last executing test programs:

25m49.78667625s ago: executing program 3 (id=148):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041)
r0 = io_uring_setup(0x4b39, &(0x7f0000000380)={0x0, 0xc9a0, 0x8, 0x0, 0x400000c9})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40d0, &(0x7f0000000000)={0xa, 0x4e22, 0x805, @mcast2, 0x2}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[], 0x148}}, 0x24000004)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
rt_sigqueueinfo(0x0, 0xb, &(0x7f0000000280)={0x0, 0x0, 0x4})
ioctl$RTC_PIE_OFF(r3, 0x7006)
r4 = socket$inet(0xa, 0x801, 0x84)
ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000340)={'tunl0\x00', 0xa})
listen(r4, 0x8)
ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000400)={&(0x7f0000000140)=[{0x8, 0x1, 0x0, {0x74, 0x6}}, {0x9, 0x2, 0x0, {0xbc, 0x1ff}}], 0x2, 0x20, 0x2})
r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write(r5, &(0x7f0000000080)='transport=loop,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0x38)
accept4(r4, 0x0, 0x0, 0x0)

25m47.157263083s ago: executing program 3 (id=154):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001})
r1 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$get_persistent(0x16, 0xffffffffffffffff, r2)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = io_uring_setup(0x666, &(0x7f00000002c0)={0x0, 0x284f, 0x40, 0xfffffffe, 0x235})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x200000000000000, 0x0)
bind(r3, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r3, 0x5)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005"], 0x4a)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000040)=@other={'decodes', ' ', 'mem'}, 0xc)

25m44.986464886s ago: executing program 3 (id=162):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0xa, 0x0, 0x300, 0x1, 0x10, 0x200003, 0x2, 0xfffffffd, 0x4}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x18000000000002a0, 0xb, 0x0, &(0x7f0000000240)="d2ff03076003008cb29e08", 0x0, 0x200009, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

25m44.727359278s ago: executing program 3 (id=163):
r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x400, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r2)
close(r2)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x401, 0x2221, 0x6a646c8a, 0xe, 0xe7f2, 0x4, 0x5, 0xef43, 0x0, 0x1, 0x2, 0x3}})
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="05000000010000", 0x7)
r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x400000000004, 0x34f202)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000100)=0x10000)
close_range(r3, 0xffffffffffffffff, 0x0)

25m43.666758866s ago: executing program 3 (id=168):
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r0])

25m40.596340744s ago: executing program 3 (id=180):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x10, 0x0, [{0x6, 0xa, "80c014fe524b1603"}]}]}}}}})
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258", 0x22}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae17618", 0x24}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

25m40.124974775s ago: executing program 32 (id=180):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x9, 0x4, 0x1, 0x23, 0x24, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x10, 0x0, [{0x6, 0xa, "80c014fe524b1603"}]}]}}}}})
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258", 0x22}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae17618", 0x24}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

25m29.198309053s ago: executing program 1 (id=223):
syz_open_dev$sndctrl(0x0, 0xff1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x5ec, &(0x7f0000000180)={0x0, 0x6aaa, 0x2000, 0x3, 0x1d7}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000400))
mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000004, 0x110, r1, 0x0)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x2000802, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000003280), 0x40001)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f00000032c0)={0xf, 0x7, 0xe})
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r5 = getpid()
getrlimit(0xc, 0x0)
sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r7 = accept4$alg(r6, 0x0, 0x0, 0x0)
read$alg(r7, &(0x7f0000002300)=""/4128, 0x1020)
sendmmsg$alg(r7, &(0x7f0000007e40), 0x0, 0x20040894)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xffffbffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x28}]}, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x3a, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94)

25m27.86308027s ago: executing program 1 (id=224):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0xb, 0x4, 0x1, 0x23, 0x2c, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0x15, 0x0, [{0x6, 0x9, "80c014fe524b16"}, {0x2, 0x6, "8e8d288d"}]}]}}}}})
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae17618", 0x24}], 0x2, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

25m27.320556332s ago: executing program 1 (id=227):
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800)
recvmsg(r0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x20, 0x0, 0x55}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r0, 0x2, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r1, 0x7c65, 0xa334, 0x1, 0x0, 0x0)

25m27.191223468s ago: executing program 1 (id=228):
r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x400, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r2)
close(r2)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x401, 0x2221, 0x6a646c8a, 0xe, 0xe7f2, 0x4, 0x5, 0xef43, 0x0, 0x1, 0x2, 0x3}})
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="05000000010000", 0x7)
r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x400000000004, 0x34f202)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000100)=0x10000)
close_range(r3, 0xffffffffffffffff, 0x0)

25m26.029834098s ago: executing program 1 (id=235):
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01)
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000400), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x900, 0x7, 0x58595556, 0x35315852, 0xc, [{0x0, 0xdf}, {0x5, 0x2}, {0xfff}, {0x7}, {0xb487, 0x3316aa71}, {0x0, 0x40}, {0x100000, 0x13ff}], 0x0, 0x0, 0x7}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x6, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='./bus\x00', 0x381844, 0x80)
prctl$PR_SET_IO_FLUSHER(0x39, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x0, 0x0, 0x10002, 0xffffffffffffffff, 0x7fffffffffffffff, 0x7, 0x7}, 0x0)
pipe2$watch_queue(0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$evdev(0x0, 0x2, 0x862b01)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000000)={0x52, 0x0, 0x0, {0xffff, 0x1}, {0x8, 0x1ff}, @period={0x5a, 0x78a2, 0x100, 0x3ff, 0x4f, {0xe, 0x3, 0x3, 0x3}, 0x2, &(0x7f0000000180)=[0x1000, 0x8]}})
socket$nl_audit(0x10, 0x3, 0x9)
r3 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
preadv(r3, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x400000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1002, 0x2})
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x4, 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7)

25m22.095896027s ago: executing program 1 (id=246):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(0x0, 0x1, 0xc0400)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000000000000000000000000000000000000000008642bb7be8a882927a4495d7d5a952bfe2c77eb7f36f65a623f3480bd2aef890219d4d95fb67bb30e2a9435751721bc9c2c938c32800780bd01d921ead572dbea9d0da6792909fca9e52d39c022fd92412e82314934ba92e0b3027"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf2503000000580001800d0001007564703a73797a310000000044000400200001000a004e26000000445f3a00000000002d000000000000002d2a7f0000200002000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="188310d9000000fe040000000000000000000018110000", @ANYBLOB="bf596c070d9933c80823ffd1b1ae39963c19cec377a6c96b2dd61b5957e5b8c3b70a90c5d1b489c85ef964f13f2fcb451b7403b9a61a2ca3f00f9ee4faf311da9965fde60b0917966aa9f0fed29aa6c23bdeec746f01089c3d09c4cbc9ef8cf41dce571e4bc109a94daa3ffc2f21cc95fde793248f8dd9a23101d9f2205ec075ed2a1058597bacd6943d129a05144a922649ce6b5ad9870f81057fc73384296ff2df67e602306bc15ab22f3850d99532b312d1de76", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000002066000000646c6c2518016c2500000000002020207b9cf8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000200"/146], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x64e, 0x7, 0x13e, 0x9, 0x7, 0x7})
r5 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x20, 0x0, 0x55}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r4, 0x2, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x16, 0x7)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)

25m21.789670132s ago: executing program 33 (id=246):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_dev$dri(0x0, 0x1, 0xc0400)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000000000000000000000000000000000000000008642bb7be8a882927a4495d7d5a952bfe2c77eb7f36f65a623f3480bd2aef890219d4d95fb67bb30e2a9435751721bc9c2c938c32800780bd01d921ead572dbea9d0da6792909fca9e52d39c022fd92412e82314934ba92e0b3027"], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf2503000000580001800d0001007564703a73797a310000000044000400200001000a004e26000000445f3a00000000002d000000000000002d2a7f0000200002000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x17, &(0x7f0000000880)=ANY=[@ANYBLOB="188310d9000000fe040000000000000000000018110000", @ANYBLOB="bf596c070d9933c80823ffd1b1ae39963c19cec377a6c96b2dd61b5957e5b8c3b70a90c5d1b489c85ef964f13f2fcb451b7403b9a61a2ca3f00f9ee4faf311da9965fde60b0917966aa9f0fed29aa6c23bdeec746f01089c3d09c4cbc9ef8cf41dce571e4bc109a94daa3ffc2f21cc95fde793248f8dd9a23101d9f2205ec075ed2a1058597bacd6943d129a05144a922649ce6b5ad9870f81057fc73384296ff2df67e602306bc15ab22f3850d99532b312d1de76", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000002066000000646c6c2518016c2500000000002020207b9cf8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000000200"/146], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)=',8Zz', 0x4)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2}], 0x1, 0x40800)
recvmsg(r4, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x64e, 0x7, 0x13e, 0x9, 0x7, 0x7})
r5 = syz_io_uring_setup(0xf02, &(0x7f0000000400)={0x0, 0x595f, 0x20, 0x0, 0x55}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000000c0)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd=r4, 0x2, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r5, 0x7c65, 0xa334, 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x16, 0x7)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108)

24m53.248750504s ago: executing program 5 (id=183):
r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x400, 0x0)
r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
fchdir(r2)
close(r2)
ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x401, 0x2221, 0x6a646c8a, 0xe, 0xe7f2, 0x4, 0x5, 0xef43, 0x0, 0x1, 0x2, 0x3}})
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000040)="05000000010000", 0x7)
r5 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x400000000004, 0x34f202)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000100)=0x10000)
close_range(r3, 0xffffffffffffffff, 0x0)

24m51.711337293s ago: executing program 5 (id=309):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r2, r4, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9090303008cb89e08f086dd0000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

24m50.208537224s ago: executing program 5 (id=313):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

24m49.313676547s ago: executing program 34 (id=313):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)='%pB    \x00'}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp=0xb3f31c90c98aa6e2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0)

5m0.101002692s ago: executing program 4 (id=6036):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x4c}}, 0x0)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4m58.239998548s ago: executing program 4 (id=6045):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x0, 0x0, 0x101})

4m57.991806251s ago: executing program 4 (id=6047):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
getsockopt$inet6_mreq(r0, 0x29, 0x3, 0x0, &(0x7f0000000240))
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000003c0)={0x0, r0})
socket$inet_sctp(0x2, 0x1, 0x84)
socket$rds(0x15, 0x5, 0x0)
recvfrom$phonet(r0, &(0x7f0000000400)=""/41, 0x29, 0x0, 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x40001)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000680)={0x3a}, 0x8)
write$FUSE_IOCTL(r1, &(0x7f0000002700)={0x20, 0x0, 0x0, {0x1, 0x0, 0x4, 0x8}}, 0x20)
syz_80211_inject_frame(&(0x7f0000002740)=@device_b, 0x0, 0x0)
lseek(r1, 0x9, 0x2)
syz_genetlink_get_family_id$tipc(&(0x7f0000002a80), r0)
ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000002e00)={&(0x7f0000002dc0)=[{&(0x7f0000002ac0)="c7d0e484054ad3b362483fab777c00314562707e09036ef24c58a9d21f64cd3f737156b4221afb2a974bd3c4b7fe1bf3ba9dc8282316bf8978b2bcdc9dd0e090d4748dfd5b2e6cb5f840fe56c6378cdf43518d4fc9d4e76b291401e4daeca257b314f6bf3e003b2f167a9eeeccbd0853ffee3161cfb00996648ec69f2509551dc62af515c7ae5106e4b34347577e485eb475105d2bdc32bb7da0ff7fa5e951852ca9ce98f433c96fde13c1217800855a10b65e7a7f2a68c46d94cddf84da9f2cff45297418a7ff02", 0xc8}, {&(0x7f0000002bc0)="d10a", 0x2}, {&(0x7f0000002c00)="cb1a2d4bca1496079d6ee952d79d1fcce1c2c6ce0ca9eeb2570fb193f23e82766d72c55a20880034ba363fcbc4625c0413d6134050d719d6212a004d3392fd5b896f32320f3834fa114d20c01a45762dcbd6f3b527fe62723b58754afec9e31caa785cbe272babd1191de6d4fb421b6afa5f8ca402051099145ec5e9844a19c92003932a054a8f2dc000979667e9a6fe692c002a0fc9bdfec55f003e95d4234dde97b73a7c704c1a067ca8c27b7bd6a1535bbe48b64e993e5e9f9de68b1fce27392adeebbaccec985c365c742f9446e354a80ddfe24cd9917cd6cdd9b71c4d6b", 0xe0}, {&(0x7f0000002d00)="ab4c8654c975d31f43b664999551f54060336af08acc67aa85c66f863c76f56cd461a69ed268625bde14cc7ab06a2ade6c746a533fbbbcf3c9086fba574dd73e89c3728c0cdc2904eb1dc34baa10d69bac9da9fc131f73340bf9c3e6efea9df51eb318a24f67835e313810f2c2b2b33b5d064063fc3c29b31aa88d8fe5ef1efef764baceb301a38b2890797c98f200022adb8b3b1b4e90d7319f81ecca33085376c2aa63457712871c5cce12e19904879974d9fdf176", 0xb6}], 0x4, 0x14, 0x0, 0x7, 0x3, 0xffffffffffffffff, 0x7, 0x5})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002e80))
getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000002ec0), &(0x7f0000002f00)=0x4)
syz_80211_inject_frame(&(0x7f0000002f40)=@device_b, &(0x7f0000002f80)=@data_frame={@a_msdu=@type10={{0x0, 0x2, 0x9, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x8}, @initial, @device_b, @initial, {0x9, 0x6}, "", @value={0x1, 0x1, 0x3, 0x1, 0x5}}, @random="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"}, 0x520)

4m57.257568908s ago: executing program 4 (id=6052):
r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xdbW', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0xa0601e1, 0x1, 0x8, 0x3})
mq_timedreceive(r0, &(0x7f0000000280)=""/211, 0xd3, 0x800000200042e2, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000140)='./file0/file0\x00', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000040)="05000000010000", 0x7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4m54.728717466s ago: executing program 4 (id=6059):
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r3, @ANYBLOB="100001"], 0x28}}, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, 0x0, &(0x7f0000000280))
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)

4m50.796965461s ago: executing program 4 (id=6076):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000400)={{0x3, 0x1, 0xa, 0x2}, 0xbb, 0x5})

4m50.220374922s ago: executing program 35 (id=6076):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0400)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000400)={{0x3, 0x1, 0xa, 0x2}, 0xbb, 0x5})

1m33.255296096s ago: executing program 7 (id=6803):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
r0 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
syz_kvm_add_vcpu$x86(r0, &(0x7f0000000f40)={0x0, &(0x7f0000000c80)=[@nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @set_irq_handler={0xc8, 0x20, {0xb8}}, @nested_amd_invlpga={0x17d, 0x20, {0x1, 0x400c}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x100000000, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x2, 0x8}}, @wrmsr={0x65, 0x20, {0x250, 0x7}}, @uexit={0x0, 0x18, 0x8}, @wr_drn={0x68, 0x20, {0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x8, 0x3, 0x1}}, @rdmsr={0x66, 0x18, {0x2fa}}, @nested_amd_invlpga={0x17d, 0x20, {0xffffffff, 0x5dac}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xb6, 0x4, 0x81}}, @nested_vmresume={0x130, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0x40000000}}, @nested_amd_stgi={0x17e, 0x10}, @rdmsr={0x66, 0x18, {0xae3}}, @enable_nested={0x12c, 0x18}, @in_dx={0x69, 0x20, {0xcaf7, 0x5}}], 0x298})
syz_ublk_setup_io_uring(0x6d19, &(0x7f00000003c0)={0x0, 0x8017, 0x800, 0x3, 0x43}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000480), &(0x7f00000004c0))
r2 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, r2, 0x0, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, &(0x7f0000000200))
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x5eb9, 0x10000, 0x2, 0x33d}, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4f99, 0x10000, 0x1, 0x1eb}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x30d, 0x1, 0x1, 0x261}, 0xffffffffffffffff, 0x0, 0x0, <r3=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa86c, 0x40000, 0x0, 0x97}, 0xffffffffffffffff, 0x0, <r4=>0x0}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xed4, 0xf5dae296c0ed7d26, 0x1, 0x3a4}, <r5=>0xffffffffffffffff}], 0x4, &(0x7f0000002700)={0x2e, 0x25, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, '\x00', {0x2, 0x7a9, 0x0, &(0x7f0000001700)=@buf_512="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"}}, &(0x7f0000002780))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004b40)={0x20, 0x3a, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x9, 0x2fc, 0x0, 0x1, [@generic="edcb8653dc"]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
syz_io_uring_submit(r1, r4, r3, &(0x7f00000027c0)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x2}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r7, &(0x7f0000000700)={&(0x7f0000000000)={0xa, 0xa, 0x83, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)='+', 0x1}, {&(0x7f0000000240)="9840e7", 0x3}], 0x5}, 0x20000b88)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x71}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000b40)=ANY=[@ANYBLOB="580100001a000100feffffff00010000e0000002000000000000000000000000fc0100000000000000000000000000014e20071c4e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000fc02000000000000000000000000000100030000000000009201000000000010a49b00000000000001800000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff82d20000000000001f00000000000000feffffffffffffff1800fffffc03000000000000800000000535000002000100200000000000000048000300"/203], 0x158}}, 0x844)

1m33.022831826s ago: executing program 7 (id=6806):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf092000000000003509010000000a009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000001b300000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x4, 0xc, 0x0, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7})
syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080"], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x4181, 0x0)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
add_key(&(0x7f0000000040)='pkcs7_test\x00', 0x0, &(0x7f00000001c0)="100c060847090006000000000086", 0xe, 0xfffffffffffffffd)
setsockopt$inet6_udp_encap(r5, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001c000100040000000000000007000000", @ANYRES32=r7, @ANYBLOB="9000f2000a000200aaaaaaaaaa1b0000"], 0x28}, 0x1, 0x1000000}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000080)={@random="a70b49c5294f", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x10, 0x11, 0xff, @empty, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}}}}}}}}, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000200)={r4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
close(0x5)

1m30.130441693s ago: executing program 7 (id=6819):
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x7, 0x28, 0x0, 0xd6, {{0x8, 0x4, 0x1, 0x23, 0x20, 0x66, 0x0, 0xbc, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xc}, @local, {[@cipso={0x86, 0xc, 0x0, [{0x2, 0x6, "8e8d288d"}]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x62040200)
read$FUSE(0xffffffffffffffff, &(0x7f0000016440)={0x2020}, 0x2020)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
r3 = fsopen(&(0x7f0000000100)='jfs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='gid', &(0x7f0000000740)='0\x00M\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbd\t\x00\x00\x00\x00\x00\x00\x00\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xffNh\x19\xee#\xcc\x0f\xee\xfea\xdc\x88\xcb%bW\xd35\xda=\xc6\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x90\xf4\xb7\xdf<O\x1c\xab\x17\x84\x8d\x94\x125\xf8\xc9@h\x01\xf5\xcb\x88\x01\xde\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xd00v6l\xd6,\x1e\xa0\xcc\xdb\xfdkm\b?\x839\x85\n\x02\"\xe0\xb5@>\xae\xf3\x02\x19_\xe1.f>>\xa5\xc7@\xfb\"\xab\xdb\x06\x12e\x14\x11~\xa8\xdfRL \xf0\xee>(\xb1\xa2\xe8\a\xb8-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\'\x13', 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000570800024000000002080026400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000fc0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a7", 0x48}, {&(0x7f0000000600)="6cd20d9a69f1", 0x6}, {&(0x7f0000000640)="af17f6977788f0837276dc478d305799d61db03f45c01d6b19bd447b9dd6e360df44fb727b8613e7ef40a0536f22399be947ad1f0720924fc73ebf2bd511c801fea86a3fa20cb367ab3be2b7f24c228978801f467cb5c1966a40cd9a52225cc767540398f162", 0x66}, {&(0x7f0000000d80)="65310545a4b416b60aa2691370a6dcc146255ba046c8242a0ada4558da3aec8f7169d54bff222f88e950d2d4f110a7f302e04bcc4f0e52a18cc756ded6f0c69bfa4e263c3c19dfd64f90883a60747807f203c44f4270b70175f7dc4e3152051748ca8290307f4bf529c33309664308c656163bd1706ffc6ea6924e816a2e26e971102cba116c00d9c85ffa30c9d1c64a53c973b5331591737f79613aef05d115d8e8aef7abcfbc12fc8a8ffb18ee28c60f10ae95881b7cab7cb54a51a1af19194b3632f6f7afec5b195b01851f41a219f4c09f3c596e7944a04bca098c4781c8dde45c3048e6ebd45dfebe243e0dfda48337", 0xf2}, {&(0x7f0000000e80)="9243b0af1748b787c41925a43ed0a05eb0b6da723cf60359e6e05c2197d04813aa9759c5d24675777f315b54f83a839ff13e069963c1edd142a98535ee7ab2c8e22fbec12af6bb84bc65ec2ebba97c7391f92f273c19cebc484b5bc22f72a226011ce0a44b2c1b40e6b951f1f94bb89d2c2f48ee20b9410b53c08d1874e20ab4193b5590a5bf0afef3bfd7294aee0db5835e9164150a07f1b9", 0x99}], 0x6, 0x0, 0x0, 0xc0}], 0x1, 0x48040)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f00000002c0), &(0x7f0000000500)=0x80)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001000)=ANY=[@ANYBLOB="2800000009938330698c1ceef64b8d01120001002dbd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="434000000080000008002e0000000000"], 0x28}}, 0x40000)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)

1m28.318534892s ago: executing program 7 (id=6825):
r0 = socket$kcm(0x11, 0x200000000000002, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv4_newroute={0x24, 0x18, 0x1, 0x60bd2d, 0x25dfdbf9, {0x2, 0x20, 0x30, 0xc, 0xff, 0x4, 0xfd, 0x1, 0x7c00}, [@RTA_GATEWAY={0x8, 0x5, @loopback}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004005}, 0x80)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[], 0x0, 0x39}, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', <r3=>0x0})
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x88000)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a00)={r2, 0x20, &(0x7f00000019c0)={&(0x7f0000000480)=""/93, 0x5d, <r5=>0x0, &(0x7f00000009c0)=""/4096, 0x1000}}, 0x10)
r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001a80)=@generic={&(0x7f0000001a40)='./file0/../file0\x00', 0x0, 0x1c}, 0x18)
r7 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0)
write$uinput_user_dev(r7, 0x0, 0x0)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001b40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, r2, 0x1, 0x1, 0x5}, 0x50)
r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001c00)=@o_path={&(0x7f0000001bc0)='./file0/../file0\x00', 0x0, 0x8, r1}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001c40)={0x1, <r11=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001d00)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000001c80), &(0x7f0000001cc0)='%pi6   \x00'}, 0x20)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r11, 0x6eb, '\x00', r3, r7, 0x5, 0x3, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0xb, 0x4, &(0x7f0000000580)=@raw=[@call={0x85, 0x0, 0x0, 0xb2}, @ldst={0x3, 0x0, 0x2, 0x5, 0x9, 0xffffffffffffff7b}, @map_fd={0x18, 0x5, 0x1, 0x0, r13}], &(0x7f0000000180)='GPL\x00', 0x7, 0x4d, &(0x7f0000000280)=""/77, 0x41100, 0x0, '\x00', r3, @fallback=0x8, r4, 0x8, &(0x7f0000000400)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xf, 0x5, 0xe}, 0x10, r5, r6, 0x0, &(0x7f0000001d40)=[r7, r8, r7, r9, r10, 0x1, r11, r12], &(0x7f0000001d80), 0x10, 0x6}, 0x94)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r14 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r14, &(0x7f0000002380)={0x2020}, 0x2020)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x29, 0x5, 0x2, "842f874fb9644f690d49dffceaf98406bda28423c0af5dcf045ebcb3128ea9d526cc0c9b9703996218"})
sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000340)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x2, 0x4}}, 0x80, 0x0, 0x0, &(0x7f0000000640)}, 0x4048873)

1m27.639829759s ago: executing program 7 (id=6829):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="bb", 0x1}], 0x1, &(0x7f0000000440)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x5, 0x20c, 0x400, 0x8000, 0xd, 0xf, 0x1}}], 0x30, 0x20004040}, 0x800)

1m26.464587567s ago: executing program 7 (id=6839):
syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0xf}, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, 0x0)
futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000010101010004000000000000020000002400018014000180080001007f0000018870acfedc34f7910c00028016988eec39799d030c001980080001000d"], 0x44}}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000001f40)=@newtaction={0x2070, 0x30, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{0x10f8, 0x1, [@m_ipt={0x10f4, 0x4, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x4d, 0x6, {0x3, 'mangle\x00', 0x2, 0xff, "672df533eb2827719168ffdd7cc9a5f8444bf1714c1381aca66ed49a232eee6d4c924e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9a9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xf64, 0x1, [@m_ipt={0x18c, 0x13, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1923}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xa5, 0x6, {0x1, 'raw\x00', 0x0, 0x3, "8678c38f68239bf30268c4fd7be3646c93c9352a434ed080710b1eabcbae995ac379f5782af2426fab4d39d41653a67033bde5ab8a540f530381a11751b9847cf13ab1397c6216aa47a691ab39e00145da2bade498b877ee8a5802d44f80c24790376ff2283f77e3d2d55c87187523fce3484405d8186a4334219d"}}]}, {0x7d, 0x6, "d94e5a3d7d70c6afa5866e57681e4ed482d366009d804a807f1649ee23d6333d2f48a6b88a2783b51a9a7773bf0d046742f03cf8a8dea632396f5c807967ba970124dabaf6265aaed7d1797ce3ee13ce30e50cf0cbcdc9610d6513ed02b2fa7b99baadd98ca2379b6b21dcfb5c35a1e025a84d78946c70a224"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x190, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xf2, 0x6, "30502a886c176d7e01049e4b0f2de2d8b16cb647f4921a319db010ea6e2ed10ca6710da6726bf4c6d50c388612d5498f4a2b11f09f8ee44f743726441d024c5ee73ee35440e3fb591252a232b3fa4e4ebba16080b48551133a18be7525d667fd05e17fdbdd77833eef05498a9b2980da650b855501ca3cca903e47c7eafe03318391e345d55e7c304bf0faf23324ab5a0537b58002392fb00db16ff192ec18fe758823c1e7f0fd6aea769333c43c6091ea2bc979edf39910fd6094d2176ade4eb823f71520f3cc5c1f65a393a73e2a98d7e7cae8d66fa01e99f14c0b9439e5d755621e2a37f46fb9d74356cdf854"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xc44, 0x18, 0x0, 0x0, {{0x8}, {0xb5c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb55, 0x6, {0xa296, 'filter\x00', 0x3, 0x3, "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"}}]}, {0xc1, 0x6, "676472031eea6c42b2fc1c2986b88f1617aeefc47b11d3c05655868858206bc4d881bc01a2313a066bd258df899a598537f2d9916264eb5de6c6af5bed3e19d867b4ba011fed43b50e3db14d68073ad29752e99ef3d8bad26c1c95376d9236cde17ccae00d58a5cfb0b36be0af1910b65a083663e9bfe11d482d2b881e9a3b9a0bb12ff40950a78791ac11d912916855ce922071cd42d18d8be88a00d79c71bfda4b64b75755444174febbe96a370a838a22bf481777b4998bcb4f554f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x2070}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2e00000000000000485cb4399ee22debc2"], 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)

1m25.522052838s ago: executing program 36 (id=6839):
syz_ublk_setup_io_uring(0x1c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x2, 0xf}, 0x0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x19980330}, 0x0)
futex(&(0x7f0000004000), 0x4, 0x0, 0x0, &(0x7f0000004000)=0x2, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000010101010004000000000000020000002400018014000180080001007f0000018870acfedc34f7910c00028016988eec39799d030c001980080001000d"], 0x44}}, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18)
sendmsg$nl_route_sched_retired(r1, &(0x7f0000007dc0)={0x0, 0x0, &(0x7f0000007d80)={&(0x7f0000001f40)=@newtaction={0x2070, 0x30, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{0x10f8, 0x1, [@m_ipt={0x10f4, 0x4, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x4d, 0x6, {0x3, 'mangle\x00', 0x2, 0xff, "672df533eb2827719168ffdd7cc9a5f8444bf1714c1381aca66ed49a232eee6d4c924e"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x5}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x9a9}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}]}, {0x1001, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0xf64, 0x1, [@m_ipt={0x18c, 0x13, 0x0, 0x0, {{0x8}, {0xe8, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_INDEX={0x8, 0x3, 0x1923}, @TCA_IPT_INDEX={0x8, 0x3, 0x3}, @TCA_IPT_TARG={0xa5, 0x6, {0x1, 'raw\x00', 0x0, 0x3, "8678c38f68239bf30268c4fd7be3646c93c9352a434ed080710b1eabcbae995ac379f5782af2426fab4d39d41653a67033bde5ab8a540f530381a11751b9847cf13ab1397c6216aa47a691ab39e00145da2bade498b877ee8a5802d44f80c24790376ff2283f77e3d2d55c87187523fce3484405d8186a4334219d"}}]}, {0x7d, 0x6, "d94e5a3d7d70c6afa5866e57681e4ed482d366009d804a807f1649ee23d6333d2f48a6b88a2783b51a9a7773bf0d046742f03cf8a8dea632396f5c807967ba970124dabaf6265aaed7d1797ce3ee13ce30e50cf0cbcdc9610d6513ed02b2fa7b99baadd98ca2379b6b21dcfb5c35a1e025a84d78946c70a224"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0x190, 0x3, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0xf2, 0x6, "30502a886c176d7e01049e4b0f2de2d8b16cb647f4921a319db010ea6e2ed10ca6710da6726bf4c6d50c388612d5498f4a2b11f09f8ee44f743726441d024c5ee73ee35440e3fb591252a232b3fa4e4ebba16080b48551133a18be7525d667fd05e17fdbdd77833eef05498a9b2980da650b855501ca3cca903e47c7eafe03318391e345d55e7c304bf0faf23324ab5a0537b58002392fb00db16ff192ec18fe758823c1e7f0fd6aea769333c43c6091ea2bc979edf39910fd6094d2176ade4eb823f71520f3cc5c1f65a393a73e2a98d7e7cae8d66fa01e99f14c0b9439e5d755621e2a37f46fb9d74356cdf854"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ipt={0xc44, 0x18, 0x0, 0x0, {{0x8}, {0xb5c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xb55, 0x6, {0xa296, 'filter\x00', 0x3, 0x3, "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"}}]}, {0xc1, 0x6, "676472031eea6c42b2fc1c2986b88f1617aeefc47b11d3c05655868858206bc4d881bc01a2313a066bd258df899a598537f2d9916264eb5de6c6af5bed3e19d867b4ba011fed43b50e3db14d68073ad29752e99ef3d8bad26c1c95376d9236cde17ccae00d58a5cfb0b36be0af1910b65a083663e9bfe11d482d2b881e9a3b9a0bb12ff40950a78791ac11d912916855ce922071cd42d18d8be88a00d79c71bfda4b64b75755444174febbe96a370a838a22bf481777b4998bcb4f554f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x2070}, 0x1, 0x0, 0x0, 0x8000000}, 0x8000)
setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xe}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000040095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'})
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32=r4, @ANYBLOB="2e00000000000000485cb4399ee22debc2"], 0x20)
syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff"], 0x0)

8.49102463s ago: executing program 2 (id=7129):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0796050c"], 0xa)
syz_emit_vhci(&(0x7f0000002b00)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x9a9364284b5bf83e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
msgget$private(0x0, 0x60)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000027c0)={0x14, &(0x7f0000002740)={0x20, 0x21, 0x2, {0x2, 0x5}}, 0x0}, &(0x7f0000002a80)={0x44, 0x0, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000002940)={0x20, 0x80, 0x1c, {0x8bb, 0xc8f0, 0x1, 0x101, 0x6, 0x9322, 0x9, 0x1, 0x5, 0x1, 0xf, 0xffff}}, &(0x7f0000002980)={0x20, 0x85, 0x4}, &(0x7f00000029c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x703202, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')

7.180109828s ago: executing program 2 (id=7132):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0), 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.420065064s ago: executing program 2 (id=7134):
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

5.860051507s ago: executing program 2 (id=7141):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12014101175129205705092006c70102010109020000010200100009045819028ab53800090506020001000006090582020002"], 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000840)={0x14, 0x14, 0x1, 0x0, 0x25dfdbfe, {0x2b}}, 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x24040800)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x2, 0x6, 0x4}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0)
pipe(&(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x20)
splice(r3, 0x0, r4, 0x0, 0x8000, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfffffffffffffff9)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_X86_SETUP_MCE(r7, 0x4008ae9c, &(0x7f0000000780)={0x11, 0x4})
ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0x70000, 0xfffffffffffffffd, 0xc, 0x2})
r8 = socket(0x1d, 0x2, 0x6)
getpeername$packet(r8, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14)
openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x5d, &(0x7f0000000880)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @val={@void, {0x8100, 0x5}}, {@generic={0x88be, "08ca59ae07bf925cf5c4895aa746cb25f1c1c127a6b88af7f34c9fe5c4091da80fa30928f42285c37bf2cb2938e1d368ba50f68a9cb06be07c9b3f1a631eb3a1d265a509eb14fcb3d82a1d"}}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001240))
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0xe0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000001340)=[0x0, 0x0, 0x0], &(0x7f0000001380)=[0x0, 0x0], 0x0, 0x2b, &(0x7f00000013c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001400), &(0x7f0000001440), 0x8, 0x400078, 0x8, 0x8, &(0x7f0000001480)}}, 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001640)=@generic={&(0x7f0000001600)='./file0\x00', 0x0, 0x8}, 0x18)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001680), 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001740)={{}, &(0x7f00000016c0), &(0x7f0000001700)}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001800)={{0x1}, &(0x7f0000001780), &(0x7f00000017c0)='%pK    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001840), 0x4)

5.715964812s ago: executing program 6 (id=7142):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0796050c"], 0xa)
syz_emit_vhci(&(0x7f0000002b00)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x9a9364284b5bf83e)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
msgget$private(0x0, 0x60)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, 0x0, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000027c0)={0x14, &(0x7f0000002740)={0x20, 0x21, 0x2, {0x2, 0x5}}, 0x0}, &(0x7f0000002a80)={0x44, 0x0, &(0x7f00000028c0)={0x0, 0xa, 0x1, 0x7}, 0x0, &(0x7f0000002940)={0x20, 0x80, 0x1c, {0x8bb, 0xc8f0, 0x1, 0x101, 0x6, 0x9322, 0x9, 0x1, 0x5, 0x1, 0xf, 0xffff}}, &(0x7f0000002980)={0x20, 0x85, 0x4}, &(0x7f00000029c0)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0})
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x703202, 0x0)
write$cgroup_pressure(r0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')

5.049542775s ago: executing program 6 (id=7145):
syz_emit_ethernet(0x182, &(0x7f0000000400)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x20, 0x4, 0x2, 0x2, 0x174, 0x68, 0x0, 0x5, 0x21, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_addr={0x44, 0x1c, 0x97, 0x1, 0xa, [{@local, 0x9}, {@local, 0x39bb6cc5}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x2}]}, @end, @noop, @timestamp_addr={0x44, 0x24, 0xb0, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x4}, {@empty, 0x9}, {@private=0xa010102, 0x2}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xd4, [@rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @broadcast, @rand_addr=0x64010101, @private=0xa010101]}]}}, {{0x4e22, 0x4e22, 0x4, 0x1, 0xb, 0x0, 0x0, 0xa, 0x0, "d00b31", 0x3, "5ef4e4"}, "f48802bff6088df01c40e92aba8e6e50ed6dee965321871981f0f6acd06b51bb6d65a909260c6d851a38a083158b20ff4157a141caeb2efdac4c6ca21398d5d868f9bfec54ff3d1d3aa4f45707e9a85637de6e898575610505a30f0ad1d1d7df2c14e3b21b5c4c7fbd5dc5bd6b72ee2ee63d0cdf8a03db32003ad423ed45f84ace71079125580005d14d233b63451633b2e12c08d6e0f5e2eaebeb52d4bc09d5c4694620ae889a7b1587de552a7bfe17d55d095b34a84679116bc619877769cb4e03d9afa689422c4f1693dbd63e0a5f5cf37f443576c51a0b2fff6d05734fa6172550fa"}}}}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
linkat(r2, &(0x7f0000000100)='./file0/file0\x00', r2, 0x0, 0x1000)
r3 = syz_io_uring_complete(0x0, 0x0)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x10, r0}, 0x18)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000900)={{0x1, 0x1, 0x18, <r5=>r0, {0x2}}, './file0\x00'})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x25, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x7, 0x0, 0x8, 0x3, 0x3, 0x100, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @alu={0x7, 0x0, 0x7, 0x1, 0x5c867b95983f2d43, 0xfffffffffffffff8, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @exit, @jmp={0x5, 0x1, 0xd, 0x17, 0xb, 0xffffffffffffffe0, 0x8}, @ringbuf_query, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffe}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000740)='syzkaller\x00', 0x7, 0x65, &(0x7f0000000780)=""/101, 0x41000, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0x8, 0x2, 0x8}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000980)=[r4, r5, r7], &(0x7f00000009c0)=[{0x5, 0x3, 0xa, 0x5}, {0x5, 0x1, 0xc, 0x5}, {0x1, 0x4, 0x7, 0x8}, {0x0, 0x2, 0x5, 0x9}, {0x2, 0x3, 0x6, 0x1}, {0x4, 0x1, 0x9, 0x19ef217829b7147e}, {0x3, 0x4, 0x1, 0x4}]}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000003a000100faff070004000000010000000c00ec0004000000000000003249a85bd3209f3d2f26a40a7698baad94b4d93ba3e67252ebdbb7e7da593bd352e1e36e3f7b1083b704cff827f9edfc8cc287ada1cf3a43eef111bd0512019b85890b148ad32eff4e876701e21f34ddcf4f7e14e5f5a6101bc9aac6850935e5869f1eca7aec9a44a4bd4665af68368f8b26594d78a4269f6483a75e255d4bf2ba1b4bf4130cb4ed0fc39b4954c22ac812da39fa41905bcbd5b28a929303008ad052696f376674e998bc80f4594a2b46ee"], 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})
close(r8)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f0000000080)={0x55dfe3f4, 0x0, 'client1\x00', 0x6, "9e1a26ef99c2b6f5", "6a05dd8e36e46d5a9aeed66f9a07c81e4acde6be28ef8c04865ff2ba6cb7277f", 0xfffffffa, 0x1})
r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f880009050302"], 0x0)
syz_usb_control_io(r9, 0x0, &(0x7f0000000a40)={0x84, &(0x7f00000005c0)=ANY=[@ANYBLOB="0036fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.657917474s ago: executing program 6 (id=7146):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000b00736970000c00070000000000000000000800090064080000090006006e6f6e65000000000800080000000000080005"], 0x58}}, 0x0)

4.308082577s ago: executing program 6 (id=7147):
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x6, 0x20, 0x9}, 0x2f)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

4.164666489s ago: executing program 9 (id=7148):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408d1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

4.103406527s ago: executing program 9 (id=7149):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0x9, 0x4, 0x100, 0x3, {}, {0x3, 0x1, 0x0, 0xa2, 0x6, 0x5, "8fa33400"}, 0x6, 0x2, {0x0}, 0x6})

4.057437544s ago: executing program 6 (id=7150):
socket$unix(0x1, 0x1, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x2, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x0, 0x6, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xd3, 0x9, 0x8}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x49, 0x80, 0x6, 0x8, 0x6}, 0xf, &(0x7f0000000100)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x5, 0x5, 0xe6}, @ptm_cap={0x3}]}, 0x8, [{0x39, &(0x7f0000000b40)=ANY=[@ANYBLOB="3903dc80c88f32aa754b35e0106f0fb760524a0c2ed726d8ceb2079f2704d86f40d77b38d8c04b30feb51afa7301586a4aadeaea2b2abca3cd2d82ca89b2e3c6e9ac291a023e6dd5e40bf465430c522e450186eb35fc5c2c6e507e178836b3aa29fb579ad9a6f34a27c0593a54888376334fd2d4467452592e0cd3196895f73a6f612c562139fb"]}, {0xfd, &(0x7f0000000180)=@string={0xfd, 0x3, "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"}}, {0xf, &(0x7f0000000280)=@string={0xf, 0x3, "e2fed6b773a15654a13067a666"}}, {0xf5, &(0x7f0000000400)=@string={0xf5, 0x3, "3b17503bb01ef49ddd299d02b8002c928572e9e0b9fe725de91f568c5397a374eb0eb75c403511238a63023efaf7b53a747f8ed52985f3cb0e0cb0497d42c3e25bb6af89370648b3a8769fc7c3362b83f5a459be59421711e9204279d28716787fabe730562b2c0bade25a373068f4b81882a6a2c795df652912549965ca64d89047cfbfaaa2bbc46a5caa69a6ae37401479afb36e0276b5e25a1c87cf39ad4d6af7d3333e0c8d3d4d86e200c947169420458ed64c626770dc90623c01af21bccaeed5e2996a8b5d578d7c27b16226203c1cb06193eb2ca7a7d6b8d28f129e1ee658469c440ce4cc85773a99d87776e3e868d0"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x100a}}, {0x6e, &(0x7f0000000580)=@string={0x6e, 0x3, "d0e9d71c6128a0a21544db2ab6ef9d21ea7998c14e3807191831e783ad9489ef4cc42e04f35d409be758267635585f2d078b6f63bf1c0c6d763aa8127cf5aeb029e523dff6174d682fbab6f1d68ecadfc5461d7006048dc625e4f9c555e56169961e649084fed643f08cd0fc"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xf0ff}}]})

3.9654729s ago: executing program 9 (id=7152):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)

3.888689912s ago: executing program 9 (id=7153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000100004000"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff00000000fc020000000000000000000000000005ac14141d0000000000000000000000000000fffc000000000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e00000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000001fc0000000000000000000000000000013c040000013500000a0002000a0101010000000000000000000000007f000001000000000000000000000000ac14143800000000001b000000000000006401010000000000000000000000000014bdcfde1cd70d273c000000"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000054000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ab99dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c41ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42cea68bef67422ecc13968a27ef6a1296dfff4a979369b0e8ebc62887aa46e824d86869ec4ab392b0a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a412a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac090000000000000084d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f381ba6e0363d0a4a8a813edaa626f0000000000000000004f9e02a3b51a97c4b1c1b411cc6bee2a56f29c55a6aac46a0cfc318fae02922a403431d4e5a4396cad2c8dd34037bc041a2ba1505ba2c4889122ca04e85881aad5f8bfc12e6741872aad21bf5301cd4c60"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x10, 0x0, 0xa}, 0x10}, 0x3f)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x98)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000c602000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800)
sync()
sync()
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2)

3.267487275s ago: executing program 8 (id=7154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x4004000) (fail_nth: 4)

3.164085342s ago: executing program 8 (id=7155):
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x440d4}, 0x40000)
recvfrom(r3, 0x0, 0x0, 0x10080, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000140)='X', 0x1}], 0x1)
splice(r1, 0x0, r0, 0x0, 0x2, 0x0)

2.58518409s ago: executing program 0 (id=7156):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0xcf, &(0x7f0000000140)={@remote, @local, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "1a4c29", 0x99, 0x6, 0x0, @empty, @remote, {[@hopopts={0x84, 0x8, '\x00', [@enc_lim, @pad1, @ra={0x5, 0x2, 0x3}, @calipso={0x7, 0x38, {0x0, 0xc, 0xff, 0xfff, [0xe, 0x1, 0x10001, 0x0, 0x9e, 0x67]}}]}, @routing={0x67, 0x2, 0x0, 0x9, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}], @payload_mcast={{{{{{0x31, 0x0, 0x1, 0x0, 0x0, 0xb, 0x3, 0x2, 0x7, 0x0, 0x3, 0xd, 0x5, 0x1, 0x9, 0x88, 0x3, 0x4e21, 0x4e20}, 0x4}, 0x2, 0x1}, 0x1}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20004851}, 0x4004000)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)={0x200, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x8c63}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xc}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xdcd}, @CTA_SYNPROXY_ISN={0x8}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x8, 0x17, [0x2701]}, @CTA_TUPLE_MASTER={0x88, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x3002}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7fff}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MINIP={0x14, 0x4, @local}, @CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010100}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x200}, 0x1, 0x0, 0x0, 0x40810}, 0x40004)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0)

2.410473527s ago: executing program 0 (id=7157):
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]})
time(0x0)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f00008a4000/0x1000)=nil, 0x1000, 0xb635773f06ebbeef, 0x1010, 0xffffffffffffffff, 0xffffc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000040)=r0)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000180), 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0)
pipe2(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r6, &(0x7f00000000c0)=ANY=[], 0xffffff6a)
splice(r5, 0x0, r4, 0x0, 0x40010003, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r8, 0xffffffffffffffff, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x1b)

2.339692085s ago: executing program 9 (id=7158):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001380)=@newtfilter={0x4c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {}, {0x1}, {0x300, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}, @TCA_MATCHALL_ACT={0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x4c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
memfd_create(&(0x7f00000006c0)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\xa4\xb5\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?Y\x96\xab\xc7\x06F\x8e\xab\xc8\x1e\x89]\x13bZ\x8d \x19\x00k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x84:kgA]Z\x88\xecIf\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89vr\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xfc@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf]\x0e\a\x00\x91T\x1b\xee\x10\x92\x80m\xc7\x90\x9fU\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8C26\xa6u<\xa7@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88\x7f\xd9\x90\xb7=\x1e@\xda9(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb1&\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\a\x84\xb2j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe0<uc\xbc\xec\xe5\xc79\x9c\xcf\xa4m\x06\x12\xd0IY\x18\x15\x8d\x01P\x12/\xfcd\xfe\xa0\xc7-\x9a+\xf3\xf9R\x85\xa5~\x90\xbeC\xee\xe9\'\x9fW\xb2\xe2\x8f\xfa)?6\x0e\xac-\x82\xe3\xc1\xf7\xd3\x04\xf7\x0e\xe7v\xb2{\xaa\xfc)\xcb\xd4D\xf6#%I\xad\xaap\xddX\x14e\xb4l\x0e9\xf4\x9e\xefT\x9d\x18\xba\x00\x00\x00\x00\x02\x00\x00\x00\x00\x00\x00\x00X\xc1\x9c\xd7\xed\xadC\xc6\xc9\xd6\xe6\xfe*t\x06\xeb]\vr-%{\x86\xcb\xbb4?\xa1\xb5S\xb8\x10pg\xbd\xce\x84\xe9\xfdZ\f\xeb\xd0c\x02\xdc\x90\b\x9fR\x01C8\xa8\xd9\x93\x1a\x97y\xf5\x88\v\x8b=\x14x\xe4l\x01\x00\xfa\x8d\xd0\"-\x82\xad\x1c\f\x9c\xc6$@7\x98\x13rSqy\xca\x02\xb0\xc4c\xdc\xba\xca\xec#\xe4:d\x12\xc9 @\xa8\xd9\xd5\x14\x06\xf9r\xcd\xb9n\x03\xfa\x06\x85\x0f\xed03\xef\x01\xe3\x86\x91\xe6\xbc\xcb\x86d\xbei@&\xf8B|nNQ\xe3\'\xb3\x9b\xae\"\xd3\xf0\xa5\x8bT-\x83\xf4\xec\xbd\xa0:\xfa\x8c\xb7\r\xa0\f)p\xa3I;R\xb7v\xf9\x14\x96z\x8d\xbd6\x87\x99\x1f]\x9fMDK\xea\xd1\xdf@\xc1\xb2z\xd6[\xed\xf0mT\xd1\x84V\'\x95\f\x16\xf5I\xb5b\xb5\x1e=\xd8\x13\x92z\f}\x05:[\b\x1a\x03\x04?wx#\x81}\xff\xfb\x99\xe6J\x1d\xf8?sB\xc8)<&\xfc\x91\xe50\xac\xbb\t%Y&\xad\xd8#]\x8e\x7fo\xde\xc4\x16\xa4\x05\xdf\x8c\x99]<\xc0\"\x80|\x19\x8fr\x97\xc4\xc6\xc5\xe6 (T\x8f\xf1\x11\xbdT\x1b\xf2\x94\xa4}\xcd\xa6D\xcb\xe0Y\xf0\x150\x89\"\x96\xf7\xae^\x1b\xb0\xcd\xe1N\xd7-p\x04\x06_Nt\xce\x93\xca\xd8+\xeb\xb6\x9e\xdaD8\xaa9\xe2\xf1\x18BqN\xe2\xc1\xb4,\xcf4\xcc\xa9H8\xacQ\xfe\xac\xa1\xd5\xe7\x87\x93\xee\x1aD\xc0$eR\xdc\xa1\xe5%C*VFH\fN\xa62X\xaf\x7fj\xa1/\xcb2\x9d\t[\xd88\xf2\x1b\xc1\xd9\a\xf4\xe4*\xb6;\xb9YomDAN\x10)%\xab=\xac\x9d/\xe3\xb0ybns%\xa7e\xcf\xfd\xe8r*\n\xe0\xc19\xd3&\x84S-\xfc\xc2\xd6\xa1\x15F\x19\xa7\x93y\xf1]\xd3\x93\xa9m\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x99\xe6\xf5\b(N\x06@\xb3\x05U\xd5\xc9\xca\x85\x1c\x9e\x1d\x9aB\xc0\xd2I\x9f\xf6\xb3\n\x17\xc5\xf3\xae\xea\'\x8f\xa5\a\xf0\xd7\xa9:,e\xdb=\xcb\x81\x8f\xaaE\xfa\x0eM\xabX.\x05\xba\xae6\xe1\nM\xbd\x80\xf3u\xf0\xc2\xc1\xd1\r\xb6\x11\xfd\xb1\xc4\xbc\x15v\xc0\xa8\x1c\a\xdd\x0f\xa3 B\x8b\x10\x15\xee\xe6\xbd\xd7A\x9d\x9a\xc9\x8bc(\xc9\x92\x02\x01\xa953\xbbx\x86;\xd8\aQ0\x1dw\xa8z8\xe7_\x0f\x8e\xd5\xbe.k\x0es\x1e$:/\xc0\xd6\xe5\x96\xeaT\t[V\x88\xc2A\xd5\x89\xea8\xc3l\xc6\x91\xf3\xc7\xf7\x99l\x95\x8f\xe2\x13\xc1I\x1fSD\x1f\xb4\xa1\xc9\xcf\xf3\x8es\xa9\xe7\xb2\xc6\xb5\xe1}\xb6\x9fmH\xce\xf1\xbe\xd8{fW\xd6Bn\xd5\x13}=\x825}\x11\x93\x18\x14;w\x1e&\xc9\xd0\xc9\x9f\x92\x8et\xd7\x04\xd8/\xa4\xf9\xbe\xe7U\xb6\xb0H\xb9\x0f\ts&\x15\xe3\x1av\xd31j\xa1p1\xceh\xa9\xe3\x9d\xd9\xfb\xe6\xa1\xbe\xaa\\3o\x83\tK\xcc\xa9\xd4PF\xeeOv^\x8a\xbb5=/\x1c\xfa\xa0\x18\x9d\x12LQ\xdf9A\x0e\xdc5\\\x01\a\xe2|y\xf8\auU/P\xa7mZ\xd8\xbb\x058[-\xd7{#x\xf2\xaf\xc8&/B7:\xa0\xecR`@xD\nZ\xa6]\xfe\a\xcb\x80\r`\xf5\x80\xc7/\x81\xf3\x92[\xc2\xd7\xdc\xcdL`|7\x1b\xa0\x82\v\x17\x93d\x87K\x10d\xbd\x9ed\xe9ru\xfc\xe3\xaf\xac\x91\xcd\xba\xcb\xccoY\x10\xd1)\x87\xb2O\xe0\xfd\xc6{H\x9fV\xe0Q\x95\xc9\xe7H,\x9d\xf82\'^\xf6^?_\x04\x18\x85\r\x9c+G^\\d[l\xa6\xe7\x03\xb5[V\v\xd8\xf1\xf7\x8a\xb5\xfe\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xdf\xcd\xc3\xa3Di\x9c\xb21V\xe9U =\xfe\x19k\xdf\xf44\x8d\x98\x91.\x16\xe2\xc5\xfbH\x11\x0fC\xaa\xf7\xd5*\x9b\xb5\xcc?\x8e\xb0\x91\xc6\xd1\xfa\xc1\xe4\x10\xfa\x8e\x8c\xedk\tzf\x86\xce\xcc@j\xeb\"\x19\x82\xec\x02(\f\xe4\xb7_Q\x99\xe7\x95\xe9`\xd1\x0fo\x1e\x9e\xf3\x82\xf6\xce\xb7r\xa0\x88P\xa9\xb4\xd0\xbcL`\x0f\x9a\a0S\xa1\xcc\x82\xb1U\xd6\x1c6\x04\xfa\xbc\x81\x91', 0xb)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.043944303s ago: executing program 8 (id=7159):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408d1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

1.947621706s ago: executing program 8 (id=7160):
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
sched_setscheduler(0x0, 0x6, 0x0)
write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)={'full', 0x20, 0x6, 0x20, 0x9}, 0x2f)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x50424752, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x6}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
connect$l2tp6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0), 0x0, 0xff00)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r5, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000400)='J', 0x1}], 0x1}, 0x2000c8c0)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000))

1.04447857s ago: executing program 6 (id=7161):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x7ffffffe, 0x0, 0x0, 0xc801}, 0x4004000)

923.452274ms ago: executing program 0 (id=7162):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@multiplanar_userptr={0x6, 0x9, 0x4, 0x100, 0x3, {}, {0x3, 0x1, 0x0, 0xa2, 0x6, 0x5, "8fa33400"}, 0x6, 0x2, {0x0}, 0x6})

839.586676ms ago: executing program 8 (id=7163):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
socket$nl_route(0x10, 0x3, 0x0)
capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x6, 0x10087, 0x0, 0x40})
r0 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000100)=0x40)

797.436581ms ago: executing program 0 (id=7164):
syz_io_uring_setup(0xf51, &(0x7f0000000040)={0x0, 0xbbda, 0x13d81, 0x2}, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, 0x0, 0x0, 0x40800)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/18, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

353.234002ms ago: executing program 2 (id=7165):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000b00736970000c00070000000000000000000800090064080000090006006e6f6e65000000000800080000000000080005"], 0x58}}, 0x0)

351.608483ms ago: executing program 0 (id=7166):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711235000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
r2 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4)

347.741159ms ago: executing program 9 (id=7167):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0)
timer_create(0x1, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x26, 0x0)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040))
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000680)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffdfffffffffff, 0x9, 0x1, 0x200, 0x4a, 0x28, 0x80000005, 0x1})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES16=r2], 0x28}, 0x1, 0x0, 0x0, 0x8d1}, 0x8000)
read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcaa1, 0xc000, 0x6, 0xbe})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0)
syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1b, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x200, 0xc, 0x6, 0x3}, {0x9, 0x5, 0x4, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000100)="240000001e005f0214ffffffffffff0000000000b800000000000000080008000d000000", 0x24)

347.33265ms ago: executing program 8 (id=7168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x10000, 0x100, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}]}}]}, 0x6c}}, 0x0)
socket$netlink(0x10, 0x3, 0x14)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000100004000"/19, @ANYRES32=0x0, @ANYBLOB='\x00'/19], 0x50)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ec00000021000100feffffff00000000fc020000000000000000000000000005ac14141d0000000000000000000000000000fffc000000000a00000011000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bd6b6e00000000009c0011000a0101010000000000000000000000007f000001000000000000000000000000fc010000000000000000000000000001fc0000000000000000000000000000013c040000013500000a0002000a0101010000000000000000000000007f000001000000000000000000000000ac14143800000000001b000000000000006401010000000000000000000000000014bdcfde1cd70d273c000000"], 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8}, 0x8, 0x10, &(0x7f0000000040)={0x0, 0x10, 0x0, 0xa}, 0x10}, 0x3f)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2)
r5 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
r6 = open(&(0x7f0000000080)='./file1\x00', 0x146142, 0x98)
pwritev2(r6, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000c602000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040), 0x0, 0x40800)
sync()
sync()
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00), 0x0, 0x1, 0x2)

151.658513ms ago: executing program 2 (id=7169):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0xb, 0x807, 0x7}, 0x20)
r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000140))
ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x3, 0xb, 0xa}})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000f80)={"f2ce0dfc6fca379e2f044b17a721e809", <r2=>0x0, 0x0, {0xffff, 0x24c}, {0x9, 0x8}, 0x3, [0x7, 0x200, 0xfffffffffffffff8, 0x1aaf50a2, 0x2, 0x10, 0xfffffffffffffffe, 0x8, 0xa22, 0xca55, 0x0, 0xb492, 0x3, 0x400, 0xe, 0xaf]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000001100)={"e71533a18fc17946aa56577bbbbf6054", r2, 0x0, {0x100000001, 0x3}, {0x7}, 0x8, [0xdc, 0x5, 0x1, 0x8, 0x9, 0x0, 0x0, 0x805, 0xffffffffffffffff, 0x3ff, 0x2, 0x0, 0x2, 0x19e9, 0x45e, 0x7]})

0s ago: executing program 0 (id=7170):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x240408d1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}}, 0x0)

kernel console output (not intermixed with test programs):

onfig 14 interface 0 has no altsetting 0
[ 1579.712536][ T5739] usb 3-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b
[ 1579.712555][ T5739] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1579.712566][ T5739] usb 3-1: Product: syz
[ 1579.712574][ T5739] usb 3-1: Manufacturer: syz
[ 1579.712582][ T5739] usb 3-1: SerialNumber: syz
[ 1579.903311][ T5798] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1579.912962][ T5798] usb 7-1: unable to read config index 0 descriptor/start: -71
[ 1579.981032][T27808] overlayfs: failed to resolve './file1/file0': -2
[ 1580.031526][ T5798] usb 7-1: can't read configurations, error -71
[ 1580.822990][T27801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1580.823490][T27801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1580.875831][T27801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1580.905902][T27801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1581.046530][ T5739] usb 3-1: selecting invalid altsetting 0
[ 1581.046547][ T5739] usb 3-1: Could not set interface, error -22
[ 1581.069021][ T5739] usb 3-1: USB disconnect, device number 45
[ 1582.440199][T27826] netlink: 'syz.2.6764': attribute type 18 has an invalid length.
[ 1583.779703][T27841] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6770'.
[ 1583.937870][T27844] netlink: 'syz.6.6769': attribute type 21 has an invalid length.
[ 1583.937893][T27844] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6769'.
[ 1583.939276][T27844] netlink: 'syz.6.6769': attribute type 5 has an invalid length.
[ 1583.939295][T27844] netlink: 'syz.6.6769': attribute type 6 has an invalid length.
[ 1583.939309][T27844] netlink: 3 bytes leftover after parsing attributes in process `syz.6.6769'.
[ 1584.032178][T27844] trusted_key: syz.6.6769 sent an empty control message without MSG_MORE.
[ 1584.129912][T27844] 9p: Could not find request transport: f
[ 1584.748625][T27857] FAULT_INJECTION: forcing a failure.
[ 1584.748625][T27857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1584.748724][T27857] CPU: 1 UID: 0 PID: 27857 Comm: syz.8.6773 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1584.748752][T27857] Tainted: [L]=SOFTLOCKUP
[ 1584.748759][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1584.748769][T27857] Call Trace:
[ 1584.748778][T27857]  <TASK>
[ 1584.748787][T27857]  dump_stack_lvl+0xe8/0x150
[ 1584.748821][T27857]  should_fail_ex+0x467/0x600
[ 1584.748854][T27857]  _copy_to_user+0x31/0xb0
[ 1584.748880][T27857]  simple_read_from_buffer+0xe1/0x170
[ 1584.748908][T27857]  proc_fail_nth_read+0x1be/0x230
[ 1584.748934][T27857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1584.748958][T27857]  ? rw_verify_area+0x250/0x4d0
[ 1584.748984][T27857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1584.749004][T27857]  vfs_read+0x219/0xa90
[ 1584.749036][T27857]  ? __pfx_vfs_read+0x10/0x10
[ 1584.749062][T27857]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1584.749088][T27857]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1584.749112][T27857]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1584.749136][T27857]  ? mutex_lock_nested+0x152/0x1d0
[ 1584.749158][T27857]  ? fdget_pos+0x252/0x320
[ 1584.749187][T27857]  ksys_read+0x156/0x270
[ 1584.749214][T27857]  ? __pfx_ksys_read+0x10/0x10
[ 1584.749245][T27857]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1584.749266][T27857]  do_syscall_64+0x174/0x580
[ 1584.749291][T27857]  ? clear_bhb_loop+0x40/0x90
[ 1584.749314][T27857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1584.749332][T27857] RIP: 0033:0x7f63d8abe84e
[ 1584.749350][T27857] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1584.749366][T27857] RSP: 002b:00007f63d6d34fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1584.749387][T27857] RAX: ffffffffffffffda RBX: 00007f63d6d356c0 RCX: 00007f63d8abe84e
[ 1584.749402][T27857] RDX: 000000000000000f RSI: 00007f63d6d350a0 RDI: 0000000000000003
[ 1584.749414][T27857] RBP: 00007f63d6d35090 R08: 0000000000000000 R09: 0000000000000000
[ 1584.749427][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1584.749439][T27857] R13: 00007f63d8d86128 R14: 00007f63d8d86090 R15: 00007ffc2287bb58
[ 1584.749471][T27857]  </TASK>
[ 1585.305528][T27862] input: syz1 as /devices/virtual/input/input30
[ 1585.430152][ T5723] usb 7-1: new full-speed USB device number 85 using dummy_hcd
[ 1585.532502][ T5837] usb 8-1: new high-speed USB device number 45 using dummy_hcd
[ 1585.598126][ T5723] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1585.598155][ T5723] usb 7-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[ 1585.604245][ T5723] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1585.604275][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.604296][ T5723] usb 7-1: Product: syz
[ 1585.604311][ T5723] usb 7-1: Manufacturer: syz
[ 1585.604326][ T5723] usb 7-1: SerialNumber: syz
[ 1585.669702][   T37] kauditd_printk_skb: 85 callbacks suppressed
[ 1585.669719][   T37] audit: type=1326 audit(1785839203.682:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.669762][   T37] audit: type=1326 audit(1785839203.682:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.681015][   T37] audit: type=1326 audit(1785839203.702:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.681119][   T37] audit: type=1326 audit(1785839203.702:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.681657][   T37] audit: type=1326 audit(1785839203.702:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.681993][   T37] audit: type=1326 audit(1785839203.702:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.682457][   T37] audit: type=1326 audit(1785839203.702:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.685413][   T37] audit: type=1326 audit(1785839203.702:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.693169][   T37] audit: type=1326 audit(1785839203.712:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.693369][   T37] audit: type=1326 audit(1785839203.712:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27873 comm="syz.8.6780" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1585.745088][ T5837] usb 8-1: Using ep0 maxpacket: 32
[ 1585.747969][ T5837] usb 8-1: unable to get BOS descriptor or descriptor too short
[ 1585.749540][ T5837] usb 8-1: config 14 has an invalid interface number: 8 but max is 1
[ 1585.749564][ T5837] usb 8-1: config 14 has no interface number 1
[ 1585.749608][ T5837] usb 8-1: config 14 interface 8 has no altsetting 0
[ 1585.749627][ T5837] usb 8-1: config 14 interface 0 has no altsetting 0
[ 1585.754767][ T5837] usb 8-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=c9.4b
[ 1585.754795][ T5837] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1585.754815][ T5837] usb 8-1: Product: syz
[ 1585.754831][ T5837] usb 8-1: Manufacturer: syz
[ 1585.754845][ T5837] usb 8-1: SerialNumber: syz
[ 1586.560094][T24818] usb 7-1: USB disconnect, device number 85
[ 1586.763265][T27864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.764748][T27864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.772078][T27864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1586.775128][T27864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1586.929538][ T5837] usb 8-1: selecting invalid altsetting 0
[ 1586.929555][ T5837] usb 8-1: Could not set interface, error -22
[ 1586.955036][ T5837] usb 8-1: USB disconnect, device number 45
[ 1587.177185][T27883] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6782'.
[ 1587.395900][ T5743] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1587.543105][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1587.543136][ T5743] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1587.543169][ T5743] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01
[ 1587.543189][ T5743] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1587.549667][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6788'.
[ 1587.549690][T27897] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6788'.
[ 1587.558202][ T5743] usb 3-1: config 0 descriptor??
[ 1587.910336][T24818] usb 8-1: new high-speed USB device number 46 using dummy_hcd
[ 1588.083351][T24818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1588.083385][T24818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1588.083409][T24818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1588.083489][T24818] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1588.087034][T24818] usb 8-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1588.087063][T24818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1588.087133][T24818] usb 8-1: Product: syz
[ 1588.087146][T24818] usb 8-1: Manufacturer: syz
[ 1588.087160][T24818] usb 8-1: SerialNumber: syz
[ 1588.127710][T24818] usb 8-1: config 0 descriptor??
[ 1588.129291][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.129325][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.129352][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.129378][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.129811][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.129847][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.131766][ T5743] arvo 0003:1E7D:30D4.004E: unknown main item tag 0x0
[ 1588.173897][ T5743] arvo 0003:1E7D:30D4.004E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[ 1588.238214][T27881] tipc: Failed to remove unknown binding: 66,0,0/0:2873349263/2873349264
[ 1588.238372][T27881] tipc: Failed to remove unknown binding: 66,0,0/0:2873349263/2873349264
[ 1588.418127][T24818] adutux 8-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1588.423912][ T5743] arvo 0003:1E7D:30D4.004E: couldn't init struct arvo_device
[ 1588.427419][ T5743] arvo 0003:1E7D:30D4.004E: couldn't install keyboard
[ 1588.435575][T27907] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6791'.
[ 1588.479308][ T5743] arvo 0003:1E7D:30D4.004E: probe with driver arvo failed with error -71
[ 1588.539051][T24818] usb 8-1: USB disconnect, device number 46
[ 1588.542957][ T5743] usb 3-1: USB disconnect, device number 46
[ 1588.870131][ T5739] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[ 1589.037610][ T5739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1589.037638][ T5739] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1589.037659][ T5739] usb 1-1: config 1 has no interface number 0
[ 1589.037685][ T5739] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1589.067479][ T5739] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1589.067511][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.067522][ T5739] usb 1-1: Product: syz
[ 1589.067530][ T5739] usb 1-1: Manufacturer: syz
[ 1589.067538][ T5739] usb 1-1: SerialNumber: syz
[ 1589.290980][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'.
[ 1589.291000][T27923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6796'.
[ 1589.343210][ T5743] usb 1-1: USB disconnect, device number 44
[ 1589.550297][T24818] usb 8-1: new full-speed USB device number 47 using dummy_hcd
[ 1589.590182][ T5798] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1589.702609][T24818] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1589.702636][T24818] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[ 1589.704900][T24818] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1589.704929][T24818] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.704949][T24818] usb 8-1: Product: syz
[ 1589.705020][T24818] usb 8-1: Manufacturer: syz
[ 1589.705034][T24818] usb 8-1: SerialNumber: syz
[ 1589.770161][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1589.770195][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1589.770218][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1589.770243][ T5798] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1589.772758][ T5798] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1589.772786][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1589.772806][ T5798] usb 3-1: Product: syz
[ 1589.772819][ T5798] usb 3-1: Manufacturer: syz
[ 1589.772832][ T5798] usb 3-1: SerialNumber: syz
[ 1589.776491][ T5798] usb 3-1: config 0 descriptor??
[ 1589.800114][ T5743] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1589.929165][T27929] FAULT_INJECTION: forcing a failure.
[ 1589.929165][T27929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1589.929201][T27929] CPU: 1 UID: 0 PID: 27929 Comm: syz.0.6799 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1589.929227][T27929] Tainted: [L]=SOFTLOCKUP
[ 1589.929234][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1589.929245][T27929] Call Trace:
[ 1589.929250][T27929]  <TASK>
[ 1589.929255][T27929]  dump_stack_lvl+0xe8/0x150
[ 1589.929276][T27929]  should_fail_ex+0x467/0x600
[ 1589.929298][T27929]  _copy_from_user+0x2d/0xb0
[ 1589.929322][T27929]  __se_sys_epoll_ctl+0xbd/0x230
[ 1589.929425][T27929]  ? __pfx___se_sys_epoll_ctl+0x10/0x10
[ 1589.929443][T27929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1589.929454][T27929]  do_syscall_64+0x174/0x580
[ 1589.929477][T27929]  ? trace_irq_disable+0x3b/0x140
[ 1589.929496][T27929]  ? clear_bhb_loop+0x40/0x90
[ 1589.929520][T27929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1589.929538][T27929] RIP: 0033:0x7f5578ede019
[ 1589.929556][T27929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1589.929573][T27929] RSP: 002b:00007f5577136028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[ 1589.929589][T27929] RAX: ffffffffffffffda RBX: 00007f5579165fa0 RCX: 00007f5578ede019
[ 1589.929597][T27929] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000005
[ 1589.929603][T27929] RBP: 00007f5577136090 R08: 0000000000000000 R09: 0000000000000000
[ 1589.929610][T27929] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001
[ 1589.929617][T27929] R13: 00007f5579166038 R14: 00007f5579165fa0 R15: 00007ffef1ab3be8
[ 1589.929637][T27929]  </TASK>
[ 1589.946278][T24818] usb 8-1: USB disconnect, device number 47
[ 1589.951594][ T5743] usb 9-1: Using ep0 maxpacket: 16
[ 1589.953910][ T5743] usb 9-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[ 1589.953954][ T5743] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1589.953981][ T5743] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1589.954013][ T5743] usb 9-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[ 1589.954035][ T5743] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1590.019300][ T5743] usb 9-1: config 0 descriptor??
[ 1590.182211][ T5798] adutux 3-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1590.187529][ T5798] usb 3-1: USB disconnect, device number 47
[ 1591.007352][ T5743] hid (null): usage index exceeded
[ 1591.007373][ T5743] hid (null): bogus close delimiter
[ 1591.007387][ T5743] hid (null): unknown global tag 0xe
[ 1591.018844][ T5743] logitech-djreceiver 0003:046D:C51B.004F: ignoring exceeding usage max
[ 1591.021879][ T5743] logitech-djreceiver 0003:046D:C51B.004F: ignoring exceeding usage max
[ 1591.021901][ T5743] logitech-djreceiver 0003:046D:C51B.004F: usage index exceeded
[ 1591.021916][ T5743] logitech-djreceiver 0003:046D:C51B.004F: item 0 2 2 2 parsing failed
[ 1591.022708][ T5743] logitech-djreceiver 0003:046D:C51B.004F: logi_dj_probe: parse failed
[ 1591.022876][ T5743] logitech-djreceiver 0003:046D:C51B.004F: probe with driver logitech-djreceiver failed with error -22
[ 1591.050367][ T5743] usb 9-1: USB disconnect, device number 20
[ 1591.274451][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6804'.
[ 1591.274483][T27939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6804'.
[ 1591.322169][T27941] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6803'.
[ 1591.397232][T27947] bridge0: entered allmulticast mode
[ 1591.403571][T27947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6805'.
[ 1591.403912][T27947] bridge0: port 3(team_slave_1) entered disabled state
[ 1591.530134][ T5723] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1591.542449][T27947] bridge_slave_1: left allmulticast mode
[ 1591.542483][T27947] bridge_slave_1: left promiscuous mode
[ 1591.542741][T27947] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1591.641181][T27947] bridge_slave_0: left allmulticast mode
[ 1591.641206][T27947] bridge_slave_0: left promiscuous mode
[ 1591.641388][T27947] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1591.650263][ T5743] usb 8-1: new full-speed USB device number 48 using dummy_hcd
[ 1591.684886][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1591.684919][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1591.684941][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1591.684955][ T5723] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1591.687624][ T5723] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[ 1591.687653][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1591.687672][ T5723] usb 3-1: Product: syz
[ 1591.687683][ T5723] usb 3-1: Manufacturer: syz
[ 1591.687691][ T5723] usb 3-1: SerialNumber: syz
[ 1591.697493][ T5723] usb 3-1: config 0 descriptor??
[ 1591.828654][T27946] random: crng reseeded on system resumption
[ 1591.875915][T27951] PKCS7: Unknown OID: [4] 1.31.9.0.6.0.0.0.0
[ 1591.875938][T27951] PKCS7: Only support pkcs7_signedData type
[ 1592.056013][ T5723] adutux 3-1:0.0: ADU208  now attached to /dev/usb/adutux0
[ 1592.169329][ T5723] usb 3-1: USB disconnect, device number 48
[ 1593.055372][T27947] bridge0 (unregistering): left allmulticast mode
[ 1593.355638][ T5743] usb 8-1: unable to read config index 0 descriptor/start: -71
[ 1593.355662][ T5743] usb 8-1: can't read configurations, error -71
[ 1594.141508][T27981] netlink: 'syz.0.6816': attribute type 12 has an invalid length.
[ 1594.661697][ T5701] usb 7-1: new full-speed USB device number 86 using dummy_hcd
[ 1594.812568][ T5701] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1594.812595][ T5701] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1594.812617][ T5701] usb 7-1: config 1 has no interface number 0
[ 1594.812659][ T5701] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1594.819370][ T5701] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1594.819550][ T5701] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.819571][ T5701] usb 7-1: Product: syz
[ 1594.819585][ T5701] usb 7-1: Manufacturer: syz
[ 1594.819600][ T5701] usb 7-1: SerialNumber: syz
[ 1595.072327][T28001] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6823'.
[ 1595.559886][T25477] usb 7-1: USB disconnect, device number 86
[ 1596.100122][ T5743] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 1596.252527][ T5743] usb 1-1: Using ep0 maxpacket: 32
[ 1596.256043][ T5743] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1596.256095][ T5743] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1596.294462][ T5743] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=21.11
[ 1596.294491][ T5743] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1596.294510][ T5743] usb 1-1: Product: syz
[ 1596.294524][ T5743] usb 1-1: Manufacturer: syz
[ 1596.294537][ T5743] usb 1-1: SerialNumber: syz
[ 1596.345482][ T5743] usb 1-1: config 0 descriptor??
[ 1596.424538][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6827'.
[ 1596.424572][T28015] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6827'.
[ 1596.481933][T28011] nvme_fabrics: missing parameter 'transport=%s'
[ 1596.481950][T28011] nvme_fabrics: missing parameter 'nqn=%s'
[ 1596.562150][ T5743] usb 1-1: USB disconnect, device number 45
[ 1596.859189][T28018] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6828'.
[ 1597.065524][T28018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1597.189553][T28021] FAULT_INJECTION: forcing a failure.
[ 1597.189553][T28021] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1597.189590][T28021] CPU: 0 UID: 0 PID: 28021 Comm: syz.0.6830 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1597.189617][T28021] Tainted: [L]=SOFTLOCKUP
[ 1597.189624][T28021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1597.189635][T28021] Call Trace:
[ 1597.189643][T28021]  <TASK>
[ 1597.189652][T28021]  dump_stack_lvl+0xe8/0x150
[ 1597.189686][T28021]  should_fail_ex+0x467/0x600
[ 1597.189728][T28021]  _copy_from_user+0x2d/0xb0
[ 1597.189752][T28021]  ___sys_sendmsg+0x1c6/0x360
[ 1597.189776][T28021]  ? __lock_acquire+0x683/0x2ce0
[ 1597.189801][T28021]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1597.189858][T28021]  ? __fget_files+0x2a/0x420
[ 1597.189879][T28021]  ? __fget_files+0x3a8/0x420
[ 1597.189907][T28021]  __x64_sys_sendmsg+0x1b7/0x290
[ 1597.189934][T28021]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1597.189972][T28021]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1597.189991][T28021]  do_syscall_64+0x174/0x580
[ 1597.190015][T28021]  ? trace_irq_disable+0x3b/0x140
[ 1597.190033][T28021]  ? clear_bhb_loop+0x40/0x90
[ 1597.190054][T28021]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1597.190070][T28021] RIP: 0033:0x7f5578ede019
[ 1597.190088][T28021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1597.190103][T28021] RSP: 002b:00007f5577136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1597.190123][T28021] RAX: ffffffffffffffda RBX: 00007f5579165fa0 RCX: 00007f5578ede019
[ 1597.190136][T28021] RDX: 0000000000000800 RSI: 00002000000004c0 RDI: 0000000000000003
[ 1597.190148][T28021] RBP: 00007f5577136090 R08: 0000000000000000 R09: 0000000000000000
[ 1597.190161][T28021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1597.190172][T28021] R13: 00007f5579166038 R14: 00007f5579165fa0 R15: 00007ffef1ab3be8
[ 1597.190201][T28021]  </TASK>
[ 1597.855804][T28029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6834'.
[ 1598.159645][T25477] usb 7-1: new full-speed USB device number 87 using dummy_hcd
[ 1598.652068][T25477] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1598.652096][T25477] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1598.652118][T25477] usb 7-1: config 1 has no interface number 0
[ 1598.652162][T25477] usb 7-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1598.654393][T25477] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1598.654421][T25477] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1598.654441][T25477] usb 7-1: Product: syz
[ 1598.654455][T25477] usb 7-1: Manufacturer: syz
[ 1598.654465][T25477] usb 7-1: SerialNumber: syz
[ 1598.695372][T25477] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[ 1598.695418][T25477] cdc_ncm 7-1:1.1: bind() failure
[ 1598.714870][T28028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1598.925409][   T10] usb 7-1: USB disconnect, device number 87
[ 1599.057589][   T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1599.130800][   T60] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1599.134398][   T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1599.166580][   T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1599.168557][   T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1599.473239][T28045] FAULT_INJECTION: forcing a failure.
[ 1599.473239][T28045] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1599.473273][T28045] CPU: 1 UID: 0 PID: 28045 Comm: syz.0.6841 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1599.473298][T28045] Tainted: [L]=SOFTLOCKUP
[ 1599.473305][T28045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1599.473317][T28045] Call Trace:
[ 1599.473324][T28045]  <TASK>
[ 1599.473332][T28045]  dump_stack_lvl+0xe8/0x150
[ 1599.473365][T28045]  should_fail_ex+0x467/0x600
[ 1599.473397][T28045]  _copy_from_user+0x2d/0xb0
[ 1599.473421][T28045]  ___sys_sendmsg+0x1c6/0x360
[ 1599.473454][T28045]  ? __lock_acquire+0x683/0x2ce0
[ 1599.473479][T28045]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1599.473536][T28045]  ? __fget_files+0x2a/0x420
[ 1599.473556][T28045]  ? __fget_files+0x3a8/0x420
[ 1599.473585][T28045]  __x64_sys_sendmsg+0x1b7/0x290
[ 1599.473612][T28045]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1599.473652][T28045]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1599.473673][T28045]  do_syscall_64+0x174/0x580
[ 1599.473697][T28045]  ? trace_irq_disable+0x3b/0x140
[ 1599.473717][T28045]  ? clear_bhb_loop+0x40/0x90
[ 1599.473739][T28045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1599.473758][T28045] RIP: 0033:0x7f5578ede019
[ 1599.473776][T28045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1599.473791][T28045] RSP: 002b:00007f5577136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1599.473812][T28045] RAX: ffffffffffffffda RBX: 00007f5579165fa0 RCX: 00007f5578ede019
[ 1599.473827][T28045] RDX: 0000000004048873 RSI: 0000200000000840 RDI: 0000000000000003
[ 1599.473839][T28045] RBP: 00007f5577136090 R08: 0000000000000000 R09: 0000000000000000
[ 1599.473852][T28045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1599.473863][T28045] R13: 00007f5579166038 R14: 00007f5579165fa0 R15: 00007ffef1ab3be8
[ 1599.473893][T28045]  </TASK>
[ 1600.050122][   T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1600.190108][ T5743] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1600.220346][   T10] usb 9-1: Using ep0 maxpacket: 8
[ 1600.290566][T28068] 9p: Bad value for 'source'
[ 1600.340259][ T5743] usb 3-1: Using ep0 maxpacket: 16
[ 1600.343823][ T5743] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1600.345175][ T5743] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1600.345199][ T5743] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1600.352910][ T5743] usb 3-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40
[ 1600.352939][ T5743] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1600.353042][ T5743] usb 3-1: Product: syz
[ 1600.353058][ T5743] usb 3-1: Manufacturer: syz
[ 1600.353072][ T5743] usb 3-1: SerialNumber: syz
[ 1600.495771][   T43] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1600.795914][T28072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1600.799201][T28072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1601.207397][T11418] Bluetooth: hci1: command tx timeout
[ 1601.258473][ T5743] usb 3-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues
[ 1601.258530][ T5743] usb 3-1: Error initialising Scarlett Gen 3 Mixer Driver: -22
[ 1601.477107][ T5743] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1601.488476][ T5743] usb 3-1: USB disconnect, device number 49
[ 1601.595770][T28078] FAULT_INJECTION: forcing a failure.
[ 1601.595770][T28078] name failslab, interval 1, probability 0, space 0, times 0
[ 1601.595866][T28078] CPU: 0 UID: 0 PID: 28078 Comm: syz.0.6849 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1601.595893][T28078] Tainted: [L]=SOFTLOCKUP
[ 1601.595899][T28078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1601.595910][T28078] Call Trace:
[ 1601.595917][T28078]  <TASK>
[ 1601.595925][T28078]  dump_stack_lvl+0xe8/0x150
[ 1601.595961][T28078]  should_fail_ex+0x467/0x600
[ 1601.595995][T28078]  should_failslab+0xa8/0x100
[ 1601.596021][T28078]  __kmalloc_noprof+0xfe/0x780
[ 1601.596040][T28078]  ? rcu_is_watching+0x15/0xb0
[ 1601.596064][T28078]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1601.596088][T28078]  ? tomoyo_realpath_from_path+0xef/0x640
[ 1601.596120][T28078]  tomoyo_realpath_from_path+0xef/0x640
[ 1601.596154][T28078]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1601.596176][T28078]  tomoyo_path_number_perm+0x246/0x5f0
[ 1601.596199][T28078]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1601.596220][T28078]  ? __lock_acquire+0x683/0x2ce0
[ 1601.596255][T28078]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1601.596279][T28078]  ? hook_file_ioctl+0x1f3/0x600
[ 1601.596296][T28078]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1601.596339][T28078]  ? __fget_files+0x2a/0x420
[ 1601.596362][T28078]  ? __fget_files+0x2a/0x420
[ 1601.596381][T28078]  ? __fget_files+0x3a8/0x420
[ 1601.596399][T28078]  ? __fget_files+0x2a/0x420
[ 1601.596423][T28078]  security_file_ioctl+0xc3/0x2a0
[ 1601.596447][T28078]  __se_sys_ioctl+0x47/0x170
[ 1601.596473][T28078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.596494][T28078]  do_syscall_64+0x174/0x580
[ 1601.596518][T28078]  ? clear_bhb_loop+0x40/0x90
[ 1601.596542][T28078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1601.596561][T28078] RIP: 0033:0x7f5578ede019
[ 1601.596579][T28078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1601.596594][T28078] RSP: 002b:00007f55770d4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1601.596616][T28078] RAX: ffffffffffffffda RBX: 00007f5579166090 RCX: 00007f5578ede019
[ 1601.596630][T28078] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009
[ 1601.596642][T28078] RBP: 00007f55770d4090 R08: 0000000000000000 R09: 0000000000000000
[ 1601.596654][T28078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1601.596666][T28078] R13: 00007f5579166128 R14: 00007f5579166090 R15: 00007ffef1ab3be8
[ 1601.596704][T28078]  </TASK>
[ 1601.610073][T28078] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1601.769177][T22173] udevd[22173]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1601.769762][T28050] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[ 1602.396960][   T43] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1602.407525][T28086] FAULT_INJECTION: forcing a failure.
[ 1602.407525][T28086] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1602.407561][T28086] CPU: 1 UID: 0 PID: 28086 Comm: syz.6.6852 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1602.407601][T28086] Tainted: [L]=SOFTLOCKUP
[ 1602.407608][T28086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1602.407623][T28086] Call Trace:
[ 1602.407631][T28086]  <TASK>
[ 1602.407639][T28086]  dump_stack_lvl+0xe8/0x150
[ 1602.407673][T28086]  should_fail_ex+0x467/0x600
[ 1602.407706][T28086]  _copy_from_user+0x2d/0xb0
[ 1602.407730][T28086]  __sys_bpf+0x2e7/0xd90
[ 1602.407775][T28086]  ? __pfx___sys_bpf+0x10/0x10
[ 1602.407799][T28086]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1602.407836][T28086]  ? rt_mutex_slowunlock+0x219/0x460
[ 1602.407873][T28086]  ? ksys_write+0x248/0x270
[ 1602.407898][T28086]  ? __pfx_ksys_write+0x10/0x10
[ 1602.407926][T28086]  __x64_sys_bpf+0xba/0xd0
[ 1602.407952][T28086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1602.407972][T28086]  do_syscall_64+0x174/0x580
[ 1602.407997][T28086]  ? trace_irq_disable+0x3b/0x140
[ 1602.408015][T28086]  ? clear_bhb_loop+0x40/0x90
[ 1602.408038][T28086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1602.408056][T28086] RIP: 0033:0x7f49fbfce019
[ 1602.408075][T28086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1602.408090][T28086] RSP: 002b:00007f49fa226028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1602.408111][T28086] RAX: ffffffffffffffda RBX: 00007f49fc255fa0 RCX: 00007f49fbfce019
[ 1602.408124][T28086] RDX: 0000000000000025 RSI: 00002000000003c0 RDI: 0000000000000005
[ 1602.408137][T28086] RBP: 00007f49fa226090 R08: 0000000000000000 R09: 0000000000000000
[ 1602.408149][T28086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1602.408161][T28086] R13: 00007f49fc256038 R14: 00007f49fc255fa0 R15: 00007fff7ad7f068
[ 1602.408190][T28086]  </TASK>
[ 1603.280775][T11418] Bluetooth: hci1: command tx timeout
[ 1603.609363][   T10] usb 9-1: unable to get BOS descriptor or descriptor too short
[ 1603.620129][   T10] usb 9-1: unable to read config index 0 descriptor/start: -71
[ 1603.620166][   T10] usb 9-1: can't read configurations, error -71
[ 1604.159478][T28114] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6859'.
[ 1604.172722][T28116] FAULT_INJECTION: forcing a failure.
[ 1604.172722][T28116] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1604.172755][T28116] CPU: 1 UID: 0 PID: 28116 Comm: syz.8.6861 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1604.172781][T28116] Tainted: [L]=SOFTLOCKUP
[ 1604.172787][T28116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1604.172798][T28116] Call Trace:
[ 1604.172807][T28116]  <TASK>
[ 1604.172815][T28116]  dump_stack_lvl+0xe8/0x150
[ 1604.172848][T28116]  should_fail_ex+0x467/0x600
[ 1604.172882][T28116]  _copy_from_user+0x2d/0xb0
[ 1604.172906][T28116]  ___sys_sendmsg+0x1c6/0x360
[ 1604.172930][T28116]  ? __lock_acquire+0x683/0x2ce0
[ 1604.172954][T28116]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1604.173009][T28116]  ? __fget_files+0x2a/0x420
[ 1604.173029][T28116]  ? __fget_files+0x3a8/0x420
[ 1604.173056][T28116]  __x64_sys_sendmsg+0x1b7/0x290
[ 1604.173081][T28116]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1604.173123][T28116]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.173144][T28116]  do_syscall_64+0x174/0x580
[ 1604.173168][T28116]  ? trace_irq_disable+0x3b/0x140
[ 1604.173187][T28116]  ? clear_bhb_loop+0x40/0x90
[ 1604.173209][T28116]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1604.173231][T28116] RIP: 0033:0x7f63d8afe019
[ 1604.173249][T28116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1604.173272][T28116] RSP: 002b:00007f63d6d56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1604.173292][T28116] RAX: ffffffffffffffda RBX: 00007f63d8d85fa0 RCX: 00007f63d8afe019
[ 1604.173306][T28116] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003
[ 1604.173319][T28116] RBP: 00007f63d6d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1604.173332][T28116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1604.173343][T28116] R13: 00007f63d8d86038 R14: 00007f63d8d85fa0 R15: 00007ffc2287bb58
[ 1604.173373][T28116]  </TASK>
[ 1604.568372][   T43] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1604.863439][T28132] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6864'.
[ 1605.360073][T11418] Bluetooth: hci1: command tx timeout
[ 1605.527459][T28137] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6867'.
[ 1605.648331][T28136] netlink: 2020 bytes leftover after parsing attributes in process `syz.2.6868'.
[ 1605.944799][T28143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6870'.
[ 1605.984592][   T43] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1606.064592][T28149] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6872'.
[ 1606.225357][T28149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1606.646239][T28161] overlayfs: overlapping lowerdir path
[ 1607.510057][T11418] Bluetooth: hci1: command tx timeout
[ 1607.525165][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1607.525229][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1610.347256][T28206] FAULT_INJECTION: forcing a failure.
[ 1610.347256][T28206] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1610.347293][T28206] CPU: 0 UID: 0 PID: 28206 Comm: syz.8.6888 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1610.347320][T28206] Tainted: [L]=SOFTLOCKUP
[ 1610.347327][T28206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1610.347339][T28206] Call Trace:
[ 1610.347347][T28206]  <TASK>
[ 1610.347358][T28206]  dump_stack_lvl+0xe8/0x150
[ 1610.347391][T28206]  should_fail_ex+0x467/0x600
[ 1610.347424][T28206]  _copy_from_user+0x2d/0xb0
[ 1610.347448][T28206]  __sys_bpf+0x2e7/0xd90
[ 1610.347477][T28206]  ? __pfx___sys_bpf+0x10/0x10
[ 1610.347500][T28206]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1610.347530][T28206]  ? rt_mutex_slowunlock+0x219/0x460
[ 1610.347568][T28206]  ? ksys_write+0x248/0x270
[ 1610.347594][T28206]  ? __pfx_ksys_write+0x10/0x10
[ 1610.347623][T28206]  __x64_sys_bpf+0xba/0xd0
[ 1610.347652][T28206]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1610.347673][T28206]  do_syscall_64+0x174/0x580
[ 1610.347695][T28206]  ? trace_irq_disable+0x3b/0x140
[ 1610.347714][T28206]  ? clear_bhb_loop+0x40/0x90
[ 1610.347737][T28206]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1610.347756][T28206] RIP: 0033:0x7f63d8afe019
[ 1610.347773][T28206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1610.347789][T28206] RSP: 002b:00007f63d6d56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1610.347809][T28206] RAX: ffffffffffffffda RBX: 00007f63d8d85fa0 RCX: 00007f63d8afe019
[ 1610.347822][T28206] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a
[ 1610.347834][T28206] RBP: 00007f63d6d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1610.347847][T28206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1610.347859][T28206] R13: 00007f63d8d86038 R14: 00007f63d8d85fa0 R15: 00007ffc2287bb58
[ 1610.347889][T28206]  </TASK>
[ 1611.681830][   T43] bridge_slave_1: left allmulticast mode
[ 1611.681866][   T43] bridge_slave_1: left promiscuous mode
[ 1611.682109][   T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1611.917499][   T43] bridge_slave_0: left allmulticast mode
[ 1611.917533][   T43] bridge_slave_0: left promiscuous mode
[ 1611.917778][   T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1612.842646][T28254] FAULT_INJECTION: forcing a failure.
[ 1612.842646][T28254] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1612.842682][T28254] CPU: 1 UID: 0 PID: 28254 Comm: syz.2.6896 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1612.842708][T28254] Tainted: [L]=SOFTLOCKUP
[ 1612.842715][T28254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1612.842727][T28254] Call Trace:
[ 1612.842735][T28254]  <TASK>
[ 1612.842744][T28254]  dump_stack_lvl+0xe8/0x150
[ 1612.842777][T28254]  should_fail_ex+0x467/0x600
[ 1612.842810][T28254]  _copy_from_user+0x2d/0xb0
[ 1612.842834][T28254]  ___sys_sendmsg+0x1c6/0x360
[ 1612.842867][T28254]  ? __lock_acquire+0x683/0x2ce0
[ 1612.842889][T28254]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1612.842942][T28254]  ? __fget_files+0x2a/0x420
[ 1612.842962][T28254]  ? __fget_files+0x3a8/0x420
[ 1612.842990][T28254]  __x64_sys_sendmsg+0x1b7/0x290
[ 1612.843016][T28254]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1612.843057][T28254]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1612.843077][T28254]  do_syscall_64+0x174/0x580
[ 1612.843102][T28254]  ? trace_irq_disable+0x3b/0x140
[ 1612.843121][T28254]  ? clear_bhb_loop+0x40/0x90
[ 1612.843142][T28254]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1612.843160][T28254] RIP: 0033:0x7fd44a45e019
[ 1612.843176][T28254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1612.843191][T28254] RSP: 002b:00007fd4486b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1612.843211][T28254] RAX: ffffffffffffffda RBX: 00007fd44a6e5fa0 RCX: 00007fd44a45e019
[ 1612.843224][T28254] RDX: 0000000000048800 RSI: 0000200000000740 RDI: 0000000000000003
[ 1612.843237][T28254] RBP: 00007fd4486b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1612.843249][T28254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1612.843260][T28254] R13: 00007fd44a6e6038 R14: 00007fd44a6e5fa0 R15: 00007fff37af75a8
[ 1612.843289][T28254]  </TASK>
[ 1614.702735][   T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1614.802796][   T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1614.912177][   T43] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1614.953790][   T43] bond0 (unregistering): Released all slaves
[ 1615.314677][ T5264] 8021q: adding VLAN 0 to HW filter on device eth17
[ 1615.409841][T28261] syzkaller0: entered promiscuous mode
[ 1615.409871][T28261] syzkaller0: entered allmulticast mode
[ 1615.484451][T28040] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1615.486295][T28040] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1615.486569][T28040] bridge_slave_0: entered allmulticast mode
[ 1615.503235][T28040] bridge_slave_0: entered promiscuous mode
[ 1615.733234][T28276] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6903'.
[ 1615.890093][ T5723] usb 9-1: new high-speed USB device number 23 using dummy_hcd
[ 1615.996678][   T43] tipc: Left network mode
[ 1615.996947][T28040] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1615.997065][T28040] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1615.997350][T28040] bridge_slave_1: entered allmulticast mode
[ 1616.000974][T28040] bridge_slave_1: entered promiscuous mode
[ 1616.040119][ T5723] usb 9-1: Using ep0 maxpacket: 16
[ 1616.046987][ T5723] usb 9-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[ 1616.047035][ T5723] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1616.047063][ T5723] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1616.047098][ T5723] usb 9-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[ 1616.047121][ T5723] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.140528][ T5723] usb 9-1: config 0 descriptor??
[ 1616.166240][T28283] FAULT_INJECTION: forcing a failure.
[ 1616.166240][T28283] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1616.166275][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.6.6906 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1616.166302][T28283] Tainted: [L]=SOFTLOCKUP
[ 1616.166309][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1616.166320][T28283] Call Trace:
[ 1616.166328][T28283]  <TASK>
[ 1616.166337][T28283]  dump_stack_lvl+0xe8/0x150
[ 1616.166379][T28283]  should_fail_ex+0x467/0x600
[ 1616.166414][T28283]  _copy_from_user+0x2d/0xb0
[ 1616.166438][T28283]  ___sys_sendmsg+0x1c6/0x360
[ 1616.166462][T28283]  ? __lock_acquire+0x683/0x2ce0
[ 1616.166488][T28283]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1616.166546][T28283]  ? __fget_files+0x2a/0x420
[ 1616.166565][T28283]  ? __fget_files+0x3a8/0x420
[ 1616.166594][T28283]  __x64_sys_sendmsg+0x1b7/0x290
[ 1616.166620][T28283]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1616.166661][T28283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1616.166682][T28283]  do_syscall_64+0x174/0x580
[ 1616.166705][T28283]  ? trace_irq_disable+0x3b/0x140
[ 1616.166725][T28283]  ? clear_bhb_loop+0x40/0x90
[ 1616.166748][T28283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1616.166766][T28283] RIP: 0033:0x7f49fbfce019
[ 1616.166784][T28283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1616.166799][T28283] RSP: 002b:00007f49fa226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1616.166819][T28283] RAX: ffffffffffffffda RBX: 00007f49fc255fa0 RCX: 00007f49fbfce019
[ 1616.166833][T28283] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1616.166846][T28283] RBP: 00007f49fa226090 R08: 0000000000000000 R09: 0000000000000000
[ 1616.166857][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1616.166869][T28283] R13: 00007f49fc256038 R14: 00007f49fc255fa0 R15: 00007fff7ad7f068
[ 1616.166898][T28283]  </TASK>
[ 1616.638547][ T5723] hid (null): usage index exceeded
[ 1616.638569][ T5723] hid (null): bogus close delimiter
[ 1616.638583][ T5723] hid (null): unknown global tag 0xe
[ 1616.645956][T28040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1616.646334][ T5723] logitech-djreceiver 0003:046D:C51B.0050: ignoring exceeding usage max
[ 1616.656055][ T5723] logitech-djreceiver 0003:046D:C51B.0050: ignoring exceeding usage max
[ 1616.656078][ T5723] logitech-djreceiver 0003:046D:C51B.0050: usage index exceeded
[ 1616.656093][ T5723] logitech-djreceiver 0003:046D:C51B.0050: item 0 2 2 2 parsing failed
[ 1616.658983][ T5723] logitech-djreceiver 0003:046D:C51B.0050: logi_dj_probe: parse failed
[ 1616.659058][ T5723] logitech-djreceiver 0003:046D:C51B.0050: probe with driver logitech-djreceiver failed with error -22
[ 1616.694927][T28040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1616.790465][ T5743] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[ 1616.840145][T24818] usb 9-1: USB disconnect, device number 23
[ 1616.940078][ T5743] usb 1-1: Using ep0 maxpacket: 16
[ 1616.942599][ T5743] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[ 1616.942627][ T5743] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1616.948217][ T5743] usb 1-1: config 0 descriptor??
[ 1616.954260][ T5743] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[ 1617.155053][ T5743] usb 1-1: Detected FT232A
[ 1617.161929][ T5743] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1617.235135][T28294] netlink: 'syz.2.6909': attribute type 18 has an invalid length.
[ 1617.359202][T24818] usb 1-1: USB disconnect, device number 46
[ 1617.401075][T24818] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1617.412241][T24818] ftdi_sio 1-1:0.0: device disconnected
[ 1617.635838][   T37] kauditd_printk_skb: 2 callbacks suppressed
[ 1617.635855][   T37] audit: type=1326 audit(1785839235.652:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.635902][   T37] audit: type=1326 audit(1785839235.652:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.635940][   T37] audit: type=1326 audit(1785839235.652:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.636704][   T37] audit: type=1326 audit(1785839235.652:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.639239][   T37] audit: type=1326 audit(1785839235.652:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.646772][   T37] audit: type=1326 audit(1785839235.652:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.646818][   T37] audit: type=1326 audit(1785839235.662:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.650864][   T37] audit: type=1326 audit(1785839235.662:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1617.650912][   T37] audit: type=1326 audit(1785839235.672:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28296 comm="syz.8.6910" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f63d8abe84e code=0x7ffc0000
[ 1617.654874][T28297] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64
[ 1618.841164][T28040] team0: Port device team_slave_0 added
[ 1618.862059][T28040] team0: Port device team_slave_1 added
[ 1618.905350][T28307] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6914'.
[ 1619.494330][T28318] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6916'.
[ 1619.633189][T28322] FAULT_INJECTION: forcing a failure.
[ 1619.633189][T28322] name failslab, interval 1, probability 0, space 0, times 0
[ 1619.633224][T28322] CPU: 0 UID: 0 PID: 28322 Comm: syz.2.6919 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1619.633250][T28322] Tainted: [L]=SOFTLOCKUP
[ 1619.633257][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1619.633268][T28322] Call Trace:
[ 1619.633276][T28322]  <TASK>
[ 1619.633285][T28322]  dump_stack_lvl+0xe8/0x150
[ 1619.633319][T28322]  should_fail_ex+0x467/0x600
[ 1619.633352][T28322]  should_failslab+0xa8/0x100
[ 1619.633378][T28322]  __kmalloc_cache_noprof+0xa0/0x6b0
[ 1619.633399][T28322]  ? tomoyo_init_log+0x195/0x1fa0
[ 1619.633435][T28322]  ? tomoyo_init_log+0x195/0x1fa0
[ 1619.633475][T28322]  tomoyo_init_log+0x195/0x1fa0
[ 1619.633505][T28322]  ? stack_depot_save_flags+0x33/0x800
[ 1619.633532][T28322]  ? __lock_acquire+0x683/0x2ce0
[ 1619.633557][T28322]  ? format_decode+0xdc/0xda0
[ 1619.633580][T28322]  ? widen_string+0x3b/0x2a0
[ 1619.633599][T28322]  ? string+0x28a/0x2d0
[ 1619.633622][T28322]  ? __pfx_tomoyo_init_log+0x10/0x10
[ 1619.633647][T28322]  ? tomoyo_profile+0x11/0x50
[ 1619.633671][T28322]  ? tomoyo_domain_quota_is_ok+0x422/0x570
[ 1619.633697][T28322]  tomoyo_supervisor+0x35f/0x1560
[ 1619.633735][T28322]  ? __pfx_tomoyo_supervisor+0x10/0x10
[ 1619.633768][T28322]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1619.633787][T28322]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1619.633815][T28322]  ? tomoyo_check_path_acl+0xec/0x1d0
[ 1619.633835][T28322]  ? tomoyo_check_acl+0x386/0x400
[ 1619.633852][T28322]  ? __pfx_tomoyo_check_path_acl+0x10/0x10
[ 1619.633875][T28322]  tomoyo_path_permission+0x262/0x3b0
[ 1619.633897][T28322]  tomoyo_path_perm+0x3f3/0x560
[ 1619.633917][T28322]  ? tomoyo_path_perm+0x251/0x560
[ 1619.633936][T28322]  ? __pfx_tomoyo_path_perm+0x10/0x10
[ 1619.633964][T28322]  ? get_pid_task+0x20/0x1f0
[ 1619.634008][T28322]  ? __fget_files+0x2a/0x420
[ 1619.634032][T28322]  ? __fget_files+0x2a/0x420
[ 1619.634052][T28322]  ? __fget_files+0x2a/0x420
[ 1619.634089][T28322]  security_inode_getattr+0x12b/0x310
[ 1619.634111][T28322]  __x64_sys_newfstat+0x133/0x270
[ 1619.634132][T28322]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1619.634157][T28322]  ? __pfx___x64_sys_newfstat+0x10/0x10
[ 1619.634195][T28322]  ? __pfx_ksys_write+0x10/0x10
[ 1619.634227][T28322]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.634248][T28322]  do_syscall_64+0x174/0x580
[ 1619.634271][T28322]  ? trace_irq_disable+0x3b/0x140
[ 1619.634289][T28322]  ? clear_bhb_loop+0x40/0x90
[ 1619.634313][T28322]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.634332][T28322] RIP: 0033:0x7fd44a45e019
[ 1619.634350][T28322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1619.634366][T28322] RSP: 002b:00007fd4486b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005
[ 1619.634386][T28322] RAX: ffffffffffffffda RBX: 00007fd44a6e5fa0 RCX: 00007fd44a45e019
[ 1619.634400][T28322] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006
[ 1619.634417][T28322] RBP: 00007fd4486b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1619.634430][T28322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1619.634441][T28322] R13: 00007fd44a6e6038 R14: 00007fd44a6e5fa0 R15: 00007fff37af75a8
[ 1619.634473][T28322]  </TASK>
[ 1620.308847][T28040] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1620.308872][T28040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.308899][T28040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1620.321841][T28040] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1620.321857][T28040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1620.321883][T28040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1620.525790][T28343] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6924'.
[ 1620.819880][T24818] usb 7-1: new full-speed USB device number 88 using dummy_hcd
[ 1620.895039][T28040] hsr_slave_0: entered promiscuous mode
[ 1620.896356][T28040] hsr_slave_1: entered promiscuous mode
[ 1620.996618][T28358] sg_write: data in/out 355776/136 bytes for SCSI command 0x0-- guessing data in;
[ 1620.996618][T28358]    program syz.8.6928 not setting count and/or reply_len properly
[ 1621.032659][T24818] usb 7-1: config 8 has an invalid interface number: 212 but max is 1
[ 1621.032690][T24818] usb 7-1: config 8 has an invalid descriptor of length 231, skipping remainder of the config
[ 1621.032710][T24818] usb 7-1: config 8 has 1 interface, different from the descriptor's value: 2
[ 1621.032731][T24818] usb 7-1: config 8 has no interface number 0
[ 1621.032773][T24818] usb 7-1: config 8 interface 212 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[ 1621.032799][T24818] usb 7-1: config 8 interface 212 has no altsetting 0
[ 1621.035130][T24818] usb 7-1: New USB device found, idVendor=19d2, idProduct=7fc1, bcdDevice=e8.57
[ 1621.035158][T24818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1621.035178][T24818] usb 7-1: Product: syz
[ 1621.035191][T24818] usb 7-1: Manufacturer: syz
[ 1621.035205][T24818] usb 7-1: SerialNumber: syz
[ 1621.365158][T28363] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4)
[ 1621.365184][T28363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1621.399209][T28363] vhci_hcd vhci_hcd.0: Device attached
[ 1621.424201][T28363] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(6)
[ 1621.424228][T28363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1621.424281][T28363] vhci_hcd vhci_hcd.0: Device attached
[ 1621.439019][T24818] rndis_host 7-1:8.212: rndis: master #0/0000000000000000 slave #1/0000000000000000
[ 1621.476136][T24818] usb 7-1: USB disconnect, device number 88
[ 1621.496857][T28368] vhci_hcd vhci_hcd.0: pdev(8) rhport(3) sockfd(11)
[ 1621.496891][T28368] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1621.496955][T28368] vhci_hcd vhci_hcd.0: Device attached
[ 1621.541550][   T43] hsr_slave_0: left promiscuous mode
[ 1621.582951][   T43] hsr_slave_1: left promiscuous mode
[ 1621.589306][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1621.589333][   T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1621.680094][   T10] usb 49-1: new high-speed USB device number 2 using vhci_hcd
[ 1621.745463][T28363] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(8)
[ 1621.745492][T28363] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1621.747862][   T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1621.747885][   T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1621.800541][T25477] usb 9-1: new low-speed USB device number 24 using dummy_hcd
[ 1621.834159][T28363] vhci_hcd vhci_hcd.0: Device attached
[ 1622.353443][T25477] usb 9-1: config 179 has an invalid interface number: 65 but max is 0
[ 1622.353473][T25477] usb 9-1: config 179 has no interface number 0
[ 1622.353519][T25477] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[ 1622.353547][T25477] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[ 1622.353571][T25477] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[ 1622.353597][T25477] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1622.353629][T25477] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1622.353672][T25477] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1622.353694][T25477] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1622.527006][T25477] xpad 9-1:179.65: probe with driver xpad failed with error -5
[ 1622.530941][   T43] veth1_macvtap: left promiscuous mode
[ 1622.531271][   T43] veth0_macvtap: left promiscuous mode
[ 1622.531511][   T43] veth1_vlan: left promiscuous mode
[ 1622.563465][   T43] veth0_vlan: left promiscuous mode
[ 1622.593809][T28388] 9p: Bad value for 'wfdno'
[ 1622.750774][ T5837] usb 9-1: USB disconnect, device number 24
[ 1622.765317][T28376] vhci_hcd: connection closed
[ 1622.772106][T17529] vhci_hcd vhci_hcd.8: stop threads
[ 1622.772129][T17529] vhci_hcd vhci_hcd.8: release socket
[ 1622.788781][T28382] vhci_hcd: connection closed
[ 1622.789400][T28372] vhci_hcd: connection closed
[ 1622.790193][T28370] vhci_hcd: connection reset by peer
[ 1622.841700][T17529] vhci_hcd vhci_hcd.8: disconnect device
[ 1622.844848][T17529] vhci_hcd vhci_hcd.8: stop threads
[ 1622.844871][T17529] vhci_hcd vhci_hcd.8: release socket
[ 1622.844935][T17529] vhci_hcd vhci_hcd.8: disconnect device
[ 1622.847006][T17529] vhci_hcd vhci_hcd.8: stop threads
[ 1622.847023][T17529] vhci_hcd vhci_hcd.8: release socket
[ 1622.847084][T17529] vhci_hcd vhci_hcd.8: disconnect device
[ 1622.847344][T17529] vhci_hcd vhci_hcd.8: stop threads
[ 1622.847358][T17529] vhci_hcd vhci_hcd.8: release socket
[ 1622.847390][T17529] vhci_hcd vhci_hcd.8: disconnect device
[ 1624.609882][T28421] FAULT_INJECTION: forcing a failure.
[ 1624.609882][T28421] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1624.609918][T28421] CPU: 1 UID: 0 PID: 28421 Comm: syz.0.6947 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1624.609948][T28421] Tainted: [L]=SOFTLOCKUP
[ 1624.609954][T28421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1624.609964][T28421] Call Trace:
[ 1624.609971][T28421]  <TASK>
[ 1624.609979][T28421]  dump_stack_lvl+0xe8/0x150
[ 1624.610012][T28421]  should_fail_ex+0x467/0x600
[ 1624.610046][T28421]  _copy_from_user+0x2d/0xb0
[ 1624.610071][T28421]  ___sys_sendmsg+0x1c6/0x360
[ 1624.610096][T28421]  ? __lock_acquire+0x683/0x2ce0
[ 1624.610120][T28421]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1624.610176][T28421]  ? __fget_files+0x2a/0x420
[ 1624.610197][T28421]  ? __fget_files+0x3a8/0x420
[ 1624.610222][T28421]  __x64_sys_sendmsg+0x1b7/0x290
[ 1624.610247][T28421]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1624.610286][T28421]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1624.610305][T28421]  do_syscall_64+0x174/0x580
[ 1624.610329][T28421]  ? trace_irq_disable+0x3b/0x140
[ 1624.610347][T28421]  ? clear_bhb_loop+0x40/0x90
[ 1624.610369][T28421]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1624.610388][T28421] RIP: 0033:0x7f5578ede019
[ 1624.610405][T28421] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1624.610420][T28421] RSP: 002b:00007f5577136028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1624.610441][T28421] RAX: ffffffffffffffda RBX: 00007f5579165fa0 RCX: 00007f5578ede019
[ 1624.610454][T28421] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[ 1624.610466][T28421] RBP: 00007f5577136090 R08: 0000000000000000 R09: 0000000000000000
[ 1624.610487][T28421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1624.610498][T28421] R13: 00007f5579166038 R14: 00007f5579165fa0 R15: 00007ffef1ab3be8
[ 1624.610528][T28421]  </TASK>
[ 1624.763232][T28422] overlayfs: overlapping lowerdir path
[ 1625.811096][   T43] team0 (unregistering): Port device team_slave_1 removed
[ 1625.854010][   T43] team0 (unregistering): Port device team_slave_0 removed
[ 1625.970112][ T5723] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 1626.120292][ T5723] usb 1-1: Using ep0 maxpacket: 8
[ 1626.126798][ T5723] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1626.126825][ T5723] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1626.149465][ T5723] usb 1-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[ 1626.149494][ T5723] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1626.149514][ T5723] usb 1-1: Product: syz
[ 1626.149528][ T5723] usb 1-1: Manufacturer: syz
[ 1626.149542][ T5723] usb 1-1: SerialNumber: syz
[ 1626.160518][ T5723] usb 1-1: config 0 descriptor??
[ 1626.395255][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6958'.
[ 1626.395281][T28449] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6958'.
[ 1626.519852][ T5264] 8021q: adding VLAN 0 to HW filter on device eth18
[ 1626.694812][T28450] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6958'.
[ 1626.936338][   T10] vhci_hcd vhci_hcd.8: vhci_device speed not set
[ 1627.011884][T28463] FAULT_INJECTION: forcing a failure.
[ 1627.011884][T28463] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1627.011920][T28463] CPU: 0 UID: 0 PID: 28463 Comm: syz.2.6963 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1627.011946][T28463] Tainted: [L]=SOFTLOCKUP
[ 1627.011952][T28463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1627.011963][T28463] Call Trace:
[ 1627.011971][T28463]  <TASK>
[ 1627.011979][T28463]  dump_stack_lvl+0xe8/0x150
[ 1627.012010][T28463]  should_fail_ex+0x467/0x600
[ 1627.012044][T28463]  _copy_from_user+0x2d/0xb0
[ 1627.012067][T28463]  copy_from_bpfptr+0x5c/0x90
[ 1627.012089][T28463]  bpf_prog_load+0xb92/0x1c00
[ 1627.012128][T28463]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1627.012172][T28463]  __sys_bpf+0xd0d/0xd90
[ 1627.012199][T28463]  ? __pfx___sys_bpf+0x10/0x10
[ 1627.012221][T28463]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1627.012250][T28463]  ? rt_mutex_slowunlock+0x219/0x460
[ 1627.012278][T28463]  ? ksys_write+0x248/0x270
[ 1627.012297][T28463]  ? __pfx_ksys_write+0x10/0x10
[ 1627.012317][T28463]  __x64_sys_bpf+0xba/0xd0
[ 1627.012340][T28463]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.012360][T28463]  do_syscall_64+0x174/0x580
[ 1627.012384][T28463]  ? trace_irq_disable+0x3b/0x140
[ 1627.012401][T28463]  ? clear_bhb_loop+0x40/0x90
[ 1627.012423][T28463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1627.012441][T28463] RIP: 0033:0x7fd44a45e019
[ 1627.012458][T28463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1627.012473][T28463] RSP: 002b:00007fd4486b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1627.012494][T28463] RAX: ffffffffffffffda RBX: 00007fd44a6e5fa0 RCX: 00007fd44a45e019
[ 1627.012508][T28463] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005
[ 1627.012520][T28463] RBP: 00007fd4486b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1627.012532][T28463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1627.012543][T28463] R13: 00007fd44a6e6038 R14: 00007fd44a6e5fa0 R15: 00007fff37af75a8
[ 1627.012574][T28463]  </TASK>
[ 1627.420094][ T5743] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1627.570172][ T5743] usb 7-1: Using ep0 maxpacket: 16
[ 1627.573137][ T5743] usb 7-1: no configurations
[ 1627.573154][ T5743] usb 7-1: can't read configurations, error -22
[ 1627.666514][ T5798] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1627.700181][ T5743] usb 7-1: new high-speed USB device number 90 using dummy_hcd
[ 1627.850181][ T5743] usb 7-1: Using ep0 maxpacket: 16
[ 1627.851622][ T5743] usb 7-1: no configurations
[ 1627.851638][ T5743] usb 7-1: can't read configurations, error -22
[ 1627.852019][ T5743] usb usb7-port1: attempt power cycle
[ 1628.193820][ T5798] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[ 1628.193852][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1628.193873][ T5798] usb 3-1: Product: syz
[ 1628.193887][ T5798] usb 3-1: SerialNumber: syz
[ 1628.285360][ T5743] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[ 1628.303768][ T5798] usb 3-1: config 0 descriptor??
[ 1628.321917][ T5743] usb 7-1: Using ep0 maxpacket: 16
[ 1628.324195][ T5743] usb 7-1: no configurations
[ 1628.324211][ T5743] usb 7-1: can't read configurations, error -22
[ 1628.450169][ T5743] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[ 1628.481076][ T5743] usb 7-1: Using ep0 maxpacket: 16
[ 1628.500229][ T5743] usb 7-1: no configurations
[ 1628.500251][ T5743] usb 7-1: can't read configurations, error -22
[ 1628.504372][ T5743] usb usb7-port1: unable to enumerate USB device
[ 1628.523691][T28472] qrtr: Invalid version 0
[ 1628.554158][ T5798] usb 3-1: USB disconnect, device number 50
[ 1628.671417][T25477] usb 1-1: USB disconnect, device number 47
[ 1630.126259][T28498] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6970'.
[ 1630.590528][T28508] Line length is too long: Should be less than 4094
[ 1630.687709][T28511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6976'.
[ 1630.817440][ T5264] 8021q: adding VLAN 0 to HW filter on device eth19
[ 1631.696697][T28521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6979'.
[ 1631.696735][T28521] FAULT_INJECTION: forcing a failure.
[ 1631.696735][T28521] name failslab, interval 1, probability 0, space 0, times 0
[ 1631.696753][T28521] CPU: 0 UID: 0 PID: 28521 Comm: syz.8.6979 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1631.696768][T28521] Tainted: [L]=SOFTLOCKUP
[ 1631.696772][T28521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1631.696779][T28521] Call Trace:
[ 1631.696783][T28521]  <TASK>
[ 1631.696788][T28521]  dump_stack_lvl+0xe8/0x150
[ 1631.696810][T28521]  should_fail_ex+0x467/0x600
[ 1631.696829][T28521]  should_failslab+0xa8/0x100
[ 1631.696844][T28521]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1631.696855][T28521]  ? skb_clone+0x212/0x3a0
[ 1631.696870][T28521]  ? skb_clone+0x212/0x3a0
[ 1631.696887][T28521]  skb_clone+0x212/0x3a0
[ 1631.696901][T28521]  __netlink_deliver_tap+0x413/0x860
[ 1631.696922][T28521]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1631.696936][T28521]  netlink_deliver_tap+0x19c/0x1b0
[ 1631.696957][T28521]  netlink_sendskb+0x68/0x140
[ 1631.696973][T28521]  netlink_rcv_skb+0x2a4/0x4a0
[ 1631.696987][T28521]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1631.697001][T28521]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1631.697013][T28521]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1631.697039][T28521]  netlink_unicast+0x7f5/0x990
[ 1631.697056][T28521]  netlink_sendmsg+0x813/0xb40
[ 1631.697074][T28521]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1631.697094][T28521]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1631.697110][T28521]  ? __kernel_text_address+0xd/0x30
[ 1631.697122][T28521]  ? unwind_get_return_address+0x4d/0x90
[ 1631.697136][T28521]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1631.697148][T28521]  sock_sendmsg_nosec+0x13a/0x180
[ 1631.697161][T28521]  ____sys_sendmsg+0x565/0x870
[ 1631.697175][T28521]  ? __might_fault+0xaf/0x130
[ 1631.697190][T28521]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1631.697208][T28521]  ? import_iovec+0x73/0xa0
[ 1631.697223][T28521]  ___sys_sendmsg+0x2a5/0x360
[ 1631.697235][T28521]  ? __lock_acquire+0x683/0x2ce0
[ 1631.697249][T28521]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1631.697280][T28521]  ? __fget_files+0x2a/0x420
[ 1631.697291][T28521]  ? __fget_files+0x3a8/0x420
[ 1631.697307][T28521]  __x64_sys_sendmsg+0x1b7/0x290
[ 1631.697321][T28521]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1631.697344][T28521]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1631.697360][T28521]  do_syscall_64+0x174/0x580
[ 1631.697382][T28521]  ? trace_irq_disable+0x3b/0x140
[ 1631.697400][T28521]  ? clear_bhb_loop+0x40/0x90
[ 1631.697424][T28521]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1631.697443][T28521] RIP: 0033:0x7f63d8afe019
[ 1631.697582][T28521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1631.697598][T28521] RSP: 002b:00007f63d6d56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1631.697612][T28521] RAX: ffffffffffffffda RBX: 00007f63d8d85fa0 RCX: 00007f63d8afe019
[ 1631.697620][T28521] RDX: 0000000004008084 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1631.697626][T28521] RBP: 00007f63d6d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1631.697633][T28521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1631.697639][T28521] R13: 00007f63d8d86038 R14: 00007f63d8d85fa0 R15: 00007ffc2287bb58
[ 1631.697664][T28521]  </TASK>
[ 1632.309348][T28040] netdevsim netdevsim9 netdevsim0: renamed from eth0
[ 1632.339404][T28040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1632.342884][T28040] netdevsim netdevsim9 netdevsim1: renamed from eth1
[ 1632.360132][ T5837] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[ 1632.398041][T28040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1632.488164][T28040] netdevsim netdevsim9 netdevsim2: renamed from eth2
[ 1632.520146][ T5837] usb 7-1: Using ep0 maxpacket: 16
[ 1632.522204][ T5837] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.522229][ T5837] usb 7-1: config 0 has no interfaces?
[ 1632.537610][ T5837] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[ 1632.537640][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1632.537661][ T5837] usb 7-1: Product: syz
[ 1632.537675][ T5837] usb 7-1: Manufacturer: syz
[ 1632.537689][ T5837] usb 7-1: SerialNumber: syz
[ 1632.554134][ T5837] usb 7-1: config 0 descriptor??
[ 1632.724292][T28040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1632.750991][T28040] netdevsim netdevsim9 netdevsim3: renamed from eth3
[ 1632.758174][T28552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6987'.
[ 1632.773438][ T5743] usb 7-1: USB disconnect, device number 93
[ 1632.905253][T28040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1632.999443][ T5264] 8021q: adding VLAN 0 to HW filter on device eth20
[ 1633.099296][T28561] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6989'.
[ 1633.120815][ T5837] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 1633.271542][ T5837] usb 9-1: not running at top speed; connect to a high speed hub
[ 1633.280854][ T5837] usb 9-1: config 0 has no interfaces?
[ 1633.298912][ T5837] usb 9-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00
[ 1633.298951][ T5837] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[ 1633.298972][ T5837] usb 9-1: Product: syz
[ 1633.298986][ T5837] usb 9-1: Manufacturer: syz
[ 1633.328914][ T5837] usb 9-1: config 0 descriptor??
[ 1633.882063][T14368] usb 9-1: USB disconnect, device number 25
[ 1633.972240][ T5798] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[ 1634.150426][ T5798] usb 1-1: Using ep0 maxpacket: 8
[ 1634.632936][T28040] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1634.900112][ T5701] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[ 1634.904664][T28040] 8021q: adding VLAN 0 to HW filter on device team0
[ 1634.957337][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1634.957447][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1635.066820][ T5701] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1635.066851][ T5701] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[ 1635.066890][ T5701] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00
[ 1635.066914][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1635.082790][ T5701] spcp8x5 7-1:1.0: SPCP8x5 converter detected
[ 1635.218333][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1635.218462][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1635.353428][ T5701] usb 7-1: SPCP8x5 converter now attached to ttyUSB0
[ 1635.570112][T24818] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 1635.820178][ T5701] usb 7-1: USB disconnect, device number 94
[ 1635.841917][T24818] usb 9-1: Using ep0 maxpacket: 16
[ 1635.888740][T24818] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1635.888765][T24818] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1635.907361][T24818] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1635.907392][T24818] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1635.907412][T24818] usb 9-1: Product: syz
[ 1635.907426][T24818] usb 9-1: Manufacturer: syz
[ 1635.907439][T24818] usb 9-1: SerialNumber: syz
[ 1635.920821][ T5701] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0
[ 1635.939833][ T5701] spcp8x5 7-1:1.0: device disconnected
[ 1636.119267][T24818] usb 9-1: 0:2 : does not exist
[ 1636.168484][T24818] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1636.328142][T28601] FAULT_INJECTION: forcing a failure.
[ 1636.328142][T28601] name failslab, interval 1, probability 0, space 0, times 0
[ 1636.328177][T28601] CPU: 0 UID: 0 PID: 28601 Comm: syz.2.7000 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1636.328202][T28601] Tainted: [L]=SOFTLOCKUP
[ 1636.328209][T28601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1636.328219][T28601] Call Trace:
[ 1636.328226][T28601]  <TASK>
[ 1636.328234][T28601]  dump_stack_lvl+0xe8/0x150
[ 1636.328269][T28601]  should_fail_ex+0x467/0x600
[ 1636.328301][T28601]  should_failslab+0xa8/0x100
[ 1636.328325][T28601]  __kmalloc_noprof+0xfe/0x780
[ 1636.328346][T28601]  ? tomoyo_encode+0x2ad/0x570
[ 1636.328368][T28601]  ? tomoyo_encode+0x2ad/0x570
[ 1636.328395][T28601]  tomoyo_encode+0x2ad/0x570
[ 1636.328424][T28601]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1636.328457][T28601]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1636.328478][T28601]  tomoyo_path_number_perm+0x246/0x5f0
[ 1636.328503][T28601]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1636.328523][T28601]  ? __lock_acquire+0x683/0x2ce0
[ 1636.328558][T28601]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1636.328582][T28601]  ? hook_file_ioctl+0x1f3/0x600
[ 1636.328599][T28601]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1636.328642][T28601]  ? __fget_files+0x2a/0x420
[ 1636.328665][T28601]  ? __fget_files+0x2a/0x420
[ 1636.328684][T28601]  ? __fget_files+0x3a8/0x420
[ 1636.328702][T28601]  ? __fget_files+0x2a/0x420
[ 1636.328726][T28601]  security_file_ioctl+0xc3/0x2a0
[ 1636.328751][T28601]  __se_sys_ioctl+0x47/0x170
[ 1636.328775][T28601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.328796][T28601]  do_syscall_64+0x174/0x580
[ 1636.328820][T28601]  ? trace_irq_disable+0x3b/0x140
[ 1636.328840][T28601]  ? clear_bhb_loop+0x40/0x90
[ 1636.328864][T28601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1636.328883][T28601] RIP: 0033:0x7fd44a45e019
[ 1636.328901][T28601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1636.328916][T28601] RSP: 002b:00007fd4486b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1636.328937][T28601] RAX: ffffffffffffffda RBX: 00007fd44a6e5fa0 RCX: 00007fd44a45e019
[ 1636.328951][T28601] RDX: 0000000000000000 RSI: 0000000080041285 RDI: 0000000000000004
[ 1636.328963][T28601] RBP: 00007fd4486b6090 R08: 0000000000000000 R09: 0000000000000000
[ 1636.328975][T28601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1636.328987][T28601] R13: 00007fd44a6e6038 R14: 00007fd44a6e5fa0 R15: 00007fff37af75a8
[ 1636.329019][T28601]  </TASK>
[ 1636.337787][T28601] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1636.600803][T24818] usb 9-1: USB disconnect, device number 26
[ 1636.911189][T22173] udevd[22173]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1637.024664][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1637.025720][ T5798] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1637.025755][ T5798] usb 1-1: can't read configurations, error -71
[ 1637.173965][T28616] netlink: 228 bytes leftover after parsing attributes in process `syz.8.7004'.
[ 1637.240679][T28616] FAULT_INJECTION: forcing a failure.
[ 1637.240679][T28616] name failslab, interval 1, probability 0, space 0, times 0
[ 1637.240715][T28616] CPU: 1 UID: 0 PID: 28616 Comm: syz.8.7004 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1637.240742][T28616] Tainted: [L]=SOFTLOCKUP
[ 1637.240750][T28616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1637.240761][T28616] Call Trace:
[ 1637.240769][T28616]  <TASK>
[ 1637.240777][T28616]  dump_stack_lvl+0xe8/0x150
[ 1637.240811][T28616]  should_fail_ex+0x467/0x600
[ 1637.240844][T28616]  should_failslab+0xa8/0x100
[ 1637.240868][T28616]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1637.240897][T28616]  ? skb_clone+0x212/0x3a0
[ 1637.240920][T28616]  ? skb_clone+0x212/0x3a0
[ 1637.240950][T28616]  skb_clone+0x212/0x3a0
[ 1637.240977][T28616]  __netlink_deliver_tap+0x413/0x860
[ 1637.241013][T28616]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1637.241038][T28616]  netlink_deliver_tap+0x19c/0x1b0
[ 1637.241064][T28616]  netlink_sendskb+0x68/0x140
[ 1637.241088][T28616]  netlink_rcv_skb+0x2a4/0x4a0
[ 1637.241113][T28616]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1637.241136][T28616]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1637.241172][T28616]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1637.241194][T28616]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1637.241223][T28616]  netlink_unicast+0x7f5/0x990
[ 1637.241255][T28616]  netlink_sendmsg+0x813/0xb40
[ 1637.241288][T28616]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1637.241313][T28616]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1637.241341][T28616]  ? __kernel_text_address+0xd/0x30
[ 1637.241360][T28616]  ? unwind_get_return_address+0x4d/0x90
[ 1637.241384][T28616]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1637.241406][T28616]  sock_sendmsg_nosec+0x13a/0x180
[ 1637.241429][T28616]  ____sys_sendmsg+0x565/0x870
[ 1637.241453][T28616]  ? __might_fault+0xaf/0x130
[ 1637.241481][T28616]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1637.241514][T28616]  ? import_iovec+0x73/0xa0
[ 1637.241540][T28616]  ___sys_sendmsg+0x2a5/0x360
[ 1637.241562][T28616]  ? __lock_acquire+0x683/0x2ce0
[ 1637.241589][T28616]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1637.241645][T28616]  ? __fget_files+0x2a/0x420
[ 1637.241664][T28616]  ? __fget_files+0x3a8/0x420
[ 1637.241695][T28616]  __x64_sys_sendmsg+0x1b7/0x290
[ 1637.241722][T28616]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1637.241764][T28616]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.241785][T28616]  do_syscall_64+0x174/0x580
[ 1637.241809][T28616]  ? trace_irq_disable+0x3b/0x140
[ 1637.241829][T28616]  ? clear_bhb_loop+0x40/0x90
[ 1637.241852][T28616]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1637.241870][T28616] RIP: 0033:0x7f63d8afe019
[ 1637.241895][T28616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1637.241911][T28616] RSP: 002b:00007f63d6d56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1637.241932][T28616] RAX: ffffffffffffffda RBX: 00007f63d8d85fa0 RCX: 00007f63d8afe019
[ 1637.241947][T28616] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000000000000003
[ 1637.241959][T28616] RBP: 00007f63d6d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1637.241972][T28616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1637.241984][T28616] R13: 00007f63d8d86038 R14: 00007f63d8d85fa0 R15: 00007ffc2287bb58
[ 1637.242016][T28616]  </TASK>
[ 1637.440358][T24818] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1637.593109][T24818] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[ 1637.593136][T24818] usb 3-1: config 1 has no interface number 0
[ 1637.593177][T24818] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1637.593204][T24818] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1637.593229][T24818] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1637.596303][T24818] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1637.596330][T24818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1637.596351][T24818] usb 3-1: Product: syz
[ 1637.596364][T24818] usb 3-1: Manufacturer: syz
[ 1637.596379][T24818] usb 3-1: SerialNumber: syz
[ 1637.628490][T28611] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1637.860328][T28622] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7006'.
[ 1637.956134][T24818] usb 3-1: Error in usbnet_get_endpoints (-71)
[ 1637.979523][T24818] usb 3-1: USB disconnect, device number 51
[ 1638.646959][T28040] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1638.849337][T28657] overlayfs: overlapping lowerdir path
[ 1639.021618][T28660] netlink: 156 bytes leftover after parsing attributes in process `syz.6.7017'.
[ 1641.849872][T28692] syz.6.7024 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1641.863531][   T37] kauditd_printk_skb: 17 callbacks suppressed
[ 1641.863550][   T37] audit: type=1326 audit(1785839259.842:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbfce019 code=0x7ffc0000
[ 1641.863594][   T37] audit: type=1326 audit(1785839259.862:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49fbfce019 code=0x7ffc0000
[ 1641.863626][   T37] audit: type=1326 audit(1785839259.862:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49fbf8e84e code=0x7ffc0000
[ 1641.863664][   T37] audit: type=1326 audit(1785839259.862:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1641.863706][   T37] audit: type=1326 audit(1785839259.862:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1641.863744][   T37] audit: type=1326 audit(1785839259.872:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1641.863784][   T37] audit: type=1326 audit(1785839259.872:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1641.949134][T28040] veth0_vlan: entered promiscuous mode
[ 1641.961190][   T37] audit: type=1326 audit(1785839259.982:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1642.031754][   T37] audit: type=1326 audit(1785839260.052:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1642.090302][T24818] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 1642.090880][   T37] audit: type=1326 audit(1785839260.112:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28690 comm="syz.6.7024" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f49fbfcdcab code=0x7ffc0000
[ 1642.096012][T28040] veth1_vlan: entered promiscuous mode
[ 1642.240813][T24818] usb 7-1: Using ep0 maxpacket: 16
[ 1642.296855][T24818] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7
[ 1642.476583][T14368] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1642.650750][T14368] usb 3-1: Using ep0 maxpacket: 8
[ 1642.998172][T24818] usb 7-1: string descriptor 0 read error: -22
[ 1642.998318][T24818] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[ 1642.998343][T24818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1643.061897][T24818] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1643.061969][T24818] usb 7-1: MIDIStreaming interface descriptor not found
[ 1644.593836][T28040] veth0_macvtap: entered promiscuous mode
[ 1644.671496][T28040] veth1_macvtap: entered promiscuous mode
[ 1644.894007][T28040] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1644.979479][T24818] usb 7-1: USB disconnect, device number 95
[ 1645.066229][T28040] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1645.297348][T14368] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 1645.298101][T14368] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 1645.298124][T14368] usb 3-1: can't read configurations, error -71
[ 1645.379290][T17529] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.402567][T17540] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.403387][   T43] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1645.403461][   T43] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1647.670589][   T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1647.670672][   T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1648.010108][T17538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1648.010130][T17538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1648.510159][   T36] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[ 1648.666470][   T36] usb 1-1: Using ep0 maxpacket: 16
[ 1648.670704][   T36] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30
[ 1648.670750][   T36] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254
[ 1648.670778][   T36] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1648.670811][   T36] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00
[ 1648.670833][   T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1648.702659][   T36] usb 1-1: config 0 descriptor??
[ 1648.753176][T24818] usb 7-1: new full-speed USB device number 96 using dummy_hcd
[ 1648.919747][T24818] usb 7-1: config 0 has an invalid interface number: 8 but max is 0
[ 1648.919774][T24818] usb 7-1: config 0 has no interface number 0
[ 1648.919817][T24818] usb 7-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F
[ 1648.919842][T24818] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[ 1648.919864][T24818] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1648.925184][T24818] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1648.925213][T24818] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1648.925234][T24818] usb 7-1: Product: syz
[ 1648.925249][T24818] usb 7-1: SerialNumber: syz
[ 1648.953194][T24818] usb 7-1: config 0 descriptor??
[ 1649.005737][T24818] cm109 7-1:0.8: invalid payload size 0, expected 4
[ 1649.131475][   T36] hid (null): usage index exceeded
[ 1649.131496][   T36] hid (null): bogus close delimiter
[ 1649.131509][   T36] hid (null): unknown global tag 0xe
[ 1649.166321][   T36] logitech-djreceiver 0003:046D:C51B.0051: ignoring exceeding usage max
[ 1649.167550][   T36] logitech-djreceiver 0003:046D:C51B.0051: ignoring exceeding usage max
[ 1649.167570][   T36] logitech-djreceiver 0003:046D:C51B.0051: usage index exceeded
[ 1649.167594][   T36] logitech-djreceiver 0003:046D:C51B.0051: item 0 2 2 2 parsing failed
[ 1649.178313][   T36] logitech-djreceiver 0003:046D:C51B.0051: logi_dj_probe: parse failed
[ 1649.178387][   T36] logitech-djreceiver 0003:046D:C51B.0051: probe with driver logitech-djreceiver failed with error -22
[ 1649.193268][T24818] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input31
[ 1649.331752][ T5798] usb 1-1: USB disconnect, device number 50
[ 1649.345918][    C1] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90
[ 1649.632465][   T36] usb 7-1: USB disconnect, device number 96
[ 1649.719691][   T37] kauditd_printk_skb: 28 callbacks suppressed
[ 1649.719708][   T37] audit: type=1326 audit(1785839267.732:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.719749][   T37] audit: type=1326 audit(1785839267.732:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.792624][   T37] audit: type=1326 audit(1785839267.792:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.792675][   T37] audit: type=1326 audit(1785839267.792:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.792715][   T37] audit: type=1326 audit(1785839267.792:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.792751][   T37] audit: type=1326 audit(1785839267.792:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.792787][   T37] audit: type=1326 audit(1785839267.792:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.799581][   T37] audit: type=1326 audit(1785839267.812:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.799632][   T37] audit: type=1326 audit(1785839267.812:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1649.799669][   T37] audit: type=1326 audit(1785839267.812:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28768 comm="syz.8.7039" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63d8afe019 code=0x7ffc0000
[ 1650.043898][   T36] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1651.790742][T24818] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[ 1652.462651][T24818] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[ 1652.462685][T24818] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[ 1652.462712][T24818] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1652.464968][T24818] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[ 1652.464999][T24818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.465019][T24818] usb 1-1: Product: syz
[ 1652.465034][T24818] usb 1-1: Manufacturer: syz
[ 1652.465048][T24818] usb 1-1: SerialNumber: syz
[ 1652.490500][T24818] usb 1-1: config 0 descriptor??
[ 1652.491347][T28791] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1652.506999][T24818] usb 1-1: ucan: probing device on interface #0
[ 1652.507052][T24818] usb 1-1: ucan: invalid endpoint configuration
[ 1652.507068][T24818] usb 1-1: ucan: probe failed; try to update the device firmware
[ 1652.732804][ T5723] usb 1-1: USB disconnect, device number 51
[ 1652.991537][ T5798] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[ 1652.993518][T24818] usb 7-1: new high-speed USB device number 97 using dummy_hcd
[ 1653.022201][T28815] cgroup: Unexpected value for 'all'
[ 1653.144702][ T5798] usb 10-1: config 1 has an invalid interface number: 7 but max is 0
[ 1653.144728][ T5798] usb 10-1: config 1 has no interface number 0
[ 1653.144768][ T5798] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1653.144794][ T5798] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1653.144819][ T5798] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1653.147360][ T5798] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1653.147390][ T5798] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.147412][ T5798] usb 10-1: Product: syz
[ 1653.147426][ T5798] usb 10-1: Manufacturer: syz
[ 1653.147440][ T5798] usb 10-1: SerialNumber: syz
[ 1653.195632][T24818] usb 7-1: config 1 has an invalid interface number: 7 but max is 0
[ 1653.195658][T24818] usb 7-1: config 1 has no interface number 0
[ 1653.195699][T24818] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1653.195726][T24818] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1653.195751][T24818] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1653.198255][T24818] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1653.198283][T24818] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1653.198303][T24818] usb 7-1: Product: syz
[ 1653.198316][T24818] usb 7-1: Manufacturer: syz
[ 1653.198330][T24818] usb 7-1: SerialNumber: syz
[ 1653.238582][T28805] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[ 1653.357631][T28808] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1653.512848][T24818] usb 7-1: Error in usbnet_get_endpoints (-71)
[ 1653.591500][T24818] usb 7-1: USB disconnect, device number 97
[ 1654.175170][ T5798] usb 10-1: Error in usbnet_get_endpoints (-71)
[ 1654.214857][ T5798] usb 10-1: USB disconnect, device number 2
[ 1654.230087][ T5739] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1655.250133][ T5739] usb 1-1: device descriptor read/64, error -71
[ 1655.644318][ T5739] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1655.842053][ T5739] usb 1-1: device descriptor read/64, error -71
[ 1655.965204][ T5739] usb usb1-port1: attempt power cycle
[ 1656.684665][ T5739] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1657.089063][ T5739] usb 1-1: device descriptor read/8, error -71
[ 1657.565861][T11418] Bluetooth: hci1: unexpected cc 0x0c05 length: 4 > 1
[ 1661.150150][ T5723] usb 7-1: new high-speed USB device number 98 using dummy_hcd
[ 1661.305494][ T5723] usb 7-1: Using ep0 maxpacket: 16
[ 1661.866174][ T5723] usb 7-1: config 6 has an invalid interface number: 39 but max is 0
[ 1661.866202][ T5723] usb 7-1: config 6 has no interface number 0
[ 1661.866244][ T5723] usb 7-1: config 6 interface 39 altsetting 5 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1661.866266][ T5723] usb 7-1: config 6 interface 39 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 0
[ 1661.866288][ T5723] usb 7-1: config 6 interface 39 has no altsetting 0
[ 1661.873299][ T5723] usb 7-1: New USB device found, idVendor=0bb4, idProduct=0a79, bcdDevice=7a.aa
[ 1661.873326][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.873347][ T5723] usb 7-1: Product: syz
[ 1661.873361][ T5723] usb 7-1: Manufacturer: syz
[ 1661.873374][ T5723] usb 7-1: SerialNumber: syz
[ 1662.455950][ T5723] ipaq 7-1:6.39: PocketPC PDA converter detected
[ 1662.456232][ T5723] usb 7-1: active config #6 != 1 ??
[ 1662.642013][ T5723] usb 7-1: USB disconnect, device number 98
[ 1662.758222][T28913] FAULT_INJECTION: forcing a failure.
[ 1662.758222][T28913] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1662.758387][T28913] CPU: 0 UID: 0 PID: 28913 Comm: syz.6.7075 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1662.758416][T28913] Tainted: [L]=SOFTLOCKUP
[ 1662.758424][T28913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1662.758436][T28913] Call Trace:
[ 1662.758443][T28913]  <TASK>
[ 1662.758452][T28913]  dump_stack_lvl+0xe8/0x150
[ 1662.758487][T28913]  should_fail_ex+0x467/0x600
[ 1662.758522][T28913]  _copy_from_user+0x2d/0xb0
[ 1662.758546][T28913]  ___sys_sendmsg+0x1c6/0x360
[ 1662.758571][T28913]  ? __lock_acquire+0x683/0x2ce0
[ 1662.758598][T28913]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1662.758655][T28913]  ? __fget_files+0x2a/0x420
[ 1662.758677][T28913]  ? __fget_files+0x3a8/0x420
[ 1662.758706][T28913]  __x64_sys_sendmsg+0x1b7/0x290
[ 1662.758733][T28913]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1662.758774][T28913]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.758796][T28913]  do_syscall_64+0x174/0x580
[ 1662.758822][T28913]  ? trace_irq_disable+0x3b/0x140
[ 1662.758842][T28913]  ? clear_bhb_loop+0x40/0x90
[ 1662.758865][T28913]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.758884][T28913] RIP: 0033:0x7f49fbfce019
[ 1662.758902][T28913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1662.758917][T28913] RSP: 002b:00007f49fa226028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1662.758937][T28913] RAX: ffffffffffffffda RBX: 00007f49fc255fa0 RCX: 00007f49fbfce019
[ 1662.758951][T28913] RDX: 0000000000008001 RSI: 0000200000000040 RDI: 0000000000000003
[ 1662.758962][T28913] RBP: 00007f49fa226090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.758981][T28913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.758991][T28913] R13: 00007f49fc256038 R14: 00007f49fc255fa0 R15: 00007fff7ad7f068
[ 1662.759020][T28913]  </TASK>
[ 1664.420273][ T5798] usb 7-1: new high-speed USB device number 99 using dummy_hcd
[ 1664.600277][ T5798] usb 7-1: Using ep0 maxpacket: 8
[ 1664.604622][ T5798] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1664.606773][ T5798] usb 7-1: config 10 has an invalid interface number: 91 but max is 0
[ 1664.606799][ T5798] usb 7-1: config 10 has no interface number 0
[ 1664.606830][ T5798] usb 7-1: config 10 interface 91 has no altsetting 0
[ 1664.613250][ T5798] usb 7-1: New USB device found, idVendor=097b, idProduct=61f6, bcdDevice=d4.9a
[ 1664.613288][ T5798] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1664.613309][ T5798] usb 7-1: Product: syz
[ 1664.613323][ T5798] usb 7-1: Manufacturer: syz
[ 1664.613338][ T5798] usb 7-1: SerialNumber: syz
[ 1665.382310][T28939] netlink: 'syz.2.7079': attribute type 18 has an invalid length.
[ 1665.559240][ T5798] uvcvideo 7-1:10.91: Found Unit with invalid ID 0
[ 1665.569281][ T5798] uvcvideo 7-1:10.91: Found UVC 0.40 device syz (097b:61f6)
[ 1665.569767][ T5798] uvcvideo 7-1:10.91: Entity type for entity Output 32771 was not initialized!
[ 1665.609895][ T5798] uvcvideo 7-1:10.91: Entity type for entity Media 2 was not initialized!
[ 1665.686399][ T5798] usb 7-1: USB disconnect, device number 99
[ 1665.741608][ T5723] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[ 1665.938357][T28955] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7086'.
[ 1666.023019][ T5723] usb 10-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64
[ 1666.023051][ T5723] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1666.023071][ T5723] usb 10-1: Product: syz
[ 1666.023085][ T5723] usb 10-1: Manufacturer: syz
[ 1666.023099][ T5723] usb 10-1: SerialNumber: syz
[ 1666.135341][ T5723] usb 10-1: config 0 descriptor??
[ 1666.165214][ T5723] hub 10-1:0.0: bad descriptor, ignoring hub
[ 1666.165609][ T5723] hub 10-1:0.0: probe with driver hub failed with error -5
[ 1666.176671][ T5723] f81232 10-1:0.0: f81534a converter detected
[ 1666.380180][T28947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1666.380772][T28947] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1667.939183][ T5723] f81534a ttyUSB0: f81232_set_register failed status: -71
[ 1667.939302][ T5723] f81534a ttyUSB0: probe with driver f81534a failed with error -5
[ 1668.023301][ T5723] usb 10-1: USB disconnect, device number 3
[ 1668.027012][ T5723] f81232 10-1:0.0: device disconnected
[ 1668.316015][T28977] overlayfs: failed to resolve './file2': -2
[ 1668.600094][ T5723] usb 7-1: new high-speed USB device number 100 using dummy_hcd
[ 1668.638788][T28987] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1669.108492][ T1339] ieee802154 phy0 wpan0: encryption failed: -22
[ 1669.108563][ T1339] ieee802154 phy1 wpan1: encryption failed: -22
[ 1669.321929][ T5723] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64
[ 1669.321963][ T5723] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1669.321988][ T5723] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1669.516910][ T5723] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1669.516942][ T5723] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1669.516963][ T5723] usb 7-1: Product: ﻢ럖ꅳ呖ァꙧ
[ 1669.516979][ T5723] usb 7-1: Manufacturer: ⎭힨鰗ꉽ쿉⹛eㄉ㋪贲쌪͕먺陗켼༏똪淔쎽ᗡ呂䌢j쬆㤷䁛ಭ┼堇蕴ꉀ鉪༲娈⃐で㥶伽౵⬢㗛₡ၚฯ醓籔땶䮹ꕙ퓯䦒ꘁݒ㉃雫襵榔辐〴励⹢ꨊ冀웭᷃헚靧囷窒翝䚻ﻹ⬶叡챣꼋ⰽ琢✬ǽ谘儅줷鬼쓩⋢귾捞濊빬렭孆操ꉤꌰ⬎鹙餷楽䣅ⅎĄҴ顶綷Ļ鮤犌;⮧
[ 1669.517012][ T5723] usb 7-1: SerialNumber: ᜻㭐Ằ鷴⧝ʝ¸鈬犅ﺹ嵲Ῡ豖靓璣໫岷㕀⌑掊㸂㪵罴햎蔩쯳ఎ䦰䉽뙛覯ط덈皨잟㛃茫ꓵ빙䉙ᄗ⃩祂蟒砖ꭿョ⭖ବ㝚栰룴舘ꊦ闇旟ሩ饔쩥䞐뿏ꊪ쒻屪榪꺦䀷礔뎯ɮ땶嫢蜜㧏䶭㏓ా㶍虍â䟉鐖䔠횎扌灧郜㱢꼁밡檙嶋赗❼抱…᰼憰Ꜭ횧트኏ẞ壦鱆ౄ쳤瞅餺矘棨
[ 1669.608202][T28980] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1669.620222][T28980] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1669.829278][ T5723] usblp0: Disabling reads from problematic bidirectional printer
[ 1669.912910][ T5723] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 100 if 0 alt 7 proto 3 vid 0x03F0 pid 0x0004
[ 1669.936920][ T5723] usb 7-1: USB disconnect, device number 100
[ 1670.107465][ T5723] usblp0: removed
[ 1671.123332][T29015] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7102'.
[ 1671.356194][T29024] FAULT_INJECTION: forcing a failure.
[ 1671.356194][T29024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1671.356228][T29024] CPU: 0 UID: 0 PID: 29024 Comm: syz.6.7105 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1671.356256][T29024] Tainted: [L]=SOFTLOCKUP
[ 1671.356263][T29024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1671.356275][T29024] Call Trace:
[ 1671.356283][T29024]  <TASK>
[ 1671.356292][T29024]  dump_stack_lvl+0xe8/0x150
[ 1671.356326][T29024]  should_fail_ex+0x467/0x600
[ 1671.356360][T29024]  _copy_from_user+0x2d/0xb0
[ 1671.356385][T29024]  kstrtouint_from_user+0xd6/0x180
[ 1671.356408][T29024]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1671.356434][T29024]  ? __lock_acquire+0x683/0x2ce0
[ 1671.356471][T29024]  proc_fail_nth_write+0x8e/0x210
[ 1671.356494][T29024]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1671.356524][T29024]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1671.356545][T29024]  vfs_write+0x29f/0xbb0
[ 1671.356578][T29024]  ? __pfx_vfs_write+0x10/0x10
[ 1671.356604][T29024]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1671.356630][T29024]  ? lockdep_hardirqs_on+0x7a/0x110
[ 1671.356654][T29024]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1671.356679][T29024]  ? mutex_lock_nested+0x152/0x1d0
[ 1671.356697][T29024]  ? fdget_pos+0x252/0x320
[ 1671.356727][T29024]  ksys_write+0x156/0x270
[ 1671.356752][T29024]  ? __pfx_ksys_write+0x10/0x10
[ 1671.356782][T29024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1671.356801][T29024]  do_syscall_64+0x174/0x580
[ 1671.356822][T29024]  ? trace_irq_disable+0x3b/0x140
[ 1671.356841][T29024]  ? clear_bhb_loop+0x40/0x90
[ 1671.356864][T29024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1671.356882][T29024] RIP: 0033:0x7f49fbf8e84e
[ 1671.356898][T29024] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1671.356912][T29024] RSP: 002b:00007f49fa225fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1671.356932][T29024] RAX: ffffffffffffffda RBX: 00007f49fa2266c0 RCX: 00007f49fbf8e84e
[ 1671.356946][T29024] RDX: 0000000000000001 RSI: 00007f49fa2260a0 RDI: 0000000000000005
[ 1671.356958][T29024] RBP: 00007f49fa226090 R08: 0000000000000000 R09: 0000000000000000
[ 1671.356970][T29024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1671.356981][T29024] R13: 00007f49fc256038 R14: 00007f49fc255fa0 R15: 00007fff7ad7f068
[ 1671.357013][T29024]  </TASK>
[ 1671.881838][T28599] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 1672.202698][T28599] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7
[ 1672.232492][T28599] usb 3-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40
[ 1672.232523][T28599] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1672.232545][T28599] usb 3-1: Product: 컉쇊쥂켙㸨䝰㛖ฑ۲윭율쨠빖騫蛭别뜬针䪔轕塮⹐㪕ꀏ誈ߠ捲얺筁編ꪼ筤
[ 1672.232565][T28599] usb 3-1: Manufacturer: ࠬ
[ 1672.232580][T28599] usb 3-1: SerialNumber: ㍓轰ᠠ瘃䖺桷鹲ᛲ竾豖⟬↟꺅ﰝ婓ᴿ墷뜣䵝ꡮ것㏂㝾膰鑯ᚭꖣ잧筅劷퉴絣僎碻鍷娕殺秡䃰럂뿅ꦻ䧜歊뱋瀬⋿㪟婧ᇗℭ낸쇈镀ﻧᑕ⥍ḯ馡굆綶Ɔ棺ꆙ㭴ऐ⪚첮띎ꏮ⌒⍛㱾ⶏ蜩擤쯓揧䛸ⵐ壳즈鐝ｈ
[ 1672.582535][T28599] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[ 1672.901528][T28599] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[ 1673.041564][T28599] usb 3-1: USB disconnect, device number 54
[ 1673.177942][T28810] udevd[28810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1673.303661][ T5699] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1673.403386][T29057] netlink: 68 bytes leftover after parsing attributes in process `syz.6.7116'.
[ 1673.480305][ T5699] usb 1-1: Using ep0 maxpacket: 16
[ 1673.482740][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[ 1673.482772][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1673.482795][ T5699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0
[ 1673.482820][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1673.482842][ T5699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1673.495861][ T5699] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[ 1673.495889][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1673.495909][ T5699] usb 1-1: Product: syz
[ 1673.495923][ T5699] usb 1-1: Manufacturer: syz
[ 1673.495936][ T5699] usb 1-1: SerialNumber: syz
[ 1673.521319][ T5699] usb 1-1: config 0 descriptor??
[ 1673.535129][ T5699] port100 1-1:0.0: NFC: Could not get supported command types
[ 1674.190137][T25477] usb 1-1: USB disconnect, device number 56
[ 1674.464506][T29069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7120'.
[ 1675.556442][T29078] bond1: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[ 1675.596521][T29078] bond1 (unregistering): Released all slaves
[ 1675.745435][T17543] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery!
[ 1675.745593][T29087] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery"
[ 1675.790762][T29084] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7126'.
[ 1675.934121][T11418] Bluetooth: hci5: unexpected cc 0x0c05 length: 4 > 1
[ 1675.934155][T11418] Bluetooth: hci5: unexpected event for opcode 0x0c05
[ 1675.970219][ T5699] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[ 1675.970392][ T5739] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1676.230435][ T5701] usb 7-1: new high-speed USB device number 101 using dummy_hcd
[ 1676.253987][ T5699] usb 10-1: Using ep0 maxpacket: 8
[ 1676.255806][ T5699] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1676.255830][ T5699] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1676.255886][ T5699] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1676.258226][ T5699] usb 10-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[ 1676.258253][ T5699] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.258274][ T5699] usb 10-1: Product: syz
[ 1676.258289][ T5699] usb 10-1: Manufacturer: syz
[ 1676.258299][ T5699] usb 10-1: SerialNumber: syz
[ 1676.302545][ T5739] usb 1-1: config 1 has an invalid interface number: 7 but max is 0
[ 1676.302572][ T5739] usb 1-1: config 1 has no interface number 0
[ 1676.302612][ T5739] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1676.302688][ T5739] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1676.302713][ T5739] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1676.306385][ T5739] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1676.306412][ T5739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1676.306431][ T5739] usb 1-1: Product: syz
[ 1676.306445][ T5739] usb 1-1: Manufacturer: syz
[ 1676.306459][ T5739] usb 1-1: SerialNumber: syz
[ 1676.317528][T29092] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1676.380059][ T5701] usb 7-1: Using ep0 maxpacket: 8
[ 1676.444566][ T5701] usb 7-1: unable to get BOS descriptor or descriptor too short
[ 1676.446433][ T5701] usb 7-1: config 0 has an invalid interface number: 88 but max is 1
[ 1676.446603][ T5701] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1676.446759][ T5701] usb 7-1: config 0 has no interface number 0
[ 1676.447087][ T5701] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[ 1676.447249][ T5701] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1676.447419][ T5701] usb 7-1: config 0 interface 88 has no altsetting 0
[ 1676.456711][ T5701] usb 7-1: string descriptor 0 read error: -22
[ 1676.456863][ T5701] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[ 1676.456887][ T5701] usb 7-1: New USB device strings: Mfr=255, Product=84, SerialNumber=3
[ 1677.123212][ T5701] usb 7-1: config 0 descriptor??
[ 1677.202286][ T5701] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input32
[ 1677.242401][ T5739] usb 1-1: Error in usbnet_get_endpoints (-71)
[ 1677.273174][ T5739] usb 1-1: USB disconnect, device number 57
[ 1677.497277][ T5701] usb 7-1: USB disconnect, device number 101
[ 1677.720417][T21498] udevd[21498]: Error opening device "/dev/input/event4": No such device
[ 1677.720563][T21498] udevd[21498]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1677.720649][T21498] udevd[21498]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1678.009504][T29111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7133'.
[ 1678.118982][ T5699] usb 10-1: 1:1: cannot get freq (v2/v3): err -71
[ 1678.119452][ T5699] usb 10-1: uac_clock_source_is_valid(): cannot get clock validity for id 0
[ 1678.125652][T29114] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7134'.
[ 1678.638058][T29126] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1678.650216][T29126] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1678.696382][T11418] Bluetooth: hci2: unexpected cc 0x0c05 length: 4 > 1
[ 1678.696415][T11418] Bluetooth: hci2: unexpected event for opcode 0x0c05
[ 1678.785506][ T5699] usb 10-1: USB disconnect, device number 4
[ 1678.810129][ T5739] usb 9-1: new high-speed USB device number 27 using dummy_hcd
[ 1678.862406][T14368] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 1678.875499][T29136] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7143'.
[ 1678.964732][ T5739] usb 9-1: config 1 has an invalid interface number: 7 but max is 0
[ 1678.964758][ T5739] usb 9-1: config 1 has no interface number 0
[ 1678.964801][ T5739] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[ 1678.964827][ T5739] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1678.964850][ T5739] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7
[ 1678.967201][ T5739] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[ 1678.967231][ T5739] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1678.967252][ T5739] usb 9-1: Product: syz
[ 1678.967267][ T5739] usb 9-1: Manufacturer: syz
[ 1678.967280][ T5739] usb 9-1: SerialNumber: syz
[ 1678.996652][T21498] udevd[21498]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1679.020155][T14368] usb 3-1: Using ep0 maxpacket: 32
[ 1679.051983][T14368] usb 3-1: config 2 has 0 interfaces, different from the descriptor's value: 1
[ 1679.057516][T14368] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[ 1679.057543][T14368] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1
[ 1679.057562][T14368] usb 3-1: Product: syz
[ 1679.057575][T14368] usb 3-1: Manufacturer: syz
[ 1679.057588][T14368] usb 3-1: SerialNumber: syz
[ 1679.213293][T29133] input: syz1 as /devices/virtual/input/input33
[ 1679.224892][T28599] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1679.265792][T29121] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[ 1679.266845][T29129] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1679.402316][T28599] usb 1-1: config 183 has an invalid descriptor of length 141, skipping remainder of the config
[ 1679.402346][T28599] usb 1-1: config 183 has 0 interfaces, different from the descriptor's value: 1
[ 1679.402383][T28599] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[ 1679.402407][T28599] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1679.531975][ T5739] usb 9-1: Error in usbnet_get_endpoints (-71)
[ 1679.779116][ T5739] usb 9-1: USB disconnect, device number 27
[ 1680.042706][T29133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1680.043651][T29133] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1680.112905][T28599] usb 1-1: string descriptor 0 read error: -71
[ 1680.115281][T28599] usb 1-1: USB disconnect, device number 58
[ 1680.459614][T29158] netlink: 68 bytes leftover after parsing attributes in process `syz.8.7151'.
[ 1680.710042][ T5739] usb 7-1: new high-speed USB device number 102 using dummy_hcd
[ 1681.143716][ T5739] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 64
[ 1681.143749][ T5739] usb 7-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1023
[ 1681.143774][ T5739] usb 7-1: config 1 interface 0 has no altsetting 0
[ 1681.146228][ T5739] usb 7-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[ 1681.146256][ T5739] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1681.146274][ T5739] usb 7-1: Product: ﻢ럖ꅳ呖ァꙧ
[ 1681.146289][ T5739] usb 7-1: Manufacturer: ⎭힨鰗ꉽ쿉⹛eㄉ㋪贲쌪͕먺陗켼༏똪淔쎽ᗡ呂䌢j쬆㤷䁛ಭ┼堇蕴ꉀ鉪༲娈⃐で㥶伽౵⬢㗛₡ၚฯ醓籔땶䮹ꕙ퓯䦒ꘁݒ㉃雫襵榔辐〴励⹢ꨊ冀웭᷃헚靧囷窒翝䚻ﻹ⬶叡챣꼋ⰽ琢✬ǽ谘儅줷鬼쓩⋢귾捞濊빬렭孆操ꉤꌰ⬎鹙餷楽䣅ⅎĄҴ顶綷Ļ鮤犌;⮧
[ 1681.146326][ T5739] usb 7-1: SerialNumber: ᜻㭐Ằ鷴⧝ʝ¸鈬犅ﺹ嵲Ῡ豖靓璣໫岷㕀⌑掊㸂㪵罴햎蔩쯳ఎ䦰䉽뙛覯ط덈皨잟㛃茫ꓵ빙䉙ᄗ⃩祂蟒砖ꭿョ⭖ବ㝚栰룴舘ꊦ闇旟ሩ饔쩥䞐뿏ꊪ쒻屪榪꺦䀷礔뎯ɮ땶嫢蜜㧏䶭㏓ా㶍虍â䟉鐖䔠횎扌灧郜㱢꼁밡檙嶋赗❼抱…᰼憰Ꜭ횧트኏ẞ壦鱆ౄ쳤瞅餺矘棨
[ 1681.149058][T29168] FAULT_INJECTION: forcing a failure.
[ 1681.149058][T29168] name failslab, interval 1, probability 0, space 0, times 0
[ 1681.149091][T29168] CPU: 1 UID: 0 PID: 29168 Comm: syz.8.7154 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1681.149118][T29168] Tainted: [L]=SOFTLOCKUP
[ 1681.149124][T29168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1681.149135][T29168] Call Trace:
[ 1681.149143][T29168]  <TASK>
[ 1681.149152][T29168]  dump_stack_lvl+0xe8/0x150
[ 1681.149184][T29168]  should_fail_ex+0x467/0x600
[ 1681.149216][T29168]  should_failslab+0xa8/0x100
[ 1681.149239][T29168]  kmem_cache_alloc_noprof+0xa4/0x650
[ 1681.149258][T29168]  ? skb_clone+0x212/0x3a0
[ 1681.149281][T29168]  ? skb_clone+0x212/0x3a0
[ 1681.149307][T29168]  skb_clone+0x212/0x3a0
[ 1681.149334][T29168]  __netlink_deliver_tap+0x413/0x860
[ 1681.149370][T29168]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1681.149396][T29168]  netlink_deliver_tap+0x19c/0x1b0
[ 1681.149421][T29168]  netlink_unicast+0x7b8/0x990
[ 1681.149454][T29168]  netlink_sendmsg+0x813/0xb40
[ 1681.149487][T29168]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1681.149513][T29168]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[ 1681.149542][T29168]  ? __kernel_text_address+0xd/0x30
[ 1681.149562][T29168]  ? unwind_get_return_address+0x4d/0x90
[ 1681.149587][T29168]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1681.149610][T29168]  sock_sendmsg_nosec+0x13a/0x180
[ 1681.149633][T29168]  ____sys_sendmsg+0x565/0x870
[ 1681.149657][T29168]  ? __might_fault+0xaf/0x130
[ 1681.149684][T29168]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1681.149718][T29168]  ? import_iovec+0x73/0xa0
[ 1681.149745][T29168]  ___sys_sendmsg+0x2a5/0x360
[ 1681.149767][T29168]  ? __lock_acquire+0x683/0x2ce0
[ 1681.149792][T29168]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1681.149859][T29168]  ? __fget_files+0x2a/0x420
[ 1681.149879][T29168]  ? __fget_files+0x3a8/0x420
[ 1681.149909][T29168]  __x64_sys_sendmsg+0x1b7/0x290
[ 1681.149937][T29168]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1681.149976][T29168]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1681.149996][T29168]  do_syscall_64+0x174/0x580
[ 1681.150017][T29168]  ? trace_irq_disable+0x3b/0x140
[ 1681.150036][T29168]  ? clear_bhb_loop+0x40/0x90
[ 1681.150057][T29168]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1681.150071][T29168] RIP: 0033:0x7f63d8afe019
[ 1681.150086][T29168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1681.150100][T29168] RSP: 002b:00007f63d6d56028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1681.150119][T29168] RAX: ffffffffffffffda RBX: 00007f63d8d85fa0 RCX: 00007f63d8afe019
[ 1681.150133][T29168] RDX: 0000000004004000 RSI: 0000200000000380 RDI: 0000000000000003
[ 1681.150146][T29168] RBP: 00007f63d6d56090 R08: 0000000000000000 R09: 0000000000000000
[ 1681.150158][T29168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1681.150170][T29168] R13: 00007f63d8d86038 R14: 00007f63d8d85fa0 R15: 00007ffc2287bb58
[ 1681.150199][T29168]  </TASK>
[ 1681.288012][T29155] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1681.288193][T29155] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1681.399377][T29170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7141'.
[ 1681.749556][ T5739] usblp0: Disabling reads from problematic bidirectional printer
[ 1681.766812][ T5739] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 102 if 0 alt 7 proto 3 vid 0x03F0 pid 0x0004
[ 1681.790805][ T5739] usb 7-1: USB disconnect, device number 102
[ 1681.811838][ T5739] usblp0: removed
[ 1683.661927][ T5701] usb 3-1: USB disconnect, device number 55
[ 1683.766509][T29199] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7164'.
[ 1684.402530][ T5701] ==================================================================
[ 1684.402547][ T5701] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.402576][ T5701] Read of size 8 at addr ffffc9000f37b008 by task kworker/1:3/5701
[ 1684.402592][ T5701] 
[ 1684.402603][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1684.402618][ T5701] Tainted: [L]=SOFTLOCKUP
[ 1684.402622][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1684.402629][ T5701] Workqueue: usb_hub_wq hub_event
[ 1684.402717][ T5701] Call Trace:
[ 1684.402722][ T5701]  <TASK>
[ 1684.402728][ T5701]  dump_stack_lvl+0xe8/0x150
[ 1684.402745][ T5701]  print_address_description+0x55/0x1e0
[ 1684.402762][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.402772][ T5701]  print_report+0x58/0x70
[ 1684.402785][ T5701]  kasan_report+0x117/0x150
[ 1684.402800][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.402816][ T5701]  __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.402827][ T5701]  kcov_remote_start+0x295/0x6f0
[ 1684.402845][ T5701]  hub_event+0x15d/0x4cf0
[ 1684.402864][ T5701]  ? trace_sched_exit_tp+0x3a/0x130
[ 1684.402876][ T5701]  ? __schedule+0x16f2/0x5500
[ 1684.402890][ T5701]  ? register_lock_class+0x31/0x2e0
[ 1684.402902][ T5701]  ? __lock_acquire+0x683/0x2ce0
[ 1684.402914][ T5701]  ? irqentry_exit+0x218/0x8f0
[ 1684.402927][ T5701]  ? irqentry_exit+0x218/0x8f0
[ 1684.402940][ T5701]  ? __pfx_hub_event+0x10/0x10
[ 1684.402950][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[ 1684.402964][ T5701]  ? rcu_is_watching+0x15/0xb0
[ 1684.402977][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[ 1684.402988][ T5701]  process_scheduled_works+0xa8e/0x14e0
[ 1684.403005][ T5701]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1684.403017][ T5701]  ? assign_work+0x3cf/0x5d0
[ 1684.403029][ T5701]  worker_thread+0xa47/0xfb0
[ 1684.403046][ T5701]  kthread+0x388/0x470
[ 1684.403090][ T5701]  ? __pfx_worker_thread+0x10/0x10
[ 1684.403101][ T5701]  ? __pfx_kthread+0x10/0x10
[ 1684.403115][ T5701]  ret_from_fork+0x514/0xb70
[ 1684.403152][ T5701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1684.403166][ T5701]  ? __switch_to+0xc89/0x1420
[ 1684.403179][ T5701]  ? __pfx_kthread+0x10/0x10
[ 1684.403193][ T5701]  ret_from_fork_asm+0x1a/0x30
[ 1684.403206][ T5701]  </TASK>
[ 1684.403210][ T5701] 
[ 1684.403213][ T5701] The buggy address belongs to a vmalloc virtual mapping
[ 1684.403227][ T5701] Memory state around the buggy address:
[ 1684.403257][ T5701]  ffffc9000f37af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1684.403264][ T5701]  ffffc9000f37af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1684.403271][ T5701] >ffffc9000f37b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1684.403276][ T5701]                       ^
[ 1684.403281][ T5701]  ffffc9000f37b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1684.403287][ T5701]  ffffc9000f37b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1684.403292][ T5701] ==================================================================
[ 1684.476095][ T5701] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1684.476118][ T5701] CPU: 1 UID: 0 PID: 5701 Comm: kworker/1:3 Tainted: G             L      syzkaller #0 PREEMPT_{RT,(full)} 
[ 1684.476147][ T5701] Tainted: [L]=SOFTLOCKUP
[ 1684.476154][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1684.476166][ T5701] Workqueue: usb_hub_wq hub_event
[ 1684.476192][ T5701] Call Trace:
[ 1684.476200][ T5701]  <TASK>
[ 1684.476209][ T5701]  vpanic+0x56c/0xa60
[ 1684.476232][ T5701]  ? __pfx_vpanic+0x10/0x10
[ 1684.476252][ T5701]  panic+0xc5/0xd0
[ 1684.476266][ T5701]  ? __pfx_panic+0x10/0x10
[ 1684.476281][ T5701]  ? preempt_schedule_thunk+0x16/0x40
[ 1684.476369][ T5701]  ? preempt_schedule_thunk+0x16/0x40
[ 1684.476387][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.476405][ T5701]  check_panic_on_warn+0x89/0xb0
[ 1684.476446][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.476463][ T5701]  end_report+0x73/0x170
[ 1684.476481][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.476497][ T5701]  kasan_report+0x128/0x150
[ 1684.476514][ T5701]  ? __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.476533][ T5701]  __list_del_entry_valid_or_report+0xb5/0x190
[ 1684.476551][ T5701]  kcov_remote_start+0x295/0x6f0
[ 1684.476575][ T5701]  hub_event+0x15d/0x4cf0
[ 1684.476592][ T5701]  ? trace_sched_exit_tp+0x3a/0x130
[ 1684.476609][ T5701]  ? __schedule+0x16f2/0x5500
[ 1684.476629][ T5701]  ? register_lock_class+0x31/0x2e0
[ 1684.476647][ T5701]  ? __lock_acquire+0x683/0x2ce0
[ 1684.476668][ T5701]  ? irqentry_exit+0x218/0x8f0
[ 1684.476688][ T5701]  ? irqentry_exit+0x218/0x8f0
[ 1684.476708][ T5701]  ? __pfx_hub_event+0x10/0x10
[ 1684.476724][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[ 1684.476744][ T5701]  ? rcu_is_watching+0x15/0xb0
[ 1684.476764][ T5701]  ? process_scheduled_works+0xa20/0x14e0
[ 1684.476781][ T5701]  process_scheduled_works+0xa8e/0x14e0
[ 1684.476809][ T5701]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1684.476829][ T5701]  ? assign_work+0x3cf/0x5d0
[ 1684.476847][ T5701]  worker_thread+0xa47/0xfb0
[ 1684.476876][ T5701]  kthread+0x388/0x470
[ 1684.476897][ T5701]  ? __pfx_worker_thread+0x10/0x10
[ 1684.476913][ T5701]  ? __pfx_kthread+0x10/0x10
[ 1684.476934][ T5701]  ret_from_fork+0x514/0xb70
[ 1684.476958][ T5701]  ? __pfx_ret_from_fork+0x10/0x10
[ 1684.476978][ T5701]  ? __switch_to+0xc89/0x1420
[ 1684.476998][ T5701]  ? __pfx_kthread+0x10/0x10
[ 1684.477018][ T5701]  ret_from_fork_asm+0x1a/0x30
[ 1684.477040][ T5701]  </TASK>
[ 1684.477306][ T5701] Kernel Offset: disabled