last executing test programs: 7m49.290477869s ago: executing program 0 (id=410): r0 = syz_open_dev$video4linux(&(0x7f0000000540), 0xfbffffff, 0xa741) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, 0x0) 7m49.235238266s ago: executing program 0 (id=411): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r1, 0x1, &(0x7f0000000000)=[&(0x7f0000004280)={0x0, 0x0, 0x20, 0x0, 0x2002, r0, 0x0, 0x0, 0x3}]) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8f, 0xffffffd4, 0x0, 0x0, 0x10}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) 7m49.063452607s ago: executing program 0 (id=412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003e40), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd2e, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}]}, 0x3c}}, 0x400c810) 7m48.821333353s ago: executing program 0 (id=414): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4142, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffff7, 0x1a6c42) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x100) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r2, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r5, r2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c98a4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x9, 0x400]}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0xe74, 0x9, 0x12, 0x10, "6972a16387920cfad256559f58a8bb03009b6af8f279d15a744d3c03497fc60c5e384e4c90a9e05136d2dd259e85fba5a1e82d00", "7ae7cae7925fbe121718e6de64227243f96d9685d5016b32c02336b2cae3a91e", [0x0, 0x800100000004]}) syz_usb_connect(0x5, 0x36, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}], 0x18) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, 0x2e, 0x1, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0xe}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 7m47.708744789s ago: executing program 0 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x81, 0xffffffff}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000440)={@local, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r3, 0x7cb, &(0x7f0000000100)={0x0, 0x0, 0x8}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000140)={0x2a, &(0x7f00000000c0)=[{0xff, 0xc, 0x9, 0xa}, {0x922, 0xa9, 0x34, 0x8000}, {0x6f, 0x7, 0x8, 0x400}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) 7m47.422547895s ago: executing program 0 (id=427): openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1740, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 7m46.768227703s ago: executing program 32 (id=427): openat$kvm(0xffffffffffffff9c, 0x0, 0x1a1740, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r0, 0x4b46, &(0x7f00000000c0)) 2m41.411531332s ago: executing program 3 (id=2007): syz_clone3(&(0x7f00000001c0)={0x2010000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x0, {0xd}, &(0x7f00000000c0)=""/16, 0x10, &(0x7f0000000100)=""/73, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private0}}, &(0x7f0000000340)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000380)={0x6, 0x711, {r1}, {r3}, 0x4608, 0x8001}) r5 = syz_open_dev$audion(&(0x7f00000003c0), 0x8a8, 0x2000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000440)={r7, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast}, 0xc) r8 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000700)={0x0, &(0x7f0000000480)=[@nested_load_code={0x12e, 0x58, {0x0, "66baa000b852940000ef0f78f966baa00066ed400fc76a85400f1ca86042000066b81e000f00d0c401e0583ce2c443e96c9e02000000f0420f0866430f38820a"}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x896, 0x401}}, @code={0xa, 0x5d, {"66470f3880ae4400000066bad104ed440f78ec0f01f836470f218d66baf80cb8066be88aef66bafc0cec450f01cf0f20c035100000000f22c0b805000000b9483a54850f01c1f26436410f09"}}, @nested_load_code={0x12e, 0x67, {0x3, "66b8a8000f00d8f043804286fd420f380607660f38822966420fd3ad4600000066440f0119f3440f59c6c7442400f4c60000c74424028b78f0f2c7442406000000000f0114244339e7c442791d4ff0"}}, @cpuid={0x64, 0x18, {0x5, 0x5}}, @out_dx={0x6a, 0x28, {0xd7bb, 0x2, 0x9}}, @nested_amd_vmsave={0x183, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x8}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x68, 0x5, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xc0ee, 0x0, 0x6}}, @set_irq_handler={0xc8, 0x20, {0x6e, 0x1}}], 0x264}) ioctl$KVM_SET_CPUID2(r8, 0x4008ae90, &(0x7f0000000740)={0x5, 0x0, [{0xa, 0xbd30, 0x2, 0x4, 0x2, 0x9, 0x7}, {0xb, 0x4, 0x5, 0x2, 0xffff, 0x1a, 0x7c9}, {0x0, 0x2, 0x1, 0xfffffffc, 0x0, 0x5, 0x3}, {0x7, 0x98, 0x1, 0x8, 0x100, 0x9, 0x7fff}, {0x80000019, 0x4, 0x3, 0x80000000, 0x47155faf, 0x3, 0x658e}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_GET(r11, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xc0, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008841) r12 = syz_open_dev$usbfs(&(0x7f0000000a00), 0x8, 0x40000) ioctl$USBDEVFS_REAPURB(r12, 0x4008550c, &(0x7f0000000a40)) io_setup(0x1, &(0x7f0000000a80)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r5, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)=r5}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001ec0)={r0, 0x20, &(0x7f0000001e80)={&(0x7f0000000dc0)=""/4096, 0x1000, 0x0, &(0x7f0000001dc0)=""/173, 0xad}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x15, 0x15, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa85d}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @ldst={0x3, 0x2, 0x0, 0x6, 0x9, 0x46, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @jmp={0x5, 0x0, 0x2, 0x3, 0x6, 0xfffffffffffffff0, 0xfffffffffffffffc}]}, &(0x7f0000000c40)='syzkaller\x00', 0x3, 0xbd, &(0x7f0000000c80)=""/189, 0x41000, 0x6, '\x00', r2, @sk_reuseport=0x28, r5, 0x8, &(0x7f0000000d40)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x2, 0x7, 0x2}, 0x10, r14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffe0}, 0x94) sendmsg$can_raw(r5, &(0x7f00000020c0)={&(0x7f0000001fc0)={0x1d, r2}, 0x10, &(0x7f0000002080)={&(0x7f0000002000)=@canfd={{0x4}, 0xc, 0x1, 0x0, 0x0, "37140affcb9741bb9cc2d7b58e0095d0b1442c231729cef97830bd7aad16ee370daf4aafb29e1e0bfbabb6704e3f18dfc14ce12a6f1118d15884e181f1fcf05f"}, 0x48}, 0x1, 0x0, 0x0, 0x9000}, 0x4000884) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r7, r5, 0x0, 0x3, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@bloom_filter={0x1e, 0x100, 0x0, 0xa, 0x2000, r15, 0x9, '\x00', 0x0, r6, 0x2, 0x0, 0x0, 0x8}, 0x50) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002240)={{0x1, 0x1, 0x18, r10, {r4}}, './file0\x00'}) stat(&(0x7f0000002280)='./file0\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r9, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000023c0)=[0xee00, 0xffffffffffffffff]) r20 = getegid() fstat(r0, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r6, &(0x7f0000002200)='system.posix_acl_default\x00', &(0x7f0000002480)={{}, {}, [{0x2, 0x2, r16}, {0x2, 0x0, r3}, {0x2, 0x6, r4}, {0x2, 0x0, r4}, {0x2, 0x3, r3}, {0x2, 0x2, r3}, {0x2, 0x4, r4}, {0x2, 0x2, r4}, {0x2, 0x1, r3}, {0x2, 0x0, r4}], {}, [{0x8, 0x2, r17}, {0x8, 0x0, 0xee00}, {0x8, 0x1, r18}, {0x8, 0x4, r19}, {0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x1, r20}, {0x8, 0x0, r21}], {0x10, 0x4}, {0x20, 0xd}}, 0xac, 0x7) 2m41.020812359s ago: executing program 3 (id=2010): syz_usb_connect(0x0, 0x24, &(0x7f0000001100)={{0x12, 0x1, 0x310, 0x40, 0x42, 0x35, 0x10, 0x545, 0x8080, 0x301, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x3, 0x10, 0x9, "", [{{0x9, 0x4, 0x59, 0x2, 0x0, 0xfc, 0x66, 0xb3, 0x6}}]}}]}}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$midi(0x6, 0xbf, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x499, 0x1057, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x1, 0x1, 0xb, 0xa0, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x7, 0x1, 0x3, 0x30, 0x7, [], [{{0x9, 0x5, 0x2, 0x1, 0x8, 0x7, 0x1, 0x2, {0xc, 0x25, 0x1, 0x8, "974ee999a541686d"}}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x14, 0x4, 0x2, {0x10, 0x25, 0x1, 0xc, "d7706d0a015b7696f7e9773c"}}}, {{0x9, 0x5, 0xf, 0x8, 0x3ff, 0x3, 0x7f, 0x7f, {0xd, 0x25, 0x1, 0x9, "d65ca47733ce6a10a7"}}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x1, 0x5, 0x59, {0x14, 0x25, 0x1, 0x10, "52311777b026f3e2319a5af5fb08c273"}}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x9, 0x1, 0x0, {0x5, 0x25, 0x1, 0x1, "cb"}}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x1, 0x3, 0x4, {0x12, 0x25, 0x1, 0xe, "4615a8f5556c406feb70df574571"}}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xd, 0x7f, 0x13, {0x8, 0x25, 0x1, 0x4, "0b944643"}}}]}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x1, 0x7, 0x0, 0x7f, 0x10, 0x1}, 0x13, &(0x7f0000000400)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7f, 0x9, 0x5, 0x8}, @ptm_cap={0x3}]}, 0x1, [{0x4e, &(0x7f0000000440)=@string={0x4e, 0x3, "148b091a95ce922e8a00114904ae51c7f835b51b1ef13872f5439435d5983762763573c8f1e2ea5440e59bb25e305eca615f12e7df3646100ef58cfc97c67efc3d14f7cca2ffb79380f117c7"}}]}) accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000500)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000005980)={'syztnl2\x00', &(0x7f0000005900)={'syztnl0\x00', 0x0, 0x2f, 0xff, 0xa, 0x10001, 0x8, @loopback, @remote, 0x700, 0x8000, 0xfe, 0x2}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x9, 0x4b, @ipv4={'\x00', '\xff\xff', @private=0x7e0}, @loopback, 0x80, 0x10, 0x800, 0x4}}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r7 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0) 2m39.166998129s ago: executing program 3 (id=2019): socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}, 0x1, 0x0, 0x4000000000000000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6e000000) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 2m35.967038804s ago: executing program 3 (id=2026): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r2 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0xd) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0xfffffff4, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10, 0x2}]}) r6 = msgget$private(0x0, 0x4a0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) msgctl$IPC_STAT(r6, 0x2, 0x0) msgsnd(r6, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES64], 0xe3, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0xf, 0x3, 0x4, 0x1000000000000002, 0x102000000000002, 0x8000000d, 0x2004c8, 0xffff, 0x3, 0x8000000000000000, 0xffffffffffffffff, 0x3, 0xd0b, 0xfffffffffffffff9, 0x2000000000000003, 0x5], 0x80a0000, 0x4284}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$swradio(&(0x7f00000019c0), 0x0, 0x2) 2m32.885117077s ago: executing program 3 (id=2036): socket$netlink(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}, 0x1, 0x0, 0x0, 0x14}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) unshare(0x6e000000) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) 2m29.666377256s ago: executing program 3 (id=2051): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) timer_create(0xe, &(0x7f0000000240)={0x0, 0x3d, 0x4, @tid=r0}, &(0x7f0000000280)=0x0) timer_gettime(r1, &(0x7f00000002c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000380)={r2, &(0x7f0000000040)='/]', 0x40, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x2]}, {0x8001, 0xa, 0x8, 0x8}}, 0x4, &(0x7f0000000200), &(0x7f0000000340)=0x2}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x470ef000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000140)=0x1) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="e79a62021f09ce67fbc7cb899d8cc5512fa0fd6d2e5f506ac02bb46398fe3573c1c7792f86a014b0d13514cdc393370ee4c8f135029d8bb136f23ece83803b05641c7987e265de2eb41fcdbc66686193ac6bd69bfc5e3b053d54440e1fd5206f02913fbc0c59d973b55148ccfad716422b31f99fbf113e581c6c3b3fbe06aeadd34e41b2dee2611847a14518b5682bf0c733c8388af864a7f3e861255b6717d05a713131", 0xa4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x0, 0x10000, 0x8}) 2m25.25951139s ago: executing program 4 (id=2070): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="54000000100003040000000000000000a1000000", @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) 2m25.015831685s ago: executing program 4 (id=2072): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2m24.780684696s ago: executing program 4 (id=2074): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050029bd7000000000000600000008000300", @ANYRES32=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="0f09660f3882380f01cf0f20c06635020000000f22c0b800008ed0670f01c2b80d008ec0673e64f37600660f3881213edce3", 0x32}], 0x1, 0x2, &(0x7f0000000340)=[@cr4={0x1, 0x20112}, @dstype3={0x7, 0x2}], 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfff, 0x0, 0x3}]) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)="fb5a0c5a28", 0x5, 0xc0, 0x0, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000001e80)=ANY=[@ANYBLOB="28ef712a771bcdc3e462a0015a70db9e8d968abf5016ade84389dd08180000000000000000000000000000000035676f7b7ec04dedba7d28abcd731163a368d7028829c7b3d15c1b7cef8d8b11d277f1d7a30dc2cfa1c80d5b2e66474d3a1d32b48df1e16fed8e13ecff9c7657bb87c224fe79a81a52ed0a3e658261e3767c5ffa5ccc741cf0d3ff6c177562940ad697736ef1f98b6e43089447ff12246bbdfec4588f38c78dbb7dd70a49a8563ee803454df559f5c04c098aa0f2f8322b8133eeffffffff", @ANYRES16=r0, @ANYBLOB="000227bd7000fddbdf258300000008000300", @ANYRES32=r3, @ANYBLOB="0c00990007000000040000000817118004170580f402008050010380cc0001802c000180060004000000000006000400050000000600040004000000050005000300000004000b0004000b001800018004000100050007000900000005000500010000001c00018004000b000500070006000000040001000600040009000000180001800400010004000a0004000a00050003000600000038000180050003000000000004000a0004000a000500060004000000050005000f00000004000b00050003000d000000050006000d00000018000180050003000900000004000c000500070006000000040002007400018038000180050003000c00000004000900060004000200000004000b000800020004000000050007000500000004000b0006000400fb020000380001800400080006000400ff0f000004000c0004000900080002000100000004000c00050007000200000004000900060004000200000004000200040002004c0103800400020090000180100001800400010004000100040001001c0001800400090005000700ff000000050005000100000004000b002800018005000600090000000400080004000a0008000200030000000500060007000000040009000c000180050006001c000000280001800500030003000000050003000b000000040009000500050002000000050003000700000004000180040002000400020004000200040002009c0001801c000180050003000700000004000a000400010005000700a60000002c00018004000900050005000d0000000500030000000000060004000400000005000500070000000400010010000180040001000500030008000000040001802400018004000b00050003000700000004000a000400090004000900050005000d0000000c00018004000100040008000c000180050006001f000000040002000400020034000280050018010b000000050018012f00000008009f00010000000800a1000700000008009f0001000000080026006c0900000c00038004000200040001800a00010008021100000100000800038004000200740100804400028008002700010000000800a0001e090000050018013a00000005001801080000000800a00006000000050018012a0000000800a0000600000008009f00020000004c0002800800a0000600000008002700010000000800a100050000000800a00004000000050019010500000008009f00030000000800a10003000000050019010f000000050019010e000000340002800800a10001000000050019010e00000008009f0002000000080027000200000008009f000000000008009f00000000004c0002800800a000040000000800a000000200000800a100070000000800a0000000010008009f00050000000800a000080000000800220170010000080026006c09000005001901040000000a000100ffffffffffff000018000380040002000400020004000200040002000400020014000280080022010801000005001901040000000a00010008021100000000001c0002800800a10003000000050018012c0000000800a100df9e0000c80200800a00010008021100000100000a000100080211000001000014000280050019010f000000050019010d00000024000280080026006c0900000800a100ff07000008009f000000000008002201850000000a0001000802110000010000900003808c0001803c0001800500050001000000050007000800000004000800050005000b000000050007000300000004000900050003000f00000004000a00040009001000018004000900050006001f00000014000180050007000300000006000400fcff0000280001800400080004000a0004000c0004000c00050006000200000004000a000800020000000000a40103807c0001800800018004000100200001800400090004000c0008000200040000000400010006000400050000000c00018004000a0004000800200001800400090006000400ff030000050005000300000005000700000000002400018004000100050006001d0000000500050009000000050007003600000004000900380001801c00018004000b0004000c0004000b0004000c00050003000a000000180001800500060004000000040001000800020001000000e80001803400018006000400faff0000040001000400090004000900050007000200000006000400ffff00000400080006000400050000002000018004000900050005000a000000050007000900000004000a0004000b000c00018006000400000800002000018004000b000800020004000000050006001f00000006000400ff0700000800018004000900240001800500070008000000050005000700000004000800050006000a00000004000b0008000180040001003000018005000600110000000400090008000200040000000500030004000000050003000a00000008000200000000000400020008000380040002002c0002800800a100060000000800a1006b000000080026006c0900000800a100040000000800270002000000c40600800a00010008021100000100000a00010008021100000100000a000100ffffffffffff00001001038004000200080101801c000180050003000e00000006000400010000000600040006000000140001800400090004000900050007000200000020000180050006001300000004000100050005000d0000000800020002000000400001800400010006000400070000000500030002000000050006001b0000000400090004000a0004000a000800020001000000050007000900000004000c003800018004000b0004000100050005000000000005000600040000000500060011000000080002000300000004000800050007001500000024000180050007000100000004000c0004000b000400090004000b0004000c0004000a0018000180040008000500050006000000050006001300000008000380040002007c020380980001802400018004000100050006000500000005000600140000000400090004000800040009002c000180050005000f00000004000a00050007000200000005000500020000000500060001000000040009004400018005000500070000000500070002000000060004000002000008000200030000000500050003000000050005000300000005000700050000000500060012000000040002000400020004000200e800018024000180050007000a000000050005000b000000050007000300000008000200040000000800018004000b000c00018005000700430000002400018006000400090000000600040004000000080002000200000005000700100000001c0001800500030003000000050003000f00000004000a0004000c0008000180040008002c00018006000400050000000500030001000000060004000300000004000a0005000700080000000400010010000180040008000400090004000a0020000180050003000b000000060004000001000004000b0004000c00040001000800018004000b004c000180380001800500060016000000050005000e000000040008000400080004000800050005000100000004000900080002000200000004000c0010000180050005000700000004000c000400020004000200980001800c000180050003000e0000001000018005000700000000000400010044000180040008000500060006000000080002000200000006000400010400000500070008000000050006000500000004000c000400010005000700c400000004000c00140001800500030006000000060004000800000008000180040001001800018004000c0005000700c400000006000400050f0000440203806400018038000180040008000400010004000b000500030004000000050006000c0000000600040004000000050003000f000000050006000a0000002800018004000a00050003000800000005000600170000000500070080000000050005000000000004000200940001800c00018006000400800000002400018004000a000400080004000a0004000c00050003000d00000004000b000400090034000180040009000600040000000000080002000000000004000c00050003000a000000060004000101000005000600010000002c00018004000c000400080004000b0005000700f90000000400080004000b0004000c00060004000004000004000200500001802c000180040009000500070005000000050007000500000004000a000500030009000000080002000000000010000180050003000200000004000c001000018005000700010000000400090004000200d000018018000180040001000500050009000000050007000100000018000180080002000300000005000700ee00000004000b003000018004000c00080002000100000005000600130000000600040064000000080002000100000006000400000400002800018005000300050000000500060004000000050003000400000004000a0005000700090000002c0001800500060001000000040008000400080004000b00050006000e00000004000b0005000500070000000c00018008000200030000000c000180050003000f0000001400018010000180060004005f0f00000400010004000200040002001c0002800800220114010000050018010b0000000800a000070000000a00010008021100000100009c000380040002009000018028000180050003000900000005000600080000000400010004000b0004000900050006000d0000003400018004000c00050007000e00000004000c0004000800050006000a00000004000a00050006001d00000004000c0004000c0014000180050006001a00000008000200030000001c00018004000900050003000000000005000700f900000004000a0004000200100000800a00010008021100000000007c0400800a000100080211000000000014000280080027000200000008002201540300008401038004000200dc0001802000018004000b0004000a00040008000600040001000000050003000000000024000180060004000500000004000a0004000a000400080004000c0005000700040000002c000180080002000400000005000500080000000500070006000000050005000d0000000500070000000000100001800400080004000c0004000a0028000180050007000800000006000400080000000400010005000300060000000400090004000c001c00018004000900080002000200000004000b00060004004000000014000180050005000e00000005000600130000003c00018038000180050007000d00000004000c00050005000c0000000500060007000000080002000000000004000b000400090004000c0004000a0004000200040002000400020004000200500001800c00018005000500060000004000018004000c0004000c00040009000600040003000000050005000a0000000500030003000000050007000000000005000500000000000500060011000000040002004c000280080027000100000008002700030000000500180136000000050019010400000005001901040000000800270000000000080026006c09000008002201ad0100000800a000ff7f0000d0000380cc0001803400018004000c00050005000d000000050003000b000000060004000800000004000c00060004000008000004000b000400090034000180050006001b00000004000a0006000400080000000500060000000000080002000000000006000400080000000400090010000180050003000800000004000b00180001800800020001000000050007000800000004000b00040001800c000180080002000200000018000180060004000500000004000c00050003000f00000010000180080002000100000004000c00600003801c00018018000180050006001000000004000c00050003000c0000002c000180140001800500070009000000060004000107000014000180050007000600000004000a0004000a000c00018008000180040001000400020004000200580103808000018014000180050007004a00000004000c0004000c00100001800400010006000400e30c000008000180040001003c000180050006000f000000050005000f00000004000900050005000500000006000400060000000400080005000300020000000800020000000000140001800400080004000b000500070001000000280001800c00018004000800040001001800018004000b00080002000300000005000700030000000400020004000200a00001802c00018004000c000500070002000000050006000500000004000c00060004000000000005000300000000000c000180050003000c0000000c000180050007000100000014000180080002000200000006000400090000000c00018006000400070000001c00018004000c0004000900040008000400080008000200040000001c00018004000a0004000100060004004000000004000a000400080004000200800400800a00010008021100000000000c000280080026006c0900000a000100080211000000000064010380700001800800018004000a001400018005000300070000000500050009000000340001800800020001000000040009000800020000eaab86040001000500060011000000050003000000000005000500090000000c000180050007000400000010000180050003000100000004000a0004000200ec0001802000018004000b000400090004000a00050006001c000000050005000b00000048000180050003000000000004000b00050006001700000008000200010000000500070080000000050007000700000004000c0005000600100000000400010008000200010000001400018004000b0004000b0004000b0004000a0030000180050006000c0000000400010004000b00050003000400000004000a0004000b0004000c00060004007f0000000c00018004000c00040009003000018005000500040000000400010004000b0004000c000800020000000000080002000100000006000400080000000a00010008021100000100003c0002800500190104000000080026006c090000080026000c1700000800a00001000000050019010f000000050019010e0000000800a1000200000064020380a00001802800018004000b0006000400090000000400080005000500030000000400090008000200040000001c000180050006000d00000006000400ad0000000400010004000c000800018004000b00100001800400080005000500010000000c00018008000200000000003400018004000c00040009000500030003000000040001000500070009000000050005000200000008000200040000000400010048000180280001800400010004000a0004000100050003000f0000000400010004000a0004000800040001001c00018004000c0005000300050000000400090004000a00040001000c0101801c00018004000100050006001e0000000800020002000000040009001400018006000400060000000500060009000000280001800600040007000000050007000800000004000800050005000100000004000c0004000b001000018004000800050003000d000000340001800600040003000000050005000300000004000b0004000b00050007000900000004000a00050006001a00000004000c0010000180050005000700000004000800340001800400080004000b00040009000500050006000000050006000500000005000300000000000400010006000400000000002800018004000100050005000800000004000b0004000b0008000200020000000500070009000000040002006800018028000180040001000400010004000b000400010004000c00050003000500000005000600090000001c00018004000c000600040000f80000080002000300000004000c002000018004000b000800020002000000050006001e00000005000600180000002400028005001801060000000800220147020000080027000300000008009f0003000000240002800800a000020000000800270002000000080027000100000008009f00050000000a0006000802110000010000"], 0x173c}, 0x1, 0x0, 0x0, 0x1}, 0x4439b561ad98a86d) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x84, 0x1e, 0x301, 0x20000002, 0x0, {0x5}, [@generic="235d3894ea73e7be8a6723440a2eb2889e8c20ed12e67d2c1ee597a9bfab54021b19c9e7c3511d96b9fc2dccbbac23142a531e6af79f4184e52d6dd7336723b9a2068701eb7874b06f9feb5cb8d251d9f7422bfc156c2bb8e507e88803543d7f", @typed={0x8, 0x29, 0x0, 0x0, @fd}, @typed={0x8, 0x53, 0x0, 0x0, @u32=0x8}]}, 0x84}, 0x1, 0x0, 0x0, 0x48c0}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 2m22.771553878s ago: executing program 4 (id=2079): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000280)="580000001500add427323b472545b45602117fffffff81000e22d991000000010000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff000000020000000062e0fa85accfb0ddf2cad8073a9fbea4432f5f5ddea1ed02aee4fc5f317166450f006fdbfe9e3643b76bbe8d8fb279cb397e5e01cc799f6d78f9", 0x92}], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') read$FUSE(r2, &(0x7f0000002c80)={0x2020}, 0x2020) write$tcp_mem(r2, &(0x7f0000000180)={0xffffffffffff8000, 0x20, 0x1, 0x20, 0x3}, 0x48) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0xffffff02) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r7, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r8, 0x0}]) io_destroy(r9) r10 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r10, 0x29, 0xd2, 0x0, 0x63) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x101440, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r3, @ANYBLOB="2c67526f91127b565775", @ANYRESHEX=r6, @ANYRESDEC=r9]) read$FUSE(r2, &(0x7f00000083c0)={0x2020}, 0x2020) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 2m22.153678656s ago: executing program 4 (id=2080): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r3, 0xc018aec0, &(0x7f0000000140)={0x0, 0x240, 0x3d70000, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x4c}, 0x1, 0x0, 0x0, 0x10010}, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)={0xb0, 0x0, 0x0, [{0x3, 0xf2ab, 0x14, 0x4, '/dev/dri/renderD128\x00'}, {0x3, 0xffffffff80000000, 0x9, 0x7c, '/dev/sg#\x00'}, {0x3, 0x2, 0x4, 0x2, '[,:\x00'}, {0x1, 0x1000, 0x9, 0x8, '/dev/sg#\x00'}]}, 0xb0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a01030000000000000000010000000900010073797ac15500000040"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r6, 0x100101) listen(r6, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) 2m21.422993068s ago: executing program 4 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) syz_emit_ethernet(0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000b50000000000119078000000000000000001441c1531ac1e0101000000037f6800000100007640000000000000ffff00000000004e20008190780100000108215ff01c46fde1f90cffb295b95f3b5a216cbddf7fb88e1bb7d6ea80005ee86ff6ad6a1773dbb5518daea29dccd36031b1dca3779ffb0be82f8247d79f401ad639187891746e2695d5b06b0ea4899215de0dc61438998193eec68d119ec919a9afbf0905fb9dfa485ed65cda2f28428fa8c231"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'wg1\x00', 'macvtap0\x00', {0xe3ac034b102198d1}, {}, 0x8, 0x1, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth1_virt_wifi\x00', 0x38, 0x0, 0x1, 0x200, 0xffff7fff, 0x0, {0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x1, 0x2, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x609}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x59}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044600480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x40) 2m20.583088231s ago: executing program 33 (id=2082): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) syz_emit_ethernet(0xc3, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d0000b50000000000119078000000000000000001441c1531ac1e0101000000037f6800000100007640000000000000ffff00000000004e20008190780100000108215ff01c46fde1f90cffb295b95f3b5a216cbddf7fb88e1bb7d6ea80005ee86ff6ad6a1773dbb5518daea29dccd36031b1dca3779ffb0be82f8247d79f401ad639187891746e2695d5b06b0ea4899215de0dc61438998193eec68d119ec919a9afbf0905fb9dfa485ed65cda2f28428fa8c231"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xe}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x100, 0x100, 0x100, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ip={@broadcast, @loopback, 0xff, 0xffffffff, 'wg1\x00', 'macvtap0\x00', {0xe3ac034b102198d1}, {}, 0x8, 0x1, 0x49}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'gre0\x00', 'veth1_virt_wifi\x00', 0x38, 0x0, 0x1, 0x200, 0xffff7fff, 0x0, {0x7}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x1, 0x2, 0x6}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz1\x00', {0x609}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x80000000, 0x59}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044600480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}}, 0x0) close(r10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x40) 2m14.558106091s ago: executing program 34 (id=2051): r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) timer_create(0xe, &(0x7f0000000240)={0x0, 0x3d, 0x4, @tid=r0}, &(0x7f0000000280)=0x0) timer_gettime(r1, &(0x7f00000002c0)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$can_raw(0x1d, 0x3, 0x1) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r6}, 0x10) ioctl$XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f0000000380)={r2, &(0x7f0000000040)='/]', 0x40, &(0x7f00000001c0)={@_ha_fsid={[0x3, 0x2]}, {0x8001, 0xa, 0x8, 0x8}}, 0x4, &(0x7f0000000200), &(0x7f0000000340)=0x2}) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000a4b000/0x4000)=nil, 0x4000, 0x0, 0x50, 0xffffffffffffffff, 0x470ef000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_RELEASE_PORT(r7, 0x80045519, &(0x7f0000000140)=0x1) r8 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000100)="e79a62021f09ce67fbc7cb899d8cc5512fa0fd6d2e5f506ac02bb46398fe3573c1c7792f86a014b0d13514cdc393370ee4c8f135029d8bb136f23ece83803b05641c7987e265de2eb41fcdbc66686193ac6bd69bfc5e3b053d54440e1fd5206f02913fbc0c59d973b55148ccfad716422b31f99fbf113e581c6c3b3fbe06aeadd34e41b2dee2611847a14518b5682bf0c733c8388af864a7f3e861255b6717d05a713131", 0xa4) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000000)={0x0, 0x10000, 0x8}) 13.421550184s ago: executing program 5 (id=2616): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000002440)=ANY=[], 0x0, 0x0}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0xfffff000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) syz_emit_ethernet(0x86, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x78, 0x65, 0x0, 0x2, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x3, 0x0, 0x0, 0x6, 0x1f, {0x17, 0x4, 0x3, 0x0, 0x7ff, 0x68, 0x1c62, 0xd9, 0x2f, 0xe58, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x19, 0x3, [{0x7, 0x11, "a88008bea18f743d59f9da84ca32da"}, {0x1, 0x2}]}, @timestamp_addr={0x44, 0x2c, 0xcc, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback, 0x6345}, {@rand_addr=0x64010102, 0x4}]}]}}}}}}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x1, 0x6}, 0x0}) 10.134774405s ago: executing program 5 (id=2632): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, 0x0) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x54, 0x0, &(0x7f0000000240)=[@release={0x40046306, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400", @ANYRES32=0x0, @ANYBLOB="00000095455e81", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/kexec_loaded', 0x901000, 0x25) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000004c0)={{r7}, 0x10000, 0xe2, 0x1}) 9.305166684s ago: executing program 2 (id=2636): r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000180)) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0x43403d05, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_usb_connect(0x5, 0x35, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r3 = gettid() move_pages(r3, 0x0, 0x0, &(0x7f0000000100)=[0x7fffffff, 0x80000000, 0x80000000], 0x0, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x100, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0xd1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) 7.884755131s ago: executing program 1 (id=2641): syz_open_dev$cec(&(0x7f0000000740), 0x0, 0x22000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) ioctl$CEC_ADAP_G_LOG_ADDRS(r0, 0x805c6103, &(0x7f0000000000)) 5.875172445s ago: executing program 5 (id=2645): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000005c0)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000000500)="2b501d4c58982aa42808f7baa8b29a4ee59a8d936330e949447813ae854451114b260273f43301f8f1f2f643c61bce365b56320fe32a8917653ea391c71836920e27e1ae4e81dbb108d467b31c1e3a2c740d7421cda806a3e8fee7d9a06832e3da8e361f0d8e63a3456cf8df7b0ef2be71c9ec493ef6dd3b09ad65aae740490b6d57ce87a8e504c750052df478a5", 0x8e, r0}, 0x68) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8000000, 0x0, 0x32525942, 0x9, 0x0, [{}, {0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x6}, {0x6}], 0x0, 0x8, 0x16, 0x1, 0x7}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x1) fsconfig$FSCONFIG_SET_FLAG(r5, 0x0, &(0x7f0000000000)='rw\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0xa, 0x99, '\x00', 0xe}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000840)={"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"}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000000)=[{r0, 0xc}, {r0, 0x8000}, {r7, 0x40}, {r0, 0x81}, {r7, 0x84}], 0x5, &(0x7f0000000480)={r8, r9+60000000}, &(0x7f00000004c0)={[0x2]}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xe}, @ldst={0x2, 0x2, 0x1, 0xb, 0x0, 0xfffffffffffffef8, 0x10}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x82}]}, &(0x7f0000000100)='GPL\x00', 0xfffff256, 0x0, 0x0, 0x41000, 0x26, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xd, 0x1, 0x7ff}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000200)=[{0x1, 0x1, 0x9, 0x2}, {0x2, 0x1, 0x2, 0x2}, {0x3, 0x4, 0xc}, {0x1, 0x3, 0x7}, {0x2, 0x3, 0x1, 0x5}, {0x0, 0x4, 0xa, 0x3}, {0x2, 0x4, 0xf, 0x5}, {0x1, 0x1, 0x9, 0x9}], 0x10, 0xffffffff}, 0x94) 5.648689502s ago: executing program 7 (id=2647): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 5.455134802s ago: executing program 7 (id=2648): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000900)={{0x0, 0xfff, 0x8, 0x621c58bd, 0x0, 0x33fe, 0x2, 0x1, 0x10001, 0x5, 0x6, 0x0, 0x1, 0x7bd, 0x3}}) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001c80)={r1, 0x8}) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000500)={0xa8, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x78, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffff, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x10001}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8001, @mcast1, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "303d8b1ff1066ec0689a6bc2fa4e021e1df74491a462e34bec548d8c184854f3"}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8016}, 0x8000) lseek(r2, 0x400, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r5, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000b43000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x2) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) dup2(r7, r0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 5.337086442s ago: executing program 1 (id=2649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000002b8b9d", @ANYRES64=0x0, @ANYBLOB="0300000000000000abf200000000000014000000040000002f6465762f6472692f72656e646572443132380000000000030000000000000000000080ffffffff090000007c0000002f6465762f73672300000000000000000300000000000000020000000000000004000000020000005b2c3a00000000000100000000000000001000000000000009000000080000002f6465762f736723"], 0xb0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 5.218672744s ago: executing program 5 (id=2650): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMETA(r3, 0x4b63, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xa, 0x14, 0x0, 0x1, [@nested={0x4, 0x19}, @generic="2989"]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) readv(r4, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4) r5 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000140)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x10010}, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)={0xb0, 0x0, 0x0, [{0x3, 0xf2ab, 0x14, 0x4, '/dev/dri/renderD128\x00'}, {0x3, 0xffffffff80000000, 0x9, 0x7c, '/dev/sg#\x00'}, {0x3, 0x2, 0x4, 0x2, '[,:\x00'}, {0x1, 0x1000, 0x9, 0x8, '/dev/sg#\x00'}]}, 0xb0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000020000000700000a20000000000a01030000000000000000010000000900010073797ac155"], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x181820, 0x0) read$snapshot(r7, &(0x7f0000000500)=""/4096, 0x1000) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0xfffffff2, 0x0, 0xf}) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) 5.017147334s ago: executing program 7 (id=2651): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 4.971778003s ago: executing program 2 (id=2652): r0 = socket$netlink(0x10, 0x3, 0xe) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002300)=[{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f00000003c0)="aa7742d1fd451005faed417201883804b19abd7cc919ab4713e3458f4f82db64ec27104aede175f5d48b06721925533b9ebf0c37c1274277718343222856b8498763163dacbde25510", 0x49}, {0x0}], 0x2, &(0x7f0000001d40)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x40014}, {0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001e40)}], 0x1, &(0x7f0000001f80)=[@op={0x18}], 0x18, 0x24004850}, {0x0, 0x0, &(0x7f0000002140)=[{0x0}, {&(0x7f00000020c0)="1d12171a27b07a46e14cd9a5a028bd", 0xf}, {&(0x7f0000002100)}], 0x3, 0x0, 0x0, 0x80}], 0x3, 0x10) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_genetlink_get_family_id$team(0x0, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}]}, 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.942937192s ago: executing program 1 (id=2653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x480, 0x0, 0x8000000000000001}]}) pipe2(&(0x7f0000000f40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r5, @ANYBLOB="080004007f0000000a000100aa"], 0x50}}, 0x0) r6 = fsopen(&(0x7f00000000c0)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='port', &(0x7f0000000140)='f\x97-i\xcf_Z=\x03b\xa6\x850', 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_PMKID={0x14, 0x55, "394aa4365ba7f0c0863101beddb73297"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x4008001) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r7, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x21}, @NL80211_ATTR_PMKID={0x14, 0x55, "394aa4365ba7f0c0863101beddb73297"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x51}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x64}, 0x1, 0x0, 0x0, 0x40014}, 0x4008001) 4.865618336s ago: executing program 7 (id=2654): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x0, 0x27, 0x10080, 0x0, 0x67, 0x1}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) (async) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000400)) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000", 0x50}, {&(0x7f00000001c0)="c523ed379e9f048e", 0x8}], 0x2) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000027c0)=""/235) (async) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000027c0)=""/235) r2 = msgget$private(0x0, 0x480) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x0, 0x17, 0x1, 'M'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) msgrcv(r2, &(0x7f0000000000)={0x0, ""/4096}, 0x1008, 0x3, 0x1000) 4.793916436s ago: executing program 2 (id=2655): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 4.712386912s ago: executing program 2 (id=2656): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x7, 0x401}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x1, 0x0, 0x3ed5, 0x5}) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x67f, 0x100) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000700)={0x3, 0x3, 0x1}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000bc0)='j\x95\'\x8aC\x16\xca\\\xb0e\xb8n\x8a\b2C:\t\x12\xfd\xd9\xdf\x1b\xe8\x87\xe21\xd2\x1a\x18x6\x8b\x04\xc79\x122\xfc\x1f\b~[\xf2L\xf8\xcdO/\a\xbdJ\xb1\\\xe2\xef\xd6\xc3>U\x81\xff\xc2\xcb@_\xe1\xd2\xb63\xcd\xe3Q|\x02\x91\xf8\xd6\xd7+\xcc\x94\x96Vg\x90w4\xd2*+J\x80\\:|Q\xc9\xa2\xd9\xd05\x87\x8c\x04\xab\xaa\x8d\xa0f\xbd\xcb\x95\x97\x9f\xf0`&', &(0x7f0000000b00)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'macvlan1\x00'}) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f00000001c0)='\xe6\xd2=(L\x9f\x1c&\xda\xfa\xf3}\x18\xdckL<\xa5-#\xc8\xb7\x98\f\x87\xcf', &(0x7f0000000540)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000005c0)='\xe0\"\xef\xb1\xea\xe6\x9c\xe6\xc8M\xdb\x86\xb3\x8b\xbe\xd5\xbdB\x92\xa0\x19-\xec\x1c\xa9+a\x13qQ\xd5f39hSr\xafbB\xe2\xe8\xcd\x1bf\x18\x7f\xf27E#\"\xab\x99\xec\x88\x8d\xd8C\x0f\x95\xff\xfeG\xf9t\xb1 \xcc\xc5\xbb\x88\xb6\xd2\xf2Jw\xf1\xf8oG<\t\x00\x18\x80\xe1Kf\xf8R\xdd\x06\xe8\xfbl\v\xb0\xdd\x05\x05\xd8\xdb\xfd`\xf9\xf8\x91<\b\x8c\xad\xc8\x9d=\xfeN\x8b\x1eR\x1e\xf8\x9dn\x19H\xd2aE\xa0\x06\xb0Yv\xf9^\x8c\x8f\xc3\xa5\x985\x85U\x8cZ/\'\xbd\xe2\xdc\xe3\xb9\x8e$Z\xef\xa8\xe5(Mt\xd3\xd9\xf6X\x1a\x9b\t$N\xd0U\xe2z\xeb\x01\x80!0\xe8\xc3\xce\xf8\x03\xde\x92s\xf9', &(0x7f0000000940)='fuseblk\xe1L\x92#\x05zcX35\r\xad@\x853o\x0f0\x1a\xc0\"\xf6\x11Z\x01\xc1\xd9\x9fb\xc3_V\x9c\xdd\xb5 KgK\x9eJ7\xd1\xad\xe1i\x99Y\xe2\x88%\x92\xb3-\xb60O \xc5\xd1q\xcc\x97\xe0\xe8\xb0\n\v\xa9V\xf6\x00\x00\x00\x00\x98T\x81\xa2@{_\xba^\xa2\x82k\x10G\xfc\xd4\x99Pl\xfa\xc1\x11\"\x01g4\x00\x00\x00\x00\xc9 h\xd0\xfd\x04\x95\x8c\xb1\xe7\x00\x00)\x96J\xe5n\xa1c\x0f\xe6\x93.S\xd1\xd3R\xa7\xc5\x19\x00\x00\x00\x00XQS5|Q\xdc\x9d\xc7\x81OV\x91\x84?],\xc1\xe0\xea\xbd^\x1a\x84!\xea\xb6\x04\xcedr\xf1\xb4\r\x8a\xd3\a\xeeb\x18\xacA\x16\x7f\xdcP\x0f\xa0\x95bSg\x02g\xa1\xdc\xfb+\x00'/219, 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000380)='\xff\xff', &(0x7f0000000440)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00', 0x0) close(r2) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r4, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x4, 0x0, 0x1, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afabf1d875397c8b22d0000b420a1a93c527d3d458dd4a72861ac0000e6ff007f000000bc6600", "f4bd000000801900", [0x3, 0xffffffff9673e35d]}}) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100000000001032151b01000000000001090224000100000000090400000103000d0009210000000122050009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = geteuid() setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@private0, 0x4e22, 0x8, 0x4e23, 0x101, 0x2, 0xa0, 0xc0, 0x2b, 0x0, r6}, {0x9e, 0x8c2f, 0x8000, 0x3, 0x3, 0xffffffffffff0000, 0x8, 0x8}, {0x2, 0x3, 0x8, 0x2}, 0x8, 0x6e6bb0, 0x1, 0x1, 0x0, 0x2}, {{@in=@loopback, 0x4d2, 0x32}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x800, 0x0, 0x0, 0x0, 0x7fffffff, 0x5, 0x7}}, 0xe8) 2.601969191s ago: executing program 6 (id=2657): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x3) 2.445097844s ago: executing program 6 (id=2658): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xa) landlock_restrict_self(0xffffffffffffffff, 0x3) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r1, 0x4) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) 2.373586304s ago: executing program 6 (id=2659): symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3e, 0x0, 0x0) (fail_nth: 18) 1.910664848s ago: executing program 1 (id=2660): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000009b80)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x0, 0x460e, 0x3) syz_fuse_handle_req(r0, &(0x7f0000006380)="3a69d0358b8795b71fb19ffb73d1ed252afb0895807a7e94a0346b6f78500dfab89a799512e9adc53895c99770832097a86550119e85466c39ecc6b06924aff6f66ad59bf5de83fe35bdb59398cb9a4f137ff943ec8080303cb8f834c157491e1d0cd7811dafb3eda50dcd416d13e2d258a701caac54b98d5b6827ea423fcef9c0c7c9be478948cdbc81bec3f6ad71be0989815e48effa428e6b8d8cb7444d5a743e18da288fbf182535b931f5852f75f3fe6e69b95203532873f838a21233f4ee780bf1ea352b5f0551799711bc47c527c1489c964f5212d68a5a58978d5e40e7ba448d07c7560ea8102991cabdec6162dc359b2ea7f282ca8b208b1411b8b9e562069a47a32f85b7e788291f1dcd9237b8344b5adfca065afcb8eee0df35f7cb473cce75dd7798f94aaf705e743585d339570afa9e62e5db4f86c81b85a8c33bd2a4cd442ea30dc67f43c3cc36f14f3497eacb7e6952be9ba1a2c011e7278efaca5046528985f75511660e2902743c9a67b7830b1683ffb2031df8d03b9113f65c6b2bb38ba4c54d79158fff175a1e4893218bc12f75e115357d1a93afccd1ce4228b74931641e4d13e21f61c28b00f263fc656c6d3a3c4d7e91cba98c2b7ffeeda2ff00d836c6e7bf8e38906cc810ce71f270eebe8ebc8b60c9fbd084bf5163accec37293d2e79b679f1e58c2a853b34f5d4977d6db5c19d2c1cc0efcd5426b72f869d33b1b4403db0ca579d2d8e5c130d127134e6fca56d1bef8b101d56ba072070552a1e7a9f8a40ec07d7cebb0b563a0b94e474ffbbc8fc494c2d42ed3d1a1295c38e059539f3fe4fb1940145fee0ca451adafb7bb82bf1c345718ed2cb905cc76521320716f3a9c1592fe0d518a0360d1c1d01d252bc080df5e37fd2cd713fcc96db9dbbb957c9b8e7bf1d23978466d09b1f9f7deb213297fb3ae0d50881d2f176a442eab9fcac815e62dfee050c7861538c961a1d74648a376abe0a90cc9e519151f5bdf4a1bc0ffdf8b5e8427ffb74f54b965912e0faad0785f6589d7972f39fa378c4b3e4a24bfa84243c9dbe40b17b26dd6605229f35762a61c1c92cc2a86d837ee0092d203b7523d71c941dadbb1bcd78f44b7fb14aeb7acc6c75ecc22bb5c3fae741ccf68cfb4f8c6fd2ce80e9e55a5b4bd3452fca54ddbbcd26afaf1a780a556f70be6218f51ae3591b0073c58042b6323dec0caf80cd2f9fac1f4a7ecf4dd356ea20be93c5224ab24e4ed5127551d1a7b6d27297df5c7f5d999c7d2d5ae3869166fda30de5394bcd0662e1df668cf9eb60a1c44b61424b40e0c1c14b1375407be5df5d6f5b5a5fe42e873e8ad80bd03c94c418ad9fd0dbcf9aba10ed89ebdc1b6b23d5472a5eae77a11c44df02f981f0de36813903a719f54e0932b6adbf97fb20b449ea9e8d27eae1df823f0696f19a180bb65b86f7413110b039c5548178b247434485519eea60e808e3296f313743b7f239ead437dbd70b6e4dadb8af29d76044534a51b80bc9538503d107aeafb39d5e5ca395473492aaafaab8131278c5025d4715567f52f6f21c843697d5c026fcacdb32f8b27f1a104a87110941f6f66ffeb6543cbe5b8ba2a921bba3a63a88b4061039a3e28904b97ebf3a4c83dc712207ce8a6f9e077ab3d3981201dfe3426a6346ff3b282678e71908b56d7c1233ef5ef175df62883a21bb16dc261ef0f8a7e7a2a2e0ea3d1b748b5ea3bc1a12f7204e9571dd80b5f47fd0b72cfa9bbe2ed76321cb3a9a217be8e0e8dbaaa0b54b5897ef78e820caa179b4d9cdc64d3d731c634c45258f62307cb4c0f8e35971bb86c49d14be56e5464d99218d41ea9b8636abcd8bf00fa98b3d765a847b64ef2bf573f227d39a201e5706e332e94ef84cc85ae16ac058109942c6789374806363984f9a5727b973d250fb5115dee0888df79192bd4fb8412c13c4c4e1ca06b5d9442cd84056dfcf0327bdf5a2de82364266113991cf091ac16874d4d77f9e9d8c45aa830b8930425bc34a68948497cfbfb651d213682b5b3e2a62ee102c673f53f0cc7c3c1a1e8141895aee88f813ae501fec0e82430f0224496c29d61a0965eb29568b67c53b9c8b5a49adc3f58db1c9c9a2d664ce4cee4f90ecfe1210813d152c8a711704765727dedab05f58948c25ed1ce350bb2361bb734b0ffd4316b9235279d2a79f756380b7ab4f9904b386067f9f722ce58a2680006e76bb792e05f6ba0bf2f7da9e875a9772456d8e0d65cd6276acf5ceed8f7e1789bd90e2714a18f112458fe7f832f278c5058f3a761a8b6f5e9b114e78ea84929ac0a5a757a2cfc13c26e45c3a29292506ee3422f14a7dcb8e07bc8822b6da71756bbe41f869a686b95b9b59cad26e567c55ec762f522adaa25e1852cdd2fcfb7df27bb70d6cc20d0d772892cb225d4abe9975e5ec8e3c00cc0f74ee8938a18c007bf7caef0a1e4ec6403b30ae8ab4dd6b27cd8c548219e139903f4a4e3045fa1973ea47d1fee3d1983d35f2d5c7a21328ff0ff203c397886379ac4f2aff4e40d7802ddb7ad87b74ee82c2b3435d93668a27260c341f510af51cb381dc90d81c065efbb317aab65505114fbd9b8e9650b79b6157275cdd69dbd73d820c0a703b804df00e3348be5541ff9516999ef932f15783de2ff4567c3d576b0f4a38bfa739cde8e8ac2191400c63597823cf382db418129032ddd96b9ec816f405b556af7f9b5999122d3ff1bdb5eb46b8411dd154b854fd3a35320168142be36a641534df1fda6ce982fa7a74f985c1c69023e84c93d15c3f8b64639fbac6e0e3e746121f90537cabb5d268e91c5654bd9c605f71b34a79f131602f88681f445b7fe339a242a76c19e0d7c46445296f9c9a039052ae08821781b545a3bba5514e03f204f1491b673167b464049f83cac06c78a93f50883179cae8678360d5c1c567a70f8060312f722f38b7965cd1ef1e57fb21b9da448964e174692b79ef8c9bdb1f834ed9bbf2844c7957eaf2ebb3e933e94afbdfa6949a5935cb38a2aac88855124432eeaa9a974346c04ee4f6e072dae06af6d2d29c6eb2a130b23958d3aea3cfa6947f9130963987e56e8692a57b505cc8f4ed1966fedf8fb69eb384d8c62668979ef5aad64753264446e7fc24265cecea4a5e4a408774f249058637febc5b22beb8e24b390eff5ca08a8406f10a0d1c4cf043b354c72971507095a4890b880dd5cb2ff532e397b8198b13b1da26c9c66f8f8ec8d6be44cb7a128c97e73299958182ce5515fee98eb2cccc5e6083ab5ea0ae673f07f57d688063898e1d0361f88915372b673b9809beb7cea1744c8a3512275dfc95b18c007257c5a7201f645214a5a422167858b30ca6616cb5544dfe48825ecbbfb61bc4ecc1973206a33784c0db19ab116d15de145dfb65ee262bbbac6b68faeea9f84e3bdd0266d3814ae6f6b9e285ea372507b65201e6f45234f4873205c6b88d73a363cc9c18aebffb9bdd16e4eb5cafbd34d1a623da1e77cf5959ff12d3caca9ddf63aba1f7465cd60416b82336e67228c4febc5f0e6bcdf478e6d6cb827e06d86aeb6891880cb650bc9be859dcd572071b2f065bdc5cca1969628e102d3f781599203db7072c4e4bfe957f59fbb269a8bf4073985e6e876681d225642a94a1534d2e7d83bd3257c9bd6e30f1e3eabdc7d641acb9de3ba963c17a3c5fa11c98abb78226c702fce43fb3e764deba0686895074c7712543ca12f4a4b2be2639a83dae56b84bc2bab94642ef81adb60d177a8fc97c5561f2732bd0c421535b24dc557d518533cd2b55cd3b4c0cac986d0de2bfe498bee1852b7c7ca0d10e6bfadbab9e3320319e82df61c84360edf85af4f6cb9e56a84001e2a94697bccd7985a5d5787d7450fc62738a039c3899ad6b0e116e2e4892926a114d40fae98acfa5a9135987381532ad0f9d9b0d56680c18b79ecdc9720b47036d1329a17901b0dba4f1cdb9e28b34a28322b0f86828f66482ae59e01839db2d792b3638f3b9aa73275bf1c4d6ab971ab9aa153ac4609d3983fdf3d7b28484b74f6416bda1f456bb043f1846d74132e9c3b7499c9a319294b450c542a5e8a139b6ba9f33762da5785b520362f16f6867dd5fa4877317c4252336e06b2306bc465617f6e156b0a5ab7a700ae3430a6265647ba4e5fb4cca96bce614251026a809a59aef62a9f94249f90e5507aa4fdef0e97d812244f324e4438eb834a49ce6e2c0cdaa4a922c9dbe76c9e39d2588bef339676a11b167eed69b83f9c678da4f128e2f266ef5337857635c4d4b20bf7613b50843faed7f7506dab0d9ab891f0994e20414cd132d20898c5b028a659aaa06fef8e04086645e6088e9d363edbca9bc61ec7cb01b3be3b102621205920f7038038d41ee6c2aa01c9bfc5abe23d507650f3290fc0646eea411fee95c694a913b17fbffff078ec9c8c22f6e2e92a3ae0d033d29c7bcc7610aaa5d70f2f9ad04ef75b5400e9d71e00f210a9276fb5fcdefce6f31c9fbadac657870655dfee0490400138637e34a9b637340b1a7ad21360bd935e5e135ac59633274783afc23239c4959824431640fc8d349732c88df93a913ee2243d07b3ccd11f1e560706747a03913bd3bf85839b528f6935fe2978b321f0a2b8b750c8cbb3c18d57efa35f594efb97b330b8d90763a1330e60a0234919021b914f9596a40a268e3f9ed17a1e906aa4775bb1b78258057f96922a5ac9ca03580ad0e0fea0435f15747c4da1f1d367578b549c8a6e1d270805aa82479917544883b792bd0493ff57392c3667216f2aa4fe754026f9642dfc85b57b04dfe4e31ad7900c85a7eca8fd940b9d746212fc43581f0a33bf3a9043d992cd4da8e1aabfe33c837f5076b22df6922926a8789e39a062a98e730637c4817e27397887816c1282c3a05af928b8788f8e00b09c312c27012c8311dc3f7c71e139d5cea56e89cf871d6dc5b2ad6ac748be13770f8c865a56ba4a05ff4026d18773cbdadb82ff513fc9df3a42523e9d65a54fcffadc3f026c84f9349a1404df5a5a24fab3fcf1c152c4dd799849f2adb35e9032e1f21440e181e3dbddf6a9d9886c40a62b6b0f4e9a258c9eeef63e51ef1d1a8d5f40a573204fce675983fc7c01213ecad4c6ce47de8c2100a4e2fcba11a1e382e99b93f65aaee22aafa09a0fca1dd0b641b17775314748bfbf1555a2df601b74cf73e8223dd5f28e3589df3b70d6383b80dac7440bde4644e65cb09cfa89d0cde0b5c9a5a6e68448103c5d1033e39f779ba1adf904d094cf92f4cd8b16273beaf747815d8b6f5f2c7def0ba2a3c96ed1e36ecda7f4783c2db6b34eab0bb287cd29f96e72a6a51e60d65bd5da7c459c0f5d03a826143180a18d059605bf8b030bdb13e57e85e87f166e4d6db87079060c62583b525c321b2d5ce198b3a28d94e8904b2034d792c16aad307bba3aac982270c3175248944db5fafb4cb1e0fde74337663eced31ec0de2d572c3d7b67d13b7e02f95dc4e91b8128e6dbec1f617b8cc56c79ff00b89385a2d7f05c5b35eafd85052de38cf053ed503ee038e1443b6020e529d226e8c9a1c43eabe8cd392ae577287eb9033b7636ee4afd5c8911c80ca3d7651ce1954d636bee615a1f4123e7222839813763ea184867758a469b040ea13fa022392bcaf8fc8e7a83061a0620ce111e116910164bd47a83163f182b81cd27c6edb1273877bdfa8de178585a6978e8ddabf625f6941203526704a3ed14ae96a30acfa2a487d95187142df8038b8d482668412543793f27c6fc47712aa23e8e803c7edf43f76cd8527aec785b39561a1aa7524558731818f7c4784e23a8aef71e6d0c929a4df520cdd424abd7c3c637b77d98b35802316cf592e2ca36cb18bd0565e2bd1db5952dc63647435c2e88b72dccc4dd312cce9485a4baeb67ccef9a450e6570cc30e3f91768a521eb66cc2f33c4f8b287b89803909a06e7c78a261d9b9e08d1a3cfb9ebc7ff7dc7dc9cd2711f44a80296f14568a973fb02c40d83b61f93301a8d9ab9e3773fa8165145c019b4d16a82eb890d523159e4228ed693b6345be75b9f4cd5b4b6f4ed7854ac5b946cd2cbf76c1ed36d97876b49263a1f418d84917b6e06d07013864aa31a88b65b90a7db6372377ba6dc9d3b68e3fbd20ea5b1d8a152c0684bc96ac5b6420e100c3575b5bb0dfaabbb835d2c74458433c58dc14c70a52ecfedf27409145e80ab561e329e8d3427528c268c5f28b7b2d6acb53d6618c9c7509e24650ce8d7982453106197fdeb79962de069c3dc2ced79a9ec055f8548de5c4a4ec050530dd89007ed8da3b225c62c30abf7668c6523cd0bfe07e2b891b510c4410b02d723458c1f7b60872353ccb695d7e661f853a1084c701ffc3c8739c836c404a8e6004912b199ab848308ded8991c5884e477722be9ecdbba3424b0c8b93afe920e0706fe116f38965d928d96d2103f06b584f783c1b04d68185bd80d35c8b6c88e31486358c3c5e87c93b76d46fb5a224fb2bcc8567dc9d3a55c6ec6f529e3b84288b10df0200ec2efed273bec620982f1370f35d7f9e79ded33cbf5389cfcb686ddbe6d117083e74205b8312255f617f6290c174e61edd543140d79daa0538563b344fbfd15f763aa9109ee179b6cd7368b1527a4908f41dbf45751e8a8cce11e15830794503f4ab7f960f7530ec60e73fbbcd0ae74f91f3d001be7f904cfa33d4f2b5b848996ba3abbc321055723d639a33b0392845d1ea5d8e8f97dcb1f2abd26dc59361834fd2e6856cd4dda7ff00fb2f0e457bffe1b50b3ebd8f002c17a704a43a25fade48e42ecbcb3595341e559982e249ab077093a2d4c785dd28d07e2515768a305594ffe0aa140b6a9c3b98c9bb4fe82ecf3e076164c9be486a370739472d57d28e84cbe2f69c1f84f0d0547191c67424c076a623bc2dbf2e04f82d69d93a4a1a9c5de090c07388cbf0745dcc1fd00fb9602fe5648d62845a8a09a317fdf67a7f63d50477b8fb35677dcbb685e8553a0afed99b56afa55b881612219449c215c19454b4ed6a013d546d44027a3494894569cb0f0e5c94ee9c817db6cf4a612eee11386536552a80d8564f75af026d811c1f0ae84020c62466b630cadd2c78e14f31c5b091f6f16d9e68efb57aaa085453b77ba460dc4a11c0d2ad3fee842f7d1e562b14117df1c83e7684edf93184ea0668f9d20f7fd81f4645618089f254d9ffa379a5c06e3e1504433855b845aa3d9c30295d737d2d705bb51a9b9d6ad65972e7076e854eee5b73d0b87e7e6c05bc158e31c706ef823fcf6e21b0d4d172dd77ae365fdefd295ec31e60406cd215455ee11de3ae1193d0142889577242455c3c07e7e910eb61c239fcaef4cee4736e571c9e3adb64185dd392f1f441a6c7673af72dc86dca5e6b7c203525a287a731b43b6337f19cbd9b0d2fd5b1ee5105ab9173edfb5a817eba3e0df0e04790bf574dbb6579b61de2d48600bc7aa9feb24ed08249a3f8ef123fdb3429a97c3f96c1fa335f850617158bfa5c7ad11dab234d685862eb4a60418afe31c9ecebab9f16ccb05a0b15cfed920528aa59e0bef9dd83720ca58e31902d9183b90bc44a3b7d2fd19dd7345ff61ac6f6ff1ac37dd90bc0dc130fd2e0520b285ac615ca9bb0525964ac12ad42cdee879b77bd22b881f09a6e725092d2251773ddc3bb33c72b2de4e831d92496730677938c9565d36c459ae3e10e8db21d0e6c4fb15312b23a741b6a1f494dea99ba2c7103e84bfc3c55fcdbd8812167739d5eb3f76386082aec27b19d41849b898c70744daf0edcc1c1de022c04086525799b718d91c1be50bf0bb1695288bd15c94447b118ee3e0b2ebb12cfdd22b1534a4251c742530f28bd3daa1da0439e3a9a45ed55cdf33e4568665ef83cef074469e93e6ee505a22468b723577147ef4eee0c7be889275cda7d28052580504040c5e8449e596c4e3005fc8e5a4cd65465f6e3c24e96283d3b8aaef5822fce25cd8473b6bc69b4cbd23cc33c8073dc1cf212edd58ab4a9fa18deb88478bd80af0afc650c8970fea7a29869843071d06af17b6cd56e4dbd88912ad15e9e023762ab8749aff944db0010f885b431648bbb3278c386eb5ecdf91bad6b22d894982c461d9ad4ef825441b851e42ea2ef70b3a7330b7064dc4508e5928a5e016c3eadfa4c9ae0b4aa81142210b2fbe5da159c4539a214d8ffe4171a9cc6f39a8a3dfa8f5fc5f34c8ffd61ac624b594d9b414b1f26ed445608e91a6663b46b728b6aa209b6ba8b1308459a7ff9a3d986e9d9ac924199cee04d461b4dc5ec952ea202b6a98cfbfd6c2029e6a418388d7edbae3314d6c6a4cf48481e9d00884622532be884312b1d7bcac5cf0f25cdfe7a8836d3a1b7e0fe97ca04e8193a853627cad41d97f054a7b276503900d58f028f9e8d7e3110251f666a2fe875260a6639ceb3609882ff15d12297f8f5c0fc6f35d2622d7d727e48caccb2a41bd1d498c40454ddb65ac3999ca5ea7e5b7512074585d7661acdb90292024ad64242b0568f45c1a5cb1b10cf3ba8937036ca7acc272602b1a461e027761a8ded69bcf4940a638c32aab1895377ebb21e9b35f6e64ce864d7a4abc0d9eb887c39b7993e13da7f02b4e86ddad4b7ec0104069e1551acf726f42e8a2af83a11e5176c4e0bcfdd8f5f0f162dc31750b20ba6da597745e7b76f188fedd4ad164a6e25156f2b086aa19cf18d57388de7125760dbcabaa5e675f15672da2e80db6ef91b276574b63b698f8b4d9af64fe3ad6c3940c06ddca77faa22fba47c3d30e9d33aa628eaa492efdede342964c368c2b85fee61b464b3001319678c554dac096fc383a4b68e8f03f82fb1e1292aa28f8894e0df1e550c902146f094205e4e36a0035d03f99ab4d624e2528fca328380a9ed7eabd6f0c86fa0b31137e07f1cf931249b082918ce5e88ae38fe11d96c512aaee5ef713608862ebebb6e3864a235e4cdcbf658df7ad514aaf53f80a06c3fda248b9bc7e1035b22a9f7e3de4fb0fcf4f69680fc16bdeb951130c97adfa2bb2607381f39e199f32ba448b842ac0744c91633a15d11d015a1ee7855e1112d03ac0a8750b878a3abecac186aab8e96d03ccdd480263d3151280b1d3d65319921096914cb4f0b90150621dcd759d69d29b8b9ff3d558c8eaa2643bff7a1d86d5ad07742eeb669803112e3a50ace240ba0e1456076a7d6c7dee8a75a92a9c10871c87ee941a33106c5e7a9e792dfb0e4b767a1cf7615462fd0bdc947454be2c4ae6fa0e8dc068929324465f2879f30aca3792f13890200bf7bd04936005dc1a1a4e236e597775eeb208bf610b736dc962f054680ba78353a5d63d5197ef7d51a9cb43042ddfdae55523b2f78ae4212b2a7161c673be24726c4f0fdc508b309e8446d2bb1114d134cc0ad498310f0f0fa30a89fc43cb344552625c655c21bba97b953644c3a8799fa34fd569a493fcca9a93d53a3c56492e7b660d509f34f537aa7d4335bf9d1d3245845569538359f437e3865b7109b1c8aff142c5faffeba8898c0830366834d43edc2b6318494b822db8fe5d67df7210b1d22a04aed98a5465311cd102b2c9e5cc9356b7179238530018cffd46df7eeaa96512534dde2b35e50e0a8622d42bcb5da03b96dc3827cdc97d915d9c3809968f800888f574b080355035790c7fdc510d29537d58b4df9cb116875ebac15f662e3503de749e1e95c2eb3e6159f1f74d56ba4647939dd460bca9001343c78b2747a449daf32d0c5a35c9484c84e3cbab6d7780225a587dff329790833da3a1b71d56ee63794fa6d4224df8e7f4562bbca73d4d1349e36cdf07c872f5aa50a027f1eefe2962af99c0c73cdc8ef6ba677ee0a6068c8e832f0406f9e7ac448109fcec97986200017d85a79757084f102350fb6936ce4924bf5ff51bef43460885362e5dc4b0c2295c1cbcee607369ee69adcf7c93b1af67c2f758320f65d46585def74d442a8e6babca6496a91bb136997f3b0c82e0c8eb48fdd170aefe5c7b9c156ec2db3a11fabffc7ad1f2c04902d00da8bebb5934d7b46a8e49a63de38aeb5940979ffda7f5c566b938051b78edd2ccc4a8d47c0b70ad690b3c0735c3ae53f558324fbb9c52c91e47b6b78ed4ab591f4c8e037154e637d791c8ba80dda5eec368720be1273773974e5506e9fab39254c0dcb8fad6e71908c476b5048f78aad193e58fe503c63515aa4acd9fd58435f54ba3e5880d84dac3322903504d1b2dd3cef0825617be22b44bd8b4f9c116b5d506c02fca710f10208f30949ad3835575b358ce92ef05cd3bf42c5fb3ebbfa8298503c66844bff3f6b092289dcab21de514dccd33e5a49e6c759b67ce03f197cb634db698ade760e2aeebf21a2563ff48717dd17cdfb394d28adaa1e466904fdbf19a25f3845c7cecb4792f599fbb1282dfd2c36a32bf2b1a9cab1aa9efac6fb8ed974fb78fe049c57e88364bfbf7d77c31d7fb225b36a6927816c32a0aee7ab09694c92bf3c320939bd81454c6de41e99f5416f9e504666d27c741c600b9f6fcecbcef649607d424aed5b3c0aa5919c08ac3ba2d98f57ddbf403d80ff587c5008cd92d2282d726f1bfab5e106661ab7d9a957ed9b61ade108c7a76883318c69a4b4f13ddaf95be544bdb5cf29d62ced22cf423a91917e4336d881888f0ff40fdb3016b17765ce4d404662209038be79917832c2818dd7fbb338d211e583131fe8b1a685bb615a9a5665d48ac4f0ded8462fbafb7992a6c087a06f3412a48b4fab2a84c1ba09f128aed7a1de7edebc67e38b64be81de07938da15ec98480969e1ff738372d1f4b7844cab10ef0e758b670532c1de223aabad5c28a4e88294771388b4b8c40da334780326141fa6a704e87271ceda25b3c09a648d995d5697ebe9a85bad4bd19a6ff5b7ce052550eb1337948bb997595b6e8e5db4f02cae7d26dd695e40c69e465e8918fb399bbd487c1e33db94c9754cf66ea8773932bcc080f70b9d07d3c0eef270d847fb532d22db2e0c56303a15222d0caa51c456a62fb78eafe5eefa913220a8a9238ca7009bd0d3e242e76fdeab718f1ed106f78d3881323dfd0c3aacf2a0b1e537dd6e39850500ee0e71801ad8c9f47d1b5709c305e3f44492c521c7aa4bfc390ea0c7c580be6852803a3b206edb07b64c2d09a795144c81fe1e8fa710d72acb02b3b74b65ee7dbecca6691770612d20b47a14e0a640eeb4bcca6ec5831c59984e43c94b81dde9905a309878a175bf52a40b7baff582f68398645237a1a0751494e73819691acabc6bc6df0bfdb50ca1d277f4d2c0a401cee3424877a221ed169300ec2486f957b565809bfd44d8d6a0db26438937f913b2fc06888d95df9147bccb0010fea9204b2297ecd8275b1937190efb0c231ec8ebfcbac742e947dbe25d126fb0c0f041516a1287ef0f0e14ac8232812fc69b5cad10656a47049c313a7ce26d5938b61bc7bcd6c3558b032d2c5bbf10870020504f01eb2016d82d15d0da0df56c91d80fe9683bdf39abddb884519791c6057d726abe98b1970442e06ed85531948e2e2cd0ae27366c27cc0ab7ec210be97d647a", 0x2000, &(0x7f0000000a40)={&(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x28, {0x7, 0x2b, 0x4, 0x4a420200, 0x7, 0xd68, 0xb5, 0xa, 0x0, 0x0, 0x100, 0xd1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.822367816s ago: executing program 6 (id=2661): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x377}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r1, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x2, 0x9}) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x60003, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1c, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca4, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x1b, 0x0, 0x0) 1.751197552s ago: executing program 7 (id=2662): writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a06e7bc45ff810500000000000058000b480000", 0x24}], 0x1) (async) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) (async) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x50}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001680), 0x400, 0x0) poll(&(0x7f0000002080)=[{r3}], 0x1, 0xff) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000002100)=0x19) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) (async) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) unshare(0x100000) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) inotify_init1(0x0) (async) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r1, 0x4112, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x78, 0x2c, 0x42f, 0x870bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0x7}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x44, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x2c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023893) (async) getpeername$packet(r7, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000006a003e5e2bbd7000fbdbdf250a0000000000000008000a000000000004000b0008000500", @ANYRES32=r6, @ANYBLOB="08000500", @ANYRES32=r9, @ANYBLOB="08000100e501a56a0000000008000100000000000800010001000000080001000100000004000900"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4001) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd0000008019000000050000000000000000000000000000d900", [0x80000000008, 0x2]}}) 1.583559642s ago: executing program 2 (id=2663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) write$FUSE_DIRENT(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000002b8b9d", @ANYRES64=0x0, @ANYBLOB="0300000000000000abf200000000000014000000040000002f6465762f6472692f72656e646572443132380000000000030000000000000000000080ffffffff090000007c0000002f6465762f73672300000000000000000300000000000000020000000000000004000000020000005b2c3a00000000000100000000000000001000000000000009000000080000002f6465762f736723"], 0xb0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x60040004}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 1.529968741s ago: executing program 5 (id=2664): sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYRES64], 0x98}, 0x1, 0x0, 0x0, 0x48c0}, 0x80) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000a40)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x34, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4) r3 = socket(0x400000000010, 0x3, 0x0) write(r3, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xcf2e795bfab464e7}, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000240)={'gretap0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x700, 0x8000, 0x3, 0xfffffff8, {{0x18, 0x4, 0x0, 0x2, 0x60, 0x64, 0x0, 0xf4, 0x29, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0x13, 0xa, [@local, @empty, @rand_addr=0x64010100, @broadcast]}, @cipso={0x86, 0x18, 0x3, [{0x7, 0x3, 'r'}, {0x7, 0xf, "19fdc716fa7348a9af5fe830a5"}]}, @cipso={0x86, 0x20, 0x1, [{0x5, 0x9, "a94ebfb95a773b"}, {0x6, 0x11, "872e7a0bed79239f38ee9ab88e368b"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x10, 0x80d8, 0x40, 0x1, {{0xb, 0x4, 0x0, 0x4, 0x2c, 0x67, 0x0, 0x3, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x14, 0xf, 0x1, 0x7, [{@rand_addr=0x64010101, 0x4}, {@multicast2, 0x7}]}, @end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000380)={@ipv4={""/10, ""/2, @multicast2}, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000400)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x1, 0x48, 0x5, 0x1, {{0x31, 0x4, 0x1, 0x9, 0xc4, 0x67, 0x0, 0x3, 0x2f, 0x0, @local, @loopback, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x1, [{@loopback, 0x4e9}]}, @generic={0x88, 0xc, "479cbc96a4677484dc01"}, @ssrr={0x89, 0xf, 0x17, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0xd9, 0x3, 0x7, [{@broadcast, 0x9}, {@remote, 0x9}, {@multicast2, 0xca0}, {@broadcast, 0x3}, {@rand_addr=0x64010100, 0x81}, {@local, 0x1cd5}]}, @cipso={0x86, 0x17, 0x3, [{0x7, 0x11, "d1a5e9e645a72ad64eddacbf808c1d"}]}, @lsrr={0x83, 0x13, 0xde, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @loopback]}, @generic={0x88, 0xb, "1f1d45b34d5620ff18"}, @rr={0x7, 0x1b, 0x3d, [@multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3d}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x330, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x224, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_MASK={0xf8, 0x5, "e1b006006f2c022a80ca6a03e9c0f1dd50a14065c79e18f8e7bf2acee3385aad9d95e5dd22651685340d635b4513d423c353fe71cff9b0988937386eb33dd541912335c767cd00f8c1bad807ad0fb67255d422388341e8cdb67deeebcab9033c0442107a221dc032cb7a0f723503afba5441fe410da3d41799c815939a908b6bf87f96cb5ef73a647dc32ff8b87d906a3733c50a9145153a6c83b1134276bb93c21b33bfc3b4f1c3a036827c7695e1d73b36e6ab8ba127b096e3eeeb17f2abecfdfb33851564e70660e09508057f3ae646fd3ad11451300bdbdc08e659886a6f71731c27f5d92ced425db3517b15cabc4c9e8236"}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#%\\\'\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#\xd2.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '%\'-^:\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0xa9, 0x5, "ef8c0bbc46585c0c8884492405fac50ef459911cc8e6055e09e1df87b9b5e47205d353be38c3c4c6d637300fb8cbe736e9bfc3a6f3a579f998629d92d145dffb3b63a8c79bc54e9ecfdc96f58579b6a76aa03bdca2c98e96dc275614650cffd632922cf63f437c8e9d8272e31559249ea9f2897ea2a182ee69c6c88dbb4a0282c6e24a8df92c7b8e43878580b6d3bcbff6c1456e4670b400987a78efc8ead599b4a23176ce"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_EEE_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @ETHTOOL_A_EEE_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xf}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x2004c815}, 0x4000000) 1.485281444s ago: executing program 7 (id=2665): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x8000, 0x8, 0x5f7, 0x10001, {{0x8, 0x4, 0x1, 0x1, 0x20, 0x67, 0x0, 0x4, 0x0, 0x0, @remote, @empty, {[@timestamp={0x44, 0xc, 0x72, 0x0, 0x7, [0xfbfffff8, 0x2]}]}}}}}) r0 = syz_open_dev$dri(&(0x7f0000000280), 0xfffffffffffffffe, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_sfq={{0xffffffffffffff1b}, {0x4c, 0x2, {{0x7, 0x4, 0x1000, 0x2, 0x5}, 0x7, 0x0, 0xffffffff, 0xf, 0x27, 0xf, 0x2, 0x18, 0x1, 0x7, {0x1, 0x19, 0x9, 0xb, 0x6, 0xcf}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40004) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r6) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="41fb3578bf8a"}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0xfff3}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0xbd5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011) syz_usb_connect(0x3, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYBLOB="b238"], 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000040)={0x0, 0x0, r0}) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000700)=@sack_info={0x0, 0x2, 0x6}, &(0x7f0000000740)=0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r12 = io_uring_setup(0x1074, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x0, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0xff, 0x0, 0x0, 0x8000000000008, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x2100000001f, 0x0, 0x0, 0x3, 0x0, 0x401}, 0x0, 0x0, 0x0) io_uring_enter(r12, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r11) 1.419467516s ago: executing program 6 (id=2666): openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0xb59}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.257707142s ago: executing program 5 (id=2667): ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x4, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, &(0x7f0000000100)={&(0x7f00001a8000/0x2000)=nil, 0x7, 0x4, 0x4}) 1.121412489s ago: executing program 2 (id=2668): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, 0x0, 0x0) listen(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x6a) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000080)='./file0\x00', 0x20000632) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200018"], 0x69) close(r5) execve(&(0x7f0000000200)='./file1\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x72, 0x8001, 0x0, 0x80000000000009, 0xfffffffffffffff8, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00'}) 762.436377ms ago: executing program 1 (id=2669): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000000)='D', 0x1, 0x28004044, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) syz_usb_connect(0x6, 0x24, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES64=r0], 0x0) 667.435833ms ago: executing program 6 (id=2670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000) syz_open_dev$vim2m(0x0, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) creat(0x0, 0xecf86c37d53049cc) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x1f}, 0x0) write(r4, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x5, 0xfffffff9, 0x0, 'queue1\x00', 0x2}) write$sndseq(r6, &(0x7f0000000000), 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r7, &(0x7f0000000080), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="540000001000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000003400128009000100626f6e64000000002400028018000880ac1e0001ffffffff0a010102ac14142b0a01010208000700e4d8fccf2134b5b4ca415096b2dfda7b43d7c80f8ab037c60efef5dd1ebe0e2877b15c106b7491ec7aa6c37adcb603a350729fe75b21a8cbe5dbd2bef9650a5aa140f215b00b9d539f30bf77d67fc66f54b8452664692933cd5ada6816f51630fcb515eb78927ef4446bc7e4a3aaf330596e23110f821dc7f0a233fab08c7a61512b3cd9d219b1ce3d3ffff40ffea95d469da805c373ca8e5af0aed6a3052cd9b76572bd9d85eb1a4f2ebef5fb14cce9a5ebac9ac8d71e37e26bd2fa292a6299c6e48b4d0b0f2daed562b206ec7a66dcee3e037cd6749615da598ba23710b493cf89eb5de2f709866f56e7d20a1d246f54265878313b02d517a1b0d3f27abf2893930c51f8e282554bbd75c7e0e5fe1046c3f1e6490e2d8569fab717589cd125e235"], 0x54}, 0x1, 0x0, 0x0, 0x20014800}, 0x4040) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1800010ef581090027bd7000e0ff00ce5e5946280004000000000000000000000000000000de0eefdaf240829d2071a004b95943dadf72599908a9faa95978cf35e83f80092410bc98e44facc168e1d4"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20008800) r8 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_void(r8, 0x1, 0x0, 0x0, 0x0) sendmsg$kcm(r8, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="4336c3b8906cec463d9cc7449f30a065bc824277e22a8852a54695fe4ac6", 0x1e}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 0s ago: executing program 1 (id=2671): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="ec000000210001000000000004000000ff010000000000000000000000000001fc0200000000000000000000003a000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe"], 0xec}}, 0x0) kernel console output (not intermixed with test programs): mock0: Adding to iommu group 0 [ 515.599026][T21581] syz_tun: entered allmulticast mode [ 516.468313][T21608] syzkaller0: entered promiscuous mode [ 516.501274][T21608] syzkaller0: entered allmulticast mode [ 518.298995][T21688] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2192'. [ 519.062003][T21689] xt_CT: No such helper "snmp_trap" [ 519.158510][T21688] bridge0: port 4(batadv1) entered blocking state [ 519.193883][T21688] bridge0: port 4(batadv1) entered disabled state [ 519.242362][T21688] batadv1: entered allmulticast mode [ 519.272721][T21688] batadv1: entered promiscuous mode [ 519.377435][ T3107] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 519.577426][ T3107] usb 3-1: Using ep0 maxpacket: 8 [ 519.637666][T18662] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 519.646962][T18662] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 519.742669][ T3107] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 519.784802][ T3107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.827574][ T809] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 519.845325][ T3107] usb 3-1: Product: syz [ 519.875320][T21722] fuse: Bad value for 'fd' [ 519.880423][ T3107] usb 3-1: Manufacturer: syz [ 519.910270][ T3107] usb 3-1: SerialNumber: syz [ 519.971329][ T3107] usb 3-1: config 0 descriptor?? [ 520.045547][ T809] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 520.107071][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.133990][ T809] usb 8-1: Product: syz [ 520.153769][ T809] usb 8-1: Manufacturer: syz [ 520.174887][ T809] usb 8-1: SerialNumber: syz [ 520.258084][ T809] usb 8-1: config 0 descriptor?? [ 520.511349][ T809] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 521.181179][ T809] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 521.249387][ T809] usb 8-1: USB disconnect, device number 4 [ 522.677793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 522.705947][ T3107] usb 3-1: USB disconnect, device number 118 [ 522.919075][T21807] netlink: 'syz.7.2203': attribute type 11 has an invalid length. [ 523.237666][ T3107] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 523.347517][ T10] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 523.402006][ T3107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 523.409885][ T5724] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 523.420539][ T3107] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 523.440055][ T3107] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 523.451744][ T3107] usb 3-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 523.460774][ T3107] usb 3-1: Product: syz [ 523.465154][ T3107] usb 3-1: Manufacturer: syz [ 523.472796][ T3107] usb 3-1: SerialNumber: syz [ 523.528011][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 523.551419][ T10] usb 2-1: config 2 has an invalid interface number: 88 but max is 0 [ 523.577594][ T10] usb 2-1: config 2 has no interface number 0 [ 523.592545][ T5724] usb 8-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 523.600063][ T10] usb 2-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 523.622382][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.642076][ T5724] usb 8-1: Product: syz [ 523.647496][ T10] usb 2-1: config 2 interface 88 has no altsetting 0 [ 523.655521][ T5724] usb 8-1: Manufacturer: syz [ 523.666794][ T5724] usb 8-1: SerialNumber: syz [ 523.677124][ T10] usb 2-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 523.703951][T21810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.707703][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.749311][ T10] usb 2-1: Product: syz [ 523.758706][T21810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.769396][ T5724] usb 8-1: config 0 descriptor?? [ 523.777926][ T10] usb 2-1: Manufacturer: syz [ 523.786690][ T10] usb 2-1: SerialNumber: syz [ 523.824426][ T3107] usb 3-1: unit 4 not found! [ 523.830464][T21816] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 523.972630][ T3107] usb 3-1: USB disconnect, device number 119 [ 524.076516][T21816] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 524.151676][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.619560][T21868] netlink: 'syz.2.2208': attribute type 1 has an invalid length. [ 524.739723][ T10] asix 2-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 524.794837][ T10] asix 2-1:2.88: probe with driver asix failed with error -71 [ 524.858536][ T10] usb 2-1: USB disconnect, device number 106 [ 524.959234][T21885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.277942][ T5724] usb 8-1: Firmware version (0.0) predates our first public release. [ 525.289590][ T5724] usb 8-1: Please update to version 0.2 or newer [ 525.310527][T21868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.379802][T21878] veth0_virt_wifi: entered promiscuous mode [ 525.474614][T21878] bond4: (slave veth0_virt_wifi): making interface the new active one [ 525.541691][T21878] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 525.603845][T21888] bond4: (slave veth0_virt_wifi): Releasing active interface [ 525.883184][T21943] syzkaller0: entered promiscuous mode [ 525.950515][T21943] syzkaller0: entered allmulticast mode [ 526.086131][T21940] tipc: Enabled bearer , priority 0 [ 526.122845][T21939] tipc: Resetting bearer [ 526.170739][T21939] tipc: Disabling bearer [ 526.187529][ T5724] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 526.354396][ T5724] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 526.385430][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.410278][ T5724] usb 3-1: Product: syz [ 526.435959][ T5724] usb 3-1: Manufacturer: syz [ 526.452611][ T5724] usb 3-1: SerialNumber: syz [ 526.493351][ T5724] usb 3-1: config 0 descriptor?? [ 526.707597][ T24] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 526.732153][ T5724] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 526.914663][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 526.949975][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 526.986169][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.015315][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.049049][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.075415][ T24] usb 2-1: config 0 descriptor?? [ 527.110450][ T24] hub 2-1:0.0: USB hub found [ 527.426787][ T24] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 527.525137][ T24] usb 2-1: USB disconnect, device number 107 [ 527.762778][ T5724] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 527.825998][ T5724] usb 8-1: USB disconnect, device number 5 [ 527.985537][T21954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.016964][T22003] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2216'. [ 528.032533][T21954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.115281][ T24] usb 3-1: USB disconnect, device number 120 [ 528.135481][T22003] bridge0: port 5(batadv2) entered blocking state [ 528.160290][T22003] bridge0: port 5(batadv2) entered disabled state [ 528.168635][T22003] batadv2: entered allmulticast mode [ 528.188620][T22003] batadv2: entered promiscuous mode [ 528.455114][T22032] misc userio: The device must be registered before sending interrupts [ 528.498976][T22032] xt_cgroup: invalid path, errno=-2 [ 528.577834][ T1167] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 528.587254][ T1167] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 529.018035][ T5723] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 529.103489][T22045] syzkaller0: entered promiscuous mode [ 529.118363][T22045] syzkaller0: entered allmulticast mode [ 529.196898][T22045] tipc: Enabled bearer , priority 0 [ 529.210150][T22050] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2224'. [ 529.222870][ T5723] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 529.232394][ T5723] usb 3-1: config 0 has no interface number 0 [ 529.241577][T22050] loop5: detected capacity change from 0 to 7 [ 529.248371][T22044] tipc: Resetting bearer [ 529.255038][ T5723] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.270803][T22050] Dev loop5: unable to read RDB block 7 [ 529.280918][T22050] loop5: AHDI p2 [ 529.284744][T22050] loop5: partition table partially beyond EOD, truncated [ 529.309761][ T5723] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 529.320446][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.336525][T22044] tipc: Disabling bearer [ 529.347612][ T5723] usb 3-1: Product: syz [ 529.363944][ T5723] usb 3-1: Manufacturer: syz [ 529.383831][T22050] hsr0: Caught tx_queue_len zero misconfig [ 529.392172][ T5723] usb 3-1: SerialNumber: syz [ 529.424984][ T5723] usb 3-1: config 0 descriptor?? [ 529.436202][T22050] netlink: 'syz.7.2224': attribute type 7 has an invalid length. [ 529.469185][ T5723] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 529.677259][T22037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 529.832691][T22071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2221'. [ 529.867775][T22071] netlink: 'syz.2.2221': attribute type 1 has an invalid length. [ 529.890566][T22071] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2221'. [ 530.141389][ T5724] usb 3-1: USB disconnect, device number 121 [ 530.203165][ T5724] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 530.327625][ T809] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 530.487931][ T809] usb 2-1: device descriptor read/64, error -71 [ 530.757206][T22133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.767480][ T809] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 530.927428][ T809] usb 2-1: device descriptor read/64, error -71 [ 531.052592][ T809] usb usb2-port1: attempt power cycle [ 531.197142][T22144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2232'. [ 531.241007][T22144] batadv2: left allmulticast mode [ 531.263300][T22144] batadv2: left promiscuous mode [ 531.287779][T22144] bridge0: port 5(batadv2) entered disabled state [ 531.302849][T22144] batadv1: left allmulticast mode [ 531.309026][T22144] batadv1: left promiscuous mode [ 531.314913][T22144] bridge0: port 4(batadv1) entered disabled state [ 531.325801][T22144] vlan2: left promiscuous mode [ 531.331320][T22144] bridge0: port 3(vlan2) entered disabled state [ 531.363862][T22144] bridge_slave_1: left allmulticast mode [ 531.381155][T22144] bridge_slave_1: left promiscuous mode [ 531.406755][T22144] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.417518][ T809] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 531.442881][ T809] usb 2-1: device descriptor read/8, error -71 [ 531.467889][T22144] bridge_slave_0: left promiscuous mode [ 531.480603][T22144] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.687899][ T809] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 531.709498][T22160] fuse: Bad value for 'fd' [ 531.729221][ T809] usb 2-1: device descriptor read/8, error -71 [ 531.850325][ T809] usb usb2-port1: unable to enumerate USB device [ 532.089614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.193459][ T29] audit: type=1400 audit(1779848011.095:816): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D3A88 pid=22171 comm="syz.5.2236" [ 532.806956][T22188] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 533.029085][ T3107] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 533.199126][ T3107] usb 3-1: Using ep0 maxpacket: 32 [ 533.216109][ T3107] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 533.239914][ T3107] usb 3-1: config 0 has no interface number 0 [ 533.260492][T22204] binder: 22203:22204 ioctl 4018aee1 200000000100 returned -22 [ 533.281893][ T3107] usb 3-1: config 0 interface 184 has no altsetting 0 [ 533.333567][ T3107] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 533.379538][ T3107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.431478][ T3107] usb 3-1: Product: syz [ 533.451658][ T3107] usb 3-1: Manufacturer: syz [ 533.467408][ T3107] usb 3-1: SerialNumber: syz [ 533.508720][ T3107] usb 3-1: config 0 descriptor?? [ 533.979470][ T3107] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 533.991986][ T3107] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 534.007570][ T5723] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 534.016447][ T3107] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 534.028593][ T3107] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 534.047452][ T5724] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 534.181878][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 534.195907][ T5723] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 534.220874][ T5724] usb 8-1: unable to get BOS descriptor or descriptor too short [ 534.229448][ T5723] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 534.242604][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.252388][ T5724] usb 8-1: not running at top speed; connect to a high speed hub [ 534.260838][ T5723] usb 2-1: Product: syz [ 534.265515][ T5723] usb 2-1: Manufacturer: syz [ 534.270608][ T5723] usb 2-1: SerialNumber: syz [ 534.276211][ T5724] usb 8-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 534.301062][ T5723] usb 2-1: config 0 descriptor?? [ 534.309432][ T5724] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 534.331791][ T5723] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 534.342243][ T5724] usb 8-1: string descriptor 0 read error: -22 [ 534.349187][ T5724] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 534.358826][ T5723] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 534.365123][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.011078][ T5723] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 535.464256][ T5723] em28xx 2-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 535.480369][ T5723] em28xx 2-1:0.0: board has no eeprom [ 535.723307][T22273] random: crng reseeded on system resumption [ 535.734610][ T5723] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 535.764164][ T5723] em28xx 2-1:0.0: dvb set to bulk mode. [ 535.781647][ T5724] em28xx 2-1:0.0: Binding DVB extension [ 535.812460][ T5723] usb 2-1: USB disconnect, device number 112 [ 535.911464][ T5723] em28xx 2-1:0.0: Disconnecting em28xx [ 536.015732][ T3107] usb 3-1: USB disconnect, device number 122 [ 536.122285][ T5724] em28xx 2-1:0.0: Registering input extension [ 536.166457][ T5723] em28xx 2-1:0.0: Closing input extension [ 536.339543][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2255'. [ 536.383200][T22326] veth1_macvtap: left promiscuous mode [ 536.463310][T22331] fuse: Bad value for 'group_id' [ 536.490741][T22331] fuse: Bad value for 'group_id' [ 536.498507][ T5723] em28xx 2-1:0.0: Freeing device [ 536.861847][ T5723] usb 8-1: USB disconnect, device number 6 [ 537.517904][ T809] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 537.713733][ T809] usb 8-1: unable to get BOS descriptor or descriptor too short [ 537.738536][ T809] usb 8-1: not running at top speed; connect to a high speed hub [ 537.766115][ T809] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 537.794499][ T809] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 537.830281][ T809] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 537.879662][ T809] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 537.901340][ T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 537.929208][ T809] usb 8-1: SerialNumber: syz [ 537.964349][T22372] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 537.977755][T22372] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 538.221309][T22372] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 538.250123][T22372] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 538.981740][ T809] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 539.172011][ T809] usb 8-1: USB disconnect, device number 7 [ 541.484549][T22461] netlink: 'syz.1.2276': attribute type 13 has an invalid length. [ 541.516971][T22461] netlink: 'syz.1.2276': attribute type 17 has an invalid length. [ 541.588191][T22461] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.737944][ T3107] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 541.797737][T22476] netlink: 277 bytes leftover after parsing attributes in process `syz.5.2278'. [ 541.932267][ T3107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 541.966116][ T3107] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.012811][ T3107] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.051198][ T3107] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 542.076863][ T3107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.105659][ T3107] usb 2-1: Product: syz [ 542.112796][ T3107] usb 2-1: Manufacturer: syz [ 542.117886][ T3107] usb 2-1: SerialNumber: syz [ 542.141830][ T3107] usb 2-1: selecting invalid altsetting 1 [ 542.148727][ T3107] usb 2-1: unit 6 not found! [ 542.173572][T22491] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2281'. [ 542.234252][ T3107] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.281181][T22491] bridge0: port 6(batadv3) entered blocking state [ 542.309993][T22491] bridge0: port 6(batadv3) entered disabled state [ 542.342195][ T3107] usb 2-1: USB disconnect, device number 113 [ 542.348261][T22491] batadv3: entered allmulticast mode [ 542.354272][T22491] batadv3: entered promiscuous mode [ 542.373375][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 542.708118][ T5723] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 542.727631][ T457] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 542.736951][ T457] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 542.757572][ T5724] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 542.870387][ T5723] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 542.898572][ T5723] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 542.926788][ T5724] usb 8-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 542.947543][ T5723] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 542.965318][ T5724] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 542.987084][ T5723] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.002598][ T5724] usb 8-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 543.018392][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.035989][T22514] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 543.049644][ T5724] usb 8-1: Product: syz [ 543.068769][ T5724] usb 8-1: Manufacturer: syz [ 543.076907][ T5723] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 543.088996][ T5724] usb 8-1: SerialNumber: syz [ 543.109364][T22527] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2284'. [ 543.140147][ T5724] usb 8-1: config 0 descriptor?? [ 543.170921][ T5724] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 543.392165][ T5723] usb 3-1: USB disconnect, device number 123 [ 543.564344][T22519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.608208][T22519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.947773][ T5723] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 544.087422][ T5723] usb 3-1: device descriptor read/64, error -71 [ 544.337669][ T5723] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 544.487675][ T5723] usb 3-1: device descriptor read/64, error -71 [ 544.609355][ T5723] usb usb3-port1: attempt power cycle [ 544.753388][ T5724] usb 8-1: USB disconnect, device number 8 [ 544.859144][ C0] blk_print_req_error: 156 callbacks suppressed [ 544.859172][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 544.906984][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.916217][ C1] buffer_io_error: 155 callbacks suppressed [ 544.916230][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 544.930078][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.939214][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 544.947105][ C1] I/O error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.956435][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 544.964385][ C1] I/O error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.973552][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 544.981477][ C1] I/O error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 544.990629][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 544.998563][ C1] I/O error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.007722][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 545.015604][ C1] I/O error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.024738][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 545.038199][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.047420][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 545.055363][ C1] I/O error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.064616][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 545.072543][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 545.147481][ T5723] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 545.168222][ T5723] usb 3-1: device descriptor read/8, error -71 [ 545.186330][T22618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2293'. [ 545.218650][T22618] bridge0: port 8(batadv6) entered blocking state [ 545.230942][T22618] bridge0: port 8(batadv6) entered disabled state [ 545.246258][T22618] batadv6: entered allmulticast mode [ 545.282107][T22618] batadv6: entered promiscuous mode [ 545.407644][ T5723] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 545.449323][ T5723] usb 3-1: device descriptor read/8, error -71 [ 545.588842][ T5723] usb usb3-port1: unable to enumerate USB device [ 545.625659][T22624] lo: Caught tx_queue_len zero misconfig [ 545.707656][T18658] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 545.716977][T18658] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 545.768122][T22631] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2296'. [ 545.954689][T22637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2299'. [ 546.552478][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2301'. [ 546.641060][T22660] FAULT_INJECTION: forcing a failure. [ 546.641060][T22660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.655741][T22660] CPU: 1 UID: 0 PID: 22660 Comm: syz.1.2305 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.655773][T22660] Tainted: [L]=SOFTLOCKUP [ 546.655781][T22660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.655794][T22660] Call Trace: [ 546.655802][T22660] [ 546.655811][T22660] dump_stack_lvl+0xe8/0x150 [ 546.655839][T22660] should_fail_ex+0x412/0x560 [ 546.655873][T22660] _copy_to_user+0x31/0xb0 [ 546.655895][T22660] simple_read_from_buffer+0xe1/0x170 [ 546.655925][T22660] proc_fail_nth_read+0x1bb/0x230 [ 546.655955][T22660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.655985][T22660] ? rw_verify_area+0x2a6/0x4d0 [ 546.656013][T22660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.656047][T22660] vfs_read+0x20c/0xa70 [ 546.656081][T22660] ? __pfx___mutex_lock+0x10/0x10 [ 546.656104][T22660] ? __pfx_vfs_read+0x10/0x10 [ 546.656136][T22660] ? __fget_files+0x2a/0x420 [ 546.656166][T22660] ? __fget_files+0x3a0/0x420 [ 546.656189][T22660] ? __fget_files+0x2a/0x420 [ 546.656223][T22660] ksys_read+0x150/0x270 [ 546.656254][T22660] ? __pfx_ksys_read+0x10/0x10 [ 546.656291][T22660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.656313][T22660] do_syscall_64+0x15f/0x560 [ 546.656344][T22660] ? trace_irq_disable+0x3b/0x140 [ 546.656373][T22660] ? clear_bhb_loop+0x40/0x90 [ 546.656396][T22660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.656414][T22660] RIP: 0033:0x7f28e9b5d68e [ 546.656432][T22660] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 546.656448][T22660] RSP: 002b:00007f28e7df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.656460][T22659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2304'. [ 546.656467][T22660] RAX: ffffffffffffffda RBX: 00007f28e7df66c0 RCX: 00007f28e9b5d68e [ 546.656481][T22660] RDX: 000000000000000f RSI: 00007f28e7df60a0 RDI: 0000000000000003 [ 546.656494][T22660] RBP: 00007f28e7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 546.656505][T22660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.656542][T22660] R13: 00007f28e9e16038 R14: 00007f28e9e15fa0 R15: 00007f28e9f3fa48 [ 546.656644][T22660] [ 546.883877][T22652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2301'. [ 547.069724][T22659] bridge0: port 4(batadv2) entered blocking state [ 547.090121][T22659] bridge0: port 4(batadv2) entered disabled state [ 547.105836][T22659] batadv2: entered allmulticast mode [ 547.113887][T22659] batadv2: entered promiscuous mode [ 547.381819][T22686] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2309'. [ 547.549153][ T457] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 547.558660][ T457] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 547.968359][T22717] IPv6: addrconf: prefix option has invalid lifetime [ 548.121627][T22727] syzkaller0: entered allmulticast mode [ 548.267603][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 548.450610][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 548.481907][ T24] usb 8-1: not running at top speed; connect to a high speed hub [ 548.513684][ T24] usb 8-1: config 224 has an invalid interface number: 76 but max is 0 [ 548.540143][ T24] usb 8-1: config 224 has no interface number 0 [ 548.556706][ T24] usb 8-1: config 224 interface 76 altsetting 0 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 548.586483][ T24] usb 8-1: config 224 interface 76 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 548.632417][ T24] usb 8-1: New USB device found, idVendor=045e, idProduct=045d, bcdDevice=d4.20 [ 548.658834][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.688302][ T24] usb 8-1: Product: 裧⧼묎ꮭ쨝䍃짬ꣀช扸쪻墆℆匏〈ꭾ㇁䭮ྱ㊦ﱇ⽹╃鍋෢謿슴൚ὡ㒡곞钿爐灪䯷씽斮쨭眑臻틎㟈䙣涴龔뢉却뮓蹦㧘ﶵ㐫葑：鱦皺鞆샐 [ 548.734901][ T24] usb 8-1: Manufacturer: ⩳ [ 548.746020][ T24] usb 8-1: SerialNumber: 㐊 [ 548.981843][T22721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.044422][T22721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.101357][T22721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.141728][T22721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.188973][T22721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.238737][T22721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.408812][ T24] usb 8-1: USB disconnect, device number 9 [ 549.572884][T22765] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2319'. [ 549.907596][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 550.088266][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 550.097628][T22778] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2322'. [ 550.113907][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.131319][T22778] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2322'. [ 550.144673][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 550.174573][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 550.195081][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.215830][ T24] usb 3-1: Product: syz [ 550.220645][ T24] usb 3-1: Manufacturer: syz [ 550.228517][ T24] usb 3-1: SerialNumber: syz [ 550.404874][T22781] netlink: 96 bytes leftover after parsing attributes in process `syz.7.2323'. [ 550.483878][ T24] usb 3-1: 0:1 : does not exist [ 550.676554][ T24] usb 3-1: USB disconnect, device number 2 [ 550.746813][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.900973][ T5688] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 551.077768][ T5688] usb 8-1: Using ep0 maxpacket: 16 [ 551.101555][ T5688] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.136052][ T5688] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.172486][ T5688] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 551.213806][ T5688] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 551.247228][ T5688] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.298016][ T5688] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 551.322200][ T5688] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.357540][ T5688] usb 8-1: Manufacturer: syz [ 551.381649][ T5688] usb 8-1: config 0 descriptor?? [ 551.434294][ T29] audit: type=1326 audit(1779848030.335:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22834 comm="syz.2.2331" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3b05f9ce59 code=0x0 [ 551.605988][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.618028][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.737551][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 551.797823][ T5688] rc_core: IR keymap rc-hauppauge not found [ 551.815304][ T5688] Registered IR keymap rc-empty [ 551.828762][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 551.868708][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 551.879352][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.905168][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.923348][ T5688] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 551.936536][ T24] usb 3-1: config 0 has too many interfaces: 170, using maximum allowed: 32 [ 551.965015][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 170 [ 551.978706][ T5688] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input41 [ 552.005016][ T24] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 552.034591][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.045498][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.061029][ T24] usb 3-1: Product: syz [ 552.076467][ T24] usb 3-1: Manufacturer: syz [ 552.087174][ T24] usb 3-1: SerialNumber: syz [ 552.100109][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.123732][ T24] usb 3-1: config 0 descriptor?? [ 552.137672][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.157655][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.166868][T22835] sctp: [Deprecated]: syz.1.2332 (pid 22835) Use of int in max_burst socket option. [ 552.166868][T22835] Use struct sctp_assoc_value instead [ 552.187892][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.210577][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.257551][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.298773][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.337522][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.377635][ T5688] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 552.411432][ T5688] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 552.444236][ T5688] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 552.474461][T22795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.508365][T22795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.828845][ C0] mceusb 8-1:0.0: long-range (0x81) receiver active [ 553.637246][ T5723] usb 8-1: USB disconnect, device number 10 [ 553.882407][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2336'. [ 553.906847][T22890] bridge0: port 7(batadv4) entered blocking state [ 553.913824][T22890] bridge0: port 7(batadv4) entered disabled state [ 553.920850][T22890] batadv4: entered allmulticast mode [ 553.931524][T22890] batadv4: entered promiscuous mode [ 554.057153][T22895] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2337'. [ 554.414089][ T457] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 554.423520][ T457] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 554.461649][ T5688] usb 3-1: USB disconnect, device number 3 [ 554.529642][T22904] usb usb9: usbfs: process 22904 (syz.1.2342) did not claim interface 19 before use [ 554.578363][ T3107] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 554.603619][T22925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2344'. [ 554.760462][ T3107] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 554.808295][ T3107] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.845457][ T3107] usb 8-1: Product: syz [ 554.862314][ T3107] usb 8-1: Manufacturer: syz [ 554.875078][ T3107] usb 8-1: SerialNumber: syz [ 554.876110][T22940] fuse: Bad value for 'fd' [ 554.897917][T22942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2347'. [ 554.908284][ T3107] usb 8-1: config 0 descriptor?? [ 554.964120][T22942] bridge0: port 5(batadv3) entered blocking state [ 554.978062][ T5688] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 554.991763][T22942] bridge0: port 5(batadv3) entered disabled state [ 555.025548][T22942] batadv3: entered allmulticast mode [ 555.035364][T22942] batadv3: entered promiscuous mode [ 555.130212][ T3107] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 555.149459][ T5688] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 555.177374][ T5688] usb 3-1: config 0 has no interface number 0 [ 555.186699][T22954] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2349'. [ 555.212285][ T5688] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 555.237652][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.247808][ T5723] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 555.264092][ T5688] usb 3-1: Product: syz [ 555.285785][ T5688] usb 3-1: Manufacturer: syz [ 555.317657][ T5688] usb 3-1: SerialNumber: syz [ 555.331474][ T5688] usb 3-1: config 0 descriptor?? [ 555.418608][ T5723] usb 2-1: Using ep0 maxpacket: 32 [ 555.431539][ T5723] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 555.443830][ T3294] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 555.453542][ T3294] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 555.470083][ T5723] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 555.480779][ T5723] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 0 [ 555.494312][ T5723] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.510319][ T5723] usb 2-1: config 0 interface 0 has no altsetting 0 [ 555.523531][ T5723] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 555.552876][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.583428][ T5723] usb 2-1: Product: syz [ 555.597272][ T5723] usb 2-1: Manufacturer: syz [ 555.613149][ T5688] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 555.624017][ T5723] usb 2-1: SerialNumber: syz [ 555.650554][ T5688] usb 3-1: USB disconnect, device number 4 [ 555.692262][ T5723] usb 2-1: config 0 descriptor?? [ 555.718544][ T5723] gs_usb 2-1:0.0: Required endpoints not found [ 556.959075][ T3107] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 558.029908][ T3107] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 558.130589][ T5723] usb 2-1: USB disconnect, device number 114 [ 558.200916][ T3107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 558.219300][ T3107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.243158][ T3107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 558.279120][ T3107] usb 3-1: string descriptor 0 read error: -22 [ 558.303471][ T3107] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 558.345459][ T3107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.577224][T23026] vlan0: entered allmulticast mode [ 558.592752][T23026] bridge0: port 4(vlan0) entered blocking state [ 558.608373][T23026] bridge0: port 4(vlan0) entered disabled state [ 558.629085][ T3107] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 558.651891][T23026] vlan0: entered promiscuous mode [ 558.683772][ T3107] usb 3-1: USB disconnect, device number 5 [ 558.875817][T23042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 559.044086][T23060] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 559.116125][ T5724] usb 8-1: USB disconnect, device number 11 [ 559.189153][ T3107] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 559.369615][ T3107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 559.412388][ T3107] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 559.445360][ T3107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 559.460613][ T3107] usb 3-1: can't read configurations, error -71 [ 559.643127][T23086] xt_hashlimit: size too large, truncated to 1048576 [ 559.797483][ T5724] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 559.965359][ T5724] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 559.986302][ T5724] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 560.016678][ T5724] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.053292][ T5724] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 560.083176][ T5724] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 560.092314][ T5724] usb 8-1: Product: syz [ 560.096586][ T5724] usb 8-1: Manufacturer: syz [ 560.101903][ T5724] usb 8-1: SerialNumber: syz [ 560.348770][ T5724] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 560.709410][ T5724] usb 8-1: USB disconnect, device number 12 [ 560.747281][ T5724] usblp0: removed [ 560.843680][T23118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2371'. [ 561.149426][T23131] xt_CT: You must specify a L4 protocol and not use inversions on it [ 561.408641][ T5724] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 561.490046][T23147] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 561.572471][ T5724] usb 3-1: unable to get BOS descriptor or descriptor too short [ 561.609282][ T5724] usb 3-1: too many configurations: 78, using maximum allowed: 8 [ 561.621049][ T5724] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 561.632770][ T5724] usb 3-1: can't read configurations, error -71 [ 562.419916][ T24] hid_parser_main: 4 callbacks suppressed [ 562.419933][ T24] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 562.673110][T23207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2379'. [ 562.703979][ T24] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 562.730432][T23190] team_slave_1: entered promiscuous mode [ 562.809402][T23190] team_slave_1: entered allmulticast mode [ 562.828210][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.835903][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.224527][T23221] syzkaller0: entered promiscuous mode [ 563.257589][T23221] syzkaller0: entered allmulticast mode [ 563.431977][T23224] syzkaller0: entered promiscuous mode [ 563.467509][ T24] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 563.485965][T23224] syzkaller0: entered allmulticast mode [ 563.510607][T23231] tipc: Enabled bearer , priority 0 [ 563.619654][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 563.636177][T23218] tipc: Resetting bearer [ 563.645219][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.702967][ T24] usb 3-1: config 0 descriptor?? [ 563.724883][ T24] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 563.743335][T23218] tipc: Disabling bearer [ 564.130596][T23260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.176695][T23260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.436834][T23269] xt_CT: You must specify a L4 protocol and not use inversions on it [ 564.555000][T23270] netlink: 'syz.6.2388': attribute type 3 has an invalid length. [ 564.595992][T23270] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2388'. [ 564.747637][ T3107] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 564.973226][ T3107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 565.020024][ T3107] usb 2-1: too many configurations: 78, using maximum allowed: 8 [ 565.090743][ T3107] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 565.131479][ T3107] usb 2-1: can't read configurations, error -71 [ 565.246121][ T24] usb 3-1: USB disconnect, device number 10 [ 565.765365][T23191] syz.7.2375 (23191): drop_caches: 2 [ 565.920278][T23305] gre0: entered promiscuous mode [ 565.965953][T23305] gre0: entered allmulticast mode [ 566.255755][T23322] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2393'. [ 566.438342][ T3107] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 566.599229][ T3107] usb 2-1: device descriptor read/64, error -71 [ 566.847582][ T3107] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 566.997456][ T3107] usb 2-1: device descriptor read/64, error -71 [ 567.122206][ T3107] usb usb2-port1: attempt power cycle [ 567.136927][T23331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2395'. [ 567.488333][ T3107] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 567.549527][ T3107] usb 2-1: device descriptor read/8, error -71 [ 567.817663][ T3107] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 567.840312][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2401'. [ 567.898340][ T3107] usb 2-1: device descriptor read/8, error -71 [ 567.935970][T23353] bridge0: port 8(batadv5) entered blocking state [ 567.957670][T23353] bridge0: port 8(batadv5) entered disabled state [ 567.984941][T23353] batadv5: entered allmulticast mode [ 568.019616][T23353] batadv5: entered promiscuous mode [ 568.039516][ T3107] usb usb2-port1: unable to enumerate USB device [ 568.408361][ T457] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 568.417801][ T457] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 568.581764][T23366] syzkaller0: entered promiscuous mode [ 568.596355][T23366] syzkaller0: entered allmulticast mode [ 568.632578][T23366] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 568.743030][ T10] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 568.793324][ T10] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 569.557075][T23401] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2411'. [ 569.719119][T23373] syz.2.2405 (23373): drop_caches: 2 [ 569.880696][T23416] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2413'. [ 570.024152][T23416] bridge0: port 5(batadv2) entered blocking state [ 570.031549][T23416] bridge0: port 5(batadv2) entered disabled state [ 570.039006][T23416] batadv2: entered allmulticast mode [ 570.046935][T23416] batadv2: entered promiscuous mode [ 570.520505][T18660] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 570.530356][T18660] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 570.885627][T23469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 571.096792][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2424'. [ 571.145945][T23487] syzkaller0: entered promiscuous mode [ 571.175949][T23487] syzkaller0: entered allmulticast mode [ 571.188666][T23500] FAULT_INJECTION: forcing a failure. [ 571.188666][T23500] name failslab, interval 1, probability 0, space 0, times 0 [ 571.203043][T23500] CPU: 1 UID: 0 PID: 23500 Comm: syz.5.2426 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.203072][T23500] Tainted: [L]=SOFTLOCKUP [ 571.203079][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.203090][T23500] Call Trace: [ 571.203097][T23500] [ 571.203105][T23500] dump_stack_lvl+0xe8/0x150 [ 571.203130][T23500] should_fail_ex+0x412/0x560 [ 571.203157][T23500] should_failslab+0xa8/0x100 [ 571.203175][T23500] __kmalloc_noprof+0xe8/0x760 [ 571.203198][T23500] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 571.203224][T23500] ? video_usercopy+0x1b1/0x1450 [ 571.203254][T23500] video_usercopy+0x1b1/0x1450 [ 571.203284][T23500] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 571.203304][T23500] ? __pfx___video_do_ioctl+0x10/0x10 [ 571.203321][T23500] ? __pfx_video_usercopy+0x10/0x10 [ 571.203354][T23500] ? __fget_files+0x2a/0x420 [ 571.203377][T23500] ? __fget_files+0x2a/0x420 [ 571.203397][T23500] ? __fget_files+0x3a0/0x420 [ 571.203420][T23500] v4l2_ioctl+0x18d/0x1e0 [ 571.203445][T23500] ? __pfx_v4l2_ioctl+0x10/0x10 [ 571.203470][T23500] __se_sys_ioctl+0xfc/0x170 [ 571.203495][T23500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.203513][T23500] do_syscall_64+0x15f/0x560 [ 571.203528][T23500] ? trace_irq_disable+0x3b/0x140 [ 571.203556][T23500] ? clear_bhb_loop+0x40/0x90 [ 571.203577][T23500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.203594][T23500] RIP: 0033:0x7f09f219ce59 [ 571.203610][T23500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.203624][T23500] RSP: 002b:00007f09f3095028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.203641][T23500] RAX: ffffffffffffffda RBX: 00007f09f2415fa0 RCX: 00007f09f219ce59 [ 571.203654][T23500] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 571.203665][T23500] RBP: 00007f09f3095090 R08: 0000000000000000 R09: 0000000000000000 [ 571.203675][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.203685][T23500] R13: 00007f09f2416038 R14: 00007f09f2415fa0 R15: 00007f09f253fa48 [ 571.203709][T23500] [ 571.777449][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 571.877595][ T3107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 571.907471][ T24] usb 8-1: device descriptor read/64, error -71 [ 572.038378][ T3107] usb 3-1: Using ep0 maxpacket: 32 [ 572.060060][ T3107] usb 3-1: unable to get BOS descriptor or descriptor too short [ 572.084085][ T3107] usb 3-1: too many configurations: 93, using maximum allowed: 8 [ 572.129614][ T3107] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 572.147629][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 572.155503][ T3107] usb 3-1: can't read configurations, error -71 [ 572.287467][ T24] usb 8-1: device descriptor read/64, error -71 [ 572.323176][ T29] audit: type=1326 audit(1779848051.225:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.395930][ T29] audit: type=1326 audit(1779848051.255:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.434880][ T24] usb usb8-port1: attempt power cycle [ 572.485246][ T29] audit: type=1326 audit(1779848051.255:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.510482][ T29] audit: type=1326 audit(1779848051.255:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.535915][T23545] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 572.612281][T23545] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 572.618643][ T29] audit: type=1326 audit(1779848051.255:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.807621][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 572.815499][ T29] audit: type=1326 audit(1779848051.255:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 572.849159][T23567] fuse: Invalid rootmode [ 572.865355][ T24] usb 8-1: device descriptor read/8, error -71 [ 572.904878][T23574] fuse: Invalid rootmode [ 572.912725][ T29] audit: type=1326 audit(1779848051.255:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 573.032391][ T29] audit: type=1326 audit(1779848051.255:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 573.127826][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 573.181446][ T24] usb 8-1: device descriptor read/8, error -71 [ 573.226680][ T29] audit: type=1326 audit(1779848051.255:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 573.346110][ T24] usb usb8-port1: unable to enumerate USB device [ 573.374505][ T29] audit: type=1326 audit(1779848051.255:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23543 comm="syz.1.2436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28e9b9ce59 code=0x7ffc0000 [ 573.710555][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2439'. [ 573.861116][T23591] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 573.954585][T23593] FAULT_INJECTION: forcing a failure. [ 573.954585][T23593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 574.023305][T23593] CPU: 1 UID: 0 PID: 23593 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 574.023341][T23593] Tainted: [L]=SOFTLOCKUP [ 574.023349][T23593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 574.023363][T23593] Call Trace: [ 574.023372][T23593] [ 574.023384][T23593] dump_stack_lvl+0xe8/0x150 [ 574.023415][T23593] should_fail_ex+0x412/0x560 [ 574.023450][T23593] _copy_from_user+0x2d/0xb0 [ 574.023472][T23593] video_usercopy+0x36f/0x1450 [ 574.023510][T23593] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 574.023535][T23593] ? __pfx___video_do_ioctl+0x10/0x10 [ 574.023558][T23593] ? __pfx_video_usercopy+0x10/0x10 [ 574.023602][T23593] ? __fget_files+0x2a/0x420 [ 574.023632][T23593] ? __fget_files+0x2a/0x420 [ 574.023657][T23593] ? __fget_files+0x3a0/0x420 [ 574.023686][T23593] v4l2_ioctl+0x18d/0x1e0 [ 574.023719][T23593] ? __pfx_v4l2_ioctl+0x10/0x10 [ 574.023770][T23593] __se_sys_ioctl+0xfc/0x170 [ 574.023800][T23593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.023822][T23593] do_syscall_64+0x15f/0x560 [ 574.023841][T23593] ? trace_irq_disable+0x3b/0x140 [ 574.023874][T23593] ? clear_bhb_loop+0x40/0x90 [ 574.023899][T23593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.023918][T23593] RIP: 0033:0x7f28e9b9ce59 [ 574.023936][T23593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.023954][T23593] RSP: 002b:00007f28e7df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 574.023975][T23593] RAX: ffffffffffffffda RBX: 00007f28e9e15fa0 RCX: 00007f28e9b9ce59 [ 574.023990][T23593] RDX: 00002000000002c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 574.024003][T23593] RBP: 00007f28e7df6090 R08: 0000000000000000 R09: 0000000000000000 [ 574.024016][T23593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.024028][T23593] R13: 00007f28e9e16038 R14: 00007f28e9e15fa0 R15: 00007f28e9f3fa48 [ 574.024059][T23593] [ 574.717505][ T5724] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 574.878622][ T5724] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.019455][ T5724] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 575.127575][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 575.207568][ T5724] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.241730][ T5724] usb usb2-port1: attempt power cycle [ 575.320808][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 575.333619][T23634] xt_addrtype: ipv6 does not support BROADCAST matching [ 575.346332][ T24] usb 8-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 575.383347][ T24] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 575.420451][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice=a5.4a [ 575.460612][ T24] usb 8-1: New USB device strings: Mfr=219, Product=226, SerialNumber=3 [ 575.513656][ T24] usb 8-1: Product: syz [ 575.523159][ T24] usb 8-1: Manufacturer: syz [ 575.530164][ T24] usb 8-1: SerialNumber: syz [ 575.607843][ T5724] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 575.651878][ T5724] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.793060][ T24] usb 8-1: unknown interface protocol 0x41, assuming v1 [ 575.803647][ T5724] usb 2-1: new low-speed USB device number 124 using dummy_hcd [ 575.831151][ T24] usb 8-1: skipping empty audio interface (v1) [ 575.858029][ T5724] usb 2-1: Invalid ep0 maxpacket: 32 [ 575.885982][ T5724] usb usb2-port1: unable to enumerate USB device [ 576.025918][ T24] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 576.080534][ T24] usb 8-1: USB disconnect, device number 17 [ 576.136876][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 576.407987][ T10] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 576.577718][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 576.727552][ T10] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 576.888562][ T5703] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 576.907469][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 576.934033][ T10] usb usb3-port1: attempt power cycle [ 577.057472][ T5703] usb 8-1: Using ep0 maxpacket: 8 [ 577.081546][ T5703] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 577.110887][ T5703] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 577.151450][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 577.180612][ T5703] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 577.265860][ T5703] usb 8-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 577.293813][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.308087][ T10] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 577.348609][ T5703] usb 8-1: Product: syz [ 577.362366][ T5703] usb 8-1: Manufacturer: syz [ 577.368395][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 577.384168][ T5703] usb 8-1: SerialNumber: syz [ 577.420183][ T5703] usb 8-1: config 0 descriptor?? [ 577.443962][T23682] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 577.514959][T23697] syzkaller0: entered promiscuous mode [ 577.527633][ T10] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 577.550789][T23697] syzkaller0: entered allmulticast mode [ 577.572063][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 577.588065][ T10] usb usb3-port1: unable to enumerate USB device [ 577.664462][ T5703] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 577.703641][ T5703] input: Griffin SoundKnob as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input42 [ 577.868525][T23682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.924358][T23682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.998628][ C1] powermate: config urb returned -71 [ 578.007092][ C1] powermate: config urb returned -71 [ 578.012659][ C1] powermate: config urb returned -71 [ 578.018756][ C1] powermate: config urb returned -71 [ 578.026282][ T5703] usb 8-1: USB disconnect, device number 18 [ 578.032290][ C1] powermate 8-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 578.463813][T23747] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2465'. [ 579.242870][T23776] syzkaller0: entered promiscuous mode [ 579.251797][T23776] syzkaller0: entered allmulticast mode [ 579.336298][T23781] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 579.804788][T23800] tipc: Enabling of bearer rejected, failed to enable media [ 579.819785][T23800] tipc: Enabling of bearer rejected, failed to enable media [ 580.003296][T23805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2477'. [ 581.074286][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2483'. [ 581.297872][ T24] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 581.479560][ T24] usb 8-1: config 1 interface 0 has no altsetting 0 [ 581.506362][ T24] usb 8-1: string descriptor 0 read error: -22 [ 581.528504][ T24] usb 8-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.40 [ 581.562217][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.692569][T23843] syzkaller0: entered promiscuous mode [ 581.704647][T23843] syzkaller0: entered allmulticast mode [ 582.060040][ T24] hid_mf 0003:0079:1801.001C: collection stack underflow [ 582.100794][ T24] hid_mf 0003:0079:1801.001C: item 0 0 0 12 parsing failed [ 582.125324][ T24] hid_mf 0003:0079:1801.001C: HID parse failed. [ 582.158150][ T24] hid_mf 0003:0079:1801.001C: probe with driver hid_mf failed with error -22 [ 582.265784][T23832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.305961][T23832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.355544][ T24] usb 8-1: USB disconnect, device number 19 [ 583.157822][ T809] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 583.331971][ T809] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 583.362823][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.393771][ T809] usb 2-1: Product: syz [ 583.406846][ T809] usb 2-1: Manufacturer: syz [ 583.423630][ T809] usb 2-1: SerialNumber: syz [ 583.455799][ T809] usb 2-1: config 0 descriptor?? [ 583.695007][ T809] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 583.912319][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 583.912340][ T29] audit: type=1326 audit(1779848062.815:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 583.961287][ T29] audit: type=1326 audit(1779848062.825:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f696a75d68e code=0x7ffc0000 [ 584.049830][ T29] audit: type=1326 audit(1779848062.825:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f696a75d68e code=0x7ffc0000 [ 584.136386][ T29] audit: type=1326 audit(1779848062.825:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 584.184857][ T29] audit: type=1326 audit(1779848062.825:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f696a79cbc2 code=0x7ffc0000 [ 584.220555][ T29] audit: type=1326 audit(1779848062.825:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f696a79cc87 code=0x7ffc0000 [ 584.256142][ T29] audit: type=1326 audit(1779848062.855:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f696a7592ac code=0x7ffc0000 [ 584.379699][ T29] audit: type=1326 audit(1779848062.855:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f696a75930e code=0x7ffc0000 [ 584.454053][ T29] audit: type=1326 audit(1779848062.855:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 584.501070][ T29] audit: type=1326 audit(1779848062.855:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23915 comm="syz.7.2495" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f696a79cc87 code=0x7ffc0000 [ 584.943208][ T809] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 584.967570][ T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 584.987964][ T809] usb 2-1: USB disconnect, device number 125 [ 585.157438][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 585.184512][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.209952][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 585.245182][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.270240][ T24] usb 3-1: Product: syz [ 585.289917][ T24] usb 3-1: Manufacturer: syz [ 585.303154][ T24] usb 3-1: SerialNumber: syz [ 585.594160][ T24] usb 3-1: found format II with max.bitrate = 7, frame size=6 [ 585.606125][ T24] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 585.618609][ T24] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 585.707588][ T5703] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 585.874474][ T24] usb 3-1: USB disconnect, device number 17 [ 585.908311][ T5703] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.963625][ T5703] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 585.997597][ T3107] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 586.024598][ T5703] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 586.066440][ T5703] usb 8-1: Product: syz [ 586.085707][ T5645] udevd[5645]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.104260][ T5703] usb 8-1: Manufacturer: syz [ 586.114553][ T5703] usb 8-1: SerialNumber: syz [ 586.191069][ T3107] usb 2-1: unable to get BOS descriptor or descriptor too short [ 586.200437][ T3107] usb 2-1: config 0 has an invalid interface number: 57 but max is 2 [ 586.209422][ T3107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.239478][ T3107] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 586.263438][ T3107] usb 2-1: config 0 has no interface number 0 [ 586.276888][ T3107] usb 2-1: config 0 interface 57 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 586.337187][ T3107] usb 2-1: config 0 interface 57 has no altsetting 0 [ 586.377854][ T5703] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 586.400702][ T3107] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=83.50 [ 586.419033][ T3107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.446603][ T3107] usb 2-1: Product: syz [ 586.461753][ T3107] usb 2-1: Manufacturer: syz [ 586.471862][ T3107] usb 2-1: SerialNumber: syz [ 586.519787][ T3107] usb 2-1: config 0 descriptor?? [ 586.553715][T24015] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2504'. [ 586.605112][ T3107] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.57/input/input43 [ 586.712397][ T809] usb 8-1: USB disconnect, device number 20 [ 586.738189][ T809] usblp0: removed [ 586.744935][T23975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.783915][T23975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.927535][ T5703] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 587.091324][ T5703] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 587.121583][ T5703] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 587.153217][ T5703] usb 3-1: config 0 has no interface number 0 [ 587.174259][ T5703] usb 3-1: config 0 has no interface number 1 [ 587.206765][ T5703] usb 3-1: too many endpoints for config 0 interface 3 altsetting 255: 255, using maximum allowed: 30 [ 587.254945][ T5703] usb 3-1: config 0 interface 3 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 587.300669][ T5703] usb 3-1: config 0 interface 3 has no altsetting 0 [ 587.334779][ T5703] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 587.368015][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.427258][ T5703] usb 3-1: config 0 descriptor?? [ 587.740657][T24055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.788555][T24055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.345236][ T5703] usb 3-1: Could not set interface, error -71 [ 588.425948][ T5703] usb 3-1: selecting invalid altsetting 0 [ 588.459179][ T5703] usb 3-1: Could not set interface, error -22 [ 588.511133][ T5703] usb 3-1: USB disconnect, device number 18 [ 588.753591][ T4981] bcm5974 2-1:0.57: could not read from device [ 588.892128][ T3107] usb 2-1: USB disconnect, device number 126 [ 588.905358][ T4981] bcm5974 2-1:0.57: could not read from device [ 589.082342][T18664] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.346372][ T5703] IPVS: starting estimator thread 0... [ 589.467608][T24112] IPVS: using max 28 ests per chain, 67200 per kthread [ 589.567478][ T3107] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 589.737450][ T3107] usb 2-1: Using ep0 maxpacket: 32 [ 589.768964][ T3107] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 589.804485][ T3107] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 589.834130][ T3107] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.846221][ T3107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.860652][ T3107] usb 2-1: Product: М [ 589.866466][ T3107] usb 2-1: Manufacturer: ࠐ [ 589.876290][ T3107] usb 2-1: SerialNumber: ࠁ [ 590.121997][ T3107] cdc_ncm 2-1:1.0: bind() failure [ 590.143688][ T3107] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 590.170953][T18664] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.177687][ T3107] cdc_ncm 2-1:1.1: bind() failure [ 590.277643][ T3107] usb 2-1: USB disconnect, device number 127 [ 590.806228][T18664] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.182437][T18664] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.305928][T24188] FAULT_INJECTION: forcing a failure. [ 591.305928][T24188] name failslab, interval 1, probability 0, space 0, times 0 [ 591.318661][T24188] CPU: 1 UID: 0 PID: 24188 Comm: syz.5.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.318685][T24188] Tainted: [L]=SOFTLOCKUP [ 591.318691][T24188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 591.318701][T24188] Call Trace: [ 591.318708][T24188] [ 591.318715][T24188] dump_stack_lvl+0xe8/0x150 [ 591.318738][T24188] should_fail_ex+0x412/0x560 [ 591.318763][T24188] should_failslab+0xa8/0x100 [ 591.318777][T24188] ? skb_clone+0x212/0x3a0 [ 591.318793][T24188] kmem_cache_alloc_noprof+0x87/0x650 [ 591.318813][T24188] ? dev_queue_xmit_nit+0x2d/0xad0 [ 591.318841][T24188] skb_clone+0x212/0x3a0 [ 591.318855][T24188] ? dev_queue_xmit_nit+0x268/0xad0 [ 591.318879][T24188] dev_queue_xmit_nit+0x29a/0xad0 [ 591.318902][T24188] ? dev_queue_xmit_nit+0x2d/0xad0 [ 591.318931][T24188] dev_hard_start_xmit+0x1c1/0x830 [ 591.318958][T24188] __dev_queue_xmit+0x14d9/0x3950 [ 591.318974][T24188] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.318993][T24188] ? __dev_queue_xmit+0x2b6/0x3950 [ 591.319020][T24188] ? __pfx___dev_queue_xmit+0x10/0x10 [ 591.319043][T24188] ? __copy_skb_header+0xa3/0x4a0 [ 591.319072][T24188] ? skb_clone+0x246/0x3a0 [ 591.319090][T24188] __netlink_deliver_tap+0x5ad/0x850 [ 591.319122][T24188] ? netlink_deliver_tap+0x2e/0x1b0 [ 591.319147][T24188] netlink_deliver_tap+0x19c/0x1b0 [ 591.319171][T24188] netlink_unicast+0x730/0x8e0 [ 591.319200][T24188] netlink_sendmsg+0x813/0xb40 [ 591.319221][T24188] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.319238][T24188] ? aa_sock_msg_perm+0xf1/0x1b0 [ 591.319261][T24188] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 591.319286][T24188] ____sys_sendmsg+0x972/0x9f0 [ 591.319300][T24188] ? __might_fault+0xaf/0x130 [ 591.319325][T24188] ? __pfx_____sys_sendmsg+0x10/0x10 [ 591.319346][T24188] ? import_iovec+0x73/0xa0 [ 591.319381][T24188] ___sys_sendmsg+0x2a5/0x360 [ 591.319395][T24188] ? __lock_acquire+0x6b5/0x2cf0 [ 591.319416][T24188] ? __pfx____sys_sendmsg+0x10/0x10 [ 591.319456][T24188] ? __fget_files+0x2a/0x420 [ 591.319475][T24188] ? __fget_files+0x3a0/0x420 [ 591.319501][T24188] __x64_sys_sendmsg+0x1bd/0x2a0 [ 591.319519][T24188] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 591.319541][T24188] ? __pfx_ksys_write+0x10/0x10 [ 591.319570][T24188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.319587][T24188] do_syscall_64+0x15f/0x560 [ 591.319603][T24188] ? trace_irq_disable+0x3b/0x140 [ 591.319628][T24188] ? clear_bhb_loop+0x40/0x90 [ 591.319667][T24188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.319682][T24188] RIP: 0033:0x7f09f219ce59 [ 591.319697][T24188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.319711][T24188] RSP: 002b:00007f09f3095028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.319728][T24188] RAX: ffffffffffffffda RBX: 00007f09f2415fa0 RCX: 00007f09f219ce59 [ 591.319740][T24188] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 591.319750][T24188] RBP: 00007f09f3095090 R08: 0000000000000000 R09: 0000000000000000 [ 591.319760][T24188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.319770][T24188] R13: 00007f09f2416038 R14: 00007f09f2415fa0 R15: 00007f09f253fa48 [ 591.319814][T24188] [ 591.648720][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2529'. [ 591.719371][ T809] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 591.897663][ T809] usb 8-1: Using ep0 maxpacket: 32 [ 591.929584][ T809] usb 8-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 592.003398][ T809] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.071177][ T809] usb 8-1: config 0 descriptor?? [ 592.083932][T18664] batadv5: left allmulticast mode [ 592.093136][T18664] batadv5: left promiscuous mode [ 592.120066][ T809] gspca_main: sunplus-2.14.0 probing 041e:400b [ 592.126316][T18664] bridge0: port 7(batadv5) entered disabled state [ 592.174194][T18664] batadv3: left allmulticast mode [ 592.210506][T18664] batadv3: left promiscuous mode [ 592.253712][T18664] bridge0: port 6(batadv3) entered disabled state [ 592.317227][T18664] batadv2: left allmulticast mode [ 592.357238][T18664] batadv2: left promiscuous mode [ 592.381883][T18664] bridge0: port 5(batadv2) entered disabled state [ 592.449832][T18664] batadv1: left allmulticast mode [ 592.473349][T18664] batadv1: left promiscuous mode [ 592.495626][T18664] bridge0: port 4(batadv1) entered disabled state [ 592.557012][T18664] vlan2: left allmulticast mode [ 592.629853][T18664] vlan2: left promiscuous mode [ 592.665064][T18664] bridge0: port 3(vlan2) entered disabled state [ 592.712145][T18664] bridge_slave_1: left allmulticast mode [ 592.745316][T18664] bridge_slave_1: left promiscuous mode [ 592.769716][T18664] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.849244][ T809] gspca_sunplus: reg_w_riv err -110 [ 592.861014][ T809] sunplus 8-1:0.0: probe with driver sunplus failed with error -110 [ 592.872439][T18664] bridge_slave_0: left allmulticast mode [ 592.920468][T18664] bridge_slave_0: left promiscuous mode [ 592.920718][ T809] usb 8-1: USB disconnect, device number 21 [ 592.958805][T18664] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.397420][ T809] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 593.567743][ T809] usb 8-1: Using ep0 maxpacket: 8 [ 593.608524][ T809] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 593.669541][ T809] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 593.735880][ T809] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 593.811862][ T809] usb 8-1: config 168 interface 0 has no altsetting 0 [ 593.845619][ T809] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 593.871698][T24274] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2536'. [ 593.897983][ T809] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 593.934090][ T809] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 593.976516][ T809] usb 8-1: config 168 interface 0 has no altsetting 0 [ 594.002757][ T809] usb 8-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config [ 594.031624][ T809] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 594.071609][ T809] usb 8-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 100 [ 594.119947][ T809] usb 8-1: config 168 interface 0 has no altsetting 0 [ 594.146381][ T809] usb 8-1: string descriptor 0 read error: -22 [ 594.153279][ T809] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 594.175616][ T809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.223284][ T809] adutux 8-1:168.0: interrupt endpoints not found [ 594.433491][T24254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.448212][T24254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.471887][T18664] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 594.508267][T18664] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 594.532633][T18664] bond0 (unregistering): Released all slaves [ 594.561188][T18664] bond1 (unregistering): Released all slaves [ 594.861650][T24274] bridge0: port 9(batadv7) entered blocking state [ 594.887845][T24274] bridge0: port 9(batadv7) entered disabled state [ 594.918201][T24274] batadv7: entered allmulticast mode [ 594.948175][T24274] batadv7: entered promiscuous mode [ 594.981941][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5 [ 595.046378][ T5703] usb 8-1: USB disconnect, device number 22 [ 595.126861][T24289] team0: entered promiscuous mode [ 595.179569][T24289] team_slave_0: entered promiscuous mode [ 595.226151][ T5723] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 595.255341][T24289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 595.281064][T24319] FAULT_INJECTION: forcing a failure. [ 595.281064][T24319] name failslab, interval 1, probability 0, space 0, times 0 [ 595.284950][ T5723] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 595.293760][T24319] CPU: 0 UID: 0 PID: 24319 Comm: syz.2.2541 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.293789][T24319] Tainted: [L]=SOFTLOCKUP [ 595.293797][T24319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 595.293809][T24319] Call Trace: [ 595.293818][T24319] [ 595.293826][T24319] dump_stack_lvl+0xe8/0x150 [ 595.293888][T24319] should_fail_ex+0x412/0x560 [ 595.294030][T24319] should_failslab+0xa8/0x100 [ 595.294091][T24319] ? skb_clone+0x212/0x3a0 [ 595.294144][T24319] kmem_cache_alloc_noprof+0x87/0x650 [ 595.294237][T24319] ? run_filter+0x23/0x270 [ 595.294314][T24319] skb_clone+0x212/0x3a0 [ 595.294362][T24319] ? packet_rcv+0x567/0x1730 [ 595.294432][T24319] packet_rcv+0x65b/0x1730 [ 595.294523][T24319] dev_queue_xmit_nit+0x5d5/0xad0 [ 595.294596][T24319] ? dev_queue_xmit_nit+0x2d/0xad0 [ 595.294698][T24319] dev_hard_start_xmit+0x1c1/0x830 [ 595.294826][T24319] __dev_queue_xmit+0x14d9/0x3950 [ 595.294876][T24319] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.294939][T24319] ? __dev_queue_xmit+0x2b6/0x3950 [ 595.295024][T24319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 595.295104][T24319] ? __copy_skb_header+0xa3/0x4a0 [ 595.295204][T24319] ? skb_clone+0x246/0x3a0 [ 595.295250][T24319] __netlink_deliver_tap+0x5ad/0x850 [ 595.295392][T24319] ? netlink_deliver_tap+0x2e/0x1b0 [ 595.295489][T24319] netlink_deliver_tap+0x19c/0x1b0 [ 595.295581][T24319] netlink_unicast+0x730/0x8e0 [ 595.295680][T24319] netlink_sendmsg+0x813/0xb40 [ 595.295748][T24319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.295803][T24319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 595.295873][T24319] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.295963][T24319] ____sys_sendmsg+0x972/0x9f0 [ 595.296016][T24319] ? __might_fault+0xaf/0x130 [ 595.296108][T24319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.296185][T24319] ? import_iovec+0x73/0xa0 [ 595.296280][T24319] ___sys_sendmsg+0x2a5/0x360 [ 595.296332][T24319] ? __lock_acquire+0x6b5/0x2cf0 [ 595.296422][T24319] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.296551][T24319] ? __fget_files+0x2a/0x420 [ 595.296611][T24319] ? __fget_files+0x3a0/0x420 [ 595.296741][T24319] __x64_sys_sendmsg+0x1bd/0x2a0 [ 595.296825][T24319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.296903][T24319] ? __pfx_ksys_write+0x10/0x10 [ 595.297011][T24319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.297069][T24319] do_syscall_64+0x15f/0x560 [ 595.297137][T24319] ? trace_irq_disable+0x3b/0x140 [ 595.297207][T24319] ? clear_bhb_loop+0x40/0x90 [ 595.297281][T24319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.297336][T24319] RIP: 0033:0x7f3b05f9ce59 [ 595.297388][T24319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.297450][T24319] RSP: 002b:00007f3b06ec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.297517][T24319] RAX: ffffffffffffffda RBX: 00007f3b06215fa0 RCX: 00007f3b05f9ce59 [ 595.297560][T24319] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 595.297595][T24319] RBP: 00007f3b06ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 595.297638][T24319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.297672][T24319] R13: 00007f3b06216038 R14: 00007f3b06215fa0 R15: 00007f3b0633fa48 [ 595.297783][T24319] [ 595.377781][T24319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 595.546096][T18660] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 595.647484][T18660] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 595.670351][T18664] tipc: Left network mode [ 595.694113][T24322] syz.1.2540 (24322): drop_caches: 2 [ 596.077009][T24323] fido_id[24323]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 596.120454][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 596.120476][ T29] audit: type=1326 audit(1779848075.015:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.275748][ T29] audit: type=1326 audit(1779848075.055:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.389254][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 596.409175][ T29] audit: type=1326 audit(1779848075.055:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.589161][ T29] audit: type=1326 audit(1779848075.055:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.694103][ T29] audit: type=1326 audit(1779848075.105:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.806732][ T29] audit: type=1326 audit(1779848075.105:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 596.901612][ T29] audit: type=1326 audit(1779848075.105:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 597.017445][ T29] audit: type=1326 audit(1779848075.105:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 597.164036][ T29] audit: type=1326 audit(1779848075.105:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 597.275173][ T29] audit: type=1326 audit(1779848075.105:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24327 comm="syz.7.2542" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f696a79ce59 code=0x7ffc0000 [ 597.481675][T18664] hsr_slave_0: left promiscuous mode [ 597.488328][T18664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.506157][T18664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.563701][T18664] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.584839][T18664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.644590][T18664] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 597.656254][T18664] batman_adv: batadv0: Removing interface: ipvlan2 [ 597.895379][T18664] dummy0: left allmulticast mode [ 597.957551][T18664] veth1_macvtap: left promiscuous mode [ 597.997382][T18664] veth0_macvtap: left promiscuous mode [ 598.262804][T24389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 599.684173][T18664] team0 (unregistering): Port device team_slave_1 removed [ 599.738201][T18664] team0 (unregistering): Port device team_slave_0 removed [ 600.347446][T24369] syzkaller0: entered promiscuous mode [ 600.361653][T24369] syzkaller0: entered allmulticast mode [ 600.509816][T24389] veth1_macvtap: left allmulticast mode [ 600.541926][T24389] veth1_macvtap: left promiscuous mode [ 600.616685][ T5291] 8021q: adding VLAN 0 to HW filter on device eth6 [ 600.892630][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 600.947908][T24416] FAULT_INJECTION: forcing a failure. [ 600.947908][T24416] name failslab, interval 1, probability 0, space 0, times 0 [ 600.987475][T24416] CPU: 0 UID: 0 PID: 24416 Comm: syz.2.2554 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.987518][T24416] Tainted: [L]=SOFTLOCKUP [ 600.987527][T24416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.987540][T24416] Call Trace: [ 600.987549][T24416] [ 600.987559][T24416] dump_stack_lvl+0xe8/0x150 [ 600.987588][T24416] should_fail_ex+0x412/0x560 [ 600.987624][T24416] should_failslab+0xa8/0x100 [ 600.987646][T24416] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 600.987677][T24416] ? __alloc_skb+0x186/0x7d0 [ 600.987706][T24416] ? __alloc_skb+0x1d0/0x7d0 [ 600.987734][T24416] ? __local_bh_enable_ip+0xd0/0x130 [ 600.987762][T24416] __alloc_skb+0x1d0/0x7d0 [ 600.987792][T24416] ? netlink_ack_tlv_len+0x6c/0x210 [ 600.987828][T24416] netlink_ack+0x146/0xa50 [ 600.987857][T24416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.987885][T24416] ? ref_tracker_free+0x693/0x840 [ 600.987918][T24416] ? __pfx_ref_tracker_free+0x10/0x10 [ 600.987956][T24416] netlink_rcv_skb+0x2b6/0x4b0 [ 600.987989][T24416] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.988020][T24416] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.988064][T24416] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.988095][T24416] ? netlink_deliver_tap+0x2e/0x1b0 [ 600.988131][T24416] netlink_unicast+0x75c/0x8e0 [ 600.988170][T24416] netlink_sendmsg+0x813/0xb40 [ 600.988199][T24416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.988222][T24416] ? aa_sock_msg_perm+0xf1/0x1b0 [ 600.988252][T24416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 600.988285][T24416] ____sys_sendmsg+0x972/0x9f0 [ 600.988305][T24416] ? __might_fault+0xaf/0x130 [ 600.988335][T24416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.988365][T24416] ? import_iovec+0x73/0xa0 [ 600.988400][T24416] ___sys_sendmsg+0x2a5/0x360 [ 600.988419][T24416] ? __lock_acquire+0x6b5/0x2cf0 [ 600.988446][T24416] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.988506][T24416] ? __fget_files+0x2a/0x420 [ 600.988531][T24416] ? __fget_files+0x3a0/0x420 [ 600.988567][T24416] __x64_sys_sendmsg+0x1bd/0x2a0 [ 600.988590][T24416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 600.988619][T24416] ? __pfx_ksys_write+0x10/0x10 [ 600.988657][T24416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.988681][T24416] do_syscall_64+0x15f/0x560 [ 600.988701][T24416] ? trace_irq_disable+0x3b/0x140 [ 600.988732][T24416] ? clear_bhb_loop+0x40/0x90 [ 600.988757][T24416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.988777][T24416] RIP: 0033:0x7f3b05f9ce59 [ 600.988797][T24416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.988818][T24416] RSP: 002b:00007f3b06ec2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.988840][T24416] RAX: ffffffffffffffda RBX: 00007f3b06215fa0 RCX: 00007f3b05f9ce59 [ 600.988856][T24416] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 600.988870][T24416] RBP: 00007f3b06ec2090 R08: 0000000000000000 R09: 0000000000000000 [ 600.988883][T24416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.988896][T24416] R13: 00007f3b06216038 R14: 00007f3b06215fa0 R15: 00007f3b0633fa48 [ 600.988929][T24416] [ 602.307628][ T5688] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 602.464407][T18664] IPVS: stop unused estimator thread 0... [ 602.480357][ T5688] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 602.508336][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.555035][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.619236][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 602.659795][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.693003][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.740024][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 602.775911][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.817883][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.865641][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 602.897139][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 602.938706][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 602.990067][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.032767][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.067540][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.126899][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.150898][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.174971][T24472] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2562'. [ 603.195792][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.241049][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.268763][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.296073][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.348847][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.378234][ T5688] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 603.412348][ T5688] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 603.461699][ T5688] usb 3-1: config 0 interface 0 has no altsetting 0 [ 603.501169][ T5688] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 603.530966][ T5688] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 603.559814][ T5688] usb 3-1: Product: syz [ 603.574403][ T5688] usb 3-1: Manufacturer: syz [ 603.595029][ T5688] usb 3-1: SerialNumber: syz [ 603.600521][ T3107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 603.617999][ T5688] usb 3-1: config 0 descriptor?? [ 603.657554][ T5688] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 603.709284][ T5291] 8021q: adding VLAN 0 to HW filter on device eth7 [ 603.790467][ T3107] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 603.815512][T24492] syzkaller0: entered promiscuous mode [ 603.821607][ T3107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.842613][ T5723] usb 3-1: USB disconnect, device number 19 [ 603.864657][ T3107] usb 2-1: config 0 descriptor?? [ 603.881025][T24492] syzkaller0: entered allmulticast mode [ 603.900396][ T5723] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 603.921156][ T3107] gspca_main: spca508-2.14.0 probing 8086:0110 [ 604.175802][T24514] FAULT_INJECTION: forcing a failure. [ 604.175802][T24514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.204154][T24514] CPU: 1 UID: 0 PID: 24514 Comm: syz.7.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.204188][T24514] Tainted: [L]=SOFTLOCKUP [ 604.204197][T24514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.204214][T24514] Call Trace: [ 604.204222][T24514] [ 604.204232][T24514] dump_stack_lvl+0xe8/0x150 [ 604.204262][T24514] should_fail_ex+0x412/0x560 [ 604.204297][T24514] strncpy_from_user+0x36/0x2b0 [ 604.204329][T24514] do_getname+0x77/0x250 [ 604.204357][T24514] user_path_at+0x2a/0x160 [ 604.204389][T24514] __se_sys_mount+0x2dc/0x420 [ 604.204421][T24514] ? __pfx___se_sys_mount+0x10/0x10 [ 604.204454][T24514] ? __secure_computing+0xe1/0x2a0 [ 604.204476][T24514] ? __x64_sys_mount+0x20/0xc0 [ 604.204501][T24514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.204523][T24514] do_syscall_64+0x15f/0x560 [ 604.204545][T24514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.204567][T24514] ? clear_bhb_loop+0x40/0x90 [ 604.204594][T24514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.204616][T24514] RIP: 0033:0x7f696a79e0ca [ 604.204636][T24514] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.204655][T24514] RSP: 002b:00007f696b70de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 604.204677][T24514] RAX: ffffffffffffffda RBX: 00007f696b70dee0 RCX: 00007f696a79e0ca [ 604.204693][T24514] RDX: 0000200000000100 RSI: 0000200000002080 RDI: 0000000000000000 [ 604.204708][T24514] RBP: 0000200000000100 R08: 00007f696b70dee0 R09: 0000000000000000 [ 604.204723][T24514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 604.204736][T24514] R13: 00007f696b70dea0 R14: 0000000000000000 R15: 0000200000000080 [ 604.204768][T24514] [ 604.557217][ T3107] gspca_spca508: reg_read err -71 [ 604.563933][ T3107] gspca_spca508: reg_read err -71 [ 604.577657][ T3107] gspca_spca508: reg_read err -71 [ 604.583760][ T3107] gspca_spca508: reg_read err -71 [ 604.589983][ T3107] gspca_spca508: reg write: error -71 [ 604.607906][ T3107] spca508 2-1:0.0: probe with driver spca508 failed with error -71 [ 604.633613][ T3107] usb 2-1: USB disconnect, device number 2 [ 604.885825][T24541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2568'. [ 605.678158][ T3107] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 605.727458][ T5688] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 605.846991][ T3107] usb 3-1: Using ep0 maxpacket: 16 [ 605.892672][ T3107] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 605.911866][ T5688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.954092][ T3107] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 605.978594][ T5688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.012427][ T3107] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.030452][ T5688] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.065109][ T3107] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 606.080199][ T5688] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.112504][ T3107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.122564][ T5688] usb 2-1: Product: syz [ 606.147382][ T3107] usb 3-1: Product: syz [ 606.147385][ T5688] usb 2-1: Manufacturer: syz [ 606.147422][ T5688] usb 2-1: SerialNumber: syz [ 606.198639][ T3107] usb 3-1: Manufacturer: syz [ 606.214170][ T3107] usb 3-1: SerialNumber: syz [ 606.277099][ T5688] usb 2-1: 0:2 : does not exist [ 606.311499][ T5291] 8021q: adding VLAN 0 to HW filter on device eth8 [ 606.448570][T24576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.501351][T24576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.703009][ T3107] usb 3-1: 0:2 : does not exist [ 606.766533][ T3107] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 606.857756][ T24] usb 2-1: USB disconnect, device number 3 [ 606.996806][ T3107] usb 3-1: USB disconnect, device number 20 [ 607.091180][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 607.091201][ T29] audit: type=1804 audit(1779848085.995:1135): pid=24663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.2577" name="/newroot/87/file1" dev="tmpfs" ino=467 res=1 errno=0 [ 607.572373][ T29] audit: type=1326 audit(1779848086.475:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 607.634188][ T29] audit: type=1326 audit(1779848086.475:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 607.807678][ T29] audit: type=1326 audit(1779848086.585:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 607.841838][T24712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2580'. [ 607.940949][ T29] audit: type=1326 audit(1779848086.585:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.074198][ T29] audit: type=1326 audit(1779848086.585:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.203387][T24723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2582'. [ 608.251943][ T29] audit: type=1326 audit(1779848086.585:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.328971][ T29] audit: type=1326 audit(1779848086.585:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.466317][T24723] bridge0: port 6(batadv3) entered blocking state [ 608.487361][ T29] audit: type=1326 audit(1779848086.585:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.546437][T24723] bridge0: port 6(batadv3) entered disabled state [ 608.580629][ T29] audit: type=1326 audit(1779848086.595:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24702 comm="syz.2.2579" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3b05f9ce59 code=0x7ffc0000 [ 608.656427][T24723] batadv3: entered allmulticast mode [ 608.715601][T24723] batadv3: entered promiscuous mode [ 608.968305][T18662] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 608.977984][T18662] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 609.502081][T24704] IPVS: Error connecting to the multicast addr [ 609.586293][T24704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2579'. [ 609.654907][T24788] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 610.050682][T24815] netlink: 'syz.6.2588': attribute type 1 has an invalid length. [ 610.106120][T24809] syzkaller0: entered promiscuous mode [ 610.142562][T24815] netlink: 'syz.6.2588': attribute type 2 has an invalid length. [ 610.169501][T24809] syzkaller0: entered allmulticast mode [ 610.220045][T24815] netlink: 'syz.6.2588': attribute type 1 has an invalid length. [ 610.263563][T24815] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2588'. [ 610.773327][T24843] program syz.1.2592 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 610.958791][T24853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2595'. [ 611.132916][T24861] tmpfs: Unknown parameter 'fd' [ 611.207782][ T3107] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 611.384030][ T3107] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 611.399329][ T3107] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 611.412930][ T3107] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 611.426772][ T3107] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 611.436372][ T3107] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.459806][ T3107] usb 8-1: config 0 descriptor?? [ 611.540993][T24877] syzkaller0: entered promiscuous mode [ 611.546689][T24877] syzkaller0: entered allmulticast mode [ 611.600753][ T24] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 611.771509][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 611.909917][ T24] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 611.946448][ T3107] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 612.108395][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 612.146017][ T24] usb usb2-port1: attempt power cycle [ 612.499046][ T24] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 612.536874][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 612.669349][ T24] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 612.702187][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 612.718463][ T24] usb usb2-port1: unable to enumerate USB device [ 613.399247][ T24] usb 8-1: reset high-speed USB device number 23 using dummy_hcd [ 613.569286][ T24] usb 8-1: device descriptor read/64, error -32 [ 613.818237][ T24] usb 8-1: reset high-speed USB device number 23 using dummy_hcd [ 613.965208][ T24] usb 8-1: device descriptor read/64, error -32 [ 613.972029][T24931] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2606'. [ 614.250530][ T24] usb 8-1: reset high-speed USB device number 23 using dummy_hcd [ 614.302316][ T24] usb 8-1: device descriptor read/8, error -32 [ 614.860401][ T5703] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 615.052908][ T5703] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 615.067491][ T5703] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.098592][ T5703] usb 2-1: config 0 has no interface number 0 [ 615.106982][ T5703] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 615.120135][ T5703] usb 2-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 615.163417][ T5703] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 615.173072][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.181794][ T5703] usb 2-1: Product: syz [ 615.186069][ T5703] usb 2-1: Manufacturer: syz [ 615.192357][ T3107] usb 8-1: USB disconnect, device number 23 [ 615.232703][ T5703] usb 2-1: SerialNumber: syz [ 615.273106][ T5703] usb 2-1: config 0 descriptor?? [ 615.300276][T24946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 615.326974][T24946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 615.555218][ T5703] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 615.633843][ T5703] usb 2-1: USB disconnect, device number 8 [ 616.081155][T24932] Bluetooth: hci2: command 0x0406 tx timeout [ 616.706620][T24989] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2611'. [ 616.772452][T24989] netlink: 'syz.1.2611': attribute type 15 has an invalid length. [ 617.713403][T24931] veth1_macvtap: left promiscuous mode [ 617.844781][T25003] FAULT_INJECTION: forcing a failure. [ 617.844781][T25003] name failslab, interval 1, probability 0, space 0, times 0 [ 617.862019][T25003] CPU: 1 UID: 0 PID: 25003 Comm: syz.2.2612 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.862054][T25003] Tainted: [L]=SOFTLOCKUP [ 617.862062][T25003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.862076][T25003] Call Trace: [ 617.862095][T25003] [ 617.862105][T25003] dump_stack_lvl+0xe8/0x150 [ 617.862148][T25003] should_fail_ex+0x412/0x560 [ 617.862191][T25003] should_failslab+0xa8/0x100 [ 617.862215][T25003] __kmalloc_cache_noprof+0x88/0x660 [ 617.862255][T25003] ? alloc_fs_context+0x64/0xd50 [ 617.862313][T25003] alloc_fs_context+0x64/0xd50 [ 617.862354][T25003] ? _raw_read_unlock+0x28/0x50 [ 617.862391][T25003] ? get_fs_type+0x407/0x480 [ 617.862449][T25003] do_new_mount+0x187/0xd30 [ 617.862495][T25003] ? apparmor_capable+0x126/0x170 [ 617.862521][T25003] ? security_capable+0x7e/0x2c0 [ 617.862551][T25003] ? __pfx_do_new_mount+0x10/0x10 [ 617.862577][T25003] ? ns_capable+0x89/0xe0 [ 617.862603][T25003] ? path_mount+0x690/0x10e0 [ 617.862634][T25003] ? user_path_at+0xd4/0x160 [ 617.862667][T25003] __se_sys_mount+0x31d/0x420 [ 617.862701][T25003] ? __pfx___se_sys_mount+0x10/0x10 [ 617.862734][T25003] ? __secure_computing+0xe1/0x2a0 [ 617.862757][T25003] ? __x64_sys_mount+0x20/0xc0 [ 617.862783][T25003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.862808][T25003] do_syscall_64+0x15f/0x560 [ 617.862830][T25003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.862854][T25003] ? clear_bhb_loop+0x40/0x90 [ 617.862881][T25003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.862904][T25003] RIP: 0033:0x7f3b05f9e0ca [ 617.862924][T25003] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.862944][T25003] RSP: 002b:00007f3b06ec1e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 617.862966][T25003] RAX: ffffffffffffffda RBX: 00007f3b06ec1ee0 RCX: 00007f3b05f9e0ca [ 617.862983][T25003] RDX: 0000200000000100 RSI: 0000200000002080 RDI: 0000000000000000 [ 617.862998][T25003] RBP: 0000200000000100 R08: 00007f3b06ec1ee0 R09: 0000000000000000 [ 617.863013][T25003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000002080 [ 617.863027][T25003] R13: 00007f3b06ec1ea0 R14: 0000000000000000 R15: 0000200000000080 [ 617.863060][T25003] [ 618.134265][T24964] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 618.173507][T24989] vxlan1: entered promiscuous mode [ 618.188578][ T3294] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 64767 - 0 [ 618.240657][ T3294] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 64767 - 0 [ 618.280421][ T3294] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 64767 - 0 [ 618.318393][T25014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 618.375586][ T3294] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 64767 - 0 [ 618.415849][T25015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2614'. [ 618.540652][T25015] netlink: 'syz.1.2614': attribute type 27 has an invalid length. [ 619.031897][T25047] tun1: tun_chr_ioctl cmd 1074025675 [ 619.058235][T25047] tun1: persist enabled [ 619.081528][T25047] tun1: tun_chr_ioctl cmd 1074025675 [ 619.137653][T25047] tun1: persist enabled [ 619.267436][ T5695] usb 8-1: new low-speed USB device number 24 using dummy_hcd [ 619.390763][ T5722] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 619.429653][ T5695] usb 8-1: config 15 has an invalid interface number: 154 but max is 0 [ 619.448881][ T5695] usb 8-1: config 15 has no interface number 0 [ 619.475923][ T5695] usb 8-1: config 15 interface 154 altsetting 7 endpoint 0x9 has invalid maxpacket 1024, setting to 8 [ 619.507630][ T5695] usb 8-1: config 15 interface 154 altsetting 7 endpoint 0xB has invalid wMaxPacketSize 0 [ 619.537462][ T5695] usb 8-1: config 15 interface 154 has no altsetting 0 [ 619.557491][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 619.570376][ T5695] usb 8-1: string descriptor 0 read error: -22 [ 619.582471][ T5722] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 619.588005][ T5695] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0002, bcdDevice=9e.7c [ 619.616915][ T5722] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 619.625076][ T5695] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 619.638790][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.660944][T25075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 619.662353][ T5722] usb 2-1: Product: syz [ 619.688508][ T5695] ati_remote 8-1:15.154: ati_remote_probe: Unexpected endpoint_in [ 619.713674][ T5722] usb 2-1: Manufacturer: syz [ 619.727704][ T5722] usb 2-1: SerialNumber: syz [ 619.755998][ T5722] r8152-cfgselector 2-1: Unknown version 0x0000 [ 619.775864][ T5722] r8152-cfgselector 2-1: config 0 descriptor?? [ 619.931726][ T24] usb 8-1: USB disconnect, device number 24 [ 619.948780][T25085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.978070][T25085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.167521][ T5695] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 620.212345][ T5722] r8152-cfgselector 2-1: Unknown version 0x0000 [ 620.230479][ T5722] r8152-cfgselector 2-1: No union descriptors [ 620.261322][ T5722] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 620.338744][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 620.356529][ T5695] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 620.379462][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.411174][ T5695] usb 3-1: config 0 descriptor?? [ 620.640722][ T5695] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 620.663365][T25120] syzkaller0: entered promiscuous mode [ 620.669475][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 620.684360][T25120] syzkaller0: entered allmulticast mode [ 620.708900][ T5695] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 620.742696][ T5695] usb 3-1: media controller created [ 620.798343][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 620.891530][T25086] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 621.154850][ T5695] az6027: usb out operation failed. (-71) [ 621.184569][ T5695] az6027: usb out operation failed. (-71) [ 621.213158][ T5695] stb0899_attach: Driver disabled by Kconfig [ 621.213625][ T5637] Bluetooth: hci5: command 0x0406 tx timeout [ 621.254761][T25144] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 621.285330][ T5695] az6027: no front-end attached [ 621.285330][ T5695] [ 621.346609][ T5695] az6027: usb out operation failed. (-71) [ 621.388857][ T5695] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 621.441344][ T5695] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 621.528558][ T5695] dvb-usb: schedule remote query interval to 400 msecs. [ 621.576535][ T5695] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 621.721552][ T5695] usb 3-1: USB disconnect, device number 21 [ 621.803485][ T5645] udevd[5645]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 621.939577][ T5695] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 622.133827][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2634'. [ 622.402026][T25204] binder: 25174:25204 ioctl c0306201 2000000003c0 returned -14 [ 622.441495][ T5722] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 622.528494][ T5722] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 622.786513][T25211] fido_id[25211]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 622.885612][T25208] syz.7.2635 (25208): drop_caches: 2 [ 624.017443][ T10] usb 8-1: new full-speed USB device number 25 using dummy_hcd [ 624.206714][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 624.254532][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.265565][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.277688][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 624.315410][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 624.352772][ T10] usb 8-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 624.390176][ T10] usb 8-1: New USB device found, idVendor=0525, idProduct=aea1, bcdDevice= 0.1c [ 624.416977][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.445664][ T10] usb 8-1: Product: syz [ 624.472779][ T10] usb 8-1: Manufacturer: syz [ 624.493586][ T10] usb 8-1: SerialNumber: syz [ 624.540733][T25248] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 624.596000][ T10] cdc_mbim 8-1:1.0: skipping garbage [ 624.632820][ T10] usb 8-1: selecting invalid altsetting 1 [ 624.918684][ T10] cdc_mbim 8-1:1.0: failed GET_NTB_PARAMETERS [ 624.947358][ T10] cdc_mbim 8-1:1.0: bind() failure [ 625.040900][ T10] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 625.086249][ T10] cdc_ncm 8-1:1.1: bind() failure [ 625.140887][ T10] usb 8-1: USB disconnect, device number 25 [ 625.473475][T25291] hub 1-0:1.0: USB hub found [ 625.507622][T25291] hub 1-0:1.0: 1 port detected [ 626.096693][T25303] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 626.132688][T25303] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 626.133968][T25309] fuse: Unknown parameter 'T' [ 626.454835][ T24] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 626.515791][ T24] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 626.542270][T25322] syz.7.2648 (25322): drop_caches: 2 [ 626.722410][T25338] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 626.738075][T25327] fido_id[25327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 626.988850][T25353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 627.017150][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 628.877559][T24932] Bluetooth: hci2: command 0x0406 tx timeout [ 628.883777][T25338] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 629.529305][T25374] fuse: Bad value for 'fd' [ 629.534066][T25374] FAULT_INJECTION: forcing a failure. [ 629.534066][T25374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.548450][T25374] CPU: 1 UID: 0 PID: 25374 Comm: syz.6.2659 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.548486][T25374] Tainted: [L]=SOFTLOCKUP [ 629.548495][T25374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.548509][T25374] Call Trace: [ 629.548518][T25374] [ 629.548528][T25374] dump_stack_lvl+0xe8/0x150 [ 629.548559][T25374] should_fail_ex+0x412/0x560 [ 629.548596][T25374] _copy_from_user+0x2d/0xb0 [ 629.548618][T25374] kstrtouint_from_user+0xd6/0x180 [ 629.548651][T25374] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 629.548698][T25374] proc_fail_nth_write+0x8e/0x210 [ 629.548729][T25374] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 629.548769][T25374] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 629.548800][T25374] vfs_write+0x29a/0xb90 [ 629.548841][T25374] ? __pfx_vfs_write+0x10/0x10 [ 629.548875][T25374] ? __fget_files+0x2a/0x420 [ 629.548916][T25374] ? __fget_files+0x3a0/0x420 [ 629.548943][T25374] ? __fget_files+0x2a/0x420 [ 629.548980][T25374] ksys_write+0x150/0x270 [ 629.549015][T25374] ? __pfx_ksys_write+0x10/0x10 [ 629.549053][T25374] ? __secure_computing+0xe1/0x2a0 [ 629.549079][T25374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.549104][T25374] do_syscall_64+0x15f/0x560 [ 629.549127][T25374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.549150][T25374] ? clear_bhb_loop+0x40/0x90 [ 629.549178][T25374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.549200][T25374] RIP: 0033:0x7f2fc195d68e [ 629.549221][T25374] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 629.549239][T25374] RSP: 002b:00007f2fbfbd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.549262][T25374] RAX: ffffffffffffffda RBX: 00007f2fbfbd56c0 RCX: 00007f2fc195d68e [ 629.549279][T25374] RDX: 0000000000000001 RSI: 00007f2fbfbd50a0 RDI: 0000000000000004 [ 629.549293][T25374] RBP: 00007f2fbfbd5090 R08: 0000000000000000 R09: 0000000000000000 [ 629.549307][T25374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.549320][T25374] R13: 00007f2fc1c16128 R14: 00007f2fc1c16090 R15: 00007f2fc1d3fa48 [ 629.549356][T25374] [ 629.795325][T25338] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 629.819922][T25338] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 629.826791][T25338] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 629.868114][T25352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.943677][T25352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.088276][T25393] fuse: Bad value for 'group_id' [ 630.107571][T25393] fuse: Bad value for 'group_id' [ 630.117683][ T5703] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 630.346272][T25408] netlink: 666 bytes leftover after parsing attributes in process `syz.5.2664'. [ 630.526070][T25412] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2665'. [ 630.777662][T25412] syzkaller0: entered promiscuous mode [ 630.810714][T25412] syzkaller0: entered allmulticast mode [ 630.957905][T24932] Bluetooth: hci2: command 0x0406 tx timeout [ 631.027376][ T24] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 631.188270][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 631.203193][ T24] usb 8-1: config 251 has an invalid interface number: 202 but max is 0 [ 631.224060][ T24] usb 8-1: config 251 has no interface number 0 [ 631.236818][ T24] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 631.256698][ T24] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 0 [ 631.292275][ T24] usb 8-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 631.333483][ T24] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 631.373510][ T24] usb 8-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 631.420250][ T24] usb 8-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 22328, setting to 1024 [ 631.457729][ T24] usb 8-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 1024 [ 631.533418][ T24] usb 8-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 631.622079][ T24] usb 8-1: config 251 interface 202 has no altsetting 0 [ 631.673670][ T24] usb 8-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 631.701922][ T24] usb 8-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 631.752797][ T24] usb 8-1: Product: syz [ 631.773539][ T24] usb 8-1: SerialNumber: syz [ 631.801589][T25418] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 631.840445][T24932] Bluetooth: hci5: command 0x0406 tx timeout [ 631.861697][T25445] bond2: option arp_interval: invalid value (18446744072904038628) [ 631.888820][T25445] bond2: option arp_interval: allowed values 0 - 2147483647 [ 631.927811][ T30] INFO: task syz.3.2051:19980 blocked for more than 143 seconds. [ 631.966356][ T30] Tainted: G L syzkaller #0 [ 631.999568][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 632.029269][ T30] task:syz.3.2051 state:D stack:27952 pid:19980 tgid:19975 ppid:5648 task_flags:0x400140 flags:0x00080002 [ 632.082117][ T30] Call Trace: [ 632.085606][T25412] sctp: [Deprecated]: syz.7.2665 (pid 25412) Use of struct sctp_assoc_value in delayed_ack socket option. [ 632.085606][T25412] Use struct sctp_sack_info instead [ 632.098273][ T30] [ 632.144793][ T30] __schedule+0x1821/0x5740 [ 632.164118][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 632.196524][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 632.219039][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 632.261682][ T30] ? __pfx___schedule+0x10/0x10 [ 632.289865][ T30] ? schedule+0x90/0x360 [ 632.312771][ T30] schedule+0x164/0x360 [ 632.332865][ T30] schedule_preempt_disabled+0x13/0x30 [ 632.357959][ T30] __mutex_lock+0x7f7/0x1550 [ 632.376238][ T30] ? __mutex_lock+0x608/0x1550 [ 632.403147][ T30] ? usbdev_open+0x182/0x770 [ 632.424561][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 632.445711][ T30] ? bus_find_device+0x27d/0x2d0 [ 632.471138][ T30] ? __pfx_bus_find_device+0x10/0x10 [ 632.489828][ T30] ? usbdev_open+0xa7/0x770 [ 632.510412][ T30] ? __kmalloc_cache_noprof+0x15b/0x660 [ 632.533097][ T30] usbdev_open+0x182/0x770 [ 632.550924][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 632.578599][ T30] ? __pfx_usbdev_open+0x10/0x10 [ 632.597378][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 632.621045][ T30] chrdev_open+0x4cd/0x5e0 [ 632.642359][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 632.660806][ T30] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 632.682605][ T30] ? __pfx_chrdev_open+0x10/0x10 [ 632.698132][ T30] do_dentry_open+0x785/0x14e0 [ 632.713107][ T30] vfs_open+0x3b/0x340 [ 632.730336][ T30] ? path_openat+0x2df0/0x3860 [ 632.750128][ T30] path_openat+0x2e08/0x3860 [ 632.769791][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 632.791335][ T30] ? stack_depot_save_flags+0x33/0x810 [ 632.814887][ T30] ? __pfx_path_openat+0x10/0x10 [ 632.833637][ T30] ? __x64_sys_openat+0x138/0x170 [ 632.854518][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 632.878881][ T30] do_file_open+0x23e/0x4a0 [ 632.895606][ T30] ? __pfx_do_file_open+0x10/0x10 [ 632.915657][ T30] ? _raw_spin_unlock+0x28/0x50 [ 632.932393][ T30] ? alloc_fd+0x64b/0x6c0 [ 632.946530][ T30] do_sys_openat2+0x113/0x200 [ 632.964345][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 632.988756][ T30] ? exc_page_fault+0x6a/0xc0 [ 633.005656][ T30] ? do_user_addr_fault+0xc6f/0x1340 [ 633.026230][ T30] __x64_sys_openat+0x138/0x170 [ 633.050355][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.085828][ T30] do_syscall_64+0x15f/0x560 [ 633.106826][ T30] ? trace_irq_disable+0x3b/0x140 [ 633.130661][ T30] ? clear_bhb_loop+0x40/0x90 [ 633.151608][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.177981][ T30] RIP: 0033:0x7f335535d68e [ 633.203274][ T30] RSP: 002b:00007f33562f1b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 633.243264][ T30] RAX: ffffffffffffffda RBX: 00007f33562f26c0 RCX: 00007f335535d68e [ 633.283525][ T30] RDX: 0000000000000082 RSI: 00007f33562f1c00 RDI: ffffffffffffff9c [ 633.323501][ T30] RBP: 00007f33562f1c00 R08: 0000000000000000 R09: 0000000000000000 [ 633.361518][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 633.403596][ T30] R13: 00007f3355616038 R14: 00007f3355615fa0 R15: 00007f335573fa48 [ 633.450805][ T30] [ 633.462792][ T30] [ 633.462792][ T30] Showing all locks held in the system: [ 633.497449][ T30] 5 locks held by kworker/1:0/24: [ 633.507109][T25445] bond2 (unregistering): Released all slaves [ 633.515393][ T30] #0: ffff88801fac3540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 633.562686][ T30] #1: ffffc900001e7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 633.614322][ T30] #2: ffff88802a4ef1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 633.669193][ T30] #3: ffff88807ab5b1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 633.693376][ T30] #4: ffff888022eb1a68 (&(&priv->bus_notifier)->rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 633.720394][ T30] 1 lock held by khungtaskd/30: [ 633.745894][ T30] #0: ffffffff8e95cce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 633.803847][ T30] 3 locks held by kworker/u8:8/1167: [ 633.851857][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 633.905654][ T30] #1: ffffc90005527c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 633.919362][T24932] Bluetooth: hci5: command 0x0406 tx timeout [ 633.947381][ T30] #2: ffffffff8fdd19c0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 633.956589][ T30] 2 locks held by getty/5383: [ 633.961633][ T30] #0: ffff8880327b20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 633.971706][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 633.983697][ T30] 4 locks held by udevd/5645: [ 633.991939][ T30] #0: ffff888076785998 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 634.013158][ T30] #1: ffff8880559cb480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 634.023539][ T30] #2: ffff88803495c2d8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 634.034928][ T30] #3: ffff88807ab5b1d8 (&dev->mutex){....}-{4:4}, at: product_show+0x26/0xa0 [ 634.049887][ T30] 5 locks held by kworker/0:5/5725: [ 634.063165][ T30] 1 lock held by syz.3.2051/19980: [ 634.085344][ T30] #0: ffff88802a4c51d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x182/0x770 [ 634.121636][ T30] 2 locks held by syz.7.2665/25418: [ 634.141411][ T30] 1 lock held by syz.2.2668/25431: [ 634.164784][ T30] #0: ffffffff8fdd19c0 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 634.188982][ T30] 3 locks held by syz.6.2670/25445: [ 634.216376][ T30] #0: ffffffff90311480 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 634.241905][ T30] #1: ffffffff8fdd19c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 634.269135][ T30] #2: ffffffff8e962fe8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 634.302288][ T30] 1 lock held by syz.5.2672/25487: [ 634.341612][ T30] #0: ffffffff8fdd19c0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 634.416349][ T30] [ 634.441618][ T30] ============================================= [ 634.441618][ T30] [ 634.512059][ T30] NMI backtrace for cpu 1 [ 634.512085][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 634.512114][ T30] Tainted: [L]=SOFTLOCKUP [ 634.512126][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.512139][ T30] Call Trace: [ 634.512148][ T30] [ 634.512157][ T30] dump_stack_lvl+0xe8/0x150 [ 634.512187][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 634.512216][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 634.512242][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 634.512273][ T30] sys_info+0x135/0x170 [ 634.512296][ T30] watchdog+0xfd3/0x1030 [ 634.512335][ T30] ? watchdog+0x1c9/0x1030 [ 634.512372][ T30] kthread+0x389/0x470 [ 634.512401][ T30] ? __pfx_watchdog+0x10/0x10 [ 634.512430][ T30] ? __pfx_kthread+0x10/0x10 [ 634.512466][ T30] ret_from_fork+0x514/0xb70 [ 634.512492][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 634.512514][ T30] ? __switch_to+0xc79/0x1410 [ 634.512549][ T30] ? __pfx_kthread+0x10/0x10 [ 634.512577][ T30] ret_from_fork_asm+0x1a/0x30 [ 634.512618][ T30] [ 634.512651][ T30] Sending NMI from CPU 1 to CPUs 0: [ 634.629675][ C0] NMI backtrace for cpu 0 [ 634.629696][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.629722][ C0] Tainted: [L]=SOFTLOCKUP [ 634.629728][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.629740][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 634.629768][ C0] Code: 6b 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 02 20 00 fb f4 7c f7 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 634.629791][ C0] RSP: 0018:ffffffff8e607dc0 EFLAGS: 00000246 [ 634.629808][ C0] RAX: 00000000004f5841 RBX: ffffffff819a857a RCX: 0000000080000001 [ 634.629822][ C0] RDX: 0000000000000001 RSI: ffffffff8dfad1d5 RDI: ffffffff8c28b760 [ 634.629835][ C0] RBP: ffffffff8e607eb0 R08: ffff8880b86339db R09: 1ffff110170c673b [ 634.629849][ C0] R10: dffffc0000000000 R11: ffffed10170c673c R12: 0000000000000000 [ 634.629866][ C0] R13: 1ffffffff1cd25d8 R14: 0000000000000000 R15: 1ffffffff1cd25d8 [ 634.629879][ C0] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 634.629895][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.629910][ C0] CR2: 000020000028b030 CR3: 0000000078b5c000 CR4: 00000000003526f0 [ 634.629927][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 634.629937][ C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 634.629949][ C0] Call Trace: [ 634.629956][ C0] [ 634.629962][ C0] default_idle+0x9/0x20 [ 634.629983][ C0] default_idle_call+0x72/0xb0 [ 634.630004][ C0] do_idle+0x36a/0x5f0 [ 634.630029][ C0] ? __pfx_do_idle+0x10/0x10 [ 634.630059][ C0] cpu_startup_entry+0x43/0x60 [ 634.630080][ C0] rest_init+0x2de/0x300 [ 634.630103][ C0] start_kernel+0x38a/0x3e0 [ 634.630132][ C0] x86_64_start_reservations+0x24/0x30 [ 634.630155][ C0] x86_64_start_kernel+0x143/0x1c0 [ 634.630177][ C0] common_startup_64+0x13e/0x147 [ 634.630214][ C0] [ 635.241168][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 635.248084][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 635.258806][ T30] Tainted: [L]=SOFTLOCKUP [ 635.263158][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.273244][ T30] Call Trace: [ 635.276557][ T30] [ 635.279526][ T30] vpanic+0x56c/0xa60 [ 635.283560][ T30] ? __pfx___schedule+0x10/0x10 [ 635.288465][ T30] ? __pfx_vpanic+0x10/0x10 [ 635.293014][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 635.299220][ T30] panic+0xc5/0xd0 [ 635.303000][ T30] ? __pfx_panic+0x10/0x10 [ 635.307458][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 635.312881][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 635.319086][ T30] watchdog+0x102c/0x1030 [ 635.323497][ T30] ? watchdog+0x1c9/0x1030 [ 635.327963][ T30] kthread+0x389/0x470 [ 635.332084][ T30] ? __pfx_watchdog+0x10/0x10 [ 635.336820][ T30] ? __pfx_kthread+0x10/0x10 [ 635.341448][ T30] ret_from_fork+0x514/0xb70 [ 635.346082][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 635.351231][ T30] ? __switch_to+0xc79/0x1410 [ 635.355995][ T30] ? __pfx_kthread+0x10/0x10 [ 635.360637][ T30] ret_from_fork_asm+0x1a/0x30 [ 635.365453][ T30] [ 635.369235][ T30] Kernel Offset: disabled [ 635.373590][ T30] Rebooting in 86400 seconds..