last executing test programs:

2m40.730104423s ago: executing program 4 (id=289):
r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x8}, {r1, 0x402}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={[0x4]}, 0x8)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x12300, 0x0)
mknodat$loop(r2, &(0x7f0000000180)='./file0\x00', 0x40, 0x1) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=<r3=>r2, 0x1d, 0x1, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0], <r4=>0x0}, 0x40) (async, rerun: 64)
getpeername$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0x67, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0xb6, 0x8, 0x8, &(0x7f0000000580)}}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@ifindex=r5, 0xffffffffffffffff, 0xe, 0x23, r2, @void, @void, @void, @value=r6, r4}, 0x20)
bind$netlink(r2, &(0x7f0000000700)={0x10, 0x0, 0x25dfdbff}, 0xc) (async, rerun: 64)
syz_clone3(&(0x7f0000000900)={0x80800000, &(0x7f0000000780), &(0x7f00000007c0)=<r7=>0x0, &(0x7f0000000800), {0x2e}, &(0x7f0000000840)=""/10, 0xa, &(0x7f0000000880)=""/53, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x5, {r0}}, 0x58) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f0000001bc0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000980)={0x11c8, 0x25, 0x800, 0x70bd28, 0x25dfdbfe, {0x13}, [@generic="9b761bc9c11856b2a21fdee504384792570091e57c48854a71a16d747df0588e83e581506985e8fa164a2620b0e5274bf4396973d8aa586ebd4f00b481d60e05f9897754059f27eac15e8accd33bf95ae9210a07df8ea74a4221d31eb2693f220600e348718a742755ffbe0cae95d9eef182723fb6b849da62dd950282c13256b3378bf79f0cf22c3803632d6aa61f5eb944ec74b57d4e55103e6ac4f0567f9686e3460e1a5b88f72ea12a0f767afa41bee07ee5c9ce1784f3d45e966fa59086322e4811a4a780df0e0d55c0b8d7a99b65", @generic="3ab1435a0d116fd43d97967a6b80b337eefc550040edd99c0a19ce7ed81c1f5e08aa0ee24ed316657bf0b44151a0881e00a7c3f2aca87c6083d2c1b5e1d753fd6d1b5a2726b1078df7b1874855b4f0cba3ed025b8beb7dbcba563d489bd8c63ed9705e6e5e3f4c6c6111d49bf7214fae42ee527817fa28fee7dbe1a0551000fc7656d690c2f6fd21737ca6204ce1f1bfdfea8eabed85e7cbd47c5c8031c89229b6e01688910b4c967833e458cf2bff9f01dbaeac0bb0", @generic, @nested={0x102c, 0xbb, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @pid=r7}, @generic="90e456bf91cdbf930d62c13fbeadf7d684ae0a5e4dc4c7e80fa29b14f4abc9147565a7a7cad0125ecff476dd0e160a9719740b6f12e85ed7223ed99d940df542a2c21d364c12c471d2e81d6842be6fc7e0ecad7c1771d9c215cc0878b0a1db015aba0ffe21ddc76d086535ff4c5bf965bb2d0bdf65b318fbae9fdb2cd2b72bfc7b9f7fd891389fd74a5a496bfb0b65332461f9fc4a58e1ae576840cce4bb6df11e9a520c255701543acaba657d3ebb06cffcec73d7f463be2ecd908cea0fa100f04a898ec7f84938eeef9e9f6734c97967eb821b4d291e3e879eaead393cefe59dcda2d7975177e9ccf59aa0604b9134fb13cb4f3cbd04de5b5ec9b8739d91098c27c6ecc6f403ec10ae14b7ecbfc182e4216b88edd9de633b8d42cf4d146eafad2e497045f17b019a52fca926647f06ac0be013277d07015a25f4b7cae8b315b1e7f2e38b3246668231202871aa72713357036fd7d430c41896dbca11bf1ef39aa2a18e546b6e47dd70f42f2ab72ed3b3e20264b212a96b5b0ac0c0ebca17b4bbf976a6b72cf2f26c0d0e396c1f238d0d4f3b76fae0e6e1c59cd3616624094c0e05024f0c4a5558042ef902c3e1dde06ec4bb9eee1617e03fc975a7ea640990832b7c1e3b691d1a9f4556219736a51934d4a258b9c6974b149c9ca95018811c6d6aac63a9f7e15e949224df4f571f90dcc0d1f0d10cfd9a59ef51053cb4b14efe67eadb6a89615d479249194dc6f802a3296d4cf6492aa9af4e38b37ee3657aae4d3708af8c558be6b1c31c92c80a1cf3cc81af73794022452974dd756909143b75645709ec7dddd2e4f767385dfae099dece6901ae74ddf54649815284e903558a16943d96683d26dad699770895a3a2a501ef531b537de97984e9dbf3cca3395a89cd35c4717960d1e7cfd7f6613129c768898f1504153045aaa2476162c6502b868789be52b9cae205161fd6ecea38bc8219c0e60d6b250da6a9a39fe2379b7dc2dd7bb6841f4574c8c203e4cac5be8e0be2d25465ccb97a7129d9c33320b9b3ac3491599de1a55d0898b4b54ba67d6667f6bb8ba538c7d45f089abd483e2a2ecdf748d26038641354ce44f8ba814aeadac1d0ce48902bd71e3428efc6e84c2cb73444408119994ded9fe7475dcc6530688532cdcbdd29955ffc5882ada7e996a31900ea630d17dfc9d429069d042706c5a1140dcbd83b9b9d6a04ca66860860cb955e059a848b09fd36401407ce24c013046e1cfaa4cb69aa23aee5b743d1eb1546e1ce1dedcfe622aa4d5bfa78ae1a6db14a3cc5cb9e5588b2b88a0b12191cabf4bbd67b8646506d1b4dbad2961d539b5d5cba826b4fa6ac16d53ec9868cda4ad6842e2debdb1a3dd061d172951a9ee274ef2521df2a0635b38c1b9885be3435c20fc446d1d9c8b4dd48fd504170f52aa715773b637e78bf6ebdbe025aab7fb6744111e3aa66c0d722e9779eb702e6ccbb0d5fb39f01d9bb3f334e883dacc708162bede8e7d581f9b56ace09fbbdef8470fbdb8b95b535f73eb86963ca371193117c132c60704e74ae5378128968bb867525fe84bdfc69e50689da549b6b11e2302b766a126a84b5eb30fccc09af75acc2de88ae4ad2c4bd7c1aa58eb51c5cc9c291c3a7e0558e853cecb801ab0f539b89c021f0631643c49814566f35ee1371779ec71a98b095bcc110b26ba5f1e785aca22fb371cc90d2c09f37bd282034e8d8f4c5f8a9452540241e6be16b2c8ec99df2d7ab1765600319c42d75acf0a36b1739609e81b011d50da9ee4cc14d26bdc4d813d97617836bfc3faac3a16cf77db46567310546838ede44a9a83a162d99765a4f7c08b80d697ac2ccaf3935c4c34871927ff814c99bbe23fd1446cbb7aada6a91b9a26247aad2789eefc2ae6a2415ca98bd31f3becdabf40410e1319e084f9d224cf335cf560f6c9cb63db835b3cf488636e9d051372afe435b9f8546d3b2fe730695ea89b9dedaf7e5193666aaf00260a14798c063a4c47772f3e685e1fc8f5ca1d176b48bdebe9960eb41b26c9b74242f0843e018ed9fb15a973cb4b4858469a055344e00c18b76397305bc7ce3b13db43f7acac612d4a605e2e8333857f5ef69c312f049ee0ad6aeb25741d4aa6c0fc57bfd870b5174bea623c65e55b654ff2c3dd739c48e97b40165ddf81b799a539920c7859fb8b61140e1f50854da6ee7d280acf39a641d0e30351561041da4883a5823f5deca4c3562c9d81739b26e9371a9ff497d28d9bb83d27a007ab99fb063936b1725f3d0c9df5fb8d9113a8d05fb3baab32c8a6af65fbb61e7124a6080ccb3b30cf240860a53b92385f1c12efb2538c28b906b79878108678e5cff9fe75bdb16e33e23ace3f2a209bbd7a5cc8ef5577d8fff1c0e2842aa0579975e0fbcbd111fea63de56d123c8a7c828929af8e12b7129e7a2c7f34cc6a91ee4e0fbee7b0adae93931be5880e8e8b17e5a6c608787043747e1b8635c213fb2f5c91a9cd0be52972c35a70c81bd05f2cb95cc5c72dcbfc1201fa7e4f4943737d5f37d6e97dcd393fad4400259f24d62a5bda84ec566b199463ff074396115dde1499f669018a5ec17b9cffe795dc3dffff6f5509f9fb9260fa3f8c1e1526d442f73130d1522bbd4562717257dd0f938c552cc79277a17d613649d936a4c57358d76a1be0b41bf38927134123175e9fb5d6d99dd8985c11d87b50c3644887ee6cd6253adf43a025e4ab3688dcd4dc01169c690598abd22c1b6b6c29ba6a10c2ed1a13e89bfe9154a3bf3201e0974480ec934805caff2e176f9cf7b0d0edbfe5a977018d1e2b17da953e6e52393d20c7cd0e3530284659393c81428a372b64f92a281ba0ea81f4867dc0b582a5642a720ae8526bb6e4673de76ebcf07f8c370728e3fb9fb65b5bcd8afbfd1027c3049ecbd595c1dc4cc2bd355864b7a765fafc94657fb5d8e403178ac1be6f55722944e34d638082aa308efda228f7db0d19e988a6c05bacb9d27c47883629ee5a7b1c3fa8372404aec5b7f63eedb188b5ac914b15fa6669aef00b68fca76de745f54ac0ffb5d743fb734599daf7f654746d7ed1802f5d336ac7a9fe7d3ea6f001ca0b8993cf6c457f3837f87236fec60484e3aca0877f3ecf5d547b48680a1fb5e7a1d685fa739c4699c42d5a5e97fda6b5b5b582ab44d0f63fed3b680d9cec63260ef1bc66c3e09a43d0d14cd6d672cfb60687c70cbaedd9b49d2b775f71b467c7227386e0fb06625af4784eb339bd45cbc3e7fbe42e3cd8d30d6bdcdbdf2d09f8c990428389a27d7dea47a77b31ec9254e2dccb948d8289eb6640413dfcb635f112e24b3b782e492777959647e421796d58a184f7308c67c3b3524822e113bb6c3692e56c978978a5f47e4206856331cdf86b778f20a1c1e805654a3f1350bd8bd6ed25aae6bcd4b8847f57f3eb03f8a3d36f5ae62ee8de5a34c126cadf9c20b25d7e30e529573efd38943df95cbc16e61cf2bac490ce612c8daa79f49edbd5980138c97819f6e04cce8ac521aeaed539308940a1db27b83a22fb40ab71bf5c466b9c9f1073ed2d0808688c2b71d5745182e526e7461780b0387c17d5a3ab4ec0cc92f0cca556c005cff8979119dbd53aa43c976f7cf9a7c70ea3aa40a3d0f1d6a8572ff1af2d5ae032aa538dacccecefa23091df91a4ca480328a609b46f0d5a21f111fbbcd3ebc317e782db75182b2f2b3afdfc260a22cfa5484b28fd585beb684103e0be14e3a5ab121f48a26d5ab2951a9e7522e2d54620e07b622e4867c099de01395b6d648f1d5dc9f1e6794bba204c6cdb73cabffc33462db7595d3d3d8720c2db78c9196d47e6ea2e95eca61a4b043e9c81e339bb44b0da57e7a7373315c539eec94f842922bc983b8d447866e327333fe1b8e6fba5bb222308f4a41ffa304f27e5d69b0dd3fde3470ff62cdb17fbcbec43eea4d7068597331b73af8fdb26a4833cb55fc8b8aaa3169bb830227d7d2a700b74b42481186091a0dfc387012a270b0bc3937bf468f2424e4a96b79c2b0264d2a55d482baab7f07a1fe2fbd15ea765b03bf89b295fff7c7c742513e1e90dcce9968888ee8f37049fdcef4d92a22bf90288551737e40b84e643141fc36435222d86f7f10177edfe65ac661442d7ae18179050cf8dd85bad4eb09d5aad55629ecbd558cacf6e9bc6b81c6a6e9c7b77e509bcf23781d98e01e8d2ba85ef0c280367e09cdccf9009db425158ecbd2060c6160a992e3996b76fbb29752fae8d446a809b27998e6cfbab8c3ad05f5418c219ecc6716b6b0dbf1d26f198877f45266e00c420dfdefac8b2d320b88a4958d0f54382dbed7b348ef3ef3269cc7285fb45419dd1dd63229f41e26140316b46e54466fbb172af463a0f407609040051cc0222b40dc667350473f1aa8102542b3b7641ffbd65a0b7c629d5fe6175d0f845ed7d30fc21074135a327bb44e1b6e2b5a313b99c5881762050e06507838a2a0198e2aa4f53cae234af65e819bc76f355d44f88673a9b65059abb429c0854e4b73fbcd1e863e823d2001c4c1acf5bbf412f62a7a870b2524a00eed33b85998a67adef3c8ca77fdd027b5a34ce22c6e2fcd6184b8637eeeed8ac489d03ee074b9593a8fb40ca1ea4f8e5b822ea0f0dbfc69fd7f51a34e7586ed214d7f500abb0f435e49cb2b4b188b5086a543f2fa842209f372a2168b6c9296eaf893af38e77f562e87d3e20ae559c76ab16758f81bc64c484d5c6f499fb6e1c966ad833689e76c6fd4de7573dd17942f3e495f3344f79b1d8cdc1d1c44a7c047a1e75a8fe10178f64f6d6c3eb47eae1ad857e4c9c858b7292ccf9b4dbba67d15b57edb25ed152b117d7de1d60e217c120a3ec18bdb1350d6c861633cccd2482fa0c9fb5d779583889acd092d553557faaae3e7d66fc4a677ba57d11c3e7a04e8431600ca8697c3ab5eb20870ff966d9ddce20de27b5836a264453b49b8b61e8be7e549186fc152a6d104c87bfccdd3e58bea156b5a553bd3409bace927a4237a6458d8764604e927520cfe9a3731f16ee7f36817c13a5fdf2e6d4448e3f9aaddb14ea2e3bc045987fc3f6f0f8c0946bbff875f823ff4e0b6d71ab67c765b547902046141cc616f55fac6f556185a6ea5766ca2c4c2ab8538d7eb94254ecee90349c7c15485abd7a86099d90dc8d0d5f353298bf01df156b1240e442087a3bca240741e0c287dadd1074aa6ce77afc5a32ab9948f94425b9acd95a8d63aae1584729a7fc6a89c357c16a4c8d78d131262d8b0ef3e112ffaa384702714aab7d3b6e1c141f75acd9c7a867c68462f98ac809c91316ef5e0c9fe44243b20d204a474ee551ab08395e761475a81ea6c02ad7c0d82adb84ecd054a2d44ad7ecc5579880e4b7064b7ce5009f2c7da2f2748a5e83c104e936a58fa13a1d91724bed83fdfa2a04d01be3b1853a7f8e442180baf4d29947b11128a66de3f60bd5dfd17cecf8c3d67d33b982f706ae3bca1cb05b6d7a7a2f43c3d365eeea79e156add067bbc25c7765ed3060acf040236adb19f558f473bc146768e9e4a4a762545a05ebace870262736f741fde84061829794e0e6e09996c3ad374c5fb2d7793468459782b51adef1e7601b13079420885edcede54cdd1cec4bd44bac15834c10c7e4e5bb4493240d14089254a10f0afdc9259d2ab0dc58b0a4f12f7c94a21ca23ecacad61ff78b71f8421f2467c26fa49414e16afb2b0e0f6c3d36cafc2ab964dbcb5324d4609e0254ed1569f17367102b42350236cf622df295d450b61c3e418a92c31e9fe3cdb", @nested={0x4, 0xa1}, @generic="c2b083c85af4de7d98e3419df83797973372adebd2643137e208dbba"]}]}, 0x11c8}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) (async)
getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000001c00)={@empty, @dev}, &(0x7f0000001c40)=0xc) (async)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001d80)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001cc0)={0x78, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xc4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), r2)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001dc0), 0xc, &(0x7f0000001e80)={&(0x7f0000001e40)={0x24, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x60}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044800}, 0x40c0)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000001f00)={0x0, 0x1ff, [0x6, 0x8, 0x6, 0x8, 0x3, 0x3]})
r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f80), r2)
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002080)={&(0x7f0000001f40), 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={0x48, r9, 0x704, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @loopback}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x2d}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8841)
mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000020c0), 0x21e104, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
ioctl$RTC_PIE_ON(r2, 0x7005)
sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002140)={0x6c, 0x0, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_TUPLE={0x38, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x380}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x1)
r10 = add_key$fscrypt_provisioning(&(0x7f0000002240), &(0x7f0000002280)={'syz', 0x2}, &(0x7f00000022c0)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffd)
keyctl$get_security(0x11, r10, &(0x7f0000002340)=""/42, 0x2a) (async)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000002380)={0x1, 0x0, [{0x80000019, 0x0, 0x2, 0x9, 0x5, 0x4, 0x3800}]}) (async)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000002400)={&(0x7f00000023c0)=[0x0, 0x0, 0x0], 0x3, 0x100000, 0x0, <r11=>0xffffffffffffffff})
openat$cgroup_netprio_ifpriomap(r11, &(0x7f0000002440), 0x2, 0x0)

2m39.954455748s ago: executing program 4 (id=291):
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, 0x0}, 0x108)
timer_settime(r0, 0x1, &(0x7f00000000c0), 0x0)
setrlimit(0x8, &(0x7f0000000100)={0x0, 0x3})
ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000140)={0xa, {0x3, 0x8, 0x966, 0xb404}})
mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$video(0x0, 0x485, 0x40000)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10)
setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000040)=0x9, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)
r4 = dup(0xffffffffffffffff)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000140)="f30fbd020f060f001966b80d010f00d066bad00466ed0f2382d9c8c4e17d50f80f8c8c2e000066ba4200ed"}], 0x1, 0x6a, 0x0, 0x39)
mq_notify(r4, &(0x7f0000000440)={0x0, 0x10, 0x1, @thr={&(0x7f0000000280)="8290d9da25dd5b3a6957278a6ca1ab33a2fbf82766db51c292dd7b53d73c74bc3a489d4d4fef323be5ecf0435014db2b039089b44bad668ff7954c0625d9dda7f459fb62c14b8ebff500558615dfe4eca03faae8f8facab3f2f3f163483c112eeaae5cfa66f6ddd312ad4321063c058cc5bc0d803a1c3d8ac542d1c7a143e0ff9820882295518afdfea63e070e3006d3768dcfea52e0a3aad88a1bbf638b75085a1201", &(0x7f0000000340)="d3d56173dac4f37f770300bb7f7632c25d5c9e8d7de341eff1fb8696701dc61f482d2dc0c3cca0031b613edace0037f9c5123c9cf6c1bf890fb874580e63177acf10412b5d15d11a6d1cdbd2f88657499ffe47cf3e085efd32c1c7babd1009308b9e0ea550c66d43afda7c1b61507c51931949effbebb587c1b8ab0c225a8d3db9eaee49d90f67062e1786ebdb1405eaae9e32dff895ea4e"}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003"], 0xfc}}, 0xd0)

2m39.728852646s ago: executing program 4 (id=294):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0))
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043, r5})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0xcdc}, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
rt_sigqueueinfo(0x0, 0x11, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r9 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}})
close_range(r8, 0xffffffffffffffff, 0x0)

2m36.452016561s ago: executing program 4 (id=309):
socket(0x840000000002, 0x3, 0xfa)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169b82, 0x189)
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
fsopen(&(0x7f00000007c0)='erofs\x00', 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=<r4=>0x0, &(0x7f00000005c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})
io_uring_enter(r3, 0x47bc, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

2m33.975930758s ago: executing program 4 (id=316):
r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff, {0x1f0}}, './file0\x00'})
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x18, 0x4e, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x50, 0x4, 0x2, 0x40}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x88, 0x0, 0x8, 0x20, 0x6}, 0x3d, &(0x7f0000000300)={0x5, 0xf, 0x3d, 0x5, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "4de21afd696e63ce4be2ddc86f3baabd"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "6fe764d3f344367129ebc3f5544981be"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x8, 0x6, 0x6}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3001}}]})
ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000200)=@multiplanar_overlay={0x5, 0x6, 0x4, 0x10, 0x3ba, {}, {0x1, 0x8, 0xc4, 0x7c, 0x7f, 0x9, "e718423b"}, 0x3, 0x3, {&(0x7f0000000100)=[{0x10001, 0x7, {0x6}, 0x3}, {0x3203, 0x2, {0x3}, 0xfffff677}]}, 0xb, 0x0, <r3=>0xffffffffffffffff})
syz_usb_control_io(r1, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
socket$inet6(0xa, 0x3, 0x3a)
socket(0x22, 0x3, 0x3a)
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c)
sendmmsg$inet6(r6, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="82", 0x1}, {&(0x7f0000000280)="ca", 0x1}], 0x2}}], 0x1, 0x4400c800)
sendto$inet6(r6, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r9, 0x0, 0x82, 0x0, &(0x7f0000000280))
syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800)
r10 = signalfd(r3, &(0x7f0000000180)={[0xfff]}, 0x8)
ioctl$KVM_CREATE_VM(r10, 0xae01, 0x1e)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
prctl$PR_MCE_KILL(0x21, 0x1, 0x0)

2m30.320768323s ago: executing program 4 (id=324):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x80400)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xffffffff, 0x1, 0x7, 0x1})
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'user.', '\x00'})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

2m14.612892419s ago: executing program 32 (id=324):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x9, 0x80400)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x4, 0xffffffff, 0x1, 0x7, 0x1})
removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@random={'user.', '\x00'})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)

9.971620058s ago: executing program 1 (id=732):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r2, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000700000035da144f"], 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x0, 0x53, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0xc, 0x20, 0x47, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x9, 0x3880, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0xb, 0x1}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0x2, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2a, 0x4, 0xf9}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x7, 0x4, 0x5, 0x8, 0x80}, 0x0, 0x0, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x444}}, {0xbc, &(0x7f0000000280)=@string={0xbc, 0x3, "b7dd0a96375fc35a0665f36490ac71022188f4ade7545eeb654d610e2a2d87d7440b147633ffc9e09afcdaf7390e4e23111b29c63c89d2fd7466e4ed7fb38cd31cf433a042ee76e726b4703716e4fe1bca6c1574d13b57913e86bc7e934eccd8475457857f5ba1c8601c4f0ee28434e040581cd66c70e996bab5176f21b3fa709571e1c9614374e6f575aaaecc6cb1987249ec28553e2f606e1133b8a4ff28aac00ceb7848e314dac4d02d70434c3ce768c9bf2a6ab370e5145b"}}, {0x45, &(0x7f0000000340)=@string={0x45, 0x3, "7cc71bb91e05cdbe32cb23e30cb27c94a90f3b810bef767a71aa0feebb22bcceffedfe7e6465a388d8b09dad921e6a7771d1c5c2ab1648aa031d1c025afbedff6f3be4"}}, {0x0, 0x0}, {0x2e, &(0x7f0000000440)=@string={0x2e, 0x3, "e281b2b4be03fea5800dc1c1df8c5a0e23cc3cab0643f88fd1dbae916c84531d4bab345e1a54ad9fd76ad65f"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x422}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x140c}}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f0000000080)={0x49df, 0x0, 0x0, 0x35, 0x10, "ec28a144f13d7607"})
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)={0x14, 0x14, 0x601, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

9.38433639s ago: executing program 5 (id=735):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r2, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$SG_SET_DEBUG(r4, 0x227e, &(0x7f00000000c0))
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043, r5})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000140)={@remote}, 0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x44004)
sendmsg$NFT_BATCH(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x24068045}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
rt_sigqueueinfo(0x0, 0x11, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r9 = syz_open_dev$vim2m(&(0x7f0000000380), 0x7f, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000240)={0x1, @pix_mp={0x0, 0x0, 0x32314742, 0x0, 0x4, [{0x2000000}, {}, {}, {0x4}, {0x80000000}]}})
close_range(r8, 0xffffffffffffffff, 0x0)

9.019945242s ago: executing program 0 (id=737):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRESDEC, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x20000800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
socket$inet(0x2, 0x5, 0x2)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xd19, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0xf, @private2, 0xffffffff}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101042)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="9b9f2580764ab62b64845f1df4a13d75853182b38b3617d3ecfff74e9370e5a4703f5d39d6795572a148689d4361ae0a2954423863d4a5e26e067b09a5b29eba75f216158507bedf197c96685a6f335d6b7b82aa1c86dd10d2b8128a0e99616cbf480535a16225db50c47cb65cc5478a20c8c63aacc9ff26ccdf4a1258a275b7acb41a0bebd12e9aea47985af79ca22566f74e49a4e9", 0x96}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4805}, 0x20000050)
sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4901}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x144}}, 0x0)
syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbc02327a98f040800450000b0440200000011907800000000e000000100004e20009c9078010000000300000069eb047c187e143bddcbe699ef7a74002c1a7c6b59dd637719d6395dda566f426e8ae37dc217c78b70a4dc5eeb6f624200e45176f0c8444ad4b18c65ce5eb8dbb3b30234e8bea411688bf272fdef179dff2a09d66208000000000000007067384b03000000e9fc1dfc1701ba18b0a3516f6b94835c625da017fdd0357fa6bc2b0e933988c64a103320b3c42984adc20973362fdd8ecfe3d2"], 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r3, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060300000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x6c}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESOCT=r2, @ANYRESOCT=r1], 0x2c}}, 0x40)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, 0x0, &(0x7f0000000000)=0x56)
mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000280)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x4}, {0xffff, 0xd}, {0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x840)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x9, &(0x7f00000005c0)=0x5, 0x4)

7.936607384s ago: executing program 1 (id=739):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x298, 0x150, 0x168, 0x9, 0x150, 0xb, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0xa8, 0xf0, 0x0, {0xffffff7f, 0x28e}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8)

7.57284971s ago: executing program 0 (id=741):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xffeffffffffffffc]}, 0x8, 0x800)
r5 = syz_io_uring_setup(0xbd7, &(0x7f0000000040)={0x0, 0xe14f, 0x8, 0x1, 0x4000032f, 0x0, r4}, &(0x7f0000000000)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r8 = gettid()
timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r4, 0x7, &(0x7f00000003c0)=[{&(0x7f0000001800)=""/201, 0xc9}], 0x1})
io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.397691328s ago: executing program 1 (id=742):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'ip6gre0\x00', {0x2, 0x0, @local}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x400000000001a)
syz_open_procfs(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019080)=ANY=[@ANYRES32=r1], 0x3c}, 0x1, 0xd, 0x0, 0x4000005}, 0x1aa3c85cb39f0767)
pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x401, 0xff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r6, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffff8})
ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r5, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r6})

6.312583479s ago: executing program 3 (id=744):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x35c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x330, 0x2, [@TCA_U32_SEL={0x214, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff801, 0x7}, {0x7, 0x6, 0x5, 0x400}, {0x73, 0x1400, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7f, 0x1, 0x1, 0x4}, {0x7fffffff, 0x0, 0x9, 0x7}, {0x2, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0xe, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0x6, 0x6, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffffb, 0xd, 0x7f, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x20000007, 0x6, 0xe0}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0x0, 0xb, 0x7}, {0x1, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x7, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0xffff, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0x104, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x5, 0x4}, {0x2, 0xe55, 0x69c, 0x4000000}, {0x2, 0xd033, 0x57, 0x8000}, {0x1, 0x2, 0xa, 0x8}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x7}, {0x7, 0x59, 0x0, 0x40}, {0x8, 0xfffffff9, 0xfffffffa, 0x51}, {0x1000, 0x2, 0x264, 0x9}, {0x4, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x3, 0x2, 0x7, 0x7}, {0x80, 0x3, 0x2, 0x1e0}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x35c}}, 0x24040084)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_mrelease(0xffffffffffffffff, 0x0)
request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="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"/284], 0x9)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
write$cgroup_pid(r7, &(0x7f00000001c0), 0x12)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x1, 0x12)
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000114"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x80)

6.072154169s ago: executing program 0 (id=745):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x40, 0x0)
execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0)
stat(&(0x7f00000002c0)='./file0\x00', 0x0)
execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000640)={[&(0x7f00000005c0)='\xe9\xa8\xb4\xc7\x88\x01 \x92@=\xd8-=x\xe9\xe6]\x1a']}, 0x0) (fail_nth: 20)

4.814585369s ago: executing program 2 (id=746):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x2, 0x8000, 0x86, 0xe2, 0x0, 0xff, 0x3575}, &(0x7f0000000080)=0x20)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
umount2(0x0, 0x2000000)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2, 0x80000001, 0xd55)

4.719836922s ago: executing program 0 (id=747):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$setpipe(r0, 0x4, 0xfffffffffffffffd)
syz_io_uring_setup(0x3ece, &(0x7f0000000040)={0x0, 0x2a0f, 0x2000, 0x2, 0x152, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000140))
vmsplice(r1, &(0x7f0000000300)=[{&(0x7f0000000100)="df", 0x1}], 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x22902, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x74, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x85, 0xb4, 0xbc1, 0x4, 0x2, 0x5, 0x5}}, {0x4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224ff011b00000009040000022a8b6a00090d8bff7f0000100109050b36"], 0x0)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de667701a7c93437583b5f0b285a188098c1ac4ebac40b315ff8db6f736992497879a42b95248fed4d4888970573d0e88ceead26d97e172588a3ad30fbd01b7bbeeaa668e835f7ae3113fe2d949bb47bc0b2c62541714cc0538601ae4bab19d69a5addee134dd447034da6dd89704603d31a3d25b9d5f46cfd43d9e29aac7422920d98e1463256bd4cc929373ad9000000000faf6a95a04ad3b9db9b230f8224a3d6db187a94e5dadfe181d20d3a4bd08e8b0e6eeb79fdee230dd852a36dfc9046d03b8f316b2d460ca5d08c515d914db8ce430ea0237911c440ee750fe787aaffa83b809651c529e4cf68c8219a827ea003c59e3e51b00cd7f9464f37be2eb3e1475819ad37edcc238b85ab205a2b394916815d9cf7bf3f8e3d19a4697756299e21f2afd3ae31e0f09b8153965635216de47156f4e5fc97cb04f9c5e13256be1d9e0a94f9c6387940de1bcd7b532d16ebba216601cf23be6a7c259550bd059a5a7aee85eb558de8201c1d9c7b29e27313f61cf0b07dd790071bdbceabdd32ce2bcc279b1575a1431b03e5dc37307d15a2782175c87dad1a3aadf48b382bea4ae0b423edee0e12ada4c1dacc40bf387630792ab5c7ed6e2ef7e8a77268b0ff8978ccddfa8da4521d24b3fddc70d181c20caa9a584df9b2e"], 0x18}], 0x4924924924924fd, 0x0)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)

4.575993952s ago: executing program 3 (id=748):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x14)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3b0, 0x1d0, 0x268, 0x98, 0x1d0, 0x0, 0x300, 0x300, 0x300, 0x300, 0x300, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1, 0xff000000, 0xff000000, 'veth0_macvtap\x00', 'veth1\x00', {0xff}, {0xff}, 0x32, 0x2, 0x3f}, 0x7a00, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local, 0x4e22}}}, {{@ip={@remote, @multicast2, 0xffffff00, 0xff, 'ipvlan1\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x0, 0x13}, 0x0, 0x70, 0xb0}, @inet=@DSCP={0x0, 'DSCP\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x11, 0xb3, 0x1}}}, {{@ip={@local, @empty, 0x0, 0xff000000, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x38}, 0x0, 0x70, 0x98}, @unspec}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000004a00030000000000000000000a008000", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x44}}, 0x24008880)
sendmsg$netlink(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0xa, 0x1008, 0x0, 0x3}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="c00f0000", @ANYRES16=r6, @ANYBLOB="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"], 0xf40}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0100006800a97800000000000000000a0000000000000004000400f6797df922271cd6b79ea4b828e6275b7ebc5c1c4fd6762d13e26a9b2fcc45946d9bf3"], 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6erspan0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a000105fefdffffffdbdf25000000000000000008000500", @ANYRES32=r8], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000020000100000000000000000102100200000200a50000"], 0x1c}}, 0x4400002c)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/kexec_crash_size', 0x800, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)

4.461912375s ago: executing program 5 (id=749):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) (async)
r1 = syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2)
ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x0, 0x50, 0x1}) (async)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x40, 0xff, 0x0, 0xac}, {0x6, 0x60}]}) (async)
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000240)=0x3ff) (async)
write$ppp(r0, &(0x7f0000000600)='\x00\x00\x00\x00\x00', 0x5) (async)
r2 = syz_usb_connect$rtl8150(0x3, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xff, 0xff, 0x0, 0x40, 0xbda, 0x8150, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x80, 0x0, {{0x9, 0x4, 0x0, 0x7f, 0x3, 0xff, 0x11, 0x1, 0x5, "", {{0x9, 0x5, 0x81, 0x2, 0x40, 0x6, 0x9, 0x4}, {0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x57, 0x6e}, {0x9, 0x5, 0x83, 0x3, 0x240, 0x3, 0x82, 0x8}}}}}}]}}, 0x0) (async)
syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000430008000000"], 0x14}, 0x1, 0x0, 0x0, 0x24000001}, 0x40)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtclass={0x58, 0x28, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x5, 0xfff1}, {0x7}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x47}}, @tclass_kind_options=@c_fq_codel={0xd}, @TCA_RATE={0x6, 0x5, {0x7, 0xfe}}, @TCA_RATE={0x6, 0x5, {0x47, 0x40}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x58}}, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000ac0)) (async)
r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) (async)
r10 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r10, 0x0, 0x0) (async)
syz_usb_control_io(r10, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r11 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
writev(r11, &(0x7f00000002c0)=[{&(0x7f0000000100)="cf5b", 0x2}], 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x7a, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, &(0x7f0000000080)=0x9c) (async)
r12 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f00000002c0)={0x1, r12}) (async)
syz_usb_control_io$rtl8150(r2, &(0x7f0000000580)={0x14, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0003030000000003"]}, 0x0)

4.112415971s ago: executing program 5 (id=750):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001dc0)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x7ff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x1000006, {0x4, 0x63a, 0xfffffffffffffff8, 0x8, 0x3, 0x79, 0x1, 0x7, 0x1, 0x8000, 0x4, r3, r4, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_open_procfs$pagemap(0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000280)={0x11, @empty, 0x4c23, 0x1000, 'wrr\x00', 0x7, 0x8, 0x4002b}, 0x2c)
sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc6010008dff0a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
io_uring_setup(0x1148, &(0x7f0000000300)={0x0, 0xc95e, 0x80, 0x2, 0x30f})

2.980473366s ago: executing program 2 (id=751):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1, 0x0, 0x241}, 0x0)

2.834776502s ago: executing program 1 (id=752):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
fchdir(r0) (async)
fchdir(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)={0x20, 0x6, 0x5, {0x5, 0x23, ')3\r'}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000001c0)={0x4, 0x80000000, 0x2, {0x5, @sdr={0x50424752, 0x1}}, 0xfffffff8})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
r5 = shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x0)
mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
shmdt(r5)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) (async)
writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40840}, 0x40) (async)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x40840}, 0x40)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)

2.484376356s ago: executing program 3 (id=753):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd26, 0x0, {0xa, 0x40, 0xc4, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x6, 0x69cf, 0x840c0000, 0x571e7ba3}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x1000000000000000}, 0x0)

2.441499447s ago: executing program 3 (id=754):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000001740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/161, 0xa1}], 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @empty, 'macvlan1\x00'}}, 0x1e)
sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24048084)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
r3 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'veth1_virt_wifi\x00'})
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0)=0x2, 0x4)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x0, 0x2}, 0x10)

2.224623069s ago: executing program 3 (id=755):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x36c, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfe, {0x0, 0x0, 0x0, r4, {0xf}, {0xa, 0x7}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x340, 0x2, [@TCA_U32_SEL={0x234, 0x5, {0x9, 0x7f, 0x3, 0x200, 0x8, 0x0, 0x3, 0x8, [{0x4, 0x400000, 0x0, 0x2}, {0x4800, 0x1, 0x9, 0x3}, {0x1a8f, 0x9, 0xfffff881, 0x7}, {0xd31, 0x6, 0x5, 0x400}, {0x73, 0x1402, 0x57e76c05, 0x7fff}, {0x7, 0x5, 0x0, 0x81}, {0x7fffffff, 0x0, 0x9, 0x7}, {0xffffffff, 0x8, 0x2}, {0x7, 0x8, 0xff, 0x6}, {0x401, 0xffffffff, 0x7, 0x7}, {0x2, 0x0, 0x100, 0x6}, {0x6, 0x8, 0x1, 0x9}, {0x7, 0x4, 0x2, 0x4}, {0x4, 0x5b61, 0x0, 0xe37}, {0x1, 0xc, 0xf, 0x3ff}, {0x7, 0x1, 0x401, 0x9}, {0x81, 0x9, 0xf3b8, 0xffff7fff}, {0x4, 0x6, 0x5, 0x8001}, {0xfffffff7, 0xd, 0x7c, 0x7f}, {0x2, 0x81, 0x80000000, 0x8}, {0x80000001, 0x7, 0x6, 0x7fff}, {0x0, 0x9, 0x4, 0xb76}, {0x0, 0x8, 0x4, 0x36c2}, {0x6, 0xd, 0xb, 0x7}, {0x11, 0x5, 0x5, 0x4}, {0x7, 0x200, 0x8, 0x400}, {0x0, 0x9, 0x8, 0x2000a}, {0x7fffffff, 0x54, 0xd6fa, 0xb}, {0xd, 0x6, 0x2, 0x8}, {0x8, 0xffffffff, 0x80, 0x200}, {0x0, 0x3, 0x6, 0x401}, {0x400, 0xaef2, 0x8001, 0x1}, {0x10001, 0xfffffffb, 0xfffffffa, 0x1ad}, {0x2, 0x4, 0x800, 0x5}]}}, @TCA_U32_INDEV={0x14, 0x8, 'vxcan1\x00'}, @TCA_U32_SEL={0xf4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0x0, 0x0, 0x10, 0x100, [{0x5, 0x3ff, 0x3, 0x4}, {0x2, 0xffffffff, 0x69c, 0x4000000}, {0x1, 0x2, 0x9, 0x9}, {0x6, 0x7fff, 0x9, 0x6}, {0x3, 0xde5, 0x1, 0xbd}, {0x3, 0x80, 0x1, 0x6}, {0x2, 0xfffffff9, 0xfffffffa, 0x51}, {0x5, 0x9, 0x2}, {0x1000, 0x2, 0x264, 0x9}, {0x3ff, 0xb, 0x3, 0xa6d}, {0x2, 0x4f, 0x5a2, 0xa2fa}, {0x7, 0x2, 0x7, 0x7}, {0x80, 0x3, 0x2, 0x1e0}, {0xc, 0x8000, 0xfffffffb}]}}]}}]}, 0x36c}}, 0x24040084)
syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
process_mrelease(0xffffffffffffffff, 0x0)
request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet(0x2, 0xa, 0x7)
add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000040)=[{0x40, 0x4, 0x76, 0xfff00000}, {0x50, 0x7, 0x48, 0x7}, {0x6, 0x25, 0x7, 0x207}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r6)
r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r5, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}})

2.156857452s ago: executing program 5 (id=756):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, 0x0, 0x0)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r5 = open(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0xffffdfff, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
ioctl$KVM_GET_STATS_FD_cpu(r5, 0xaece)
r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r6, 0x3ba0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x60, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r7, @ANYBLOB="0a0006000b02110000010000060066008e880000140033"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x44800)

1.990970159s ago: executing program 2 (id=757):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="b8010000000f01d90f20e035000010000f22e06636f20f2b23c4e235a898320000008fe9089a2a15d36bc544c4e24d09b4cb64000000b87e017c720f23d00f21f835300000070f23f866b850008ec0c4c1fd72f0d6", 0x55}], 0x1, 0x4e, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r3, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r3, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x9, 0x3b9, 0x2, 0x4, 0x7, 0x5547, 0x9, 0x5}, &(0x7f0000000240)=0x20)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.594451362s ago: executing program 0 (id=758):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x1e0}}, 0x0)

1.448159248s ago: executing program 1 (id=759):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000104fcfffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="03150700000000001c0012800b0020006970766c616e00a61b95db196717d95f3f35c495000c0002800600010018000000f3c8582fabfc93fa0d6e1037837092204997caca5f7cc3fe8272afe03e4c4a656d0000000000000008a2b91aacc2144f1d3d51eedb12dc79ebf9deeb428c9b557fcb21854ab8d6e15da71ef1fa63606422dd1387a199e235b63965242ff72e8590fda38feb2ae588f8c737fae813395b74bdd5f1261b3b604900000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000891}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000009800)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000002140)="4627563e95d073e9c44031e486c6c3c887234dab29bb5d4444d206b6ed7b2b3001b6ed59a692ab0f0251ebf104d3747ab90777b96df4449e5275f86a62902df16f5fba75e202cbdf6fe7cc018a76b412f6485398037d6cb464f1dcf7fda3c76e43cdf64a53f6182a0b7e6476035e8bce74d0582b1ccf32dc8b0cc3b610b143afb4d3c163308a66f2dedd0d45f392d7899f5c4d2ded35c1602f7338dea29e0dff356a32c9e921eeebf8b9845ec2a40b68a8bdcb88009c910e110de23a02648667d740186ee2a3f4a59672477230c4a3a62a1417659b1978cf2b671f836d49fd361ad0af9157916d29cb4fcc1e873a336660b639383485a5322faca6694c74f58fa428582950bd136778dff61da52778dade8b2c3331b31a89259469b0900ab4173202f6256b2d23d3feb8517556292de52662192eca03da5744515c4a92cd3f0f296209bacb28a0267776c9797a784cfd95a52f9de496a5ed70459d55041b663a70d7d471da4f86cd187fd53e667422a0fdfe5eb34e2f2b8c133f2271fe5b1e71533b698169ac8107187533e37765fbd69c327ec608249c44018e3496b2f66fb8bb942f4bd26ed687ee1f7d2a53d7233fbde91cd03f4b4db0c23ed56ff9a61e0d5a1bf6ed50c308e8af0c32b2e0b15df009046ed88d60b772e0cdbfb3d765251aae01b01660df364dce51971ea2034b316a0b0071cb1d28bb86279de377ccb5a18ce981241b5d566e248866f280d71c6775e14fad44342945663bd56ad056f79e49f8071153391f8de78b05496a5f174e812ee0b102e0421c632e4a9f8ffd87ea68df1d7e85af4b30024b2a3cf0e1106871b3427eedfe857f3bc2a021d42fc09224ece3c56e57806a2da229231cc8e3ed5dbd82fd2d3894cba01e36c2ba91a42456eb570446fa3e2eddfe30264572d5d778cbf5d676ad4bd37d11e09573a5566b3656a760c9d3030b2bcd90be0d670866010e2d33c93f223a79ca167bce1a46670db33470c75776582f26b5d9ce847493ddb34612bc829f93f473c24263246011c4ca689f62f4539550ee13b246aeeec477fb2e9e4b223f66c006303abdb003809b9cd4e993b90821750b86608882355e5f587182c1ac6c677b07c26956073ff3a78d4f325139d9c0b8aead052e73fd21b3615ea22acc084bf5060f72936796311e31c038426f0a0e6c304cd2d9c363e7a1a21752032be17adca8b476b0e571b591c9dd923b0066fd5e32e045494c0a9e1e511f147988e0a5fe9652b92ed0e015ef54e3ed2a510b9383f1938dece777ca866f1a21082052827f3a48c2f38482fe3a8286c0ff17d4c24a468a5a0ec0a2eb1165f48cf76fc07450c82294d973a1793dd58008834f0d3aba4e097ceff0ba44656c67839ff3e489975297b334ecf6c7ce4634afbe3d8ab70827563aa75ffafc43429170c3fe3854238485c5a9b567a959a746010c22a92e863e318312e0efc06ab86d1435e06aca5f4b7b7f06a78f90795545c145c9941b74adb9a31ab4f749f81665dd9308acba8d7861856b548eab226377be82611ad79c8d25b176de98003c1ea28b556a2b90360913c39f8f64f0d122c732af5a990603429b354ecd4de797e17722c66546cc38349cb09c40ea54972562734e9816c83103e0bd19451e6144d005e6ce6d6d6fc1ce90238b73d1e0aaa4ee9fd0545054cea97639a404edf3b27c0073be84961084ea685e8ace53c7d7f52b62e378d9ee167aec3e5cbd60ff36c0d3ad40181bad59f111c30e9414112fbc71ad7ede21c288c878dd2509c36f93c31dab5d091107c8e8bdcadffdcb3053eba35b44c70a6421b343922cb11c69b886db0f412e5c23f89dbaff9e5847fd749e28356cab3999f1142449047a3a6c43bf670244e55d888f36ef1dc87bc5bb1460b6c8d1e69efca9a02ba834591906a65102c3e1c1c7dbdeccc7e261795f349d110836445d8ba19cbc699c46d4edc34942a488de1cc1140dc6acf23c8ec1f475e613c85ba025ff7ae639cb2499629eb5f5c88c4057e30bcf41767424af763c9204084856d87cd99f0da06ae6ee5b7382c1f6f2cbb2cf2dfd8320271f16ba7ebd8f0e3c742482f5426530b1ab946c7118f70aa4eac41dd78569341a0f3dd250531aaefdff4cab9e9eed7efdaa865f9b804ade79ced061a1fcd18a6c61a708fdf119841dc232cc5c4e5343cb8a82e9dd9647779bca053b5a2c43481c06ce2a593e388f5f5f4e681771021aaaf0589dac69db22c7285035d1eb89c75935fa4208b3786f2640ce9d65b0e671967dc27808fea5d17ac70a3ac2802f65d45d9c0372aeed530ee58bf04e190f50dac25139caec0b253d17af28eaed173c7043d66567188f04ea51733835c1c66ac7a634d7b90bdac4a6d1075bb277dc6ca420b24485012db44aed5a2e8099f4f3ed53bdb0b35b35905db28169b3e3b3d13ff94bdf2c9549f4a54c64b8d27098b86ff46cfd515f35b1d5a1bbf1bb29df16cdf296e804977a6b583d018c4fdb66264d5f2d9e162059017d6b6cbc6d6c2f1009717c67093f6feaafce1f242f4b730a2e714e9bba79f18c42a158425147b7b2cd9add4ac1d2c1a95b13a4f352d51982a5d967cd611911e6d0777afbc10883c6293f056acc69da89a0a64913be996466ed63f969d5ccd124cd3052d6654e6db0519449f3cbf3a2011541d26e5b76c3c192857905bcf989fd943d42aee9ebd40fee33094eae69154092e9514819ff126040ea7d43a927809149cfaffcc76cb1e332426bf0eb1ac1a3968c70030453a284a0fe39b9ebd704f0950cb5350d4c60d65566b3f24ec4636cd5bb3e23066f4d4f1814e60f286f3ad2d3c10e79c5991c8bf5fdb561723873fe0c75c7bb6ba262aa3a6655349df95f07abb0200d5b9152da4bfdd66a311b29a15755e8465b7b0d99f7f8ccefe9cb3561b5619d4c21b36c9b29442ccd5949882d0167244d84b677685d62074f63b8dc66941f317c78bb093491e2acb7207cc80fe51c22199aae878170af9fa1eb164854587007eb108f23d1c7946bf75aee50eee6fffdae24b992393bd37d268a136b3dcb1b7d2c9b9fbfe0c860b0d344f488e85de2a65a20eb057f0047d0b6b8898bdd68e21f2234a2c66b963a2d86f62297a7d1176c14acaddd4861f5bb74ee91eb3b6ba0c7328433b977e23c02ab67d82a12d620fc034f1c9c3a99a6a07ddf59eaa18384e429101dacbd93ee794e27b774242446fa433a8c03e4312ad56f6c4dfd1ad014d07932480e07caedabda36caaeaaf405dfa1a650843f2e09ae89c666ab8754d9bf9b290f4c4c9242d8f98533bfdbae191a6fbcba6bdb9096427d2d8efb5dcfbd58df7763cc445bf44a0be6de2335a395ab8157dee25794be81c3d87a7d457b52d88f86cabf91f2ec16a8e05a00f72277943737839a5242163025704c7b938f3f424ef5db6b60d3181e3ef94cbdc6516f0ecf01b52164b92f2e12ed55db595fd8de6862a3b12ebe06b19d1f93132b83b2f5ddbc9808b3ce8fa40352c84664d824edd2631a5e2fddaae887689092007d3d0f22a948f54bfd5c42bea5f0d6bf5018cee5ef232c8b6ea3f54ee6f4997c8ad5ccfd28227eeca811312375a849bdf4d343c1b0ec7035279d1bc0892ef193a74018d5ccd5ccaf0503a697b23abb44b7aa3beced0626daa5e1fbfc4d29d2804292fcc60b775f656179510168bf05929dbc92e009d94561d946f7b4b5a18c08d29678c482d90e07abb029e80546e5cee6c4a30712a9b92d556a29b2de021bd49b6398340a9363b689bedc007416bcb659c0c4b6eaa31ec4976ee4896ff87a7dfab48dc7046d44c9c2db6881f7d6b252e582eb878b0be9b24666e74e8eb565c07582f17817ea2422de5da79cb367e76b9b8a9d056de06ad0483986fef2a3b62d64d5d2128cf55499025ad0739ad3ce5e1bfa6aaac16828bdacad2f86b32ed933a2f672efd1f4a32dd23e59aed872d1015eaaf701a0ef8e1427d59728450c4f1bd561e7ef6f8e34d12ae2120a51746a5c346e739c09854caeec07af0d70dd4d9164b3ae8a098a41c081465fdb5537cb560426bc0de4b735f253dbc779b9dce429d99700cd6c0cbd778caeb56401b2bb5c1ca310ab0c91e1d9f4578b5fb3b4f0dad4c565495797e8e83603f3ef188a896fad5bfec24457e0f6f962b8613434f16acf74308171567eae5ad9ec11186a56493a5394042bd1b29fbe0ce64e5f1b0b56e8910343666d627d71c729c0c90bfae0134e117842d67b160ff50688f7b45f0ae330c2d4890732ace7795ff74b6e36466da623c8eef75528b22199c9bf589a1fcd2aca6c5fe3cce2eddabf1ddc8e87380b815ed5928222613383db7941eb9d55b45487b399a9a35ca4cbd9eaf08c71273fc3334b0acdbd117b13697a9ae475e79a44911ce4fed1490a2ec654fe469c9ea933999dae3616b063769446cfefb4562bd124e42f62a3dd0385fe3d21029ad8fd1c58b0badd42e415a76e3e92f246629d3579dd80d940e6dd9bee3d9a6ef8a7840fb253507e718eca32ff4119eb0bcc02aa210939a3bc41704a63202139c68e276254395ab6b858f4528ea2b3a57328e0b31816de3ad85e50e7f4ec9445eaf21a8b9916ed209bb7e79a7a08c2e4e09644ab831c0ba68d05d5ebf57a9eb36bb9caa8e7ac78a8ccca1bcb03cef0c5eb31fafa6e283632c117031aa3919f72aa80a2b9b2557749951348d5294ed2414ffcbafdf976bfb7a401bedb208fe1285738df515af493047aec962bcacb8ea7bad5fc12d5bf415e66c06c4c87044e694291e104ef53850cbc7ef73ab57982d77a3f941c226a915163e8eebd256cb8a1f0130023d2c5d3be77cab39bae4449711d6f39e50cc83eefaf6cc727b1c0b3fc4f7bd110d18262cd872cee8ca95f1be8005d5b339abbde923ef2d4290d5579e4420ff2beb705c16e96101c38c31cfd05639f252730c145182e4406aab68f556e0290ccf05e25a7bf13cdb5db47a8a0841fbeb880d4f0add608d1badb8992924b548ef1426ec774ec9d86678d4c2aae8f1e3b2dfb295802f75727a308dd1b39460f26858eff99fae8d27f24ea6902adabc89311a5fd18c3d9c606db7295f25acd22624bcc753c4c3acdb3f6c563174441333b69a126e4fcc6b06165f6221539c5ed277c20dac4b7978619e10616475de88810bbac714f3651efaa59b75791080a1086c0f3f1b5edb4b3976cc936665855f6a56788d76c6e771b1c968c859fd1ba995d336d301695fc012b8031a14ca529e3e9bf622db6813417925bb4e1a7a5b786aa90f4d048f1f442a2696970dd442d3a6ee117a3e768644c99951b75e51e98de61bc7ed8eb9e87fd43ec75e948829bd19fc545cddefee7a6f068a419e216982ca4ce6ad3256f1e64d203ba1da27e9e175738124ca86a312d0dd0caae6d64751d459d8134830ebb4f4c7931aa90c1ad6fefd99ea4ded3d246236719d6fd48979ee31eaabbea385e91aea0557a58d73a63660ecee981e3da40a39fec3f01caaffafee3504e9f8dc990cc2d69c513db25f6e722ea4811f778af8a338498b6b908682aca6e02e898cb65377f820529d35707cb83ba69b16c92b571728c58188fb08ed6f6c27d6b70e963b147605714468b90966f082d7175fcbc6e770835efb6e7bac5eeaeb5b2c23eb30ecc102e647f1ff71bc6b35f629a55dd305f8ed5287e35403a91b4dc77a6df2fff354460bf563c071846c84617da4df4c46a9e359c45d217a2b096c830ac8614947d110334ca17f587d86825b2b7ae1039fc11109687c1ad0a16f0180d1700414a4694e7ab73c715436dce437a9b3dff55f62fc1ffffc33d3be037c34c9ee7a0fcfeaec1778268565663f39b69c141304c892ae80da42cc854a87c955e6d8060a731eb16ee91e8ea27f90da85196e4f034d40b85ff59eb4b7c76218342f9c9f8d3749c874562829b7ad0c786c5c25ed240aa14755ff7f5ba5298f9f6b6ec3a46ac36d6a39c59c2ecf7781da77931214ac9a8697691d933b20cb64acde409fc159d748e4f92d83ff7767260fdec04b2e80cc524a2366e8fa5b70eb8684d164dec49fa95f42e7e75daa8c268204beec1fbc58cbbe3317af0993a8676dfdb13db7875f50cebdbc629bcd605dd4c4a65c31870495fb9a9ec51c1867ca8b117a6f9507aa26cee54c4c12f8f22b9d88072639ad765bb7906435128d1c146b9e2029880eccbdf78449bd0630381ad16c13444d709a11890d80fae0d24c037180a8726143306a7cd67abbc830167f524008f9a8e3172df597a63af2e87a92e90b70ce53069657f9b46acc9da241a1b00571540ec5fed4a9acfdd0066ba248cb2bf24540d7296256d4c9a5a5bc821817ada912cdde59876d86d4c53c1d047c6bc3442c2ee78326d7c51b6d01bd4f7ff5bc45db88649220d44099b406ac2e4744996b869ea688ecb4e758e755b29717869d5dfccbf5fd553ad83de0c4cd16b3fd4913451734226e4cf29bc0a860943b3e854d8cf49f07d2bfba1c280efaa85bb8f0f8818d1e58178c338c9e46c873adc0a4b6c832aaf0878956d8a04fcc043ff307f60a263cf1bc57ad0434b6a6f99075d932ff75deb8b017cbd16b272139a4addc24749d9551ba44d5bef0536e58de5e9d0b8985f1044163d542859c699f27f033b01d1e5d4c5598bcc4279f29c56eca82cf40c3b2799277e9b0aea04ba5cdd679e3eb63ceb0eafc21c373356caadc0f5730054a0979d7e32117962af0444b7e0e75bf1d30fd1af656956367bbbddf018531833f6c383b76cd63d014c91f67b41548e558cfae6a953a78c36ba3a896b3a0bf48aaa947d042a456a48c8f323682f560f2679f53578f00746cb04c4ef12b905b37f1b1bac9c75a85d6f173d531198f150ee6dbe7fcdbed4e0baf7610b82a793c17124970924ae32c86f9b7b40a229219958cd2445fca613e264adbf29644b1f405c68ef8afff7f4c1dc86f0e578e3716fa86c53f776dc42e7d28978f1e694428560b923b5d44e3aacb18cb38d3efd90ca0812027d336b011557e9e953cbff769e9ba84b903f5fcf1e6b4ab3e210ceaac574f80607116b196b6ded8668729f9be216bfdd049e88d1cb45581701c6ca7c991488a73e6ae5decdfc6416fa69b76f82e92246ee2b29c91885be24e96ea72438499c5c421ffd199f172667adf7d257947bb47945817930a7f2f0dfc73c2a5f6002fd40b9ea51c4a0c610e9759d43c082ed0c126c0de63c5a079b4c8bac46fcc8a1f74d8929ee2b7878430e3caed5f5aad7378fcbc4d659144a7cdbd654185ffdabd9b36257993ca823990df4aa7809ee58b7a278f38085202f3618fefef67f71b39f8ed35a28b3ff47e6caa3cecdbb41b899ea7ef3179ec3d67d0e3380f61d5a57453b9b790d171e1838c68f988a6914f4b81a7a12a0f50612182de8844a5f18026bc4110a10a31a88dae4bb40a3fea22360830784cf82ccde8187d04635e7e5bc6cda8252fa77d7022ae5fdeb978315f925cdbe7cbe0e3894965795fda4b94068bee89f79f86c420b211411929b9b3074703583c0ba0703a4d282441495110dd167c228079db163febc9ea0bcb02ab400999abfecfbca274fca55a055859eb256fcddc1d1773d72d5c3793ca3ff5f2fbe647b04f5ff2b2dc50a3a897e03634a36d21e391e6b6290cf85064711600de9a74057b78d9c04857017bc762300872f674eed1b68fac65025f3252bb803a9ff8ccf4b2b49028622168439db3bc01ea9ae7618b73dc7f858ba388891da14b88f7fee4f5f49abd687ba947969b8b923c2e119fe172126835ab4d1429133a38bbb80f1f6c308ffd180a179c05d9fb112a70e7658f9e3c7b6545556726e6589ba479edf21afd08da62963b5b724fa7b618c27fba201297dd465217de92395734355e9b34e27ff4916d78dbe0424df3d6110297a7847efda2675f12a3bf5e4b07827cdae6c61b0d969f6bb15be656b394a3f3ca8d705a4cac9c78c66c4be58c40888d49ceb08eb9a90c230faace7e4c837a8cb1aa69b020f9f43532cb7315cd698dfffb0179fb24e135480af4c437170c010e6e8f94108523dca95598c59b9e483753b79bafb02a455ceec727fd271b4cb4af7d958751a747afe6625c1e8b0316af5e13e42dc8d97dc42d5960edcaa391164693250a6f98653fa20c78823e1c1a77b798491f197a647b291cdd04087b3143e5b0fc550ecbbff19666b1c8e2a5bf2cb40f9f54c11828a8dd16489f36583e3128cda7a9abde8abbf61294450af638f56444176b5a11f84e67e4e666d6df58c45c0adc45938a2639fb1717a44c8dedf8471ac82fc1771a704f778fb812acb953493a831be5b28b16b20a112aafcee4e44640a6653c4b3035d5de4fcc16312057046bc3c650057dd9be4450b3e837ff8ac19019e67550a124416d671ccc76de36946c2d91f3d63b212111f4f09f39c24c1a981a7e63dd37a8d94ebfae1df5796d971193a8c723f172a9266af23d1d0e48aae73de4e7545a13f09a1ae3feb147ba1c700776148f027abc7dbdd1f3cb823b9a4c0e9dd43fd0bc411dc3eac2369f10fc9669ffaec5ef76da6b7f8884430b3a00da63a0e5272de159ea047584f4804a14159b1321309db45c55af563081d126300dc3ac446936f6653db92fc09d225716f425997dc247939b8c1e09a11f8b10c36b671cc590922051871ce19f6db85eefac9a666c3cec6fd5a69e7610ae5123413b458024b02521420d8c50c265d7b763f070b8fd1981824da47079135a667ee2395e43cae172e6a5ae96aeb7ce490212792498e427b80036f52cc557d3f94b118b2248af9a75a6d27d084ba423edc616981864cb0069a06f359a953a6e7df6b765d222626030248253e4e93eb0979b0a5550ee15d1489f56cc1d30b1584f37b51dfa029af5b45a85b141f4f8ffdc809a19e01f22f80c8a11e9d35f790a6de2d898462a19f412de4df26896a3d107baa7a661b5482cd71453b5f88f889b93ee6df84363ecaf04cb0dcd4369f9d1a827b955182334a998e8f2edbfe74beb14e9ff50134f03d24d70b068801684e25370c1cfc065d88582389713500f974e8a6c6e7f015b8e84e5b9861e45d4ce4eef79f0e8d4f15eaf7c1b33e64287470b5b3c0b8b6bdadae567f977341b57486c1eb279be8ee1cdf11b6e0dbd42d32c95b6801cea98e6000ea80777c6ad3f62012732859497080b3aa127a0f3a7b80a99182406ccfd54affb463f8eaf01b0c65ab582628b3c2237d039ee68d307dd113e4b593b243bd64eb6f58a0ccdd8e9a78f9ed393e2affde8d616d57c7aa1d12ebb4be718b49843ec6a90d5d8c197f154f27805046c410d4e1b66cbf4a8e495a3a229a2a1d58b4909a240d7ae6ea9e740c055b06e756e57e2ff19c148cbaf37357c0d3273b7f2ec631565e9f6c6c8722ddb0c1180695fb204f35917dc2fe11469801c545b2560a59d0666ec129b88e4f427989e820982329c2c39321f25648666af651f87b495195a95a5d158fd161324796272303114d99d22890385853dbc66d37ce22de0db447260217cf51aaed240e4f4963ca7510522fc6e7dbe164ccdedc334787ddb24bbc8205bf3353d447a1de2407c248775fa7e318d83e3ff18150b3cd9a7cbb0df0703aab6ef8d0f71bf9b5a305dc25fbd200e06b73c7f298320bd90dab05ec62b5f885e7cf95274c656051c71628f31196354460b001b6366c26fd2e92f6ad68ea37d7e3fe91fe98223563b4d23f802b3911a5241a793cb9f5b4f80081ace5877f95da7499f728ab09837120ca75c63d725e46f9f77c3da16318c9bcdd4a9d68379b627c1a71a34b684e5614ab3fabceab8d2741aca921b1b018098060686c56d7ed190e7470f529f6e680ed72e749fe7c9c2f37ea8cf08d4520e496361d2437018bbda93396c05abb2aeba443ea1ee56a3da04a8b880452a3610cb4163154e02df8a08a5e48c03fb0b0cdd4d355142cc736b344b9fd987b49b85791e5bf7805250dfe63b04c7ff56608129ef43664aa2acf82f18b49cdfd2ae5551ea4d486b35cd2ea60e3f032c58f531d4d36054f5ce268a29862ded0a3cc0ff1d30882f7c85b95e9a8599bf1d143d2d25555bbaa6f8b673b76ca8cc17b693519194784833d902581fec4e656ca546eade53abfd7e4650df648cb61a146bef5382f9255bf4a7c380854568495bdb7b33f490d240ead3d1851ce3b6400eda5a370f13ec998605f46b234bc9293c026bd1d648647bf52d506deb522012ae89c4ea75414ae6677c4aef28dd756f877af23d1a5ae3cb2205850c14f27f595d1a1542bb1eaf641293e3ba40e0bb54193a1e5db969d37c97709efbc34ab509f08a51ba71ecc4f9f66c27190115948cffaae914e7eb4e8d0c59ef7368e9b08a05bbbd340e1c1d34319f150d299c0ddf3bb2138359e826f4997068b99d13cc454fea46b8664d413b79b19656d62cbb5b31744aa33f99651fa56703eaec2e6998c7321f69f6cd110c89ae0c612a96f9a84dd751fd81ff66c80563e7091f5c5b67f89d52e7c58eb26218cddeaf5c6def3ad07a610bd4e5785675580c199b8550cbb02e3b4e1d240bb8df8e514fb505f39fd222209584331bef5d271056accaef84c88741ebd9f116cce3fe7b07b78ac4bad346c0d6e71c9daecd8d60aa8ea0914f85c9078dfaff04ba5e9bbbacddbc0cb40fe20f869d7f196c5edb6657c50b82c67f1abab663bff0a8da16422fe31a4a17995ee25081a06154d1c03f1a87a9d4ad5141a9227849bd920d2515ca16a245b635c85a77884cce0b8ae56929b5e22c52f971c2eed4ccfd64f7790a616f719fc0305af71405abae9407ed1cdaa26606331fdcf9b3c19b90e561f646ea15e0e668ef37b349594a335baf26962b89ef33c98aec3ca3e7df47c20dc2928d074e5f87c0edcf37cb25d3b8304f57f8257a5ae96791697e3c6d04f4ec2eb6a69f25346defed5b509368dea2b1960218bc6dd21b567583c229fc7b5fc85f7f2032eb304c3a1f72204f75ee950344cdef846d94e916b29a43d00c789256810de5fff6f9fd1af0fcfc2edd3fff9e2010d88083fc0b9e6a291e9a7a08af62433689a39e34bed8dafc90fec82be5c63a843d82132ce8916e395791dc86c8d11caf57f7fd096c28537ec38d6c14df9782312abc85fba2d04b0b159637b0e09f7e9faa1a6136359d17cf7c58b83994d58674ddbc248b804a82156900ca95a5002ef62de046e2f5ddf8e1e19f00189d4f5169bfc3c67afc149c6bc155767e64eac433cfb787be7f7bae7f869c0ec3d142668c2f90d383af7207a635850c515d69c6a62e24e0d58c5da244a917a17caa6be01992c4f8be0b9fff57522db4756840bdf72cafa6061ff2b86305c180c470b3af589e7c9e5328d98cf737bf01d80762e1e41a4d63a8655387be7f295862fdea629aa97b40c2ba1b563f1a103a860f7dff7fd5ee8423ce3dbf0fad41b66965c67299e35483130d461ac6c68215850fd441323bb856cdf03f624520743f7b445641c72e08994c8f252fe179b29226637b533f0ed6c94a0b84efc1a884af940fbc05c654b59d37a54047de233c496103bb27b657e7f63c24ef3ce29709622f67653f398dc7c4e44", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0xb0, 0x0, 0x0, [{{0x3, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x746, 0x0, {0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xfffffffe, 0x4000, 0x0, 0x0, r3, 0x81, 0xf4}}, {0x0, 0x4, 0x8, 0x1000, 'group_id'}}]}, 0x0, 0x0, 0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001900)=@newchain={0x2c, 0x64, 0x1, 0xfffffff7, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xe}, {0xfff3, 0xfff3}, {0xe, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x200004c0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r6, 0x405c5504, 0x0)
socket$kcm(0x29, 0x5, 0x0)

1.102138046s ago: executing program 0 (id=760):
openat$sysfs(0xffffffffffffff9c, 0x0, 0x169b82, 0x189)
socket$pppoe(0x18, 0x1, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
fsopen(&(0x7f00000007c0)='erofs\x00', 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=<r5=>0x0, &(0x7f00000005c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}})
io_uring_enter(r4, 0x47bc, 0x3, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

722.607705ms ago: executing program 2 (id=761):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0x24, 0x4) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x0, 0x250, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'ip6tnl0\x00', 'nr0\x00', {}, {}, 0x2f}, 0x74000002, 0xe8, 0x110, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x6, 0x1, 0x7, 0x3, 0x3], 0x1, 0xb}, {0x4, [0x2, 0x4, 0x2, 0x4, 0x8, 0x4], 0x4, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) (async)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4)

538.72678ms ago: executing program 2 (id=762):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000030000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10)

536.976207ms ago: executing program 5 (id=763):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0xf00)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}, 0x1, 0x0, 0x200000000000000}, 0x4)

404.97683ms ago: executing program 1 (id=764):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1})
socket(0x10, 0x803, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r5, &(0x7f0000002f00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=';', 0x1}], 0x1}}], 0x1, 0x4004851)
setsockopt(r5, 0x84, 0x14, &(0x7f0000000040)="0100000000", 0x5)
r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r8, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1})
ioctl$IOMMU_VFIO_IOAS$SET(r7, 0x3b88, &(0x7f0000000140)={0xc, r8})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})

284.353991ms ago: executing program 2 (id=765):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x14, 0x30, 0x871a15abc695fb3d}, 0x14}}, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil)
r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
signalfd4(r2, &(0x7f0000000000)={[0xc]}, 0x8, 0x0)
io_uring_enter(0xffffffffffffffff, 0x2def, 0x9566, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000)
r6 = syz_open_dev$vbi(0x0, 0x0, 0x2)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r6, 0xc0845657, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x25)
connect$inet(r7, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg(r7, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000140)='=', 0x1}], 0x1}}], 0x1, 0x40008d0)
recvmmsg(r7, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=""/250, 0xfa}], 0x1}, 0xf}], 0x1, 0x10122, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})

94.362405ms ago: executing program 3 (id=766):
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x855)

0s ago: executing program 5 (id=767):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}, 0x1, 0x3000000000000}, 0x0)

kernel console output (not intermixed with test programs):

3a8f0fa28
[  224.309483][ T7332]  </TASK>
[  224.377973][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.921344][ T7223] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.964697][ T5836] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  224.981310][ T7345] netlink: 24 bytes leftover after parsing attributes in process `syz.1.402'.
[  225.072152][ T1152] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.159006][   T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.174373][   T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.203496][   T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.531513][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.623074][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  225.782337][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  225.845398][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.454981][ T7350] netlink: 'syz.5.369': attribute type 3 has an invalid length.
[  227.897066][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.411'.
[  228.516410][ T7383] loop4: detected capacity change from 0 to 7
[  228.578270][ T6172]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  228.584025][ T6172] loop4: partition table partially beyond EOD, truncated
[  228.599034][ T6172] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  228.639891][ T7383]  loop4: [CUMANA/ADFS] p1 [ADFS] p1
[  228.645686][ T7383] loop4: partition table partially beyond EOD, truncated
[  228.655587][ T7383] loop4: p1 size 2989602745 extends beyond EOD, truncated
[  228.949565][ T6172] udevd[6172]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  229.041558][ T7392] netlink: 'syz.3.417': attribute type 9 has an invalid length.
[  229.062745][ T6172] udevd[6172]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  229.079110][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'.
[  229.181308][ T7392] hsr0: entered promiscuous mode
[  229.243626][ T7392] macvlan0: entered promiscuous mode
[  229.262121][ T7392] macvlan0: entered allmulticast mode
[  229.268091][ T7392] hsr0: entered allmulticast mode
[  229.317825][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.5.416'.
[  229.404471][ T7392] hsr_slave_0: entered allmulticast mode
[  230.130332][ T5825] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  230.387470][ T5825] usb 1-1: Using ep0 maxpacket: 8
[  230.505083][ T5825] usb 1-1: unable to get BOS descriptor or descriptor too short
[  230.752829][ T5825] usb 1-1: config 0 has an invalid descriptor of length 114, skipping remainder of the config
[  230.792943][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  230.907570][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  231.118777][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  231.138940][ T5825] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  231.169299][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5
[  231.221618][ T5825] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  231.250023][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.291360][ T5825] usb 1-1: Product: syz
[  231.306190][ T5825] usb 1-1: Manufacturer: syz
[  231.317374][ T5825] usb 1-1: SerialNumber: syz
[  231.333786][ T7412] input: syz1 as /devices/virtual/input/input12
[  231.348670][ T5825] usb 1-1: config 0 descriptor??
[  231.394046][ T7400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  231.402207][ T7412] PKCS7: Unknown OID: [4] 4.2(bad)
[  231.443517][ T7412] PKCS7: Only support pkcs7_signedData type
[  231.465382][ T5825] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  231.728258][ T7416] syzkaller0: entered promiscuous mode
[  231.740636][ T7400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.764040][ T7416] syzkaller0: entered allmulticast mode
[  231.773843][ T7400] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.796002][ T5825] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[  231.859530][ T5825] usb 1-1: USB disconnect, device number 26
[  231.943832][ T7414] TC_ACT_REPEAT abuse ?
[  231.999553][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.284504][ T5916] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  232.455608][ T5916] usb 3-1: Using ep0 maxpacket: 16
[  232.465222][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.594356][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.658494][ T5916] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[  232.693472][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.732129][ T5916] usb 3-1: config 0 descriptor??
[  232.863566][ T5918] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  233.025669][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short
[  233.051934][ T5918] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  233.078687][ T5918] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[  233.130935][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.165742][ T5918] usb 4-1: Product: syz
[  233.169944][ T5918] usb 4-1: Manufacturer: syz
[  233.193645][ T5918] usb 4-1: SerialNumber: syz
[  233.220901][ T5916] gt683r_led 0003:1770:FF00.0004: ignoring exceeding usage max
[  233.294040][ T5916] gt683r_led 0003:1770:FF00.0004: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0
[  233.409413][ T5916] usb 3-1: USB disconnect, device number 25
[  233.449602][   T10] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19
[  233.503559][   T10] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19
[  233.553578][   T10] gt683r_led 0003:1770:FF00.0004: failed to send set report request: -19
[  233.636626][ T7437] fido_id[7437]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  233.938122][ T7448] netlink: 'syz.1.435': attribute type 13 has an invalid length.
[  234.140181][ T5918] usb 4-1: reset high-speed USB device number 27 using dummy_hcd
[  234.333467][ T5825] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  234.436831][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short
[  234.488110][ T5825] usb 2-1: config index 0 descriptor too short (expected 65316, got 36)
[  234.488205][ T5825] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  234.488231][ T5825] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.488277][ T5825] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  234.488302][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.542835][ T5825] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  234.721468][  T130] usb 4-1: USB disconnect, device number 27
[  234.908240][ T5825] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  236.743516][ T6248] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  237.023401][ T6248] usb 1-1: Using ep0 maxpacket: 16
[  237.035316][ T6248] usb 1-1: config index 0 descriptor too short (expected 65409, got 138)
[  237.055928][ T6248] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  237.103396][ T6248] usb 1-1: config 1 has no interface number 1
[  237.143427][ T6248] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  237.205608][ T6248] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  237.215731][ T6248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.257055][ T6248] usb 1-1: Product: syz
[  237.261321][ T6248] usb 1-1: Manufacturer: syz
[  237.299118][ T6248] usb 1-1: SerialNumber: syz
[  237.547050][ T6248] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc
[  237.562784][   T10] usb 2-1: USB disconnect, device number 21
[  237.750593][ T6248] usb 1-1: USB disconnect, device number 27
[  237.903962][ T5918] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  237.954429][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.008561][ T7482] netlink: 'syz.2.448': attribute type 10 has an invalid length.
[  238.083877][ T5918] usb 6-1: Using ep0 maxpacket: 32
[  238.100817][ T5918] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.128365][ T5918] usb 6-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.150824][ T5918] usb 6-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  238.178660][ T5918] usb 6-1: config 0 interface 0 has no altsetting 0
[  238.192218][ T5918] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  238.223366][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.248591][ T5918] usb 6-1: config 0 descriptor??
[  238.254954][  T130] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  238.453680][  T130] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  238.465592][  T130] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  238.513587][ T7495] kvm: pic: non byte write
[  238.519682][  T130] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  238.632070][ T7495] kvm: pic: non byte write
[  238.662146][  T130] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  238.682836][ T7495] kvm: pic: non byte write
[  238.698601][  T130] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  238.709315][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.727345][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.743828][ T7495] kvm: pic: non byte write
[  238.751070][  T130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.790889][ T7483] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  238.800024][ T5918] usbhid 6-1:0.0: can't add hid device: -71
[  238.807183][ T5918] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  238.808959][ T7495] kvm: pic: level sensitive irq not supported
[  238.827255][  T130] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  238.844497][ T5918] usb 6-1: USB disconnect, device number 2
[  238.853521][  T130] usb 2-1: invalid MIDI out EP 0
[  239.113087][ T7495] kvm: pic: non byte write
[  239.125137][ T7495] kvm: pic: non byte write
[  239.133916][ T7495] kvm: pic: single mode not supported
[  239.133939][ T7495] kvm: pic: level sensitive irq not supported
[  239.261664][  T130] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  239.321294][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  240.085512][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  240.162823][ T7515] macsec1: entered promiscuous mode
[  240.170912][ T7515] macvlan0: entered promiscuous mode
[  240.223616][ T6248] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  240.242771][ T7515] macvlan0: left promiscuous mode
[  240.253582][   T10] usb 6-1: Using ep0 maxpacket: 16
[  240.262788][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  240.303124][   T10] usb 6-1: config 4 has an invalid interface number: 220 but max is 0
[  240.330321][   T10] usb 6-1: config 4 has no interface number 0
[  240.362407][   T10] usb 6-1: config 4 interface 220 has no altsetting 0
[  240.398162][ T6248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  240.456235][ T6248] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  240.456658][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'.
[  240.504569][   T10] usb 6-1: string descriptor 0 read error: -22
[  240.512961][   T10] usb 6-1: New USB device found, idVendor=10c4, idProduct=82aa, bcdDevice=f4.9e
[  240.526685][ T6248] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  240.563165][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.575377][ T6248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.665069][   T10] cp210x 6-1:4.220: cp210x converter detected
[  240.682235][ T6248] usb 3-1: config 0 descriptor??
[  240.713204][ T7511] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  240.911090][ T7507] kvm: kvm [7506]: vcpu3, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0xffffffffffffffff
[  240.955366][ T7507] netlink: 48 bytes leftover after parsing attributes in process `syz.5.455'.
[  240.967061][   T10] cp210x 6-1:4.220: failed to get vendor val 0x370b size 1: -71
[  240.991371][   T10] cp210x 6-1:4.220: querying part number failed
[  241.027293][   T10] usb 6-1: cp210x converter now attached to ttyUSB0
[  241.199306][   T10] usb 6-1: USB disconnect, device number 3
[  241.282325][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  241.300405][ T6248] usbhid 3-1:0.0: can't add hid device: -71
[  241.331743][ T6248] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  241.367758][   T10] cp210x 6-1:4.220: device disconnected
[  241.383678][ T6248] usb 3-1: USB disconnect, device number 26
[  241.505732][ T5890] usb 2-1: USB disconnect, device number 22
[  241.671224][ T7531] kvm: pic: non byte write
[  241.676062][ T7531] kvm: pic: non byte write
[  242.033229][ T7539] tipc: Started in network mode
[  242.047916][ T7539] tipc: Node identity 4abd55283949, cluster identity 4711
[  242.071759][ T7539] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.111056][ T7540] syzkaller0: entered promiscuous mode
[  242.125257][ T7540] syzkaller0: entered allmulticast mode
[  242.378310][ T7539] tipc: Resetting bearer <eth:syzkaller0>
[  242.409040][ T7538] tipc: Resetting bearer <eth:syzkaller0>
[  242.536376][ T7549] netlink: 'syz.1.467': attribute type 27 has an invalid length.
[  242.676222][ T7538] tipc: Disabling bearer <eth:syzkaller0>
[  243.022039][ T7549] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.030759][ T7549] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.114210][   T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  243.375417][   T10] usb 2-1: Using ep0 maxpacket: 16
[  243.431950][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  243.453406][   T10] usb 2-1: config 0 has no interface number 0
[  243.520343][   T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  243.557139][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.658141][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.684306][ T7549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.757180][   T10] usb 2-1: Product: syz
[  243.761442][   T10] usb 2-1: Manufacturer: syz
[  243.810924][   T10] usb 2-1: SerialNumber: syz
[  243.833073][   T10] usb 2-1: config 0 descriptor??
[  243.923470][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  244.333806][ T7570] FAULT_INJECTION: forcing a failure.
[  244.333806][ T7570] name failslab, interval 1, probability 0, space 0, times 0
[  244.346685][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.0.475 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  244.346715][ T7570] Tainted: [L]=SOFTLOCKUP
[  244.346720][ T7570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  244.346729][ T7570] Call Trace:
[  244.346735][ T7570]  <TASK>
[  244.346741][ T7570]  dump_stack_lvl+0x189/0x250
[  244.346764][ T7570]  ? __pfx____ratelimit+0x10/0x10
[  244.346786][ T7570]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.346800][ T7570]  ? __pfx__printk+0x10/0x10
[  244.346821][ T7570]  ? trace_fib_table_lookup+0x85/0x1e0
[  244.346843][ T7570]  should_fail_ex+0x414/0x560
[  244.346866][ T7570]  should_failslab+0xa8/0x100
[  244.346882][ T7570]  kmem_cache_alloc_noprof+0x88/0x710
[  244.346899][ T7570]  ? dst_alloc+0x105/0x170
[  244.346919][ T7570]  dst_alloc+0x105/0x170
[  244.346942][ T7570]  ip_route_input_rcu+0x1ec2/0x30d0
[  244.346966][ T7570]  ? __pfx_ip_route_input_rcu+0x10/0x10
[  244.346982][ T7570]  ? inet_ehashfn+0x8d/0x210
[  244.347003][ T7570]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  244.347029][ T7570]  ? ip_route_input_noref+0x98/0x250
[  244.347046][ T7570]  ip_route_input_noref+0x167/0x250
[  244.347061][ T7570]  ? __pfx_ip_route_input_noref+0x10/0x10
[  244.347080][ T7570]  ? tcp_v4_early_demux+0x4b3/0x9a0
[  244.347097][ T7570]  ? tcp_v4_early_demux+0x5c1/0x9a0
[  244.347120][ T7570]  ip_rcv_finish_core+0x5af/0x1c00
[  244.347145][ T7570]  ip_rcv_finish+0x14c/0x2f0
[  244.347167][ T7570]  NF_HOOK+0x30c/0x3a0
[  244.347195][ T7570]  ? __pfx_ip_rcv_finish+0x10/0x10
[  244.347213][ T7570]  ? NF_HOOK+0x9a/0x3a0
[  244.347229][ T7570]  ? __pfx_NF_HOOK+0x10/0x10
[  244.347245][ T7570]  ? ip_rcv_core+0x7f7/0xd00
[  244.347264][ T7570]  ? __pfx_ip_rcv_finish+0x10/0x10
[  244.347287][ T7570]  ? __pfx_ip_rcv+0x10/0x10
[  244.347302][ T7570]  __netif_receive_skb+0x143/0x380
[  244.347319][ T7570]  ? netif_receive_skb+0x105/0x750
[  244.347337][ T7570]  netif_receive_skb+0x1bb/0x750
[  244.347355][ T7570]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  244.347367][ T7570]  ? __pfx_netif_receive_skb+0x10/0x10
[  244.347386][ T7570]  ? tun_rx_batched+0x160/0x730
[  244.347402][ T7570]  tun_rx_batched+0x1b9/0x730
[  244.347426][ T7570]  ? __pfx_tun_rx_batched+0x10/0x10
[  244.347446][ T7570]  ? tun_get_user+0x266d/0x3dc0
[  244.347468][ T7570]  ? tun_get_user+0x266d/0x3dc0
[  244.347483][ T7570]  tun_get_user+0x2aa3/0x3dc0
[  244.347501][ T7570]  ? tun_get_user+0x6fc/0x3dc0
[  244.347525][ T7570]  ? aa_file_perm+0x44c/0x1530
[  244.347541][ T7570]  ? __pfx_tun_get_user+0x10/0x10
[  244.347556][ T7570]  ? __lock_acquire+0x6b6/0x2cf0
[  244.347571][ T7570]  ? kstrtoull+0x12f/0x1d0
[  244.347597][ T7570]  ? ref_tracker_alloc+0x318/0x460
[  244.347615][ T7570]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  244.347634][ T7570]  ? tun_get+0x1c/0x2f0
[  244.347654][ T7570]  ? tun_get+0x1c/0x2f0
[  244.347669][ T7570]  ? tun_get+0x1c/0x2f0
[  244.347687][ T7570]  tun_chr_write_iter+0x113/0x200
[  244.347705][ T7570]  vfs_write+0x5c9/0xb30
[  244.347720][ T7570]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  244.347734][ T7570]  ? __pfx_vfs_write+0x10/0x10
[  244.347754][ T7570]  ? __fget_files+0x2a/0x420
[  244.347773][ T7570]  ksys_write+0x145/0x250
[  244.347786][ T7570]  ? __pfx_ksys_write+0x10/0x10
[  244.347799][ T7570]  ? do_syscall_64+0xbe/0xf80
[  244.347813][ T7570]  do_syscall_64+0xfa/0xf80
[  244.347828][ T7570]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.347840][ T7570]  ? clear_bhb_loop+0x60/0xb0
[  244.347857][ T7570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.347869][ T7570] RIP: 0033:0x7fe12ed8e1ff
[  244.347884][ T7570] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  244.347895][ T7570] RSP: 002b:00007fe12fc88000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  244.347913][ T7570] RAX: ffffffffffffffda RBX: 00007fe12efe5fa0 RCX: 00007fe12ed8e1ff
[  244.347923][ T7570] RDX: 000000000000004a RSI: 0000200000000080 RDI: 00000000000000c8
[  244.347932][ T7570] RBP: 00007fe12fc88090 R08: 0000000000000000 R09: 0000000000000000
[  244.347940][ T7570] R10: 000000000000004a R11: 0000000000000293 R12: 0000000000000001
[  244.347950][ T7570] R13: 00007fe12efe6038 R14: 00007fe12efe5fa0 R15: 00007fe12f10fa28
[  244.347972][ T7570]  </TASK>
[  244.766608][ T5825] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  244.800717][   T10] gspca_spca1528: reg_w err -110
[  244.823493][   T10] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[  244.945373][ T5825] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  244.957855][ T5825] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  245.033474][ T5825] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  245.117514][ T5825] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.229004][ T5825] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  245.258437][ T7550] 8021q: adding VLAN 0 to HW filter on device bond0
[  245.303465][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.355849][ T7550] 8021q: adding VLAN 0 to HW filter on device team0
[  245.407396][ T7568] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  245.437223][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  245.616687][ T5825] usb 6-1: invalid MIDI out EP 0
[  245.622162][ T7550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  245.907230][ T5972] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  245.957711][ T7590] FAULT_INJECTION: forcing a failure.
[  245.957711][ T7590] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  245.963386][ T5972] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  246.024080][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  246.120338][ T7552] bridge0: port 3(syz_tun) entered blocking state
[  246.159276][ T5825] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  246.173628][ T7590] CPU: 0 UID: 0 PID: 7590 Comm: syz.3.480 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  246.173659][ T7590] Tainted: [L]=SOFTLOCKUP
[  246.173665][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  246.173677][ T7590] Call Trace:
[  246.173685][ T7590]  <TASK>
[  246.173693][ T7590]  dump_stack_lvl+0x189/0x250
[  246.173724][ T7590]  ? __pfx____ratelimit+0x10/0x10
[  246.173754][ T7590]  ? __pfx_dump_stack_lvl+0x10/0x10
[  246.173776][ T7590]  ? __pfx__printk+0x10/0x10
[  246.173805][ T7590]  ? __might_fault+0xb0/0x130
[  246.173847][ T7590]  should_fail_ex+0x414/0x560
[  246.173882][ T7590]  _copy_from_user+0x2d/0xb0
[  246.173906][ T7590]  vlan_ioctl_handler+0x9d/0x650
[  246.173925][ T7590]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  246.173960][ T7590]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  246.173978][ T7590]  sock_ioctl+0x610/0x790
[  246.174008][ T7590]  ? __pfx_sock_ioctl+0x10/0x10
[  246.174038][ T7590]  ? __fget_files+0x3a0/0x420
[  246.174062][ T7590]  ? __fget_files+0x2a/0x420
[  246.174091][ T7590]  ? bpf_lsm_file_ioctl+0x9/0x20
[  246.174113][ T7590]  ? __pfx_sock_ioctl+0x10/0x10
[  246.174137][ T7590]  __se_sys_ioctl+0xfc/0x170
[  246.174170][ T7590]  do_syscall_64+0xfa/0xf80
[  246.174202][ T7590]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.174222][ T7590]  ? clear_bhb_loop+0x60/0xb0
[  246.174244][ T7590]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  246.174261][ T7590] RIP: 0033:0x7fbef778f749
[  246.174280][ T7590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.174297][ T7590] RSP: 002b:00007fbef858a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  246.174319][ T7590] RAX: ffffffffffffffda RBX: 00007fbef79e5fa0 RCX: 00007fbef778f749
[  246.174335][ T7590] RDX: 0000200000000180 RSI: 0000000000008983 RDI: 0000000000000003
[  246.174348][ T7590] RBP: 00007fbef858a090 R08: 0000000000000000 R09: 0000000000000000
[  246.174358][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.174370][ T7590] R13: 00007fbef79e6038 R14: 00007fbef79e5fa0 R15: 00007fbef7b0fa28
[  246.174405][ T7590]  </TASK>
[  246.196641][ T7552] bridge0: port 3(syz_tun) entered disabled state
[  246.465572][ T7552] syz_tun: entered allmulticast mode
[  246.645655][ T7552] syz_tun: entered promiscuous mode
[  246.687600][ T7552] bridge0: port 3(syz_tun) entered blocking state
[  246.694528][ T7552] bridge0: port 3(syz_tun) entered forwarding state
[  248.033779][ T5972] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.078090][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'.
[  248.123503][ T7604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'.
[  248.220359][ T7594] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�l�1�*�$pOc�ɔ��r$�G����
[  248.246396][ T5972] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  248.421999][ T5890] usb 2-1: USB disconnect, device number 23
[  248.877977][ T5890] usb 6-1: USB disconnect, device number 4
[  248.995447][ T7613] fuse: Bad value for 'rootmode'
[  249.167879][ T7617] netlink: 'syz.1.490': attribute type 11 has an invalid length.
[  249.239237][ T7617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.490'.
[  249.523469][   T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  249.675774][   T10] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  249.724134][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.742353][   T10] usb 4-1: config 0 descriptor??
[  249.853391][ T5825] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  249.974884][   T10] kaweth 4-1:0.0: Firmware present in device.
[  250.020883][ T7640] support for the xor transformation has been removed.
[  250.042981][ T7638] kvm: pic: non byte write
[  250.047966][ T7638] kvm: pic: non byte write
[  250.063381][ T5825] usb 2-1: Using ep0 maxpacket: 32
[  250.085677][ T5825] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  250.112691][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.153730][ T5825] usb 2-1: Product: syz
[  250.161619][   T10] kaweth 4-1:0.0: Statistics collection: 0
[  250.177877][ T5825] usb 2-1: Manufacturer: syz
[  250.180432][   T10] kaweth 4-1:0.0: Multicast filter limit: 0
[  250.219882][   T10] kaweth 4-1:0.0: MTU: 0
[  250.221899][ T5825] usb 2-1: SerialNumber: syz
[  250.245408][   T10] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00
[  250.255520][ T5825] usb 2-1: config 0 descriptor??
[  250.595892][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.498'.
[  250.633832][ T5825] snd-usb-6fire 2-1:0.0: unknown device firmware state received from device:
[  250.669035][ T5825] b3 c1 69 eb 50 3d 29 15 
[  250.683289][ T5825] snd-usb-6fire 2-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  250.846712][ T5890] usb 2-1: USB disconnect, device number 24
[  250.868018][   T10] kaweth 4-1:0.0: Error setting receive filter
[  250.890889][   T10] kaweth 4-1:0.0: probe with driver kaweth failed with error -5
[  250.942018][   T10] usb 4-1: USB disconnect, device number 28
[  251.718684][ T7663] veth1_to_bond: entered allmulticast mode
[  252.261798][ T7667] netlink: 'syz.3.504': attribute type 10 has an invalid length.
[  252.357261][ T5890] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  252.387498][ T7667] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  252.538180][ T5890] usb 2-1: no configurations
[  252.545406][ T5890] usb 2-1: can't read configurations, error -22
[  252.687205][ T5890] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  252.738250][ T7676] netlink: 'syz.3.509': attribute type 9 has an invalid length.
[  252.786063][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'.
[  252.848728][ T7676] macvlan1: entered promiscuous mode
[  252.866416][ T5890] usb 2-1: no configurations
[  252.871781][ T5890] usb 2-1: can't read configurations, error -22
[  252.880078][ T7676] macvlan1: entered allmulticast mode
[  252.897932][ T5890] usb usb2-port1: attempt power cycle
[  253.003859][   T10] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  253.181282][   T10] usb 3-1: config 0 has no interfaces?
[  253.189649][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  253.227223][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.253725][ T5890] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  253.285146][ T5890] usb 2-1: no configurations
[  253.290429][ T5890] usb 2-1: can't read configurations, error -22
[  253.302566][   T10] usb 3-1: config 0 descriptor??
[  253.456815][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  253.516538][ T5890] usb 2-1: no configurations
[  253.526928][ T5890] usb 2-1: can't read configurations, error -22
[  253.601746][ T5890] usb usb2-port1: unable to enumerate USB device
[  253.976148][ T5825] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  254.004600][ T5917] usb 3-1: USB disconnect, device number 27
[  254.136716][ T5825] usb 6-1: Using ep0 maxpacket: 32
[  254.148568][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.164877][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.193385][ T5825] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  254.218945][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.301950][ T5825] usb 6-1: config 0 descriptor??
[  254.307988][ T7692] syzkaller0: entered promiscuous mode
[  254.328937][ T7692] syzkaller0: entered allmulticast mode
[  254.361260][ T7692] TC_ACT_REPEAT abuse ?
[  254.752455][ T5825] ft260 0003:0403:6030.0005: unknown main item tag 0x7
[  254.948600][ T5825] ft260 0003:0403:6030.0005: chip code: 6424 8183
[  255.017984][ T7696] fuse: Bad value for 'fd'
[  255.042267][ T7661] veth1_to_bond: left allmulticast mode
[  255.149752][ T5825] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  255.563780][   T10] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  255.754656][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  255.766810][   T10] usb 1-1: too many configurations: 103, using maximum allowed: 8
[  255.784316][   T10] usb 1-1: unable to read config index 0 descriptor/start: -71
[  255.800068][   T10] usb 1-1: can't read configurations, error -71
[  256.001420][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  256.008106][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  256.148392][ T7709] netlink: 72 bytes leftover after parsing attributes in process `syz.3.517'.
[  256.361863][ T7701] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.514'.
[  257.043466][   T10] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  257.253762][   T10] usb 1-1: Using ep0 maxpacket: 32
[  257.267303][   T10] usb 1-1: config 0 has no interfaces?
[  257.272995][   T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  257.483415][ T5916] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  257.521134][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.631295][   T10] usb 1-1: config 0 descriptor??
[  257.751570][ T5916] usb 2-1: Using ep0 maxpacket: 16
[  257.773416][ T5916] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.783892][ T5916] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  257.803889][ T5916] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  257.813214][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.882702][ T5916] usb 2-1: config 0 descriptor??
[  258.066905][ T5916] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  258.158435][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.200833][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.260575][ T7730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.297756][ T7730] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.418612][ T5916] usb 1-1: USB disconnect, device number 30
[  258.657982][ T5825] ft260 0003:0403:6030.0005: failed to retrieve status: -71
[  258.694597][ T5825] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71
[  258.867092][ T5825] usb 6-1: USB disconnect, device number 5
[  259.328043][ T7741] veth1_to_bond: entered allmulticast mode
[  259.355111][ T5825] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  259.596234][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  259.688657][ T5825] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.712969][ T5825] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  259.733668][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.826003][ T5825] usb 6-1: config 0 descriptor??
[  260.307085][ T5825] glorious 0003:258A:0036.0006: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.5-1/input0
[  260.466601][   T10] usb 6-1: USB disconnect, device number 6
[  260.951502][ T7752] fido_id[7752]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  261.081293][   T10] usb 2-1: USB disconnect, device number 29
[  261.500772][ T7759] veth1_to_bond: entered allmulticast mode
[  261.544513][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.529'.
[  261.771260][ T7764] kvm: pic: non byte write
[  261.776119][ T7764] kvm: pic: non byte write
[  262.458067][ T7770] binder: 7766:7770 unknown command 0
[  262.464168][ T7770] binder: 7766:7770 ioctl c0306201 200000000080 returned -22
[  262.874174][   T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  262.894027][ T7736] veth1_to_bond: left allmulticast mode
[  262.931336][ T7758] veth1_to_bond: left allmulticast mode
[  263.050272][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  263.068930][   T10] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  263.097893][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.136800][   T10] usb 1-1: Product: syz
[  263.158536][   T10] usb 1-1: Manufacturer: syz
[  263.186544][   T10] usb 1-1: SerialNumber: syz
[  263.222432][   T10] usb 1-1: config 0 descriptor??
[  263.283716][  T979] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  263.444687][  T979] usb 2-1: Using ep0 maxpacket: 32
[  263.511300][  T979] usb 2-1: config 0 has an invalid interface number: 132 but max is 0
[  263.563356][  T979] usb 2-1: config 0 has no interface number 0
[  263.569857][  T979] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  263.636606][  T979] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  263.676466][  T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.705582][  T979] usb 2-1: Product: syz
[  263.751311][  T979] usb 2-1: Manufacturer: syz
[  263.757439][ T7775] syzkaller0: entered promiscuous mode
[  263.763012][ T7775] syzkaller0: entered allmulticast mode
[  263.773388][  T979] usb 2-1: SerialNumber: syz
[  263.789934][  T979] usb 2-1: config 0 descriptor??
[  263.998403][  T979] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  264.060014][ T7776] ip6tnl1: entered allmulticast mode
[  264.060408][  T979] em28xx 2-1:0.132: Video interface 132 found:
[  264.365555][  T979] em28xx 2-1:0.132: unknown em28xx chip ID (0)
[  265.338295][  T979] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5)
[  265.423410][  T979] em28xx 2-1:0.132: board has no eeprom
[  265.484631][  T979] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  265.492594][  T979] em28xx 2-1:0.132: analog set to bulk mode.
[  265.597170][ T5917] em28xx 2-1:0.132: Registering V4L2 extension
[  265.623838][  T979] usb 2-1: USB disconnect, device number 30
[  265.645006][  T979] em28xx 2-1:0.132: Disconnecting em28xx
[  265.883371][   T30] audit: type=1326 audit(1765723127.634:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7796 comm="syz.3.539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbef778f749 code=0x0
[  266.074596][ T5890] usb 1-1: USB disconnect, device number 31
[  266.924453][ T5917] em28xx 2-1:0.132: Config register raw data: 0xffffffed
[  266.958596][ T5917] em28xx 2-1:0.132: AC97 chip type couldn't be determined
[  266.988672][ T5917] em28xx 2-1:0.132: No AC97 audio processor
[  267.024958][ T5917] usb 2-1: Decoder not found
[  267.038678][ T5917] em28xx 2-1:0.132: failed to create media graph
[  267.053863][ T5917] em28xx 2-1:0.132: V4L2 device video103 deregistered
[  267.088537][ T5917] em28xx 2-1:0.132: Remote control support is not available for this card.
[  267.119144][  T979] em28xx 2-1:0.132: Closing input extension
[  267.126467][   T44] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  267.194135][  T979] em28xx 2-1:0.132: Freeing device
[  267.365551][   T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.402097][   T44] usb 3-1: config 0 has no interfaces?
[  267.437305][   T44] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  267.466244][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.503414][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  267.554464][   T44] usb 3-1: config 0 descriptor??
[  267.683800][   T10] usb 1-1: Using ep0 maxpacket: 32
[  267.685343][  T979] usb 2-1: new full-speed USB device number 31 using dummy_hcd
[  267.725234][   T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  267.779266][   T10] usb 1-1: config 0 has no interface number 0
[  267.830710][   T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  267.866181][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.886980][  T979] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  267.924375][  T979] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  267.951595][   T10] usb 1-1: Product: syz
[  267.969612][   T10] usb 1-1: Manufacturer: syz
[  267.987412][   T10] usb 1-1: SerialNumber: syz
[  267.993276][  T979] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  268.029843][   T10] usb 1-1: config 0 descriptor??
[  268.051781][  T979] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.072958][   T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  268.098076][  T979] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  268.160121][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.211148][ T7818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  268.234267][ T5890] usb 3-1: USB disconnect, device number 28
[  268.277652][  T979] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  268.291651][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  268.311773][  T979] usb 2-1: invalid MIDI out EP 0
[  268.374841][   T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  268.479784][ T7828] netlink: 'syz.5.545': attribute type 3 has an invalid length.
[  268.487666][ T7828] netlink: 3 bytes leftover after parsing attributes in process `syz.5.545'.
[  268.689708][ T7835] veth1_to_bond: entered allmulticast mode
[  268.787230][  T979] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  268.805265][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  268.811883][ T5918] usb 1-1: USB disconnect, device number 32
[  268.837855][ T5918] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  269.148640][ T5918] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  269.387772][ T5918] quatech2 1-1:0.51: device disconnected
[  270.363438][   T30] audit: type=1326 audit(1765723132.134:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  270.546477][   T30] audit: type=1326 audit(1765723132.134:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12ed8df90 code=0x7ffc0000
[  270.695653][   T30] audit: type=1326 audit(1765723132.134:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  270.857105][   T30] audit: type=1326 audit(1765723132.134:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  271.072320][   T30] audit: type=1326 audit(1765723132.134:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  271.264069][ T5918] usb 2-1: USB disconnect, device number 31
[  271.380322][   T30] audit: type=1326 audit(1765723132.134:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  271.684098][   T30] audit: type=1326 audit(1765723132.144:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  271.803443][ T7855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.550'.
[  271.870625][   T30] audit: type=1326 audit(1765723132.144:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12ed8df90 code=0x7ffc0000
[  271.924419][ T7855] vlan0: entered promiscuous mode
[  271.973604][ T7855] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  272.140545][   T30] audit: type=1326 audit(1765723132.144:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  272.246606][   T30] audit: type=1326 audit(1765723132.144:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  272.438628][   T30] audit: type=1326 audit(1765723132.144:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  272.575096][   T30] audit: type=1326 audit(1765723132.144:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  272.743629][   T30] audit: type=1326 audit(1765723132.144:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  272.943420][   T30] audit: type=1326 audit(1765723132.144:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.0.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe12ed8df90 code=0x7ffc0000
[  273.299761][ T7834] veth1_to_bond: left allmulticast mode
[  273.533371][ T5975] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  273.720734][ T7871] tipc: Enabled bearer <ib:wg1>, priority 0
[  273.761039][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  273.811155][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  273.849737][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  273.897282][ T5975] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  273.997062][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.041772][ T5975] usb 3-1: config 0 descriptor??
[  274.266846][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'.
[  274.328663][ T5975] usbhid 3-1:0.0: can't add hid device: -71
[  274.338486][ T5975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  274.343443][ T5918] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  274.423892][ T5975] usb 3-1: USB disconnect, device number 29
[  274.563489][ T5918] usb 2-1: Using ep0 maxpacket: 16
[  274.593332][ T5918] usb 2-1: New USB device found, idVendor=0403, idProduct=b8ce, bcdDevice=30.bb
[  274.613402][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.703407][ T5918] usb 2-1: Product: syz
[  274.707640][ T5918] usb 2-1: Manufacturer: syz
[  274.712343][ T5918] usb 2-1: SerialNumber: syz
[  274.843438][ T5825] tipc: Node number set to 2576358023
[  275.358273][ T7877] FAULT_INJECTION: forcing a failure.
[  275.358273][ T7877] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  275.416778][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.2.557 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  275.416832][ T7877] Tainted: [L]=SOFTLOCKUP
[  275.416840][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  275.416852][ T7877] Call Trace:
[  275.416860][ T7877]  <TASK>
[  275.416869][ T7877]  dump_stack_lvl+0x189/0x250
[  275.416898][ T7877]  ? __pfx____ratelimit+0x10/0x10
[  275.416930][ T7877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.416952][ T7877]  ? __pfx__printk+0x10/0x10
[  275.416993][ T7877]  should_fail_ex+0x414/0x560
[  275.417030][ T7877]  _copy_to_user+0x31/0xb0
[  275.417056][ T7877]  simple_read_from_buffer+0xe1/0x170
[  275.417095][ T7877]  proc_fail_nth_read+0x1b3/0x220
[  275.417121][ T7877]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.417146][ T7877]  ? rw_verify_area+0x2a6/0x4d0
[  275.417192][ T7877]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  275.417215][ T7877]  vfs_read+0x200/0xa30
[  275.417244][ T7877]  ? fdget_pos+0x247/0x320
[  275.417301][ T7877]  ? __pfx___mutex_lock+0x10/0x10
[  275.417335][ T7877]  ? __pfx_vfs_read+0x10/0x10
[  275.417357][ T7877]  ? __fget_files+0x2a/0x420
[  275.417392][ T7877]  ? __fget_files+0x3a0/0x420
[  275.417424][ T7877]  ? __fget_files+0x2a/0x420
[  275.417464][ T7877]  ksys_read+0x145/0x250
[  275.417483][ T7877]  ? __fget_files+0x2a/0x420
[  275.417520][ T7877]  ? __pfx_ksys_read+0x10/0x10
[  275.417549][ T7877]  ? do_syscall_64+0xbe/0xf80
[  275.417573][ T7877]  do_syscall_64+0xfa/0xf80
[  275.417594][ T7877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.417612][ T7877]  ? clear_bhb_loop+0x60/0xb0
[  275.417637][ T7877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.417656][ T7877] RIP: 0033:0x7fa3a8b8e15c
[  275.417675][ T7877] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  275.417691][ T7877] RSP: 002b:00007fa3a9a45030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  275.417712][ T7877] RAX: ffffffffffffffda RBX: 00007fa3a8de5fa0 RCX: 00007fa3a8b8e15c
[  275.417727][ T7877] RDX: 000000000000000f RSI: 00007fa3a9a450a0 RDI: 0000000000000004
[  275.417739][ T7877] RBP: 00007fa3a9a45090 R08: 0000000000000000 R09: 0000000000000000
[  275.417751][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.417762][ T7877] R13: 00007fa3a8de6038 R14: 00007fa3a8de5fa0 R15: 00007fa3a8f0fa28
[  275.417792][ T7877]  </TASK>
[  276.147879][ T7879] netlink: 444 bytes leftover after parsing attributes in process `syz.2.558'.
[  276.419727][ T7885] blktrace: Concurrent blktraces are not allowed on sg0
[  276.603420][ T6248] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  276.805919][ T6248] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  276.817246][ T6248] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  276.858361][ T6248] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  276.901439][ T6248] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  277.015419][ T6248] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  277.075108][ T6248] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.104769][ T7884] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  277.133592][ T5825] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  277.156765][ T6248] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  277.203534][ T6248] usb 6-1: invalid MIDI out EP 0
[  277.376362][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  277.494021][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  277.718303][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  277.775974][ T6248] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  278.080751][ T5825] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  278.253510][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.377853][ T5825] usb 1-1: config 0 descriptor??
[  278.466121][ T5918] usb 2-1: USB disconnect, device number 32
[  278.707152][ T5825] usbhid 1-1:0.0: can't add hid device: -71
[  278.720137][ T5825] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  278.968408][ T7902] support for the xor transformation has been removed.
[  278.980741][ T5825] usb 1-1: USB disconnect, device number 33
[  279.643089][ T7910] netlink: 16 bytes leftover after parsing attributes in process `syz.1.566'.
[  280.494499][ T7913] veth1_to_bond: entered allmulticast mode
[  280.616951][ T7913] netlink: 4 bytes leftover after parsing attributes in process `syz.2.567'.
[  280.705042][ T7912] veth1_to_bond: left allmulticast mode
[  281.065604][ T5825] usb 6-1: USB disconnect, device number 7
[  282.256412][   T44] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  282.604538][   T44] usb 4-1: device descriptor read/64, error -71
[  282.851690][   T44] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  283.063782][   T44] usb 4-1: device descriptor read/64, error -71
[  283.261752][   T44] usb usb4-port1: attempt power cycle
[  283.774629][   T44] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  283.883520][   T44] usb 4-1: device descriptor read/8, error -71
[  284.187297][   T44] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  284.249295][   T44] usb 4-1: device descriptor read/8, error -71
[  284.394461][   T44] usb usb4-port1: unable to enumerate USB device
[  284.842300][ T7960] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  284.998816][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.579'.
[  285.033476][ T5825] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  285.255983][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  285.293475][ T5825] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[  285.328438][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.383831][ T5825] usb 1-1: config 0 descriptor??
[  285.413477][   T44] usb 2-1: new full-speed USB device number 33 using dummy_hcd
[  285.597695][   T44] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  285.635215][   T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  285.673438][   T44] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  285.717885][   T44] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  285.761965][   T44] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  285.821329][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  285.821380][   T30] audit: type=1326 audit(1765723147.624:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  285.858725][   T44] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.890851][ T5825] logitech 0003:046D:C626.0007: unknown main item tag 0x4
[  285.905078][ T7971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  285.927147][ T5825] logitech 0003:046D:C626.0007: item fetching failed at offset 9/11
[  285.951935][   T44] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  285.980561][   T30] audit: type=1326 audit(1765723147.664:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.003988][ T5825] logitech 0003:046D:C626.0007: parse failed
[  286.013983][   T44] usb 2-1: invalid MIDI out EP 0
[  286.053493][ T5825] logitech 0003:046D:C626.0007: probe with driver logitech failed with error -22
[  286.146555][ T5825] usb 1-1: USB disconnect, device number 34
[  286.172754][   T30] audit: type=1326 audit(1765723147.664:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.346165][   T30] audit: type=1326 audit(1765723147.664:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.383961][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.384920][   T44] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  286.488199][   T30] audit: type=1326 audit(1765723147.664:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.576042][   T30] audit: type=1326 audit(1765723147.664:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.714108][   T30] audit: type=1326 audit(1765723147.664:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  286.979064][ T5836] Bluetooth: Unexpected start frame (len 4)
[  287.027293][   T30] audit: type=1326 audit(1765723147.664:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  287.136684][   T30] audit: type=1326 audit(1765723147.664:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  287.244533][   T30] audit: type=1326 audit(1765723147.664:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7956 comm="syz.0.578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe12ed8f749 code=0x7ffc0000
[  288.283439][ T5975] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  288.476783][ T5975] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  288.528031][ T5975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  288.633343][ T5975] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  288.711080][ T5975] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.776301][ T6248] usb 2-1: USB disconnect, device number 33
[  288.790327][ T5975] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  288.850365][ T5975] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.932103][ T8000] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  289.034786][ T5975] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  289.086340][ T5975] usb 1-1: invalid MIDI out EP 0
[  289.392501][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  289.460212][ T5975] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  289.544912][ T8015] netlink: 156 bytes leftover after parsing attributes in process `syz.5.588'.
[  291.003487][ T5890] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  291.303396][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  291.372576][ T5890] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.431374][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  291.500616][ T5890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  291.539503][ T5890] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  291.597865][ T5890] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  292.376164][ T5890] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  292.437634][ T5890] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  292.474611][ T5890] usb 4-1: Manufacturer: syz
[  292.504491][ T5918] usb 1-1: USB disconnect, device number 35
[  292.510640][ T5890] usb 4-1: config 0 descriptor??
[  293.023673][ T5918] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  293.043845][ T5890] rc_core: IR keymap rc-hauppauge not found
[  293.063212][ T5890] Registered IR keymap rc-empty
[  293.113234][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.237982][ T5918] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  293.269631][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  293.277401][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.335513][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  293.361378][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  293.395749][ T8057] netlink: 'syz.3.592': attribute type 11 has an invalid length.
[  293.423658][ T5918] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.425008][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  293.473810][ T6248] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  293.488578][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  293.488613][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.504059][ T8048] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  293.508841][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  293.509983][ T5918] usb 1-1: invalid MIDI out EP 0
[  293.599853][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.614072][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.631359][    C0] rc rc0: IR event FIFO is full!
[  293.631377][    C0] rc rc0: IR event FIFO is full!
[  293.631388][    C0] rc rc0: IR event FIFO is full!
[  293.631859][    C0] rc rc0: IR event FIFO is full!
[  293.631873][    C0] rc rc0: IR event FIFO is full!
[  293.631885][    C0] rc rc0: IR event FIFO is full!
[  293.631896][    C0] rc rc0: IR event FIFO is full!
[  293.631908][    C0] rc rc0: IR event FIFO is full!
[  293.632131][    C0] rc rc0: IR event FIFO is full!
[  293.632147][    C0] rc rc0: IR event FIFO is full!
[  293.632161][    C0] rc rc0: IR event FIFO is full!
[  293.632176][    C0] rc rc0: IR event FIFO is full!
[  293.632189][    C0] rc rc0: IR event FIFO is full!
[  293.632454][    C0] rc rc0: IR event FIFO is full!
[  293.632475][    C0] rc rc0: IR event FIFO is full!
[  293.632487][    C0] rc rc0: IR event FIFO is full!
[  293.632500][    C0] rc rc0: IR event FIFO is full!
[  293.632513][    C0] rc rc0: IR event FIFO is full!
[  293.632748][    C0] rc rc0: IR event FIFO is full!
[  293.632766][    C0] rc rc0: IR event FIFO is full!
[  293.632780][    C0] rc rc0: IR event FIFO is full!
[  293.632793][    C0] rc rc0: IR event FIFO is full!
[  293.632811][    C0] rc rc0: IR event FIFO is full!
[  293.633033][    C0] rc rc0: IR event FIFO is full!
[  293.633049][    C0] rc rc0: IR event FIFO is full!
[  293.633072][    C0] rc rc0: IR event FIFO is full!
[  293.633084][    C0] rc rc0: IR event FIFO is full!
[  293.633096][    C0] rc rc0: IR event FIFO is full!
[  293.633108][    C0] rc rc0: IR event FIFO is full!
[  293.633121][    C0] rc rc0: IR event FIFO is full!
[  293.633133][    C0] rc rc0: IR event FIFO is full!
[  293.633146][    C0] rc rc0: IR event FIFO is full!
[  293.633160][    C0] rc rc0: IR event FIFO is full!
[  293.633174][    C0] rc rc0: IR event FIFO is full!
[  293.633442][ T6248] usb 2-1: Using ep0 maxpacket: 16
[  293.633671][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.634106][    C0] rc rc0: IR event FIFO is full!
[  293.634124][    C0] rc rc0: IR event FIFO is full!
[  293.634350][    C0] rc rc0: IR event FIFO is full!
[  293.634364][    C0] rc rc0: IR event FIFO is full!
[  293.634377][    C0] rc rc0: IR event FIFO is full!
[  293.634392][    C0] rc rc0: IR event FIFO is full!
[  293.634618][    C0] rc rc0: IR event FIFO is full!
[  293.634634][    C0] rc rc0: IR event FIFO is full!
[  293.634648][    C0] rc rc0: IR event FIFO is full!
[  293.635508][    C0] rc rc0: IR event FIFO is full!
[  293.635747][    C0] rc rc0: IR event FIFO is full!
[  293.635765][    C0] rc rc0: IR event FIFO is full!
[  293.635778][    C0] rc rc0: IR event FIFO is full!
[  293.635791][    C0] rc rc0: IR event FIFO is full!
[  293.635805][    C0] rc rc0: IR event FIFO is full!
[  293.635815][    C0] rc rc0: IR event FIFO is full!
[  293.635829][    C0] rc rc0: IR event FIFO is full!
[  293.635842][    C0] rc rc0: IR event FIFO is full!
[  293.636075][    C0] rc rc0: IR event FIFO is full!
[  293.636091][    C0] rc rc0: IR event FIFO is full!
[  293.636103][    C0] rc rc0: IR event FIFO is full!
[  293.636338][    C0] rc rc0: IR event FIFO is full!
[  293.636353][    C0] rc rc0: IR event FIFO is full!
[  293.636579][    C0] rc rc0: IR event FIFO is full!
[  293.636593][    C0] rc rc0: IR event FIFO is full!
[  293.637237][    C0] rc rc0: IR event FIFO is full!
[  293.637254][    C0] rc rc0: IR event FIFO is full!
[  293.637269][    C0] rc rc0: IR event FIFO is full!
[  293.637695][    C0] rc rc0: IR event FIFO is full!
[  293.637710][    C0] rc rc0: IR event FIFO is full!
[  293.637725][    C0] rc rc0: IR event FIFO is full!
[  293.637949][    C0] rc rc0: IR event FIFO is full!
[  293.637963][    C0] rc rc0: IR event FIFO is full!
[  293.637976][    C0] rc rc0: IR event FIFO is full!
[  293.637989][    C0] rc rc0: IR event FIFO is full!
[  293.638002][    C0] rc rc0: IR event FIFO is full!
[  293.638015][    C0] rc rc0: IR event FIFO is full!
[  293.638239][    C0] rc rc0: IR event FIFO is full!
[  293.638256][    C0] rc rc0: IR event FIFO is full!
[  293.638271][    C0] rc rc0: IR event FIFO is full!
[  293.638493][    C0] rc rc0: IR event FIFO is full!
[  293.638508][    C0] rc rc0: IR event FIFO is full!
[  293.638522][    C0] rc rc0: IR event FIFO is full!
[  293.638535][    C0] rc rc0: IR event FIFO is full!
[  293.638550][    C0] rc rc0: IR event FIFO is full!
[  293.638563][    C0] rc rc0: IR event FIFO is full!
[  293.638769][    C0] rc rc0: IR event FIFO is full!
[  293.638784][    C0] rc rc0: IR event FIFO is full!
[  293.638797][    C0] rc rc0: IR event FIFO is full!
[  293.638810][    C0] rc rc0: IR event FIFO is full!
[  293.638824][    C0] rc rc0: IR event FIFO is full!
[  293.638838][    C0] rc rc0: IR event FIFO is full!
[  293.638851][    C0] rc rc0: IR event FIFO is full!
[  293.638866][    C0] rc rc0: IR event FIFO is full!
[  293.639100][    C0] rc rc0: IR event FIFO is full!
[  293.639115][    C0] rc rc0: IR event FIFO is full!
[  293.639128][    C0] rc rc0: IR event FIFO is full!
[  293.639142][    C0] rc rc0: IR event FIFO is full!
[  293.639155][    C0] rc rc0: IR event FIFO is full!
[  293.639169][    C0] rc rc0: IR event FIFO is full!
[  293.639394][    C0] rc rc0: IR event FIFO is full!
[  293.639409][    C0] rc rc0: IR event FIFO is full!
[  293.639423][    C0] rc rc0: IR event FIFO is full!
[  293.639644][    C0] rc rc0: IR event FIFO is full!
[  293.639660][    C0] rc rc0: IR event FIFO is full!
[  293.639886][    C0] rc rc0: IR event FIFO is full!
[  293.639902][    C0] rc rc0: IR event FIFO is full!
[  293.639916][    C0] rc rc0: IR event FIFO is full!
[  293.640129][    C0] rc rc0: IR event FIFO is full!
[  293.640145][    C0] rc rc0: IR event FIFO is full!
[  293.640158][    C0] rc rc0: IR event FIFO is full!
[  293.640171][    C0] rc rc0: IR event FIFO is full!
[  293.640184][    C0] rc rc0: IR event FIFO is full!
[  293.640198][    C0] rc rc0: IR event FIFO is full!
[  293.640423][    C0] rc rc0: IR event FIFO is full!
[  293.640440][    C0] rc rc0: IR event FIFO is full!
[  293.640454][    C0] rc rc0: IR event FIFO is full!
[  293.640467][    C0] rc rc0: IR event FIFO is full!
[  293.640481][    C0] rc rc0: IR event FIFO is full!
[  293.640494][    C0] rc rc0: IR event FIFO is full!
[  293.640721][    C0] rc rc0: IR event FIFO is full!
[  293.640736][    C0] rc rc0: IR event FIFO is full!
[  293.640963][    C0] rc rc0: IR event FIFO is full!
[  293.640979][    C0] rc rc0: IR event FIFO is full!
[  293.640993][    C0] rc rc0: IR event FIFO is full!
[  293.641007][    C0] rc rc0: IR event FIFO is full!
[  293.641021][    C0] rc rc0: IR event FIFO is full!
[  293.641244][    C0] rc rc0: IR event FIFO is full!
[  293.641260][    C0] rc rc0: IR event FIFO is full!
[  293.641274][    C0] rc rc0: IR event FIFO is full!
[  293.641287][    C0] rc rc0: IR event FIFO is full!
[  293.641301][    C0] rc rc0: IR event FIFO is full!
[  293.641529][    C0] rc rc0: IR event FIFO is full!
[  293.641756][    C0] rc rc0: IR event FIFO is full!
[  293.641771][    C0] rc rc0: IR event FIFO is full!
[  293.641785][    C0] rc rc0: IR event FIFO is full!
[  293.641799][    C0] rc rc0: IR event FIFO is full!
[  293.641810][    C0] rc rc0: IR event FIFO is full!
[  293.641823][    C0] rc rc0: IR event FIFO is full!
[  293.642048][    C0] rc rc0: IR event FIFO is full!
[  293.642072][    C0] rc rc0: IR event FIFO is full!
[  293.642296][    C0] rc rc0: IR event FIFO is full!
[  293.642311][    C0] rc rc0: IR event FIFO is full!
[  293.642323][    C0] rc rc0: IR event FIFO is full!
[  293.642336][    C0] rc rc0: IR event FIFO is full!
[  293.642347][    C0] rc rc0: IR event FIFO is full!
[  293.642358][    C0] rc rc0: IR event FIFO is full!
[  293.643420][    C0] rc rc0: IR event FIFO is full!
[  293.643437][    C0] rc rc0: IR event FIFO is full!
[  293.643450][    C0] rc rc0: IR event FIFO is full!
[  293.643677][    C0] rc rc0: IR event FIFO is full!
[  293.643692][    C0] rc rc0: IR event FIFO is full!
[  293.643703][    C0] rc rc0: IR event FIFO is full!
[  293.644332][    C0] rc rc0: IR event FIFO is full!
[  293.644347][    C0] rc rc0: IR event FIFO is full!
[  293.644361][    C0] rc rc0: IR event FIFO is full!
[  293.644582][    C0] rc rc0: IR event FIFO is full!
[  293.644598][    C0] rc rc0: IR event FIFO is full!
[  293.644612][    C0] rc rc0: IR event FIFO is full!
[  293.644625][    C0] rc rc0: IR event FIFO is full!
[  293.644645][    C0] rc rc0: IR event FIFO is full!
[  293.644858][    C0] rc rc0: IR event FIFO is full!
[  293.644872][    C0] rc rc0: IR event FIFO is full!
[  293.644885][    C0] rc rc0: IR event FIFO is full!
[  293.656250][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.680423][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.693427][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.738073][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.803763][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.804972][ T6248] usb 2-1: New USB device found, idVendor=0403, idProduct=b8ce, bcdDevice=30.bb
[  293.804994][ T6248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.805007][ T6248] usb 2-1: Product: syz
[  293.805016][ T6248] usb 2-1: Manufacturer: syz
[  293.805026][ T6248] usb 2-1: SerialNumber: syz
[  293.823448][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.843444][ T5890] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  293.879164][ T5890] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  293.879224][ T5890] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  294.037691][ T5918] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  294.926686][   T44] usb 4-1: USB disconnect, device number 33
[  295.783474][ T5890] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  295.933612][ T5890] usb 4-1: Using ep0 maxpacket: 16
[  295.950273][ T5890] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  295.950340][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.950363][ T5890] usb 4-1: Product: syz
[  295.950380][ T5890] usb 4-1: Manufacturer: syz
[  295.950395][ T5890] usb 4-1: SerialNumber: syz
[  295.966466][ T5890] usb 4-1: config 0 descriptor??
[  296.175588][ T5890] usb 4-1: ignoring: not an USB2CAN converter
[  296.658391][ T8092] netlink: 196 bytes leftover after parsing attributes in process `syz.5.604'.
[  296.929918][ T5918] usb 1-1: USB disconnect, device number 36
[  297.295469][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  297.295488][   T30] audit: type=1326 audit(1765723159.104:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe12ed8f749 code=0x0
[  298.013459][ T6248] usb 2-1: USB disconnect, device number 34
[  298.427712][ T5918] usb 4-1: USB disconnect, device number 34
[  299.382147][ T8122] pimreg: entered allmulticast mode
[  299.383570][ T5890] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  299.534100][ T5890] usb 2-1: Using ep0 maxpacket: 32
[  299.560987][ T5890] usb 2-1: config 0 has an invalid interface number: 53 but max is 0
[  299.561021][ T5890] usb 2-1: config 0 has no interface number 0
[  299.561068][ T5890] usb 2-1: config 0 interface 53 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 16
[  299.561096][ T5890] usb 2-1: config 0 interface 53 has no altsetting 0
[  299.594118][ T5890] usb 2-1: New USB device found, idVendor=07c0, idProduct=158a, bcdDevice=dd.2e
[  299.594154][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.594177][ T5890] usb 2-1: Product: syz
[  299.594194][ T5890] usb 2-1: Manufacturer: syz
[  299.594210][ T5890] usb 2-1: SerialNumber: syz
[  299.599772][ T5890] usb 2-1: config 0 descriptor??
[  299.603672][ T8116] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  299.606365][ T5890] iowarrior 2-1:0.53: no interrupt-in endpoint found
[  299.834165][ T5890] usb 2-1: USB disconnect, device number 35
[  299.881016][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'.
[  300.002957][ T8128] netlink: 24 bytes leftover after parsing attributes in process `syz.0.610'.
[  300.567201][ T5890] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  300.756316][ T5890] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  300.756385][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  300.756415][ T5890] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  300.756444][ T5890] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  300.756492][ T5890] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  300.756516][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.774914][ T8144] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  301.285825][ T5890] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  301.314514][ T5890] usb 4-1: invalid MIDI out EP 0
[  301.485173][ T5918] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  301.752090][ T5918] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  301.770244][ T5890] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  301.808641][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.035877][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  302.079057][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.134900][ T5918] usb 1-1: Product: syz
[  302.163476][ T5918] usb 1-1: Manufacturer: syz
[  302.180668][ T5918] usb 1-1: SerialNumber: syz
[  302.214537][ T5918] usb 1-1: config 0 descriptor??
[  303.839005][ T8192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'.
[  304.263235][ T8196] netlink: 52 bytes leftover after parsing attributes in process `syz.1.624'.
[  304.507911][ T5890] usb 4-1: USB disconnect, device number 35
[  304.755603][ T5975] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  304.964520][ T5975] usb 6-1: Using ep0 maxpacket: 32
[  305.018926][ T5975] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config
[  305.047449][ T5975] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  305.099787][ T5975] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  305.144441][ T5890] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  305.152408][ T5975] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11
[  305.228654][ T5975] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30
[  305.228777][ T8205] syzkaller0: entered promiscuous mode
[  305.290578][ T5975] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.333361][ T5975] usb 6-1: Product: syz
[  305.337812][ T5975] usb 6-1: Manufacturer: syz
[  305.342407][ T5975] usb 6-1: SerialNumber: syz
[  305.348863][ T8205] syzkaller0: entered allmulticast mode
[  305.373401][ T5890] usb 2-1: Using ep0 maxpacket: 16
[  305.393314][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  305.413781][ T8205] TC_ACT_REPEAT abuse ?
[  305.431637][    C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71)
[  305.462660][ T5975] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/input/input14
[  305.476900][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  305.527602][  T979] usb 1-1: USB disconnect, device number 37
[  305.532286][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  305.613926][ T5975] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR
[  305.643352][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.670662][ T5975]  (id 0x00)
[  305.687467][ T5890] usb 2-1: Product: syz
[  305.691698][ T5890] usb 2-1: Manufacturer: syz
[  305.716604][ T5890] usb 2-1: SerialNumber: syz
[  305.777152][ T5890] usb 2-1: config 0 descriptor??
[  305.829365][ T5890] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  305.874057][ T5890] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  305.958059][ T5975] rc_core: IR keymap rc-imon-pad not found
[  305.982847][ T5975] Registered IR keymap rc-empty
[  306.002765][ T5975] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support
[  306.058232][ T5975] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  306.102174][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'.
[  306.105317][ T5975] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0
[  306.133481][  T979] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  306.152839][ T5975] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:155.0/rc/rc0/input15
[  306.199281][ T5975] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:8> initialized
[  306.323574][  T979] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  306.352982][  T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  306.387459][  T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  306.418504][  T979] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  306.510662][  T979] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  306.568728][ T5890] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  306.569739][  T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.613430][ T5975] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  306.640025][ T5890] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  306.664168][ T8209] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  306.682969][  T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  306.706014][  T979] usb 1-1: invalid MIDI out EP 0
[  306.823473][ T5975] usb 3-1: Using ep0 maxpacket: 32
[  306.831491][ T5975] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  306.854926][ T5975] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[  306.934167][ T5975] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 7
[  307.042646][  T979] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  307.063174][ T5975] usb 3-1: config 0 interface 0 has no altsetting 0
[  307.086939][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  307.106141][ T5975] usb 3-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  307.124777][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  307.154526][ T5975] usb 3-1: config 0 descriptor??
[  307.424090][ T5890] em28xx 2-1:0.0: AC97 command still being executed: not handled properly!
[  307.479242][ T5890] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  307.723204][ T8211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  307.735150][ T8211] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  307.764170][ T5975] usbhid 3-1:0.0: can't add hid device: -71
[  307.770229][ T5975] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  307.785553][ T5890] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  307.804598][ T5890] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  307.813624][ T5975] usb 3-1: USB disconnect, device number 30
[  307.828263][ T5890] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  307.856199][ T5890] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  307.872456][ T5890] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  308.061383][ T5890] usb 2-1: USB disconnect, device number 36
[  308.670544][  T979] usb 6-1: USB disconnect, device number 8
[  308.957953][ T8240] libceph: resolve '.
[  308.957953][ T8240] #)|.��f��ǝ�a���2s�o�w���?�'�%ЏKAq�f��C���z�e�Sb3L)Hy�o����������Ǥ�Y�M�����h�E$
[  308.957953][ T8240] ' (ret=-3): failed
[  310.093408][ T5975] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  310.375113][  T979] usb 1-1: USB disconnect, device number 38
[  310.397547][ T5975] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  310.434879][ T5975] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  310.605318][ T5975] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  310.639916][ T5975] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.740420][ T5975] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  310.933236][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.993605][ T8248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  311.077459][ T5975] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  311.151856][ T5975] usb 6-1: invalid MIDI out EP 0
[  311.491457][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.528199][ T5975] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  313.469349][  T979] usb 6-1: USB disconnect, device number 9
[  313.877149][ T8288] netlink: 'syz.1.646': attribute type 10 has an invalid length.
[  313.937822][ T8288] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  314.352426][ T8297] FAULT_INJECTION: forcing a failure.
[  314.352426][ T8297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.432697][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.5.650'.
[  314.469015][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.1.649 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  314.469039][ T8297] Tainted: [L]=SOFTLOCKUP
[  314.469044][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  314.469052][ T8297] Call Trace:
[  314.469057][ T8297]  <TASK>
[  314.469062][ T8297]  dump_stack_lvl+0x189/0x250
[  314.469083][ T8297]  ? __pfx____ratelimit+0x10/0x10
[  314.469102][ T8297]  ? __pfx_dump_stack_lvl+0x10/0x10
[  314.469116][ T8297]  ? __pfx__printk+0x10/0x10
[  314.469133][ T8297]  ? __might_fault+0xb0/0x130
[  314.469157][ T8297]  should_fail_ex+0x414/0x560
[  314.469178][ T8297]  _copy_from_user+0x2d/0xb0
[  314.469193][ T8297]  ___sys_sendmsg+0x158/0x2a0
[  314.469210][ T8297]  ? __pfx____sys_sendmsg+0x10/0x10
[  314.469227][ T8297]  ? rcu_read_lock_any_held+0xb3/0x120
[  314.469258][ T8297]  ? __fget_files+0x2a/0x420
[  314.469272][ T8297]  ? __fget_files+0x3a0/0x420
[  314.469292][ T8297]  __x64_sys_sendmsg+0x19b/0x260
[  314.469308][ T8297]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  314.469327][ T8297]  ? __pfx_ksys_write+0x10/0x10
[  314.469342][ T8297]  ? do_syscall_64+0xbe/0xf80
[  314.469357][ T8297]  do_syscall_64+0xfa/0xf80
[  314.469370][ T8297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.469382][ T8297]  ? clear_bhb_loop+0x60/0xb0
[  314.469395][ T8297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  314.469407][ T8297] RIP: 0033:0x7f430a58f749
[  314.469419][ T8297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  314.469429][ T8297] RSP: 002b:00007f430b39f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  314.469444][ T8297] RAX: ffffffffffffffda RBX: 00007f430a7e5fa0 RCX: 00007f430a58f749
[  314.469454][ T8297] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000003
[  314.469462][ T8297] RBP: 00007f430b39f090 R08: 0000000000000000 R09: 0000000000000000
[  314.469469][ T8297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  314.469476][ T8297] R13: 00007f430a7e6038 R14: 00007f430a7e5fa0 R15: 00007f430a90fa28
[  314.469495][ T8297]  </TASK>
[  315.303436][ T5918] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  315.513614][ T5918] usb 6-1: Using ep0 maxpacket: 16
[  315.534214][ T5918] usb 6-1: config 0 descriptor has 1 excess byte, ignoring
[  315.570307][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  315.652838][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  315.693372][ T5918] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.743631][ T5918] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  315.815456][ T5918] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  315.837324][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.859433][ T5918] usb 6-1: Product: syz
[  315.877153][ T5918] usb 6-1: Manufacturer: syz
[  315.881817][ T5918] usb 6-1: SerialNumber: syz
[  315.919468][ T5918] usb 6-1: config 0 descriptor??
[  315.945183][ T8301] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  316.013413][ T5918] mcba_usb 6-1:0.0 can0: couldn't setup read URBs
[  316.030362][ T5918] mcba_usb 6-1:0.0 can0: couldn't start device: -90
[  316.217143][ T5918] mcba_usb 6-1:0.0: probe with driver mcba_usb failed with error -90
[  316.244521][ T8313] netlink: 48 bytes leftover after parsing attributes in process `syz.2.654'.
[  316.297580][ T5918] usb 6-1: USB disconnect, device number 10
[  317.223400][ T5918] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  317.244631][ T8328] blktrace: Concurrent blktraces are not allowed on sg0
[  317.541817][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  317.583003][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  317.675010][ T5918] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  317.693420][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  317.729256][ T5918] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  317.794689][ T5918] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  317.846151][ T5918] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  317.883347][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.918898][ T8324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  317.966031][ T5918] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  318.017386][ T5918] usb 3-1: invalid MIDI out EP 0
[  318.073782][ T5975] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  318.295975][ T5918] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  318.312946][ T8315] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.651'.
[  318.344337][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.479675][ T5975] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.601054][ T5975] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  318.652467][ T5975] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  318.682498][ T5975] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.745828][ T5975] usb 6-1: config 0 descriptor??
[  319.001118][ T8339] netlink: 156 bytes leftover after parsing attributes in process `syz.0.659'.
[  319.129238][ T5975] usbhid 6-1:0.0: can't add hid device: -71
[  319.176267][ T5975] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  319.237729][ T5975] usb 6-1: USB disconnect, device number 11
[  319.464012][ T5918] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  319.733350][ T5918] usb 2-1: Using ep0 maxpacket: 8
[  319.748989][ T5918] usb 2-1: config 0 has too many interfaces: 190, using maximum allowed: 32
[  319.773528][ T5918] usb 2-1: config 0 has an invalid interface number: 224 but max is 189
[  319.845550][ T5918] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 190
[  319.897463][ T5918] usb 2-1: config 0 has no interface number 0
[  319.917733][ T5918] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e
[  319.945346][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.033423][ T5918] usb 2-1: config 0 descriptor??
[  320.073098][ T8347] trusted_key: syz.3.662 sent an empty control message without MSG_MORE.
[  320.251206][ T5975] usb 2-1: USB disconnect, device number 37
[  320.333635][ T5918] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  320.515391][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  320.534725][ T5918] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  320.621661][ T5975] usb 3-1: USB disconnect, device number 31
[  320.624115][ T5918] usb 4-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.e3
[  320.703391][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.781330][ T5918] usb 4-1: config 0 descriptor??
[  320.831406][ T8347] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  321.351848][ T8359] netlink: 48 bytes leftover after parsing attributes in process `syz.0.666'.
[  321.447333][ T8351] delete_channel: no stack
[  321.618331][ T5918] usbhid 4-1:0.0: can't add hid device: -71
[  321.654577][ T5918] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  321.743735][ T5918] usb 4-1: USB disconnect, device number 36
[  321.899457][ T5836] Bluetooth: hci0: ACL packet for unknown connection handle 200
[  321.983109][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  322.007159][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  322.303404][ T5825] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  322.481206][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'.
[  322.626447][ T5825] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  322.686857][ T5825] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  322.712465][ T5825] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  322.968778][ T5825] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.987265][ T8393] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  323.053462][ T5825] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  323.123438][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.198896][ T8384] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  323.226409][ T5825] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  323.315760][ T5825] usb 6-1: invalid MIDI out EP 0
[  323.765478][ T6172] udevd[6172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.821917][ T5825] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22
[  324.245972][ T8403] netlink: 48 bytes leftover after parsing attributes in process `syz.3.679'.
[  325.295938][ T8415] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.684'.
[  325.343674][ T8415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'.
[  325.594562][ T8418] fuse: root generation should be zero
[  325.605247][ T5825] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  325.747352][ T5975] usb 6-1: USB disconnect, device number 12
[  325.813642][ T5825] usb 3-1: unable to get BOS descriptor or descriptor too short
[  325.831912][ T5825] usb 3-1: not running at top speed; connect to a high speed hub
[  325.843432][ T5918] usb 1-1: new low-speed USB device number 39 using dummy_hcd
[  325.886323][ T5825] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  325.903558][ T5825] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  325.941441][ T5825] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 2
[  325.971986][ T8427] veth1_to_bond: entered allmulticast mode
[  325.981769][ T5825] usb 3-1: config 12 has no interface number 0
[  326.017718][ T5825] usb 3-1: too many endpoints for config 12 interface 173 altsetting 0: 118, using maximum allowed: 30
[  326.051082][ T5918] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  326.069373][ T8427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  326.082406][ T5825] usb 3-1: config 12 interface 173 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 118
[  326.110127][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  326.144785][ T5825] usb 3-1: config 12 interface 173 has no altsetting 1
[  326.173351][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.189695][ T8425] veth1_to_bond: left allmulticast mode
[  326.202332][ T5825] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[  326.233374][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.247004][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.288674][ T8431] netlink: 48 bytes leftover after parsing attributes in process `syz.5.691'.
[  326.292303][ T5825] usb 3-1: Product: syz
[  326.312576][ T5825] usb 3-1: Manufacturer: syz
[  326.340889][ T5918] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  326.353380][ T5825] usb 3-1: SerialNumber: syz
[  326.373698][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  326.410868][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.453703][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.543108][ T5836] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  326.575839][ T5918] usb 1-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  326.586676][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  326.612551][ T5918] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.622686][ T5918] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  326.702191][ T5918] usb 1-1: string descriptor 0 read error: -22
[  326.710192][ T5918] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  326.720174][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.756320][ T5825] usb 3-1: USB disconnect, device number 32
[  326.844374][ T5918] adutux 1-1:168.0: interrupt endpoints not found
[  326.962724][ T8440] FAULT_INJECTION: forcing a failure.
[  326.962724][ T8440] name failslab, interval 1, probability 0, space 0, times 0
[  327.026437][ T8440] CPU: 1 UID: 0 PID: 8440 Comm: syz.2.693 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  327.026472][ T8440] Tainted: [L]=SOFTLOCKUP
[  327.026479][ T8440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  327.026492][ T8440] Call Trace:
[  327.026500][ T8440]  <TASK>
[  327.026518][ T8440]  dump_stack_lvl+0x189/0x250
[  327.026553][ T8440]  ? __pfx____ratelimit+0x10/0x10
[  327.026587][ T8440]  ? __pfx_dump_stack_lvl+0x10/0x10
[  327.026613][ T8440]  ? __pfx__printk+0x10/0x10
[  327.026643][ T8440]  ? __lock_acquire+0x6b6/0x2cf0
[  327.026677][ T8440]  should_fail_ex+0x414/0x560
[  327.026714][ T8440]  should_failslab+0xa8/0x100
[  327.026744][ T8440]  kmem_cache_alloc_noprof+0x88/0x710
[  327.026775][ T8440]  ? __netlink_lookup+0xbd/0x8a0
[  327.026813][ T8440]  ? skb_clone+0x212/0x3a0
[  327.026846][ T8440]  skb_clone+0x212/0x3a0
[  327.026887][ T8440]  __netlink_deliver_tap+0x404/0x850
[  327.026929][ T8440]  ? netlink_deliver_tap+0x2e/0x1b0
[  327.026958][ T8440]  netlink_deliver_tap+0x19c/0x1b0
[  327.026988][ T8440]  netlink_unicast+0x7fa/0x9e0
[  327.027023][ T8440]  ? __pfx_netlink_unicast+0x10/0x10
[  327.027059][ T8440]  ? netlink_sendmsg+0x642/0xb30
[  327.027083][ T8440]  ? skb_put+0x11b/0x210
[  327.027111][ T8440]  netlink_sendmsg+0x805/0xb30
[  327.027150][ T8440]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.027190][ T8440]  ? aa_sock_msg_perm+0xf1/0x1b0
[  327.027219][ T8440]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  327.027240][ T8440]  ? __pfx_netlink_sendmsg+0x10/0x10
[  327.027268][ T8440]  __sock_sendmsg+0x21c/0x270
[  327.027303][ T8440]  ____sys_sendmsg+0x505/0x820
[  327.027336][ T8440]  ? __pfx_____sys_sendmsg+0x10/0x10
[  327.027379][ T8440]  ? import_iovec+0x74/0xa0
[  327.027415][ T8440]  ___sys_sendmsg+0x21f/0x2a0
[  327.027444][ T8440]  ? __pfx____sys_sendmsg+0x10/0x10
[  327.027478][ T8440]  ? rcu_read_lock_any_held+0xb3/0x120
[  327.027538][ T8440]  ? __fget_files+0x2a/0x420
[  327.027563][ T8440]  ? __fget_files+0x3a0/0x420
[  327.027609][ T8440]  __x64_sys_sendmsg+0x19b/0x260
[  327.027646][ T8440]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  327.027683][ T8440]  ? __pfx_ksys_write+0x10/0x10
[  327.027709][ T8440]  ? do_syscall_64+0xbe/0xf80
[  327.027736][ T8440]  do_syscall_64+0xfa/0xf80
[  327.027759][ T8440]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.027789][ T8440]  ? clear_bhb_loop+0x60/0xb0
[  327.027815][ T8440]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  327.027835][ T8440] RIP: 0033:0x7fa3a8b8f749
[  327.027856][ T8440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  327.027881][ T8440] RSP: 002b:00007fa3a9a45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  327.027905][ T8440] RAX: ffffffffffffffda RBX: 00007fa3a8de5fa0 RCX: 00007fa3a8b8f749
[  327.027921][ T8440] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  327.027935][ T8440] RBP: 00007fa3a9a45090 R08: 0000000000000000 R09: 0000000000000000
[  327.027948][ T8440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.027962][ T8440] R13: 00007fa3a8de6038 R14: 00007fa3a8de5fa0 R15: 00007fa3a8f0fa28
[  327.027998][ T8440]  </TASK>
[  327.031789][ T8440] netem: incorrect ge model size
[  327.563875][ T5918] usb 1-1: USB disconnect, device number 39
[  327.806450][ T8445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.695'.
[  327.875476][ T8447] netlink: 104 bytes leftover after parsing attributes in process `syz.1.696'.
[  328.577182][ T8459] FAULT_INJECTION: forcing a failure.
[  328.577182][ T8459] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  328.613096][ T8459] CPU: 0 UID: 0 PID: 8459 Comm: syz.1.701 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  328.613131][ T8459] Tainted: [L]=SOFTLOCKUP
[  328.613137][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  328.613149][ T8459] Call Trace:
[  328.613157][ T8459]  <TASK>
[  328.613165][ T8459]  dump_stack_lvl+0x189/0x250
[  328.613195][ T8459]  ? __pfx____ratelimit+0x10/0x10
[  328.613226][ T8459]  ? __pfx_dump_stack_lvl+0x10/0x10
[  328.613249][ T8459]  ? __pfx__printk+0x10/0x10
[  328.613290][ T8459]  should_fail_ex+0x414/0x560
[  328.613326][ T8459]  _copy_to_user+0x31/0xb0
[  328.613353][ T8459]  simple_read_from_buffer+0xe1/0x170
[  328.613384][ T8459]  proc_fail_nth_read+0x1b3/0x220
[  328.613409][ T8459]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  328.613434][ T8459]  ? rw_verify_area+0x2a6/0x4d0
[  328.613462][ T8459]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  328.613484][ T8459]  vfs_read+0x200/0xa30
[  328.613501][ T8459]  ? fdget_pos+0x247/0x320
[  328.613530][ T8459]  ? __pfx___mutex_lock+0x10/0x10
[  328.613551][ T8459]  ? __pfx_vfs_read+0x10/0x10
[  328.613569][ T8459]  ? __fget_files+0x2a/0x420
[  328.613596][ T8459]  ? __fget_files+0x3a0/0x420
[  328.613617][ T8459]  ? __fget_files+0x2a/0x420
[  328.613653][ T8459]  ksys_read+0x145/0x250
[  328.613669][ T8459]  ? __fget_files+0x2a/0x420
[  328.613694][ T8459]  ? __pfx_ksys_read+0x10/0x10
[  328.613717][ T8459]  ? do_syscall_64+0xbe/0xf80
[  328.613743][ T8459]  do_syscall_64+0xfa/0xf80
[  328.613764][ T8459]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.613785][ T8459]  ? clear_bhb_loop+0x60/0xb0
[  328.613810][ T8459]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  328.613837][ T8459] RIP: 0033:0x7f430a58e15c
[  328.613856][ T8459] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  328.613873][ T8459] RSP: 002b:00007f430b39f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  328.613895][ T8459] RAX: ffffffffffffffda RBX: 00007f430a7e5fa0 RCX: 00007f430a58e15c
[  328.613909][ T8459] RDX: 000000000000000f RSI: 00007f430b39f0a0 RDI: 0000000000000004
[  328.613920][ T8459] RBP: 00007f430b39f090 R08: 0000000000000000 R09: 0000000000000000
[  328.613931][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  328.613942][ T8459] R13: 00007f430a7e6038 R14: 00007f430a7e5fa0 R15: 00007f430a90fa28
[  328.613974][ T8459]  </TASK>
[  328.773397][ T5918] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  328.922020][ T8452] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.692'.
[  328.995419][ T8464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.702'.
[  329.355594][ T5918] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  329.383387][  T979] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  329.404665][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  329.456632][ T5918] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  329.526043][ T5918] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.612615][  T979] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  329.653732][ T5918] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  329.683383][  T979] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  329.703397][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.713907][  T979] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.738636][ T8456] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  329.753330][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.785675][ T8472] syz.1.704 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  329.813511][  T979] usb 3-1: config 0 descriptor??
[  329.852076][ T5918] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  329.872010][  T979] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  329.899082][ T5918] usb 1-1: invalid MIDI out EP 0
[  329.913426][ T5917] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  330.066164][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.082502][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.135877][ T5917] usb 6-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  330.196472][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.317932][ T5918] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  330.341773][ T5917] usb 6-1: config 0 descriptor??
[  330.758094][ T5917] samsung 0003:0419:0600.0008: unknown main item tag 0x0
[  330.788547][ T5917] samsung 0003:0419:0600.0008: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.5-1/input0
[  330.965703][ T5975] usb 6-1: USB disconnect, device number 13
[  331.895952][ T8479] fido_id[8479]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  332.054461][ T5918] usb 3-1: USB disconnect, device number 33
[  332.182243][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'.
[  332.411877][ T8487] syzkaller1: entered promiscuous mode
[  332.736572][ T8487] syzkaller1: entered allmulticast mode
[  332.759046][ T8489] netlink: 'syz.5.708': attribute type 5 has an invalid length.
[  332.968511][ T8489] batman_adv: batadv0: Adding interface: vxlan0
[  332.990380][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  333.023380][ T8489] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  333.134445][ T8489] batman_adv: batadv0: Interface activated: vxlan0
[  333.146187][   T12] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  333.175032][   T12] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  333.224171][ T8493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.710'.
[  333.360148][ T8493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'.
[  333.439822][   T12] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  333.443391][ T5975] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  333.473443][   T12] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  333.634228][ T5975] usb 3-1: no configurations
[  333.657734][ T5975] usb 3-1: can't read configurations, error -22
[  333.796054][ T8504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.714'.
[  333.863417][ T5975] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  333.961513][ T5836] Bluetooth: Unexpected start frame (len 4)
[  334.044286][ T5975] usb 3-1: no configurations
[  334.055021][ T5890] usb 1-1: USB disconnect, device number 40
[  334.083487][ T5975] usb 3-1: can't read configurations, error -22
[  334.113524][ T5975] usb usb3-port1: attempt power cycle
[  334.293433][  T979] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  334.533780][ T5975] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  334.575348][  T979] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  334.644290][ T5975] usb 3-1: no configurations
[  334.649423][ T5975] usb 3-1: can't read configurations, error -22
[  334.658511][  T979] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  334.739041][ T8512] FAULT_INJECTION: forcing a failure.
[  334.739041][ T8512] name failslab, interval 1, probability 0, space 0, times 0
[  334.763745][  T979] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  334.793727][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  334.835184][  T979] usb 2-1: SerialNumber: syz
[  334.835229][ T5975] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  334.878734][ T8512] CPU: 0 UID: 0 PID: 8512 Comm: syz.0.716 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  334.878769][ T8512] Tainted: [L]=SOFTLOCKUP
[  334.878776][ T8512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  334.878788][ T8512] Call Trace:
[  334.878796][ T8512]  <TASK>
[  334.878805][ T8512]  dump_stack_lvl+0x189/0x250
[  334.878837][ T8512]  ? __pfx____ratelimit+0x10/0x10
[  334.878870][ T8512]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.878895][ T8512]  ? __pfx__printk+0x10/0x10
[  334.878927][ T8512]  ? mroute6_is_socket+0x20b/0x300
[  334.878953][ T8512]  ? __pfx_mroute6_is_socket+0x10/0x10
[  334.878983][ T8512]  should_fail_ex+0x414/0x560
[  334.879020][ T8512]  should_failslab+0xa8/0x100
[  334.879048][ T8512]  kmem_cache_alloc_noprof+0x88/0x710
[  334.879079][ T8512]  ? skb_clone+0x212/0x3a0
[  334.879110][ T8512]  skb_clone+0x212/0x3a0
[  334.879131][ T8512]  ? ip6_finish_output2+0x476/0x1480
[  334.879160][ T8512]  ip6_finish_output2+0x48a/0x1480
[  334.879201][ T8512]  ? __pfx_ip6_finish_output2+0x10/0x10
[  334.879229][ T8512]  ? ip6_mtu+0x7d/0x490
[  334.879248][ T8512]  ? ip6_mtu+0x38c/0x490
[  334.879273][ T8512]  ? ip6_finish_output+0x2ef/0x4e0
[  334.879296][ T8512]  ? ip6_output+0x126/0x550
[  334.879318][ T8512]  ip6_output+0x340/0x550
[  334.879347][ T8512]  ip6_mr_output+0x4e9/0x1100
[  334.879380][ T8512]  ? ip6_mr_output+0x1ca/0x1100
[  334.879409][ T8512]  ? __pfx_ip6_mr_output+0x10/0x10
[  334.879442][ T8512]  ? __ip6_local_out+0x609/0x870
[  334.879467][ T8512]  ? __ip6_local_out+0x82c/0x870
[  334.879499][ T8512]  ? __ip6_local_out+0x609/0x870
[  334.879537][ T8512]  ? skb_dst+0x4f/0xd0
[  334.879559][ T8512]  ? dst_output+0x17b/0x1c0
[  334.879578][ T8512]  ? ip6_send_skb+0x10f/0x390
[  334.879605][ T8512]  ip6_send_skb+0x1d5/0x390
[  334.879636][ T8512]  udp_v6_send_skb+0xc17/0x1830
[  334.879681][ T8512]  udpv6_sendmsg+0x1d62/0x2510
[  334.879716][ T8512]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  334.879754][ T8512]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  334.879791][ T8512]  ? ip6_datagram_release_cb+0x7c/0x550
[  334.879836][ T8512]  ? __local_bh_enable_ip+0x12d/0x1c0
[  334.879856][ T8512]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  334.879887][ T8512]  ? inet_send_prepare+0x1b9/0x270
[  334.879916][ T8512]  ? inet_send_prepare+0x1b9/0x270
[  334.879947][ T8512]  ? inet6_sendmsg+0xe4/0x120
[  334.879969][ T8512]  __sock_sendmsg+0xe5/0x270
[  334.880002][ T8512]  ____sys_sendmsg+0x505/0x820
[  334.880033][ T8512]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.880070][ T8512]  ? import_iovec+0x74/0xa0
[  334.880099][ T8512]  ___sys_sendmsg+0x21f/0x2a0
[  334.880127][ T8512]  ? __pfx____sys_sendmsg+0x10/0x10
[  334.880158][ T8512]  ? rcu_read_lock_any_held+0xb3/0x120
[  334.880219][ T8512]  ? __fget_files+0x2a/0x420
[  334.880260][ T8512]  ? __fget_files+0x3a0/0x420
[  334.880297][ T8512]  __x64_sys_sendmsg+0x19b/0x260
[  334.880324][ T8512]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  334.880362][ T8512]  ? __pfx_ksys_write+0x10/0x10
[  334.880385][ T8512]  ? do_syscall_64+0xbe/0xf80
[  334.880408][ T8512]  do_syscall_64+0xfa/0xf80
[  334.880427][ T8512]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.880446][ T8512]  ? clear_bhb_loop+0x60/0xb0
[  334.880471][ T8512]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.880499][ T8512] RIP: 0033:0x7fe12ed8f749
[  334.880518][ T8512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  334.880534][ T8512] RSP: 002b:00007fe12fc88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.880558][ T8512] RAX: ffffffffffffffda RBX: 00007fe12efe5fa0 RCX: 00007fe12ed8f749
[  334.880572][ T8512] RDX: 0000000000001800 RSI: 0000200000000180 RDI: 0000000000000003
[  334.880585][ T8512] RBP: 00007fe12fc88090 R08: 0000000000000000 R09: 0000000000000000
[  334.880597][ T8512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  334.880609][ T8512] R13: 00007fe12efe6038 R14: 00007fe12efe5fa0 R15: 00007fe12f10fa28
[  334.880645][ T8512]  </TASK>
[  335.370103][ T5975] usb 3-1: no configurations
[  335.374822][ T5975] usb 3-1: can't read configurations, error -22
[  335.381865][ T5975] usb usb3-port1: unable to enumerate USB device
[  336.109481][  T979] usb 2-1: 0:2 : does not exist
[  336.194345][  T979] usb 2-1: USB disconnect, device number 38
[  337.162577][ T8536] usb usb8: usbfs: process 8536 (syz.1.722) did not claim interface 0 before use
[  337.243596][ T8536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'.
[  337.848294][ T8557] netlink: 60 bytes leftover after parsing attributes in process `syz.2.727'.
[  337.904059][ T8557] vlan0: entered promiscuous mode
[  337.942220][ T8552] veth1_to_bond: entered allmulticast mode
[  338.032831][ T8552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.726'.
[  338.860626][ T5836] Bluetooth: hci4: ACL packet for unknown connection handle 200
[  339.833642][ T6248] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  339.995359][ T6248] usb 4-1: Using ep0 maxpacket: 8
[  340.000363][ T5836] Bluetooth: hci5: command 0x0406 tx timeout
[  340.016606][ T6248] usb 4-1: config 0 interface 0 has no altsetting 0
[  340.025292][ T6248] usb 4-1: New USB device found, idVendor=17ef, idProduct=61ae, bcdDevice= 0.00
[  340.073322][ T6248] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.121298][ T6248] usb 4-1: config 0 descriptor??
[  340.218117][ T8551] veth1_to_bond: left allmulticast mode
[  340.485385][ T5971] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  340.663383][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  340.696750][ T5971] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  340.734768][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.755664][ T5971] usb 2-1: Product: syz
[  340.766938][ T5971] usb 2-1: Manufacturer: syz
[  340.797982][ T5971] usb 2-1: SerialNumber: syz
[  340.852995][ T5971] r8152-cfgselector 2-1: Unknown version 0x0000
[  340.877262][ T5971] r8152-cfgselector 2-1: config 0 descriptor??
[  341.010449][ T8590] blktrace: Concurrent blktraces are not allowed on sg0
[  341.294546][  T979] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  341.314267][ T8594] netlink: 60 bytes leftover after parsing attributes in process `syz.0.737'.
[  341.318862][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.339602][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.369174][ T8594] netlink: 'syz.0.737': attribute type 16 has an invalid length.
[  341.406486][ T8594] netlink: 33846 bytes leftover after parsing attributes in process `syz.0.737'.
[  341.491467][ T5971] r8152-cfgselector 2-1: USB disconnect, device number 39
[  341.560357][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  341.610614][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  341.687503][  T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  341.803165][  T979] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  341.827972][ T6248] usbhid 4-1:0.0: can't add hid device: -71
[  341.848385][ T6248] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  341.848973][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.913680][ T6248] usb 4-1: USB disconnect, device number 37
[  341.925215][  T979] usb 6-1: config 0 descriptor??
[  342.251314][  T979] usbhid 6-1:0.0: can't add hid device: -71
[  342.266563][  T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  342.299080][  T979] usb 6-1: USB disconnect, device number 14
[  344.093604][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  344.259282][ T8630] FAULT_INJECTION: forcing a failure.
[  344.259282][ T8630] name failslab, interval 1, probability 0, space 0, times 0
[  344.795911][ T8630] CPU: 1 UID: 0 PID: 8630 Comm: syz.0.745 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  344.795935][ T8630] Tainted: [L]=SOFTLOCKUP
[  344.795939][ T8630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.795947][ T8630] Call Trace:
[  344.795952][ T8630]  <TASK>
[  344.795958][ T8630]  dump_stack_lvl+0x189/0x250
[  344.795979][ T8630]  ? __pfx____ratelimit+0x10/0x10
[  344.795997][ T8630]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.796011][ T8630]  ? __pfx__printk+0x10/0x10
[  344.796031][ T8630]  ? __pfx___might_resched+0x10/0x10
[  344.796043][ T8630]  ? fs_reclaim_acquire+0x7d/0x100
[  344.796060][ T8630]  should_fail_ex+0x414/0x560
[  344.796080][ T8630]  should_failslab+0xa8/0x100
[  344.796096][ T8630]  __kmalloc_noprof+0xdf/0x800
[  344.796107][ T8630]  ? rcu_is_watching+0x15/0xb0
[  344.796121][ T8630]  ? security_prepare_creds+0x52/0x390
[  344.796137][ T8630]  security_prepare_creds+0x52/0x390
[  344.796152][ T8630]  prepare_creds+0x440/0x640
[  344.796172][ T8630]  prepare_exec_creds+0x18/0x220
[  344.796190][ T8630]  bprm_execve+0xe9/0x1400
[  344.796211][ T8630]  ? put_arg_page+0x136/0x270
[  344.796228][ T8630]  ? copy_strings+0x51d/0x560
[  344.796240][ T8630]  ? __pfx_bprm_execve+0x10/0x10
[  344.796284][ T8630]  do_execveat_common+0x510/0x6a0
[  344.796303][ T8630]  __x64_sys_execve+0x94/0xb0
[  344.796316][ T8630]  do_syscall_64+0xfa/0xf80
[  344.796340][ T8630]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.796353][ T8630]  ? clear_bhb_loop+0x60/0xb0
[  344.796367][ T8630]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.796378][ T8630] RIP: 0033:0x7fe12ed8f749
[  344.796392][ T8630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.796404][ T8630] RSP: 002b:00007fe12fc88038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b
[  344.796421][ T8630] RAX: ffffffffffffffda RBX: 00007fe12efe5fa0 RCX: 00007fe12ed8f749
[  344.796437][ T8630] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000200000000040
[  344.796445][ T8630] RBP: 00007fe12fc88090 R08: 0000000000000000 R09: 0000000000000000
[  344.796452][ T8630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  344.796460][ T8630] R13: 00007fe12efe6038 R14: 00007fe12efe5fa0 R15: 00007fe12f10fa28
[  344.796479][ T8630]  </TASK>
[  345.446153][ T8635] netlink: 'syz.0.747': attribute type 13 has an invalid length.
[  345.663362][ T5975] usb 3-1: new low-speed USB device number 38 using dummy_hcd
[  345.723414][ T5971] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  345.739147][ T8642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.748'.
[  345.975339][ T5971] usb 1-1: config index 0 descriptor too short (expected 65316, got 36)
[  345.993476][ T5971] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  346.004443][ T5975] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  346.019116][ T5975] usb 3-1: config 0 has no interface number 0
[  346.035809][ T5971] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  346.070817][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  346.090329][ T8614] set match dimension is over the limit!
[  346.113391][ T5971] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  346.122496][ T5975] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  346.136081][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.147550][ T5975] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  346.174932][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.183082][ T5971] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  346.208845][ T5975] usb 3-1: config 0 descriptor??
[  346.236354][ T8632] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  346.280325][ T5975] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  346.522510][ T5971] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12
[  346.547037][ T5975] usb 3-1: USB disconnect, device number 38
[  346.752311][ T8072] udevd[8072]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  347.543403][  T979] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  347.655740][ T8651] netlink: 203340 bytes leftover after parsing attributes in process `syz.5.750'.
[  347.690503][ T8663] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  347.723379][  T979] usb 2-1: Using ep0 maxpacket: 16
[  347.736349][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.765948][  T979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.787171][  T979] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  347.821245][  T979] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  347.851709][  T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.878952][  T979] usb 2-1: config 0 descriptor??
[  348.164881][ T8672] mmap: syz.3.755 (8672) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  348.195412][ T8669] loop6: detected capacity change from 0 to 524287487
[  348.214808][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.222889][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.253672][  T979] shield 0003:0955:7214.0009: item fetching failed at offset 4/5
[  348.263388][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.275286][  T979] shield 0003:0955:7214.0009: Parse failed
[  348.283877][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.297003][  T979] shield 0003:0955:7214.0009: probe with driver shield failed with error -22
[  348.318571][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.369348][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.411717][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.443675][ T5975] usb 1-1: USB disconnect, device number 41
[  348.481237][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.513518][ T6172] ldm_validate_partition_table(): Disk read failed.
[  348.528684][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.569088][  T979] usb 2-1: USB disconnect, device number 40
[  348.622907][ T6172] Buffer I/O error on dev loop6, logical block 0, async page read
[  348.652008][ T6172] Dev loop6: unable to read RDB block 0
[  348.671081][ T6172]  loop6: unable to read partition table
[  348.718082][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.759'.
[  348.884708][ T8669] ldm_validate_partition_table(): Disk read failed.
[  348.926644][ T8669] Dev loop6: unable to read RDB block 0
[  348.950647][ T8669]  loop6: unable to read partition table
[  349.039130][ T8669] loop_reread_partitions: partition scan of loop6 (3��x��C�

) failed (rc=-5)
[  349.263356][  T979] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  349.415462][  T979] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  349.432257][ T8688] xt_limit: Overflow, try lower: 0/0
[  349.447397][  T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  349.492757][  T979] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  349.560676][  T979] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  349.611232][  T979] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  349.631878][  T979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.644984][ T8685] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  349.672211][  T979] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  349.718271][  T979] usb 1-1: invalid MIDI out EP 0
[  349.858333][  T979] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22
[  349.899390][ T6053] udevd[6053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  350.083753][   T31] INFO: task syz.4.324:7070 blocked for more than 143 seconds.
[  350.226512][ T8705] syzkaller1: entered promiscuous mode
[  350.232134][ T8705] syzkaller1: entered allmulticast mode
[  350.259746][   T31]       Tainted: G             L      syzkaller #0
[  350.279805][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  350.288827][   T31] task:syz.4.324       state:D stack:26992 pid:7070  tgid:7065  ppid:5848   task_flags:0x400040 flags:0x00080002
[  350.304742][   T31] Call Trace:
[  350.320909][   T31]  <TASK>
[  350.351095][ T8709] netlink: 'syz.5.767': attribute type 3 has an invalid length.
[  350.386193][   T31]  __schedule+0x14bc/0x5000
[  350.405482][   T31]  ? __pfx___schedule+0x10/0x10
[  350.417343][   T31]  ? schedule+0x91/0x360
[  350.433759][   T31]  schedule+0x165/0x360
[  350.723568][   T31]  schedule_preempt_disabled+0x13/0x30
[  350.729099][   T31]  __mutex_lock+0x7e6/0x1350
[  350.734105][   T31]  ? __mutex_lock+0x5bb/0x1350
[  350.747835][   T31]  ? blk_trace_ioctl+0x314/0x6e0
[  350.763107][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  350.768289][   T31]  ? is_bpf_text_address+0x292/0x2b0
[  350.773696][   T31]  ? is_bpf_text_address+0x26/0x2b0
[  350.778988][   T31]  blk_trace_ioctl+0x314/0x6e0
[  350.980946][   T31]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  350.991128][   T31]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  351.001497][   T31]  ? stack_trace_save+0x9c/0xe0
[  351.017200][   T31]  ? stack_depot_save_flags+0x40/0x850
[  351.027444][   T31]  ? __pfx_format_decode+0x10/0x10
[  351.032774][   T31]  ? kasan_save_track+0x4f/0x80
[  351.053357][   T31]  ? kasan_save_track+0x3e/0x80
[  351.261906][   T31]  ? kasan_save_free_info+0x46/0x50
[  351.342883][   T31]  ? __kasan_slab_free+0x5c/0x80
[  351.471653][   T31]  ? kfree+0x1c0/0x660
[  351.707246][   T31]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  351.722350][   T31]  ? security_file_ioctl+0xcb/0x2d0
[  351.738240][   T31]  ? __se_sys_ioctl+0x47/0x170
[  351.756298][   T31]  ? do_syscall_64+0xfa/0xf80
[  351.786824][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.805485][   T31]  blkdev_common_ioctl+0x11ad/0x2c40
[  351.823325][   T31]  ? kasan_quarantine_put+0xdd/0x220
[  351.837712][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  351.853349][   T31]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  351.868919][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  351.888069][   T31]  ? do_vfs_ioctl+0xbe8/0x1430
[  351.902528][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  351.920950][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  351.932483][   T31]  ? __pfx___run_timer_base+0x10/0x10
[  351.952866][   T31]  ? seqcount_lockdep_reader_access+0x15e/0x1c0
[  351.978166][   T31]  blkdev_ioctl+0x553/0x710
[  351.988003][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  352.007524][   T31]  ? __fget_files+0x3a0/0x420
[  352.024319][   T31]  ? __fget_files+0x2a/0x420
[  352.033231][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  352.043353][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  352.056283][   T31]  __se_sys_ioctl+0xfc/0x170
[  352.076551][   T31]  do_syscall_64+0xfa/0xf80
[  352.088370][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.103435][   T31]  ? clear_bhb_loop+0x60/0xb0
[  352.108188][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.135451][   T31] RIP: 0033:0x7f8fc8f8f749
[  352.149821][   T31] RSP: 002b:00007f8fc9eb9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.190822][   T31] RAX: ffffffffffffffda RBX: 00007f8fc91e6090 RCX: 00007f8fc8f8f749
[  352.230018][   T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000003
[  352.257496][   T31] RBP: 00007f8fc9013f91 R08: 0000000000000000 R09: 0000000000000000
[  352.300469][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  352.349712][   T31] R13: 00007f8fc91e6128 R14: 00007f8fc91e6090 R15: 00007f8fc930fa28
[  352.397213][   T31]  </TASK>
[  352.409631][   T31] 
[  352.409631][   T31] Showing all locks held in the system:
[  352.444162][   T31] 3 locks held by kworker/u8:0/12:
[  352.457421][   T31] 3 locks held by kworker/u8:1/13:
[  352.485643][   T31]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  352.526740][   T31]  #1: ffffc90000127b80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  352.592589][   T31]  #2: ffffffff8f311b48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  352.635503][   T31] 1 lock held by khungtaskd/31:
[  352.678032][   T31]  #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  352.688285][   T31] 1 lock held by klogd/5187:
[  352.692966][   T31]  #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  352.723448][   T31] 2 locks held by getty/5585:
[  352.731390][   T31]  #0: ffff8880341c70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  352.745255][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  352.756350][   T31] 2 locks held by syz.4.324/7067:
[  352.762163][   T31] 1 lock held by syz.4.324/7070:
[  352.767497][   T31]  #0: ffff888024f4dea8 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x314/0x6e0
[  352.778758][   T31] 2 locks held by syz.1.764/8694:
[  352.788605][   T31]  #0: ffffffff8f311b48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  352.799772][   T31]  #1: ffffffff8df47538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  352.812034][   T31] 1 lock held by syz.2.765/8696:
[  352.818564][   T31]  #0: ffffffff8df47400 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  352.829492][   T31] 2 locks held by syz.2.765/8701:
[  352.834896][   T31] 
[  352.837534][   T31] =============================================
[  352.837534][   T31] 
[  352.871929][   T31] NMI backtrace for cpu 0
[  352.871952][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  352.871981][   T31] Tainted: [L]=SOFTLOCKUP
[  352.871989][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  352.872000][   T31] Call Trace:
[  352.872009][   T31]  <TASK>
[  352.872018][   T31]  dump_stack_lvl+0x189/0x250
[  352.872052][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.872083][   T31]  ? __pfx__printk+0x10/0x10
[  352.872126][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  352.872158][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  352.872189][   T31]  ? __pfx__printk+0x10/0x10
[  352.872222][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  352.872256][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  352.872287][   T31]  sys_info+0x135/0x170
[  352.872311][   T31]  watchdog+0xf95/0xfe0
[  352.872345][   T31]  ? watchdog+0x20a/0xfe0
[  352.872379][   T31]  kthread+0x711/0x8a0
[  352.872409][   T31]  ? __pfx_watchdog+0x10/0x10
[  352.872444][   T31]  ? __pfx_kthread+0x10/0x10
[  352.872472][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  352.872502][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  352.872520][   T31]  ? __pfx_kthread+0x10/0x10
[  352.872547][   T31]  ret_from_fork+0x599/0xb30
[  352.872570][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  352.872601][   T31]  ? __switch_to_asm+0x39/0x70
[  352.872626][   T31]  ? __switch_to_asm+0x33/0x70
[  352.872650][   T31]  ? __pfx_kthread+0x10/0x10
[  352.872675][   T31]  ret_from_fork_asm+0x1a/0x30
[  352.872719][   T31]  </TASK>
[  352.872779][   T31] Sending NMI from CPU 0 to CPUs 1:
[  353.033537][    C1] NMI backtrace for cpu 1
[  353.033557][    C1] CPU: 1 UID: 0 PID: 5814 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.033580][    C1] Tainted: [L]=SOFTLOCKUP
[  353.033586][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.033595][    C1] RIP: 0010:clear_bhb_loop+0x93/0xb0
[  353.033618][    C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc b8 05 00 00 00 <eb> 01 90 83 e8 01 75 f8 83 e9 01 75 bb c3 cc cc cc cc 0f ae e8 5d
[  353.033631][    C1] RSP: 0018:ffffc90003dbff18 EFLAGS: 00000006
[  353.033647][    C1] RAX: 0000000000000005 RBX: 0000000000000000 RCX: 0000000000000003
[  353.033657][    C1] RDX: 0000000000000000 RSI: 00000000000000e6 RDI: ffffc90003dbff48
[  353.033674][    C1] RBP: ffffc90003dbff38 R08: 0000000000000000 R09: 0000000000000000
[  353.033685][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  353.033694][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  353.033704][    C1] FS:  000055555f550500(0000) GS:ffff888125f35000(0000) knlGS:0000000000000000
[  353.033718][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  353.033729][    C1] CR2: 0000200000225030 CR3: 000000002837c000 CR4: 00000000003526f0
[  353.033745][    C1] Call Trace:
[  353.033751][    C1]  <TASK>
[  353.033757][    C1]  ? clear_bhb_loop+0x60/0xb0
[  353.033773][    C1]  ? clear_bhb_loop+0x60/0xb0
[  353.033787][    C1]  ? clear_bhb_loop+0x60/0xb0
[  353.033801][    C1]  ? clear_bhb_loop+0xe/0xb0
[  353.033816][    C1]  ? entry_SYSCALL_64_after_hwframe+0x72/0x7f
[  353.033839][    C1]  </TASK>
[  353.464646][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  353.471575][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  353.482554][   T31] Tainted: [L]=SOFTLOCKUP
[  353.487001][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  353.497372][   T31] Call Trace:
[  353.500701][   T31]  <TASK>
[  353.503758][   T31]  dump_stack_lvl+0x99/0x250
[  353.508413][   T31]  ? __asan_memcpy+0x40/0x70
[  353.513216][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  353.518449][   T31]  ? __pfx__printk+0x10/0x10
[  353.523052][   T31]  vpanic+0x237/0x6d0
[  353.527307][   T31]  ? __pfx_vpanic+0x10/0x10
[  353.531907][   T31]  ? preempt_schedule_common+0x83/0xd0
[  353.537541][   T31]  panic+0xb9/0xc0
[  353.541414][   T31]  ? __pfx_panic+0x10/0x10
[  353.545841][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  353.551480][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  353.557820][   T31]  watchdog+0xfdf/0xfe0
[  353.562028][   T31]  ? watchdog+0x20a/0xfe0
[  353.566371][   T31]  kthread+0x711/0x8a0
[  353.570542][   T31]  ? __pfx_watchdog+0x10/0x10
[  353.575215][   T31]  ? __pfx_kthread+0x10/0x10
[  353.579898][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  353.585100][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  353.590289][   T31]  ? __pfx_kthread+0x10/0x10
[  353.594978][   T31]  ret_from_fork+0x599/0xb30
[  353.599562][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  353.605005][   T31]  ? __switch_to_asm+0x39/0x70
[  353.609767][   T31]  ? __switch_to_asm+0x33/0x70
[  353.614624][   T31]  ? __pfx_kthread+0x10/0x10
[  353.619214][   T31]  ret_from_fork_asm+0x1a/0x30
[  353.624257][   T31]  </TASK>
[  353.627610][   T31] Kernel Offset: disabled
[  353.632133][   T31] Rebooting in 86400 seconds..