last executing test programs:

2m16.492754896s ago: executing program 0 (id=3215):
r0 = socket$netlink(0x10, 0x3, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x78, 0xa0, 0x78, 0x32, 0x1c0, 0x4, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0xaa, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, 0x8, 0xa, 0x0, 0x2, 0xa})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000103}]})
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
openat$binder_debug(0xffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$tun(r6, &(0x7f0000000400)=ANY=[], 0xa2)
r7 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00')
pread64(r7, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a)
readv(r5, &(0x7f00000000c0)=[{&(0x7f0000001480)=""/4078, 0xfee}], 0x1)
ioctl$SG_GET_PACK_ID(r6, 0x227c, &(0x7f0000000100))
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000001fc0)={0x1c, r10, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4008040)

2m16.087307304s ago: executing program 0 (id=3222):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585", @ANYRES16], 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000014}, 0x40000)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r5, {}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x34, 0x2, [@TCA_FW_ACT={0x30, 0x4, [@m_nat={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000800)

2m14.217779602s ago: executing program 0 (id=3235):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000002c0), 0x10)
syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x0, 0x12e}, 0x0, 0x0, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=r0], 0x80}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="58000000100001042abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="feb0857dbdb5f31a24001280110001006272696467655f736c6176650c00058005000a0001000000140003086272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x2404c054}, 0x4040)

2m13.958703259s ago: executing program 0 (id=3238):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x3f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x408010, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f00000060c0)="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", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f000000c0c0)="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", 0x2000, &(0x7f0000000d00)={&(0x7f00000080c0)={0x50, 0x0, 0x2000000000000000, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
wait4(0x0, 0x0, 0x1, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000008140)="68c5ac4472cf4c55a95a4033efea47aaa2166bc5bf26041d530b7a8093f52a799ed64f7d388329e03a7263761a603ac78dc4f00e76854b0bf547b01d6e4b755c86cbd1f79f2b52aa37b394b12c8adadea9f0303e786c4f5d1a003d0dd2105d7f913c8b0b37db87660db041e3ef02e74014e152bec1a59404691f8d5536f907db385e0c10b26f5e4b1cb3649b4851fd9497b8a5a46d92ae939db388e9dd4221d56445365516ba4afbaf71f0a1f283af35f6bf0335d4ee45d206eb7d27b9c1b57700cea4b6df1b78b32cc210ce8f9cbd51c6061f5020b25140978d87feeb8fcfebd36bfa26edb914734c8d62cc770ccd47e39e83d37d61e1e40c8dd5c57595c1a1b676b47e61c57e044b80a2115571bfa525911abea7c4dd544f144a54edcffad16f0c4f97a24103cdda4985c5b2f24121e093bd6dea99e8e82285219bf32e7f31cfa72c619e439d9b30963baae00cfa75c343dec4ded492e2be126e8a4a028a4bd8a31c816082689bf4f24a1bb992fcbc6021820e64dc0c5b49700b939032cd0850e99fcd18987f49ddcba704f696c620e134d4952668e0b26f3e38b50eee1b9cc4040a73ac78478fa14f02288fe6703875c0e2588d120cce70e239c0d625c2dff76eebadf2e4abf3b48b14592be27efe6901a7b9a3e368afe0bc9eacc385df9fc50d8d511cd3563546c3e3eac6888282dc18aa0dd5ca8f6c9fa553329a824fc926357bee26103a7d6f6f97aaf40a74f9895a32572cad2f847d3a43dd46e56366bef0ac50075fa0dd4ca9112cb2d1f5ff104d07e045e0f52d501fdfb4d8b5b25ddda0d50a9dd227ea44f65aa187e42ef04f81c03ef7b98d87c6aa528a23aa03633b6f8851932a293c3cff455d7492ad2d624468dba864a0bca66e73dd10e30c9b92af9ebb918dbc47cdade725f4cbfa5bcd41f7165363a375918de916506cf34debb32c73c07912186604f0643fe9cdc48df54382dffbd6618fde5cd539ed66017501cb19341578197eb1c628c2bd66d6c0492dac5287e8151341e04b5233bdb75c76115929012e85624457e6fdc01a76586ab1fae4ca66f3e8cfadc12de75de7c7136ec1c81fc63fdd904646b549b745882a6a4fdc6be24069ed96506ba98175c72d111173a4605b468e09d27a03372a6ddd41cd0258a0376bd4a7fdbb81bcc96b0a74f5995a5441bbb3eb56c0a5fc95fc6174526c7eb733781abccf374886e5660300220475bdd90868bba8fbe24f28f4562d2f16717e78508754332d6f631d3ab1db0a1dab327a062c3425d05205ec2e501d88557976dfccef49da5374fcca03faa2965af1fed40bcc38c9224ae2b690ca770a48535bd12ad48e3b67ca34a568aa77a4054796ca54d9fa166735aac622f70f30f54170c28a8945575a90c6b6c060174544d2d0c6e0ba45d7e119539fec300b38c20ab49ec49bf966d5195dde7b62dd5d732b590743ebf83ca79e20d3a7a96cfcd3d5ed362116501d6c7829aeb373d75c34885f97cc7d46c232eaa8eb766fe7b4f5dc544018e53acd585aa3fc37fa2f5da0598de6fb4fbe6e853e0399e1161849bf28c7f3e70fe586d90f6e23ca784f9a62a6fb26a30fc4b0daab410f40985b2ccf33fa3b134c46018d5f490e19a1a6358fb64fca2262b40605226f736a419120eb12d9839ae5e00dda82b0e38d035aba5b7c64bad62690d0be82644c4bc3389a50e778c57f5d565c7325ae1d26191b0b35718f98d0703203cd15f797e9d0851f08a5043d38c7b70afa73d03d76c1b3a0beb2883e7071ae392255eb93f8b7766aa8e8476154cad09543d5663f5218a4ccb1d5221aa2b5ff384fa2deebd3bee5bd59498de9e69fc0312a0e9f95d473c3a0114cef6be8e83f13dad24feaf8e0202ae31d9d72d8adc898f5efa2056188c911b62362b78570cb388d72d0fb66e9f51327074c76b6a811ec56e325cbad4fd7e1688567a5832e559bcf9054f74e35c72c0645e76414395f305a5c20093d51aaced12f8f41c91c1fc105c48ab6eb5a6ea98d2feeba9fca5f6f87c1ecda7ede362a7b3f549437863ca0b3d718ac440156c63913b0dcd593f6c7194467cb4f4ce53c100dc0802e3a05523fc34ea3745449317db3eadf1f24a35f7230323148c4daa3cb3b200a696dec875dff60ff8d934a081a3492542db94c02ae1e1fee8e9b4ed05ba7bd522e8d93f3e0258cf709ca23ec1f0da74cee30f06703844746954a63eb05f013e1c3e0b52867d4d4c28ce4a3b8e1810f7af52d3f9aa4a1890f4b102664fcb3e47e2d1e84aab2498f8e356dc08c1b6bc126527ed6a052eb514c5e4447683f810f9061aee5b88a76b6cc75194babb655bc89bbd44bc114f93f086a2591fcb566dcb3e25afc921b0347977824069fab2670a72604e9771ba8c0c1b11bb70f021a16e90a5e38e4ad8b5bcdf09728f55342333ba41d0c15af22fbe225949bb86d353954ec9943d1735b54a764ab78b4700b49d3cc753c93b288d167441b89d8e8cc7e0c42d32ba882e2a49d72dae5c6b6a4bfbaef4a7ac70a0de2ee03e74da5857fef687bbe890a84136b6ab1c6359eb7d46d3cb085e907188e43b21024d6585eaea577bd2134bd7cfa1b31171b6a6c91092e4ca87bebb09c37114a834084616b69c07feca46761ef8f3581c7c17bce4d43153848feb4c87f1888e1a7da3972613d8564db52b7254331d6250b4402a0b2cc6bf52f21df0fc62a0b8b4038b95df7a6c1a472fbe8269463e337e98b4f751953d9b560abf3f281bd08a8204236bdc30dddf518f23d77eaeca327aba62fdf164f91cd921b4a8fc8d357081cc878907bbbe7b669fab8dca504194918ecc0a2fe549a4d8d4cca9e2d946491f90e7a4ae4004c12f0eb3641573c3ebdc2b2c51608d6861dd7a143b36a6ebc237ca80460050a39f6402cea2d9e22ba27ef59ae86b8365bc4fb7286a34febdebbb7960346ac78549b77b5d828cb6731b7065956530b488ec59c6181a6eeaf2b64f6f1be35a7b11498b9950248affd379fddce489f96fdbeed3838a616800e7dc31c1592d7760a9643c6dcf195ed0b1092accac7597f088a7495cbb9baaa8b786b6f6e2f0791c5ae2ed6e54a47e49bed986fe4f09bdf0620b6d2b1968cc71d732f470fef4c29fdd106d3e456a53b104c3e16e1ce512885342f74ee9390633c39026cf20f6e6125dff27b78d4d5057e9fcc2168732ee53744a38bb5bccdd5e40c846eaae97508da077ca88adee6a1752cddb600ae257054a87317da6352ea18fef0d97ac2c7311fc0917b1086f03ec63cadbaa49e58a23845dd134d419a4f9905dfbb8b111bbbf28a485e3f43f9fea4934266304b7451f54b2110b3488ab09ccf76d290323e1f8a55d098c70a0489934c9e3edbb874da666b04e2335c0d5692eb3a862b74cd1e856539acc2432b29eb792f8a52b44aabe44646c8afe30a2431be20b68323250825804796c98936b4c6bc8f86dadac011bf1157a9c195e67ef6e571d8f4465b049f860d5b3a13851cfd9f3bf0c2de3d8f3e361a0587acd6bdc4f2f4184f53308eaeea10812b14d6c1396144466e92c13bcc1b0f145b889b00110ae004dbc56ad5a7dcb69e74db5030b91cf60fbe1f02c8e18f68289b7c60a4a91e4c1fecbd72334e4ac06554524e3f8e40a9970859d817c2ec53adc69f4ec496ce597532341a1389efafd8cc29e79e69e31dcc7b2d106f5540189429dd718e63368c51e07a2f759d083c0c47f5a0c6ef5a912998a73b14a6a82c72dc7a747345b6c946433cbe7e135dac30cc61fb2f10bada9434b12c037a4961ab3265931707a630c68e9860c2007fbdfca0d8af7256e8c57a0dd72f6e97ea1da8177077e5e02ab281450f82712557caecac0a45e4b695c33f2194dc58c38dbe45015193949ac1bc50839955472681fcf7f61d9ae2ce569fbfe0a9d33819237fdc3be6be6139a5d1b275752487e9fbf1f55ea26c36eda979c4f576a471f55eaf683401a36ea4e86405ff0a49009ae8634d7e40b771f1e7342dee3ee6f8677dbeaff8e4b58a7890ac9ba677bbfef7b568cb819ba5cd6362efc1e8611a51582d7b649499ffcbabed51c7b5f135ea77d2e9a2730f7ee6ba40ed8c0006eb841d101f16709ae0b9c5e0330beb60d95bd538233cf8cdb93aaff3716de59bdff6c4f170fa7166b19535f07566a64f6d1f8dc2a8a0ef2c6437aa4a0d601102e9550e219071452b894b41ccbb55ad4bf7b9c36783e5b21bf90a327e688e39b9e9e9dd2939fe49b960d8cff11beeb3eeb261befc3981892c7a7f0dc94b0e05ce45398e6c4aacda0141cba0ef0d23e206b1f8b960b94865719b841dc92cab8d3686e39841a4b28b4521621c5e826e0a507b44f703b9ea7bba1da00ddfd926e33c9a8737b5edeafa54fe7b64e50084801ecd94e277ffeac3cfa6eeecbdd61a2e68b2881907c9c3531d9cb6d74467cb875336c12e0fcbf040e4cab8e8a1fc10e7b7ba177adffa841ed3b327040660da4a723939cfde767368beda6ef96e773c65c4779b4828e5eadb479150090869a4a2ffaf69e674c93d2359051a7852bcf193b6bfc360a657d17e60bbc76d379ceddb4077875e4a2ed867e5f278a6d2f553fce9609e61efd95f60278e3fc1fbc5accaf738fd468a5a056045e97192aa8550a0e0f22dab20a86ce61c4382263e8fd9a7659145b84c69eb848a7397b466691afa117448e2d709d0b8dd567bafd04a71bb0fa8ac3a632e51bdd129d7f7df9da302e6a93ed1b648bb3b0f4eb761ca305dc03883c10933ace4079437ccd203a5e02d5457e6b761543ad18230e093bd704c9052ef9c830afc2866bf54896051085c412bc52c20de7700f1e3526ea14ca7fb1a30b854ffdd2c79c5d644a50e39344f18306aa0b78e8d6e581d4953fea60a1db321c26f51b0f467868014f5b2f9c95205bd51079662d95dd62224b108ca1a71e2c9a036954948cae0fc4675085ac39cf4c7c495987d619e73479fb758dadee1b3d64435d6852bd22c19623d323369aa48aaeefdefb784cc6c12da1e6107102ba00dff80f054c197994b53eecc339fa0dc91bb9f6649beae160dd5b46370bb1765f1cb38b065bcbbebb2e889fa185f842ba4f886d67362770b1da9f9c813ce5092b548683a0a37d1e7b58e5b81add8352c0572122d54df87e54960d8bbdf2787e7df4c114770a9b9ab6c064ea9bf69fd82173687dd28bd876d872271e7e3c013adbc6fbc30d9c8f3ba0e84604e7b738a38b5b8ef09ecc826cec351a88a0fbdb46de5c44d18b678503efe0c3510d5c1398565a9db761a7448852237ec3919c451a53c7f801661521942a0db0d5304da01299ce01a1590ce669d94244b7c69340e0f2d0094730ef1ca5c4db59926d01644a52b728c5ebc6f071abd696b469cd70ca9f713d572b8f4a825722c53711df8a4e15fd1602647253ff75412c12569217ae1531819ea9422259308867c8759c4b800c58f2c278ac51ce37af1aa85bfc42a7b64a23e103079c2bdf58e3ba34d636e3085e2f489e3771eee2b38b59a1186809bbd4b2b5e963f641158e0153e25f921995b272fe85041629702e7b61ff331240c2ac370eb0b797a58975f19508486c2fa57fa41737894040208c6e62a7ed933c3bb76c123b6d1cfbb058f24ac2fefeb09c4cc7cae6df049d26edea0f38021528c75022ce57342da08d9ab983e4276057c6a699f5e8e6243fd950e7d59fa00f532e2f1e0f8420a933ce2393385b0b84d3e7aceb722007d49e7a5a1b43f30edc966679bc33c5323f5882eb31c6410eedcc9fafea9374b16cacb4a24351d8b8fdb6d829567aa6f12063c3eca1a1be9061541a6e9b0964b32956d33c0df56663a788e44fb66b2535df13645b824ddef690cd46a6291f595fce6d59814f043b479037c3005d2484a7a1069411a05e939b16311565cb1741d455671e70c4485fa3c5e136494d894a40c2c147f8be1ce7e775cc904b09ae44d8384970290282c1fd5197842c0354caa4a7cba9164479303b4053936cea416023db6191bdd4b03d3b7d6ca55d613ec58279bb6d9bd875f5c7ea469c2fcdf54a2fbb0622a4a927bfe5523c2ec27997827811c5281f55df9cc8538abead1fbcdc068d8568e8bc4424365253202c7e76d9a51bb48f4dbb289016a732f0f4211ddb09ba818bf1bec3628619319497a150b8a65586aa757773af88db9784e9dabf778d5b09b608a468350f71543423a5cbf88158fe223cce6af6dabdfa400d15a22225a77afa0b0fec0b4fb1304e73fd44aea3e215902eb850e3c585a624e902c1a6e8972657b023f6e0ab493b7297047469643d95ff763949d4ab33d24a391bb625ac1efa7062911a192a8f3c06b43c1ca5d10417a263e3475908e069e5a374918c3c938a8f246fe581a834fc284612d3b55674e0ef9311c70fcf55032f284be632dbabe9e9d90dc7b91808acf2d33e7ebce1c5347c1449b1701c14f7abd2e9a120d2b8325186820dcd60049f421acf4b19e8f24dee6b237f4322e6eeafe7f75545ee4242a2794ce32ab53f7e8313b2784208ba382c357592eac2edefe82e8d9a36dcd63ed7925b0723aeec09b692f95ee010b1292d5930ff73c9d359011f95c5d3cd1fd3584d80c179c3611473fc40dad4518e2a662bd150eaf90c50e0391762061b40a6b7d3709119d18c6dcf8b53a9b2d74c5b130961e297420f539a0da0792792cb00c1fd6bafad8c24181200a430fbf4bf7355f2a06000a9f7c5d23fd3857c644e5d98e1681e8ee930b36a42d809393d4337ac2f72f380a7d94a61f36d54a80acd8361b3eb716ad5b09b5c6cb1963705acf3e2a7f5e5af3ed4a8f80c717356f52b456d7e970baed1b39923af27a455d8ae6148a5ffb2390d8397fc3c6c2f7ee54a840bc31b60bac09f9c4c0126bce7bfa9afee7aff42bb14fbcb9e51190ca7fd1edcdcc56d25784cff1cb251b6100248a1fe5e3d61e7df77399aa6d64fc5557da61a11e99d6525c61d03857f967f7aff81af11036610d811066208950a2be49ee30a2c14ff33d6f42aa0e89189c0086b91fb1c2f571029f57901579a4acb371dd0f263c761a6f208a643774fd9a8fa8080fd4d8058527a6b86742527b2c656937fb97e55debbafc1da4649df7472295e89de7c51324be4149f659c7d148ee1d063aaf7d02653aec9d34be17667c6c8d590bcf9ab0dc01c9ea80ad46822d73245f02d6673b20f102e7aeb5d241917545b0cdda940c5f0149f3b994c9830b3e0e9632d85b89b816a7e09abde0f001185e3d63a271d8a2b201fd3beb487f7599893a98388ec32b85ac3b1ee9eccdfd5ee7d318ae11686ed418d34aaef9c02e6e2ca8b0384d03b2f17d4168bb5762159ae47bb84854568e0881ca4ccfb7cd4dc5dcd4224185df690d6078f9975cb1d5c249ec71f3fa1b7ea06c4d412cf662bc0acee9a798d67367acf05ff2f9440e92aebe8370e4ba4c6e560d561a7531d05bd761a53d93ace41c225eb7ffa6076028727d4cdd5e54fa6c9a4bc12ca7f51418a9d79f531a1ece25c2d60826ef0e026c7662e3b86a459c2bda5be2d7d5991ef9f5983d652aa654abb4c40b6ca0b78991edbf1c9461016e3c2b917f45d1b30b9958b92a895bf116f54e95542a5ec249179f124210f5d08ac1c2943c87baf3b63a82c437737fe028ee4f0e0bb202b662e2e6f45978c2b8ec1e1e73f6cb9eb104026cb19b2af09882235bef526584a173068bf812bd3a98492743c9b6c02b811a5904ef8dbb74790a613a117a8f0de1239bc9bf76d20af0790b1a5c1c32dea9ed7b559437ba3d4acd7302705d1867485863e195eece8b6ff5f05f1f890a5f5e4063e9881f258f7e909fcab8de8f726e99c70acf7b974ec90df19e32c5d889f7a91f7261adef9fad4838dbddf5d0b5c092159e63f651160f90d1c419671da093bab5de537209f4e15f0c4c64bf1a4bd233aea1fda7123e2f2b7c516d2b4ebf1be4effb25bbb47abfed29384935e3e2c9fb2e2f4056114e6e15d536978badf22f0a3834a64cf18ef735c5ae60c9fb9e207023c7dbcf060d2fbc2ab7398eb9f885e4d60745f62fe0fed8dd200622ac9de04279471c7e76befcf7846c4fa9e62f08adb115212beb18c4505fcf246474a11b8332b84152302d4c1bbc63384d66d88d57bd250458af60cd1cffb7567b061faba64b6229ace6cca6b8a18bd5ba0c112776c6908945261b8f22e66da0884461c173db4864416879e50d99209505ad473fbc5ea4def2bd1d2d321b52172c5d343acc6c695fd2a1e9ba2ce8a5291e22c6187c9de3880a8f2889773cc1240b6062ae26697462c457c4404fb619a37f354b1b2d0b0f473b3bbe224c4edb086cd2551f44566d47021909752b8775f975dcd8f6e1a405cf9371301d94d7ab3fbe7bbbf59b809b175eb7362a22102090379e94bd1a65bc0541f9ad62da71efc3a52e718216d29524da58314f3a046f9f4bf35fa87a9b3371a6d967d5f24619c17a07a8781f4dc4573220bba38513f40bab1e68575505f6efb5d211553b6acb6fea501c3a6f3db27e7c1a674deb3a72ae211ab824ad12fdfe539d7e4fc91491dd3b3fae852d02bfa24780bf65b766b02461b3c67b1b78cbd620b5e1834647ab9b24128f6bdb861e1ab1fcae97394c786f4a0a0621b62200a01910ebb62d2e580341866b1e7b5e32d25695fe1d7ad65c4b2e6bbfa3120ff1948753d655e0196ef732f1a4e4e338db8bdf8a04cc14eb81a0e0f6c9fe3fb6b71b36a1c751ae07656bc92a9c6a0b8007fb20aa81c0ee58f0135d5e0e76ab7ad40d21539896366f75e0aa8370c86bbc6363177f29d8df2bde1a116449557211f750d855171e78724da4832ebd5ad6a9db8983f4487caa28dea46e6c36b2b154f31148c017f1683374bd064a3fd87b1de0c6f6c301cd80f2a45928e3d501117783a8ad5d19402b0c41945abefbfa9df42f7b74129a76d336633bc46a475b374223eb8e5f440fc5868a149902cf49aed4ba1e074d02fd40aa80f901fc9fe628008a76ca11caca96f0a2f3756ab5ad6d194bad87e6b6a458b904130f53aee1e50be878f972252004e877e490902d337e5b7432fc0138e3ee00af73a57a3160438717cd49fcb836e76603adfd1530966aa81589bc205bf33a5330848d90421907ef08118a4833f8fcaf7cfc73bf0d34e01fdc9965e594e74c5012f415f59e9ed37b039f9fd6a27627ba334bed66848eabdf59fa6ae1cb42a5ed6cc2805b249ffedc786ffbb312dc5456689c202a62d2334c6b52c87eeb3a0189c4ab5c9b08593e372321bfa326db3f6fb54a879966ecd4a69b5e00deac54449aac8c88ba667595d066d555dbe78cbdecf7dd436ce367a8fb9a560b4902ca23b9923632015a254ea4c470f018a33d670b196a4a1e370f24da7e0791325fb605099fc40e2d8e63bf6a179f4a063580b8ea973f52bed8dce4a5ae2ff9b8d7dc87b40cd898560c49ab4a3295e8dd857f2b9a9bd38634e50ce762a2c8c9f793f1835fd54db70437e7b86b492f9aa8d689229357720af9afbe773ac15fa78966aecf59fbab6833622044d2b463ed3b3a7401bb4845e5bada82d7ae06e229a3a2b661a85b1441b665c44463fb909b3233794a0b5836ed1dc6301f06d899197c7400354569c5fb2ea10d4c08598da5601522a976696e2ecd637315a19b3ba0e97c05071d8ac7aed1eed8fecbf774b317fc24c6923e2fba45153d1e715aeaca9d5891b59b91664a791f94bb9b0de217233a6bfe9777998171dad5422f6bbb33f1e624300c64414e1f1f4887a8832c64ab728ac2469df9820a282b58efe68cb1e57d08b61b255ba99a190f1f07903c8e3ec89d6211c8a5db67a0ba1e656839e3eadac62aab949cd0251b0e0d71d96dda94c229e126534bb76db1a4010418d115504c2e4226a767c5b8da95ca5fb3bad2ccaa6a96463d8b3b9566e17bb905b064261e2974b02eedbf161a1e0aee7c4fdfe1da891d64565929724dd06d5aedb8b0f7266ecd7a8fe6c73037ce1f281762e14d7571b0b242dd850863812d29a2be7239486273bc6a7f64cd6b37ee19413a11435fa4c03a69772d335f9ab857c662557f5aa2123354bf8bdfe5131997e1569edc7aade81e38b191ac4c53e027edd561025d3cf4c343d33489cb180c66502b5f59cd2593e656ecdbb40cf4ef2206830b10ffb7256fd326b4e97fbefcbec53c6798723af5aef968c78c02c20bb95d9c869109eb56f448fba7358cee5fe2d55852862842d14415debb083540e98c786a9f394ac83280ea617945d0710f18a363d74bd00518d965fa259e94be3b788eac72aaa9311ea21ed5e147df112bae4eed8eeaa649c41084b422a5230281adb7464772d25ee9f2b20d5e605a063bb78a87608680480224ec99df76eeae08e087bfec48fb44caab5daa10e728a853e18c8ffaadad491dbb0150393f5043e6f5fb6addb3f9c14c1c4fab2e93f8a4feb3e8619489f8a4ad6b6a42dd510f0519f130fad212ddb0f251e333e032b9995b39b49336762507b35e3172a098fde0baa7a1f114dc5fd4431dad05bdc98c0ac0e797ba9b0835c649639f8e6cc9279e3057a98fdac02a28d5861443e2e720bd5e189b74bfc0fc0883cd8ec96d810bcf1dca9e094a39aa584e368663fedb50bde86db9dd1511c40d0ed07a6d6ca2712861f6a55549545386203e340f943eaeb4c6ccb51deb3b470b43e748fa3d8101fd7793e831d869b0d0f558ad54da3eb430735a1a91da099cb4843c3e6a7b0f055b0a5388a0d8adb5c36ea98bb152ba0cb90ebb9b5a8c97b2918b0837984076c9a4615991f1b618d622f94ca9c166545e5b316344db4bb73d1625a375781e7b6365feeb6b9859bbf8c51f3d523172141f2e2d3154124848838e62342f683b44b4e7c2fef827cd7fd999c41edd95400cd0ecf9fbe1b33474801f0fad95db381c6445628649ec39f6ab48f99e232a6d51dd403611ad476c546d13460e38a5ef2f3a00e44ceefc771dfdf0cbc6a0c253389a17356ef5fd63175e3e3ea52361180acf40e0eff1c4ee15c9e97ce2f62e56eb606ee726320cedbb8e48341aa6fc9b9600b96d24683caef4269d008be2f02fc97060e04dec3ab800ab82140a36685d107f9dbdecc4bacb24d1cf346f9eb7b04c811474aeb75feba8b2ce9cd4a3b050e77947329d680e0435c8d034aadd19df1f88f552af461fdb5c629a337d00cc668a56df09e8a98c4d1e162709d8b1d3d878819e1c8973cc1fda03faea0bd732a861c3280fb5f1415a448d4e3abfdf3f5064ec08c84f8ef3d47ac8f654c56e17d5914fb6e1f566bf672e35cd3c5e58c36e31c162f84ae7de76329b59b364e0017c7d56f732660c80594a045f64294118d8a9c8963a99df25739d25b04ffc39415a501854bfd7600adac2eba25cecaae12ba5158f2777a98ccd24db124d1c7163f87d8a91c60000000000000000495d89e4bc545ed2089928fdaafcaa6b8e544f713a988e2b7e5636736259fab99a6e3443adcd670a76cadacc8f31e0a0afdc0a592175e20b190300b33e2fd30cd1e338eefe9b4014e7bb53494b410bb77da41b9be11c00893be01f888c2d57f3e1d2db0a1abbca39247a8396ead29a6447422ce3", 0x2000, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x3, 0x40000000000000, 0x3, 0x4, 0x0, 0x7572, {0x0, 0x0, 0x19b, 0x9, 0x0, 0x3, 0x1, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x10000000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0xfeffffff, 0x0)
syz_fuse_handle_req(r2, &(0x7f000000e0c0)="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", 0x2000, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x90, 0x0, 0x0, {0x3, 0x0, 0x200001, 0x0, 0x0, 0x10001, {0x0, 0x3, 0x22, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4000, 0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r6=>0x0, &(0x7f00000002c0)=<r7=>0x0, &(0x7f0000000180)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000040)='./file1\x00', 0x18, 0x0, 0x12345})
io_uring_enter(r5, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x50, &(0x7f00000001c0)={0x0, 0x0}, 0x10)
syz_emit_ethernet(0xdf, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @empty, @void, {@llc_tr={0x11, {@snap={0x55, 0x1, '\a', "3166fc", 0x6007, "5c0195714606ab9c200c13777d6c1b1c6b330f8ed660773a76e2a1f5faabae4c33463ab6b493709371b9c43a21a7dfeae6f353fed52872bf11911f45fe100943632aeab70179fe34b0da4d07540c0d7c826765092a9b4593915623e3456d7cbf23c7bd8a3a4de8c883d27864d3915900498fa93e1e7a8dd3cab0442da305c2ace79275f48e230722391283c3017ebfc96e1d60ceee01ee939b32d03605bed3f500066f054e084ea5dc800b9518e15daf9b56ebbbe98b1ac3d739da7ed57de56b6c85a775bdf1b02604"}}}}}, 0x0)
socket$inet6(0xa, 0x1, 0x84)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec00000001090212"], 0x0)
socket(0x5, 0x4, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40)

2m12.827030702s ago: executing program 0 (id=3247):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20)

2m12.545731953s ago: executing program 0 (id=3249):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40012002)
r2 = socket$netlink(0x10, 0x3, 0x16)
writev(r2, &(0x7f00000000c0), 0x1)
socket$inet(0x2, 0x80000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80080, 0x8e)

2m12.245187441s ago: executing program 32 (id=3249):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20000801}, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x40012002)
r2 = socket$netlink(0x10, 0x3, 0x16)
writev(r2, &(0x7f00000000c0), 0x1)
socket$inet(0x2, 0x80000, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x80080, 0x8e)

1m13.327990391s ago: executing program 1 (id=3599):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r0=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f0000000600)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)

1m13.254452911s ago: executing program 1 (id=3601):
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u16=0x0}})
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0e000100000100000000000000000000ae0cf0f94b06000000000000004c723ee3e6c45241f11737b06f447e35dd23c1c7ba8a4c43efddab785203fa4534b32a4426196857c07146b7dfe16d9ccb8b6771fb655c8c0b55e25a4ce57366740af1b321c42a5d1da2dcbcd11637dd2b020493b86e876de077179c7842a40d59a3289aae23770d000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="04022abd7000fedbdf251a0000000700210062620000060021006100000006002100610000000600210061000000540022802c000080080007000001000008000300ff01000008000600fa840000080007007000000008000200ff0100002400008008000400090000000800010005000000080002000100000008000100090000000700210062560000070021006161000005009200fe000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})
recvfrom(0xffffffffffffffff, &(0x7f0000001680)=""/4092, 0xffc, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x20005814)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "85bd7a991f8cec55", "39fd98ec2a307aba168aa14121a091f2", '\x00', "67a9595b52354cc8"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
sendfile(r6, r7, 0x0, 0xffffffff004)
setsockopt$inet6_mreq(r6, 0x29, 0x15, 0x0, 0x0)

1m10.955317216s ago: executing program 1 (id=3615):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCCONS(r3, 0x541d)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="df0008401d3e973281df7356584de5a10de8eadee2b0975d639238fdaded1afff5c30901c9b113c723", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="08000500"], 0x24}}, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001300)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210000000122940309058103"], 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r6=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003e40)=ANY=[], 0x4464}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
close(r4)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r4, 0x6628)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0)
nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0))

1m9.459193439s ago: executing program 1 (id=3626):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000700202142"], 0x50)
r0 = socket(0x2c, 0x3, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r3 = syz_io_uring_setup(0x3af2, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00')
pread64(r7, &(0x7f0000002380)=""/253, 0xfd, 0x9d)
r8 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
read$FUSE(r8, &(0x7f0000002c00)={0x2020}, 0x2020)
r9 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_DQEVENT(r9, 0xc0506107, &(0x7f0000002440)={0x0, 0x0, 0x0, @raw})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r4, 0x0, 0x4000)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000ac0)={0xffffffffffffffff, 0x0, &(0x7f0000000a80)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a010200000000000000000200000700010073797a300000000014000000020a010200000000000000000000000a14000000020a010100000000000000000200000a1400000013973ed5dc46c2dba7aa76e11c11000100"], 0x70}, 0x1, 0x0, 0x0, 0x4000018}, 0x40)
socket$nl_xfrm(0x10, 0x3, 0x6)

1m3.985541146s ago: executing program 5 (id=3656):
socket$tipc(0x1e, 0x5, 0x0)
r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0x8, 0x100)
getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0xd, 0x6a, 0x2f, 0x10, 0x1c9e, 0x9b02, 0x2942, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x7f, 0x40, 0x9, "", [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0xe2, 0x73, 0x2e, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x80, 0x6}}, {{0x9, 0x5, 0xe0339fed889b2a9a, 0x17, 0x20, 0x4, 0x2}}]}}]}}]}}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) (fail_nth: 30)
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x22, 0x0, 0x1)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000005880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000005840)={r3, 0xb4, &(0x7f0000001100)}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000280), 0x0}, 0x20)
syz_emit_ethernet(0x7a, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @local, {[@rr={0x7, 0x3, 0x9e}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@local}, {@rand_addr, 0x40000}, {@dev}, {@remote}]}]}}}}}}}, 0x0)
syz_emit_ethernet(0x3af, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x379, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, [{0x0, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1c, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aab8d16ae8398749235a670670"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "fc07876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x2, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
sendmsg$nl_route(r4, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x722})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r6, 0x0, 0x24000000)
read$FUSE(r5, &(0x7f0000000440)={0x2020}, 0x2020)

1m3.629299307s ago: executing program 4 (id=3659):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001)
ioctl$KVM_RUN(r3, 0xae80, 0x8001000000)
syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xffffffffffffffff)

1m3.249924254s ago: executing program 2 (id=3660):
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u16=0x0}})
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0e000100000100000000000000000000ae0cf0f94b06000000000000004c723ee3e6c45241f11737b06f447e35dd23c1c7ba8a4c43efddab785203fa4534b32a4426196857c07146b7dfe16d9ccb8b6771fb655c8c0b55e25a4ce57366740af1b321c42a5d1da2dcbcd11637dd2b020493b86e876de077179c7842a40d59a3289aae23770d000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="04022abd7000fedbdf251a0000000700210062620000060021006100000006002100610000000600210061000000540022802c000080080007000001000008000300ff01000008000600fa840000080007007000000008000200ff0100002400008008000400090000000800010005000000080002000100000008000100090000000700210062560000070021006161000005009200fe000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})
recvfrom(0xffffffffffffffff, &(0x7f0000001680)=""/4092, 0xffc, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x20005814)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "85bd7a991f8cec55", "39fd98ec2a307aba168aa14121a091f2", '\x00', "67a9595b52354cc8"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff004)
setsockopt$inet6_mreq(r7, 0x29, 0x15, 0x0, 0x0)

1m3.114629018s ago: executing program 3 (id=3661):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x61d, 0x80000)
ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000780)={0x0, 0x0, '\x00', @bt={0xd051, 0x6, 0xf8e4, 0x8, 0x5, 0x80000000, 0x4, 0x6}})
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
ioctl$USBDEVFS_RESETEP(r1, 0x80045503, &(0x7f0000000080)={0x1, 0x1})
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r2, 0x8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x78}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0)
r4 = accept4(r2, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="12014101d6b68d10ac054602b12701020301090212000103fa103f0904140400034602"], 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005d80)={0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="a80000002300100025bd7000ffdbdf25e865f2d6a8d377a6a65f0ec5065f77ae37e380d63ded777a891906f0b1d44c98dd2a89d0f71782c1d3a8a59ea46d3d6461d4adb8e4b7d15b046e6820b6888872d6b4534bba9e9cbd91dabdcb0a2979ff503b93e78b4d5a55d2c4831b59a477c9f02cc478e33e004f806eb13391d2d2c5998e4db2b70ba3f152318584cc44b6542bfd604def"], 0xa8}], 0x1, 0x0, 0x0, 0x2000080}, 0x40800)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x80000, 0x2000000000001]}})
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x5000006)
ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0xfffffffc, 0x180, 0x0, 0x0, {}, {0x2}, {0x0, 0x9}, {}, 0x2, 0x40, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x4, 0x80, 0x0, 0xfffffffd, 0x26, 0x0, 0x1})
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r8)
waitid(0x1, r8, 0x0, 0x61000006, &(0x7f0000000340))
syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58c", 0x24, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0xfffd, 0x0, 0x0, {[@fastopen={0x22, 0xd, "4b3328108ed397e1447ee2"}, @generic={0x4, 0x3, "d7"}]}}}}}}}}, 0x0)
ptrace$getregset(0x4205, r8, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
sched_setscheduler(r8, 0x3, &(0x7f0000000700)=0xd8a2)

1m3.114194087s ago: executing program 4 (id=3662):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40044}}], 0x1, 0x4)
socket$qrtr(0x2a, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r7=>0xffffffffffffffff})
sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800)
r8 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r9 = syz_open_dev$vim2m(&(0x7f0000000080), 0x402, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000200)={0x12, 0x1, 0x2, "ee0600a8d2cf4011ac0800e56000000010000000ebffffffffffffff00000008", 0x38415262})
close(r8)
execveat$binfmt(0xffffffffffffffff, r0, 0x0, 0x0, 0x600)
socket$netlink(0x10, 0x3, 0xe)

1m2.72787333s ago: executing program 4 (id=3663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040091}, 0x0)

1m2.71769459s ago: executing program 5 (id=3664):
pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7", 0x60}], 0x1, 0x8, 0x20000006)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000400"], 0x20}}, 0xcc04) (fail_nth: 5)

1m2.42597938s ago: executing program 4 (id=3665):
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\x00('], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) (async)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000cc0)=ANY=[@ANYBLOB="200a83"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='@\x00('], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

1m2.401266511s ago: executing program 5 (id=3666):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10a, 0x3})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
close(0x3)
dup3(r5, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000180)={0x20, 0x0, &(0x7f00000001c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
lseek(r3, 0x851, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_DELOBJ={0x9c, 0x14, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x62, 0x8, "863dd97f10c1559d9a2fd11321b5005a3e309fbd4bbb2b4feca9dc6812eda5d9e81a3d3c00ad07de1f37118e40a80dc87762fced454971ab4a4a806be4837216f563e0108f5f6b231bb2e149e079c4a766ee414ff7d1a322eb505d95142d"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800)

1m2.201917564s ago: executing program 5 (id=3667):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100009e173610ef171e7206de01020301090212000100000000090400"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x0, 0x5, 0x9, "280834df7afe143621"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0xfc51}, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x1, 0x62, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000900)=@abs={0x1, 0x0, 0x4e21}, 0x4f)
connect$unix(r1, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x4f)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3)
io_setup(0x239f, &(0x7f0000000380)=<r4=>0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r5)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r6)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40805}, 0x40)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
io_submit(r4, 0x477f, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}])
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x40, 0x4, {<r9=>0xffffffffffffffff}, {0xee01}, 0x4, 0x4})
r10 = syz_open_procfs(r9, &(0x7f0000000240)='auxv\x00')
read$FUSE(r10, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'})
r11 = syz_open_dev$video4linux(&(0x7f0000000480), 0xd, 0x123002)
ioctl$VIDIOC_SUBDEV_S_FMT(r11, 0xc0585605, &(0x7f00000002c0)={0x0, 0x0, {0x403, 0x4, 0x3001, 0x6, 0x5, 0x7, 0x0, 0x5}})

1m2.167978268s ago: executing program 2 (id=3668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x29, 0x9, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0xd8, 0x0, 0xfffffffffffffff9, [{{0x5, 0x2, 0x3, 0x2, 0x5, 0x8, {0x6, 0x9, 0x0, 0xff, 0x3, 0x0, 0x7fffffff, 0x57, 0x3, 0x8000, 0x3ff, 0x0, r5, 0x4, 0x4}}, {0x20000000000000, 0x537, 0x2b, 0x9, ':-(\\\xc9\x80\x00\x00\x00\xc3\x00\x00\xf39}\xd8mM\x92\x8d$\xd3\xa4a\xb6\x02E\x89\x85V\xc6\x00\x00\x00\x00\x00\x00+\x13;\x00\x00\x00'}}]}, 0x0, 0x0, 0x0})
getdents64(r6, &(0x7f0000000100)=""/134, 0x86)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)={0x0, 0x0, @pic={0x2e, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x6, 0x3, 0x0, 0x67, 0x58, 0xa0, 0x2, 0x6, 0x81}})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

1m1.726343135s ago: executing program 4 (id=3669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "be98"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x401}, {0x8}, {0x8, 0x0, 0xcb}, {0x8}, {0x8, 0x0, 0x6}, {0x8, 0x0, 0xe3}, {0x8, 0x0, 0x3}, {0x8, 0x0, 0x2}, {0x8, 0x0, 0x3db8}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x24044084)

1m1.653845391s ago: executing program 4 (id=3670):
r0 = syz_usbip_server_init(0x1)
r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="40060b0000000b06b45169"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0)=0x3, 0x12)
readv(r2, &(0x7f0000000a80)=[{&(0x7f0000000480)=""/204, 0xcc}], 0x1)
r3 = landlock_create_ruleset(0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0x8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002000000206b1d01014000010203010902780003010000060904000000010100000a24010200000201020a24080304004000000009040100000102000009040101010102000009050109100001fc0b0725018107010809040200000102"], 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, 0x0)
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000180)=[r3, 0xffffffffffffffff, r3, r2, r0, r0], 0x6)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xc62f, @private0, 0x2ccd950f}]}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, &(0x7f0000000640))
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000)
syz_usb_control_io$uac2(r1, &(0x7f0000000780)={0x14, &(0x7f0000000580)={0x20, 0x31, 0xc8, {0xc8, 0x22, "f86e6925859f4ac4795efd52f72d4c9f4565fd0a8cf6186cc6f29c3d5a097af28ea6d502bbb02c317d5935ac4aaf9e6863429ee8212b756eab007891a1ffa401eb91242c06135d49c62038960dbb1f761c658628b8122427679c2270075cc1d93d23b0474ce55022c5d633ffdb2623d7f9b1bffb9c1bf3de784c90c7ada5a5f2ed792e93e591ae3022c13e873ee0bc23c6c0e532cc2f35e718654211371a5e831ea1c10d5e26900f94a54c556d96664f311b5a8774b3115d6e84dcb707e08adeb6001d9ee508"}}, &(0x7f0000000680)={0x0, 0x3, 0xec, @string={0xec, 0x3, "745bc433b0cc006d9945edba3f6a1df8f0fb6eb6fe74aa684d77f33382e0975c0a0e8b9db426799201053601b8bf89a879018c87b20138e676f71deba069378f62758e1f15b5f72bb14e53827748597134e4b64c2bcc77565ed136e65fa5bed749b9ee6bfe90b1564221c8142958c61d79c5e6e0c9608a408247f558a799af3f91b324b3296f20a2e3fa497507491bdb68098db8ba574d84f2313a1e90d698b8a05c5db934eee0e3740399c0d2075d1d9e216d48bb7602e1f5a8f3b05d7cd04c69ca7ac1ddd4305178c38486483d0476f726a4366555ba46bdaf4fe939e4072de4d069cf42b476adbfda"}}}, &(0x7f0000000ac0)={0x44, &(0x7f00000007c0)={0x40, 0x13, 0xc7, "db9836dc7ab056a82e4e5a44f3ea858d9c92b450d7a3764ea44342c2d3d0d9e7eecab665a0c0debdbd2dfe486650ad495c0a71f34384d78c4226bf4ec3273f14f065307525eb870d7478962bbe09d8ce84b2ab89001f7eb2544cf70c270ec146eb9306338867338cc24cce0f4a52a905df86241f5df4379b738781e63165c8c2731a937d4b1a30aba2908fc5fad0f18886f72d883d23c44d7f5125e405ab97d8452883440eee65476ed296562dfd1f545710e94aa6e58373d513a9d74f48dbc3e39f242fcb3e2b"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000900)={0x0, 0x8, 0x1}, &(0x7f0000000940)={0x20, 0x81, 0x2, "f462"}, &(0x7f0000000b40)=ANY=[@ANYBLOB="020033faad6f29baf2fde66fdbf40037e163b42182246280fa64b5d5e223ffe59991be19bbfaec4cb92620cff5485ccc84f16f57ba310103d72923e1afbc269ef543999b641842d2947064c57b58210a740af66d69badec6fcacab27b0112abdf30e2fe03080c073f2842c7cbeba840dbffd1152567a58a13e8b93a581131e9a58de5ac3795194350aa3d925a41d1678fc09d7ff7d141828a65a53b0f5df44f9bba3c28a937b06bb5648d77b5288e381fa"], &(0x7f00000009c0)={0x20, 0x83, 0x3, "21ce4c"}, &(0x7f0000000a00)={0x20, 0x84, 0x4, "b3461a53"}, &(0x7f0000000a40)={0x20, 0x85, 0x3, "d0d476"}})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010800000000000000000100fffc08df010073797a300000000040"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
prlimit64(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x4, 0x9}, &(0x7f00000001c0))
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r7, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, 0x0, &(0x7f0000000100))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=r8], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

1m1.330178793s ago: executing program 3 (id=3671):
r0 = socket$inet(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xf)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r3, 0x28, 0x2, 0x0, &(0x7f0000000000))
eventfd2(0xe5c, 0x80000)
eventfd2(0x42000006, 0x801)
socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0xc)
sendmmsg(r4, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r4], 0x108}}], 0x2, 0xc040)
r5 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000180)={0x2e, 0x0, 0x0, r5, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x9f, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000280))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ipvlan1\x00', 0x4000})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x4000}]})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4800)
syz_usb_connect$uac2(0x5, 0x83, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0xf8, 0x10, 0x5, {0x8, 0xb, 0x2, 0x0, 0x1, 0x5, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfffd, 0xa, 0x11, 0x47}, [@source_unit={0x8, 0x24, 0xa, 0x0, 0x0, 0xb, 0x7f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0x4, 0xd8, {0x8, 0x25, 0x1, 0x2, 0x30, 0xcc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xd, 0x7, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0x4, 0x10}}}}}}}}]}}, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010000000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0020000000000000140012800b000100677265746170"], 0x40}}, 0x0)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000000)={'ip_vti0\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c)

1m1.063852403s ago: executing program 2 (id=3672):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000046c000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000000c0)="470f01c8c421d9e1e30f01c2c7442400c2000000c74424026e0000008ff264450f01c9460f7979000f17565db9800000c00f3235002000000f303647d03e", 0x3e}], 0x1, 0x3c, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x7e})
ioctl$KVM_RUN(r2, 0xae80, 0xbe912100)

1m0.922506411s ago: executing program 2 (id=3673):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101800, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$apparmor_exec(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x564)
ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040))
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10)
write$tun(r7, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @empty}}}}, 0x3e)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000100)=0x1)
write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd)
socket$nl_route(0x10, 0x3, 0x0)

1m0.608797263s ago: executing program 2 (id=3674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000000)=@ethtool_stats={0x18}})

1m0.571235276s ago: executing program 2 (id=3675):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000400)={0x40, 0xd, 0x1, "1d"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f0000000000)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000006c0)={0x0, 0x11}, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f00000003c0)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x850}, 0x0)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x180, 0x100, 0x10, 0xf1, 0xf, 0x10, 0x5, 0x0, 0x29, 0x0, 0xa, 0x0, 0xbd9], 0x4000, 0x43180})
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x8, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x10000, 0x8, 0x0, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x42, 0x5, 0x6, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0xd000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x0, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xf}, {0xf000, 0x1000, 0xf, 0x3, 0x16, 0x7, 0x9, 0x8, 0x7, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x0, 0xe, 0xa0, 0xb1, 0x8, 0x3, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x54000, 0x10000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0xff, 0x9, 0x2, 0xc, 0xb0, 0x83}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x20008]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB=' \b\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m0.486598257s ago: executing program 3 (id=3676):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3cfd00001000850600"/18, @ANYRES32, @ANYBLOB="01000000000000001c0012000c"], 0x3c}}, 0x0)

1m0.477180896s ago: executing program 3 (id=3677):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0xe0001)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xa, 0x0, 0x1, {0xe7ff, 0x1, 0x406, 0x870}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x4, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x6})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})

1m0.258807134s ago: executing program 1 (id=3678):
inotify_init()
syz_open_dev$dvb_frontend(0x0, 0x9, 0x800)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/62, 0x33e000, 0x1000}, 0x20)
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0), 0x28141, 0x0)
ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(r0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r6, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r7 = getpid()
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
process_vm_readv(r7, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001980)=""/4089, 0xff9}], 0x2, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0x5f}], 0x1, 0x0)

59.993281408s ago: executing program 1 (id=3679):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x300, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

59.585613465s ago: executing program 3 (id=3680):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x5)
r2 = eventfd2(0x0, 0x0)
io_setup(0x4, &(0x7f0000000080)=<r3=>0x0)
io_pgetevents(r3, 0x1, 0x0, &(0x7f0000000100), 0x0, 0x0)
io_submit(r3, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
io_getevents(r3, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0)
shutdown(r1, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x20004000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r2, @ANYRESOCT=r4, @ANYRESOCT=r0, @ANYRES16=r3, @ANYBLOB="4fc5e43f1f320ff51896dfbf9985a109ce64595a748e28a35137cf6576db094af23092ad4e07eaf1c330eb251ecfdbfa25c49db9d2f0d241bb261cf0efc2afbe7a37c37af2124917e6b5861a5e1e5dba34d48fef08a9d4d40fd7c551ce67e91d980d11d80e2a3c18921e73cf623d86d1efce39dc74a4a706beed7711e8125ce4f15157de72b8c90fd38a", @ANYRES32=r4, @ANYRES8, @ANYRESOCT=r2], 0x7c}}, 0x0)
sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000cc0)={0x294, 0x17, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x1dc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'hsr0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'caif0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, 0x294}, 0x1, 0x0, 0x0, 0x811}, 0x8085)

59.342589086s ago: executing program 3 (id=3681):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
connect$inet(r3, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)}], 0x1}, 0x4004045)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
sendfile(r3, r4, 0x0, 0x7ffff006)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000300), &(0x7f0000000380)=0x80)
r5 = shmget$private(0x0, 0x800000, 0x1, &(0x7f0000173000/0x800000)=nil)
shmat(r5, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
shmctl$SHM_STAT(r5, 0xd, &(0x7f00000000c0)=""/188)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fe6000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/174, 0xae, 0x0, 0x0}, &(0x7f0000000100)=0x40)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r4, 0x80047210, &(0x7f0000000180))
ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xa4}}, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0xfffffffc)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

58.911603865s ago: executing program 5 (id=3682):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2400c854)
syz_usb_connect(0x5, 0x7b, &(0x7f0000000000)=ANY=[@ANYBLOB="120110019ae8c94079092702506f0102030109026900010607500e0904"], 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
ioctl$USBDEVFS_ALLOC_STREAMS(r1, 0x8008551c, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)={0x38, 0x1406, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x38}, 0x1, 0x0, 0x0, 0x80c0}, 0x40080)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[<r3=>0x0], 0x1})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r5, &(0x7f00000001c0)={0x0, 0xa6, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r6, 0x309, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x4000080)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044840}, 0x2000004c)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x2, 0xd, 0x4, 0xffffffffffffffc0, 0x3, 0x803, 0x90b8, 0x2, 0x26], 0x0, 0x2})
r7 = syz_usb_connect$cdc_ecm(0x3, 0x97, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902850001010000000904000012020600000b24060000b819b958fd1d05240000000d240f0104000000000000000007240a02a0050108241c000002feff0c241b010001000e060800081524127706a317a88b045e4f01a607c0ffcb7e392a0424020007240a02087f06090581030004020007090582020002000000090503"], 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0x304, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0xc8, 0x2, 0x3, 0x1, 0x11d56ba7ebb1f74f, 0x80, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xe8c}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x9, 0x6}}}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7f, 0x9, 0x9f, 0x10, 0x4}, 0x102, &(0x7f0000000080)={0x5, 0xf, 0x102, 0x5, [@generic={0x68, 0x10, 0x4, "74d2f4fa9f905689cdb93c5c6f604e95c5ad866ddad05c6a8b7c64f72efc3bbdcc44e119598c8bd106982239ff949ac1c9ff0f0f6d0c97e17bb664827e51f5a819d56a81ee79e085d13bb1f1033f6d19487592fb2b054b75f66f8f82ed7eebbe98a35d1544"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "18e03eb453384684e882fdf641aa75b8"}, @ssp_cap={0x14, 0x10, 0xa, 0x2, 0x2, 0x10001, 0xf00, 0x9, [0x0, 0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x7, 0x9}, @generic={0x66, 0x10, 0x5, "d8db06cf555395645f5de549367b2bdadc7dbd6117fa34c5175ce542ca6a252a455b61af5ae9a13ca5ef32f7aca18a77c1657b2ef61e8545a7c2772fd5f2d4d5595e23eab90f3583bfc67c2db5d7d55b3fc0590eecd0a96f819a84c5ec2c6f1b809c31"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x82c}}, {0xfc, &(0x7f0000000200)=@string={0xfc, 0x3, "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"}}, {0x6, &(0x7f0000000300)=@string={0x6, 0x3, "cd28ecf3"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x407}}]})
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$sock_int(r8, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0xfc8a)
syz_usb_ep_read(r7, 0x3, 0x0, 0x0)

19.455870603s ago: executing program 5 (id=3683):
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382)
socket$can_raw(0x1d, 0x3, 0x1)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x98f909, 0x8002, '\x00', @p_u16=0x0}})
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\x00'/557, 0x1)
pwritev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0e000100000100000000000000000000ae0cf0f94b06000000000000004c723ee3e6c45241f11737b06f447e35dd23c1c7ba8a4c43efddab785203fa4534b32a4426196857c07146b7dfe16d9ccb8b6771fb655c8c0b55e25a4ce57366740af1b321c42a5d1da2dcbcd11637dd2b020493b86e876de077179c7842a40d59a3289aae23770d000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=0x0, @ANYBLOB="04022abd7000fedbdf251a0000000700210062620000060021006100000006002100610000000600210061000000540022802c000080080007000001000008000300ff01000008000600fa840000080007007000000008000200ff0100002400008008000400090000000800010005000000080002000100000008000100090000000700210062560000070021006161000005009200fe000000"], 0xa0}, 0x1, 0x0, 0x0, 0x20004800}, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3)
sendfile(r1, r1, 0x0, 0x24002de8)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x4000005, 0x0, 0xffffffff, 0x18, "28f5c9ea1f0197000011ab18d2da69bde58cd7af40fd150b70aac11c2e16bd5bba76634793ddd7aae07ef35f17bf01933bdb6fd7ecdd91b59ca8d54100", "07a9400978042a8bfe1406584ae7df4af14e1df82d00", [0x7d, 0xd]})
recvfrom(0xffffffffffffffff, &(0x7f0000001680)=""/4092, 0xffc, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x20005814)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "85bd7a991f8cec55", "39fd98ec2a307aba168aa14121a091f2", '\x00', "67a9595b52354cc8"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a)
sendfile(r7, r8, 0x0, 0xffffffff004)
setsockopt$inet6_mreq(r7, 0x29, 0x15, 0x0, 0x0)

0s ago: executing program 33 (id=3679):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
fcntl$getownex(r0, 0x10, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x300, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

kernel console output (not intermixed with test programs):

w USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.577701][T16346] syz.3.3308 (16346): drop_caches: 2
[  519.587737][ T7946] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  519.601846][ T7463] usb 5-1: config 0 descriptor??
[  519.759253][ T7946] usb 6-1: Using ep0 maxpacket: 32
[  519.773021][ T7946] usb 6-1: config 128 has no interfaces?
[  519.788983][ T7946] usb 6-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  519.805321][ T7946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.818617][ T7946] usb 6-1: Product: syz
[  519.836540][ T7946] usb 6-1: Manufacturer: syz
[  519.850862][ T7946] usb 6-1: SerialNumber: syz
[  520.296289][ T7463] usbhid 5-1:0.0: can't add hid device: -71
[  520.336334][ T7463] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  520.363716][ T7463] usb 5-1: USB disconnect, device number 61
[  520.810671][T16367] __nla_validate_parse: 31 callbacks suppressed
[  520.810692][T16367] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3314'.
[  520.921632][T16367] syz.1.3314 (16367): drop_caches: 1
[  520.980536][T16367] syz.1.3314 (16367): drop_caches: 1
[  521.010935][T16370] syz.1.3314 (16370): drop_caches: 1
[  521.214702][   T29] audit: type=1326 audit(1781828629.152:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16382 comm="syz.2.3320" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae439ce59 code=0x0
[  521.914762][ T5673] usb 6-1: USB disconnect, device number 2
[  522.200874][T16396] fuse: Bad value for 'fd'
[  523.169305][ T5673] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  523.339507][ T5673] usb 3-1: Using ep0 maxpacket: 32
[  523.353944][ T5673] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  523.378868][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.406859][ T5673] usb 3-1: Product: syz
[  523.418408][ T5673] usb 3-1: Manufacturer: syz
[  523.428274][ T5673] usb 3-1: SerialNumber: syz
[  523.440368][ T5673] usb 3-1: config 0 descriptor??
[  523.499045][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  523.854680][ T5673] airspy 3-1:0.0: Board ID: 00
[  523.869960][ T5673] airspy 3-1:0.0: Firmware version: 
[  524.270325][T16411] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  524.495869][ T5673] airspy 3-1:0.0: usb_control_msg() failed -71 request 12
[  524.530314][ T5673] airspy 3-1:0.0: Registered as swradio24
[  524.547646][ T5673] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  524.591633][ T5673] usb 3-1: USB disconnect, device number 74
[  524.608918][   T29] audit: type=1800 audit(1781828632.542:866): pid=16450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3338" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  524.632283][T16452] netlink: 'syz.3.3339': attribute type 10 has an invalid length.
[  524.724301][T16411] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  524.750965][T16411] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  524.812865][T16458] fuse: Bad value for 'fd'
[  525.219935][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  526.209327][ T7464] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  526.339359][ T7464] usb 6-1: device descriptor read/64, error -71
[  526.540224][T16525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3346'.
[  526.552979][T16525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3346'.
[  526.580195][ T7464] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  526.709290][ T7464] usb 6-1: device descriptor read/64, error -71
[  526.820260][ T7464] usb usb6-port1: attempt power cycle
[  527.169422][ T7464] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  527.209976][ T7464] usb 6-1: device descriptor read/8, error -71
[  527.326221][T16535] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3350'.
[  527.335597][T16535] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3350'.
[  527.450085][ T7464] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  527.482088][ T7464] usb 6-1: device descriptor read/8, error -71
[  527.610013][ T7464] usb usb6-port1: unable to enumerate USB device
[  527.895002][T16541] bond0: (slave bond_slave_1): Releasing backup interface
[  528.166526][T16541] bond_slave_1: left allmulticast mode
[  528.186292][   T29] audit: type=1326 audit(1781828636.122:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16542 comm="syz.3.3352" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  528.629334][ T7464] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[  528.699443][ T5673] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  528.759342][ T7946] usb 2-1: new low-speed USB device number 91 using dummy_hcd
[  528.759422][ T7464] usb 5-1: device descriptor read/64, error -71
[  528.866652][ T5673] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  528.888130][ T5673] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  528.898672][ T5673] usb 3-1: Product: syz
[  528.903251][ T5673] usb 3-1: Manufacturer: syz
[  528.907986][ T5673] usb 3-1: SerialNumber: syz
[  528.922183][ T5673] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  528.948043][ T7946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.960854][ T7946] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  528.986506][ T7946] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00
[  528.999305][ T7946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  529.009376][ T7464] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  529.023777][ T7946] usb 2-1: config 0 descriptor??
[  529.028741][ T7935] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  529.052579][ T5620] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  529.098701][T16561] FAULT_INJECTION: forcing a failure.
[  529.098701][T16561] name failslab, interval 1, probability 0, space 0, times 0
[  529.121190][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.5.3358 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.121225][T16561] Tainted: [L]=SOFTLOCKUP
[  529.121234][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  529.121247][T16561] Call Trace:
[  529.121261][T16561]  <TASK>
[  529.121270][T16561]  dump_stack_lvl+0xe8/0x150
[  529.121302][T16561]  should_fail_ex+0x40c/0x560
[  529.121339][T16561]  should_failslab+0xa8/0x100
[  529.121371][T16561]  __kmalloc_noprof+0xe8/0x750
[  529.121398][T16561]  ? iovec_from_user+0x87/0x250
[  529.121427][T16561]  iovec_from_user+0x87/0x250
[  529.121455][T16561]  __import_iovec+0x15e/0x7e0
[  529.121483][T16561]  ? rcu_is_watching+0x15/0xb0
[  529.121506][T16561]  ? lock_release+0x4b/0x3c0
[  529.121539][T16561]  import_iovec+0x73/0xa0
[  529.121567][T16561]  ___sys_recvmsg+0x4c9/0x5a0
[  529.121599][T16561]  ? ktime_get_ts64+0xa9/0x410
[  529.121645][T16561]  ? __pfx____sys_recvmsg+0x10/0x10
[  529.121678][T16561]  ? __fget_files+0x2a/0x420
[  529.121702][T16561]  ? rcu_is_watching+0x15/0xb0
[  529.121723][T16561]  ? __fget_files+0x3a2/0x420
[  529.121762][T16561]  do_recvmmsg+0x31a/0x7f0
[  529.121798][T16561]  ? __pfx_do_recvmmsg+0x10/0x10
[  529.121828][T16561]  ? lock_release+0x4b/0x3c0
[  529.121870][T16561]  ? get_timespec64+0x119/0x1b0
[  529.121885][T16561]  ? __pfx_get_timespec64+0x10/0x10
[  529.121919][T16561]  __x64_sys_recvmmsg+0x1b7/0x250
[  529.121953][T16561]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  529.121986][T16561]  ? rcu_is_watching+0x15/0xb0
[  529.122025][T16561]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.122047][T16561]  do_syscall_64+0x174/0x580
[  529.122077][T16561]  ? trace_irq_disable+0x3b/0x140
[  529.122107][T16561]  ? clear_bhb_loop+0x40/0x90
[  529.122130][T16561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.122151][T16561] RIP: 0033:0x7f5add59ce59
[  529.122175][T16561] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.122189][T16561] RSP: 002b:00007f5ade520028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  529.122227][T16561] RAX: ffffffffffffffda RBX: 00007f5add815fa0 RCX: 00007f5add59ce59
[  529.122244][T16561] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[  529.122259][T16561] RBP: 00007f5ade520090 R08: 0000200000003700 R09: 0000000000000000
[  529.122273][T16561] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001
[  529.122286][T16561] R13: 00007f5add816038 R14: 00007f5add815fa0 R15: 00007f5add93fa48
[  529.122312][T16561]  </TASK>
[  529.147402][T16559] FAULT_INJECTION: forcing a failure.
[  529.147402][T16559] name failslab, interval 1, probability 0, space 0, times 0
[  529.179708][ T7464] usb 5-1: device descriptor read/64, error -71
[  529.185137][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.3.3357 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  529.185242][T16559] Tainted: [L]=SOFTLOCKUP
[  529.185273][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  529.185309][T16559] Call Trace:
[  529.185340][T16559]  <TASK>
[  529.185372][T16559]  dump_stack_lvl+0xe8/0x150
[  529.185453][T16559]  should_fail_ex+0x40c/0x560
[  529.185550][T16559]  should_failslab+0xa8/0x100
[  529.185639][T16559]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  529.185708][T16559]  ? dup_task_struct+0x4f/0x850
[  529.185795][T16559]  dup_task_struct+0x4f/0x850
[  529.185876][T16559]  ? copy_process+0x80a/0x42e0
[  529.185950][T16559]  copy_process+0x81b/0x42e0
[  529.186058][T16559]  ? __pfx_copy_process+0x10/0x10
[  529.186135][T16559]  ? __raw_spin_lock_init+0x45/0x100
[  529.186216][T16559]  ? mutex_init_lockdep+0xdf/0x110
[  529.186280][T16559]  vhost_task_create+0x1f9/0x380
[  529.186336][T16559]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  529.186423][T16559]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  529.186506][T16559]  ? __pfx_vhost_task_create+0x10/0x10
[  529.186600][T16559]  ? __pfx_vhost_task_fn+0x10/0x10
[  529.186682][T16559]  ? kasan_save_track+0x4f/0x80
[  529.186745][T16559]  ? kasan_save_track+0x3e/0x80
[  529.186808][T16559]  ? kasan_save_free_info+0x40/0x50
[  529.186864][T16559]  ? __kasan_slab_free+0x5c/0x80
[  529.186937][T16559]  ? kfree+0x1c5/0x640
[  529.187000][T16559]  kvm_mmu_post_init_vm+0x147/0x2b0
[  529.187094][T16559]  kvm_arch_vcpu_ioctl_run+0x11f/0x2070
[  529.187192][T16559]  ? __mutex_trylock_common+0x15f/0x270
[  529.187263][T16559]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  529.187365][T16559]  ? rcu_is_watching+0x15/0xb0
[  529.187431][T16559]  ? trace_contention_end+0x3d/0x140
[  529.187498][T16559]  ? __mutex_lock+0x30d/0x1550
[  529.187577][T16559]  ? rcu_is_watching+0x15/0xb0
[  529.187635][T16559]  ? trace_irq_enable+0x3b/0x140
[  529.187721][T16559]  ? rcu_is_watching+0x15/0xb0
[  529.187777][T16559]  ? kvm_vcpu_ioctl+0x27f/0xfd0
[  529.187853][T16559]  ? get_task_pid+0x22/0x310
[  529.187904][T16559]  ? do_raw_write_lock+0x11d/0x260
[  529.188010][T16559]  ? rcu_is_watching+0x15/0xb0
[  529.188083][T16559]  ? lock_release+0x4b/0x3c0
[  529.188165][T16559]  ? get_task_pid+0x22/0x310
[  529.188221][T16559]  kvm_vcpu_ioctl+0xa61/0xfd0
[  529.188344][T16559]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  529.188431][T16559]  ? hook_file_ioctl+0x1f0/0x5c0
[  529.188540][T16559]  ? lock_release+0x4b/0x3c0
[  529.188630][T16559]  ? __fget_files+0x2a/0x420
[  529.188691][T16559]  ? __fget_files+0x3a2/0x420
[  529.188745][T16559]  ? __fget_files+0x2a/0x420
[  529.188809][T16559]  ? bpf_lsm_file_ioctl+0x9/0x20
[  529.188863][T16559]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  529.188938][T16559]  __se_sys_ioctl+0xfc/0x170
[  529.189015][T16559]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.189078][T16559]  do_syscall_64+0x174/0x580
[  529.189154][T16559]  ? clear_bhb_loop+0x40/0x90
[  529.189204][T16559]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  529.189258][T16559] RIP: 0033:0x7f263ab9ce59
[  529.189333][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  529.189394][T16559] RSP: 002b:00007f263ba2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  529.189460][T16559] RAX: ffffffffffffffda RBX: 00007f263ae16090 RCX: 00007f263ab9ce59
[  529.189503][T16559] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  529.189549][T16559] RBP: 00007f263ba2a090 R08: 0000000000000000 R09: 0000000000000000
[  529.189582][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  529.189615][T16559] R13: 00007f263ae16128 R14: 00007f263ae16090 R15: 00007f263af3fa48
[  529.189680][T16559]  </TASK>
[  529.889651][ T7464] usb usb5-port1: attempt power cycle
[  530.111272][ T7947] usb 3-1: USB disconnect, device number 75
[  530.229314][ T7464] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  530.249843][ T7464] usb 5-1: device descriptor read/8, error -71
[  530.509297][ T7464] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  530.540136][ T7464] usb 5-1: device descriptor read/8, error -71
[  530.669443][ T7464] usb usb5-port1: unable to enumerate USB device
[  530.767192][ T7946] usb 2-1: string descriptor 0 read error: -71
[  530.826310][ T7946] usb 2-1: USB disconnect, device number 91
[  530.980030][ T7935] usb 3-1: Service connection timeout for: 259
[  530.986305][ T7935] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services
[  530.996024][ T7935] ath9k_htc: Failed to initialize the device
[  531.007905][ T7947] usb 3-1: ath9k_htc: USB layer deinitialized
[  531.289568][ T7946] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  531.441121][ T7946] usb 6-1: Using ep0 maxpacket: 8
[  531.458208][ T7946] usb 6-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  531.472563][ T7946] usb 6-1: config 1 interface 0 has no altsetting 0
[  531.485503][ T7946] usb 6-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.40
[  531.495826][ T7946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.503953][ T7946] usb 6-1: Product: syz
[  531.508274][ T7946] usb 6-1: Manufacturer: �볘쫚빤୲涉藵衴㞋�ত㋹Ṣ垓굠�튽梬
[  531.529589][ T7946] usb 6-1: SerialNumber: syz
[  532.222308][ T7946] usbhid 6-1:1.0: can't add hid device: -71
[  532.228992][ T7946] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  532.229531][T16612] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.258241][ T7946] usb 6-1: USB disconnect, device number 7
[  532.344430][T16617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3373'.
[  532.617493][T16627] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3376'.
[  532.647172][   T29] audit: type=1326 audit(1781828640.582:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16619 comm="syz.4.3374" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdadf9ce59 code=0x0
[  533.260397][T16630] syz.1.3376 (16630): drop_caches: 1
[  533.275906][T16627] syz.1.3376 (16627): drop_caches: 1
[  533.373431][T16627] syz.1.3376 (16627): drop_caches: 1
[  533.497996][T16642] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  533.714428][ T5620] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  533.735909][T16654] FAULT_INJECTION: forcing a failure.
[  533.735909][T16654] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  533.767863][   T29] audit: type=1326 audit(1781828641.702:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16647 comm="syz.4.3383" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdadf9ce59 code=0x0
[  533.794591][T16654] CPU: 1 UID: 0 PID: 16654 Comm: syz.2.3385 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  533.794632][T16654] Tainted: [L]=SOFTLOCKUP
[  533.794638][T16654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  533.794647][T16654] Call Trace:
[  533.794654][T16654]  <TASK>
[  533.794661][T16654]  dump_stack_lvl+0xe8/0x150
[  533.794682][T16654]  should_fail_ex+0x40c/0x560
[  533.794709][T16654]  prepare_alloc_pages+0x230/0x650
[  533.794734][T16654]  __alloc_frozen_pages_noprof+0x12f/0x380
[  533.794758][T16654]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  533.794781][T16654]  ? __pfx_policy_nodemask+0x10/0x10
[  533.794808][T16654]  ? rcu_is_watching+0x15/0xb0
[  533.794825][T16654]  ? do_raw_spin_lock+0x12b/0x2f0
[  533.794847][T16654]  alloc_pages_mpol+0x212/0x380
[  533.794890][T16654]  alloc_pages_noprof+0xac/0x2a0
[  533.794923][T16654]  __pmd_alloc+0x3a/0x5c0
[  533.794951][T16654]  handle_mm_fault+0xe20/0x3080
[  533.794977][T16654]  ? mt_find+0x186/0x630
[  533.795000][T16654]  ? handle_mm_fault+0xec/0x3080
[  533.795019][T16654]  ? __pfx_handle_mm_fault+0x10/0x10
[  533.795039][T16654]  ? __pfx_find_vma+0x10/0x10
[  533.795055][T16654]  ? validate_mm+0x42e/0x4f0
[  533.795080][T16654]  __get_user_pages+0x1678/0x2720
[  533.795106][T16654]  get_user_pages_remote+0x307/0xb10
[  533.795124][T16654]  ? __pfx_get_user_pages_remote+0x10/0x10
[  533.795141][T16654]  ? mmap_read_lock_maybe_expand+0xc6/0x3a0
[  533.795161][T16654]  copy_string_kernel+0x2f9/0x5f0
[  533.795184][T16654]  ? __pfx_copy_string_kernel+0x10/0x10
[  533.795200][T16654]  ? do_raw_spin_unlock+0xf5/0x210
[  533.795221][T16654]  ? count+0x1cb/0x230
[  533.795240][T16654]  do_execveat_common+0x373/0x670
[  533.795262][T16654]  __x64_sys_execveat+0xc7/0xf0
[  533.795280][T16654]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.795296][T16654]  do_syscall_64+0x174/0x580
[  533.795317][T16654]  ? clear_bhb_loop+0x40/0x90
[  533.795335][T16654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  533.795350][T16654] RIP: 0033:0x7f8ae439ce59
[  533.795364][T16654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  533.795377][T16654] RSP: 002b:00007f8ae51f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  533.795394][T16654] RAX: ffffffffffffffda RBX: 00007f8ae4615fa0 RCX: 00007f8ae439ce59
[  533.795406][T16654] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  533.795416][T16654] RBP: 00007f8ae51f4090 R08: 0000000000001000 R09: 0000000000000000
[  533.795426][T16654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  533.795435][T16654] R13: 00007f8ae4616038 R14: 00007f8ae4615fa0 R15: 00007f8ae473fa48
[  533.795452][T16654]  </TASK>
[  534.213791][T16662] macvtap1: entered allmulticast mode
[  534.221228][T16662] dummy0: entered allmulticast mode
[  534.226581][T16662] dummy0: entered promiscuous mode
[  534.233726][T16662] dummy0: left allmulticast mode
[  534.266227][   T29] audit: type=1400 audit(1781828642.202:870): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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pid=16657 comm="syz.3.3386"
[  534.356951][ T7935] dummy0: left promiscuous mode
[  534.720014][ T7947] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  534.759265][ T7946] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  534.779274][ T7467] usb 4-1: new low-speed USB device number 82 using dummy_hcd
[  534.786835][ T5672] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  534.881014][ T7947] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.908185][ T7947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  534.929128][ T7946] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  534.946054][ T7947] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  534.957826][ T7467] usb 4-1: device descriptor read/64, error -71
[  534.970291][ T7946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  534.989843][ T7947] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  535.004639][ T5672] usb 3-1: config 0 has an invalid interface number: 237 but max is 0
[  535.017136][ T7946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  535.032704][ T5672] usb 3-1: config 0 has no interface number 0
[  535.046397][ T7947] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  535.057589][ T7946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  535.070771][ T5672] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  535.088983][ T7947] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.104142][ T5672] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  535.117351][ T7946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  535.131637][ T5672] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  535.143469][ T7947] usb 6-1: config 0 descriptor??
[  535.148547][ T7946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  535.164391][T16669] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  535.172626][ T5672] usb 3-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  535.183194][ T7946] usb 5-1: config 0 descriptor??
[  535.195102][T16671] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  535.225268][ T5672] usb 3-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be
[  535.234637][ T7467] usb 4-1: new low-speed USB device number 83 using dummy_hcd
[  535.256940][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=3
[  535.267108][ T5672] usb 3-1: Product: syz
[  535.271411][ T5672] usb 3-1: Manufacturer: syz
[  535.277186][ T5672] usb 3-1: SerialNumber: syz
[  535.297342][ T5672] usb 3-1: config 0 descriptor??
[  535.312897][T16660] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3387'.
[  535.343902][ T5672] xpad 3-1:0.237: probe with driver xpad failed with error -5
[  535.389462][ T7467] usb 4-1: device descriptor read/64, error -71
[  535.491626][T16660] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3387'.
[  535.509876][ T7467] usb usb4-port1: attempt power cycle
[  535.523648][T16673] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3391'.
[  535.612700][ T7947] plantronics 0003:047F:FFFF.002E: reserved main item tag 0xd
[  535.637950][ T7946] plantronics 0003:047F:FFFF.002F: reserved main item tag 0xd
[  535.662207][ T7947] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  535.684237][ T7946] plantronics 0003:047F:FFFF.002F: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  535.720942][ T7935] usb 3-1: USB disconnect, device number 76
[  535.859457][ T7467] usb 4-1: new low-speed USB device number 84 using dummy_hcd
[  535.891783][ T7467] usb 4-1: device descriptor read/8, error -71
[  535.943493][T16669] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.951099][T16669] bridge0: port 1(bridge_slave_0) entered disabled state
[  536.004508][T16669] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.017058][T16669] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.095693][ T5672] usb 6-1: USB disconnect, device number 8
[  536.135752][T16671] bridge0: port 2(bridge_slave_1) entered disabled state
[  536.159298][ T7467] usb 4-1: new low-speed USB device number 85 using dummy_hcd
[  536.180527][ T7467] usb 4-1: device descriptor read/8, error -71
[  536.196006][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.206950][T16671] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  536.253016][T16671] veth1_to_team: left allmulticast mode
[  536.274532][ T7088] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.292763][ T7467] usb usb4-port1: unable to enumerate USB device
[  536.299317][ T7088] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.314144][ T7088] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.334803][ T7464] usb 5-1: USB disconnect, device number 66
[  536.341030][ T7088] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.358489][ T7088] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 6081 - 0
[  536.366719][ T7088] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.375910][ T7088] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.385499][ T7088] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.767859][T16698] trusted_key: encrypted_key: insufficient parameters specified
[  537.054288][T16714] FAULT_INJECTION: forcing a failure.
[  537.054288][T16714] name failslab, interval 1, probability 0, space 0, times 0
[  537.067631][T16714] CPU: 0 UID: 0 PID: 16714 Comm: syz.1.3402 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  537.067668][T16714] Tainted: [L]=SOFTLOCKUP
[  537.067677][T16714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  537.067691][T16714] Call Trace:
[  537.067700][T16714]  <TASK>
[  537.067710][T16714]  dump_stack_lvl+0xe8/0x150
[  537.067739][T16714]  should_fail_ex+0x40c/0x560
[  537.067786][T16714]  should_failslab+0xa8/0x100
[  537.067821][T16714]  ? xfrm_state_alloc+0x24/0x2f0
[  537.067934][T16714]  kmem_cache_alloc_noprof+0x87/0x650
[  537.067959][T16714]  ? rcu_is_watching+0x15/0xb0
[  537.067982][T16714]  ? lock_release+0x4b/0x3c0
[  537.068015][T16714]  xfrm_state_alloc+0x24/0x2f0
[  537.068035][T16714]  xfrm_state_find+0x3b65/0x5ec0
[  537.068061][T16714]  ? unwind_next_frame+0x8f/0x2550
[  537.068095][T16714]  ? xfrm_state_find+0x1f2/0x5ec0
[  537.068118][T16714]  ? __pfx_xfrm_state_find+0x10/0x10
[  537.068140][T16714]  ? lock_release+0x4b/0x3c0
[  537.068170][T16714]  ? lock_release+0x4b/0x3c0
[  537.068203][T16714]  ? is_bpf_text_address+0x292/0x2b0
[  537.068224][T16714]  ? is_bpf_text_address+0x26/0x2b0
[  537.068246][T16714]  xfrm_resolve_and_create_bundle+0x7f3/0x3070
[  537.068314][T16714]  ? unwind_get_return_address+0x4d/0x90
[  537.068350][T16714]  ? trace_irq_enable+0x3b/0x140
[  537.068381][T16714]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  537.068411][T16714]  ? lock_release+0x4b/0x3c0
[  537.068442][T16714]  ? xfrm_selector_match+0xbea/0x1140
[  537.068477][T16714]  ? xfrm_policy_lookup_bytype+0x17d7/0x1840
[  537.068516][T16714]  ? ip_route_output_flow+0x2a/0x150
[  537.068577][T16714]  ? xfrm_policy_lookup_bytype+0x147/0x1840
[  537.068614][T16714]  ? __pfx_xfrm_policy_lookup_bytype+0x10/0x10
[  537.068652][T16714]  ? rcu_is_watching+0x15/0xb0
[  537.068675][T16714]  ? xfrm_expand_policies+0x489/0x740
[  537.068707][T16714]  xfrm_lookup_with_ifid+0x576/0x1b40
[  537.068740][T16714]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  537.068816][T16714]  ? udp_sendmsg+0xca6/0x2140
[  537.068880][T16714]  ? rcu_is_watching+0x15/0xb0
[  537.068905][T16714]  ? lock_release+0x4b/0x3c0
[  537.068948][T16714]  xfrm_lookup_route+0x3c/0x1c0
[  537.068978][T16714]  udp_sendmsg+0x144a/0x2140
[  537.069006][T16714]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  537.069045][T16714]  ? __pfx_udp_sendmsg+0x10/0x10
[  537.069085][T16714]  ? tomoyo_check_open_permission+0x38e/0x470
[  537.069117][T16714]  ? aa_sk_perm+0x6d5/0x900
[  537.069148][T16714]  ? __pfx_aa_sk_perm+0x10/0x10
[  537.069175][T16714]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  537.069197][T16714]  ? rcu_is_watching+0x15/0xb0
[  537.069219][T16714]  ? sock_rps_record_flow+0x19/0x350
[  537.069299][T16714]  ? inet_sendmsg+0x23e/0x320
[  537.069324][T16714]  ? __pfx_inet_sendmsg+0x10/0x10
[  537.069350][T16714]  ____sys_sendmsg+0x853/0xa20
[  537.069386][T16714]  ? __pfx_____sys_sendmsg+0x10/0x10
[  537.069419][T16714]  ? lock_release+0x4b/0x3c0
[  537.069452][T16714]  ? import_iovec+0x73/0xa0
[  537.069479][T16714]  ___sys_sendmsg+0x2a5/0x360
[  537.069507][T16714]  ? _parse_integer_limit+0x1ae/0x1f0
[  537.069542][T16714]  ? __pfx____sys_sendmsg+0x10/0x10
[  537.069575][T16714]  ? kstrtouint+0x6e/0xe0
[  537.069604][T16714]  ? __fget_files+0x2a/0x420
[  537.069626][T16714]  ? __fget_files+0x3a2/0x420
[  537.069652][T16714]  __sys_sendmmsg+0x273/0x4d0
[  537.069685][T16714]  ? __pfx___sys_sendmmsg+0x10/0x10
[  537.069720][T16714]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  537.069756][T16714]  ? ksys_write+0x242/0x270
[  537.069783][T16714]  ? __pfx_ksys_write+0x10/0x10
[  537.069810][T16714]  __x64_sys_sendmmsg+0xa0/0xc0
[  537.069841][T16714]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.069863][T16714]  do_syscall_64+0x174/0x580
[  537.069890][T16714]  ? trace_irq_disable+0x3b/0x140
[  537.069920][T16714]  ? clear_bhb_loop+0x40/0x90
[  537.069945][T16714]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  537.069967][T16714] RIP: 0033:0x7f6bcf19ce59
[  537.069988][T16714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  537.070006][T16714] RSP: 002b:00007f6bd00d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  537.070030][T16714] RAX: ffffffffffffffda RBX: 00007f6bcf415fa0 RCX: 00007f6bcf19ce59
[  537.070047][T16714] RDX: 0000000000000300 RSI: 0000200000004d00 RDI: 0000000000000003
[  537.070062][T16714] RBP: 00007f6bd00d0090 R08: 0000000000000000 R09: 0000000000000000
[  537.070085][T16714] R10: 0000000000000f1c R11: 0000000000000246 R12: 0000000000000001
[  537.070099][T16714] R13: 00007f6bcf416038 R14: 00007f6bcf415fa0 R15: 00007f6bcf53fa48
[  537.070122][T16714]  </TASK>
[  537.559820][   T29] audit: type=1326 audit(1781828645.502:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16703 comm="syz.4.3400" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdadf9ce59 code=0x0
[  537.780021][   T29] audit: type=1326 audit(1781828645.722:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  537.892740][   T29] audit: type=1326 audit(1781828645.722:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  537.967534][T16732] trusted_key: encrypted_key: insufficient parameters specified
[  537.985583][   T29] audit: type=1326 audit(1781828645.762:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  538.048349][   T29] audit: type=1326 audit(1781828645.762:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  538.126477][   T29] audit: type=1326 audit(1781828645.762:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  538.222706][   T29] audit: type=1326 audit(1781828645.762:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  538.269004][T16736] FAULT_INJECTION: forcing a failure.
[  538.269004][T16736] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  538.284341][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.4.3410 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  538.284377][T16736] Tainted: [L]=SOFTLOCKUP
[  538.284386][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  538.284405][T16736] Call Trace:
[  538.284414][T16736]  <TASK>
[  538.284421][T16736]  dump_stack_lvl+0xe8/0x150
[  538.284443][T16736]  should_fail_ex+0x40c/0x560
[  538.284471][T16736]  _copy_from_user+0x2d/0xb0
[  538.284491][T16736]  userfaultfd_ioctl+0x8e9/0x49e0
[  538.284511][T16736]  ? __kasan_slab_free+0x5c/0x80
[  538.284530][T16736]  ? kfree+0x1c5/0x640
[  538.284546][T16736]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  538.284573][T16736]  ? security_file_ioctl+0xc3/0x2a0
[  538.284592][T16736]  ? do_syscall_64+0x174/0x580
[  538.284617][T16736]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  538.284645][T16736]  ? rcu_is_watching+0x15/0xb0
[  538.284661][T16736]  ? trace_irq_enable+0x3b/0x140
[  538.284684][T16736]  ? rcu_is_watching+0x15/0xb0
[  538.284699][T16736]  ? lock_release+0x4b/0x3c0
[  538.284722][T16736]  ? kfree+0x1c5/0x640
[  538.284737][T16736]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  538.284759][T16736]  ? tomoyo_path_number_perm+0x219/0x5f0
[  538.284780][T16736]  ? do_vfs_ioctl+0x116f/0x1540
[  538.284802][T16736]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  538.284823][T16736]  ? vfs_write+0x9ce/0xba0
[  538.284844][T16736]  ? hook_file_ioctl+0x1f0/0x5c0
[  538.284874][T16736]  ? ksys_write+0x1fc/0x270
[  538.284895][T16736]  ? bpf_lsm_file_ioctl+0x9/0x20
[  538.284915][T16736]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  538.284934][T16736]  __se_sys_ioctl+0xfc/0x170
[  538.284954][T16736]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.284970][T16736]  do_syscall_64+0x174/0x580
[  538.284989][T16736]  ? trace_irq_disable+0x3b/0x140
[  538.285010][T16736]  ? clear_bhb_loop+0x40/0x90
[  538.285028][T16736]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  538.285043][T16736] RIP: 0033:0x7efdadf9ce59
[  538.285058][T16736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  538.285072][T16736] RSP: 002b:00007efdaee2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  538.285090][T16736] RAX: ffffffffffffffda RBX: 00007efdae215fa0 RCX: 00007efdadf9ce59
[  538.285102][T16736] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003
[  538.285112][T16736] RBP: 00007efdaee2d090 R08: 0000000000000000 R09: 0000000000000000
[  538.285122][T16736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  538.285131][T16736] R13: 00007efdae216038 R14: 00007efdae215fa0 R15: 00007efdae33fa48
[  538.285149][T16736]  </TASK>
[  538.545932][   T29] audit: type=1326 audit(1781828645.762:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16722 comm="syz.2.3406" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae439ce59 code=0x7ffc0000
[  539.005253][T16756] FAULT_INJECTION: forcing a failure.
[  539.005253][T16756] name failslab, interval 1, probability 0, space 0, times 0
[  539.005290][T16756] CPU: 0 UID: 0 PID: 16756 Comm: syz.2.3417 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  539.005319][T16756] Tainted: [L]=SOFTLOCKUP
[  539.005327][T16756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  539.005340][T16756] Call Trace:
[  539.005349][T16756]  <TASK>
[  539.005358][T16756]  dump_stack_lvl+0xe8/0x150
[  539.005386][T16756]  should_fail_ex+0x40c/0x560
[  539.005421][T16756]  should_failslab+0xa8/0x100
[  539.005449][T16756]  __kmalloc_noprof+0xe8/0x750
[  539.005476][T16756]  ? drm_atomic_commit_init+0x9e/0x370
[  539.005676][T16756]  drm_atomic_commit_init+0x9e/0x370
[  539.005709][T16756]  drm_atomic_commit_alloc+0xbc/0x100
[  539.005742][T16756]  drm_client_modeset_commit_atomic+0x122/0x7e0
[  539.005798][T16756]  ? rcu_is_watching+0x15/0xb0
[  539.005822][T16756]  ? trace_contention_end+0x3d/0x140
[  539.005848][T16756]  ? __mutex_lock+0x30d/0x1550
[  539.005877][T16756]  ? __mutex_lock+0x30d/0x1550
[  539.005904][T16756]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[  539.005951][T16756]  drm_client_modeset_commit_locked+0xcb/0x4d0
[  539.005978][T16756]  drm_client_modeset_commit+0x4a/0x70
[  539.006005][T16756]  __drm_fb_helper_restore_fbdev_mode_unlocked+0x9c/0x1c0
[  539.006107][T16756]  drm_fb_helper_set_par+0xaf/0x100
[  539.006139][T16756]  fb_set_var+0x7d6/0xf90
[  539.006234][T16756]  ? __pfx_fb_set_var+0x10/0x10
[  539.006267][T16756]  ? kernel_text_address+0xa5/0xe0
[  539.006291][T16756]  ? __kernel_text_address+0xd/0x30
[  539.006313][T16756]  ? unwind_get_return_address+0x4d/0x90
[  539.006339][T16756]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  539.006369][T16756]  ? arch_stack_walk+0xfb/0x150
[  539.006409][T16756]  fbcon_resize+0xbdb/0x1580
[  539.006486][T16756]  ? __pfx_fbcon_resize+0x10/0x10
[  539.006523][T16756]  ? rcu_is_watching+0x15/0xb0
[  539.006546][T16756]  ? lock_release+0x4b/0x3c0
[  539.006576][T16756]  ? kfree+0x1c5/0x640
[  539.006596][T16756]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  539.006626][T16756]  ? __pfx_fbcon_resize+0x10/0x10
[  539.006657][T16756]  vc_do_resize+0x2d7/0x1550
[  539.006681][T16756]  ? do_vfs_ioctl+0x116f/0x1540
[  539.006711][T16756]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  539.006741][T16756]  ? do_raw_spin_lock+0x12b/0x2f0
[  539.006767][T16756]  ? __pfx_vc_do_resize+0x10/0x10
[  539.006789][T16756]  ? lock_acquire+0x5f/0x350
[  539.006821][T16756]  ? rcu_is_watching+0x15/0xb0
[  539.006843][T16756]  ? trace_irq_enable+0x3b/0x140
[  539.006875][T16756]  vt_resize+0x81/0xd0
[  539.006903][T16756]  ? __pfx_vt_resize+0x10/0x10
[  539.006940][T16756]  tiocswinsz+0x104/0x160
[  539.006968][T16756]  ? __pfx_tiocswinsz+0x10/0x10
[  539.006995][T16756]  ? __fget_files+0x2a/0x420
[  539.007015][T16756]  ? __fget_files+0x3a2/0x420
[  539.007036][T16756]  ? __fget_files+0x2a/0x420
[  539.007059][T16756]  tty_ioctl+0x225/0xdd0
[  539.007085][T16756]  ? __pfx_tty_ioctl+0x10/0x10
[  539.007123][T16756]  __se_sys_ioctl+0xfc/0x170
[  539.007150][T16756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.007173][T16756]  do_syscall_64+0x174/0x580
[  539.007200][T16756]  ? trace_irq_disable+0x3b/0x140
[  539.007230][T16756]  ? clear_bhb_loop+0x40/0x90
[  539.007253][T16756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  539.007273][T16756] RIP: 0033:0x7f8ae439ce59
[  539.007293][T16756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  539.007312][T16756] RSP: 002b:00007f8ae51f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  539.007336][T16756] RAX: ffffffffffffffda RBX: 00007f8ae4615fa0 RCX: 00007f8ae439ce59
[  539.007352][T16756] RDX: 0000200000000040 RSI: 0000000000005414 RDI: 0000000000000003
[  539.007368][T16756] RBP: 00007f8ae51f4090 R08: 0000000000000000 R09: 0000000000000000
[  539.007382][T16756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  539.007395][T16756] R13: 00007f8ae4616038 R14: 00007f8ae4615fa0 R15: 00007f8ae473fa48
[  539.007419][T16756]  </TASK>
[  539.101698][T16757] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3411'.
[  539.366506][   T29] kauditd_printk_skb: 5 callbacks suppressed
[  539.366527][   T29] audit: type=1326 audit(1781828647.302:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16758 comm="syz.3.3418" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  539.559300][ T7947] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  539.624235][T16766] trusted_key: encrypted_key: insufficient parameters specified
[  539.643359][T16768] syzkaller1: entered promiscuous mode
[  539.652461][T16768] syzkaller1: entered allmulticast mode
[  539.729485][ T7947] usb 2-1: Using ep0 maxpacket: 32
[  539.748984][ T7947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.771573][ T7947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.783155][ T7947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  539.796336][ T7947] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  539.807736][ T7947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.833832][ T7947] usb 2-1: config 0 descriptor??
[  539.930817][ T5620] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  540.071627][ T7947] usbhid 2-1:0.0: can't add hid device: -71
[  540.086757][ T7947] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  540.097277][ T7947] usb 2-1: USB disconnect, device number 92
[  540.259992][ T7946] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  540.419331][ T7946] usb 4-1: Using ep0 maxpacket: 32
[  540.426501][ T7946] usb 4-1: unable to get BOS descriptor or descriptor too short
[  540.435169][ T7946] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[  540.443609][ T7946] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  540.454085][ T7946] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[  540.463438][ T7946] usb 4-1: config 128 has no interface number 0
[  540.470863][ T7946] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  540.482335][ T7946] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[  540.493136][ T7946] usb 4-1: config 128 interface 127 has no altsetting 0
[  540.503171][ T7946] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  540.512611][ T7946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.520708][ T7946] usb 4-1: Product: syz
[  540.525246][ T7946] usb 4-1: Manufacturer: syz
[  540.530007][ T7946] usb 4-1: SerialNumber: syz
[  540.745906][T16782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  540.762895][T16782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  540.783726][T16797] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.796147][T16797] 8021q: adding VLAN 0 to HW filter on device team0
[  540.814958][T16797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  540.888150][ T7946] usb 4-1: USB disconnect, device number 86
[  540.923625][ T6297] udevd[6297]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  540.954146][T16797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  540.974873][T16797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  540.993316][T16797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  541.006119][T16797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  541.046581][T16797] veth1_vlan: left promiscuous mode
[  541.059643][T16797] veth0_vlan: left promiscuous mode
[  541.077084][T16797] veth0_vlan: entered promiscuous mode
[  541.083192][   T29] audit: type=1326 audit(1781828649.022:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16802 comm="syz.4.3433" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efdadf9ce59 code=0x0
[  541.109518][ T7939] usb 3-1: new full-speed USB device number 77 using dummy_hcd
[  541.120600][T16797] veth1_vlan: entered promiscuous mode
[  541.130838][T16797] veth1_macvtap: left promiscuous mode
[  541.139124][T16797] veth0_macvtap: left promiscuous mode
[  541.147689][T16797] veth0_macvtap: entered promiscuous mode
[  541.158319][T16797] veth1_macvtap: entered promiscuous mode
[  541.170050][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  541.179884][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  541.189333][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  541.200049][T16797] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  541.223647][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.230866][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  541.243196][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.250413][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  541.264987][   T29] audit: type=1800 audit(1781828649.202:886): pid=16807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3430" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  541.286921][ T7939] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  541.296526][ T7939] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  541.344209][ T7939] usb 3-1: config 0 has no interface number 0
[  541.388777][ T7939] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  541.419957][T16810] FAULT_INJECTION: forcing a failure.
[  541.419957][T16810] name failslab, interval 1, probability 0, space 0, times 0
[  541.433499][T16810] CPU: 1 UID: 0 PID: 16810 Comm: syz.3.3434 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  541.433539][T16810] Tainted: [L]=SOFTLOCKUP
[  541.433545][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  541.433555][T16810] Call Trace:
[  541.433562][T16810]  <TASK>
[  541.433569][T16810]  dump_stack_lvl+0xe8/0x150
[  541.433591][T16810]  should_fail_ex+0x40c/0x560
[  541.433618][T16810]  should_failslab+0xa8/0x100
[  541.433641][T16810]  __kmalloc_noprof+0xe8/0x750
[  541.433660][T16810]  ? tomoyo_realpath_from_path+0xef/0x640
[  541.433679][T16810]  tomoyo_realpath_from_path+0xef/0x640
[  541.433697][T16810]  ? tomoyo_path_number_perm+0x219/0x5f0
[  541.433719][T16810]  tomoyo_path_number_perm+0x246/0x5f0
[  541.433743][T16810]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  541.433764][T16810]  ? __memcg_slab_post_alloc_hook+0x48f/0xe60
[  541.433788][T16810]  ? rcu_is_watching+0x15/0xb0
[  541.433811][T16810]  ? __pfx_current_check_access_path+0x10/0x10
[  541.433835][T16810]  ? d_splice_alias_ops+0x119/0x440
[  541.433856][T16810]  ? d_splice_alias+0x12/0x30
[  541.433876][T16810]  ? lookup_one_qstr_excl+0x1d4/0x360
[  541.433895][T16810]  tomoyo_path_mkdir+0xb0/0xf0
[  541.433912][T16810]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  541.433929][T16810]  ? __pfx_filename_create+0x10/0x10
[  541.433950][T16810]  security_path_mkdir+0x169/0x350
[  541.433967][T16810]  filename_mkdirat+0x200/0x510
[  541.433987][T16810]  ? __might_fault+0xcb/0x130
[  541.434006][T16810]  ? __pfx_filename_mkdirat+0x10/0x10
[  541.434062][T16810]  ? do_getname+0x151/0x250
[  541.434086][T16810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.434102][T16810]  __se_sys_mkdirat+0x35/0x150
[  541.434123][T16810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.434142][T16810]  do_syscall_64+0x174/0x580
[  541.434163][T16810]  ? trace_irq_disable+0x3b/0x140
[  541.434185][T16810]  ? clear_bhb_loop+0x40/0x90
[  541.434203][T16810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.434218][T16810] RIP: 0033:0x7f263ab9bcc7
[  541.434238][T16810] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  541.434253][T16810] RSP: 002b:00007f263ba4ae58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  541.434270][T16810] RAX: ffffffffffffffda RBX: 00007f263ba4aee0 RCX: 00007f263ab9bcc7
[  541.434282][T16810] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  541.434293][T16810] RBP: 0000200000002040 R08: 0000000000000000 R09: 0000000000000000
[  541.434303][T16810] R10: 0000200000002040 R11: 0000000000000246 R12: 0000200000000000
[  541.434314][T16810] R13: 00007f263ba4aea0 R14: 0000000000000000 R15: 0000200000000280
[  541.434330][T16810]  </TASK>
[  541.434347][T16810] ERROR: Out of memory at tomoyo_realpath_from_path.
[  541.468226][ T7939] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  541.731245][ T7094] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  541.740171][ T7094] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  541.749030][ T7094] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  541.757873][ T7094] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  541.798120][ T7939] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  541.818330][ T7939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.858518][ T7939] usb 3-1: config 0 descriptor??
[  541.871714][T16799] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  542.003016][ T5620] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  542.292517][   T29] audit: type=1326 audit(1781828650.232:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16818 comm="syz.3.3436" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  542.487864][ T7939] usb 3-1: USB disconnect, device number 77
[  542.719042][ T7939] IPVS: starting estimator thread 0...
[  542.809337][T16833] IPVS: using max 43 ests per chain, 103200 per kthread
[  542.877661][T16839] xt_HMARK: spi-set and port-set can't be combined
[  543.318779][ T5620] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  543.520350][T16859] tipc: Can't bind to reserved service type 0
[  543.627626][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3448'.
[  543.640698][T16863] syzkaller0: entered promiscuous mode
[  543.646341][T16863] syzkaller0: entered allmulticast mode
[  543.660044][T16863] tipc: Started in network mode
[  543.665185][T16863] tipc: Node identity cad83185d295, cluster identity 4711
[  543.672884][T16863] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.713145][T16862] tipc: Resetting bearer <eth:syzkaller0>
[  543.725312][T16862] tipc: Disabling bearer <eth:syzkaller0>
[  544.069149][   T29] audit: type=1326 audit(1781828652.002:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16870 comm="syz.3.3452" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  544.329327][ T5673] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  544.339278][ T7947] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  544.482888][ T5673] usb 6-1: config 2 has an invalid interface number: 184 but max is 0
[  544.491191][ T5673] usb 6-1: config 2 has no interface number 0
[  544.497356][ T5673] usb 6-1: config 2 interface 184 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  544.509139][ T5673] usb 6-1: config 2 interface 184 has no altsetting 0
[  544.513908][ T7947] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  544.534031][ T5673] usb 6-1: New USB device found, idVendor=1c9e, idProduct=9b02, bcdDevice=29.42
[  544.543136][ T7947] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 145, changing to 7
[  544.543173][ T7947] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1296, setting to 1024
[  544.548780][ T7947] usb 3-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  544.555319][ T5673] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.584226][ T5673] usb 6-1: Product: syz
[  544.584870][ T7947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  544.588453][ T5673] usb 6-1: Manufacturer: syz
[  544.588472][ T5673] usb 6-1: SerialNumber: syz
[  544.629273][ T7947] usb 3-1: Product: syz
[  544.638029][ T7947] usb 3-1: Manufacturer: syz
[  544.648287][ T7947] usb 3-1: SerialNumber: syz
[  545.042808][T16853] syz.2.3444 (16853) used greatest stack depth: 18504 bytes left
[  545.131167][ T7947] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  545.210443][ T7947] usb 3-1: USB disconnect, device number 78
[  545.244455][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  545.357301][ T5673] option 6-1:2.184: GSM modem (1-port) converter detected
[  545.387048][ T5673] usb 6-1: USB disconnect, device number 9
[  545.409678][ T5673] option 6-1:2.184: device disconnected
[  545.889394][ T7947] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  546.019309][ T7947] usb 4-1: device descriptor read/64, error -71
[  546.183018][ T5620] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  546.204884][T16908] FAULT_INJECTION: forcing a failure.
[  546.204884][T16908] name failslab, interval 1, probability 0, space 0, times 0
[  546.225475][T16908] CPU: 1 UID: 0 PID: 16908 Comm: syz.4.3465 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  546.225509][T16908] Tainted: [L]=SOFTLOCKUP
[  546.225518][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  546.225530][T16908] Call Trace:
[  546.225539][T16908]  <TASK>
[  546.225548][T16908]  dump_stack_lvl+0xe8/0x150
[  546.225583][T16908]  should_fail_ex+0x40c/0x560
[  546.225611][T16908]  should_failslab+0xa8/0x100
[  546.225634][T16908]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  546.225654][T16908]  ? dup_task_struct+0x4f/0x850
[  546.225677][T16908]  dup_task_struct+0x4f/0x850
[  546.225717][T16908]  ? copy_process+0x80a/0x42e0
[  546.225745][T16908]  copy_process+0x81b/0x42e0
[  546.225786][T16908]  ? __pfx_copy_process+0x10/0x10
[  546.225815][T16908]  ? __raw_spin_lock_init+0x45/0x100
[  546.225835][T16908]  ? mutex_init_lockdep+0xdf/0x110
[  546.225852][T16908]  vhost_task_create+0x1f9/0x380
[  546.225868][T16908]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  546.225892][T16908]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  546.225913][T16908]  ? __pfx_vhost_task_create+0x10/0x10
[  546.225931][T16908]  ? __pfx_vhost_task_fn+0x10/0x10
[  546.225949][T16908]  ? kasan_save_track+0x4f/0x80
[  546.225967][T16908]  ? kasan_save_track+0x3e/0x80
[  546.225984][T16908]  ? kasan_save_free_info+0x40/0x50
[  546.225999][T16908]  ? __kasan_slab_free+0x5c/0x80
[  546.226017][T16908]  ? kfree+0x1c5/0x640
[  546.226033][T16908]  kvm_mmu_post_init_vm+0x147/0x2b0
[  546.226056][T16908]  kvm_arch_vcpu_ioctl_run+0x11f/0x2070
[  546.226084][T16908]  ? __mutex_trylock_common+0x15f/0x270
[  546.226103][T16908]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  546.226127][T16908]  ? rcu_is_watching+0x15/0xb0
[  546.226143][T16908]  ? trace_contention_end+0x3d/0x140
[  546.226161][T16908]  ? __mutex_lock+0x30d/0x1550
[  546.226183][T16908]  ? rcu_is_watching+0x15/0xb0
[  546.226198][T16908]  ? trace_irq_enable+0x3b/0x140
[  546.226221][T16908]  ? rcu_is_watching+0x15/0xb0
[  546.226236][T16908]  ? kvm_vcpu_ioctl+0x27f/0xfd0
[  546.226256][T16908]  ? get_task_pid+0x22/0x310
[  546.226277][T16908]  ? do_raw_write_lock+0x11d/0x260
[  546.226297][T16908]  ? rcu_is_watching+0x15/0xb0
[  546.226312][T16908]  ? lock_release+0x4b/0x3c0
[  546.226355][T16908]  ? get_task_pid+0x22/0x310
[  546.226377][T16908]  kvm_vcpu_ioctl+0xa61/0xfd0
[  546.226406][T16908]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  546.226432][T16908]  ? hook_file_ioctl+0x1f0/0x5c0
[  546.226483][T16908]  ? lock_release+0x4b/0x3c0
[  546.226518][T16908]  ? __fget_files+0x2a/0x420
[  546.226541][T16908]  ? __fget_files+0x3a2/0x420
[  546.226561][T16908]  ? __fget_files+0x2a/0x420
[  546.226584][T16908]  ? bpf_lsm_file_ioctl+0x9/0x20
[  546.226611][T16908]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  546.226631][T16908]  __se_sys_ioctl+0xfc/0x170
[  546.226651][T16908]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.226667][T16908]  do_syscall_64+0x174/0x580
[  546.226688][T16908]  ? trace_irq_disable+0x3b/0x140
[  546.226709][T16908]  ? clear_bhb_loop+0x40/0x90
[  546.226726][T16908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  546.226742][T16908] RIP: 0033:0x7efdadf9ce59
[  546.226756][T16908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  546.226772][T16908] RSP: 002b:00007efdaee2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  546.226789][T16908] RAX: ffffffffffffffda RBX: 00007efdae215fa0 RCX: 00007efdadf9ce59
[  546.226801][T16908] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  546.226811][T16908] RBP: 00007efdaee2d090 R08: 0000000000000000 R09: 0000000000000000
[  546.226821][T16908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  546.226830][T16908] R13: 00007efdae216038 R14: 00007efdae215fa0 R15: 00007efdae33fa48
[  546.226848][T16908]  </TASK>
[  546.604424][ T7947] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  546.735511][   T29] audit: type=1326 audit(1781828654.672:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.5.3468" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5add59ce59 code=0x0
[  546.739557][ T7947] usb 4-1: device descriptor read/64, error -71
[  546.849988][ T7947] usb usb4-port1: attempt power cycle
[  546.895868][   T29] audit: type=1326 audit(1781828654.832:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16912 comm="syz.2.3467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ae439ce59 code=0x0
[  547.018984][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  547.189371][ T7947] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  547.220259][ T7947] usb 4-1: device descriptor read/8, error -71
[  547.271319][   T29] audit: type=1800 audit(1781828655.212:891): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3473" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  547.469777][ T7947] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  547.490334][ T7947] usb 4-1: device descriptor read/8, error -71
[  547.609440][ T7947] usb usb4-port1: unable to enumerate USB device
[  547.980438][T16948] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3478'.
[  548.425870][T16950] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ�
[  548.448654][   T29] audit: type=1800 audit(1781828656.362:892): pid=16950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3478" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  548.855667][T16955] FAULT_INJECTION: forcing a failure.
[  548.855667][T16955] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  548.913590][T16955] CPU: 0 UID: 0 PID: 16955 Comm: syz.3.3481 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  548.913617][T16955] Tainted: [L]=SOFTLOCKUP
[  548.913623][T16955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  548.913633][T16955] Call Trace:
[  548.913639][T16955]  <TASK>
[  548.913646][T16955]  dump_stack_lvl+0xe8/0x150
[  548.913668][T16955]  should_fail_ex+0x40c/0x560
[  548.913694][T16955]  _copy_from_user+0x2d/0xb0
[  548.913714][T16955]  generic_map_update_batch+0x651/0x9a0
[  548.913736][T16955]  ? __pfx_generic_map_update_batch+0x10/0x10
[  548.913754][T16955]  ? __fget_files+0x2a/0x420
[  548.913773][T16955]  ? __pfx_generic_map_update_batch+0x10/0x10
[  548.913790][T16955]  bpf_map_do_batch+0x391/0x630
[  548.913805][T16955]  __sys_bpf+0xbe5/0xd90
[  548.913829][T16955]  ? __pfx___sys_bpf+0x10/0x10
[  548.913860][T16955]  ? ksys_write+0x242/0x270
[  548.913880][T16955]  ? __pfx_ksys_write+0x10/0x10
[  548.913900][T16955]  __x64_sys_bpf+0xba/0xd0
[  548.913919][T16955]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.913935][T16955]  do_syscall_64+0x174/0x580
[  548.913955][T16955]  ? trace_irq_disable+0x3b/0x140
[  548.913977][T16955]  ? clear_bhb_loop+0x40/0x90
[  548.913994][T16955]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.914009][T16955] RIP: 0033:0x7f263ab9ce59
[  548.914022][T16955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  548.914037][T16955] RSP: 002b:00007f263ba4b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  548.914054][T16955] RAX: ffffffffffffffda RBX: 00007f263ae15fa0 RCX: 00007f263ab9ce59
[  548.914066][T16955] RDX: 0000000000000038 RSI: 0000200000000a80 RDI: 000000000000001a
[  548.914076][T16955] RBP: 00007f263ba4b090 R08: 0000000000000000 R09: 0000000000000000
[  548.914085][T16955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  548.914095][T16955] R13: 00007f263ae16038 R14: 00007f263ae15fa0 R15: 00007f263af3fa48
[  548.914112][T16955]  </TASK>
[  549.550639][ T7946] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  549.574752][   T29] audit: type=1326 audit(1781828657.512:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16963 comm="syz.3.3484" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  549.719254][ T7946] usb 5-1: Using ep0 maxpacket: 16
[  549.727226][ T7946] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  549.749312][ T7946] usb 5-1: config 0 has no interface number 0
[  549.757024][ T7946] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  549.778854][ T7946] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  549.800746][ T7946] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  549.819313][ T7946] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  549.836655][ T7946] usb 5-1: Product: syz
[  549.845847][ T7946] usb 5-1: SerialNumber: syz
[  549.858116][ T7946] usb 5-1: config 0 descriptor??
[  549.874313][ T7946] cm109 5-1:0.8: invalid payload size 0, expected 4
[  549.890592][ T7946] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input62
[  550.296169][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  550.296769][ T7939] usb 5-1: USB disconnect, device number 67
[  550.303183][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  550.358120][ T7939] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  550.393681][T16988] binder: BINDER_SET_CONTEXT_MGR already set
[  550.403768][T16988] binder: 16987:16988 ioctl 4018620d 200000004a80 returned -16
[  550.937776][T17001] netlink: 'syz.4.3496': attribute type 6 has an invalid length.
[  550.953984][T17001] netlink: 'syz.4.3496': attribute type 7 has an invalid length.
[  550.971429][T17001] netlink: 'syz.4.3496': attribute type 8 has an invalid length.
[  550.991068][T17002] netlink: 'syz.4.3496': attribute type 6 has an invalid length.
[  551.003217][T17002] netlink: 'syz.4.3496': attribute type 7 has an invalid length.
[  551.003546][ T5620] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  551.011315][T17002] netlink: 'syz.4.3496': attribute type 8 has an invalid length.
[  551.074228][T16998] syzkaller0: entered promiscuous mode
[  551.096286][T16998] syzkaller0: entered allmulticast mode
[  551.311179][ T5620] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  551.357096][   T29] audit: type=1800 audit(1781828659.292:894): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3488" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  551.443943][T17023] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3503'.
[  551.453337][ T7939] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  551.494209][   T29] audit: type=1326 audit(1781828659.422:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17015 comm="syz.3.3501" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f263ab9ce59 code=0x0
[  551.611139][ T7939] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  551.620675][ T7939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.639314][ T7939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  551.654749][ T7939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.667499][ T7939] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  551.677702][ T7939] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  551.685789][ T7939] usb 3-1: Product: syz
[  551.690430][ T7939] usb 3-1: Manufacturer: syz
[  551.698512][ T7939] cdc_wdm 3-1:1.0: skipping garbage
[  551.704893][ T7939] cdc_wdm 3-1:1.0: skipping garbage
[  551.715955][ T7939] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  551.722533][ T7939] cdc_wdm 3-1:1.0: Unknown control protocol
[  551.902541][ T7939] usb 3-1: USB disconnect, device number 79
[  552.342393][ T7939] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  552.501255][ T7939] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  552.510175][ T7939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  552.520944][ T7939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  552.530319][ T7939] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.543467][ T7939] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  552.553755][ T7939] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  552.562127][ T7939] usb 3-1: Product: syz
[  552.566446][ T7939] usb 3-1: Manufacturer: syz
[  552.575936][ T7939] cdc_wdm 3-1:1.0: skipping garbage
[  552.585213][ T7939] cdc_wdm 3-1:1.0: skipping garbage
[  552.594479][ T7939] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  552.600744][ T7939] cdc_wdm 3-1:1.0: Unknown control protocol
[  552.851745][ T5620] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  553.053603][T17047] FAULT_INJECTION: forcing a failure.
[  553.053603][T17047] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  553.074931][T17047] CPU: 0 UID: 0 PID: 17047 Comm: syz.1.3510 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  553.074964][T17047] Tainted: [L]=SOFTLOCKUP
[  553.074973][T17047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  553.074985][T17047] Call Trace:
[  553.074993][T17047]  <TASK>
[  553.075002][T17047]  dump_stack_lvl+0xe8/0x150
[  553.075033][T17047]  should_fail_ex+0x40c/0x560
[  553.075070][T17047]  prepare_alloc_pages+0x230/0x650
[  553.075103][T17047]  __alloc_frozen_pages_noprof+0x12f/0x380
[  553.075135][T17047]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  553.075168][T17047]  ? __pfx_policy_nodemask+0x10/0x10
[  553.075195][T17047]  ? rcu_is_watching+0x15/0xb0
[  553.075220][T17047]  ? rcu_is_watching+0x15/0xb0
[  553.075242][T17047]  alloc_pages_mpol+0x212/0x380
[  553.075273][T17047]  folio_alloc_mpol_noprof+0x39/0x160
[  553.075304][T17047]  vma_alloc_folio_noprof+0xe1/0x1e0
[  553.075336][T17047]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  553.075368][T17047]  ? __pte_offset_map+0x29/0x240
[  553.075391][T17047]  ? lock_acquire+0x5f/0x350
[  553.075425][T17047]  do_pte_missing+0x1750/0x3540
[  553.075461][T17047]  handle_mm_fault+0x1b36/0x3080
[  553.075492][T17047]  ? handle_mm_fault+0xec/0x3080
[  553.075518][T17047]  ? __pfx_handle_mm_fault+0x10/0x10
[  553.075542][T17047]  ? follow_page_pte+0x6ce/0xe70
[  553.075569][T17047]  ? __pfx_follow_page_pte+0x10/0x10
[  553.075598][T17047]  __get_user_pages+0x1678/0x2720
[  553.075634][T17047]  __gup_longterm_locked+0x3bc/0x15c0
[  553.075665][T17047]  ? rcu_is_watching+0x15/0xb0
[  553.075690][T17047]  gup_fast_fallback+0x1d82/0x20d0
[  553.075726][T17047]  ? __pfx_gup_fast_fallback+0x10/0x10
[  553.075750][T17047]  ? is_valid_gup_args+0x11f/0x200
[  553.075772][T17047]  ? pin_user_pages_fast+0x4d/0xb0
[  553.075796][T17047]  io_pin_pages+0xba/0x1b0
[  553.075817][T17047]  io_sqe_buffer_register+0x21f/0x1360
[  553.075856][T17047]  ? rcu_is_watching+0x15/0xb0
[  553.075887][T17047]  ? trace_kmalloc+0x2a/0xf0
[  553.075914][T17047]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  553.075947][T17047]  ? io_sqe_buffers_register+0x124/0x7e0
[  553.075980][T17047]  ? iovec_from_user+0x1ba/0x250
[  553.076009][T17047]  io_sqe_buffers_register+0x2eb/0x7e0
[  553.076052][T17047]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  553.076085][T17047]  ? __fget_files+0x3a2/0x420
[  553.076108][T17047]  ? __fget_files+0x2a/0x420
[  553.076134][T17047]  __se_sys_io_uring_register+0x121b/0x1ab0
[  553.076172][T17047]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  553.076205][T17047]  ? ksys_write+0x242/0x270
[  553.076233][T17047]  ? __pfx_ksys_write+0x10/0x10
[  553.076262][T17047]  ? rcu_is_watching+0x15/0xb0
[  553.076285][T17047]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.076308][T17047]  do_syscall_64+0x174/0x580
[  553.076339][T17047]  ? trace_irq_disable+0x3b/0x140
[  553.076369][T17047]  ? clear_bhb_loop+0x40/0x90
[  553.076393][T17047]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  553.076415][T17047] RIP: 0033:0x7f6bcf19ce59
[  553.076435][T17047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  553.076453][T17047] RSP: 002b:00007f6bd00d0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  553.076477][T17047] RAX: ffffffffffffffda RBX: 00007f6bcf415fa0 RCX: 00007f6bcf19ce59
[  553.076493][T17047] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  553.076507][T17047] RBP: 00007f6bd00d0090 R08: 0000000000000000 R09: 0000000000000000
[  553.076521][T17047] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002
[  553.076535][T17047] R13: 00007f6bcf416038 R14: 00007f6bcf415fa0 R15: 00007f6bcf53fa48
[  553.076559][T17047]  </TASK>
[  553.119525][ T5672] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  553.527753][ T7935] usb 3-1: USB disconnect, device number 80
[  553.589265][ T5672] usb 4-1: Using ep0 maxpacket: 32
[  553.596238][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.607717][ T5672] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.617921][ T5672] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  553.631342][ T5672] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  553.642819][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.664668][ T5672] usb 4-1: config 0 descriptor??
[  554.018992][T17061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3515'.
[  554.040142][ T7935] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  554.126671][ T5672] usbhid 4-1:0.0: can't add hid device: -71
[  554.133904][ T5672] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  554.149401][T17063] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(10)
[  554.156064][T17063] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  554.172620][ T5672] usb 4-1: USB disconnect, device number 91
[  554.178863][T17063] vhci_hcd vhci_hcd.0: Device attached
[  554.191694][ T7935] usb 5-1: unable to get BOS descriptor or descriptor too short
[  554.208711][ T7935] usb 5-1: not running at top speed; connect to a high speed hub
[  554.229513][ T7935] usb 5-1: config index 0 descriptor too short (expected 16420, got 36)
[  554.253657][ T7935] usb 5-1: config 1 has an invalid interface number: 93 but max is 0
[  554.274513][T17064] vhci_hcd: connection closed
[  554.276537][   T48] vhci_hcd vhci_hcd.5: stop threads
[  554.277110][ T7935] usb 5-1: config 1 has no interface number 0
[  554.292983][   T48] vhci_hcd vhci_hcd.5: release socket
[  554.313643][   T48] vhci_hcd vhci_hcd.5: disconnect device
[  554.315152][ T7935] usb 5-1: config 1 interface 93 has no altsetting 0
[  554.342897][ T7935] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= e.3d
[  554.353947][ T7935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.362272][ T7464] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  554.376302][ T7935] usb 5-1: Product: syz
[  554.380685][ T7935] usb 5-1: Manufacturer: syz
[  554.385334][ T7935] usb 5-1: SerialNumber: syz
[  554.581123][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  554.633177][ T7935] usb 5-1: USB disconnect, device number 68
[  554.831789][T17083] FAULT_INJECTION: forcing a failure.
[  554.831789][T17083] name failslab, interval 1, probability 0, space 0, times 0
[  554.844676][T17083] CPU: 1 UID: 0 PID: 17083 Comm: syz.5.3520 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  554.844711][T17083] Tainted: [L]=SOFTLOCKUP
[  554.844719][T17083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  554.844733][T17083] Call Trace:
[  554.844743][T17083]  <TASK>
[  554.844753][T17083]  dump_stack_lvl+0xe8/0x150
[  554.844782][T17083]  should_fail_ex+0x40c/0x560
[  554.844817][T17083]  should_failslab+0xa8/0x100
[  554.844848][T17083]  __kvmalloc_node_noprof+0x16e/0x890
[  554.844877][T17083]  ? nla_strcmp+0xf8/0x130
[  554.844901][T17083]  ? nf_tables_newset+0x134a/0x2570
[  554.845038][T17083]  ? nft_set_lookup+0x128/0x150
[  554.845070][T17083]  nf_tables_newset+0x134a/0x2570
[  554.845102][T17083]  ? __pfx_nf_tables_newset+0x10/0x10
[  554.845131][T17083]  ? nfnl_pernet+0x23/0x240
[  554.845158][T17083]  ? rcu_is_watching+0x15/0xb0
[  554.845183][T17083]  ? lock_release+0x4b/0x3c0
[  554.845217][T17083]  ? __nla_parse+0x40/0x60
[  554.845242][T17083]  nfnetlink_rcv+0x1288/0x28c0
[  554.845286][T17083]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  554.845321][T17083]  ? ref_tracker_free+0x689/0x830
[  554.845354][T17083]  ? skb_clone+0x246/0x3a0
[  554.845387][T17083]  ? __netlink_deliver_tap+0x811/0x860
[  554.845419][T17083]  ? rcu_is_watching+0x15/0xb0
[  554.845440][T17083]  ? netlink_deliver_tap+0x2e/0x1b0
[  554.845471][T17083]  ? lock_release+0x4b/0x3c0
[  554.845502][T17083]  ? netlink_deliver_tap+0x2e/0x1b0
[  554.845543][T17083]  netlink_unicast+0x7bb/0x940
[  554.845577][T17083]  netlink_sendmsg+0x813/0xb40
[  554.845613][T17083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.845646][T17083]  ? aa_sock_msg_perm+0xf1/0x1b0
[  554.845680][T17083]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  554.845704][T17083]  ? __pfx_netlink_sendmsg+0x10/0x10
[  554.845736][T17083]  ____sys_sendmsg+0x9b9/0xa20
[  554.845772][T17083]  ? __pfx_____sys_sendmsg+0x10/0x10
[  554.845803][T17083]  ? lock_release+0x4b/0x3c0
[  554.845835][T17083]  ? import_iovec+0x73/0xa0
[  554.845864][T17083]  ___sys_sendmsg+0x2a5/0x360
[  554.845896][T17083]  ? rcu_is_watching+0x15/0xb0
[  554.845917][T17083]  ? get_pid_task+0x20/0x1f0
[  554.845939][T17083]  ? __pfx____sys_sendmsg+0x10/0x10
[  554.845971][T17083]  ? rcu_is_watching+0x15/0xb0
[  554.846006][T17083]  ? __fget_files+0x2a/0x420
[  554.846029][T17083]  ? __fget_files+0x3a2/0x420
[  554.846055][T17083]  __x64_sys_sendmsg+0x1b1/0x290
[  554.846087][T17083]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  554.846124][T17083]  ? rcu_is_watching+0x15/0xb0
[  554.846147][T17083]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.846170][T17083]  do_syscall_64+0x174/0x580
[  554.846198][T17083]  ? trace_irq_disable+0x3b/0x140
[  554.846228][T17083]  ? clear_bhb_loop+0x40/0x90
[  554.846251][T17083]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  554.846274][T17083] RIP: 0033:0x7f5add59ce59
[  554.846294][T17083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  554.846313][T17083] RSP: 002b:00007f5ade520028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  554.846337][T17083] RAX: ffffffffffffffda RBX: 00007f5add815fa0 RCX: 00007f5add59ce59
[  554.846353][T17083] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  554.846368][T17083] RBP: 00007f5ade520090 R08: 0000000000000000 R09: 0000000000000000
[  554.846383][T17083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  554.846397][T17083] R13: 00007f5add816038 R14: 00007f5add815fa0 R15: 00007f5add93fa48
[  554.846421][T17083]  </TASK>
[  555.196238][ T7939] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  555.419827][T17091] FAULT_INJECTION: forcing a failure.
[  555.419827][T17091] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  555.450053][ T7939] usb 3-1: unable to get BOS descriptor or descriptor too short
[  555.473094][ T7939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  555.485106][T17091] CPU: 0 UID: 0 PID: 17091 Comm: syz.5.3522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  555.485141][T17091] Tainted: [L]=SOFTLOCKUP
[  555.485148][T17091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  555.485164][T17091] Call Trace:
[  555.485175][T17091]  <TASK>
[  555.485182][T17091]  dump_stack_lvl+0xe8/0x150
[  555.485204][T17091]  should_fail_ex+0x40c/0x560
[  555.485232][T17091]  prepare_alloc_pages+0x230/0x650
[  555.485258][T17091]  __alloc_frozen_pages_noprof+0x12f/0x380
[  555.485303][T17091]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  555.485336][T17091]  ? __pfx_policy_nodemask+0x10/0x10
[  555.485364][T17091]  ? rcu_is_watching+0x15/0xb0
[  555.485392][T17091]  ? rcu_is_watching+0x15/0xb0
[  555.485410][T17091]  alloc_pages_mpol+0x212/0x380
[  555.485434][T17091]  folio_alloc_mpol_noprof+0x39/0x160
[  555.485457][T17091]  vma_alloc_folio_noprof+0xe1/0x1e0
[  555.485480][T17091]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  555.485502][T17091]  ? __pte_offset_map+0x29/0x240
[  555.485519][T17091]  ? lock_acquire+0x5f/0x350
[  555.485545][T17091]  do_pte_missing+0x1750/0x3540
[  555.485572][T17091]  handle_mm_fault+0x1b36/0x3080
[  555.485593][T17091]  ? handle_mm_fault+0xec/0x3080
[  555.485612][T17091]  ? __pfx_handle_mm_fault+0x10/0x10
[  555.485629][T17091]  ? follow_page_pte+0x6ce/0xe70
[  555.485648][T17091]  ? __pfx_follow_page_pte+0x10/0x10
[  555.485668][T17091]  __get_user_pages+0x1678/0x2720
[  555.485694][T17091]  __gup_longterm_locked+0x3bc/0x15c0
[  555.485715][T17091]  ? rcu_is_watching+0x15/0xb0
[  555.485732][T17091]  gup_fast_fallback+0x1d82/0x20d0
[  555.485758][T17091]  ? __pfx_gup_fast_fallback+0x10/0x10
[  555.485774][T17091]  ? is_valid_gup_args+0x11f/0x200
[  555.485790][T17091]  ? pin_user_pages_fast+0x4d/0xb0
[  555.485806][T17091]  io_pin_pages+0xba/0x1b0
[  555.485821][T17091]  io_sqe_buffer_register+0x21f/0x1360
[  555.485849][T17091]  ? rcu_is_watching+0x15/0xb0
[  555.485864][T17091]  ? trace_kmalloc+0x2a/0xf0
[  555.485883][T17091]  ? __pfx_io_sqe_buffer_register+0x10/0x10
[  555.485907][T17091]  ? io_sqe_buffers_register+0x124/0x7e0
[  555.485930][T17091]  ? iovec_from_user+0x1ba/0x250
[  555.485950][T17091]  io_sqe_buffers_register+0x2eb/0x7e0
[  555.485977][T17091]  ? __pfx_io_sqe_buffers_register+0x10/0x10
[  555.486001][T17091]  ? __fget_files+0x3a2/0x420
[  555.486016][T17091]  ? __fget_files+0x2a/0x420
[  555.486041][T17091]  __se_sys_io_uring_register+0x121b/0x1ab0
[  555.486070][T17091]  ? __pfx___se_sys_io_uring_register+0x10/0x10
[  555.486094][T17091]  ? ksys_write+0x242/0x270
[  555.486114][T17091]  ? __pfx_ksys_write+0x10/0x10
[  555.486134][T17091]  ? rcu_is_watching+0x15/0xb0
[  555.486151][T17091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.486184][T17091]  do_syscall_64+0x174/0x580
[  555.486215][T17091]  ? trace_irq_disable+0x3b/0x140
[  555.486243][T17091]  ? clear_bhb_loop+0x40/0x90
[  555.486272][T17091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  555.486288][T17091] RIP: 0033:0x7f5add59ce59
[  555.486302][T17091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  555.486316][T17091] RSP: 002b:00007f5ade520028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab
[  555.486333][T17091] RAX: ffffffffffffffda RBX: 00007f5add815fa0 RCX: 00007f5add59ce59
[  555.486344][T17091] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003
[  555.486355][T17091] RBP: 00007f5ade520090 R08: 0000000000000000 R09: 0000000000000000
[  555.486365][T17091] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002
[  555.486393][T17091] R13: 00007f5add816038 R14: 00007f5add815fa0 R15: 00007f5add93fa48
[  555.486418][T17091]  </TASK>
[  555.852502][T17094] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3523'.
[  555.864489][ T7939] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  555.873580][ T7939] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  555.884455][ T7939] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  555.984836][ T7939] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  555.994125][ T7939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  556.002260][ T7939] usb 3-1: Product: syz
[  556.006468][ T7939] usb 3-1: Manufacturer: syz
[  556.011251][ T7939] usb 3-1: SerialNumber: syz
[  556.367397][T17106] syz.3.3528 (17106): drop_caches: 2
[  556.701889][T17114] bond0: entered promiscuous mode
[  556.707131][T17114] bond_slave_0: entered promiscuous mode
[  556.714107][T17114] bond_slave_1: entered promiscuous mode
[  556.722046][T17114] batadv0: entered promiscuous mode
[  556.728814][T17114] 8021q: adding VLAN 0 to HW filter on device hsr1
[  556.738760][T17114] bond0: left promiscuous mode
[  556.743962][T17114] bond_slave_0: left promiscuous mode
[  556.750586][T17114] bond_slave_1: left promiscuous mode
[  556.756923][T17114] batadv0: left promiscuous mode
[  557.170883][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  557.253565][T17132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3535'.
[  557.564672][T17132] syz.3.3535 (17132): drop_caches: 1
[  557.587889][T17134] syz.3.3535 (17134): drop_caches: 1
[  557.621381][ T7939] usb 3-1: 0:2 : does not exist
[  557.656212][ T7939] usb 3-1: USB disconnect, device number 81
[  557.707104][ T6297] udevd[6297]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  557.734825][T17132] syz.3.3535 (17132): drop_caches: 1
[  559.109252][ T7946] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  559.269346][ T7946] usb 3-1: Using ep0 maxpacket: 16
[  559.276063][ T7946] usb 3-1: config 166 has an invalid interface number: 177 but max is 1
[  559.286585][ T7946] usb 3-1: config 166 has an invalid interface number: 34 but max is 1
[  559.296139][ T7946] usb 3-1: config 166 has no interface number 0
[  559.303482][ T7946] usb 3-1: config 166 has no interface number 1
[  559.321559][ T7946] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  559.343640][ T7946] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping
[  559.356422][ T7946] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  559.376182][   T29] audit: type=1800 audit(1781828667.312:896): pid=17169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3546" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  559.396885][ T7946] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  559.409068][ T7946] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  559.445283][ T7946] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  559.456303][ T7946] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  559.468021][ T7946] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  559.478468][ T7946] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  559.495625][ T7946] usb 3-1: config 166 interface 177 has no altsetting 0
[  559.503428][ T7946] usb 3-1: config 166 interface 34 has no altsetting 0
[  559.512704][ T7946] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12
[  559.522581][ T7946] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.536380][ T7946] usb 3-1: Product: syz
[  559.541557][ T7946] usb 3-1: Manufacturer: syz
[  559.546661][ T7946] usb 3-1: SerialNumber: syz
[  559.720628][T17167] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3547'.
[  559.764290][ T7946] ums-realtek 3-1:166.177: USB Mass Storage device detected
[  559.968801][ T7946] ums-realtek 3-1:166.34: USB Mass Storage device detected
[  560.204029][ T7946] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5
[  560.271131][T17181] binder: 17180:17181 unknown command 0
[  560.289631][T17181] binder: 17180:17181 ioctl c0306201 200000000200 returned -22
[  560.366553][ T7946] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138)
[  560.388926][ T7946] uvcvideo 3-1:166.34: No valid video chain found.
[  560.518116][T17175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'.
[  560.596882][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.615267][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.636042][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.648059][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.658351][ T7946] usb 3-1: USB disconnect, device number 82
[  560.682987][T17187] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3552'.
[  560.740696][T17170] syz.1.3547 (17170): drop_caches: 1
[  560.756134][T17167] syz.1.3547 (17167): drop_caches: 1
[  560.770424][T17189] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11)
[  560.777090][T17189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  560.786189][T17189] vhci_hcd vhci_hcd.0: Device attached
[  560.874742][T17190] vhci_hcd: connection closed
[  560.874963][T13046] vhci_hcd vhci_hcd.3: stop threads
[  560.885253][T13046] vhci_hcd vhci_hcd.3: release socket
[  560.890791][T13046] vhci_hcd vhci_hcd.3: disconnect device
[  560.936286][T17167] syz.1.3547 (17167): drop_caches: 1
[  561.243376][T17202] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  561.914583][T17221] fuse: Bad value for 'fd'
[  562.214017][   T29] audit: type=1326 audit(1781828670.152:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17223 comm="syz.5.3563" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5add59ce59 code=0x0
[  562.269646][T17234] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3564'.
[  562.623783][T17234] syz.2.3564 (17234): drop_caches: 1
[  562.640380][T17236] syz.2.3564 (17236): drop_caches: 1
[  562.795716][T17234] syz.2.3564 (17234): drop_caches: 1
[  562.980722][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  562.993013][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  563.145093][T17244] syzkaller0: entered promiscuous mode
[  563.174654][T17244] syzkaller0: entered allmulticast mode
[  563.397813][T17254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'.
[  563.505484][T17256] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  563.512335][T17256] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  563.525789][T17256] vhci_hcd vhci_hcd.0: Device attached
[  563.634604][T17257] vhci_hcd: connection closed
[  563.635568][   T48] vhci_hcd vhci_hcd.2: stop threads
[  563.652156][   T48] vhci_hcd vhci_hcd.2: release socket
[  563.661834][   T48] vhci_hcd vhci_hcd.2: disconnect device
[  563.699649][ T7946] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  563.793778][T17269] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3575'.
[  563.948456][T17269] syz.3.3575 (17269): drop_caches: 1
[  564.022439][T17274] syz.3.3575 (17274): drop_caches: 1
[  564.092780][T17269] syz.3.3575 (17269): drop_caches: 1
[  564.138201][   T29] audit: type=1326 audit(1781828672.072:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17276 comm="syz.5.3576" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5add59ce59 code=0x0
[  564.351365][ T5620] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  564.741687][   T29] audit: type=1800 audit(1781828672.682:899): pid=17296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3581" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0
[  565.051993][   T29] audit: type=1800 audit(1781828672.992:900): pid=17301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3582" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0
[  565.601060][T17307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3584'.
[  565.969365][T17315] kvm: pic: non byte write
[  566.101378][T17318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3588'.
[  566.276524][T17318] syz.3.3588 (17318): drop_caches: 1
[  566.336276][T17321] syz.3.3588 (17321): drop_caches: 1
[  566.380976][T17328] bridge0: port 2(bridge_slave_1) entered disabled state
[  566.388404][T17328] bridge0: port 1(bridge_slave_0) entered disabled state
[  566.442308][T17328] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  566.446530][T17318] syz.3.3588 (17318): drop_caches: 1
[  566.457103][T17328] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  566.563629][T17331] trusted_key: encrypted_key: insufficient parameters specified
[  566.584369][T13046] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.599335][T13046] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.618574][T13046] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  566.635771][T13046] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  567.029358][ T7939] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  567.179291][ T7939] usb 6-1: Using ep0 maxpacket: 32
[  567.186750][ T7939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  567.198029][ T7939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  567.208104][ T7939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  567.222308][ T7939] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  567.232206][ T7939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  567.242004][ T7939] usb 6-1: config 0 descriptor??
[  567.299503][ T7947] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  567.462128][ T7947] usb 5-1: no configurations
[  567.469088][ T7947] usb 5-1: can't read configurations, error -22
[  567.496178][T17360] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3604'.
[  567.532990][ T7939] usbhid 6-1:0.0: can't add hid device: -71
[  567.553332][ T7939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  567.581023][ T7939] usb 6-1: USB disconnect, device number 10
[  567.609334][ T7947] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  567.722166][T17360] syz.2.3604 (17360): drop_caches: 1
[  567.751858][T17366] FAULT_INJECTION: forcing a failure.
[  567.751858][T17366] name failslab, interval 1, probability 0, space 0, times 0
[  567.780858][T17366] CPU: 1 UID: 0 PID: 17366 Comm: syz.3.3606 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  567.780894][T17366] Tainted: [L]=SOFTLOCKUP
[  567.780902][T17366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  567.780916][T17366] Call Trace:
[  567.780924][T17366]  <TASK>
[  567.780934][T17366]  dump_stack_lvl+0xe8/0x150
[  567.780964][T17366]  should_fail_ex+0x40c/0x560
[  567.781009][T17366]  ? sock_alloc_inode+0x2c/0x1a0
[  567.781034][T17366]  should_failslab+0xa8/0x100
[  567.781066][T17366]  kmem_cache_alloc_lru_noprof+0x87/0x640
[  567.781096][T17366]  ? __pfx_sock_alloc_inode+0x10/0x10
[  567.781119][T17366]  sock_alloc_inode+0x2c/0x1a0
[  567.781142][T17366]  ? __pfx_sock_alloc_inode+0x10/0x10
[  567.781165][T17366]  alloc_inode+0x6a/0x1b0
[  567.781187][T17366]  __sock_create+0x12d/0x9d0
[  567.781212][T17366]  ? _raw_spin_unlock+0x28/0x50
[  567.781236][T17366]  ? alloc_fd+0x651/0x6c0
[  567.781258][T17366]  __sys_socket_file+0xc7/0x160
[  567.781285][T17366]  io_socket+0x10a/0x380
[  567.781309][T17366]  __io_issue_sqe+0x188/0x4d0
[  567.781335][T17366]  io_issue_sqe+0x16d/0x1000
[  567.781362][T17366]  io_submit_sqes+0xd26/0x2310
[  567.781400][T17366]  __se_sys_io_uring_enter+0x35b/0x1bb0
[  567.781430][T17366]  ? __fget_files+0x3a2/0x420
[  567.781454][T17366]  ? __pfx___se_sys_io_uring_enter+0x10/0x10
[  567.781477][T17366]  ? fput+0xa0/0xd0
[  567.781498][T17366]  ? ksys_write+0x242/0x270
[  567.781526][T17366]  ? __pfx_ksys_write+0x10/0x10
[  567.781554][T17366]  ? rcu_is_watching+0x15/0xb0
[  567.781576][T17366]  ? __x64_sys_io_uring_enter+0x21/0xf0
[  567.781617][T17366]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.781640][T17366]  do_syscall_64+0x174/0x580
[  567.781668][T17366]  ? trace_irq_disable+0x3b/0x140
[  567.781698][T17366]  ? clear_bhb_loop+0x40/0x90
[  567.781722][T17366]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  567.781743][T17366] RIP: 0033:0x7f263ab9ce59
[  567.781762][T17366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  567.781781][T17366] RSP: 002b:00007f263ba4b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[  567.781805][T17366] RAX: ffffffffffffffda RBX: 00007f263ae15fa0 RCX: 00007f263ab9ce59
[  567.781822][T17366] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000
[  567.781836][T17366] RBP: 00007f263ba4b090 R08: 0000000000000000 R09: 0000000000000000
[  567.781850][T17366] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000002
[  567.781864][T17366] R13: 00007f263ae16038 R14: 00007f263ae15fa0 R15: 00007f263af3fa48
[  567.781889][T17366]  </TASK>
[  567.782054][ T7947] usb 5-1: no configurations
[  567.922285][T17361] syz.2.3604 (17361): drop_caches: 1
[  567.926530][T17366] socket: no more sockets
[  568.061404][ T7947] usb 5-1: can't read configurations, error -22
[  568.067958][ T7947] usb usb5-port1: attempt power cycle
[  568.201408][T17360] syz.2.3604 (17360): drop_caches: 1
[  568.304683][T17378] FAULT_INJECTION: forcing a failure.
[  568.304683][T17378] name failslab, interval 1, probability 0, space 0, times 0
[  568.321027][T17378] CPU: 0 UID: 0 PID: 17378 Comm: syz.2.3610 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  568.321063][T17378] Tainted: [L]=SOFTLOCKUP
[  568.321072][T17378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  568.321086][T17378] Call Trace:
[  568.321095][T17378]  <TASK>
[  568.321105][T17378]  dump_stack_lvl+0xe8/0x150
[  568.321135][T17378]  should_fail_ex+0x40c/0x560
[  568.321172][T17378]  should_failslab+0xa8/0x100
[  568.321204][T17378]  __kmalloc_noprof+0xe8/0x750
[  568.321231][T17378]  ? tomoyo_encode+0x2ad/0x570
[  568.321255][T17378]  tomoyo_encode+0x2ad/0x570
[  568.321278][T17378]  tomoyo_realpath_from_path+0x5fa/0x640
[  568.321305][T17378]  ? tomoyo_path_number_perm+0x219/0x5f0
[  568.321334][T17378]  tomoyo_path_number_perm+0x246/0x5f0
[  568.321364][T17378]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  568.321393][T17378]  ? __memcg_slab_post_alloc_hook+0x48f/0xe60
[  568.321426][T17378]  ? rcu_is_watching+0x15/0xb0
[  568.321459][T17378]  ? __pfx_current_check_access_path+0x10/0x10
[  568.321500][T17378]  ? d_splice_alias_ops+0x119/0x440
[  568.321529][T17378]  ? d_splice_alias+0x12/0x30
[  568.321567][T17378]  ? lookup_one_qstr_excl+0x1d4/0x360
[  568.321594][T17378]  tomoyo_path_mkdir+0xb0/0xf0
[  568.321618][T17378]  ? __pfx_tomoyo_path_mkdir+0x10/0x10
[  568.321643][T17378]  ? __pfx_filename_create+0x10/0x10
[  568.321673][T17378]  security_path_mkdir+0x169/0x350
[  568.321697][T17378]  filename_mkdirat+0x200/0x510
[  568.321725][T17378]  ? __might_fault+0xcb/0x130
[  568.321752][T17378]  ? __pfx_filename_mkdirat+0x10/0x10
[  568.321782][T17378]  ? do_getname+0x151/0x250
[  568.321814][T17378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.321837][T17378]  __se_sys_mkdirat+0x35/0x150
[  568.321866][T17378]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.321889][T17378]  do_syscall_64+0x174/0x580
[  568.321918][T17378]  ? trace_irq_disable+0x3b/0x140
[  568.321949][T17378]  ? clear_bhb_loop+0x40/0x90
[  568.321973][T17378]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  568.321996][T17378] RIP: 0033:0x7f8ae439bcc7
[  568.322016][T17378] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  568.322036][T17378] RSP: 002b:00007f8ae51f3e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  568.322061][T17378] RAX: ffffffffffffffda RBX: 00007f8ae51f3ee0 RCX: 00007f8ae439bcc7
[  568.322077][T17378] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c
[  568.322092][T17378] RBP: 0000200000002040 R08: 0000000000000000 R09: 0000000000000000
[  568.322107][T17378] R10: 0000200000002040 R11: 0000000000000246 R12: 0000200000000000
[  568.322122][T17378] R13: 00007f8ae51f3ea0 R14: 0000000000000000 R15: 0000200000000280
[  568.322145][T17378]  </TASK>
[  568.325061][T17378] ERROR: Out of memory at tomoyo_realpath_from_path.
[  568.623668][T17381] fuse: Unknown parameter 'group_iêUÊÔd'
[  568.680827][ T7947] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  568.710557][ T7947] usb 5-1: no configurations
[  568.715343][ T7947] usb 5-1: can't read configurations, error -22
[  568.750914][T17385] netlink: 'syz.5.3612': attribute type 10 has an invalid length.
[  568.869297][ T7947] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  568.901595][ T7947] usb 5-1: no configurations
[  568.906406][ T7947] usb 5-1: can't read configurations, error -22
[  568.913519][ T7947] usb usb5-port1: unable to enumerate USB device
[  569.375553][T17393] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3614'.
[  569.629717][ T7947] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  569.779482][ T7947] usb 2-1: Using ep0 maxpacket: 32
[  569.786359][ T7947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  569.797846][ T7947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  569.807728][ T7947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  569.821563][ T7947] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  569.832182][ T7947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.844406][ T7947] usb 2-1: config 0 descriptor??
[  570.136451][ T7947] usbhid 2-1:0.0: can't add hid device: -71
[  570.142643][ T7947] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  570.151753][ T5672] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  570.163156][ T7947] usb 2-1: USB disconnect, device number 93
[  570.234571][T17405] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3620'.
[  570.320780][ T5672] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  570.331486][ T5672] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  570.345777][ T5672] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  570.360416][T17405] syz.3.3620 (17405): drop_caches: 1
[  570.368506][ T5672] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  570.386728][ T5672] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  570.405135][ T5672] usb 6-1: Product: syz
[  570.411461][ T5672] usb 6-1: Manufacturer: syz
[  570.420986][ T5672] usb 6-1: SerialNumber: syz
[  570.433417][ T5672] usb 6-1: config 0 descriptor??
[  570.438507][T17406] syz.3.3620 (17406): drop_caches: 1
[  570.449353][T17399] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  570.459857][T17399] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  570.480074][ T5672] usb 6-1: ucan: probing device on interface #0
[  570.512353][T17405] syz.3.3620 (17405): drop_caches: 1
[  570.638325][T17411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3622'.
[  570.680576][ T5672] usb 6-1: ucan: device protocol version 0 is not supported
[  570.693734][ T5672] usb 6-1: ucan: probe failed; try to update the device firmware
[  570.744954][ T5672] usb 6-1: USB disconnect, device number 11
[  570.812189][T17422] FAULT_INJECTION: forcing a failure.
[  570.812189][T17422] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  570.847631][T17422] CPU: 0 UID: 0 PID: 17422 Comm: syz.4.3625 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  570.847668][T17422] Tainted: [L]=SOFTLOCKUP
[  570.847676][T17422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  570.847689][T17422] Call Trace:
[  570.847698][T17422]  <TASK>
[  570.847707][T17422]  dump_stack_lvl+0xe8/0x150
[  570.847736][T17422]  should_fail_ex+0x40c/0x560
[  570.847774][T17422]  prepare_alloc_pages+0x230/0x650
[  570.847808][T17422]  __alloc_frozen_pages_noprof+0x12f/0x380
[  570.847840][T17422]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  570.847872][T17422]  ? __pfx_policy_nodemask+0x10/0x10
[  570.847902][T17422]  ? ima_match_policy+0x106/0x21c0
[  570.848002][T17422]  ? rcu_is_watching+0x15/0xb0
[  570.848028][T17422]  alloc_pages_mpol+0x212/0x380
[  570.848061][T17422]  alloc_pages_noprof+0xac/0x2a0
[  570.848093][T17422]  pte_alloc_one+0x22/0x370
[  570.848120][T17422]  __pte_alloc+0x25/0x1a0
[  570.848150][T17422]  do_pte_missing+0x2eaa/0x3540
[  570.848179][T17422]  ? mtree_range_walk+0x707/0x8b0
[  570.848217][T17422]  handle_mm_fault+0x1b36/0x3080
[  570.848247][T17422]  ? handle_mm_fault+0xec/0x3080
[  570.848273][T17422]  ? __pfx_handle_mm_fault+0x10/0x10
[  570.848306][T17422]  ? lock_mm_and_find_vma+0xa7/0x340
[  570.848334][T17422]  do_user_addr_fault+0x744/0x1340
[  570.848363][T17422]  exc_page_fault+0x6a/0xc0
[  570.848391][T17422]  asm_exc_page_fault+0x26/0x30
[  570.848413][T17422] RIP: 0010:__put_user_4+0xd/0x30
[  570.848440][T17422] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 c7 8d 03 00 90 90 90 90 90 90 90 90 90 90
[  570.848460][T17422] RSP: 0018:ffffc90004b3f998 EFLAGS: 00050202
[  570.848482][T17422] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000040
[  570.848497][T17422] RDX: 0000000000000000 RSI: ffffffff8c292100 RDI: ffffffff8c2920c0
[  570.848512][T17422] RBP: ffffc90004b3fb10 R08: 0000000000000001 R09: 0000000000000000
[  570.848527][T17422] R10: 000000000000894b R11: 0000000000000000 R12: 0000000000000000
[  570.848541][T17422] R13: ffffffff8feb0f68 R14: dffffc0000000000 R15: 1ffff92000967f38
[  570.848567][T17422]  sk_ioctl+0x3f8/0x6d0
[  570.848595][T17422]  ? __pfx_sk_ioctl+0x10/0x10
[  570.848640][T17422]  inet_ioctl+0x484/0x560
[  570.848670][T17422]  ? __pfx_inet_ioctl+0x10/0x10
[  570.848698][T17422]  ? lock_release+0x4b/0x3c0
[  570.848729][T17422]  ? kfree+0x1c5/0x640
[  570.848751][T17422]  ? tomoyo_path_number_perm+0x4ba/0x5f0
[  570.848790][T17422]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  570.848822][T17422]  sock_do_ioctl+0x101/0x320
[  570.848845][T17422]  ? __pfx_sock_do_ioctl+0x10/0x10
[  570.848865][T17422]  ? hook_file_ioctl+0x1f0/0x5c0
[  570.848903][T17422]  sock_ioctl+0x57a/0x7e0
[  570.848923][T17422]  ? lock_release+0x4b/0x3c0
[  570.848954][T17422]  ? __pfx_sock_ioctl+0x10/0x10
[  570.848976][T17422]  ? __fget_files+0x2a/0x420
[  570.848999][T17422]  ? __fget_files+0x3a2/0x420
[  570.849021][T17422]  ? __fget_files+0x2a/0x420
[  570.849044][T17422]  ? bpf_lsm_file_ioctl+0x9/0x20
[  570.849072][T17422]  ? __pfx_sock_ioctl+0x10/0x10
[  570.849093][T17422]  __se_sys_ioctl+0xfc/0x170
[  570.849122][T17422]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.849144][T17422]  do_syscall_64+0x174/0x580
[  570.849171][T17422]  ? trace_irq_disable+0x3b/0x140
[  570.849199][T17422]  ? clear_bhb_loop+0x40/0x90
[  570.849223][T17422]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  570.849244][T17422] RIP: 0033:0x7efdadf9ce59
[  570.849262][T17422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  570.849282][T17422] RSP: 002b:00007efdaee2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  570.849305][T17422] RAX: ffffffffffffffda RBX: 00007efdae215fa0 RCX: 00007efdadf9ce59
[  570.849322][T17422] RDX: 0000200000000040 RSI: 0000000000005411 RDI: 0000000000000003
[  570.849336][T17422] RBP: 00007efdaee2d090 R08: 0000000000000000 R09: 0000000000000000
[  570.849350][T17422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  570.849364][T17422] R13: 00007efdae216038 R14: 00007efdae215fa0 R15: 00007efdae33fa48
[  570.849389][T17422]  </TASK>
[  571.371482][T17432] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3631'.
[  571.489756][T17432] syz.5.3631 (17432): drop_caches: 1
[  571.613682][T17435] syz.5.3631 (17435): drop_caches: 1
[  571.636382][T17432] syz.5.3631 (17432): drop_caches: 1
[  572.199303][ T7947] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  572.275187][T17471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3639'.
[  572.371282][ T7947] usb 5-1: Using ep0 maxpacket: 8
[  572.393113][ T7947] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  572.407882][ T7947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.416379][ T7947] usb 5-1: Product: syz
[  572.421316][ T7947] usb 5-1: Manufacturer: syz
[  572.426035][ T7947] usb 5-1: SerialNumber: syz
[  572.433373][ T7947] usb 5-1: config 0 descriptor??
[  572.460670][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'.
[  572.645034][ T7947] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  572.673289][ T7947] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  572.717483][ T7947] usb 5-1: USB disconnect, device number 73
[  572.756838][T17481] netlink: 'syz.2.3643': attribute type 2 has an invalid length.
[  572.780695][T17481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3643'.
[  573.064855][   T29] audit: type=1800 audit(1781828681.002:901): pid=17488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3644" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  573.219592][    C1] syzkaller0: tun_net_xmit 48
[  573.589407][ T5673] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  573.760621][ T5673] usb 5-1: Using ep0 maxpacket: 16
[  573.777252][ T5673] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.791648][ T5673] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  573.803316][ T5673] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  573.818508][ T5673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.828889][ T5673] usb 5-1: Product: syz
[  573.836498][ T5673] usb 5-1: Manufacturer: syz
[  573.841582][ T5673] usb 5-1: SerialNumber: syz
[  573.851223][ T5673] r8152-cfgselector 5-1: Unknown version 0x0000
[  573.861958][ T5673] r8152-cfgselector 5-1: config 0 descriptor??
[  574.042316][T17497] ip6erspan0: entered allmulticast mode
[  574.079988][T17454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3626'.
[  574.215795][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'.
[  574.239430][T17502] openvswitch: netlink: Invalid VLAN frame
[  575.407145][ T5620] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260
[  575.449149][T17520] FAULT_INJECTION: forcing a failure.
[  575.449149][T17520] name failslab, interval 1, probability 0, space 0, times 0
[  575.471824][T17520] CPU: 0 UID: 0 PID: 17520 Comm: syz.5.3652 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  575.471858][T17520] Tainted: [L]=SOFTLOCKUP
[  575.471866][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  575.471880][T17520] Call Trace:
[  575.471890][T17520]  <TASK>
[  575.471900][T17520]  dump_stack_lvl+0xe8/0x150
[  575.471929][T17520]  should_fail_ex+0x40c/0x560
[  575.471964][T17520]  should_failslab+0xa8/0x100
[  575.471996][T17520]  __kmalloc_noprof+0xe8/0x750
[  575.472023][T17520]  ? security_task_alloc+0x4d/0x330
[  575.472055][T17520]  security_task_alloc+0x4d/0x330
[  575.472084][T17520]  ? copy_process+0xd2b/0x42e0
[  575.472113][T17520]  copy_process+0x1c57/0x42e0
[  575.472150][T17520]  ? copy_process+0xd2b/0x42e0
[  575.472179][T17520]  ? __pfx_copy_process+0x10/0x10
[  575.472208][T17520]  ? __raw_spin_lock_init+0x45/0x100
[  575.472237][T17520]  ? mutex_init_lockdep+0xdf/0x110
[  575.472261][T17520]  vhost_task_create+0x1f9/0x380
[  575.472284][T17520]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  575.472319][T17520]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  575.472348][T17520]  ? __pfx_vhost_task_create+0x10/0x10
[  575.472373][T17520]  ? __pfx_vhost_task_fn+0x10/0x10
[  575.472398][T17520]  ? kasan_save_track+0x4f/0x80
[  575.472423][T17520]  ? kasan_save_track+0x3e/0x80
[  575.472447][T17520]  ? kasan_save_free_info+0x40/0x50
[  575.472467][T17520]  ? __kasan_slab_free+0x5c/0x80
[  575.472493][T17520]  ? kfree+0x1c5/0x640
[  575.472516][T17520]  kvm_mmu_post_init_vm+0x147/0x2b0
[  575.472547][T17520]  kvm_arch_vcpu_ioctl_run+0x11f/0x2070
[  575.472584][T17520]  ? __mutex_trylock_common+0x15f/0x270
[  575.472610][T17520]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  575.472643][T17520]  ? rcu_is_watching+0x15/0xb0
[  575.472665][T17520]  ? trace_contention_end+0x3d/0x140
[  575.472691][T17520]  ? __mutex_lock+0x30d/0x1550
[  575.472720][T17520]  ? rcu_is_watching+0x15/0xb0
[  575.472741][T17520]  ? trace_irq_enable+0x3b/0x140
[  575.472772][T17520]  ? rcu_is_watching+0x15/0xb0
[  575.472798][T17520]  ? kvm_vcpu_ioctl+0x27f/0xfd0
[  575.472826][T17520]  ? get_task_pid+0x22/0x310
[  575.472845][T17520]  ? do_raw_write_lock+0x11d/0x260
[  575.472883][T17520]  ? rcu_is_watching+0x15/0xb0
[  575.472905][T17520]  ? lock_release+0x4b/0x3c0
[  575.472937][T17520]  ? get_task_pid+0x22/0x310
[  575.472960][T17520]  kvm_vcpu_ioctl+0xa61/0xfd0
[  575.472989][T17520]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  575.473008][T17520]  ? hook_file_ioctl+0x1f0/0x5c0
[  575.473036][T17520]  ? lock_release+0x4b/0x3c0
[  575.473061][T17520]  ? __fget_files+0x2a/0x420
[  575.473076][T17520]  ? __fget_files+0x3a2/0x420
[  575.473091][T17520]  ? __fget_files+0x2a/0x420
[  575.473107][T17520]  ? bpf_lsm_file_ioctl+0x9/0x20
[  575.473127][T17520]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  575.473147][T17520]  __se_sys_ioctl+0xfc/0x170
[  575.473167][T17520]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.473184][T17520]  do_syscall_64+0x174/0x580
[  575.473204][T17520]  ? trace_irq_disable+0x3b/0x140
[  575.473225][T17520]  ? clear_bhb_loop+0x40/0x90
[  575.473242][T17520]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  575.473258][T17520] RIP: 0033:0x7f5add59ce59
[  575.473272][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  575.473285][T17520] RSP: 002b:00007f5ade520028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  575.473303][T17520] RAX: ffffffffffffffda RBX: 00007f5add815fa0 RCX: 00007f5add59ce59
[  575.473319][T17520] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000c
[  575.473329][T17520] RBP: 00007f5ade520090 R08: 0000000000000000 R09: 0000000000000000
[  575.473339][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  575.473348][T17520] R13: 00007f5add816038 R14: 00007f5add815fa0 R15: 00007f5add93fa48
[  575.473366][T17520]  </TASK>
[  576.112442][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3655'.
[  576.124304][T17524] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.276988][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3653'.
[  576.356361][T17534] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11)
[  576.363009][T17534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  576.386801][ T7946] r8152-cfgselector 5-1: USB disconnect, device number 74
[  576.403807][T17534] vhci_hcd vhci_hcd.0: Device attached
[  576.432093][T17535] vhci_hcd: connection closed
[  576.433020][ T7093] vhci_hcd vhci_hcd.2: stop threads
[  576.460619][ T7093] vhci_hcd vhci_hcd.2: release socket
[  576.475647][ T7093] vhci_hcd vhci_hcd.2: disconnect device
[  576.509803][ T7947] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  576.660960][ T7947] usb 6-1: config 2 has an invalid interface number: 184 but max is 0
[  576.670559][ T7947] usb 6-1: config 2 has no interface number 0
[  576.676976][ T7947] usb 6-1: config 2 interface 184 altsetting 7 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  576.693311][ T7947] usb 6-1: config 2 interface 184 has no altsetting 0
[  576.703202][ T7947] usb 6-1: New USB device found, idVendor=1c9e, idProduct=9b02, bcdDevice=29.42
[  576.712890][ T7947] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.721893][ T7947] usb 6-1: Product: syz
[  576.727411][ T7947] usb 6-1: Manufacturer: syz
[  576.732295][ T7947] usb 6-1: SerialNumber: syz
[  577.178175][T17551] syz.4.3662 (17551): drop_caches: 2
[  577.379296][ T5673] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  577.458030][ T7947] option 6-1:2.184: GSM modem (1-port) converter detected
[  577.486690][ T7947] usb 6-1: USB disconnect, device number 12
[  577.507367][ T7947] option 6-1:2.184: device disconnected
[  577.542011][ T5673] usb 4-1: Using ep0 maxpacket: 16
[  577.562954][ T5673] usb 4-1: config 3 has an invalid interface number: 20 but max is 0
[  577.576483][T17557] FAULT_INJECTION: forcing a failure.
[  577.576483][T17557] name failslab, interval 1, probability 0, space 0, times 0
[  577.580812][ T5673] usb 4-1: config 3 has no interface number 0
[  577.597061][ T5673] usb 4-1: config 3 interface 20 has no altsetting 0
[  577.607922][ T5673] usb 4-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1
[  577.617644][ T5673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  577.622966][T17557] CPU: 1 UID: 0 PID: 17557 Comm: syz.5.3664 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  577.623062][T17557] Tainted: [L]=SOFTLOCKUP
[  577.623094][T17557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  577.623134][T17557] Call Trace:
[  577.623157][T17557]  <TASK>
[  577.623180][T17557]  dump_stack_lvl+0xe8/0x150
[  577.623264][T17557]  should_fail_ex+0x40c/0x560
[  577.623384][T17557]  should_failslab+0xa8/0x100
[  577.623490][T17557]  kmem_cache_alloc_node_noprof+0x8f/0x680
[  577.623557][T17557]  ? rcu_is_watching+0x15/0xb0
[  577.623625][T17557]  ? __alloc_skb+0x1d7/0x7a0
[  577.623701][T17557]  ? trace_irq_enable+0x3b/0x140
[  577.623785][T17557]  __alloc_skb+0x1d7/0x7a0
[  577.623865][T17557]  netlink_ack+0x136/0xb30
[  577.623941][T17557]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  577.624028][T17557]  ? __netlink_lookup+0xc6/0x8b0
[  577.624090][T17557]  ? rcu_is_watching+0x15/0xb0
[  577.624156][T17557]  netlink_rcv_skb+0x2a4/0x4a0
[  577.624250][T17557]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  577.624327][T17557]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  577.624421][T17557]  ? net_generic+0x1e/0x240
[  577.624487][T17557]  ? net_generic+0x1e/0x240
[  577.624554][T17557]  ? netlink_deliver_tap+0x2e/0x1b0
[  577.624646][T17557]  netlink_unicast+0x7bb/0x940
[  577.624749][T17557]  netlink_sendmsg+0x813/0xb40
[  577.624859][T17557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.624946][T17557]  ? aa_sock_msg_perm+0xf1/0x1b0
[  577.625043][T17557]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  577.625109][T17557]  ? __pfx_netlink_sendmsg+0x10/0x10
[  577.625194][T17557]  ____sys_sendmsg+0x9b9/0xa20
[  577.625291][T17557]  ? __pfx_____sys_sendmsg+0x10/0x10
[  577.625374][T17557]  ? lock_release+0x4b/0x3c0
[  577.625461][T17557]  ? import_iovec+0x73/0xa0
[  577.625538][T17557]  ___sys_sendmsg+0x2a5/0x360
[  577.625608][T17557]  ? rcu_is_watching+0x15/0xb0
[  577.625661][T17557]  ? get_pid_task+0x20/0x1f0
[  577.625692][T17557]  ? __pfx____sys_sendmsg+0x10/0x10
[  577.625724][T17557]  ? rcu_is_watching+0x15/0xb0
[  577.625766][T17557]  ? __fget_files+0x2a/0x420
[  577.625786][T17557]  ? __fget_files+0x3a2/0x420
[  577.625811][T17557]  __x64_sys_sendmsg+0x1b1/0x290
[  577.625853][T17557]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  577.625976][T17557]  ? rcu_is_watching+0x15/0xb0
[  577.626047][T17557]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.626123][T17557]  do_syscall_64+0x174/0x580
[  577.626208][T17557]  ? trace_irq_disable+0x3b/0x140
[  577.626287][T17557]  ? clear_bhb_loop+0x40/0x90
[  577.626351][T17557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  577.626407][T17557] RIP: 0033:0x7f5add59ce59
[  577.626469][T17557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  577.626517][T17557] RSP: 002b:00007f5ade520028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  577.626573][T17557] RAX: ffffffffffffffda RBX: 00007f5add815fa0 RCX: 00007f5add59ce59
[  577.626616][T17557] RDX: 000000000000cc04 RSI: 00002000000018c0 RDI: 0000000000000003
[  577.626650][T17557] RBP: 00007f5ade520090 R08: 0000000000000000 R09: 0000000000000000
[  577.626692][T17557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  577.626725][T17557] R13: 00007f5add816038 R14: 00007f5add815fa0 R15: 00007f5add93fa48
[  577.626789][T17557]  </TASK>
[  577.989281][ T5673] usb 4-1: Product: syz
[  578.008108][ T5673] usb 4-1: Manufacturer: syz
[  578.012864][ T5673] usb 4-1: SerialNumber: syz
[  578.251270][T17550] loop5: detected capacity change from 0 to 7
[  578.280521][T17550] Dev loop5: unable to read RDB block 7
[  578.286204][T17550]  loop5: unable to read partition table
[  578.292005][ T7944] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  578.299975][T17550] loop5: partition table beyond EOD, truncated
[  578.306303][T17550] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  578.459315][ T7944] usb 6-1: Using ep0 maxpacket: 16
[  578.468304][ T7944] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  578.485414][ T7944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  578.495822][ T7944] usb 6-1: Product: syz
[  578.503037][ T7944] usb 6-1: Manufacturer: syz
[  578.507800][ T7944] usb 6-1: SerialNumber: syz
[  578.517830][ T7944] r8152-cfgselector 6-1: Unknown version 0x0000
[  578.524922][ T7944] r8152-cfgselector 6-1: config 0 descriptor??
[  578.592290][T17574] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3)
[  578.598848][T17574] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  578.620819][T17574] vhci_hcd vhci_hcd.0: Device attached
[  578.859361][ T7464] usb 41-1: new low-speed USB device number 10 using vhci_hcd
[  578.879247][ T7939] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  579.023970][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.044768][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.049605][ T7939] usb 5-1: Using ep0 maxpacket: 8
[  579.063084][T17578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3671'.
[  579.071376][ T7939] usb 5-1: config 0 has no interfaces?
[  579.072896][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3671'.
[  579.078145][ T7939] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  579.099123][ T7939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  579.112189][ T7939] usb 5-1: config 0 descriptor??
[  579.323320][   T29] audit: type=1400 audit(1781828687.262:902): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AAE86AD47AA0D9495E6D80F7BDE2D18FFB36CF152AED2D408FB58E305FC8E2F2F7D91F81B621CC4214D4A27E1614FBEE0BEAC8F4A045070B770212D46D4A2DF096B791F2A4BA218E12CB76AA24945B70A7C9DD5EDEAC52B5A876F73CFBE66371A72F11F3D9544D6B59B4A5541DCEF5CBF11FFFF37DFD147CCA3E5098A207BE806EA7167101F8C1B5C8FE41E170FD0C775DBC5BE0B6D3AB625AB702E5B1DC15F9C4B3D09BE812F340E681E0694F5BADF640DA3FDFC2F929B4C2BEB9A592C577287B6021BFEEC24146C7F95608BB60A736207A09D9F47E89C4044EADDE57CDEFD15F25B822D2EAF2205DF0D6B71B63EE0B63CB598F26509AF36983578F6F4198A0843CC1B1BD780015007AB9709CC6211E3B5C685B972B5C5E95F054A7A9FE149282F679C8466B9734E3850EC98419DD0C887715902F9E7802842085BC606F30C2654869E9E3701FD0FC69137FE165592689465EEBD5CAFAD7C29DE2ADADEC42A818D8EE389CA1FE33A1EF23617C89116A3A458B56612E4C36C43A9150D5331ADBB0BEB01A062B1F1349FC2ECEA76CB7C40CDFE378185F3099B1D71414D0FDA5A47F8593260CC0BD723A4CCA81435F04
[  579.323700][T17574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.427616][T17574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.436181][T17583] syzkaller0: create flow: hash 1192233789 index 2
[  579.449585][ T7944] syzkaller0: tun_net_xmit 76
[  579.492351][T17582] syzkaller0: delete flow: hash 1192233789 index 2
[  579.509308][T17575] usb 41-1: recv xbuf, 0
[  579.515254][   T13] vhci_hcd vhci_hcd.4: stop threads
[  579.521289][   T13] vhci_hcd vhci_hcd.4: release socket
[  579.527145][   T13] vhci_hcd vhci_hcd.4: disconnect device
[  579.579745][ T7464] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  579.823020][T17593] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  579.901018][ T7939] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  580.061775][ T7939] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32
[  580.071814][ T7939] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253
[  580.084361][ T7939] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac
[  580.094393][ T7939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.103083][ T7939] usb 3-1: Product: syz
[  580.107497][ T7939] usb 3-1: Manufacturer: syz
[  580.112255][ T7939] usb 3-1: SerialNumber: syz
[  580.120239][ T7939] usb 3-1: config 0 descriptor??
[  580.129033][ T7939] gspca_main: sunplus-2.14.0 probing 055f:c630
[  581.238322][ T7944] r8152-cfgselector 6-1: USB disconnect, device number 13
[  581.278613][   T29] audit: type=1800 audit(1781828689.212:903): pid=17613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3681" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[  581.370729][ T4987] Dev loop5: unable to read RDB block 7
[  582.109933][ T7939] gspca_sunplus: reg_r err -110
[  582.114980][ T7939] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  584.810245][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  584.833250][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  584.862974][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  584.889661][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  584.913122][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  584.942730][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  584.969742][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  584.992686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  585.022635][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  585.049732][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  585.566339][ T4987]  loop5: unable to read partition table
[  585.949008][T12680] Bluetooth: hci1: command 0x0406 tx timeout
[  585.964925][ T4987] loop5: partition table beyond EOD, truncated
[  586.881500][ T5673] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.20/input/input64
[  588.582046][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  597.579189][    C0] sched: DL replenish lagged too much
[  598.914232][ T7944] usb 3-1: USB disconnect, device number 83
[  602.142372][T12680] Bluetooth: hci0: command 0x0406 tx timeout
[  625.148533][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  625.163627][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  627.792016][T17619] Bluetooth: hci2: command tx timeout
[  629.420183][ T7947] usb 5-1: USB disconnect, device number 75
[  662.565865][T17621] Bluetooth: hci4: command tx timeout
[  663.652643][ T4972] bcm5974 4-1:3.20: could not read from device
[  689.003657][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  689.035677][ T1326] ieee802154 phy1 wpan1: encryption failed: -22
[  701.234079][    C1] syzkaller0: tun_net_xmit 48
[  711.466898][    C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured!
[  732.939144][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  732.946147][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P17601/1:b..l
[  732.954195][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=107673, q=862788 ncpus=2)
[  732.962313][    C0] task:syz.1.3679      state:R  running task     stack:25904 pid:17601 tgid:17601 ppid:5635   task_flags:0x400040 flags:0x00080000
[  732.975872][    C0] Call Trace:
[  732.979190][    C0]  <TASK>
[  732.982159][    C0]  __schedule+0x17d9/0x56c0
[  732.986732][    C0]  ? __pfx___schedule+0x10/0x10
[  732.991629][    C0]  ? unwind_next_frame+0x8f/0x2550
[  732.996790][    C0]  ? rcu_is_watching+0x15/0xb0
[  733.001599][    C0]  ? rcu_is_watching+0x15/0xb0
[  733.006403][    C0]  preempt_schedule_irq+0x4d/0xa0
[  733.011499][    C0]  irqentry_exit+0x14f/0x8f0
[  733.016142][    C0]  ? trace_irq_disable+0x3b/0x140
[  733.021225][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  733.027280][    C0] RIP: 0010:unwind_next_frame+0x169/0x2550
[  733.033168][    C0] Code: f6 03 03 0f 85 fa 19 00 00 49 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 04 24 42 0f b6 04 20 84 c0 0f 85 92 1c 00 00 4c 89 7c 24 10 <4c> 89 6c 24 50 0f b6 1b 48 8b 44 24 20 42 80 3c 20 00 4d 8d 7e 48
[  733.052822][    C0] RSP: 0018:ffffc90004c1f780 EFLAGS: 00000246
[  733.058921][    C0] RAX: 0000000000000000 RBX: ffffc90004c1f85d RCX: 0000000080000001
[  733.066902][    C0] RDX: 0000000000000000 RSI: ffffffff8c292100 RDI: ffffffff8c2920c0
[  733.074908][    C0] RBP: 1ffff92000983f0c R08: 0000000000000000 R09: 0000000000000000
[  733.082896][    C0] R10: ffffc90004c1f878 R11: ffffffff81b116c0 R12: dffffc0000000000
[  733.090885][    C0] R13: ffffffff8176a21f R14: ffffc90004c1f828 R15: 1ffff92000983f05
[  733.099060][    C0]  ? unwind_next_frame+0x8f/0x2550
[  733.104212][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  733.110482][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.116676][    C0]  ? unwind_next_frame+0x8f/0x2550
[  733.121817][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  733.128002][    C0]  arch_stack_walk+0x11b/0x150
[  733.132793][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.138892][    C0]  stack_trace_save+0xa9/0x100
[  733.143676][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  733.149061][    C0]  ? kfree+0x1c5/0x640
[  733.153156][    C0]  ? unix_release+0x92/0xd0
[  733.157771][    C0]  ? sock_close+0xad/0x220
[  733.162200][    C0]  ? __fput+0x418/0xa50
[  733.166368][    C0]  ? task_work_run+0x1d9/0x270
[  733.171136][    C0]  ? exit_to_user_mode_loop+0x1fa/0x730
[  733.176695][    C0]  ? do_syscall_64+0x353/0x580
[  733.181468][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.187545][    C0]  kasan_save_track+0x3e/0x80
[  733.192231][    C0]  ? kasan_save_track+0x3e/0x80
[  733.197092][    C0]  ? kasan_save_free_info+0x40/0x50
[  733.202318][    C0]  ? __kasan_slab_free+0x5c/0x80
[  733.207274][    C0]  ? kmem_cache_free+0x182/0x650
[  733.212221][    C0]  ? unix_release_sock+0xa11/0xce0
[  733.217378][    C0]  ? unix_release+0x92/0xd0
[  733.221895][    C0]  ? sock_close+0xad/0x220
[  733.226317][    C0]  ? __fput+0x418/0xa50
[  733.230476][    C0]  ? task_work_run+0x1d9/0x270
[  733.235250][    C0]  ? exit_to_user_mode_loop+0x1fa/0x730
[  733.240810][    C0]  ? do_syscall_64+0x353/0x580
[  733.245585][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.251674][    C0]  ? unix_release_sock+0xa11/0xce0
[  733.256802][    C0]  kasan_save_free_info+0x40/0x50
[  733.261830][    C0]  __kasan_slab_free+0x5c/0x80
[  733.266608][    C0]  kmem_cache_free+0x182/0x650
[  733.271400][    C0]  unix_release_sock+0xa11/0xce0
[  733.276351][    C0]  ? __pfx_unix_release_sock+0x10/0x10
[  733.281831][    C0]  ? down_write+0x16d/0x200
[  733.286348][    C0]  ? __pfx_down_write+0x10/0x10
[  733.291308][    C0]  unix_release+0x92/0xd0
[  733.295647][    C0]  sock_close+0xad/0x220
[  733.299895][    C0]  ? __pfx_sock_close+0x10/0x10
[  733.304749][    C0]  __fput+0x418/0xa50
[  733.308737][    C0]  task_work_run+0x1d9/0x270
[  733.313336][    C0]  ? __pfx_task_work_run+0x10/0x10
[  733.318456][    C0]  ? rcu_is_watching+0x15/0xb0
[  733.323225][    C0]  exit_to_user_mode_loop+0x1fa/0x730
[  733.328623][    C0]  ? rcu_is_watching+0x15/0xb0
[  733.333406][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.339563][    C0]  do_syscall_64+0x353/0x580
[  733.344165][    C0]  ? clear_bhb_loop+0x40/0x90
[  733.348868][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  733.354767][    C0] RIP: 0033:0x7f6bcf19ce59
[  733.359184][    C0] RSP: 002b:00007f6bcf53fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  733.367692][    C0] RAX: 0000000000000000 RBX: 00007f6bcf417da0 RCX: 00007f6bcf19ce59
[  733.375667][    C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  733.383643][    C0] RBP: 00007f6bcf417da0 R08: 0000000000000006 R09: 0000000000000000
[  733.391616][    C0] R10: 00007f6bcf417cb0 R11: 0000000000000246 R12: 000000000008dd73
[  733.399587][    C0] R13: 00007f6bcf41618c R14: 000000000008dad1 R15: 00007f6bcf416180
[  733.407569][    C0]  </TASK>
[  742.208990][   T18] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { P17601 } 13338 jiffies s: 61593 root: 0x0/T
[  742.226634][   T18] rcu: blocking rcu_node structures (internal RCU debug):