last executing test programs: 6m51.989672852s ago: executing program 2 (id=238): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000004c0)={r3}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r3, 0x9}, &(0x7f00000002c0)=0x8) syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r4, 0x0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'bridge0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r9, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r10) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xbd7, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}}, 0x24}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x10, 0x3, 0x87}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0xc40, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x0, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 6m46.932169504s ago: executing program 2 (id=253): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x10, 0xfffd, 0xfffffffffffffffb, 0x8001, 0x1bd, 0x1fe, 0x4a, 0x28, 0x0, 0x2}) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) close(0x3) sendmsg$nl_route_sched(r6, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) 6m45.915141927s ago: executing program 2 (id=260): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x802, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000017c0)={'wg1\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000002a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000001800)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @dstopts_2292={{0x150, 0x29, 0x4, {0x29, 0x26, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x9}, @jumbo={0xc2, 0x4, 0xf5}, @calipso={0x7, 0x38, {0x2, 0xc, 0x10, 0x2097, [0x6, 0xfffffffffffffffa, 0xffffffffffffffff, 0x0, 0x1000, 0xdf]}}, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x1}, @generic={0xd3, 0xd1, "82cb23171c56e8062aec05a5f4604fd6588a01f39ef02008c7795a84a61a842633e32f3b81219a8b2d767ec40a88ad680f73375d6c385c272e6987fbda2e7a7b6c37f4a7ce200cc0685491d9bf97205faa3974aae28a0c578d7f44e66337a9e98e5bdd272d9f7e3c605c347887cd5f83cb8b5a3c5145fe8287571ce8453f35ca39290558201e0437fde34c4dd99112119d7ae8e55cc4577765acade5dbdf42ca7c8bc0714f44417f023b3c80f6279892b8674ce43f644f17d48372e5b4ebb65aad6cfa267d5106a4c732c3bdbc50b60557"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x4}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r2}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}], 0x1c0}}], 0x1, 0x888) 6m45.856013345s ago: executing program 2 (id=261): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20}, 0x0) 6m45.743951877s ago: executing program 2 (id=262): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) modify_ldt$write2(0x11, &(0x7f0000000000)={0x3, 0x300800, 0x0, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x68a4bb8ae86c0217) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x145042, 0x1ca) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x7fffffff, @loopback, 0x9}, 0x1c) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat(r2, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f00000002c0)='./file1\x00') r3 = syz_clone(0x801100, &(0x7f0000000340)="c20fc168321c9cf53d1eccbc102c38e3b60df2d54865aa419d55200cb0a87bfb0cd6c72ee8a3db5cbb50bd8202b57d10eaa6421d447d8d3d0692459e571e888fe5796d301ae17d103aeb1e7814f12c3e25e8b06e5c3820cb49a5ca3350e17ebb23eb06ca91e55767248fd6fbbbe0a206a9ebf3636cb7bd57c5081f873f0ec2c2fb7dbb733e17af96a7723c2fffa533c7e8c39237de78a4987b15103ab9d7e4881dd9beb115ab8f23a52700e1f6173eef709324349a37765d", 0xb8, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)="f7adf96d0e20953cebe52b78ed0a9800950feed7b296c8bc9aa3dcf26bca1132c9ef230a78de5cf7895f053dc4aa8d8631478cda5809dd038f0251ce71a7ccb1") fcntl$lock(r1, 0x23, &(0x7f00000004c0)={0x2, 0x2, 0x0, 0x6, r3}) 6m44.785567488s ago: executing program 2 (id=270): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x10, 0xfffd, 0xfffffffffffffffb, 0x8001, 0x1bd, 0x1fe, 0x4a, 0x28, 0x0, 0x2}) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) close(0x3) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) 6m29.634469182s ago: executing program 32 (id=270): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000080)={0x1, 0x0, 0x10, 0xfffd, 0xfffffffffffffffb, 0x8001, 0x1bd, 0x1fe, 0x4a, 0x28, 0x0, 0x2}) sendmsg$nl_generic(r1, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x6, 0x3) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) close(0x3) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000567000/0x2000)=nil) 4m42.965933176s ago: executing program 0 (id=998): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r0, &(0x7f00000007c0)="600000000014334000e4331e26bff073b302d6b8b34123ca000000000000000000000000000001000013d3f970dea4b4c3926861b72373c0c742f6b1acf4338929f566612860122bdd5490a391853b1df254aa1de77f5f7fa9ba010b02f10c11029a1adb1a1cabeeed2c3faf10b88dc310da19efb77451e5360d5c31", 0x7c, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000180)='net/protocols\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000800)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x3, "605882aef8ef5b"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001800)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001a00)={r2, r3, "8881c4b2924c564b7efebdb60478fc4495ffe80828ff713a4211f70056822c58eeca7242314705a5af01f8de27acda3c1025781304d19b585150726a79e64b30ae713bd71fba1400c5c7e1055ec49d33ad5e8279968846845406f6f59117cf2a17f3f477ba480b5d424045cba456f4fc10856a976c15917472160dc8785a4c32c7cfa5321a4811edf8d033150d4b2c85169d1c3703e8b08dfabedaf06df3372ea65a264731cbabacc99e86213dc977ff4049c6dd6790920ec799324e67c736f4e01856a75c12a482a57fc1288f3e23051be1ddbe18199d70f1f6c4a46d03ff9ad3af42737a1ff02765b4138945d13015ed8070548bd890d0dfed55bdcb6f457b", "a831f2ef8543dee40b1668d198d25b1945f38fd2de521f8a76e671f0a29d074d1d005798441f95e2157b206a1e561ecaa37ea2759b27e219d8635004b26fc42478c46de81311db1cafdf90d157e90605bab54e5fb314b2605bc0d5f9c9a6446c7ed692702da11654a3aaf7c542b4dcf2b1e9d3d7be487649cf39009973e0ed893e35728c31a02fa901671684d59a38ca7160bfd51edbb854d50d9cc98fb0e0578e3fad487911aa77ca11605d4ee225f32fb8a7209a0568bed10b049ba33de2d6fc683fa6fed8eeef0c1cc3a814e51a596e0bc84ddebb6aa80fca4e2372d5d50c505aaac555ff7584af9c5069fb44885c15c8f90ec387b84dbba190fc8aefba59e343efd6b86e0f87b55efa78698ee8c269154ad8b6c36220d98380393f780b39b9f99f65685b74a4d0dab5db363cdc05c47e59d9473d0ef01ad08a3ad3b1f4b993604b4c88622bb430518eb16cb233c33231df81e5cfa41560ca16f259d9aeb898070c99ddb2d16864d3bd198ec98f4d957e47ccb33e9817ab26d750b30d271f23f9ee7986c04154717c143ca99958018e10d0cadd82139a22e8b3463246d510ea2b74bf9ae5bdbeb399aad076ee335aed1785319c7f089f09e1e18a7541d69cad77c40462da4a3463280000ac29a8794211f9b41815e6b6676669f66fe48b4c73b71cb545afef80b55af7d33a0ff10d10390b38bf13d965f2a2d37e0f566ad08de074a5d8620ed98a8418903dd4b598c074d6fe9d51a15eee7d95ef5881e4901e7bbacc7e35858ab018a685542156c952d2970f575f201812d3da50afe57f4f80e36f803ffb519836ec009f27532149456cf11c2c76b7e9809f960a87e425dbf5242164c5c4b3af2bc89bafc5b5f3f4ac27d9eaecfd3d484fd6c460b69616ad4dec168cec4820ae92cb90f5a6d2d7ca9dc66e8aa068d919b8c281c6ac6dbdd1c5fbf8e4dbb99ec37ab2b90b2f394c90c5388b28d44d46187f88927476bb5ab2317f88b3d2b3d4ac4a00a7243f51338885814f834dd9241a6d64c173e19ab3e6aeb59e2b5548bee71e7deb3e90a8aefdad338c3a91fe03c48d512386841a667f4cbd818549698ba3775200216134499a8834000eaa4121e0e48e20bbcd20abb200001ad5d78b40ad7ab225aad573db529be6c89888e9de9455fe3b195b2a2da624fc98ec0ecce4cfb4623dd6943741941879f23308f7480c39c6e98b8fe2ad048d3542a98b3bfe6c477b17009870a68ef140fdd82728e58d32ac02db27d0efaced4c8c424660a20d2304b2fb9c939cda2ba6c65ecafb393b7e1c0563a69b8c6b2be913f7eccb1d0a6a4773ee79df31ef02a47ddeb47fcfff8d91a513e4def2e498d1d169dba6b6abec3da1213d0508ef30784b3bf16bca7fd221515b316670578274fad5438e2e959781a06b0d399b41f67f7f7cae68e3e1cfd1c31e8566b8992921f327204ebcb65d38219a74b8755497d2ee1e045209948559dd756237d1f7114d3963e9f5758508e48fcde5759aeec3fab533eabd42a814e3a8948e60c04e09b89c0e48776993ef4cd276284c373ee030345700e832d67288e14d2cff07cf758c1ecb9516d0d39151562660457a6e786433dffb2c99ece9dd6a70827d01c40aab0c7c0dadb295a5d93257fc7e9a427f845be4a16678b5e1fd5461e01ce21cbe9a2605591b936f277fbc2db7c7e5d1d71c063f6ea4b49da90152fbd29ebb2714240843a2672ffbc828406ac9d7d29f0b71bcbe6718ee0581b19d58b853b255db46053883121a5c4b6217f82e09310e1ef0fe9b3e1da8e65718484cd9cb0a603cee645b364c2c5d9488dcf358d2f67dd1b44ac77466673c3ff0ac9856ce6aa6d31f85c1d1d9fe54952d7d1dc796c0577961d0873c0d10e2e9ca587067985c49a362250b7ca9a46025ff21393d3d5e6d8196f32e0c4b3bf7e513d357918fcc83fb62b57ec18b8ca92972a9428176999004759ac90cb6f7b562b10d23470bf77a6f93390b6a3cd9149f0f8740e45dcf9cabd2449465eb420794e1f28d812a25bf3e17716ab085362d171ed4e99922b0fa95b1ce2efca228cc35100b4b1065cc72071ac6917a6c11fc18c101eb6b782dac6712fc306b87f561a7ca04683bb884c0eb98b3021e0925110a33ac3aeb542edefca1a4d033bd4d997951c6bd94bb755df831e8eb675b28132dcb06c22c0bbb0d05bacd18da054bb9ef399cc1d24bb68e4fa31d256d2b115379e012e99e5ebe9a1f1f5b762d9b58d076e688af8438ee42cb743614156aa3a7648a3566aa02d953c922ded3745f8a7332e91ea79ff5d6878f74bd137cc902992f07ae470f06e36455ea80bad0ca20110206e80c7a536eabde3ed984bf813c009af27ef299e1faba7525c724c8ace4eef748a315a1a5abd95548e18c0bcf7f315467571bdab86805f0736f7152e25ba9b5f96b00e9a0f22687b47c6345cd76b91e8b376b908ad344d73af9c1bd1459fbd9833284686c3d3758748e0ade1e1d9a3ad92100e6d5fa0345477d546997bf060f5f948d57cd70ed7922a6feebc62c7518357f7e84798c4c7afe70568f1cf9d1157fc6d961e732cf310efd6f80090114e22fa46599a4eac2000b61853d5c3093051738ca3d50b49ae12557de8947f8a3338ddfb7b9b6460c33c90f7532be51fbc0add70e31b46316422d7d1520a0bd1efc0edc76799673a73bd93c327ae3054289db9f041679adb783daab5293ce1fb53f8023b0a33aaae70dafc51692cf6425caf362e68af62b9d1d9a3043cd6d0d09ed1981e052ff122d704876edd847c6644427bee8aba73c6367a5f130fdde8c841c5f3bed778331f69c227d881a3d82d86a2caf7e76870543d8104664fd9729f80a61c317e13809e80a9c08f4f62025b27b2d66a22b0c95391bb6b12ddaa0c4d725e3492db007c8059e4751a3a11393628523818fe450ec9367408febc2a0181193166a32518e949ae12e3e69f7756ba8dee697df1d1d65d65bb40e7f8e636d3bc7b151241e6c2fb13b86f58a9cd7e071f5fa4a73722e133e3d1bb576d05ad17ec7c670031aecc269d00f45581b6c5aac5798d0aec12f25c34b59fea95d8c377f229bc53d63d413cdd6de51d8eeeb9f959cc82fa8e8917c755c43c3db803576c9af00590ce96449f4c0fb6ea4a358e13ff20cc020d62986a1a22e5bf3b7dbe0f66bf26fcdef8f0b924de85fc1fb1df08e8b046cb540e52f103575a63c09563d1dcae91e496070427a689f340f11e2852041ad7665bc8d125e31eb2814c375527a19d248415b931185ac8a28041035497ad091e433cea22e50ba1aab977017ccb2eebd8e121ab795c3ce60014d001c9bf295c69bd39f8fc6ec0e70381d87150fa681ffe77eb51821aa1dd80877174d6a7c9b5c3fa8f28f59a8d3e284e151c94cf8a77479cfecff7b8d3dae724492ca2ce6fe8ea0d1eb4cbcf377ce7ec6621c803ddcfcfd6953acf225ceacde3c058e1f3c965b66038e186ff5f22dbddb20e68fd2227b7fe95e2f9db03f6bb9f599d2313677870f8bc14c7a8c213e118f456176de4ecf823ab749d1c27bde60d6d7bd1d69d20bf785469c468f6df93af3901ad32f0fafb50ff0eacd3cbffb8b390c6e7c07112dcfa9408b0e5f1598e3027c1eeb733ac28ec964cebb82a6a8d9005b8ada96a2d7bbf3e897f7792b9dbb25e39cba65da0b7e5bb60099ca7237a3c6d5f3f037de9e3c059a20fb6ed414c4ffe42914a55359dd7c0ba878d08816642e3dadc78ad3e8a2128a4a513c61cf05e217dc258f60e489efb0bb95f8f0258626f5e52cd21c29045d20d893e2cdcc9935e5aadbbffd69c0f26080e69e21b637763bcdc45e2474db1b86b9824dd9dd2c6da073cae6eee780856fbec9ab7be8b85ab2005885cd6deff217716edbcbf4e189506a50f8fde78a297783b64a9b67962cfb9f0dce771e7e446adc0c1c1c7988bd620f3c3f0597485a5a5a691c6ebed228df2fb070f83f579da16d60298082d60c6e82372c086a3ab90d8a7fce5b843d875a5e5ede7ffbe365f2eb705db0029b90db3b80458911a4aa83f32945618b5fb643d42b466a46c1bf41e610ce3f1974ad1c1211bb21fce89c76dd9b630e0923d5e16a4a5553cabe99091d07a9bbb12b27a48f28e05d1c29fda69cd0fec789d316186156f52044175891de0b4f139cbdf63ec2971a90ab3c1e15b59c6143cf199951819d7085983c6081266cf40e5ad3bf8b4b74465e0bf29034a8639f25e25544bb0af065422d907214c9679d8d00ca0a23fff900f9463cdbf193feab893e3973537c514f869db8767634772d191a2df9497bdceaca7487d2f15c01dbc9fbb68d4c814bd29b6b9bd772c94f5c4a2b9af20f6e02d3ec7728b5cd3f1da095397870dfa0b9aeb317f6fc068816a10c6c1382e8d13cadad02359aaec3adeb3b10d9734df8a552508197eb46c983963f9c7ef0d117043af51f56b1aa0f22d0c9cb52801b991a22e9f1a62828843cb0fcf10ba0f4cddd8418e2932267c49fae5195b286b17e26cab7180f12949e15fb9c82afb7b3d3c631009fa0ce592aa87e87b66292ea2efa75b9ccb0d63e1024707607cffec26627f0c962144709f9f7f50b7289116d52d5472f011e7ddb85e4c46e2bc56d20e09a5049cc1c412da9c157c21326bfef4fd21529fda35db48476cc7722731e1e2f3b4eb8478f18f75cd299e4519069c70dda005ea6900e8b73aadbb8f6695601166839ba1bf00a953b75ca4403864df267f4d040db6940273b1ae99476c3c8db2f98b6953e406d7fbcd3b109a3990f21f69fb3cb2c479f76bbe0c965c3ce3b828938abea99dbf246b0e6f15511c45d208287fc7a4dbdf71e0a39a352a0d8c10353c5228d23aab4b2a85398353a7866fe52ac5c7ffb47860dd82250b1ed258ec232c4b0db5cc39305bee37786fb39f38bde193078c25ee2b46af9e898fb647fa5fbea1b72a16927b4da7432799addb1680dbc7aba88fc1e6410a2b3a7369a2da09532336358fec419ab84ab4e4242dece76d6bb956125ad2038f9d4f4800a6482866a62c1661cb81251e6b99c91bcc4a0bba0c1e6f4a7103e6351e1f3b7101cb43b54390c5136c4b6ee13d0bd0e3a2461f17bab674b8d05d3fcd902ca0e0da94dec67ed167db75ad326e6a427cee917452c7f1f544eb5b6a2f7eaeccc379de28bfee06a2853fe38fc7896a9c41b511bbdcd5cd41785704ebc950c301def03d3cc22557473a2038a373caaceddcb11b762bc027939831fb03cc849600449bc61373bff5a5fb596f64abbc35d608a6073876884143173470a5c8954221305eb0b0b90190f4fce7308f1d73ac3b4eb7c8018c01dd30c18c991acf08a7124843bd17e4591d45d4eaa63e304bef44859bd4cacc75fea4c736a93622fa7202dfdfaf5b194a8d75a35307ed8c9b680"}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) preadv(r4, &(0x7f0000000700)=[{&(0x7f0000000180)=""/75, 0x4b}, {0x0}], 0x2, 0x0, 0x8) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000100)={{0x77359400}, {r5, r6+10000000}}, &(0x7f0000000140)) listen(r1, 0x9) accept$inet(r1, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r7, &(0x7f00000000c0)="ab", 0x1, 0x1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x1c) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1f, &(0x7f0000000000)=[@in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e23, 0x4, @mcast2}]}, &(0x7f0000000180)=0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r9, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m42.594639236s ago: executing program 0 (id=1000): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c0000000b0a010400000000000000000a0000020900"], 0x54}, 0x1, 0x0, 0x0, 0x40091}, 0x40) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000440)='./file0\x00', 0x2) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5) timer_settime(0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/keys\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r7, @ANYBLOB="0000000050262ac5465389bf61fb91bd0bd32e319c13ca00a667809b17133f1b2f8ef06e58dc5bfb52ffdb32fbe7cd75e556dfa9c8b2f0e0866ecfaa455c4b2dcf0508ef125b62", @ANYRES32=r6], 0x28}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket(0x10, 0x803, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xd}, {}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) openat$cgroup_int(r11, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r11, 0x40146f2c, &(0x7f00000000c0)={0x5, 0x0, 0x3, 0x3, 0x4}) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) 4m40.426133313s ago: executing program 0 (id=1008): syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x8, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x6, 0x4, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @multicast1, @multicast2, {[@rr={0x7, 0x3, 0x63}]}}, "d850da37284d1872"}}}}}, 0x0) r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xc1, &(0x7f0000006a40)=@generic={0x4, 0x2, 0xb9, "449a561c", "c4756b0e6aaef2890ae0160620206f51d31d521ea055ec447bb07dc866e846780d79a74395ee6b74baa5a99d9bf9fc63f78cde468f2abf7d36c2018dd811bb00b352f1be98c6b67c026bd05e2b4dd200df5bd6e2d2064c17cfebfcb63d164297bd66ef82e239ed12e45964089687ff6e478a39a86c96d1e35daf25b65968f814b3c2f577d003d33f758ee45d0693d5e8fe7944538bd6e910c3bcadf06215b8c98fad1dba02f4a42f05d5b1492b2cf680e5539517fa1ab92bee"}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f00000004c0)=0x3400eb2cc1287ea3) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x14, 0x1, 0x5, 0x801}, 0x14}}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000200)={0x2c, &(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0, @ANYRES8=r1, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000000001"], 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) r7 = dup3(r6, r5, 0x80000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000047300fe88a43de1a400000000000000027d01ff020000000000000000000000000001"], 0xfdef) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r4, &(0x7f0000000440)={0x14, &(0x7f0000000240)={0x0, 0x23, 0xe7, {0xe7, 0x29, "b07882f4a1071604217d2e591b6ca396cf18e81e1b00782e0b3295981aaa4cee38703bf809f8f2263615e22159bb5da898ded39e0faa2969b48cd3404f0ba06361d04358756e6a39d0921f51cecce9ca532500f1f9c8f47fee4b400c6c994acb7bacbb1780f4534130a9bf10c3c6a6da8022a0677c460632a11bcbd9ef4a365669d0e0354c4ed55700f71ecbde3285bff8c502273ef0eaa80c3cc437e6254b945b0b98a8acc2a902e54c16ae2bf0a52def9f06ac82ed5cbf502f53e3c9f0fd3e951290ca385af3bfc859b0757b045709671b73b1e68a9ce3c7a04cc5d67fd4bb0772ae0c9a"}}, &(0x7f0000000340)={0x0, 0x3, 0xf3, @string={0xf3, 0x3, "2d7027257962532c3ee905c43968733bff76ef9b6d7e96857c2c7e91b9c790159101cbbcd4620ea6aea4ba5681edf4cd489611c0daeda9036c30016b237596c01ca919529bd94a8bc156b136e5f5fd18b41e57ee03b907e19a110de22399e388c7d02b3657744a6bb0b4635195c35160357b3c40507f31c38d58f85449859bddc692cc3593fa9659ce11e6e9db8105cabf281b8442926a4def69333a0c33b4f7545caeaa89083153c786f4af9eea3ee4f03411b7519c65c9d847342941b784622fdcc5609cc0121c3d3d83b80984bf66a7365566aede95ec2e594286f37ea2f97d2ad28ebd90a3cc6aa890bee071975819"}}}, &(0x7f0000000640)={0x2c, &(0x7f0000000480)={0x0, 0xb, 0x23, "84aba018bd70740a1d4927f5163370190d4cf0775638999e2ac08aa4b58c31809bcd65"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0xc0, 0x5, 0x1, 'O'}, &(0x7f00000005c0)={0x40, 0x5, 0x5, "c23e1da288"}}) r10 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r10, 0x707, &(0x7f00000000c0)={&(0x7f0000000180)=[{0x5, 0x4000, 0x0, 0x0}], 0x1}) 4m40.183650039s ago: executing program 3 (id=1009): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x10002, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x200, 0x0, {0x77359400}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000a2ffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 4m40.009696976s ago: executing program 3 (id=1011): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001240)={0x2, 0x16, 0xe8, 0x5, 0xa, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x3, 0x3, 0x0, 0x6e6bb7, 0x4, {0x6, 0x6c, 0x3, 0x0, 0x0, 0x1, 0x0, @in=@empty, @in=@private=0xa010100}}]}, 0x50}}, 0x4004800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/29, 0x1d, 0x5f) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0xd}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @broadcast, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x4305}}}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x90) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000000)={0x7, 'ip6gre0\x00', {0x9}, 0x3941}) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f0000000000)={0x7ff, 0x80000, r0}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000180)=0xffffffff) 4m39.817033452s ago: executing program 3 (id=1013): r0 = socket$inet_tcp(0x2, 0x1, 0x6) prctl$PR_SET_KEEPCAPS(0x8, 0x85) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(0xffffffffffffffff) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400), 0x0) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x3, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x80, 0x10000000, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbe}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 4m38.845167258s ago: executing program 3 (id=1015): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r1 = getpid() r2 = getpid() r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000280)={0x40, 0x15, 0x4, "44468d5b"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200100040000"], 0x0}) r4 = syz_pidfd_open(r2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000004f40)={{0x1, 0x1, 0x18, r4, {0x0, 0xee01}}, './file0\x00'}) stat(&(0x7f0000004f80)='./file0\x00', &(0x7f0000004fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000080)={0x50, 0x0, r8, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f00000083c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895ca9bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x0, 0x2, 0x2, 0x100, 0x3, 0x8, {0x6, 0x9, 0x4, 0x80000000000000fc, 0x3, 0x0, 0x7fffffff, 0x58, 0x4, 0x9000, 0x9, r9, r10, 0x1, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0xf3, ':-(\\\xc9\x80\x00\x00\t\xc3\x00\x00\xf39|\xd8mM\x92\x8d\x14\xd3\xa4a\xb6\x02E\x89\x85V\xc2\x06\x00\x00\x00\x00\x00+\x13;\b\x01\x00'}}]}, 0x0, 0x0, 0x0}) r11 = getuid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000055c0)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000056c0)=0xe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002100)="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", 0x2000, &(0x7f0000005840)={&(0x7f0000004100)={0x50, 0x0, 0x889, {0x7, 0x2d, 0x0, 0x0, 0x8, 0x6, 0x6, 0x1, 0x0, 0x0, 0x4, 0x4}}, &(0x7f0000004180)={0x18, 0x0, 0x92a0, {0x2}}, &(0x7f00000041c0)={0x18, 0x0, 0x5, {0x6}}, &(0x7f0000004200)={0x18, 0x0, 0x6, {0x7}}, &(0x7f0000004240)={0x18, 0xfffffffffffffff5, 0x80, {0x7ff}}, &(0x7f0000004280)={0x28, 0x70c188a699d9b71, 0xc0000, {{0xffffffffffffff01, 0xb, 0x1, r1}}}, &(0x7f00000042c0)={0x60, 0x0, 0x1, {{0x6, 0x416, 0x2, 0x9, 0x9, 0x1, 0x4, 0x4}}}, &(0x7f0000004340)={0x18, 0xffffffffffffffda, 0x2, {0x99}}, &(0x7f0000004380)={0x11, 0x0, 0x0, {'\x00'}}, &(0x7f00000043c0)={0x20, 0x0, 0xc, {0x0, 0x1e}}, &(0x7f00000045c0)={0x78, 0x0, 0xe7, {0xe, 0x6, 0x0, {0x2, 0x4, 0x400, 0x9, 0x2e, 0x0, 0x6, 0xffff, 0x9, 0xa000, 0x1, 0x0, 0x0, 0x0, 0xfffffffa}}}, &(0x7f0000004640)={0x90, 0x0, 0x1ff, {0x6, 0x1, 0x5, 0xe0fb, 0x3, 0x4800000, {0x1, 0x7, 0x7ff, 0x8, 0x7, 0x2772, 0xb0, 0x5, 0xf909, 0x6000, 0xf, 0x0, 0x0, 0x2, 0x8}}}, &(0x7f0000004700)=ANY=[@ANYBLOB="a8000000000000000100000000000000050000000000000008000000000000000000000000800000050000000000000000000100000000000800000010000000657468746f6f6c00000000000000000000000000000000000800000002000000657468746f6f6c0001000000000000000100000000000000080000007e04000065746874000000000000200000000000090000000000000008000000040000005c2f000000000000"], &(0x7f0000000c00)=ANY=[@ANYBLOB="60040000000000000700000000000000000000000000000000000000000000000600000000000000ffffff7f0000000001000080070000000400000000000000000000000000000006000000000000000300000000000000010400000000000007000000000000007c0d0000feffffff450e000000600000ffffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000005000000000000000300000000000000060000000000000001000000040000002100000000000000030000000000000001000000000000000700000000000000ff0f000000000000080000000002000005000000000000000800000000000000ff010000000000000100000000000000090000000000000006000000000000000800000009000000080000000020000001000000", @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0100000002000000000000000600000000000000b80e0000000000000800000000000000657468746f6f6c000500000000000000020000000000000007000000000000009993000000000000080000000100000005000000000000000900000000000000010400000000000000000000000000000180000000000000040000000000000000fc1f0007000000000400000020000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0500000004000000000000000000000000000000ffff00000000000000000000000000000200000000000000010000000000000010000000000000000000008000000000000000800100000004000000000000000300000000000000730a000000000000ff03000000000000540a000000000000000000000000000001000000080000000a000000008000001afdffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="c200000006000000000000000400000000000000070000000000000003000000060000005b402b00000000000300000000000000010000000000000031710000000000000400000000000000000000000600000006000000000000000200000000000000080000000000000005000000000000000000000000000000f7ffffffffffffff0900000001000100010000000040000000000060", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff01000005000000000000000200000000000000090000000000000003000000530d0000a75b2d00000000000300000000000000010000000000000008000000000000003d030000000000000c000000030000000000000000000000070000000000000058010000000000000300000000000000030000000000000000000080000000000500000005000000080000000040000006000000", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000800300000000000000000000000000000006000000000000000800000005000000657468746f6f6c000600000000000000020000000000000000000100000000000600000000000000040000000200000003000000000000000800000000000000090000000000000004000000000000007c00000000000000000000000000000008000000b8000000010000000060000007000000", @ANYRES32=r6, @ANYRES32=r10, @ANYBLOB="3c03e20000000000000000000400000000000000060000000000000000000000010000008e8471d27cc6fa4bf267b2b2618ed3cd86c5b87041e757996f887416ce979f9219b8bd0d86cfb5c281335f18846e2175a88f0fa295f1a972528b42f626d36ff5289d9a9431"], &(0x7f00000054c0)={0xa0, 0xfffffffffffffffe, 0x7ff, {{0x4, 0x3, 0x1, 0x101, 0x101, 0xde43, {0x3, 0x7ff, 0x6, 0x1, 0x41d, 0x100000001, 0x0, 0x1, 0x6, 0x8000, 0xfffffffa, r11, 0xffffffffffffffff, 0xa, 0x80}}, {0x0, 0x15}}}, &(0x7f0000005580)={0x20, 0x0, 0x7, {0x2, 0x0, 0x6, 0x9}}, &(0x7f0000005700)={0x130, 0xffffffffffffffda, 0x6, {0x2, 0x8, 0x0, '\x00', {0x2aab, 0x2, 0x3de, 0x5, r12, 0xee00, 0xc000, '\x00', 0x1, 0x3, 0xfff, 0xa5, {0x6, 0x7}, {0x2, 0x3}, {0x9, 0xfffffc00}, {0x8, 0x8}, 0x5, 0x8, 0x0, 0x4}}}}) r13 = getpgrp(r1) r14 = syz_pidfd_open(r13, 0x0) setns(r14, 0x24020000) r15 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r16 = syz_pidfd_open(r15, 0x0) setns(r16, 0x24020000) open_tree(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x900) 4m38.351380601s ago: executing program 0 (id=1018): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x40481, 0x0) write$rfkill(r0, &(0x7f0000000200)={0x1, 0x3, 0x2, 0x1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xd}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340), 0x0) sendto$inet(r1, &(0x7f00000001c0)='l', 0x1, 0x24008015, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000006c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000042"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000007780)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000980)=""/167, 0xa7}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x2}, 0x4}], 0x1, 0x2, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x4000183, 0x142, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) close(r0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x28, @ipv4={'\x00', '\xff\xff', @remote}, 0x9b}}}, &(0x7f00000004c0)=0x84) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 4m37.123788626s ago: executing program 0 (id=1028): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000055000500000000000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="fe0f0000ef01010100000000000000000000000008"], 0x38}}, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000f30904150001da40df000905", @ANYRES16], 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0xa, 0xfa, 0x9, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x20000010) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRESOCT], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) fchdir(r3) 4m36.864079223s ago: executing program 0 (id=1029): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f00000000c0)=0xb1e0, 0x4) 4m36.166076969s ago: executing program 33 (id=1029): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f000000c000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003f3fdc20221802324a130102030109021b0001000010000904cdf100d3"], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x1007, &(0x7f00000005c0)=""/4103, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2e, &(0x7f00000000c0)=0xb1e0, 0x4) 4m35.627437052s ago: executing program 3 (id=1032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000780)={0x40, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}]}]}, 0x40}}, 0x0) (fail_nth: 7) 4m34.827129202s ago: executing program 3 (id=1039): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x100000d, 0x1, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r2 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, 0x0) close(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) read(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xffffffbc, @private0, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, 0x0, 0x1) 4m34.267283266s ago: executing program 34 (id=1039): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x100000d, 0x1, 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000006c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20048014) r2 = syz_open_dev$vim2m(0x0, 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r2, 0xc0285628, &(0x7f0000000080)={0x3, @win={{0x7, 0x4, 0x806, 0x4}, 0x2, 0x4017, &(0x7f00000021c0)={{0x3, 0x2, 0x9, 0x4c}}, 0x3317, 0x0, 0x8}}) socket$inet6(0xa, 0x3, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r3, 0x100000000) timer_create(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc040564b, 0x0) close(r4) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) read(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0xffffffbc, @private0, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r8 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, 0x0, 0x1) 3m13.616847611s ago: executing program 5 (id=1472): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = inotify_init() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{0x285, 0x0, 0x14}, {0x483, 0x0, 0x9}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae03, 0x36) inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./bus\x00', 0x20842, 0x31) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) unshare(0x20000400) r7 = geteuid() write$P9_RSETATTR(r6, &(0x7f00000000c0)={0x7, 0x1b, 0x2}, 0x7) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000501, r7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r4, @ANYRESHEX=r3, @ANYRES64=r6], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000fcff1f00000000000400000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0920000000000066090600000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ac9100000000000037010000f8ffffffb702000008000000b7030000f7ffffff14000000060000005d93000000000000b5030200f7ffffff85000000b5000000b70000000000e64c2800009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="001306000000ec19d02303f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300010009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220700000003f87822743c1d"], 0x0}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) 3m11.65215373s ago: executing program 5 (id=1484): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705fb78526dce", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000', @ANYRESDEC=0x0, @ANYRES8, @ANYBLOB="429522e851d8f8f09adb14538e36f82e9bf352bba0105f211c0120215b61828b15ed330a11010f63b2d261d9480654f25a6c2a9db7f45d0fc4b2dd091cc4c5abfd5bb69ea2cdc95a73e9e5cb0d640bc7c86f0bd04f6ed96ddcac538562bac954e5aef069a9d9be7557d87233bd291efafe33b043a1c4ee27", @ANYBLOB]) (async) kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b", 0x7f, 0x5, 0xfffffffd}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7", 0x12, 0x100, 0x9}], 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008084}, 0x24044800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x1610c2, 0x0) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) close(r4) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) (async) connect$pppl2tp(r3, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x100021, 0x0, 0x3, 0x40004, {0xa, 0x0, 0x5, @remote}}}, 0x3a) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f0000000980)=ANY=[@ANYRESDEC], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000002c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087", 0x5d}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000240)="86545d2157646172b815818bfd0e14575562a9530437a9278ae34c12922b8579380233e0e3853e4a118a5a2bcc52eee86b2dc4fc32c3f81f9b1d06cd70", 0x3d}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebe86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac", 0x75}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) (async) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="140000004200010200000000ffdbdf2587cc1eda"], 0x14}}, 0x40804) (async) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0xc8}], 0x1, 0x40800) (async) recvmsg(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003880)=[{&(0x7f00000000c0)=""/73, 0x49}, {&(0x7f00000008c0)=""/82, 0x52}, {&(0x7f0000002880)=""/4096, 0x1000}], 0x3, 0x0, 0xfffffffffffffed4}, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) 3m10.527170623s ago: executing program 5 (id=1491): r0 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x6, 0x7fffffff}) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000801, r6, &(0x7f0000000740)={0x8b2a, 0x8000000000000001, 0x7, 0x80000000000, 0x3, 0x5a34, 0x10, 0x0, 0x4}) sendmsg$inet(r2, &(0x7f0000001b80)={&(0x7f0000000380)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001b40)=[{&(0x7f0000000480)="f30f4026dd7023732432b69aaa0697a5a39b8c911598a3048a104ae028d3c9504baec8ca4b1564f2c5fb07539dfe64729bd273240eb55daaff4e5a84ab34e86ab551520f1722d76655d086d29343384fd56cd6b7f9c72ceabe48e5a77924d34c7e5aec2c5d1444b3e2cbeacf798807554d8c83622b4de2cf63e2e5f9435545f74c1943912ffcf9f9a92ea8acac0250769ff5c241c34608c9996a27aa98a69aba7ae5749bba8d1d2e5e62423578e7b3086983c766089e8e7de1b7c3a75a111afce741ae9a8bc2c507b69c70cc3ccfad761f9bd21ddd55dca34ec7e3940e80362f96b9e8c5d9", 0xe5}, {&(0x7f0000000580)="8923de4914a7df0abd30a0b7866beaf66476d3bcffb57c06bbad1a784cd442fdeb7cfe011b7de62daae08a34d3187d3466736ec4c07905641b2b083c40b136ba09e58489c4e083967596c1c9d5ce67d3adbcd9a0fb444c650c137083f89c980aa83d8e21cbf3df8f69f26bfc31c61ce73ada6258150105a639475317cf602fdeb38f6ff1fb2bdf18dd0314b1d31fc98369bac1defdd541b215640b", 0x9b}, {&(0x7f0000003ec0)="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", 0x1bb}, {&(0x7f0000000b40)="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", 0x1000}], 0x4}, 0x4040000) sendto$inet6(0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xffffffff}, 0x1c) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) setrlimit(0x0, &(0x7f0000000840)={0x1}) memfd_create(&(0x7f0000000400)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r7, 0xc040564a, &(0x7f0000000240)={0x8, 0x0, 0x2013, 0x7ff, 0x7, 0x80, 0x8}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_stats={0x1d, 0x2, [0x0, 0x3]}}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x9, "abacd211119ca94c63377526aeb5abff929ca5ff07558139ede6dc75270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r8, 0x541b, 0x0) sendfile(r0, r0, 0x0, 0x24002de8) r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) fcntl$notify(r9, 0x402, 0x80000004) syz_open_procfs(0x0, &(0x7f0000001180)='attr\x00') 3m9.499112056s ago: executing program 5 (id=1496): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcfedf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050000008000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x24004844) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x3ff, 0x0, "008ef14ba278887cb0baba08431799317e6324"}) r3 = dup(r2) write$UHID_INPUT(r3, 0x0, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) userfaultfd(0x1000) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000180)=0x40) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = socket$kcm(0x2, 0x3, 0x84) setsockopt$sock_attach_bpf(r6, 0x1, 0x5, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000000640)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}, 0x4000000) move_mount(r5, &(0x7f0000000140)='.\x00', r4, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r5, &(0x7f0000000100)='./file0\x00', 0x220) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r7, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb7}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4050) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) utimensat(r5, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)={{0x0, 0x2710}, {r10, r11/1000+60000}}, 0x100) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000b776f88eff7f0000000008"], 0x50) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) 3m9.246422773s ago: executing program 5 (id=1499): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0xc021) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000140), 0x4) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x40000c0) r5 = socket(0xf, 0x4, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r9 = socket(0x40000000015, 0x5, 0x0) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$rds(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/4092, 0xffc}], 0x1}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl(r7, 0x3b81, 0x0) ioctl(r7, 0x3ba0, &(0x7f00000000c0)="480000000e00000001") sendmsg$nl_xfrm(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001300)=@acquire={0x128, 0x17, 0x505, 0x70ad26, 0x25dfdbfe, {{@in=@loopback, 0x4d3, 0xff}, @in=@remote, {@in=@dev={0xac, 0x14, 0x14, 0x18}, @in=@rand_addr=0x64010101, 0x4e1e, 0x9, 0x4e22, 0x0, 0xa, 0x80, 0x20}, {{@in6=@loopback, @in6=@private1, 0x4e23, 0x1, 0x4e22, 0x0, 0xa, 0x80, 0x90, 0x128}, {0x100000000000002, 0x1, 0x0, 0x2, 0xa004, 0x9, 0x9, 0xe}, {0x6, 0x5, 0x1}, 0x0, 0x6e6bb1, 0x1, 0x1, 0x3, 0x1}, 0x800, 0x9, 0x8000, 0x70bd2b}}, 0x128}, 0x1, 0x0, 0x0, 0x200048d4}, 0x0) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000540)=@IORING_OP_SHUTDOWN={0x22, 0x31, 0x0, r6}) 3m8.987542431s ago: executing program 5 (id=1500): r0 = socket$inet_tcp(0x2, 0x1, 0x6) prctl$PR_SET_KEEPCAPS(0x8, 0x85) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(0xffffffffffffffff) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x80, 0x10000000, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbe}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3m8.865688409s ago: executing program 35 (id=1500): r0 = socket$inet_tcp(0x2, 0x1, 0x6) prctl$PR_SET_KEEPCAPS(0x8, 0x85) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(0xffffffffffffffff) close(0x3) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, 0x0, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x58}}, 0x10) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x20, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x2, 0xc07, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9f92, 0x200, 0x1006, 0x15a, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbdd, 0x80, 0x10000000, 0x146, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x2000, 0x2, 0xbe}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, r7, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 7.259263948s ago: executing program 7 (id=2607): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x40002002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)=ANY=[], 0x0) (async) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) shmdt(0x0) (async) r0 = socket(0x1e, 0x4, 0x0) (async) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r4 = shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x48, '\x00', {0x1, 0x6, "2cdcc2", 0x335, 0x2f, 0xfe, @ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x32}, [@dstopts={0x2e}]}}}}}}}, 0x0) (async) shmdt(r4) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) syz_emit_ethernet(0xbd, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004add00af006500000c0190780a010102e0000001445408730000000000000010ac1e0101000000060a010101ffffff26ac1414aa00000007ac1e0001000000080a010100000000800000000000000007e0000002000003abac1e010100000e4fe00000010000000203009078000000014f10fe01006800070ab10294040100441495937f000001000000000a01010100000006830f45ac1e0001ac"], 0x0) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc, 0x2}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f00000003c0)="9d32090bdd778875912dc731e43309ba7db9a1653e5d3c76fe107166e2d468ab19aecca95057715b2710e27cb56783f7b0b3", 0x32}, {&(0x7f0000000400)="3552986c2d7b8073fb24f8fa7ab349ca55aa35db80560d90b911b1f0e819977569edeb862e3fb9bb17fd94a58d28fa6f58384223fa8882a18395dd66", 0x3c}, {&(0x7f0000001480)="ee097cde8fcb9291e3f115cbdb20a4223657e2b17b91f320c1d84bfbb3c68329e938106c1d4babe180b67dfd28fbd3b628ef8d1d1df68b67b490b166b8618527ce", 0x41}], 0x3}}], 0x1, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) (async) unshare(0x2030b00) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc}) (async) request_key(&(0x7f0000000740)='dns_resolver\x00', 0x0, 0x0, 0xffffffffffffffff) (async) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/198) 6.21472009s ago: executing program 7 (id=2615): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (rerun: 64) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) (async) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r5, 0x5b) (async) read$watch_queue(r0, &(0x7f00000002c0)=""/1, 0x1) keyctl$revoke(0x3, r4) ioctl$OCFS2_IOC_GROUP_EXTEND(r5, 0x40046f01, &(0x7f0000000200)=0x1) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) fsopen(&(0x7f0000000000)='nfs4\x00', 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[]) (async) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x230c00, 0x0) (async) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000) (async) dup2(r6, r6) (async) write(r0, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) 4.73841783s ago: executing program 6 (id=2626): arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000040)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x410041, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x5, 0x5, 0x7}) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000100)) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/warn_count', 0x0, 0xcb) (async) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x1000, 0x1080) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000001c0)=""/218) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f00000002c0)={0x18}) (async) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000300)={0x8, @sdr={0x20363159, 0xa7a9}}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000400)={'caif0\x00', @random="3fdd537a7609"}) (async) listxattr(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/92, 0x5c) (async) tee(r0, r1, 0xffff, 0xc) (async) socket$netlink(0x10, 0x3, 0xa) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x14) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) stat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000500), &(0x7f0000000540)='.\x00', &(0x7f0000000580), 0x8, &(0x7f00000006c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@blksize}, {@default_permissions}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xba}}], [{@subj_role={'subj_role', 0x3d, '/dev/ptmx\x00'}}]}}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000800)=0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r6, 0x1, 0x2001) (async) syz_open_dev$vim2m(&(0x7f0000000840), 0x2, 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000880)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000a80)={{r0}, r7, 0xc, @unused=[0xde, 0x5, 0x80, 0x1000], @devid}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000001a80)) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000001ac0)={0x0, 0x2}) (async) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000001b00)) (async) ioctl$VT_ACTIVATE(r0, 0x5606, 0x8) 4.653565719s ago: executing program 7 (id=2627): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x1, 0x2, 0xd]}, &(0x7f0000000580)=0x44) 4.612252237s ago: executing program 1 (id=2628): openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x9, 0x6, 0x2, 0x0, 0x4000000000005, 0xb, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x855f, 0x2, 0x0, 0x401, 0xb, 0x80000000000000, 0x800000000000cc0, 0x5, 0x3, 0x10094d6, 0x7, 0x3, 0xfffffffffffffffb, 0x5, 0xffffffffffff9d06, 0x2, 0x9}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = signalfd4(r3, &(0x7f00000004c0)={[0x1]}, 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000500)={0x4, 0x42, 0x10000000}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000200)={0x11, 0x3, 0x1, 0x1, 0x0, 0x6, @random="ee52e7e07522"}, 0x14) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40081, 0x0) clock_settime(0xfffffffb, &(0x7f0000000140)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x4a, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffbf}, 0x0) 4.521045805s ago: executing program 6 (id=2630): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x1c, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x7, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x1000000, &(0x7f00000043c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d85f39def176b92611c0765bcb05ebe49315ea5e18bcb75926a3a6350db95585cd837a08300b79d5b1c97aaeafa8296c01b1b818f9d906ad80200cde31cfdebdd8ea12f16afebebc2fd4ef884d88cc16c3070361a24ad6e815c08fd62abc1b4f5857ffdc82daca6efbfcd0098735d22dcdb7516827f5fe3cb8d0b0600000000000000465685bd189c6cda6c7265aaf93f71f0e1e5cd89135c0caff767eee6e18d20dbbf3856", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions,\x00'], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002340)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x800, 0x101, 0x2, 0x2, 0x3ff, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000023c0)="7183c1654c792752d2252c111505954b0b2d4062f31328bea54f310d5dcf627fa7f8f45e484f7bbd0c20f5de909f0c29f7418403b0a343182340147475653be9aec286f773355d274454a71a5eb1afafccb166cd4b995af5b23ea89439fd58f9d4b07fac9ffde1c16f9ec644e02386c4c879fb7495d65b6cd2bda928253538ab5c7061572b7be5483b6fa86968358b4b537fa0b95fc63d8631b1084611daee62ad3bcd2cb9f53a59416985d77f219e29f289a45fbb1ae3ebb4e046d6a9633ec25ea3156f36effa0491e125047e7948e3f889f713abc9474f577d84e8cafe011ee3eec12b43270d728146e2ff22d74bdb0694e93b7f977fa1952ab5b9a69cde45ec4d22047e785794c827c42173a26930b088520677246ac55b5bac5574325eb6aa71b5f67e151efab73f7582588be5eede94b20c257eec7cffb6d6c898f2a525ab0fe9fd0a1fa480137eae2905a932e175ffbba70f1dc7cde443abcfdc2e1fc12b1bf444e65b802eb4859b62a06ff813611a6ea1d8d35bde0348c02af3b8c70fe172d899ff191850604b2786e06cedc28de58093cb585b49a5c1d4c8669e8a59f95ff3bb4287a56d19de4c65d18ae9335cf1cfedc47e6741fdc6a6ca45290cda457a87162fd6868d80e26bbad4657db5214f98e89240c27b071bba6dfc206308a078593c7b7b1d20d64291b7dae4ed3303c5d90d0df3e1be68c47f99baa2cacab4f87878e4a497fe5bd4f9f0bd4e7253dda9a951d1906a6da9e4def5e6fb8df7dcc085957c59b0b725deb104dfa0e38f5d3f4bb6e55d0af541348cfe50f17fcbded2419d939196a349ff139a1545765379442078676ef2287d9a07eeb2758ca36536640820366f99f31155c1d571792bef6c7ee7570f1a267ee692f93203efa00b5678b6f1549068fff92651c9ffe1be516575883c42313c9175bf9dec1c559c8414dcf3c928809f9d4cdc3279164d570b5f2c3f549d7c57acc17286622983bde3db9e6eeaa53fd6dfc30b87edcceed4543eef1ced8a43584a2a0b90ef0c11d92682a7c3647888fdebaf8522a3886cb6874032b803b9024fd2df89a291c8479b6fd1f29202484d2227ee9cfebb58cbbc5459583392c78f4cdea2aaa353fc10d0f6f219e041cb95fc4fcfe95d6e2fdf8680d4d4315ec4a90735aac77c02e0bec67e1f6b8edef2cf8c3b2334aed69bcd855fc70ec13412322bcdfeb9ba36f48b62a19c489ff0be02bb5042bb7b911ba53c2cb73cdc2c8afbcaf4a067c9f33427249ca462fcfc760ad265f468ea8417f1cd35be629d35ddd0901ed6c1be436f248dce3a6280a8e0c245bb409fc4461efdca9b3fbbeb1090f665e2491cb86198d87973ffa4129bd5cc31dd472313f55b3ce5d7517d76414684431ea0eefe3fb4dbcf462cd8ee3605daa4a372b0ecfcddcf9fbea616721cbfc12dbfbf77ebc02de165157bfc7540a8271c2d1f445a2c7afba38c3ebeb61169894ae9ceb8e228c7331137db6f870a19550f2f495c7f08d0b131208fdbab2003479d18093ce57ed13780fed91050ac7be47f4ac661a160f014c18b572c7982c0b03851babdee50a066827ed740f265cc118effc7ef7608a947680c4bee1a305b2cac9f2f37a2771f1382fdb24cb936dc4220a9a6a44669d7c48564e85b475a076c4b06f1f2b8dc04e2d0a0775bf52fcb811a903270d704bac39ed1eeb3caee9b0940e0c22f513ad3c262000047db217f2aea76370af22adbc3c8e6f1e6fc22b5fb4b176f405517e5fc483c50076ecbd2af833c45f1b7fe21722d35bbb5153068426c1a630f9d08517953b39b9adf9b9c5f5f7a9bf2f0020e84edc541bb5112bd00d3dda0a5a784b038de7f2bada95b5040690ef556a5ae169b874f26f85c114e71a0393bda4c8c1aaad8b4c7523f24a901324c9d2cdf6deb88bfc03092130aafcbb75ed469f269a78b83937dea2fc1d0e3d826edb978471c5cbadbd60bd3b9f418ef30aa6a437319793d5b252b30e6c6587b7c888da6d257a59356d2e3aa7ddfe477cb7122a727289d42a5d0773a3a2a93a76e3ba0c854a98a4297ae388f0861f64f1949eda7cb8f1d643b1a8ea488f1565a829c3dc06ddf10ef193ddc74661d4a1e8ade01fe2652ff606d48eee3732c88603f8059c56d08b231069eee3c4c9b62ce59fd03352723ae4068983c5ef5f3aefdacb92756bc051c15936f86ab70910141a897545489da87f8ec6a545626dfeedd1a01b39b03c0961030fca2eef0e0935f0afcf495598ae5e1b428152e62ecf21512ea27d7295bb9697eca3a6fffe5d7c1f1c389ec0d4f509d3bbda5d3bc31cbf8d6a32f966d654b18c25134fb994b1acca6ded0e13f7a2d94964b5e16ec0e0448398c297314254a9acd36d14c342d637084b96e0b770ad7a46d67238f26625e2f3e2c1283983bea299ad149fafaea62e4622c29f168ba2b091ad8a19e5c19f0f51608c0f55012f829af2934bf00b59ef689b93fb5e080620da166f61251a83ef4c52f246bd5ead76449c99048eadf778e52313935ca50d953a962941d07cdb5f201cad408efeac1802f1b622bf9ff338ec0dc0b61297e681c15db4ba82b9a7c7879b2897e2f4da36de9d366770c222a064d5b56ca800009d260376a6dc19f63d0a5fbb4f2b7ccb71b9d693d4596a4580d7822872f29a3af6d0419aad50b5e44515ce4b48bfb923c16dff60eb890bc04a8997b4bb347a643ca436ffb8f4cdab529c2fc847ef8db017dbb8ea76f645eaf3d8314d8b68ebefdff622076f5f5365fb00db199dcf6ffc998d4007a2d3ff11abd03a71f7c2b23bf7da785010acaddc388d21ca5700ec57407e025ab5a93750820a0814b330fca50534edb5a1b8658301a7f175f110c8513b9e0841074f135200965e8d74c93732c7c34c003cb727e86e6caf3fa8ddf54927001e1f29c7ffe1cce3cee719f980d4ffc9abebfeb1c5059b52afe9c78413a6e825af24fb1c675b906577bb1afd02fae10b6d7b6d9a394826987a621c3d332320f714e74b709236dbdcda930db15650d1fb3dac7333944a205c69f78433545b942dc8bc41a670da0ede8b0383e66838a2980344d35977e9a1fa94c164f73ddb673c7e65eeb70df39bf25b692dd09ddbdb6a5d0bd0a5b5773c128abeb021147277cca9c8f76dacdf75174969ea62b479d05557ad3365f0aeaf061323d8de1773c81cfdb809a55e5aa6967a3fde5eb3b590a523e3b986997bd42adcaf55f5859641d8a20288e48eac8b5d3ee23d71be3298120031437d650645e36786b6f887d9dc74e7dbbfdb6d463e912f3e462480b5dac49a2804eb56ff333d7fce4c1b29036ff26cf7ebfa0bb46e36f6ab37cf8a4480fe85004a05a046a7e367ce78699a893f7d9471fa1b81b23d59bc1dcec14ac85db72056c7c84be166e87a2b120c6d7e53d3b1505c1336cd362e1d101a2c29d62ce1e2733efb4e4861a9f712f678b09f174fce6ab5957c185e77b0017964f7caf17ab31531f8ad3afdebadaa949aac1f85b1fe31553afb464ece3b0db14a5c0b42b9574729bd41f1e543529219939685e7dfc643263f363b3836cace58433244180f1ca6bcc740a0e6c66ec22f5c0edb91599faad9ff618d541568680831e5659c73d01151dc4a89ad6666cca1ad7e57bfe819a305328f00d680555f4979348fb444c508785db795d3505b764f328bd123dd2f4fd13c3be9094b5232ff38b02e485da80ea0418d1d6c6facf7bbf020c5d2894f8c4f6d67a0ecf660dc87af9c625c7b8dc12921f3f01edc8954fbc40a61d87bd64a1eb7aa18d525df842492d16d380fbfa0022118c22fe617e4a43dc311fbcc06ed9fa656deadd965021ff973a19a84bb2c04eeeda2b0d8e9dc4ebc9818c21661fe95c42f8917d88ebb5beafb7e0ac35e7174e9851ba2a8c5cf4115a5e0391b65a8fdaa9750c07046e67881cc491dfb14999cae28e835dd083fb5962ea9809664fb5dbacaec93423f9ca2bd37da35fe5560409f76adafded418891cb45d22363cd77f0eabbf90e6c0413f56175ead17954d18f5e13e16f9a43e3d50ecfcaca20cdeadc6a85e3c5d8039d502e82c8657b0d8d67aa81003d5eab83884df0206fa5020e32eee186aab41da797a32c8e7d2ba8309b463bd84447d27d51f8978d744474dac867822814e1adf897c79e53662a3db2575a6ed5654e41baf4da6415fa4f79baa0dd5870916814fb42e72441080dc50f33fed0ec215931f3ef6b53786911afc7ce6b89d8984f5dfe26d29c6d1b59671820390b7c9695f51bc13aa84abb6bb49cfc8dfeb7aebc2d21b9ea4a44be2f90ac7934d6f3910d388dc65ca3f18c6875ff5ee81a4bd61202443bb96e40af5c8d840ecc4374ecccd8c242fbaab3bd5b57beadc8562e5280716898d6684c0f09102f378e9e4c5dc0f2e735acb8c5f312974e1c80c817fa504fbb948c9a5fe779f249b1faf95d3de797615f29ad83807fc357c3de2fa1dea6b75d70bb20d3db88b7ed167e377e7c1f2b0f185cfc598c54a3de9a3c6a1099f3dbdac4ccf9b541c5b82ecc46a02054dadc255b27507615ea028b887e3446f7bfe9f07a397ed271b31f6b61e4d4fe4f444dd501d1bbe5ad0d9f532f22f7d181cdf2eacf02fe73b86bff775c1d27c97fb5d61a62c7bd160fa9abc411628339926915f016c15cb9d7dd6a161a46d0dbe8ce79ee8f92e4b0b1a90d26fd9a336d2dabb6844086ab91ccb875039c22d3e3cd623369642416b13940da156fc38bf22ccd790eaa594a43057886e31aa1d9b08d551128c227b111d11c11149e9f17ba10ef9fa330cf779b53777067d118d92a029359b60a4967460db0ad15437c26cddbe0467cb86332a4ee5a7db0994c70fae7b0c91b2be8ab0b8fd59724f22a7499f367f0a564eaec5a6c6ec33e217d1179e063bdfca7aea8643b258a91326996cea21c3f5833e88ffaf7162760360b068136172e8ff3896c6cb3f85ed389087b782bddc2787d316d02218651e726ac74f0680f41375eaacb65f5e07fe02554b4ef68d21c0057151f1885e40efa06cc575d9da764646ad1623a12476fd22a1689b80029d686b49fc5e3809ecb67a3d455db985f9fa5ef94ff15a37b7f436e25fb6b332a61593b0091320aa059fa4e7b40218721e93a4852a305afb91482711959886dba77ca130d6b704152c88a497492a8c8497d6500d4c00303c976ce4feb63af3c04d79470798916a39a35bbe286f0139ab4a389776216f0ff45192b78ef7bc37a591961f29334bb159f05cfb29077d25ae64e25511cb0e06d04bce0bee9940cc9301e5188410d90de2e6f3c8b2bc7d3b63a7e9e81e06c0f7aba6deb3f65ade427ee759f4a145d48f46be57452c186f79756eddbd57a8afa56c464ec2390bd0de443e9050358600d2aae0f4c26c57509ca44f87828a78b3402877097793a124f1d8797df9ee8a3d4ee31b2d0b6ff15d9fd4dfed8576f8473f11ff1fa8a9ba5d6a98b496fa8ee07b780a2f3db6096ef7a210944c421f917a1dbb6656b5dd1b5d28b9c12fffca50c7ae219cf2fc942f44157e6a9075df8bd1d1a4e78c5257de2c0547ecdbdecab658dbb78cd12f123cf30126f6d3bb9862ac2577dafa57f6d781de013c24de2c1a61b68852933cd52a008188c81db89a3a5f6d726b4a36ec94b88c1f9897ff4c8b70357dd6b8df89814979f23e6299bef881b418b43b2b8b2f9a2b4fdb63602b4855b6af76a0738b05f9595f109a087f51fec1d8c8fd89fc65a7a5e87fb51c6c1d5f7681a03866935099d71a14090b4acbd9b32b53f41b5bd941825099d2b60b8a2824b2ae8a6a280bb49664b168b680b5557cd4c043cd8317740b7bfc67c09c572a6f9430717a7fe8c0de6eac2a8197353fd98008318301586574d3d0a9bd940119c86eab16c37b52f5279ef017dd05ee01ec251ecfa4552faf56b2e6c5da623db3dbbe5b61c997b587a1ff324bd52ebc009083abc3b38ec8e025a74c9a93b4ab93563b077fe21bf8e003ec94d0ba086c755d57d089a4d26da0dc3905794e9f514e6489fb1fd17017214d13e5f8953b5ccbbcdceabbb795c47509b77b856a325062bb576472639a9c5945758862e9919a585a08323e3f6b373daeeae53fc34bcb0348c225b42681698b560adad4d6e76a142fb24fac16ffe41d3ce90f3c8d2c23c9bc9a1f1cb6d7d914a52a4a81e0bcdc81c3db916280b5064e337dbeb609fc55349c3b3c157fd5f290f96a49b9bf793bfc86a5e2f2aa8640b7051cfefc60079807daba74caadda51e509c45b6334364751424f6812aa649044cda11ce9f667433ce507521a2fa5b2bf7426a06c4cd2b96cd5daddf40b83f5201066962ccab5aa240abfc161cd22767af0c9f38eaa353ec94ebc91cd5d0d692199c51c94ab0ad01a96fa5acd1dc426732f46c97b48ca6122e35c165d67af9c1c7939efc4b34b94287339ae19dde488d5ac009b271ddcde85ea9651bc793b1c6a6a71aa569f03f350e0bc9b7f03697bc8c676f8adca0dab2885b40c5ca0cb39f5aafea2ca215267af81f67b1f3598395e1f7b4b98fb85add7d260d53aa7d6720454809daabd390283214a8c04fd86be5fad5417c7256beb270d6528b611d57d9889792f6615ccc8b27e36de49960b2027c12915fa472bd15b233eae9026771be4459397016ebe5e7c03f0c9c24aa62936a98f09c37aabbcc001b55b1fad4729be3b708e70f893fd1901064c5863e444c38ecc8127c40fe573a412f154731587fb4ed173a112ab5ef727f9d35538a00280b099dce9aa990cbc3fb5ba0f224d637d26060c93dd768e4ce14ecdeff52d374e1bbb75b4e36f5c24bc2efd619896d4ae7ce89b3eebc96024c0f20643c8722b20570f52546f0b7950a8b1364041611a57f1cbf0473d1b4c0fb270c3eddcb7ec770990e738057e1e147c7cb222a4fa1d43159b00a5cb4bf8693f46e338c5342fb779dcf3774c47916c9b6378bb7024c46d3a9283db02f06f33e923194f377b60d3a3544df65d7fd0e864bdd2f5498a186d00c055a3266ae58df5324b5577ff8bc10e802587ce4b40224795634a8740f46ca4684513bfdfd058fb3dcacae59fd81328752a4dea349073bee3f8f6deb4ab49d07dc8e12f5c07c03e18dd9f3ed50a81cfaa34b7d76a0ca136800c7dc9d8e4d031dd83d350fdc5f1c381dfe9a4d50ce7a3d672497686e36417bf42c963ea4d57b4a1e8406a8d8366e48d90ca841f11d578707745642a92bee162bf53413193c4f56393fd6f3f16104b037e540467e4399ebb474911ae4e3f6bd8de3b8d78d465a0f965aa83a9a6915e1a8680173dcfc943b0b22e72a9c1e2ff91035c73e1ae8a391433927b4f98721926e27c24ebfd9ae433305de8ae18e4f7e58fba0a71711bc2462e6f58b52f62eedfdd188d82e837d84c695128c442c7feca7cf33bf9f3e0419c2ad2c0d0ce716cd3aa50d14590a1b0cc3f7a7faaf6edbe23f3dca06328618c47eb300aa2e70eaa9d3d9ef1fedc7c62f678001d00b73afedcb904064ab9402556bba36635d6009200524723e30f9e5f3ba0fe7f0dcdd7a71e917d20ce83385832477aed639ff46a6407b6bda8adcc1445c9ac5050012779d5d203e01c1a60a6ec1189e0c311baa8b4b7f80353c2545ed25d4e967bfb55d60502909177e51a4fab5f14bfafeb2f8e29b8c358c4c6e01126ae4909dfce62c05b7c1f26ebec4ca1eeffadf7e2de92d505d4dbce9f01f5898b78a29df49041334f7723ed3f33ef66d47a7d7934bddb65bbc35c61f6f87aaca98e33ed76d99bdf91028202aac5fdc2e8f2349d213d720ed20342275ba17dbd4513771a523d59d4e58f1a85a5b2db3444a7426aeeeee000c7732b580136dbb5da4e38bfeb9b4bcc8d8277191a6bdd3cc8999e7b029eac6d4a3230f3921bb7c05aee79eeb6582da5f55ae988284fb406944f60ce5f56c91571d9871d08e1abbd727021af7de75ed8636ae66b58e28e49ed26f90858103f40477500d8ea9dda0aeb93f8f3ed64584aa53281c0e823f421d2a5ae4c5c6dbed7a5eea7759e5f88e0b1e4c5aba30402eec0f31cad961c7b91f97718d69d36b2e05116003e48b154bd192463c88a91bff59469260d5253f7592d88d7d1b404eb44a1a37b9bc168d2aaae1d9c1bc76429b443e750c5465c9964024401dd840827b6562119bfd26419be851774ee6f042d03023e8733d5e5da81f0d79eb6b2d44680c761a4067340a70e64928ff083d3d6d580818dacc91cf911e43996fdef4e7a2b99961ff9f1524429a619c262bdca9d66ea3d6e2af7726d53fb2daf4aad27c4f140463c2f28ca0080361ebf1bc53d04ed095e79ea456a7df398b27ac4968c91fc05f25ce547c55584b1fd4409bf831f1c094b7b5b922ac320b68f0a2ed9fdf6589cec5664d086832fd2d124ac0a3414cd79231f7608d6a7bb282cd2294b976e76f677a0c55b6230b16ba5c778e7c4b098b254f61c48a96840dea31526ea453a64bd8c6c79cfa6b2d9b67c1f43dd09dae0474234e370dbb87e09c2dd3c06f6e2537d0730258c267dc0125b5de1abf6c873327558059c1f15f8ae330f57bd01e922e7ddfd1645cb7f65fa93758346f40795f7fb4ee34a52a77b88e21bb4ae5f3992a8ecf3749543c9a29018270dc78b2e1b2e2ba8cabfff252d2beab6f3a03fd97f7a3c64c9dc653fa2776247f18806fcaa806adbd1e1f40e452778799dfaa54ddc5034b68b1111204831d172666fe2491f8e7d1b774125021e1e506846a85bf0595e3a4f1d6749fb1e0f307db076f793fbb376748eb4848d277f339f8402c34996a6f0402867b4842a2b49dc5000aa7fd1d1ece309a7d9ac2de864be2f891714f80dc33de0ba12b443d4c797028b428fefa73f4d449db3d8857f54b87bb18be180defec7d342f9bc6a62cf7e803019d5b34699b4d641f7b877473b31eb285ed7298942b390c6f0dc3f2d020b99e97cf77d9c0deb5f7a4d24acfed27529983238a9396387004c1d0d559914fdd328d8138d8a09a239d13ea7cbe6a1e5bb15ef31744c47db7b2ed9adba3490c925f7cd32ebadf1703abfb6f7208a0618fac5ce87c41c34614f12890262e7b768fd61d18ade5dddd17f981a331481d8cf51a4ea0de2b5ae771cd9854eb837e0c3161135c2ea96bc65368fd4ade64bbe8b1ad83bf8e441efa5ad58b504b3363e4f64b107a052e520da8592d5a82cdca61e62dc929675d43ec22adf0d5e6e1b2c6e6da2a8331e43891ec01b8d437ad2eef660f0819b1cdc0da41dcb10e3ab569400b2bfc6596aa3fe74c0a9eab4d49734f8ba17ae80dc2af75f003872b9242d0ea419bfd8f7998e8f5efc3a3f31aae23228f5df23e1a4f9f887aaf62d16db191e16423363228ffb7e5707dbf48b0718664104ca1b3b8094ca2f2e505efeca17449391a1de5273f9945d778a44d25bed43e88627e0f02ac99b17b6062f1cf1c3ff896ffedd647fbf5b17bba1c9f48b44f37c175cab7423bb515266c351bcd32cb8e686dcc2f53c0e6e69370bfeb26a92eed46345faa54d16fb8631abbf87155893a00321d4e6895f1db18791570a3c3bafdc4a0a0ee400879babfb96c32de9fe4f0c7e5525b214f2efa6134fd11b7cce737306c9a2f181589296861a069b52ab409f6d68947d4e93408c58a2583852eef6180386095cf05af416dc753e04d01e63850954877052b91e0106e9e4a09188db2e3d20c4d0f55cbc70191eee8306627934b4385f0388d4473d255edeb2863fd199c7de24e4017eb3419a01986efdd686e6811eafce821a4990612618c635f5493fbbf078f7ebb6ad2524685673ff6de8ddd1f31f5e8c38a4ea82032acc1bc4492921a227869de3465b63c8af1f9da042d6a4ff6038fe2d5d8b33957b2da3751263fc761e474183e9d98800b9a8f70b6c14dc3088e6433e873635e892e0011b619e75d1a9a8f2cdb05cd400a3c9e1e3a49d3e2b94dd31ee691b3405c9d7afc2cd90b158630877b369fc7fa89e99436d8199844c9c8d983dcdc9265ac7fce701366b77a96188bf3e38edd51db71b6e812e5ad91b365c42113579a9a21d6ae1763cd661abeb0d44818b48d0044852bbbde748d0d553e3248e6b8c8b96626955e558ea3545d37bdf8678650846328a192a3094499e278f97ffe373fb84b66cf632cf310e2f9f7bf9796949d8e3df3ce3449962ef94e802866b15a96f639a01563196eebcf5d4c44874b04fe0af19f5e529da8b5c84c4a7720c4a4e376853a62803f147a0b02af0cdb84c8beb82943544e818a405dac88240d5d16163dcd305863ae3e23cbd30a3afee464d3c650584b3f0a4d18d433629584de57bfeae052f0ee56fcbe9e99fb8889330cfde95c2acf458a9547d845d9f16d61c91086e6b093c3231f4ef8ee1d9a483b3ff64e5e1dd458ab1498d5c9ffad7dcffc08f3c17e3471e5d7864d7ff46e3edbd31006cc007692082ab2b876e00003437ae98a12fb5113f30fe0273d6e54bb724e1a68231b514a684c652d9b3221f1002d107607e95690f42441a42fb27ea8c06bff93989868b69b7d89595aff235177a7033cd8460b5ce72d693a465ed5f32db2eb84de6a073df764b171bf95d989fb1d5aecf51a035b6b3a2598178c626355dd45fcfd7418cbefa7266408ead0b0758bdb20458ca2a9e17c4948ed2b448ee0b05c9ca40d2737f18b5d55c1bbcdc54d8d84057211148fd29c673a4d9d40c9ea95934adbd92cf51bc04bb5a129de5e61e745549c3661216cc95ca8bdbaf1300afa4a1b217520498471e25786535183bc9f9e807d5e2f8a719371b36f582b89829c3d122f609d6fbab9ba3f9b531254cf8f136da347fca26c134038e9fe5c37a20a747273a6312a2c8c54a9ef16f1309704b4c6e8f28c64b120c7fc4527250580de7febe7bed26976a2b5f50af3d391005b06216946b0cb83029848092f473b0504a747c10302ead0743abf7879a6bcacf66c51ab74c85dcc9ab80ea97c8e410f4ca2be1496ada764b0d40710110b609b94959063cdd744bfff8a205cc78267451319181314c1ec3f0f7698c91592f5e876a6953cba7040a5dd5abba1064319ca4c9776a5d164b2378765b385c4bd046ece0c19853e5a6b0a95cc4e64ad056327209f6f98f085e2abad270930e1c74f462137184c7ad9cf88a73db662c15235e79065eed8c89e3ad88a68a51505dd09e042871d65204ef36b7958543b23dc4661cd796f98738d8638b3ec8612da6bbd01b3915a23076a55497b8442c6895f2d708e5212e3bc4a377849f690fbf2a4f40189d1416a1c30b841fdf035e97832af641162d221dfd9b9f636ba0e280a338bb5ee8fb9421216f6fab09b782dcc34190bc65f906dfcbf31a932c85440ca6e8e6f20c2a9a76a27a2cba65403ba8ebacccc9a282e29cb8373c24858e51f7f19fa0f484ff15f1f70a819a84abdf69f09c0a8d4fb84ff43f867a4574e1a517b8f3f3724388d90a82dd0ec5d207d40e72812e2b3cb098e9d0a491330fad438355e7bee0240e4fc3b99675ff5f51434746fa700a2bddc2573b2cb5ae6fdfe7130869fc26c95d800ec5870d63fc5b54256cec89f738d62f7921569b4b72ffa7d19823d2da72215a6f994f950945c00", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x6, {0x3ff, 0x100, 0x0, {0x4, 0x8000000000000001, 0xfffffffffffffc01, 0x2000000000000, 0x1cc2f0c3, 0x101, 0x4, 0x6, 0xbfb, 0xa000, 0x9, r3, r4, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, r3, &(0x7f0000000300)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x20, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070d871566b"]}, 0x20}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r6, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) r8 = syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) writev(r8, &(0x7f00000046c0)=[{0x0}, {&(0x7f00000001c0)="06000000", 0x4}, {&(0x7f0000004500)="7e0288e845ea3dd66d62f200941532ae7a5346215187f06dd208404f2b391144a6ccb2e8e1aece83bc538af86c1ad2d8f3449b47add0cb3916645e1a549b55b524a600133e80aec30b96acc6383b8b3f5e64b9b10455ecea3a3ed0905fc55c83412a79d7c99e2c024b289468cc4996aace57d9539e94656821fd5f1840841443b22e222272039b6da1a1e79172ce5da0f299e9d93fbfe336808cee902d4c8b63fd8f33c6290b471850dc4f3933fa228f8c3f5b2923942954f51fe5543df5a4cf7e1de224158fba7c3242b2e81bb581104104147e834a", 0xd6}, {&(0x7f0000004600)="096f8452691db53c595424e4c9c3438bda019893077b7cdc8c7c73643db00b000b8ae4ea9154eddc15325a681632399130e35796187febcd3373e6e4592b21fc06059332706efc686b4306fd20c929eb4077cf98c3a41cf1432b253a9921a46921a700b2e3984edd1408b4f8016d5be10693c252a2ecf696ed5b25290600cb5e193190291bf956d94e5ea2d08e8b49c1fa766a03e0c2452d3e61b38484e7927488e3a9101ee65a73d3c727aa24863c", 0xaf}, {&(0x7f0000004800)="b06fc578b233ca9ab5838f0a012a52ffa6dba42d03817e655f6ba9fa47865c877127ee67a7e58d2cc331020d48e633f94c251089c3bea2ee4715e592774c79f87116a925150599428f9396ecc27a95ed739d109c00000032c124720a4504477dcca62e4493cbbed9b308b057cfed3297cf6d6a14adc232", 0x77}, {&(0x7f0000004740)="00aa8a78737135de2a0344cfc2e3bc6ec523e231f81fca3923395bab06896361245e60b060b59fa4e2f55cd5fd1b00f49cb62286c3781752987b42770edbd50f6c701ab375ba582ce3a3904db496e738e313682fdc7884fefc786bf81ed5a110674b992e511ac69f5bca74a9206fb02ac1fb5d510149a1a315256912e02743625207a4e5ff814fc3e2f6da", 0x8b}], 0x6) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 4.495147097s ago: executing program 7 (id=2631): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe, 0x9}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000200", 0x41d) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@local, @loopback, 0x0}, &(0x7f00000001c0)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x923, 0x72, {{0x8, 0x4, 0x3, 0x6, 0x20, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0xb, 0x14, [@loopback, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0x140, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x60}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x5}, {0x3}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8, 0xe}, {0x0, 0x1}, {0x0, 0x0, 0x4, 0x8}, {0x4}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x8, 0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x8, 0x1fe}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5, 0x1}, {}, {0x4, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x40, 0x5c}, {}, {0x0, 0x80}, {}, {0xcd2b, 0x0, 0x4}, {}, {}, {0x0, 0x39}, {}, {}, {}, {0x80}, {}, {0x400, 0x7}, {}, {0x2, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfeb9) 4.205908802s ago: executing program 7 (id=2632): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x8000, 0x7f, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x3a, 0x6a6bc0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000030000000000000000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) io_uring_enter(r1, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d00010000000009040000032eb47d000905f9ffffff00000009050f47"], 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f00000009c0)) add_key$user(&(0x7f0000000340), &(0x7f0000000880)={'syz', 0x3}, &(0x7f0000000940)="3f3e8d2503bdfd837c703a9d3ac3e2364777cc982b6007a39f1bb6288adf71d65b8574e310a510291127cb58e1f9157c406746173e22d9b994138a90bf4059c1d8e9dfae0a8f8f96832372fd0653820b643fd79b0d3384ad7689fbdf6e2e3fe7dd2e72ff102e0e736cbf3ee7480e932d4215", 0x72, 0xfffffffffffffffd) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCGSOFTCAR(r2, 0x5434, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="2c0000001a00010029bd70004000000002000000fd0000000031000008001900", @ANYRES32=0x0, @ANYBLOB="0800100005000000b59344a25070cb4680778606f5f9e460422ef0cbe886553c3efbb536e91675d5d78e5fc4d0ac558ff1874c0a86690f930e981788767d7f4a9005a3f497f48aa256a3073f3d5c52792f8b0eca55b370c8e2f1eb88514c04a040b0480f5a59b2ad3080b456f121aa2e52fdc834ea06a2bc50ec23fff86722a1b46980ee76b8bf79244967a64a86d4e7793aff4636b0e1f474a275fa7e7948c587a4f055330cac5cbdeb2f3581b6cc0b164ce0797712004ef0d3fd846dc9f40d8ea9"], 0x2c}}, 0x0) syz_usb_connect$uac1(0x0, 0x10c, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x44}, [@processing_unit={0xd, 0x24, 0x7, 0x6, 0x1, 0x0, "707c70bee16a"}, @extension_unit={0xd, 0x24, 0x8, 0x3, 0xe5, 0x8, "550c53a4b6b0"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x1, 0x6, [0x8, 0x7, 0x5, 0x2, 0x1, 0x3], 0x64}, @extension_unit={0xd, 0x24, 0x8, 0x1, 0x9, 0x8, "ff6663a7c27b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x5, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x5, 0x3, 0x3}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0xfc, 0x81, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x7, 0x10, 0x80, 0x1, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x20, 0xfb, 0x25, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0x2, 0x3, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x4, 0x1, 0x2, {0x7, 0x25, 0x1, 0xc, 0xfd, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xb7, 0x7, 0x1006}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc, 0x5, 0xa9}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xb, 0x1, 0x5, 0xd, 'R'}, @as_header={0x7, 0x24, 0x1, 0x7, 0xff, 0x2}, @as_header={0x7, 0x24, 0x1, 0xc, 0xfc, 0x1}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x6, 0xfb, 0x3, 0xff, 0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0x0, 0x81, 0x5}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x250, 0x3, 0xb, 0x9, 0x8, 0x37}, 0xb6, &(0x7f0000000000)={0x5, 0xf, 0xb6, 0x6, [@generic={0x6b, 0x10, 0xb, "fd05b0149655cf43d5f5603649b770960fc98c5df3439937b4b796a6a751c315426a92ca681e79d792de7a0ff51028a9162ae5e1a7121a2fabb3f80f4c1544c5f8fc7b700cebc5d638e8b81a52e2f2bfeadf1463ee0fcccd218f08e07a27fe6319c5bd0e88f3a1f1"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "5a8d5aec4cc26468ad7a218fdb0fa9cc"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7e4e, 0xf, 0x9, [0xff6f, 0xc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "aa0704510c0cf0dcb1b6a986e537bc5e"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x0, 0x2}]}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x413}}, {0x2e, &(0x7f00000003c0)=@string={0x2e, 0x3, "dcdbba9e7f503b32686a32950df8d6c0bc93ee4c4a372f4226bf8c3b8455edf695d0f1ce81789489927c3c30"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42d}}, {0x7, &(0x7f0000000440)=@string={0x7, 0x3, "e130deb6cf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x413}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x861}}, {0xdd, &(0x7f0000000500)=@string={0xdd, 0x3, "48160c9d6b080c6f22c8364e0bb287dd476f7bd4c5f658b969104ecead2e63d87e82e5733461dfffff1eaafe4317e2f740b843af6573fdfc9efafeadb50316e5bc9ed77f0dcd63b3e0d6d75eac261416d48ed7fc452a24954f78ba689096f50bdbfd9aa4395b26dffd35938b8d78c1412cc383bfbc81c69a27c5155eee6069cd004262117fc62dc87ebe790f8e1ee523ed220e974d44820592c7161201620219789bb65924b0715fa91cefb9f19bf94254c853b682d62bf37926e706a17057ce45d552e800ba02e06976fe1282134005a7fae7bbb12da446a2200d"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x424}}, {0x20, &(0x7f0000000640)=@string={0x20, 0x3, "fce78f79dd2f04cc966d2be756737886f68646e4c8666be7cfc75ad0e864"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4}}]}) 3.254734599s ago: executing program 8 (id=2633): setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000140005800e000100736e6d705f74"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x7) close(r2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES64], 0x1f0}, 0x1, 0x0, 0x0, 0x8}, 0xc021) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x440, 0x888e2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r4, 0x0, 0x240000d4) r5 = socket(0xf, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r6 = socket(0x82350cdc8d30f1f9, 0x1, 0x80000457) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) bind$inet(r6, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r7, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) 2.916127819s ago: executing program 8 (id=2634): r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xff, 0x4}]}, 0x10) 2.794976852s ago: executing program 8 (id=2635): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000e5ff55"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000002200", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 2.691236724s ago: executing program 6 (id=2636): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000005") r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000100)={0x1, 0x0, [{0x80000019, 0x0, 0x5, 0x0, 0x0, 0x1200000}]}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x1b, 0x0, 0xfee00d00}]}) (async) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x82f}]}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x7f, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r11}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x88c5}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, 0x0, &(0x7f00000002c0)) (async) sendmsg$nl_route(r12, 0x0, 0x884) (async) close(0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2004c090) (async) io_setup(0x9, &(0x7f0000000740)) 2.507207339s ago: executing program 1 (id=2637): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x2000}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000002000000000000000080ffffffffffffff000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015005c07350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.475321252s ago: executing program 8 (id=2638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r1, &(0x7f0000000240)='F', 0x45) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180"], 0x78}}, 0x240088e0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x70742a85}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x90001) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x44, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, {0x4}}]}]}, 0x7c}}, 0x4000010) 2.444135306s ago: executing program 1 (id=2639): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r0, 0x2}, {r0, 0x4000}], 0x2, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) 2.091003355s ago: executing program 1 (id=2640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r2, 0x6, 0x2001) syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) ptrace(0x10, r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r3 = syz_io_uring_setup(0x34b6, &(0x7f0000000040)={0x0, 0xd68a, 0x80082, 0x3, 0x800000c5}, &(0x7f0000000140)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x74}}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x401, 0x2}, &(0x7f0000000440)=0x5, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x7f, 0x35, 0x89}}], 0x58}, 0x0) io_uring_enter(r3, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000835}, 0x2002889c) 2.090166261s ago: executing program 4 (id=2641): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x1, 0x2, 0xd]}, &(0x7f0000000580)=0x44) 2.040408357s ago: executing program 4 (id=2642): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0xffe, 0x9}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000200", 0x41d) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000180)={@local, @loopback, 0x0}, &(0x7f00000001c0)=0xc) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0x923, 0x72, {{0x8, 0x4, 0x3, 0x6, 0x20, 0x65, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0xb, 0x14, [@loopback, @dev={0xac, 0x14, 0x14, 0x42}]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000400)={0x140, r2, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4805}, 0x8000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0x0, 'bridge0\x00', 'pimreg1\x00', {}, {0xff}, 0x5c, 0x3, 0x41}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{0x60}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {0x0, 0x0, 0x0, 0x5d}, {}, {}, {}, {0x0, 0x0, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {0x4, 0x5}, {0x3}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8, 0xe}, {0x0, 0x1}, {0x0, 0x0, 0x4, 0x8}, {0x4}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x8, 0x4}, {}, {0xfffc}, {0x0, 0x0, 0x0, 0x10001}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x8, 0x1fe}, {0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x2}, {0x5, 0x1}, {}, {0x4, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x40, 0x300}, {}, {0x0, 0x80}, {}, {0xcd2b, 0x0, 0x4}, {}, {}, {0x0, 0x39}, {}, {}, {}, {0x80}, {}, {0x400, 0x7}, {}, {0x2, 0x0, 0x1}, {}, {0x0, 0x0, 0xfd}, {}, {}, {0x3}]}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xfeb9) 1.968649522s ago: executing program 8 (id=2643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x0) listen(0xffffffffffffffff, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x8a000, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x10002, 0x14f600) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x2, 0x4, 0x200, 0x0, {0x77359400}, {0x1, 0x1, 0x0, 0x0, 0x0, 0xfe, "05000100"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000000000000000000000000000ffa200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 1.907736881s ago: executing program 4 (id=2644): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') write$cgroup_int(r4, &(0x7f0000000000)=0xffff, 0x12) (async) ioctl$SNAPSHOT_UNFREEZE(r4, 0x3302) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r1) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r5, 0xb00, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c001}, 0x4080) (async) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x40, 0x2, 0x3, 0x401, 0x0, 0x0, {0x6, 0x0, 0xa}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xf}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000008}, 0xc004) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r5, 0x1, 0x70bd2d, 0xffffffff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xbf, 0x80, 0xce, 0x3, 0x2, 0x4, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 64) r7 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0xa784dd39a622ca04, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0) (rerun: 64) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async, rerun: 64) getpgrp(0x0) (async, rerun: 64) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x0, 0x0, 0xffffffff, 'syz1\x00'}, 0x0, [0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0xa, 0xfffffffffffffffa, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x0, 0x3ff, 0x0, 0x3, 0x6, 0xfffffffffffffffc, 0x4, 0x9, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x400000000000, 0x8, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000003, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xe198, 0x0, 0x0, 0xfffffffffffffffd, 0x20000, 0x0, 0x0, 0x0, 0x200, 0x3, 0x100, 0x3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x400000007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40000000003, 0x0, 0x0, 0xf035, 0x3, 0x80000000000, 0x6, 0x100000000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x400000, 0xae, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x1940000000000000, 0x0, 0x80000000000000, 0x0, 0x1004, 0x3, 0x4, 0x0, 0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x3, 0x10000000000, 0xfffffffffffffff8]}) 1.866296845s ago: executing program 6 (id=2645): r0 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0xff, 0x4}]}, 0x10) 1.789055815s ago: executing program 8 (id=2646): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00'}) listen(r0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000a, 0x31, 0xffffffffffffffff, 0xd0fb8000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = syz_usb_connect_ath9k(0x3, 0x87, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x10, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "b326b0dc", {0x1, 0x8, 0x7, 0x9}}) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e155038aad51c1ee170"]) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @vbi={0x0, 0xf5, 0x5, 0x33524742, [0x20, 0x4], [0xa8, 0x7fffffff], 0x13a}}) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 1.737323166s ago: executing program 6 (id=2647): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) sigaltstack(&(0x7f0000000200)={0x0, 0x80000001}, 0x0) sigaltstack(0x0, &(0x7f0000000180)={0x0}) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x24, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300}}}, 0x24}}, 0x0) write$tun(r2, &(0x7f0000000280)=ANY=[], 0xfd6c) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 1.212324685s ago: executing program 1 (id=2648): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000e5ff55"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000009700", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1.095033373s ago: executing program 4 (id=2649): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x2000}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000030000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015005c07350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 999.621623ms ago: executing program 1 (id=2650): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000140)=0x79) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000380)=@base={0x14, 0x4, 0x8, 0x6, 0x414, 0x1}, 0x50) (async) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x14, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xfffe}}, 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) (async) listen(0xffffffffffffffff, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async, rerun: 64) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) (rerun: 64) r5 = fanotify_init(0x200, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r5, 0x161, 0x8000000, r6, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) 859.491878ms ago: executing program 7 (id=2651): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040460d11200000010203010902200001010080320904000002ff0000000705810308000a07050203"], 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x6) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x4, 0x0, &(0x7f0000000100)) write(r2, &(0x7f0000000300)='xdevxcharx188x0', 0xf) read(r1, &(0x7f0000000400), 0x10) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000400), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000404), 0x1) write(r2, &(0x7f0000000300)='/', 0x1) read(r1, &(0x7f0000000409), 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r7) sendmsg$ETHTOOL_MSG_PAUSE_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f000000"], 0x38}}, 0x0) write(r2, &(0x7f0000000300)=':', 0x1) r9 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xb, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETCRTC(r9, 0xc06864a1, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, r10}) read(r1, &(0x7f000000040d), 0x1) 755.992235ms ago: executing program 4 (id=2652): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x0, [0x1, 0x2, 0xd]}, &(0x7f0000000580)=0x44) 610.470925ms ago: executing program 4 (id=2653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x82002, 0x0) write$dsp(r1, &(0x7f0000000240)='F', 0x45) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002300)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180"], 0x78}}, 0x240088e0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x70742a85}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000080)=0x90001) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r9, 0x4010ae67, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x7c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x44, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x30000000, 0x40, 0x7, 0xb, 0x40, 0x100, 0x80, 0x9}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}}, {0x4}}]}]}, 0x7c}}, 0x4000010) 0s ago: executing program 6 (id=2654): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0xc4, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x9c, 0x4, 0x0, 0x1, [{0x98, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x88, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x10, 0x5, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_EXPR={0x5c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2e}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xd}]}}}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xec}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r0, &(0x7f0000002080)=0x64, 0x12) write$sysctl(r3, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000000)={0x6, 0x10, [0x2, 0x200000000a, 0x4, 0x208000005], &(0x7f0000000080)=[0x0, 0x0]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00008d4000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) semget$private(0x0, 0x7, 0x195) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mlock2(&(0x7f000072d000/0x1000)=nil, 0x1000, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) syz_io_uring_setup(0x508f, &(0x7f0000000180)={0x0, 0xf59b, 0x800, 0x10003, 0x0, 0x0, r0}, &(0x7f0000000140), &(0x7f0000000280), 0x0) openat$incfs(r0, &(0x7f0000000100)='.log\x00', 0x40080, 0x118) r4 = syz_open_dev$hiddev(&(0x7f0000000240), 0x8, 0x202000) ioctl$HIDIOCSFLAG(r4, 0x4004480f, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0xf00, &(0x7f0000000440)={0x0, 0x595f, 0x10000, 0x0, 0x4e}, &(0x7f0000000200), &(0x7f0000000000), &(0x7f0000000080)) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r6 = mq_open(&(0x7f0000000040)='\x00', 0x80, 0x83, &(0x7f0000000140)={0x3, 0x740a, 0xc4, 0x1}) mq_timedsend(r6, 0x0, 0x0, 0x8996, 0x0) kernel console output (not intermixed with test programs): 007f763d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.919354][T14128] RAX: ffffffffffffffda RBX: 00007f763c825fa0 RCX: 00007f763c59e159 [ 473.919369][T14128] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 473.919383][T14128] RBP: 00007f763d396090 R08: 0000000000000000 R09: 0000000000000000 [ 473.919396][T14128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 473.919415][T14128] R13: 00007f763c826038 R14: 00007f763c825fa0 R15: 00007f763c94fa48 [ 473.919446][T14128] [ 474.013872][ T10] usb usb7-port1: attempt power cycle [ 474.426199][ T10] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 474.447384][ T10] usb 7-1: device descriptor read/8, error -71 [ 474.527590][ T5706] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 474.696205][ T10] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 474.696913][ T5706] usb 9-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 474.698030][ T5706] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 474.698054][ T5706] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.698074][ T5706] usb 9-1: config 0 has no interface number 0 [ 474.698114][ T5706] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 474.698140][ T5706] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 474.698162][ T5706] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.698190][ T5706] usb 9-1: config 0 interface 52 has no altsetting 0 [ 474.701194][ T5706] usb 9-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 474.701218][ T5706] usb 9-1: Product: syz [ 474.701233][ T5706] usb 9-1: Manufacturer: syz [ 474.701247][ T5706] usb 9-1: SerialNumber: syz [ 474.746764][ T5706] usb 9-1: config 0 descriptor?? [ 474.753090][ T10] usb 7-1: device descriptor read/8, error -71 [ 474.856327][ T10] usb usb7-port1: unable to enumerate USB device [ 474.970795][ T5706] synaptics_usb 9-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 474.975378][ T5706] synaptics_usb 9-1:0.52: probe with driver synaptics_usb failed with error -5 [ 475.132752][T14150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2271'. [ 475.132777][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2271'. [ 475.132802][T14150] netlink: 'syz.1.2271': attribute type 14 has an invalid length. [ 475.343832][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.344271][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.427364][ T10] usb 9-1: USB disconnect, device number 32 [ 475.561426][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.561826][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.567640][T14172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.568056][T14172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.582730][ T5706] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 475.615024][T14169] netlink: 'syz.7.2275': attribute type 1 has an invalid length. [ 475.674129][T14168] syzkaller1: entered promiscuous mode [ 475.674145][T14168] syzkaller1: entered allmulticast mode [ 475.762904][T14157] loop4: detected capacity change from 0 to 2640 [ 475.763299][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763334][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763360][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763386][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763412][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763454][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763491][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763515][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763529][T14157] ldm_validate_partition_table(): Disk read failed. [ 475.763551][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763574][T14157] Buffer I/O error on dev loop4, logical block 0, async page read [ 475.763612][T14157] Dev loop4: unable to read RDB block 0 [ 475.763757][T14157] loop4: unable to read partition table [ 475.763931][T14157] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 475.779358][ T5706] usb 5-1: Using ep0 maxpacket: 32 [ 475.929767][T14179] FAULT_INJECTION: forcing a failure. [ 475.929767][T14179] name failslab, interval 1, probability 0, space 0, times 0 [ 475.929832][T14179] CPU: 0 UID: 0 PID: 14179 Comm: syz.1.2276 Tainted: G L syzkaller #0 PREEMPT(full) [ 475.929859][T14179] Tainted: [L]=SOFTLOCKUP [ 475.929867][T14179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 475.929879][T14179] Call Trace: [ 475.929887][T14179] [ 475.929896][T14179] dump_stack_lvl+0xe8/0x150 [ 475.929930][T14179] should_fail_ex+0x410/0x560 [ 475.929962][T14179] should_failslab+0xa8/0x100 [ 475.929984][T14179] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 475.929998][T14179] ? copy_array+0x71/0x100 [ 475.930008][T14179] ? copy_array+0x71/0x100 [ 475.930019][T14179] ? copy_array+0x71/0x100 [ 475.930029][T14179] krealloc_node_align_noprof+0x19a/0x390 [ 475.930045][T14179] copy_array+0x71/0x100 [ 475.930056][T14179] bpf_copy_verifier_state+0xad/0x1170 [ 475.930067][T14179] ? push_stack+0x7e/0x380 [ 475.930082][T14179] ? push_stack+0x7e/0x380 [ 475.930100][T14179] push_stack+0x1b9/0x380 [ 475.930117][T14179] do_check_insn+0x8194/0x17d00 [ 475.930130][T14179] ? __kasan_slab_free+0x5c/0x80 [ 475.930142][T14179] ? kfree+0x1c5/0x650 [ 475.930170][T14179] ? __pfx_do_check_insn+0x10/0x10 [ 475.930184][T14179] ? bpf_live_stack_query_init+0x6d1/0x790 [ 475.930198][T14179] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 475.930209][T14179] ? __asan_memcpy+0x40/0x70 [ 475.930220][T14179] ? bpf_explored_state+0x79/0x1a0 [ 475.930231][T14179] ? bpf_is_state_visited+0x381e/0x48b0 [ 475.930247][T14179] ? krealloc_node_align_noprof+0x160/0x390 [ 475.930262][T14179] ? krealloc_node_align_noprof+0x235/0x390 [ 475.930277][T14179] ? bpf_push_jmp_history+0x27d/0x6d0 [ 475.930293][T14179] do_check_common+0x35fa/0x55c0 [ 475.930328][T14179] ? __pfx_do_check_common+0x10/0x10 [ 475.930349][T14179] do_check_main+0xa2/0x1f0 [ 475.930362][T14179] bpf_check+0x2777/0x2ef0 [ 475.930383][T14179] ? __pfx_bpf_check+0x10/0x10 [ 475.930397][T14179] ? bpf_obj_name_cpy+0x194/0x1e0 [ 475.930414][T14179] bpf_prog_load+0x14d6/0x1c20 [ 475.930433][T14179] ? __pfx_bpf_prog_load+0x10/0x10 [ 475.930458][T14179] __sys_bpf+0xd0d/0xd90 [ 475.930475][T14179] ? __pfx___sys_bpf+0x10/0x10 [ 475.930492][T14179] ? __fget_files+0x2a/0x420 [ 475.930515][T14179] ? ksys_write+0x242/0x270 [ 475.930527][T14179] ? __pfx_ksys_write+0x10/0x10 [ 475.930539][T14179] __x64_sys_bpf+0xba/0xd0 [ 475.930552][T14179] do_syscall_64+0x166/0x520 [ 475.930567][T14179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.930579][T14179] ? clear_bhb_loop+0x70/0xc0 [ 475.930592][T14179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.930602][T14179] RIP: 0033:0x7ff2a0f9e159 [ 475.930613][T14179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.930623][T14179] RSP: 002b:00007ff2a1f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 475.930636][T14179] RAX: ffffffffffffffda RBX: 00007ff2a1225fa0 RCX: 00007ff2a0f9e159 [ 475.930644][T14179] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 475.930651][T14179] RBP: 00007ff2a1f35090 R08: 0000000000000000 R09: 0000000000000000 [ 475.930658][T14179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.930664][T14179] R13: 00007ff2a1226038 R14: 00007ff2a1225fa0 R15: 00007ff2a134fa48 [ 475.930681][T14179] [ 476.139557][T14183] netlink: 4912 bytes leftover after parsing attributes in process `syz.1.2278'. [ 476.166106][ T25] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 476.316066][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 476.319655][ T25] usb 8-1: unable to get BOS descriptor or descriptor too short [ 476.319704][ T25] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 476.325296][ T25] usb 8-1: config 1 interface 0 altsetting 36 bulk endpoint 0x82 has invalid maxpacket 1023 [ 476.325329][ T25] usb 8-1: config 1 interface 0 altsetting 36 bulk endpoint 0x3 has invalid maxpacket 32 [ 476.325353][ T25] usb 8-1: config 1 interface 0 altsetting 36 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.325379][ T25] usb 8-1: config 1 interface 0 has no altsetting 0 [ 476.333528][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.333553][ T25] usb 8-1: Product: syz [ 476.333568][ T25] usb 8-1: Manufacturer: syz [ 476.333583][ T25] usb 8-1: SerialNumber: syz [ 476.351303][T14180] raw-gadget.6 gadget.7: fail, usb_ep_enable returned -22 [ 476.351434][T14180] raw-gadget.6 gadget.7: fail, usb_ep_enable returned -22 [ 476.583294][ T25] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -71 [ 476.612798][ T25] usb 8-1: USB disconnect, device number 69 [ 476.634279][T14195] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2279'. [ 477.006026][ T10] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 477.137643][T14199] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2282'. [ 477.137668][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2282'. [ 477.137693][T14199] netlink: 'syz.7.2282': attribute type 14 has an invalid length. [ 477.174773][ T10] usb 7-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 477.187703][ T10] usb 7-1: config 0 has an invalid interface number: 42 but max is 0 [ 477.187730][ T10] usb 7-1: config 0 has no interface number 0 [ 477.187759][ T10] usb 7-1: too many endpoints for config 0 interface 42 altsetting 166: 83, using maximum allowed: 30 [ 477.187820][ T10] usb 7-1: config 0 interface 42 altsetting 166 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 477.187848][ T10] usb 7-1: config 0 interface 42 has no altsetting 0 [ 477.190409][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.190434][ T10] usb 7-1: Product: syz [ 477.190447][ T10] usb 7-1: Manufacturer: syz [ 477.190669][ T10] usb 7-1: SerialNumber: syz [ 477.194397][ T10] usb 7-1: config 0 descriptor?? [ 477.394116][T14208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2286'. [ 477.473736][ T10] ch341 7-1:0.42: ch341-uart converter detected [ 477.488059][ T10] usb 7-1: failed to receive control message: -71 [ 477.489413][ T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 477.494467][ T10] usb 7-1: USB disconnect, device number 50 [ 477.520109][ T10] ch341 7-1:0.42: device disconnected [ 477.918437][T14213] ovs-dp0: entered promiscuous mode [ 478.513426][ T5706] usb 5-1: device descriptor read/all, error -71 [ 478.687831][T14236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2293'. [ 478.687854][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2293'. [ 478.687880][T14236] netlink: 'syz.4.2293': attribute type 14 has an invalid length. [ 478.849556][T14240] netlink: 'syz.6.2295': attribute type 10 has an invalid length. [ 478.896441][T14240] team0: Device veth0_vlan failed to register rx_handler [ 479.566864][ T5706] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 479.645710][T14256] loop4: detected capacity change from 0 to 7 [ 479.649483][T14256] Dev loop4: unable to read RDB block 7 [ 479.649514][T14256] loop4: AHDI p1 p2 p3 [ 479.649533][T14256] loop4: partition table partially beyond EOD, truncated [ 479.649703][T14256] loop4: p1 start 1601398130 is beyond EOD, truncated [ 479.649721][T14256] loop4: p2 start 1702059890 is beyond EOD, truncated [ 479.696455][ T5706] usb 5-1: device descriptor read/64, error -71 [ 479.808294][ T5706] usb usb5-port1: attempt power cycle [ 480.016777][T14270] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 480.096257][ T10] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 480.159031][ T5706] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 480.176555][ T5706] usb 5-1: device descriptor read/8, error -71 [ 480.246708][ T10] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 480.247832][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 480.247907][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.265374][ T5677] usb 8-1: new high-speed USB device number 70 using dummy_hcd [ 480.314922][ T10] as10x_usb: device has been detected [ 480.315843][ T10] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 480.371138][ T10] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 480.405672][ T10] as10x_usb: error during firmware upload part1 [ 480.415520][ T10] Registered device Abilis Systems DVB-Titan [ 480.426029][ T5706] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 480.452050][ T5706] usb 5-1: device descriptor read/8, error -71 [ 480.466289][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 480.466449][ T5677] usb 8-1: Using ep0 maxpacket: 16 [ 480.467640][ T5677] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 480.469380][ T5677] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 480.469396][ T5677] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.469407][ T5677] usb 8-1: config 0 has no interface number 0 [ 480.472766][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.472792][ T5677] usb 8-1: Product: syz [ 480.472807][ T5677] usb 8-1: Manufacturer: syz [ 480.472822][ T5677] usb 8-1: SerialNumber: syz [ 480.551971][ T5677] usb 8-1: config 0 descriptor?? [ 480.562725][ T5706] usb usb5-port1: unable to enumerate USB device [ 480.573422][ T5677] uvcvideo 8-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 480.573541][ T5677] uvcvideo 8-1:0.105: No valid video chain found. [ 480.626697][ T9] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 480.631044][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.631069][ T9] usb 7-1: Product: syz [ 480.631086][ T9] usb 7-1: Manufacturer: syz [ 480.631101][ T9] usb 7-1: SerialNumber: syz [ 480.670774][ T9] usb 7-1: config 0 descriptor?? [ 480.785749][ T5706] usb 8-1: USB disconnect, device number 70 [ 480.898674][T14278] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 481.081083][ T9] usb 7-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 481.081112][ T9] f81604 7-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO [ 481.081141][ T9] f81604 7-1:0.0: probe with driver f81604 failed with error -121 [ 481.346969][T14283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.347416][T14283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.361138][ T25] usb 2-1: USB disconnect, device number 111 [ 481.449217][ T25] Unregistered device Abilis Systems DVB-Titan [ 481.459660][ T25] as10x_usb: device has been disconnected [ 481.669384][T14295] tipc: Started in network mode [ 481.669421][T14295] tipc: Node identity 4, cluster identity 4711 [ 481.669435][T14295] tipc: Node number set to 4 [ 481.671137][T14295] tipc: Enabled bearer , priority 0 [ 482.218802][ T5706] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 482.366698][ T5706] usb 9-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 482.368276][ T5706] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 482.368309][ T5706] usb 9-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.368348][ T5706] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.414579][ T5706] hub 9-1:4.0: USB hub found [ 482.576542][ T5706] hub 9-1:4.0: 2 ports detected [ 482.576578][ T5706] usb 9-1: selecting invalid altsetting 1 [ 482.576587][ T5706] hub 9-1:4.0: Using single TT (err -22) [ 482.783028][T14308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.792547][T14308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.795059][ T5706] hub 9-1:4.0: config failed, can't get hub status (err -71) [ 482.828444][ T5706] usb 9-1: USB disconnect, device number 33 [ 482.894961][T14330] xt_TCPMSS: Only works on TCP SYN packets [ 483.209626][ T30] usb 7-1: USB disconnect, device number 51 [ 483.324288][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2328'. [ 483.371677][T14351] 8021q: adding VLAN 0 to HW filter on device bond5 [ 483.513758][T14361] FAULT_INJECTION: forcing a failure. [ 483.513758][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.513794][T14361] CPU: 1 UID: 0 PID: 14361 Comm: syz.8.2331 Tainted: G L syzkaller #0 PREEMPT(full) [ 483.513822][T14361] Tainted: [L]=SOFTLOCKUP [ 483.513830][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.513842][T14361] Call Trace: [ 483.513850][T14361] [ 483.513860][T14361] dump_stack_lvl+0xe8/0x150 [ 483.513897][T14361] should_fail_ex+0x410/0x560 [ 483.513926][T14361] _copy_to_user+0x31/0xb0 [ 483.513955][T14361] simple_read_from_buffer+0xe1/0x170 [ 483.513990][T14361] proc_fail_nth_read+0x1bb/0x230 [ 483.514010][T14361] ? common_file_perm+0x20e/0x2b0 [ 483.514037][T14361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.514059][T14361] ? rw_verify_area+0x24a/0x4c0 [ 483.514092][T14361] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 483.514112][T14361] vfs_read+0x213/0xa80 [ 483.514148][T14361] ? __pfx___mutex_lock+0x10/0x10 [ 483.514177][T14361] ? __pfx_vfs_read+0x10/0x10 [ 483.514209][T14361] ? __fget_files+0x2a/0x420 [ 483.514242][T14361] ? __fget_files+0x3a2/0x420 [ 483.514270][T14361] ? __fget_files+0x2a/0x420 [ 483.514306][T14361] ksys_read+0x150/0x270 [ 483.514328][T14361] ? __pfx_ksys_read+0x10/0x10 [ 483.514350][T14361] ? arch_syscall_is_vdso_sigreturn+0x11f/0x1a0 [ 483.514377][T14361] do_syscall_64+0x166/0x520 [ 483.514404][T14361] ? trace_irq_disable+0x3b/0x140 [ 483.514434][T14361] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.514455][T14361] ? clear_bhb_loop+0x70/0xc0 [ 483.514480][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.514500][T14361] RIP: 0033:0x7f763c55e98e [ 483.514519][T14361] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 483.514536][T14361] RSP: 002b:00007f763d395fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 483.514558][T14361] RAX: ffffffffffffffda RBX: 00007f763d3966c0 RCX: 00007f763c55e98e [ 483.514574][T14361] RDX: 000000000000000f RSI: 00007f763d3960a0 RDI: 0000000000000003 [ 483.514587][T14361] RBP: 00007f763d396090 R08: 0000000000000000 R09: 0000000000000000 [ 483.514600][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 483.514612][T14361] R13: 00007f763c826038 R14: 00007f763c825fa0 R15: 00007f763c94fa48 [ 483.514644][T14361] [ 483.610421][ T30] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 483.766816][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 483.767678][ T30] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 483.780906][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.780933][ T30] usb 7-1: Product: syz [ 483.780948][ T30] usb 7-1: Manufacturer: syz [ 483.780963][ T30] usb 7-1: SerialNumber: syz [ 483.809743][ T25] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 483.810157][ T30] usb 7-1: config 0 descriptor?? [ 483.899997][T14367] xt_bpf: check failed: parse error [ 483.968069][ T25] usb 9-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 483.969237][ T25] usb 9-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 483.969271][ T25] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 483.971475][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.971499][ T25] usb 9-1: Product: syz [ 483.971609][ T25] usb 9-1: Manufacturer: syz [ 483.971625][ T25] usb 9-1: SerialNumber: syz [ 483.977712][ T25] usb 9-1: config 0 descriptor?? [ 484.038401][ T25] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 484.043506][ T30] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.304937][ T25] gspca_sunplus: reg_r err -71 [ 484.305181][ T25] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 484.314388][ T25] usb 9-1: USB disconnect, device number 34 [ 485.060017][T14349] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2327'. [ 485.184752][T14380] IPVS: length: 24 != 3221225592 [ 485.185769][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2336'. [ 485.216060][ T5706] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 485.236104][ T5733] usb 8-1: new high-speed USB device number 71 using dummy_hcd [ 485.285564][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2327'. [ 485.314278][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2327'. [ 485.321768][ T30] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 485.326422][ T30] usb 7-1: USB disconnect, device number 52 [ 485.376711][ T5706] usb 9-1: Using ep0 maxpacket: 32 [ 485.377416][ T5706] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 485.377455][ T5706] usb 9-1: too many configurations: 206, using maximum allowed: 8 [ 485.379029][ T5706] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 485.379048][ T5706] usb 9-1: can't read configurations, error -61 [ 485.386036][ T5733] usb 8-1: Using ep0 maxpacket: 32 [ 485.386741][ T5733] usb 8-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 485.389684][ T5733] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.389714][ T5733] usb 8-1: Product: syz [ 485.389728][ T5733] usb 8-1: Manufacturer: syz [ 485.389742][ T5733] usb 8-1: SerialNumber: syz [ 485.459887][ T5677] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 485.526020][ T5706] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 485.610623][ T5733] usb 8-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 485.610942][ T5733] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 485.632220][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 485.632270][ T5677] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.08 [ 485.633237][ T5677] usb 2-1: config 247 has an invalid interface number: 20 but max is 0 [ 485.633261][ T5677] usb 2-1: config 247 has no interface number 0 [ 485.633290][ T5677] usb 2-1: config 247 interface 20 has no altsetting 0 [ 485.636186][ T5677] usb 2-1: string descriptor 0 read error: -22 [ 485.636319][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.658547][ T5733] usb 8-1: USB disconnect, device number 71 [ 485.716092][ T5706] usb 9-1: Using ep0 maxpacket: 32 [ 485.716822][ T5706] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 485.716861][ T5706] usb 9-1: too many configurations: 206, using maximum allowed: 8 [ 485.718528][ T5706] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 485.718561][ T5706] usb 9-1: can't read configurations, error -61 [ 485.718986][ T5706] usb usb9-port1: attempt power cycle [ 485.729962][ T5901] udevd[5901]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.787385][ T5677] go7007 2-1:247.20: probe with driver go7007 failed with error -12 [ 485.907547][ T30] usb 2-1: USB disconnect, device number 112 [ 486.067201][ T5706] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 486.087840][ T5706] usb 9-1: Using ep0 maxpacket: 32 [ 486.088370][ T5706] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 486.088406][ T5706] usb 9-1: too many configurations: 206, using maximum allowed: 8 [ 486.089746][ T5706] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 486.089780][ T5706] usb 9-1: can't read configurations, error -61 [ 486.136590][ T5733] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 486.238377][ T5706] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 486.257664][ T5706] usb 9-1: Using ep0 maxpacket: 32 [ 486.258236][ T5706] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 486.258273][ T5706] usb 9-1: too many configurations: 206, using maximum allowed: 8 [ 486.261853][ T5706] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 486.261887][ T5706] usb 9-1: can't read configurations, error -61 [ 486.262156][ T5706] usb usb9-port1: unable to enumerate USB device [ 486.289659][ T5733] usb 5-1: Using ep0 maxpacket: 8 [ 486.298209][ T5733] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 486.312852][ T5733] usb 5-1: config 0 has an invalid interface number: 6 but max is 2 [ 486.312903][ T5733] usb 5-1: config 0 has an invalid interface number: 176 but max is 2 [ 486.312925][ T5733] usb 5-1: config 0 has no interface number 1 [ 486.312943][ T5733] usb 5-1: config 0 has no interface number 2 [ 486.312990][ T5733] usb 5-1: too many endpoints for config 0 interface 0 altsetting 255: 255, using maximum allowed: 30 [ 486.313025][ T5733] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 486.313052][ T5733] usb 5-1: config 0 interface 0 has no altsetting 0 [ 486.313085][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.401135][ T5733] usb 5-1: config 0 descriptor?? [ 486.613329][ T5733] usb 5-1: Could not set interface, error -71 [ 486.640499][ T5733] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 486.655095][ T5733] usb 5-1: USB disconnect, device number 3 [ 486.730960][T14411] fuse: Bad value for 'fd' [ 486.913699][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2349'. [ 487.094320][T14416] No fuse device found [ 487.094444][T14416] No fuse device found [ 487.094476][T14416] No fuse device found [ 487.094504][T14416] No fuse device found [ 487.094532][T14416] No fuse device found [ 487.094561][T14416] No fuse device found [ 487.094590][T14416] No fuse device found [ 487.094653][T14416] No fuse device found [ 487.094683][T14416] No fuse device found [ 487.094713][T14416] No fuse device found [ 487.326101][ T5733] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 487.479228][ T5733] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 487.481388][ T5733] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.481441][ T5733] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 487.481465][ T5733] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 487.481488][ T5733] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.481526][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.570592][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 487.716714][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 487.718530][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 487.722002][ T25] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 487.722032][ T25] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 487.722084][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 487.777693][ T25] usb 5-1: string descriptor 0 read error: -22 [ 487.777811][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.803553][T14423] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 488.218259][ T5733] gud 2-1:1.0: Failed to add properties (error=-71) [ 488.218293][ T5733] gud 2-1:1.0: probe with driver gud failed with error -71 [ 488.258766][ T5733] usb 2-1: USB disconnect, device number 113 [ 488.585250][T14439] tipc: Enabled bearer , priority 10 [ 488.605299][T14438] tipc: Resetting bearer [ 488.683490][T14438] tipc: Disabling bearer [ 488.875636][T14429] atomic_op ffff88802969b9e0 conn xmit_atomic 0000000000000000 [ 489.009061][ T5706] usb 5-1: USB disconnect, device number 4 [ 489.095164][T14456] veth3: entered allmulticast mode [ 489.346673][ T5733] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 489.366686][T14470] vlan4: entered promiscuous mode [ 489.366711][T14470] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 489.473556][T14483] FAULT_INJECTION: forcing a failure. [ 489.473556][T14483] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 489.473580][T14483] CPU: 0 UID: 0 PID: 14483 Comm: syz.7.2370 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.473596][T14483] Tainted: [L]=SOFTLOCKUP [ 489.473600][T14483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.473607][T14483] Call Trace: [ 489.473611][T14483] [ 489.473617][T14483] dump_stack_lvl+0xe8/0x150 [ 489.473639][T14483] should_fail_ex+0x410/0x560 [ 489.473659][T14483] prepare_alloc_pages+0x223/0x600 [ 489.473676][T14483] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 489.473690][T14483] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 489.473705][T14483] ? __pfx_policy_nodemask+0x10/0x10 [ 489.473719][T14483] ? __lock_acquire+0x747/0x2de0 [ 489.473735][T14483] alloc_pages_mpol+0x21e/0x390 [ 489.473752][T14483] alloc_pages_noprof+0xb1/0x2b0 [ 489.473767][T14483] pte_alloc_one+0x22/0x370 [ 489.473782][T14483] __pte_alloc+0x25/0x1a0 [ 489.473795][T14483] do_pte_missing+0x2db7/0x34b0 [ 489.473809][T14483] ? do_raw_spin_unlock+0xf5/0x200 [ 489.473826][T14483] ? __pmd_alloc+0x40a/0x5c0 [ 489.473842][T14483] handle_mm_fault+0x1a53/0x3750 [ 489.473874][T14483] ? handle_mm_fault+0xf1/0x3750 [ 489.473912][T14483] ? __pfx_handle_mm_fault+0x10/0x10 [ 489.473938][T14483] ? lock_vma_under_rcu+0x45a/0x500 [ 489.473972][T14483] do_user_addr_fault+0xa4f/0x1340 [ 489.473988][T14483] ? trace_page_fault_user+0x84/0x1e0 [ 489.474001][T14483] exc_page_fault+0x6a/0xc0 [ 489.474016][T14483] asm_exc_page_fault+0x26/0x30 [ 489.474027][T14483] RIP: 0033:0x7f3403160082 [ 489.474038][T14483] Code: 8d 15 13 1a 0f 00 48 89 ee 48 89 df e8 87 f2 03 00 48 8b 05 38 2d 29 00 48 83 e8 01 48 39 e8 0f 82 b3 00 00 00 66 0f 6f 0c 24 <4c> 89 6b 20 0f 11 4b 10 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 [ 489.474047][T14483] RSP: 002b:00007f3404038d20 EFLAGS: 00010286 [ 489.474058][T14483] RAX: ffffffffffffffff RBX: 00007f33fc000000 RCX: 00007f340319df57 [ 489.474066][T14483] RDX: 00007f3403251a71 RSI: 0000000000021000 RDI: 00007f33fc000000 [ 489.474074][T14483] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 489.474080][T14483] R10: 0000000000000022 R11: 0000000000000217 R12: 0000000004000000 [ 489.474087][T14483] R13: 0000000000001000 R14: 00007f3400000000 R15: 0000000002e00000 [ 489.474103][T14483] [ 489.475511][T14483] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 489.540923][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 489.564978][ T5733] usb 2-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 489.640085][ T5733] usb 2-1: config 0 interface 0 has no altsetting 0 [ 489.640127][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.654170][T14484] FAULT_INJECTION: forcing a failure. [ 489.654170][T14484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.654203][T14484] CPU: 0 UID: 0 PID: 14484 Comm: syz.6.2371 Tainted: G L syzkaller #0 PREEMPT(full) [ 489.654229][T14484] Tainted: [L]=SOFTLOCKUP [ 489.654236][T14484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.654249][T14484] Call Trace: [ 489.654256][T14484] [ 489.654265][T14484] dump_stack_lvl+0xe8/0x150 [ 489.654298][T14484] should_fail_ex+0x410/0x560 [ 489.654326][T14484] _copy_from_user+0x2d/0xb0 [ 489.654353][T14484] ___sys_recvmsg+0x173/0x5a0 [ 489.654387][T14484] ? __pfx____sys_recvmsg+0x10/0x10 [ 489.654420][T14484] ? lock_acquire+0x115/0x350 [ 489.654467][T14484] do_recvmmsg+0x31a/0x7f0 [ 489.654503][T14484] ? __pfx_do_recvmmsg+0x10/0x10 [ 489.654541][T14484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 489.654571][T14484] ? __fget_files+0x3a2/0x420 [ 489.654607][T14484] __x64_sys_recvmmsg+0x198/0x250 [ 489.654638][T14484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 489.654678][T14484] do_syscall_64+0x166/0x520 [ 489.654703][T14484] ? trace_irq_disable+0x3b/0x140 [ 489.654726][T14484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.654746][T14484] ? clear_bhb_loop+0x70/0xc0 [ 489.654769][T14484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.654788][T14484] RIP: 0033:0x7f02d259e159 [ 489.654806][T14484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.654822][T14484] RSP: 002b:00007f02d3472028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 489.654843][T14484] RAX: ffffffffffffffda RBX: 00007f02d2825fa0 RCX: 00007f02d259e159 [ 489.654857][T14484] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 489.654871][T14484] RBP: 00007f02d3472090 R08: 0000000000000000 R09: 0000000000000000 [ 489.654883][T14484] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 489.654896][T14484] R13: 00007f02d2826038 R14: 00007f02d2825fa0 R15: 00007f02d294fa48 [ 489.654925][T14484] [ 489.777169][ T5733] usb 2-1: config 0 descriptor?? [ 490.212671][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.214405][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.304274][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 490.304300][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2375'. [ 490.304325][T14493] netlink: 'syz.4.2375': attribute type 14 has an invalid length. [ 490.479117][ T5733] usbhid 2-1:0.0: can't add hid device: -71 [ 490.479227][ T5733] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 490.501252][ T5733] usb 2-1: USB disconnect, device number 114 [ 490.594562][T14496] loop8: detected capacity change from 0 to 7 [ 490.603472][T14496] Dev loop8: unable to read RDB block 7 [ 490.603499][T14496] loop8: unable to read partition table [ 490.603615][T14496] loop8: partition table beyond EOD, truncated [ 490.603626][T14496] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 490.764720][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2377'. [ 491.175477][T14488] atomic_op ffff88807bc231e0 conn xmit_atomic 0000000000000000 [ 491.267145][T14521] FAULT_INJECTION: forcing a failure. [ 491.267145][T14521] name failslab, interval 1, probability 0, space 0, times 0 [ 491.267169][T14521] CPU: 0 UID: 0 PID: 14521 Comm: syz.8.2383 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.267184][T14521] Tainted: [L]=SOFTLOCKUP [ 491.267188][T14521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.267196][T14521] Call Trace: [ 491.267200][T14521] [ 491.267206][T14521] dump_stack_lvl+0xe8/0x150 [ 491.267225][T14521] should_fail_ex+0x410/0x560 [ 491.267241][T14521] should_failslab+0xa8/0x100 [ 491.267257][T14521] __kmalloc_noprof+0xfe/0x720 [ 491.267270][T14521] ? tomoyo_encode+0x2ad/0x570 [ 491.267284][T14521] ? tomoyo_encode+0x2ad/0x570 [ 491.267304][T14521] tomoyo_encode+0x2ad/0x570 [ 491.267321][T14521] tomoyo_realpath_from_path+0x5fa/0x640 [ 491.267341][T14521] ? tomoyo_path_number_perm+0x219/0x5f0 [ 491.267354][T14521] tomoyo_path_number_perm+0x246/0x5f0 [ 491.267368][T14521] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 491.267385][T14521] ? sb_end_write+0xe8/0x190 [ 491.267399][T14521] ? vfs_write+0x9ce/0xba0 [ 491.267412][T14521] ? hook_file_ioctl+0x1f2/0x600 [ 491.267438][T14521] ? ksys_write+0x1fc/0x270 [ 491.267451][T14521] security_file_ioctl+0xc3/0x2a0 [ 491.267464][T14521] __se_sys_ioctl+0x47/0x170 [ 491.267478][T14521] do_syscall_64+0x166/0x520 [ 491.267492][T14521] ? trace_irq_disable+0x3b/0x140 [ 491.267504][T14521] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.267515][T14521] ? clear_bhb_loop+0x70/0xc0 [ 491.267528][T14521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.267539][T14521] RIP: 0033:0x7f763c59e159 [ 491.267549][T14521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.267559][T14521] RSP: 002b:00007f763d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.267572][T14521] RAX: ffffffffffffffda RBX: 00007f763c825fa0 RCX: 00007f763c59e159 [ 491.267579][T14521] RDX: 00002000000001c0 RSI: 000000004008af20 RDI: 0000000000000003 [ 491.267587][T14521] RBP: 00007f763d396090 R08: 0000000000000000 R09: 0000000000000000 [ 491.267593][T14521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.267600][T14521] R13: 00007f763c826038 R14: 00007f763c825fa0 R15: 00007f763c94fa48 [ 491.267616][T14521] [ 491.267637][T14521] ERROR: Out of memory at tomoyo_realpath_from_path. [ 491.337904][ T5677] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 491.516576][ T5677] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 491.518175][ T5677] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 491.518216][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.556213][ T10] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 491.609937][T14528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2386'. [ 491.609961][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2386'. [ 491.609986][T14528] netlink: 'syz.6.2386': attribute type 14 has an invalid length. [ 491.712222][ T10] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 491.721790][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.721817][ T10] usb 2-1: Product: syz [ 491.721831][ T10] usb 2-1: Manufacturer: syz [ 491.721844][ T10] usb 2-1: SerialNumber: syz [ 491.731276][ T10] usb 2-1: config 0 descriptor?? [ 491.779725][ T5706] usb 8-1: new high-speed USB device number 72 using dummy_hcd [ 491.933552][ T5706] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 491.935001][ T5706] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 491.935034][ T5706] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 491.945843][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.945869][ T5706] usb 8-1: Product: syz [ 491.945929][ T5706] usb 8-1: Manufacturer: syz [ 491.945965][ T5706] usb 8-1: SerialNumber: syz [ 491.992172][ T5706] kobil_sct 8-1:1.0: KOBIL USB smart card terminal converter detected [ 492.012824][ T5706] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 492.131328][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2389'. [ 492.175207][ T5677] pegasus 5-1:1.0: probe with driver pegasus failed with error -32 [ 492.278875][ T5677] usb 2-1: USB disconnect, device number 115 [ 492.707070][T14553] xt_bpf: check failed: parse error [ 493.047393][T14563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 493.047410][T14563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'. [ 493.047427][T14563] netlink: 'syz.1.2397': attribute type 14 has an invalid length. [ 493.089504][ T5706] usb 8-1: USB disconnect, device number 72 [ 493.105187][ T5706] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 493.111685][ T5706] kobil_sct 8-1:1.0: device disconnected [ 493.263387][ T31] audit: type=1326 audit(1790980851.336:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14564 comm="syz.1.2398" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2a0f9e159 code=0x0 [ 493.325807][T14555] atomic_op ffff88807b5979e0 conn xmit_atomic 0000000000000000 [ 493.437709][ T5733] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 493.556042][ T30] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 493.566206][ T5733] usb 2-1: device descriptor read/64, error -71 [ 493.622160][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2401'. [ 493.706017][ T30] usb 7-1: Using ep0 maxpacket: 32 [ 493.707050][ T30] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 493.712639][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.712663][ T30] usb 7-1: Product: syz [ 493.712678][ T30] usb 7-1: Manufacturer: syz [ 493.712692][ T30] usb 7-1: SerialNumber: syz [ 493.762319][ T30] usb 7-1: config 0 descriptor?? [ 493.777618][ T30] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 493.806270][ T5733] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 493.936181][ T5733] usb 2-1: device descriptor read/64, error -71 [ 494.047011][ T5733] usb usb2-port1: attempt power cycle [ 494.085647][ T25] usb 5-1: USB disconnect, device number 5 [ 494.124134][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2408'. [ 494.124174][T14597] netlink: 'syz.8.2408': attribute type 14 has an invalid length. [ 494.293815][T14605] loop4: detected capacity change from 0 to 7 [ 494.296220][T14605] Dev loop4: unable to read RDB block 7 [ 494.296245][T14605] loop4: AHDI p1 p2 p3 [ 494.296263][T14605] loop4: partition table partially beyond EOD, truncated [ 494.296442][T14605] loop4: p1 start 1601398130 is beyond EOD, truncated [ 494.296460][T14605] loop4: p2 start 1702059890 is beyond EOD, truncated [ 494.386122][ T5733] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 494.406768][ T5733] usb 2-1: device descriptor read/8, error -71 [ 494.474734][T14612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.475146][T14612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.646136][ T5733] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 494.666453][ T5733] usb 2-1: device descriptor read/8, error -71 [ 494.686067][ T5670] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 494.776785][ T5733] usb usb2-port1: unable to enumerate USB device [ 494.817711][ T5670] usb 5-1: device descriptor read/64, error -71 [ 495.014358][ T30] gspca_topro: reg_w err -71 [ 495.036113][ T30] gspca_topro: Sensor soi763a [ 495.054415][T14602] atomic_op ffff8880267419e0 conn xmit_atomic 0000000000000000 [ 495.063910][ T5670] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 495.096323][ T30] usb 7-1: USB disconnect, device number 53 [ 495.164973][T14615] kvm [14614]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 495.166468][T14615] kvm [14614]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 495.188673][T14615] kvm [14614]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 495.188729][T14615] kvm [14614]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 495.213312][ T5670] usb 5-1: device descriptor read/64, error -71 [ 495.316682][ T5670] usb usb5-port1: attempt power cycle [ 495.352195][T14627] FAULT_INJECTION: forcing a failure. [ 495.352195][T14627] name failslab, interval 1, probability 0, space 0, times 0 [ 495.352231][T14627] CPU: 1 UID: 0 PID: 14627 Comm: syz.8.2415 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.352258][T14627] Tainted: [L]=SOFTLOCKUP [ 495.352266][T14627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.352278][T14627] Call Trace: [ 495.352286][T14627] [ 495.352295][T14627] dump_stack_lvl+0xe8/0x150 [ 495.352327][T14627] should_fail_ex+0x410/0x560 [ 495.352355][T14627] should_failslab+0xa8/0x100 [ 495.352380][T14627] ? ptlock_alloc+0x20/0x70 [ 495.352406][T14627] kmem_cache_alloc_noprof+0xa1/0x600 [ 495.352434][T14627] ? ptlock_alloc+0x20/0x70 [ 495.352462][T14627] ptlock_alloc+0x20/0x70 [ 495.352489][T14627] pte_alloc_one+0x7a/0x370 [ 495.352516][T14627] __pte_alloc+0x25/0x1a0 [ 495.352534][T14627] ? walk_to_pmd+0x2b8/0x450 [ 495.352559][T14627] insert_pages+0x579/0x720 [ 495.352585][T14627] ? down_read_trylock+0x1df/0x420 [ 495.352625][T14627] ? __pfx_insert_pages+0x10/0x10 [ 495.352650][T14627] ? vm_insert_pages+0x2c9/0x410 [ 495.352677][T14627] io_uring_mmap+0x459/0x540 [ 495.352703][T14627] ? __pfx_io_uring_mmap+0x10/0x10 [ 495.352724][T14627] ? vma_set_pgoff+0x163/0x2d0 [ 495.352755][T14627] ? vma_set_range+0x136/0x2a0 [ 495.352782][T14627] mmap_region+0x1bfc/0x25b0 [ 495.352825][T14627] ? __pfx_mmap_region+0x10/0x10 [ 495.352850][T14627] ? mas_ascend+0x2f9/0x8b0 [ 495.352887][T14627] ? mas_prev_node+0xbfd/0xe80 [ 495.352977][T14627] ? trace_contention_end+0x3d/0x140 [ 495.353020][T14627] ? __mutex_unlock_slowpath+0x731/0x900 [ 495.353059][T14627] ? mm_get_unmapped_area+0xd3/0x100 [ 495.353087][T14627] ? cap_mmap_addr+0xaf/0x100 [ 495.353111][T14627] ? bpf_lsm_mmap_addr+0x9/0x50 [ 495.353137][T14627] ? security_mmap_addr+0x71/0x240 [ 495.353159][T14627] ? shmem_mapping+0xd/0x50 [ 495.353179][T14627] ? memfd_check_seals_mmap+0xc5/0x220 [ 495.353209][T14627] do_mmap+0xe0a/0x1300 [ 495.353244][T14627] ? __pfx_do_mmap+0x10/0x10 [ 495.353282][T14627] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 495.353305][T14627] ? down_write_killable+0x17e/0x240 [ 495.353338][T14627] ? __pfx_down_write_killable+0x10/0x10 [ 495.353376][T14627] vm_mmap_pgoff+0x272/0x4e0 [ 495.353401][T14627] ? lock_acquire+0x115/0x350 [ 495.353427][T14627] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 495.353453][T14627] ? __fget_files+0x2a/0x420 [ 495.353484][T14627] ? __fget_files+0x3a2/0x420 [ 495.353509][T14627] ? __fget_files+0x2a/0x420 [ 495.353542][T14627] ksys_mmap_pgoff+0x4dc/0x760 [ 495.353575][T14627] do_syscall_64+0x166/0x520 [ 495.353600][T14627] ? trace_irq_disable+0x3b/0x140 [ 495.353622][T14627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.353643][T14627] ? clear_bhb_loop+0x70/0xc0 [ 495.353669][T14627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.353688][T14627] RIP: 0033:0x7f763c59dec2 [ 495.353706][T14627] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 495.353723][T14627] RSP: 002b:00007f763d395ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 495.353745][T14627] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f763c59dec2 [ 495.353759][T14627] RDX: 0000000000000003 RSI: 0000000000044080 RDI: 0000000000000000 [ 495.353771][T14627] RBP: 0000000000008001 R08: 000000000000000b R09: 0000000000000000 [ 495.353783][T14627] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000888 [ 495.353798][T14627] R13: 0000200000000890 R14: 00007f763d395fd8 R15: 0000000000000000 [ 495.353830][T14627] [ 495.756009][ T5670] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 495.776669][ T5670] usb 5-1: device descriptor read/8, error -71 [ 495.836918][T14638] __nla_validate_parse: 2 callbacks suppressed [ 495.836942][T14638] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2420'. [ 495.836958][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2420'. [ 495.836993][T14638] netlink: 'syz.8.2420': attribute type 14 has an invalid length. [ 495.912791][T14643] loop4: detected capacity change from 0 to 7 [ 495.913723][T14643] Dev loop4: unable to read RDB block 7 [ 495.913750][T14643] loop4: AHDI p1 p2 p3 [ 495.913768][T14643] loop4: partition table partially beyond EOD, truncated [ 495.913942][T14643] loop4: p1 start 1601398130 is beyond EOD, truncated [ 495.913959][T14643] loop4: p2 start 1702059890 is beyond EOD, truncated [ 496.016315][ T5670] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 496.036547][ T5670] usb 5-1: device descriptor read/8, error -71 [ 496.146270][ T5670] usb usb5-port1: unable to enumerate USB device [ 496.212690][T14658] FAULT_INJECTION: forcing a failure. [ 496.212690][T14658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.212725][T14658] CPU: 1 UID: 0 PID: 14658 Comm: syz.6.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.212753][T14658] Tainted: [L]=SOFTLOCKUP [ 496.212760][T14658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.212772][T14658] Call Trace: [ 496.212781][T14658] [ 496.212790][T14658] dump_stack_lvl+0xe8/0x150 [ 496.212822][T14658] should_fail_ex+0x410/0x560 [ 496.212852][T14658] _copy_from_user+0x2d/0xb0 [ 496.212883][T14658] ___sys_recvmsg+0x173/0x5a0 [ 496.212920][T14658] ? __pfx____sys_recvmsg+0x10/0x10 [ 496.212954][T14658] ? lock_acquire+0x115/0x350 [ 496.213004][T14658] do_recvmmsg+0x31a/0x7f0 [ 496.213042][T14658] ? __pfx_do_recvmmsg+0x10/0x10 [ 496.213083][T14658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 496.213113][T14658] ? __fget_files+0x3a2/0x420 [ 496.213152][T14658] __x64_sys_recvmmsg+0x198/0x250 [ 496.213185][T14658] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 496.213226][T14658] do_syscall_64+0x166/0x520 [ 496.213252][T14658] ? trace_irq_disable+0x3b/0x140 [ 496.213273][T14658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.213292][T14658] ? clear_bhb_loop+0x70/0xc0 [ 496.213322][T14658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.213342][T14658] RIP: 0033:0x7f02d259e159 [ 496.213361][T14658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.213378][T14658] RSP: 002b:00007f02d3472028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 496.213400][T14658] RAX: ffffffffffffffda RBX: 00007f02d2825fa0 RCX: 00007f02d259e159 [ 496.213416][T14658] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 496.213430][T14658] RBP: 00007f02d3472090 R08: 0000000000000000 R09: 0000000000000000 [ 496.213443][T14658] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 496.213457][T14658] R13: 00007f02d2826038 R14: 00007f02d2825fa0 R15: 00007f02d294fa48 [ 496.213488][T14658] [ 496.238121][T14656] FAULT_INJECTION: forcing a failure. [ 496.238121][T14656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 496.238160][T14656] CPU: 0 UID: 0 PID: 14656 Comm: syz.8.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.238186][T14656] Tainted: [L]=SOFTLOCKUP [ 496.238194][T14656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 496.238205][T14656] Call Trace: [ 496.238214][T14656] [ 496.238222][T14656] dump_stack_lvl+0xe8/0x150 [ 496.238255][T14656] should_fail_ex+0x410/0x560 [ 496.238284][T14656] prepare_alloc_pages+0x223/0x600 [ 496.238312][T14656] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 496.238339][T14656] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 496.238366][T14656] ? __pfx_policy_nodemask+0x10/0x10 [ 496.238389][T14656] ? irqentry_exit+0x218/0x910 [ 496.238417][T14656] ? trace_irq_disable+0x3b/0x140 [ 496.238451][T14656] alloc_pages_mpol+0x21e/0x390 [ 496.238482][T14656] alloc_pages_noprof+0xb1/0x2b0 [ 496.238509][T14656] pte_alloc_one+0x22/0x370 [ 496.238537][T14656] __pte_alloc+0x25/0x1a0 [ 496.238556][T14656] ? walk_to_pmd+0x2b8/0x450 [ 496.238580][T14656] insert_pages+0x579/0x720 [ 496.238604][T14656] ? down_read_trylock+0x1df/0x420 [ 496.238642][T14656] ? __pfx_insert_pages+0x10/0x10 [ 496.238666][T14656] ? vm_insert_pages+0x2c9/0x410 [ 496.238693][T14656] io_uring_mmap+0x459/0x540 [ 496.238719][T14656] ? __pfx_io_uring_mmap+0x10/0x10 [ 496.238740][T14656] ? vma_set_pgoff+0x163/0x2d0 [ 496.238768][T14656] ? vma_set_range+0x136/0x2a0 [ 496.238794][T14656] mmap_region+0x1bfc/0x25b0 [ 496.238840][T14656] ? __pfx_mmap_region+0x10/0x10 [ 496.238864][T14656] ? mas_ascend+0x2f9/0x8b0 [ 496.238902][T14656] ? mas_prev_node+0xbfd/0xe80 [ 496.238978][T14656] ? trace_contention_end+0x3d/0x140 [ 496.239021][T14656] ? __mutex_unlock_slowpath+0x731/0x900 [ 496.239063][T14656] ? mm_get_unmapped_area+0xd3/0x100 [ 496.239092][T14656] ? cap_mmap_addr+0xaf/0x100 [ 496.239115][T14656] ? bpf_lsm_mmap_addr+0x9/0x50 [ 496.239142][T14656] ? security_mmap_addr+0x71/0x240 [ 496.239166][T14656] ? shmem_mapping+0xd/0x50 [ 496.239186][T14656] ? memfd_check_seals_mmap+0xc5/0x220 [ 496.239216][T14656] do_mmap+0xe0a/0x1300 [ 496.239251][T14656] ? __pfx_do_mmap+0x10/0x10 [ 496.239287][T14656] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 496.239309][T14656] ? down_write_killable+0x17e/0x240 [ 496.239341][T14656] ? __pfx_down_write_killable+0x10/0x10 [ 496.239382][T14656] vm_mmap_pgoff+0x272/0x4e0 [ 496.239405][T14656] ? lock_acquire+0x115/0x350 [ 496.239430][T14656] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 496.239455][T14656] ? __fget_files+0x2a/0x420 [ 496.239482][T14656] ? __fget_files+0x3a2/0x420 [ 496.239508][T14656] ? __fget_files+0x2a/0x420 [ 496.239538][T14656] ksys_mmap_pgoff+0x4dc/0x760 [ 496.239572][T14656] do_syscall_64+0x166/0x520 [ 496.239597][T14656] ? trace_irq_disable+0x3b/0x140 [ 496.239617][T14656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.239636][T14656] ? clear_bhb_loop+0x70/0xc0 [ 496.239663][T14656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.239683][T14656] RIP: 0033:0x7f763c59dec2 [ 496.239700][T14656] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 496.239717][T14656] RSP: 002b:00007f763d395ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 496.239737][T14656] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f763c59dec2 [ 496.239750][T14656] RDX: 0000000000000003 RSI: 0000000000044080 RDI: 0000000000000000 [ 496.239762][T14656] RBP: 0000000000008001 R08: 000000000000000b R09: 0000000000000000 [ 496.239775][T14656] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000888 [ 496.239788][T14656] R13: 0000200000000890 R14: 00007f763d395fd8 R15: 0000000000000000 [ 496.239818][T14656] [ 496.959820][T14676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2432'. [ 496.959837][T14676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2432'. [ 496.959853][T14676] netlink: 'syz.1.2432': attribute type 14 has an invalid length. [ 497.095820][T14680] loop8: detected capacity change from 0 to 7 [ 497.102657][T14680] Dev loop8: unable to read RDB block 7 [ 497.102698][T14680] loop8: unable to read partition table [ 497.102897][T14680] loop8: partition table beyond EOD, truncated [ 497.102928][T14680] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 497.300104][ T10] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 497.312478][T14648] atomic_op ffff8880540c29e0 conn xmit_atomic 0000000000000000 [ 497.448663][ T10] usb 7-1: device descriptor read/64, error -71 [ 497.463488][T14693] tipc: Enabling of bearer rejected, failed to enable media [ 497.614533][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2440'. [ 497.686151][ T10] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 497.756442][T14704] FAULT_INJECTION: forcing a failure. [ 497.756442][T14704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.756477][T14704] CPU: 1 UID: 0 PID: 14704 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 497.756503][T14704] Tainted: [L]=SOFTLOCKUP [ 497.756509][T14704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 497.756521][T14704] Call Trace: [ 497.756529][T14704] [ 497.756538][T14704] dump_stack_lvl+0xe8/0x150 [ 497.756568][T14704] should_fail_ex+0x410/0x560 [ 497.756595][T14704] _copy_from_user+0x2d/0xb0 [ 497.756621][T14704] ___sys_recvmsg+0x173/0x5a0 [ 497.756658][T14704] ? __pfx____sys_recvmsg+0x10/0x10 [ 497.756690][T14704] ? lock_acquire+0x115/0x350 [ 497.756733][T14704] do_recvmmsg+0x31a/0x7f0 [ 497.756769][T14704] ? __pfx_do_recvmmsg+0x10/0x10 [ 497.756809][T14704] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 497.756838][T14704] ? __fget_files+0x3a2/0x420 [ 497.756876][T14704] __x64_sys_recvmmsg+0x198/0x250 [ 497.756906][T14704] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 497.756946][T14704] do_syscall_64+0x166/0x520 [ 497.756973][T14704] ? trace_irq_disable+0x3b/0x140 [ 497.756994][T14704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.757014][T14704] ? clear_bhb_loop+0x70/0xc0 [ 497.757039][T14704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.757068][T14704] RIP: 0033:0x7ff2a0f9e159 [ 497.757093][T14704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.757111][T14704] RSP: 002b:00007ff2a1f35028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 497.757137][T14704] RAX: ffffffffffffffda RBX: 00007ff2a1225fa0 RCX: 00007ff2a0f9e159 [ 497.757153][T14704] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 497.757167][T14704] RBP: 00007ff2a1f35090 R08: 0000000000000000 R09: 0000000000000000 [ 497.757180][T14704] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000001 [ 497.757193][T14704] R13: 00007ff2a1226038 R14: 00007ff2a1225fa0 R15: 00007ff2a134fa48 [ 497.757225][T14704] [ 497.826344][ T10] usb 7-1: device descriptor read/64, error -71 [ 497.951198][ T10] usb usb7-port1: attempt power cycle [ 498.276022][ T5733] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 498.286175][ T10] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 498.306723][ T10] usb 7-1: device descriptor read/8, error -71 [ 498.426084][ T5733] usb 2-1: Using ep0 maxpacket: 16 [ 498.427901][ T5733] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 498.428692][ T5733] usb 2-1: config 127 has an invalid interface number: 124 but max is 0 [ 498.428716][ T5733] usb 2-1: config 127 has no interface number 0 [ 498.428869][ T5733] usb 2-1: config 127 interface 124 has no altsetting 0 [ 498.430578][ T5733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.430592][ T5733] usb 2-1: Product: syz [ 498.430600][ T5733] usb 2-1: Manufacturer: syz [ 498.430608][ T5733] usb 2-1: SerialNumber: syz [ 498.556373][ T10] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 498.577316][ T10] usb 7-1: device descriptor read/8, error -71 [ 498.679806][T14715] loop8: detected capacity change from 0 to 7 [ 498.680953][T14715] Dev loop8: unable to read RDB block 7 [ 498.680979][T14715] loop8: unable to read partition table [ 498.681092][T14715] loop8: partition table beyond EOD, truncated [ 498.681111][T14715] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 498.723491][ T10] usb usb7-port1: unable to enumerate USB device [ 498.768746][T14717] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2446'. [ 499.149210][T14722] atomic_op ffff88802e2c79e0 conn xmit_atomic 0000000000000000 [ 499.276099][ T5733] usb 2-1: reset high-speed USB device number 120 using dummy_hcd [ 499.641226][ T5733] usb 2-1: failed to restore interface 124 altsetting 11 (error=-71) [ 499.660485][ T5733] usb 2-1: USB disconnect, device number 120 [ 500.154811][T14751] loop8: detected capacity change from 0 to 7 [ 500.168634][T14751] Dev loop8: unable to read RDB block 7 [ 500.168678][T14751] loop8: unable to read partition table [ 500.168867][T14751] loop8: partition table beyond EOD, truncated [ 500.168898][T14751] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 500.339215][T14759] FAULT_INJECTION: forcing a failure. [ 500.339215][T14759] name failslab, interval 1, probability 0, space 0, times 0 [ 500.339251][T14759] CPU: 1 UID: 0 PID: 14759 Comm: syz.1.2460 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.339278][T14759] Tainted: [L]=SOFTLOCKUP [ 500.339285][T14759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.339298][T14759] Call Trace: [ 500.339306][T14759] [ 500.339315][T14759] dump_stack_lvl+0xe8/0x150 [ 500.339349][T14759] should_fail_ex+0x410/0x560 [ 500.339378][T14759] should_failslab+0xa8/0x100 [ 500.339406][T14759] __kmalloc_noprof+0xfe/0x720 [ 500.339427][T14759] ? tomoyo_encode+0x2ad/0x570 [ 500.339453][T14759] ? tomoyo_encode+0x2ad/0x570 [ 500.339487][T14759] tomoyo_encode+0x2ad/0x570 [ 500.339520][T14759] tomoyo_realpath_from_path+0x5fa/0x640 [ 500.339558][T14759] ? tomoyo_path_number_perm+0x219/0x5f0 [ 500.339583][T14759] tomoyo_path_number_perm+0x246/0x5f0 [ 500.339610][T14759] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 500.339638][T14759] ? sb_end_write+0xe8/0x190 [ 500.339661][T14759] ? vfs_write+0x9ce/0xba0 [ 500.339689][T14759] ? hook_file_ioctl+0x1f2/0x600 [ 500.339736][T14759] ? ksys_write+0x1fc/0x270 [ 500.339762][T14759] security_file_ioctl+0xc3/0x2a0 [ 500.339787][T14759] __se_sys_ioctl+0x47/0x170 [ 500.339813][T14759] do_syscall_64+0x166/0x520 [ 500.339840][T14759] ? trace_irq_disable+0x3b/0x140 [ 500.339861][T14759] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.339884][T14759] ? clear_bhb_loop+0x70/0xc0 [ 500.339916][T14759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.339936][T14759] RIP: 0033:0x7ff2a0f9e159 [ 500.339955][T14759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.339973][T14759] RSP: 002b:00007ff2a1f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 500.339995][T14759] RAX: ffffffffffffffda RBX: 00007ff2a1225fa0 RCX: 00007ff2a0f9e159 [ 500.340010][T14759] RDX: 0000000000000000 RSI: 00000000000007ab RDI: 0000000000000003 [ 500.340022][T14759] RBP: 00007ff2a1f35090 R08: 0000000000000000 R09: 0000000000000000 [ 500.340035][T14759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 500.340048][T14759] R13: 00007ff2a1226038 R14: 00007ff2a1225fa0 R15: 00007ff2a134fa48 [ 500.340080][T14759] [ 500.343046][T14759] ERROR: Out of memory at tomoyo_realpath_from_path. [ 500.382394][T14761] xt_bpf: check failed: parse error [ 500.659521][T14770] FAULT_INJECTION: forcing a failure. [ 500.659521][T14770] name failslab, interval 1, probability 0, space 0, times 0 [ 500.659545][T14770] CPU: 1 UID: 0 PID: 14770 Comm: syz.8.2465 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.659560][T14770] Tainted: [L]=SOFTLOCKUP [ 500.659564][T14770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.659572][T14770] Call Trace: [ 500.659577][T14770] [ 500.659583][T14770] dump_stack_lvl+0xe8/0x150 [ 500.659603][T14770] should_fail_ex+0x410/0x560 [ 500.659620][T14770] should_failslab+0xa8/0x100 [ 500.659635][T14770] ? vm_area_alloc+0x24/0x140 [ 500.659648][T14770] kmem_cache_alloc_noprof+0xa1/0x600 [ 500.659667][T14770] ? vm_area_alloc+0x24/0x140 [ 500.659680][T14770] vm_area_alloc+0x24/0x140 [ 500.659691][T14770] mmap_region+0x13d6/0x25b0 [ 500.659713][T14770] ? __pfx_mmap_region+0x10/0x10 [ 500.659726][T14770] ? mas_ascend+0x2f9/0x8b0 [ 500.659748][T14770] ? mas_prev_node+0xbfd/0xe80 [ 500.659788][T14770] ? trace_contention_end+0x3d/0x140 [ 500.659811][T14770] ? __mutex_unlock_slowpath+0x731/0x900 [ 500.659833][T14770] ? mm_get_unmapped_area+0xd3/0x100 [ 500.659850][T14770] ? cap_mmap_addr+0xaf/0x100 [ 500.659862][T14770] ? bpf_lsm_mmap_addr+0x9/0x50 [ 500.659878][T14770] ? security_mmap_addr+0x71/0x240 [ 500.659891][T14770] ? shmem_mapping+0xd/0x50 [ 500.659903][T14770] ? memfd_check_seals_mmap+0xc5/0x220 [ 500.659919][T14770] do_mmap+0xe0a/0x1300 [ 500.659937][T14770] ? __pfx_do_mmap+0x10/0x10 [ 500.659957][T14770] ? vm_mmap_pgoff+0x1dd/0x4e0 [ 500.659969][T14770] ? down_write_killable+0x17e/0x240 [ 500.659986][T14770] ? __pfx_down_write_killable+0x10/0x10 [ 500.660005][T14770] vm_mmap_pgoff+0x272/0x4e0 [ 500.660018][T14770] ? lock_acquire+0x115/0x350 [ 500.660032][T14770] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 500.660045][T14770] ? __fget_files+0x2a/0x420 [ 500.660063][T14770] ? __fget_files+0x3a2/0x420 [ 500.660077][T14770] ? __fget_files+0x2a/0x420 [ 500.660093][T14770] ksys_mmap_pgoff+0x4dc/0x760 [ 500.660111][T14770] do_syscall_64+0x166/0x520 [ 500.660125][T14770] ? trace_irq_disable+0x3b/0x140 [ 500.660136][T14770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.660147][T14770] ? clear_bhb_loop+0x70/0xc0 [ 500.660160][T14770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.660171][T14770] RIP: 0033:0x7f763c59dec2 [ 500.660182][T14770] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 500.660191][T14770] RSP: 002b:00007f763d395ed8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 500.660204][T14770] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f763c59dec2 [ 500.660212][T14770] RDX: 0000000000000003 RSI: 0000000000080000 RDI: 0000000000000000 [ 500.660219][T14770] RBP: 0000000000008001 R08: 000000000000000b R09: 0000000010000000 [ 500.660226][T14770] R10: 0000000000008001 R11: 0000000000000246 R12: 0000200000000888 [ 500.660233][T14770] R13: 0000200000000890 R14: 00007f763d395fd8 R15: 0000000000000000 [ 500.660249][T14770] [ 501.229543][T14787] loop8: detected capacity change from 0 to 7 [ 501.232998][T14787] Dev loop8: unable to read RDB block 7 [ 501.233026][T14787] loop8: unable to read partition table [ 501.233134][T14787] loop8: partition table beyond EOD, truncated [ 501.233154][T14787] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 501.339200][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.339257][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.396171][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 501.555972][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 501.573798][ T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 501.590852][ T10] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 501.590872][ T10] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 501.590895][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 501.590926][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.643578][ T10] usb 5-1: config 0 descriptor?? [ 501.660854][T14760] atomic_op ffff888029d261e0 conn xmit_atomic 0000000000000000 [ 502.287829][T14807] xt_bpf: check failed: parse error [ 502.301603][ T5706] usb 8-1: new high-speed USB device number 73 using dummy_hcd [ 502.476871][ T5706] usb 8-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 502.478136][ T5706] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.478168][ T5706] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 502.478206][ T5706] usb 8-1: config 0 interface 0 has no altsetting 0 [ 502.478226][ T5706] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.482440][ T5706] usb 8-1: config 0 descriptor?? [ 502.631460][T14813] loop4: detected capacity change from 0 to 7 [ 502.633047][T14813] Dev loop4: unable to read RDB block 7 [ 502.633075][T14813] loop4: AHDI p1 p2 p3 [ 502.633094][T14813] loop4: partition table partially beyond EOD, truncated [ 502.633232][T14813] loop4: p1 start 1601398130 is beyond EOD, truncated [ 502.634747][T14813] loop4: p2 start 1702059890 is beyond EOD, truncated [ 502.760683][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 502.760816][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 502.781317][ T10] usb 5-1: USB disconnect, device number 10 [ 502.921887][ T5706] playstation 0003:054C:09CC.0020: hidraw0: USB HID v36.2c Joystick [HID 054c:09cc] on usb-dummy_hcd.7-1/input0 [ 503.106628][T14804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.107227][T14804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.112587][ T5706] playstation 0003:054C:09CC.0020: Failed to retrieve feature with reportID 18: -71 [ 503.112604][ T5706] playstation 0003:054C:09CC.0020: Failed to retrieve DualShock4 pairing info: -71 [ 503.112633][ T5706] playstation 0003:054C:09CC.0020: Failed to get MAC address from DualShock4 [ 503.112642][ T5706] playstation 0003:054C:09CC.0020: Failed to create dualshock4. [ 503.191006][ T5706] playstation 0003:054C:09CC.0020: probe with driver playstation failed with error -71 [ 503.194739][ T5706] usb 8-1: USB disconnect, device number 73 [ 503.619381][T14830] loop8: detected capacity change from 0 to 7 [ 503.624641][T14830] Dev loop8: unable to read RDB block 7 [ 503.624668][T14830] loop8: unable to read partition table [ 503.624794][T14830] loop8: partition table beyond EOD, truncated [ 503.624805][T14830] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 503.956144][T14840] FAULT_INJECTION: forcing a failure. [ 503.956144][T14840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 503.956179][T14840] CPU: 0 UID: 0 PID: 14840 Comm: syz.4.2486 Tainted: G L syzkaller #0 PREEMPT(full) [ 503.956205][T14840] Tainted: [L]=SOFTLOCKUP [ 503.956212][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.956224][T14840] Call Trace: [ 503.956232][T14840] [ 503.956241][T14840] dump_stack_lvl+0xe8/0x150 [ 503.956272][T14840] should_fail_ex+0x410/0x560 [ 503.956299][T14840] _copy_from_user+0x2d/0xb0 [ 503.956325][T14840] ___sys_recvmsg+0x173/0x5a0 [ 503.956363][T14840] ? __pfx____sys_recvmsg+0x10/0x10 [ 503.956397][T14840] ? lock_acquire+0x115/0x350 [ 503.956455][T14840] do_recvmmsg+0x31a/0x7f0 [ 503.956492][T14840] ? __pfx_do_recvmmsg+0x10/0x10 [ 503.956532][T14840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 503.956561][T14840] ? __fget_files+0x3a2/0x420 [ 503.956599][T14840] __x64_sys_recvmmsg+0x198/0x250 [ 503.956631][T14840] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 503.956672][T14840] do_syscall_64+0x166/0x520 [ 503.956699][T14840] ? trace_irq_disable+0x3b/0x140 [ 503.956719][T14840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.956737][T14840] ? clear_bhb_loop+0x70/0xc0 [ 503.956758][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.956778][T14840] RIP: 0033:0x7f2a02f9e159 [ 503.956797][T14840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 503.956816][T14840] RSP: 002b:00007f2a011f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 503.956838][T14840] RAX: ffffffffffffffda RBX: 00007f2a03225fa0 RCX: 00007f2a02f9e159 [ 503.956852][T14840] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 503.956866][T14840] RBP: 00007f2a011f6090 R08: 0000000000000000 R09: 0000000000000000 [ 503.956879][T14840] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 503.956892][T14840] R13: 00007f2a03226038 R14: 00007f2a03225fa0 R15: 00007f2a0334fa48 [ 503.956921][T14840] [ 504.031472][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2485'. [ 504.083008][T14842] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2485'. [ 504.850675][T14835] atomic_op ffff88802b9d31e0 conn xmit_atomic 0000000000000000 [ 504.877261][T14858] netlink: 'syz.8.2489': attribute type 1 has an invalid length. [ 504.973085][T14858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 505.117260][T14862] bond1: (slave veth5): Enslaving as an active interface with a down link [ 505.184323][T14858] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 505.214139][T14858] bond1: (slave batadv1): making interface the new active one [ 505.236402][T14858] batadv1: entered promiscuous mode [ 505.240381][T14858] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 505.299898][T14866] bond1 (unregistering): (slave veth5): Releasing active interface [ 505.343382][T14866] bond1 (unregistering): (slave batadv1): Releasing active interface [ 505.343487][T14866] batadv1: left promiscuous mode [ 505.360515][T14866] bond1 (unregistering): Released all slaves [ 505.948955][T14886] FAULT_INJECTION: forcing a failure. [ 505.948955][T14886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 505.948983][T14886] CPU: 0 UID: 0 PID: 14886 Comm: syz.7.2497 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.948998][T14886] Tainted: [L]=SOFTLOCKUP [ 505.949003][T14886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.949010][T14886] Call Trace: [ 505.949015][T14886] [ 505.949021][T14886] dump_stack_lvl+0xe8/0x150 [ 505.949040][T14886] should_fail_ex+0x410/0x560 [ 505.949057][T14886] _copy_from_user+0x2d/0xb0 [ 505.949072][T14886] ___sys_recvmsg+0x173/0x5a0 [ 505.949091][T14886] ? __pfx____sys_recvmsg+0x10/0x10 [ 505.949109][T14886] ? lock_acquire+0x115/0x350 [ 505.949143][T14886] do_recvmmsg+0x31a/0x7f0 [ 505.949162][T14886] ? __pfx_do_recvmmsg+0x10/0x10 [ 505.949183][T14886] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 505.949199][T14886] ? __fget_files+0x3a2/0x420 [ 505.949220][T14886] __x64_sys_recvmmsg+0x198/0x250 [ 505.949237][T14886] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 505.949258][T14886] do_syscall_64+0x166/0x520 [ 505.949272][T14886] ? trace_irq_disable+0x3b/0x140 [ 505.949283][T14886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.949294][T14886] ? clear_bhb_loop+0x70/0xc0 [ 505.949307][T14886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.949318][T14886] RIP: 0033:0x7f340319e159 [ 505.949332][T14886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.949349][T14886] RSP: 002b:00007f340403a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 505.949369][T14886] RAX: ffffffffffffffda RBX: 00007f3403425fa0 RCX: 00007f340319e159 [ 505.949384][T14886] RDX: 040000000000049e RSI: 0000200000000300 RDI: 0000000000000003 [ 505.949398][T14886] RBP: 00007f340403a090 R08: 0000000000000000 R09: 0000000000000000 [ 505.949410][T14886] R10: 00001000000000fe R11: 0000000000000246 R12: 0000000000000002 [ 505.949423][T14886] R13: 00007f3403426038 R14: 00007f3403425fa0 R15: 00007f340354fa48 [ 505.949448][T14886] [ 506.226183][ T10] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 506.376749][ T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 506.377857][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 506.377883][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 506.377910][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 506.377936][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 506.377959][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.381219][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.381243][ T10] usb 2-1: Product: syz [ 506.381258][ T10] usb 2-1: Manufacturer: syz [ 506.381273][ T10] usb 2-1: SerialNumber: syz [ 506.385695][ T10] usb 2-1: config 0 descriptor?? [ 506.490022][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input51 [ 506.516164][ T30] usb 8-1: new high-speed USB device number 74 using dummy_hcd [ 506.646440][ T30] usb 8-1: device descriptor read/64, error -71 [ 506.675997][ T10] usb 2-1: USB disconnect, device number 121 [ 506.887704][ T30] usb 8-1: new high-speed USB device number 75 using dummy_hcd [ 507.016758][ T30] usb 8-1: device descriptor read/64, error -71 [ 507.071257][T14895] atomic_op ffff8880795aa1e0 conn xmit_atomic 0000000000000000 [ 507.126577][ T30] usb usb8-port1: attempt power cycle [ 507.385355][T14918] misc userio: The device must be registered before sending interrupts [ 507.396992][ T31] audit: type=1326 audit(1790980865.476:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14917 comm="syz.8.2506" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f763c59e159 code=0x0 [ 507.490221][ T30] usb 8-1: new high-speed USB device number 76 using dummy_hcd [ 507.501641][T14920] sg_write: data in/out 278492/136 bytes for SCSI command 0x0-- guessing data in; [ 507.501641][T14920] program syz.8.2506 not setting count and/or reply_len properly [ 507.522279][ T30] usb 8-1: device descriptor read/8, error -71 [ 507.571628][T14924] xt_bpf: check failed: parse error [ 507.607914][ T5706] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 507.626804][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 507.756209][ T30] usb 8-1: new high-speed USB device number 77 using dummy_hcd [ 507.776607][ T30] usb 8-1: device descriptor read/8, error -71 [ 507.788415][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 507.791370][ T10] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 507.791599][ T5706] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 507.793201][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.793310][ T10] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 507.793324][ T10] usb 7-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 507.793337][ T10] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 507.793350][ T10] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 507.793364][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 507.798633][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.798655][ T5706] usb 2-1: Product: syz [ 507.798671][ T5706] usb 2-1: Manufacturer: syz [ 507.798686][ T5706] usb 2-1: SerialNumber: syz [ 507.803758][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.803780][ T10] usb 7-1: Product: syz [ 507.803794][ T10] usb 7-1: Manufacturer: syz [ 507.803809][ T10] usb 7-1: SerialNumber: syz [ 507.822361][ T10] usb 7-1: config 0 descriptor?? [ 507.823207][T14912] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 507.891779][ T30] usb usb8-port1: unable to enumerate USB device [ 508.028679][ T5706] snd-usb-6fire 2-1:1.0: unable to receive device firmware state. [ 508.028706][ T5706] snd-usb-6fire 2-1:1.0: probe with driver snd-usb-6fire failed with error -71 [ 508.033717][ T5706] usb 2-1: USB disconnect, device number 122 [ 508.105542][ T10] usb 7-1: Can not set alternate setting to 1, error: -71 [ 508.105573][ T10] synaptics_usb 7-1:0.0: probe with driver synaptics_usb failed with error -71 [ 508.112339][ T10] usb 7-1: USB disconnect, device number 58 [ 508.587599][T14935] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 508.587622][T14935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 508.631098][T14933] input: syz1 as /devices/virtual/input/input52 [ 509.621858][T14945] atomic_op ffff8880540c01e0 conn xmit_atomic 0000000000000000 [ 509.786343][T14968] syzkaller0: entered promiscuous mode [ 509.786359][T14968] syzkaller0: entered allmulticast mode [ 509.810971][T14968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2522'. [ 510.783214][T14985] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2527'. [ 510.783229][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2527'. [ 511.186081][ T5670] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 511.318256][T15003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2532'. [ 511.341271][ T5670] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 511.344614][ T5670] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 511.344633][ T5670] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 511.344653][ T5670] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 511.344667][ T5670] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 511.410478][ T5670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.410507][ T5670] usb 9-1: Product: syz [ 511.410521][ T5670] usb 9-1: Manufacturer: syz [ 511.410536][ T5670] usb 9-1: SerialNumber: syz [ 511.447396][T14987] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 511.447514][T14987] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 511.657945][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.664001][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.674851][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.681727][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.682697][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.687341][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.688205][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.696111][ T5706] usb 7-1: new full-speed USB device number 59 using dummy_hcd [ 511.698803][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.699754][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.700427][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.814013][ T5670] ims_pcu 9-1:1.1: Failed to set line coding, error: -71 [ 511.833837][ T5670] ims_pcu 9-1:1.1: probe with driver ims_pcu failed with error -71 [ 511.856911][ T5670] usb 9-1: USB disconnect, device number 39 [ 511.859421][ T5706] usb 7-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 511.860404][ T5706] usb 7-1: config 0 has an invalid interface number: 113 but max is 0 [ 511.860429][ T5706] usb 7-1: config 0 has no interface number 0 [ 511.860468][ T5706] usb 7-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 511.860495][ T5706] usb 7-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 511.860522][ T5706] usb 7-1: config 0 interface 113 has no altsetting 0 [ 511.862565][ T5706] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.862584][ T5706] usb 7-1: Product: syz [ 511.862592][ T5706] usb 7-1: Manufacturer: syz [ 511.862601][ T5706] usb 7-1: SerialNumber: syz [ 511.959322][ T5706] usb 7-1: config 0 descriptor?? [ 511.961731][T15005] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 511.980061][T15019] syz_tun: entered allmulticast mode [ 512.007576][ C0] usb 7-1: NFC: Urb failure (status -71) [ 512.040047][ C0] usb 7-1: NFC: Urb failure (status -71) [ 512.049028][ T5706] usb 7-1: NFC: Unable to get FW version [ 512.079169][ T5706] pn533_usb 7-1:0.113: probe with driver pn533_usb failed with error -71 [ 512.127789][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2537'. [ 512.182759][ T10] usb 7-1: USB disconnect, device number 59 [ 512.229334][T15023] FAULT_INJECTION: forcing a failure. [ 512.229334][T15023] name failslab, interval 1, probability 0, space 0, times 0 [ 512.229360][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.1.2540 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.229375][T15023] Tainted: [L]=SOFTLOCKUP [ 512.229380][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.229387][T15023] Call Trace: [ 512.229391][T15023] [ 512.229397][T15023] dump_stack_lvl+0xe8/0x150 [ 512.229422][T15023] should_fail_ex+0x410/0x560 [ 512.229444][T15023] should_failslab+0xa8/0x100 [ 512.229460][T15023] __kmalloc_cache_noprof+0xa3/0x600 [ 512.229472][T15023] ? copy_array+0xab/0x100 [ 512.229482][T15023] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 512.229492][T15023] ? bpf_copy_verifier_state+0xb1f/0x1170 [ 512.229506][T15023] bpf_copy_verifier_state+0xb1f/0x1170 [ 512.229522][T15023] push_stack+0x1b9/0x380 [ 512.229540][T15023] sanitize_speculative_path+0x2e/0x550 [ 512.229550][T15023] ? do_check_insn+0x6b5b/0x17d00 [ 512.229567][T15023] do_check_insn+0xa8ef/0x17d00 [ 512.229580][T15023] ? do_check_main+0xa2/0x1f0 [ 512.229591][T15023] ? bpf_check+0x2777/0x2ef0 [ 512.229615][T15023] ? __pfx_do_check_insn+0x10/0x10 [ 512.229630][T15023] ? bpf_live_stack_query_init+0x6d1/0x790 [ 512.229643][T15023] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 512.229655][T15023] ? __asan_memcpy+0x40/0x70 [ 512.229666][T15023] ? bpf_explored_state+0x79/0x1a0 [ 512.229677][T15023] ? bpf_is_state_visited+0x381e/0x48b0 [ 512.229697][T15023] ? krealloc_node_align_noprof+0x235/0x390 [ 512.229709][T15023] ? kasan_quarantine_put+0xbb/0x1f0 [ 512.229722][T15023] ? bpf_push_jmp_history+0x27d/0x6d0 [ 512.229739][T15023] do_check_common+0x35fa/0x55c0 [ 512.229771][T15023] ? __pfx_do_check_common+0x10/0x10 [ 512.229791][T15023] do_check_main+0xa2/0x1f0 [ 512.229805][T15023] bpf_check+0x2777/0x2ef0 [ 512.229826][T15023] ? __pfx_bpf_check+0x10/0x10 [ 512.229840][T15023] ? bpf_obj_name_cpy+0x194/0x1e0 [ 512.229857][T15023] bpf_prog_load+0x14d6/0x1c20 [ 512.229877][T15023] ? __pfx_bpf_prog_load+0x10/0x10 [ 512.229925][T15023] __sys_bpf+0xd0d/0xd90 [ 512.229945][T15023] ? __pfx___sys_bpf+0x10/0x10 [ 512.229963][T15023] ? __fget_files+0x2a/0x420 [ 512.229987][T15023] ? ksys_write+0x242/0x270 [ 512.230000][T15023] ? __pfx_ksys_write+0x10/0x10 [ 512.230012][T15023] __x64_sys_bpf+0xba/0xd0 [ 512.230025][T15023] do_syscall_64+0x166/0x520 [ 512.230041][T15023] ? trace_irq_disable+0x3b/0x140 [ 512.230052][T15023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.230063][T15023] ? clear_bhb_loop+0x70/0xc0 [ 512.230076][T15023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.230087][T15023] RIP: 0033:0x7ff2a0f9e159 [ 512.230099][T15023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.230108][T15023] RSP: 002b:00007ff2a1f35028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 512.230121][T15023] RAX: ffffffffffffffda RBX: 00007ff2a1225fa0 RCX: 00007ff2a0f9e159 [ 512.230129][T15023] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 512.230136][T15023] RBP: 00007ff2a1f35090 R08: 0000000000000000 R09: 0000000000000000 [ 512.230143][T15023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 512.230150][T15023] R13: 00007ff2a1226038 R14: 00007ff2a1225fa0 R15: 00007ff2a134fa48 [ 512.230167][T15023] [ 512.807637][T15030] netlink: 'syz.1.2543': attribute type 16 has an invalid length. [ 512.807664][T15030] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2543'. [ 512.843669][T15013] syz_tun: left allmulticast mode [ 512.971821][T15034] syzkaller0: entered promiscuous mode [ 512.971836][T15034] syzkaller0: entered allmulticast mode [ 513.023877][T15034] tc_dump_action: action bad kind [ 513.176106][ T10] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 513.326655][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 513.327657][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.333114][ T10] usb 2-1: config 0 descriptor?? [ 513.363040][ T10] gspca_main: spca508-2.14.0 probing 8086:0110 [ 513.385002][T15040] netlink: 'syz.6.2546': attribute type 11 has an invalid length. [ 513.416019][ T5670] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 513.499480][T15040] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 513.555026][T15043] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 513.576821][ T5670] usb 5-1: Using ep0 maxpacket: 16 [ 513.577904][ T5670] usb 5-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 513.578903][ T5670] usb 5-1: config 0 interface 0 has no altsetting 0 [ 513.578940][ T5670] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.618478][ T5670] usb 5-1: config 0 descriptor?? [ 513.740182][ T10] gspca_spca508: reg_read err -71 [ 513.740528][ T10] gspca_spca508: reg_read err -71 [ 513.740861][ T10] gspca_spca508: reg_read err -71 [ 513.741205][ T10] gspca_spca508: reg_read err -71 [ 513.741547][ T10] gspca_spca508: reg write: error -71 [ 513.741620][ T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 513.753553][ T10] usb 2-1: USB disconnect, device number 123 [ 514.061218][ T5670] input: HID 258a:6a88 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:258A:6A88.0021/input/input53 [ 514.126641][ T30] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 514.150222][ T5670] itetech 0003:258A:6A88.0021: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.4-1/input0 [ 514.281265][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 514.281316][ T30] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 514.282950][ T30] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1576, setting to 1024 [ 514.319058][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.319086][ T30] usb 7-1: Product: syz [ 514.319101][ T30] usb 7-1: Manufacturer: syz [ 514.319117][ T30] usb 7-1: SerialNumber: syz [ 514.494280][ T5706] usb 5-1: USB disconnect, device number 11 [ 514.565229][T15053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.565728][T15053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.623725][T15062] FAULT_INJECTION: forcing a failure. [ 514.623725][T15062] name failslab, interval 1, probability 0, space 0, times 0 [ 514.623763][T15062] CPU: 0 UID: 0 PID: 15062 Comm: syz.8.2551 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.623791][T15062] Tainted: [L]=SOFTLOCKUP [ 514.623799][T15062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.623811][T15062] Call Trace: [ 514.623819][T15062] [ 514.623827][T15062] dump_stack_lvl+0xe8/0x150 [ 514.623862][T15062] should_fail_ex+0x410/0x560 [ 514.623890][T15062] should_failslab+0xa8/0x100 [ 514.623920][T15062] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 514.623945][T15062] ? bpf_push_jmp_history+0x26c/0x6d0 [ 514.623969][T15062] ? bpf_push_jmp_history+0x26c/0x6d0 [ 514.623995][T15062] ? bpf_push_jmp_history+0x26c/0x6d0 [ 514.624019][T15062] krealloc_node_align_noprof+0x19a/0x390 [ 514.624048][T15062] bpf_push_jmp_history+0x26c/0x6d0 [ 514.624081][T15062] do_check_common+0x240b/0x55c0 [ 514.624142][T15062] ? __pfx_do_check_common+0x10/0x10 [ 514.624179][T15062] do_check_main+0xa2/0x1f0 [ 514.624204][T15062] bpf_check+0x2777/0x2ef0 [ 514.624240][T15062] ? __pfx_bpf_check+0x10/0x10 [ 514.624265][T15062] ? bpf_obj_name_cpy+0x194/0x1e0 [ 514.624294][T15062] bpf_prog_load+0x14d6/0x1c20 [ 514.624326][T15062] ? __pfx_bpf_prog_load+0x10/0x10 [ 514.624375][T15062] __sys_bpf+0xd0d/0xd90 [ 514.624406][T15062] ? __pfx___sys_bpf+0x10/0x10 [ 514.624441][T15062] ? __fget_files+0x2a/0x420 [ 514.624478][T15062] ? ksys_write+0x242/0x270 [ 514.624490][T15062] ? __pfx_ksys_write+0x10/0x10 [ 514.624503][T15062] __x64_sys_bpf+0xba/0xd0 [ 514.624516][T15062] do_syscall_64+0x166/0x520 [ 514.624537][T15062] ? trace_irq_disable+0x3b/0x140 [ 514.624557][T15062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.624579][T15062] ? clear_bhb_loop+0x70/0xc0 [ 514.624604][T15062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.624626][T15062] RIP: 0033:0x7f763c59e159 [ 514.624638][T15062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.624648][T15062] RSP: 002b:00007f763d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.624661][T15062] RAX: ffffffffffffffda RBX: 00007f763c825fa0 RCX: 00007f763c59e159 [ 514.624669][T15062] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 514.624676][T15062] RBP: 00007f763d396090 R08: 0000000000000000 R09: 0000000000000000 [ 514.624687][T15062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.624699][T15062] R13: 00007f763c826038 R14: 00007f763c825fa0 R15: 00007f763c94fa48 [ 514.624731][T15062] [ 514.892187][ T5670] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 514.916815][ T30] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 514.916844][ T30] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 514.921087][ T30] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 514.995256][ T30] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 515.008007][ T30] usb 7-1: USB disconnect, device number 60 [ 515.022760][T15050] atomic_op ffff8880345219e0 conn xmit_atomic 0000000000000000 [ 515.066647][ T5670] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 515.068965][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 515.068997][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 515.069019][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 515.069043][ T5670] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 515.070993][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.071019][ T5670] usb 2-1: Product: syz [ 515.071033][ T5670] usb 2-1: Manufacturer: syz [ 515.071047][ T5670] usb 2-1: SerialNumber: syz [ 515.098706][ T5670] usb 2-1: config 0 descriptor?? [ 515.103019][T10576] udevd[10576]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.256344][ T10] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 515.342865][T15077] xt_hashlimit: size too large, truncated to 1048576 [ 515.359002][ T5670] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 515.401179][T15079] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 515.408323][ T10] usb 9-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 515.413235][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.413261][ T10] usb 9-1: Product: syz [ 515.413275][ T10] usb 9-1: Manufacturer: syz [ 515.413290][ T10] usb 9-1: SerialNumber: syz [ 515.423718][ T10] usb 9-1: config 0 descriptor?? [ 515.446797][ T5733] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 515.550516][T15060] usb 2-1: Couldn't submit interrupt_out_urb -90 [ 515.551639][ T5706] usb 2-1: USB disconnect, device number 124 [ 515.607399][ T5733] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 515.608963][ T5733] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 515.609012][ T5733] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 515.611250][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.611274][ T5733] usb 5-1: Product: syz [ 515.611289][ T5733] usb 5-1: Manufacturer: syz [ 515.611304][ T5733] usb 5-1: SerialNumber: syz [ 515.638503][ T10] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 515.638544][ T10] peak_usb 9-1:0.0: unable to read PCAN-USB FD firmware info (err -71) [ 515.703122][ T5733] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 515.759106][ T10] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -71 [ 515.773054][ T10] usb 9-1: USB disconnect, device number 40 [ 515.922395][T15091] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2557'. [ 516.948119][T15109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.948370][T15109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.176086][ T5670] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 517.306076][ T5670] usb 7-1: device descriptor read/64, error -71 [ 517.346156][ T5706] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 517.496614][ T5706] usb 9-1: Using ep0 maxpacket: 16 [ 517.499373][ T5706] usb 9-1: unable to get BOS descriptor or descriptor too short [ 517.499421][ T5706] usb 9-1: New USB device found, idVendor=16c0, idProduct=05f3, bcdDevice=2b.48 [ 517.500518][ T5706] usb 9-1: config index 0 descriptor too short (expected 29648, got 18) [ 517.500543][ T5706] usb 9-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 517.500563][ T5706] usb 9-1: config 76 has 0 interfaces, different from the descriptor's value: 10 [ 517.503913][ T5706] usb 9-1: string descriptor 0 read error: -22 [ 517.504024][ T5706] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.548843][ T5670] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 517.574125][ T30] usb 8-1: new full-speed USB device number 78 using dummy_hcd [ 517.716060][ T5670] usb 7-1: device descriptor read/64, error -71 [ 517.747156][ T30] usb 8-1: not running at top speed; connect to a high speed hub [ 517.747192][ T30] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice= 1.00 [ 517.748162][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.826342][ T5670] usb usb7-port1: attempt power cycle [ 518.186124][ T5670] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 518.208349][ T5670] usb 7-1: device descriptor read/8, error -71 [ 518.215496][ T5706] usb 9-1: USB disconnect, device number 41 [ 518.233475][T13532] usb 5-1: USB disconnect, device number 12 [ 518.454756][ T5670] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 518.473561][ T5670] usb 7-1: device descriptor read/8, error -71 [ 518.503579][ C1] port100 8-1:1.0: NFC: Urb failure (status -71) [ 518.503702][ C1] port100 8-1:1.0: NFC: Urb failure (status -71) [ 518.526288][ T30] port100 8-1:1.0: NFC: Could not get supported command types [ 518.562350][ T30] usb 8-1: USB disconnect, device number 78 [ 518.576756][ T5670] usb usb7-port1: unable to enumerate USB device [ 518.899243][T15138] loop4: detected capacity change from 0 to 7 [ 518.900068][T15138] Dev loop4: unable to read RDB block 7 [ 518.900117][T15138] loop4: unable to read partition table [ 518.900306][T15138] loop4: partition table beyond EOD, truncated [ 518.900322][T15138] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 519.586587][ T5670] usb 9-1: new full-speed USB device number 42 using dummy_hcd [ 519.747590][ T5670] usb 9-1: New USB device found, idVendor=0db0, idProduct=1020, bcdDevice=47.45 [ 519.749069][ T5670] usb 9-1: config 127 has an invalid interface number: 22 but max is 3 [ 519.749170][ T5670] usb 9-1: config 127 has an invalid interface number: 68 but max is 3 [ 519.749193][ T5670] usb 9-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 519.749213][ T5670] usb 9-1: config 127 has an invalid interface number: 8 but max is 3 [ 519.749234][ T5670] usb 9-1: config 127 has an invalid interface number: 48 but max is 3 [ 519.749245][ T5670] usb 9-1: config 127 has 5 interfaces, different from the descriptor's value: 4 [ 519.749256][ T5670] usb 9-1: config 127 has no interface number 0 [ 519.749265][ T5670] usb 9-1: config 127 has no interface number 1 [ 519.749274][ T5670] usb 9-1: config 127 has no interface number 3 [ 519.749282][ T5670] usb 9-1: config 127 has no interface number 4 [ 519.749327][ T5670] usb 9-1: config 127 interface 22 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 519.749342][ T5670] usb 9-1: config 127 interface 22 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 519.749362][ T5670] usb 9-1: config 127 interface 68 altsetting 79 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 519.749376][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0x4, skipping [ 519.749387][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0xA, skipping [ 519.749399][ T5670] usb 9-1: config 127 interface 68 altsetting 79 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 519.749603][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 519.749630][ T5670] usb 9-1: config 127 interface 68 altsetting 79 endpoint 0x83 has invalid maxpacket 17321, setting to 64 [ 519.749657][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has an invalid descriptor for endpoint zero, skipping [ 519.749673][ T5670] usb 9-1: config 127 interface 68 altsetting 79 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 519.749687][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0x4, skipping [ 519.749699][ T5670] usb 9-1: config 127 interface 68 altsetting 79 endpoint 0xD has invalid maxpacket 20136, setting to 64 [ 519.749713][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0xD, skipping [ 519.749725][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0xC, skipping [ 519.749737][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0xA, skipping [ 519.749748][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has an invalid descriptor for endpoint zero, skipping [ 519.749759][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has an invalid descriptor for endpoint zero, skipping [ 519.749771][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has a duplicate endpoint with address 0xD, skipping [ 519.749783][ T5670] usb 9-1: config 127 interface 68 altsetting 79 has 16 endpoint descriptors, different from the interface descriptor's value: 17 [ 519.749808][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 519.749820][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x4, skipping [ 519.749832][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 519.749844][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 519.749856][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 519.749868][ T5670] usb 9-1: config 127 interface 8 altsetting 8 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 519.749899][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 519.749911][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 519.749922][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 519.749934][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 519.749946][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 519.749958][ T5670] usb 9-1: config 127 interface 8 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 519.749983][ T5670] usb 9-1: config 127 interface 48 altsetting 247 has a duplicate endpoint with address 0xA, skipping [ 519.749995][ T5670] usb 9-1: config 127 interface 48 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 519.750006][ T5670] usb 9-1: config 127 interface 48 altsetting 247 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 519.750020][ T5670] usb 9-1: config 127 interface 48 altsetting 247 has a duplicate endpoint with address 0xC, skipping [ 519.750032][ T5670] usb 9-1: config 127 interface 48 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 519.750044][ T5670] usb 9-1: config 127 interface 68 has no altsetting 0 [ 519.750054][ T5670] usb 9-1: config 127 interface 8 has no altsetting 0 [ 519.750063][ T5670] usb 9-1: config 127 interface 2 has no altsetting 0 [ 519.750078][ T5670] usb 9-1: config 127 interface 48 has no altsetting 0 [ 519.750859][ T5670] usb 9-1: language id specifier not provided by device, defaulting to English [ 519.752774][ T5670] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.752799][ T5670] usb 9-1: Product: syz [ 519.752813][ T5670] usb 9-1: Manufacturer: syz [ 519.752828][ T5670] usb 9-1: SerialNumber: syz [ 520.034182][T15150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.047869][T15150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.382353][ T5670] usb 9-1: USB disconnect, device number 42 [ 520.780428][T15170] FAULT_INJECTION: forcing a failure. [ 520.780428][T15170] name failslab, interval 1, probability 0, space 0, times 0 [ 520.780452][T15170] CPU: 1 UID: 0 PID: 15170 Comm: syz.8.2577 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.780468][T15170] Tainted: [L]=SOFTLOCKUP [ 520.780472][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.780479][T15170] Call Trace: [ 520.780484][T15170] [ 520.780489][T15170] dump_stack_lvl+0xe8/0x150 [ 520.780509][T15170] should_fail_ex+0x410/0x560 [ 520.780525][T15170] should_failslab+0xa8/0x100 [ 520.780541][T15170] __kmalloc_cache_noprof+0xa3/0x600 [ 520.780552][T15170] ? krealloc_node_align_noprof+0x235/0x390 [ 520.780565][T15170] ? push_stack+0x7e/0x380 [ 520.780580][T15170] ? push_stack+0x7e/0x380 [ 520.780598][T15170] push_stack+0x7e/0x380 [ 520.780615][T15170] do_check_insn+0x8194/0x17d00 [ 520.780645][T15170] ? __pfx_do_check_insn+0x10/0x10 [ 520.780671][T15170] ? bpf_live_stack_query_init+0x6d1/0x790 [ 520.780695][T15170] ? bpf_mark_reg_not_init+0x5f/0x1c0 [ 520.780716][T15170] ? __asan_memcpy+0x40/0x70 [ 520.780737][T15170] ? bpf_explored_state+0x79/0x1a0 [ 520.780757][T15170] ? bpf_is_state_visited+0x381e/0x48b0 [ 520.780789][T15170] ? __kasan_krealloc+0xec/0x110 [ 520.780813][T15170] ? krealloc_node_align_noprof+0x220/0x390 [ 520.780842][T15170] ? bpf_push_jmp_history+0x27d/0x6d0 [ 520.780877][T15170] do_check_common+0x35fa/0x55c0 [ 520.780948][T15170] ? __pfx_do_check_common+0x10/0x10 [ 520.780988][T15170] do_check_main+0xa2/0x1f0 [ 520.781015][T15170] bpf_check+0x2777/0x2ef0 [ 520.781056][T15170] ? __pfx_bpf_check+0x10/0x10 [ 520.781081][T15170] ? bpf_obj_name_cpy+0x194/0x1e0 [ 520.781112][T15170] bpf_prog_load+0x14d6/0x1c20 [ 520.781146][T15170] ? __pfx_bpf_prog_load+0x10/0x10 [ 520.781195][T15170] __sys_bpf+0xd0d/0xd90 [ 520.781227][T15170] ? __pfx___sys_bpf+0x10/0x10 [ 520.781262][T15170] ? __fget_files+0x2a/0x420 [ 520.781307][T15170] ? ksys_write+0x242/0x270 [ 520.781329][T15170] ? __pfx_ksys_write+0x10/0x10 [ 520.781353][T15170] __x64_sys_bpf+0xba/0xd0 [ 520.781378][T15170] do_syscall_64+0x166/0x520 [ 520.781405][T15170] ? trace_irq_disable+0x3b/0x140 [ 520.781426][T15170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.781447][T15170] ? clear_bhb_loop+0x70/0xc0 [ 520.781472][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.781493][T15170] RIP: 0033:0x7f763c59e159 [ 520.781511][T15170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.781527][T15170] RSP: 002b:00007f763d396028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.781548][T15170] RAX: ffffffffffffffda RBX: 00007f763c825fa0 RCX: 00007f763c59e159 [ 520.781562][T15170] RDX: 0000000000000094 RSI: 0000200000000840 RDI: 0000000000000005 [ 520.781575][T15170] RBP: 00007f763d396090 R08: 0000000000000000 R09: 0000000000000000 [ 520.781589][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.781601][T15170] R13: 00007f763c826038 R14: 00007f763c825fa0 R15: 00007f763c94fa48 [ 520.781634][T15170] [ 521.184923][T15177] loop4: detected capacity change from 0 to 7 [ 521.197585][T15177] Dev loop4: unable to read RDB block 7 [ 521.197606][T15177] loop4: AHDI p1 p2 p3 [ 521.197619][T15177] loop4: partition table partially beyond EOD, truncated [ 521.197737][T15177] loop4: p1 start 1601398130 is beyond EOD, truncated [ 521.197749][T15177] loop4: p2 start 1702059890 is beyond EOD, truncated [ 521.288168][T15174] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 521.288198][T15174] netdevsim netdevsim8: Falling back to sysfs fallback for: ./file0 [ 521.659994][T15183] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2581'. [ 521.730419][T15183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2581'. [ 521.730450][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2581'. [ 521.966123][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 522.116030][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 522.119260][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 522.121359][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.121378][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.121389][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 522.121412][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.163242][ T10] usb 5-1: config 0 descriptor?? [ 522.416309][ T5618] usb 2-1: new low-speed USB device number 125 using dummy_hcd [ 522.496093][ T5670] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 522.592051][ T5618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 522.592087][ T5618] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 522.619988][ T5618] usb 2-1: config 2 has an invalid interface number: 8 but max is 0 [ 522.620021][ T5618] usb 2-1: config 2 has no interface number 0 [ 522.620039][ T5618] usb 2-1: config 2 interface 8 has no altsetting 0 [ 522.649290][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.649645][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.649670][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.649698][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.649717][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.649732][ T10] microsoft 0003:045E:07DA.0022: unknown main item tag 0x0 [ 522.657591][ T5670] usb 7-1: Using ep0 maxpacket: 8 [ 522.665517][ T5670] usb 7-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 522.669420][ T5618] usb 2-1: string descriptor 0 read error: -22 [ 522.669551][ T5618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.681411][ T5670] usb 7-1: config 162 has an invalid interface number: 84 but max is 2 [ 522.681437][ T5670] usb 7-1: config 162 has an invalid interface number: 3 but max is 2 [ 522.681458][ T5670] usb 7-1: config 162 has no interface number 0 [ 522.681473][ T5670] usb 7-1: config 162 has no interface number 1 [ 522.681531][ T5670] usb 7-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 522.681567][ T5670] usb 7-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 522.681587][ T5670] usb 7-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 522.681611][ T5670] usb 7-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 522.681637][ T5670] usb 7-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 522.681661][ T5670] usb 7-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 522.681687][ T5670] usb 7-1: config 162 interface 84 has no altsetting 0 [ 522.681712][ T5670] usb 7-1: config 162 interface 2 has no altsetting 0 [ 522.681731][ T5670] usb 7-1: config 162 interface 3 has no altsetting 0 [ 522.694931][ T10] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 522.703522][ T5618] usbtest 2-1:2.8: Linux user mode ISO test driver [ 522.703616][ T5618] usbtest 2-1:2.8: low-speed {control} tests [ 522.713749][ T5670] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.713774][ T5670] usb 7-1: Product: syz [ 522.713788][ T5670] usb 7-1: Manufacturer: syz [ 522.713803][ T5670] usb 7-1: SerialNumber: syz [ 523.122806][ T5617] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 523.156987][ T5670] usb 7-1: USB disconnect, device number 65 [ 523.703903][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2591'. [ 523.983553][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.983792][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.115439][T15230] xt_bpf: check failed: parse error [ 524.205989][ T10] usb 7-1: new full-speed USB device number 66 using dummy_hcd [ 524.336292][ T10] usb 7-1: device descriptor read/64, error -71 [ 524.578193][ T5618] usb 2-1: USB disconnect, device number 125 [ 524.586106][ T10] usb 7-1: new full-speed USB device number 67 using dummy_hcd [ 524.627290][T15236] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2595'. [ 524.716997][ T10] usb 7-1: device descriptor read/64, error -71 [ 524.749785][T15239] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 524.832580][ T10] usb usb7-port1: attempt power cycle [ 524.840821][T15236] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2595'. [ 524.840874][T15236] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2595'. [ 524.991633][ T5618] usb 5-1: USB disconnect, device number 13 [ 525.043591][T15244] FAULT_INJECTION: forcing a failure. [ 525.043591][T15244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.043626][T15244] CPU: 1 UID: 0 PID: 15244 Comm: syz.1.2597 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.043657][T15244] Tainted: [L]=SOFTLOCKUP [ 525.043664][T15244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.043676][T15244] Call Trace: [ 525.043686][T15244] [ 525.043695][T15244] dump_stack_lvl+0xe8/0x150 [ 525.043727][T15244] should_fail_ex+0x410/0x560 [ 525.043757][T15244] _copy_from_user+0x2d/0xb0 [ 525.043783][T15244] __se_sys_mount+0x18b/0x420 [ 525.043817][T15244] ? __pfx___se_sys_mount+0x10/0x10 [ 525.043850][T15244] ? __x64_sys_mount+0x20/0xc0 [ 525.043880][T15244] do_syscall_64+0x166/0x520 [ 525.043905][T15244] ? trace_irq_disable+0x3b/0x140 [ 525.043925][T15244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.043945][T15244] ? clear_bhb_loop+0x70/0xc0 [ 525.043968][T15244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.043988][T15244] RIP: 0033:0x7ff2a0f9e159 [ 525.044007][T15244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.044023][T15244] RSP: 002b:00007ff2a1f35028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 525.044043][T15244] RAX: ffffffffffffffda RBX: 00007ff2a1225fa0 RCX: 00007ff2a0f9e159 [ 525.044057][T15244] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000000 [ 525.044070][T15244] RBP: 00007ff2a1f35090 R08: 0000200000000640 R09: 0000000000000000 [ 525.044084][T15244] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 525.044094][T15244] R13: 00007ff2a1226038 R14: 00007ff2a1225fa0 R15: 00007ff2a134fa48 [ 525.044125][T15244] [ 525.173286][ T10] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 525.194342][ T10] usb 7-1: device descriptor read/8, error -71 [ 525.427073][ T10] usb 7-1: new full-speed USB device number 69 using dummy_hcd [ 525.447167][ T10] usb 7-1: device descriptor read/8, error -71 [ 525.531531][T15256] netlink: 'syz.1.2602': attribute type 1 has an invalid length. [ 525.560938][ T10] usb usb7-port1: unable to enumerate USB device [ 525.584870][T15256] bond4: entered promiscuous mode [ 525.586397][T15256] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.629278][T15262] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.631537][T15262] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 525.632621][T15262] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 525.717237][T15262] bond4: (slave wireguard0): making interface the new active one [ 525.717263][T15262] wireguard0: entered promiscuous mode [ 525.723722][T15262] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 526.112855][T15277] xt_bpf: check failed: parse error [ 526.545288][T15284] loop4: detected capacity change from 0 to 7 [ 526.555742][T15284] Dev loop4: unable to read RDB block 7 [ 526.555784][T15284] loop4: unable to read partition table [ 526.572368][T15284] loop4: partition table beyond EOD, truncated [ 526.572384][T15284] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 526.710787][T15283] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2609'. [ 526.762063][T15283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2609'. [ 526.762158][T15283] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2609'. [ 527.382536][T15301] input: syz1 as /devices/virtual/input/input55 [ 528.275308][T15323] loop4: detected capacity change from 0 to 7 [ 528.294113][T15323] Dev loop4: unable to read RDB block 7 [ 528.294158][T15323] loop4: unable to read partition table [ 528.294384][T15323] loop4: partition table beyond EOD, truncated [ 528.294418][T15323] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 528.451207][T15309] nvme nvme0: failed to connect socket: -512 [ 528.666506][T15325] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2621'. [ 528.713565][T15297] syz.4.2614 (15297): drop_caches: 2 [ 528.774871][T15325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2621'. [ 528.774900][T15325] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2621'. [ 529.151709][T15348] fuse: Bad value for 'user_id' [ 529.151731][T15348] fuse: Bad value for 'user_id' [ 529.258053][T15351] xt_bpf: check failed: parse error [ 529.591287][T15356] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2632'. [ 529.926038][ T10] usb 8-1: new full-speed USB device number 79 using dummy_hcd [ 530.087977][ T10] usb 8-1: device descriptor read/64, error -71 [ 530.326501][ T10] usb 8-1: new full-speed USB device number 80 using dummy_hcd [ 530.456081][ T10] usb 8-1: device descriptor read/64, error -71 [ 530.566270][ T10] usb usb8-port1: attempt power cycle [ 530.909968][ T10] usb 8-1: new full-speed USB device number 81 using dummy_hcd [ 530.944719][ T10] usb 8-1: device descriptor read/8, error -71 [ 530.980487][T15368] loop4: detected capacity change from 0 to 7 [ 530.983514][T15368] Dev loop4: unable to read RDB block 7 [ 530.983556][T15368] loop4: unable to read partition table [ 530.983762][T15368] loop4: partition table beyond EOD, truncated [ 530.983798][T15368] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.176093][ T10] usb 8-1: new full-speed USB device number 82 using dummy_hcd [ 531.180919][T15370] netlink: 'syz.6.2636': attribute type 1 has an invalid length. [ 531.209009][ T10] usb 8-1: device descriptor read/8, error -71 [ 531.232566][T15370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.316103][T15372] veth3: entered allmulticast mode [ 531.316630][ T10] usb usb8-port1: unable to enumerate USB device [ 531.321492][T15372] bond4: (slave veth3): Enslaving as an active interface with a down link [ 531.348514][T15370] bond4: (slave veth0_to_bond): making interface the new active one [ 531.354373][T15370] veth0_to_bond: entered promiscuous mode [ 531.354693][T15370] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 531.403692][T15372] bond4: entered promiscuous mode [ 531.403942][T15372] bond4: entered allmulticast mode [ 531.403956][T15372] veth0_to_bond: entered allmulticast mode [ 531.416566][T15377] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2638'. [ 531.492844][T15377] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2638'. [ 531.492872][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2638'. [ 531.591724][T15388] xt_bpf: check failed: parse error [ 531.708919][T15391] loop8: detected capacity change from 0 to 7 [ 531.714301][T15391] Dev loop8: unable to read RDB block 7 [ 531.714341][T15391] loop8: unable to read partition table [ 531.714532][T15391] loop8: partition table beyond EOD, truncated [ 531.714549][T15391] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.761277][T15394] fuse: Bad value for 'fd' [ 532.136137][ T10] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 532.220675][T15386] atomic_op ffff88802bf569e0 conn xmit_atomic 0000000000000000 [ 532.286832][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 532.291243][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.291264][ T10] usb 9-1: Product: syz [ 532.291272][ T10] usb 9-1: Manufacturer: syz [ 532.291280][ T10] usb 9-1: SerialNumber: syz [ 532.459483][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 532.462104][T15410] loop4: detected capacity change from 0 to 7 [ 532.463177][T15410] Dev loop4: unable to read RDB block 7 [ 532.463219][T15410] loop4: unable to read partition table [ 532.463433][T15410] loop4: partition table beyond EOD, truncated [ 532.463450][T15410] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 532.886004][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 532.945925][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 532.975935][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 533.005934][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 533.025994][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 533.045990][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 533.106027][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 533.125140][ T5706] usb 8-1: new high-speed USB device number 83 using dummy_hcd [ 533.135906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 533.278017][ T5706] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 533.280864][ T5706] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 533.280894][ T5706] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 533.306985][ T5706] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.307002][ T5706] usb 8-1: Product: syz [ 533.307063][ T5706] usb 8-1: Manufacturer: syz [ 533.307071][ T5706] usb 8-1: SerialNumber: syz [ 533.349229][T15425] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2653'. [ 533.371973][ T5706] kobil_sct 8-1:1.0: KOBIL USB smart card terminal converter detected [ 533.402135][ T5706] usb 8-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 533.456135][T15425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2653'. [ 533.456166][T15425] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2653'. [ 533.737345][ T10] usb 9-1: Service connection timeout for: 256 [ 533.737370][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Unable to initialize HTC services [ 533.774896][ T10] ath9k_htc: Failed to initialize the device [ 533.775043][ C0] ================================================================== [ 533.775055][ C0] BUG: KFENCE: use-after-free read in tasklet_action_common+0x103/0x490 [ 533.775055][ C0] [ 533.775094][ C0] Use-after-free read at 0xffff88823be20958 (in kfence-#15): [ 533.775111][ C0] tasklet_action_common+0x103/0x490 [ 533.775140][ C0] handle_softirqs+0x226/0x860 [ 533.775164][ C0] __irq_exit_rcu+0xcb/0x220 [ 533.775186][ C0] irq_exit_rcu+0x9/0x30 [ 533.775207][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 533.775231][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.775248][ C0] _raw_spin_unlock_irqrestore+0x47/0x80 [ 533.775260][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 533.775273][ C0] free_pages_prepare+0x488/0xaf0 [ 533.775287][ C0] __free_contig_range_common+0x174/0x340 [ 533.775298][ C0] free_pages_bulk+0x48/0x120 [ 533.775308][ C0] vfree+0x231/0x490 [ 533.775321][ C0] free_fw_priv+0x34b/0x500 [ 533.775335][ C0] release_firmware+0x72/0xb0 [ 533.775343][ C0] ath9k_hif_usb_firmware_cb+0x2a5/0x4b0 [ 533.775355][ C0] request_firmware_work_func+0xf7/0x2d0 [ 533.775364][ C0] process_scheduled_works+0xc3d/0x1630 [ 533.775377][ C0] worker_thread+0xa47/0xfb0 [ 533.775389][ C0] kthread+0x38b/0x480 [ 533.775398][ C0] ret_from_fork+0x514/0xb70 [ 533.775406][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.775420][ C0] [ 533.775424][ C0] kfence-#15: 0xffff88823be20800-0xffff88823be20df7, size=1528, cache=kmalloc-2k [ 533.775424][ C0] [ 533.775434][ C0] allocated by task 10 on cpu 0 at 532.678312s (1.097122s ago): [ 533.775453][ C0] ath9k_init_wmi+0x4f/0x2b0 [ 533.775466][ C0] ath9k_htc_probe_device+0x1e5/0x2370 [ 533.775477][ C0] ath9k_htc_hw_init+0x32/0x70 [ 533.775486][ C0] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 533.775497][ C0] request_firmware_work_func+0xf7/0x2d0 [ 533.775506][ C0] process_scheduled_works+0xc3d/0x1630 [ 533.775517][ C0] worker_thread+0xa47/0xfb0 [ 533.775528][ C0] kthread+0x38b/0x480 [ 533.775536][ C0] ret_from_fork+0x514/0xb70 [ 533.775544][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.775557][ C0] [ 533.775559][ C0] freed by task 10 on cpu 0 at 533.774739s (0.000819s ago): [ 533.775576][ C0] ath9k_htc_probe_device+0x11a9/0x2370 [ 533.775585][ C0] ath9k_htc_hw_init+0x32/0x70 [ 533.775595][ C0] ath9k_hif_usb_firmware_cb+0x214/0x4b0 [ 533.775605][ C0] request_firmware_work_func+0xf7/0x2d0 [ 533.775614][ C0] process_scheduled_works+0xc3d/0x1630 [ 533.775625][ C0] worker_thread+0xa47/0xfb0 [ 533.775636][ C0] kthread+0x38b/0x480 [ 533.775644][ C0] ret_from_fork+0x514/0xb70 [ 533.775651][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.775664][ C0] [ 533.775672][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.775686][ C0] Tainted: [L]=SOFTLOCKUP [ 533.775690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.775697][ C0] Workqueue: events request_firmware_work_func [ 533.775709][ C0] RIP: 0010:tasklet_action_common+0x103/0x490 [ 533.775724][ C0] Code: 12 e8 f1 2d 47 00 fb 4d 89 f7 4d 85 f6 0f 84 8c 03 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 25 00 00 74 08 4c 89 ff e8 1d e2 ae 00 <4d> 8b 37 4d 8d 67 08 4c 89 e7 be 08 00 00 00 e8 a9 e4 ae 00 f0 49 [ 533.775734][ C0] RSP: 0018:ffffc90000007ed8 EFLAGS: 00010246 [ 533.775743][ C0] RAX: 1ffffffff20f5270 RBX: ffff8880b8624088 RCX: 0000000000000006 [ 533.775751][ C0] RDX: 0000000000000002 RSI: ffffffff8e4164ce RDI: ffffffff8c6dad80 [ 533.775758][ C0] RBP: 1ffff110477c412b R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 533.775766][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: dffffc0000000000 [ 533.775773][ C0] R13: 0000000000000006 R14: ffffffff8ea0a0f0 R15: ffff88823be20958 [ 533.775780][ C0] FS: 0000000000000000(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 533.775789][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 533.775796][ C0] CR2: ffff88823be20958 CR3: 0000000032e94000 CR4: 00000000003526f0 [ 533.775807][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000063235cd5 [ 533.775813][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 533.775820][ C0] Call Trace: [ 533.775824][ C0] [ 533.775831][ C0] handle_softirqs+0x226/0x860 [ 533.775845][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 533.775859][ C0] __irq_exit_rcu+0xcb/0x220 [ 533.775871][ C0] irq_exit_rcu+0x9/0x30 [ 533.775893][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 533.775915][ C0] [ 533.775923][ C0] [ 533.775930][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 533.775951][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 533.775971][ C0] Code: f7 e8 4d 70 ba f5 f7 c3 00 02 00 00 74 05 e8 e0 bd e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 6d ab f5 65 48 8b 05 4c f0 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 533.775980][ C0] RSP: 0018:ffffc900000f77c0 EFLAGS: 00000206 [ 533.775989][ C0] RAX: 0000000000000006 RBX: 0000000000000292 RCX: 8000000000000001 [ 533.775996][ C0] RDX: 0000000000000006 RSI: ffffffff8e4164ce RDI: 0000000000000001 [ 533.776003][ C0] RBP: ffff888056076180 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 533.776011][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: 0000000000000000 [ 533.776018][ C0] R13: ffff88807aa98000 R14: ffffffff9ac79840 R15: 0000000000000000 [ 533.776029][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 533.776046][ C0] free_pages_prepare+0x488/0xaf0 [ 533.776063][ C0] __free_contig_range_common+0x174/0x340 [ 533.776077][ C0] free_pages_bulk+0x48/0x120 [ 533.776088][ C0] vfree+0x231/0x490 [ 533.776103][ C0] free_fw_priv+0x34b/0x500 [ 533.776117][ C0] release_firmware+0x72/0xb0 [ 533.776127][ C0] ath9k_hif_usb_firmware_cb+0x2a5/0x4b0 [ 533.776139][ C0] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 533.776152][ C0] request_firmware_work_func+0xf7/0x2d0 [ 533.776162][ C0] ? rcu_is_watching+0x16/0xb0 [ 533.776175][ C0] ? process_scheduled_works+0x97a/0x1630 [ 533.776188][ C0] process_scheduled_works+0xc3d/0x1630 [ 533.776206][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 533.776220][ C0] ? assign_work+0x3cf/0x5d0 [ 533.776233][ C0] worker_thread+0xa47/0xfb0 [ 533.776251][ C0] kthread+0x38b/0x480 [ 533.776260][ C0] ? __pfx_worker_thread+0x10/0x10 [ 533.776273][ C0] ? __pfx_kthread+0x10/0x10 [ 533.776283][ C0] ret_from_fork+0x514/0xb70 [ 533.776292][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 533.776302][ C0] ? __switch_to+0xc89/0x1420 [ 533.776316][ C0] ? __pfx_kthread+0x10/0x10 [ 533.776325][ C0] ret_from_fork_asm+0x1a/0x30 [ 533.776343][ C0] [ 533.776346][ C0] ================================================================== [ 533.776363][ C0] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 534.433213][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.443956][ C0] Tainted: [L]=SOFTLOCKUP [ 534.448262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 534.458329][ C0] Workqueue: events request_firmware_work_func [ 534.464474][ C0] Call Trace: [ 534.467741][ C0] [ 534.470571][ C0] vpanic+0x56d/0xa60 [ 534.474543][ C0] ? __pfx_vpanic+0x10/0x10 [ 534.479037][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 534.484309][ C0] panic+0xc5/0xd0 [ 534.488050][ C0] ? __pfx_panic+0x10/0x10 [ 534.492454][ C0] ? __pfx__printk+0x10/0x10 [ 534.497055][ C0] check_panic_on_warn+0x89/0xb0 [ 534.501976][ C0] kfence_report_error+0x76a/0xa60 [ 534.507076][ C0] ? __pfx_kfence_report_error+0x10/0x10 [ 534.512781][ C0] ? tasklet_action_common+0x103/0x490 [ 534.518227][ C0] ? handle_softirqs+0x226/0x860 [ 534.523150][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 534.527902][ C0] ? irq_exit_rcu+0x9/0x30 [ 534.532307][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 534.538186][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 534.544325][ C0] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 534.550117][ C0] ? debug_check_no_obj_freed+0x39e/0x450 [ 534.555827][ C0] ? free_pages_prepare+0x488/0xaf0 [ 534.561113][ C0] ? __free_contig_range_common+0x174/0x340 [ 534.566993][ C0] ? free_pages_bulk+0x48/0x120 [ 534.571830][ C0] ? vfree+0x231/0x490 [ 534.575885][ C0] ? free_fw_priv+0x34b/0x500 [ 534.580653][ C0] ? release_firmware+0x72/0xb0 [ 534.585484][ C0] ? ath9k_hif_usb_firmware_cb+0x2a5/0x4b0 [ 534.591299][ C0] ? request_firmware_work_func+0xf7/0x2d0 [ 534.597119][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 534.602822][ C0] ? worker_thread+0xa47/0xfb0 [ 534.607596][ C0] ? kthread+0x38b/0x480 [ 534.611820][ C0] ? ret_from_fork+0x514/0xb70 [ 534.616563][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 534.621512][ C0] kfence_handle_page_fault+0x3e1/0x720 [ 534.627046][ C0] ? __pfx_kfence_handle_page_fault+0x10/0x10 [ 534.633096][ C0] ? search_bpf_extables+0x38c/0x3f0 [ 534.638380][ C0] ? search_bpf_extables+0x26/0x3f0 [ 534.643568][ C0] page_fault_oops+0x1a5/0xac0 [ 534.648322][ C0] ? __pfx_fixup_exception+0x10/0x10 [ 534.653589][ C0] ? __pfx_page_fault_oops+0x10/0x10 [ 534.658853][ C0] ? is_prefetch+0x433/0x690 [ 534.663462][ C0] ? __pfx_is_prefetch+0x10/0x10 [ 534.668390][ C0] ? spurious_kernel_fault+0x1cd/0x680 [ 534.673836][ C0] exc_page_fault+0x91/0xc0 [ 534.678327][ C0] asm_exc_page_fault+0x26/0x30 [ 534.683160][ C0] RIP: 0010:tasklet_action_common+0x103/0x490 [ 534.689213][ C0] Code: 12 e8 f1 2d 47 00 fb 4d 89 f7 4d 85 f6 0f 84 8c 03 00 00 4c 89 fd 48 c1 ed 03 42 80 7c 25 00 00 74 08 4c 89 ff e8 1d e2 ae 00 <4d> 8b 37 4d 8d 67 08 4c 89 e7 be 08 00 00 00 e8 a9 e4 ae 00 f0 49 [ 534.708802][ C0] RSP: 0018:ffffc90000007ed8 EFLAGS: 00010246 [ 534.714854][ C0] RAX: 1ffffffff20f5270 RBX: ffff8880b8624088 RCX: 0000000000000006 [ 534.722814][ C0] RDX: 0000000000000002 RSI: ffffffff8e4164ce RDI: ffffffff8c6dad80 [ 534.730788][ C0] RBP: 1ffff110477c412b R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 534.738752][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: dffffc0000000000 [ 534.746708][ C0] R13: 0000000000000006 R14: ffffffff8ea0a0f0 R15: ffff88823be20958 [ 534.754676][ C0] ? tasklet_action_common+0x81/0x490 [ 534.760043][ C0] handle_softirqs+0x226/0x860 [ 534.764819][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 534.769662][ C0] __irq_exit_rcu+0xcb/0x220 [ 534.774260][ C0] irq_exit_rcu+0x9/0x30 [ 534.778492][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 534.784110][ C0] [ 534.787030][ C0] [ 534.789946][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 534.795913][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 534.802318][ C0] Code: f7 e8 4d 70 ba f5 f7 c3 00 02 00 00 74 05 e8 e0 bd e6 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 84 6d ab f5 65 48 8b 05 4c f0 ab 07 48 85 c0 74 18 5b 41 5e e9 [ 534.821916][ C0] RSP: 0018:ffffc900000f77c0 EFLAGS: 00000206 [ 534.827975][ C0] RAX: 0000000000000006 RBX: 0000000000000292 RCX: 8000000000000001 [ 534.835938][ C0] RDX: 0000000000000006 RSI: ffffffff8e4164ce RDI: 0000000000000001 [ 534.843905][ C0] RBP: ffff888056076180 R08: ffffffff907a627f R09: 1ffffffff20f4c4f [ 534.851870][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c50 R12: 0000000000000000 [ 534.859845][ C0] R13: ffff88807aa98000 R14: ffffffff9ac79840 R15: 0000000000000000 [ 534.867819][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 534.873393][ C0] free_pages_prepare+0x488/0xaf0 [ 534.878415][ C0] __free_contig_range_common+0x174/0x340 [ 534.884153][ C0] free_pages_bulk+0x48/0x120 [ 534.888828][ C0] vfree+0x231/0x490 [ 534.892720][ C0] free_fw_priv+0x34b/0x500 [ 534.897242][ C0] release_firmware+0x72/0xb0 [ 534.901913][ C0] ath9k_hif_usb_firmware_cb+0x2a5/0x4b0 [ 534.907540][ C0] ? __pfx_ath9k_hif_usb_firmware_cb+0x10/0x10 [ 534.913685][ C0] request_firmware_work_func+0xf7/0x2d0 [ 534.919308][ C0] ? rcu_is_watching+0x16/0xb0 [ 534.924082][ C0] ? process_scheduled_works+0x97a/0x1630 [ 534.929795][ C0] process_scheduled_works+0xc3d/0x1630 [ 534.935373][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 534.941347][ C0] ? assign_work+0x3cf/0x5d0 [ 534.945938][ C0] worker_thread+0xa47/0xfb0 [ 534.950553][ C0] kthread+0x38b/0x480 [ 534.954610][ C0] ? __pfx_worker_thread+0x10/0x10 [ 534.959710][ C0] ? __pfx_kthread+0x10/0x10 [ 534.964287][ C0] ret_from_fork+0x514/0xb70 [ 534.968865][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 534.973980][ C0] ? __switch_to+0xc89/0x1420 [ 534.978653][ C0] ? __pfx_kthread+0x10/0x10 [ 534.983239][ C0] ret_from_fork_asm+0x1a/0x30 [ 534.988009][ C0] [ 534.991161][ C0] Kernel Offset: disabled [ 534.995495][ C0] Rebooting in 86400 seconds..