 1349.710974][ T30] ? trace_irq_disable+0x3b/0x140 [ 1349.716448][ T30] ? asm_int80_emulation+0x1a/0x20 [ 1349.723191][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1349.728054][ T30] ? clear_bhb_loop+0x70/0xc0 [ 1349.740211][ T30] asm_int80_emulation+0x1a/0x20 [ 1349.750247][ T30] RIP: 0023:0xf71574eb [ 1349.758830][ T30] RSP: 002b:00000000f540d03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1349.768135][ T30] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f540d100 [ 1349.777105][ T30] RDX: 0000000000103901 RSI: 0000000000000000 RDI: 0000000000000000 [ 1349.787935][ T30] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1349.796226][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1349.804880][ T30] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1349.813494][ T30] [ 1349.817048][ T30] [ 1349.817048][ T30] Showing all locks held in the system: [ 1349.828098][ T30] locks held by khungtaskd/30: 1, last CPU#0: [ 1349.841267][T26883] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1349.842779][ T30] #0: ffffffff8eb5a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1349.862482][ T30] locks held by getty/5366: 2, on CPU#0: [ 1349.868235][ T30] #0: ffff888036ed80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1349.879663][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1349.927179][ T30] locks held by kworker/0:5/5677: 5, on CPU#0: [ 1349.937129][ T30] #0: ffff888020aa1140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1349.948988][ T30] #1: ffffc900049bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1349.961501][ T30] #2: ffff88823be6e9d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1349.977867][ T30] #3: ffff88807921b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1349.988104][ T30] #4: ffff8880792191a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1350.008404][ T30] locks held by kworker/u8:12/9016: 2, on CPU#0: [ 1350.015146][ T30] #0: ffff8880b863b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 1350.026556][ T30] #1: ffffc90004dbfc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1350.047618][ T30] locks held by udevd/14581: 4, on CPU#1: [ 1350.057222][ T30] #0: ffff888025f26cf8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1350.058390][T21860] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1350.071107][ T30] #1: ffff888069ad9880 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1350.088807][ T30] #2: ffff8880350ebd28 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1350.100484][ T30] #3: ffff88807ff981d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1350.110587][ T30] locks held by udevd/14972: 4, on CPU#1: [ 1350.112049][T21860] usb 7-1: USB disconnect, device number 50 [ 1350.116403][ T30] #0: ffff88806b3d0ab8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 1350.134881][ T30] #1: ffff88807fa11080 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 1350.166456][ T30] #2: ffff8880582665a8 (kn->active#23){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1350.177565][ T30] #3: ffff88807921b1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1350.197806][ T30] locks held by kworker/0:8/21860: 3, on CPU#0: [ 1350.210065][ T30] #0: ffff888020aa1140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1350.221880][ T30] #1: ffffc900058dfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1350.234043][ T30] #2: ffff8880256b71d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1350.244403][ T30] locks held by kworker/1:11/21869: 4, on CPU#1: [ 1350.253493][ T30] #0: ffff888020aa1140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1350.268488][ T30] #1: ffffc900059c7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa1a/0x14c0 [ 1350.283777][ T30] #2: ffff888025c1f1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 1350.293644][ T30] #3: ffff88807ff981d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1350.305935][ T30] locks held by syz.7.5637/24483: 1, on CPU#0: [ 1350.312660][ T30] #0: ffff88823be6e9d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1350.322259][ T30] locks held by syz.4.5657/24548: 1, on CPU#1: [ 1350.328616][ T30] #0: ffff88823be6e9d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1350.338291][ T30] locks held by syz.5.5700/24707: 1, on CPU#1: [ 1350.344879][ T30] #0: ffff88823be6e9d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 1350.355522][ T30] locks held by syz.3.6191/26854: 2, on CPU#0: [ 1350.364543][ T30] #0: ffffffff9002a480 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1350.378768][ T30] #1: ffffffff8eb603e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1350.395389][ T30] locks held by syz.2.6198/26877: 2, on CPU#1: [ 1350.403936][ T30] #0: ffffffff9000b1e0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1350.413542][ T30] #1: ffffffff9002a480 (rtnl_mutex){+.+.}-{4:4}, at: br_ioctl_stub+0x1a8/0xd60 [ 1350.423106][ T30] locks held by syz.2.6198/26885: 1, on CPU#1: [ 1350.429552][ T30] #0: ffffffff9000b1e0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1350.439189][ T30] locks held by syz.2.6198/26886: 1, on CPU#1: [ 1350.445788][ T30] #0: ffffffff9002a480 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1350.455200][ T30] locks held by syz.2.6198/26887: 1, on CPU#1: [ 1350.462831][ T30] #0: ffffffff9000b1e0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1350.474425][ T30] locks held by syz.2.6198/26889: 1, on CPU#1: [ 1350.482849][ T30] #0: ffffffff9000b1e0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1350.492233][ T30] locks held by syz.2.6198/26890: 1, on CPU#0: [ 1350.498455][ T30] #0: ffffffff9000b1e0 (br_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x4b8/0x7e0 [ 1350.510203][ T30] locks held by syz.2.6198/26891: 1, on CPU#0: [ 1350.516483][ T30] #0: ffffffff9002a480 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1350.526072][ T30] locks held by syz.2.6198/26892: 1, on CPU#0: [ 1350.532607][ T30] #0: ffffffff9002a480 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1350.541854][ T30] [ 1350.544314][ T30] ============================================= [ 1350.544314][ T30] [ 1350.553233][ T30] NMI backtrace for cpu 1 [ 1350.553258][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.553288][ T30] Tainted: [L]=SOFTLOCKUP [ 1350.553296][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.553309][ T30] Call Trace: [ 1350.553317][ T30] [ 1350.553326][ T30] dump_stack_lvl+0xe8/0x150 [ 1350.553362][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1350.553396][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1350.553430][ T30] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1350.553484][ T30] sys_info+0x135/0x170 [ 1350.553513][ T30] watchdog+0xfd7/0x1030 [ 1350.553551][ T30] ? watchdog+0x1c7/0x1030 [ 1350.553589][ T30] kthread+0x38b/0x480 [ 1350.553622][ T30] ? __pfx_watchdog+0x10/0x10 [ 1350.553649][ T30] ? __pfx_kthread+0x10/0x10 [ 1350.553681][ T30] ret_from_fork+0x514/0xb70 [ 1350.553715][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1350.553748][ T30] ? __switch_to+0xc89/0x1420 [ 1350.553776][ T30] ? __pfx_kthread+0x10/0x10 [ 1350.553810][ T30] ret_from_fork_asm+0x1a/0x30 [ 1350.553860][ T30] [ 1350.553896][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1350.672541][ C0] NMI backtrace for cpu 0 [ 1350.672563][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.672588][ C0] Tainted: [L]=SOFTLOCKUP [ 1350.672596][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.672607][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1350.672639][ C0] Code: 5c 7b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 d1 14 00 fb f4 4c 09 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1350.672658][ C0] RSP: 0018:ffffffff8e807ca0 EFLAGS: 00000246 [ 1350.672675][ C0] RAX: 0000000000e84da9 RBX: ffffffff819b2050 RCX: 8000000000000001 [ 1350.672690][ C0] RDX: 0000000000000001 RSI: ffffffff8e230a73 RDI: ffffffff8c4bdd80 [ 1350.672710][ C0] RBP: ffffffff8e807d78 R08: ffff8880b863389b R09: 1ffff110170c6713 [ 1350.672724][ C0] R10: dffffc0000000000 R11: ffffed10170c6714 R12: 0000000000000000 [ 1350.672738][ C0] R13: 1ffffffff1d11df0 R14: 1ffffffff1d00f9c R15: dffffc0000000000 [ 1350.672753][ C0] FS: 0000000000000000(0000) GS:ffff888124f3f000(0000) knlGS:0000000000000000 [ 1350.672768][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1350.672784][ C0] CR2: 0000000056f3321c CR3: 000000002692a000 CR4: 00000000003526f0 [ 1350.672802][ C0] Call Trace: [ 1350.672810][ C0] [ 1350.672817][ C0] default_idle+0x9/0x20 [ 1350.672840][ C0] default_idle_call+0x72/0xb0 [ 1350.672863][ C0] do_idle+0x2e0/0x540 [ 1350.672890][ C0] ? __pfx_do_idle+0x10/0x10 [ 1350.672921][ C0] cpu_startup_entry+0x43/0x60 [ 1350.672948][ C0] rest_init+0x378/0x3a0 [ 1350.672972][ C0] ? __pfx_rest_init+0x10/0x10 [ 1350.673000][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1350.673024][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 1350.673148][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1350.673189][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1350.673213][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 1350.673241][ C0] start_kernel+0x392/0x3e0 [ 1350.673267][ C0] x86_64_start_reservations+0x24/0x30 [ 1350.673298][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1350.673326][ C0] common_startup_64+0x13e/0x157 [ 1350.673359][ C0] [ 1350.710169][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 1350.917521][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1350.924463][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1350.935357][ T30] Tainted: [L]=SOFTLOCKUP [ 1350.939715][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1350.949805][ T30] Call Trace: [ 1350.953139][ T30] [ 1350.956120][ T30] vpanic+0x56d/0xa60 [ 1350.960159][ T30] ? __pfx___schedule+0x10/0x10 [ 1350.965076][ T30] ? __pfx_vpanic+0x10/0x10 [ 1350.969631][ T30] ? nmi_trigger_cpumask_backtrace+0x20a/0x390 [ 1350.975844][ T30] panic+0xc5/0xd0 [ 1350.979637][ T30] ? __pfx_panic+0x10/0x10 [ 1350.984107][ T30] ? preempt_schedule_common+0x7f/0xd0 [ 1350.989627][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 1350.995044][ T30] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1351.001251][ T30] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1351.007476][ T30] watchdog+0x1030/0x1030 [ 1351.011860][ T30] ? watchdog+0x1c7/0x1030 [ 1351.016344][ T30] kthread+0x38b/0x480 [ 1351.020469][ T30] ? __pfx_watchdog+0x10/0x10 [ 1351.025201][ T30] ? __pfx_kthread+0x10/0x10 [ 1351.029845][ T30] ret_from_fork+0x514/0xb70 [ 1351.034494][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1351.039744][ T30] ? __switch_to+0xc89/0x1420 [ 1351.044474][ T30] ? __pfx_kthread+0x10/0x10 [ 1351.049119][ T30] ret_from_fork_asm+0x1a/0x30 [ 1351.054055][ T30] [ 1351.057724][ T30] Kernel Offset: disabled [ 1351.062076][ T30] Rebooting in 86400 seconds..