last executing test programs:

49m14.648966123s ago: executing program 3 (id=684):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x1000000, &(0x7f0000000580)="b3"})

49m14.40288182s ago: executing program 3 (id=686):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r1 = syz_io_uring_setup(0x10e, &(0x7f0000000340)={0x0, 0xcb9c, 0x13200, 0x3, 0x801}, &(0x7f00000003c0)=<r2=>0x0, &(0x7f0000000300)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100})
io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0)
listen(r0, 0xfff)
accept4(r0, 0x0, 0x0, 0x0)

49m13.342758549s ago: executing program 3 (id=696):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c)
r1 = syz_io_uring_setup(0x496, &(0x7f0000000400)={0x0, 0x7daf, 0x0, 0x8000, 0x8000e1}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334d, 0x10, 0x2, 0x385}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000300))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7})
write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100, 0x23456})
io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0)

49m12.932931229s ago: executing program 3 (id=699):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

49m12.722897222s ago: executing program 3 (id=700):
write(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000000)="ea", 0x1)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x0, 0x2}, 0x10)
writev(r1, &(0x7f0000002800)=[{&(0x7f0000000480)="e1a5", 0x2}], 0x1)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)

49m12.38896581s ago: executing program 3 (id=703):
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

49m11.672421258s ago: executing program 32 (id=703):
syz_open_dev$ttys(0xc, 0x2, 0x1)
syz_open_dev$tty20(0xc, 0x4, 0x0)
socket$pptp(0x18, 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

45m57.405032158s ago: executing program 2 (id=1667):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x9, 0xd27}, 0x10)
sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000004c0)={0x0, 0x3}, 0x8)

45m57.174744297s ago: executing program 2 (id=1669):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
syz_emit_ethernet(0x0, 0x0, &(0x7f0000000200)={0x1, 0x3, [0x327, 0xbcc, 0xc4b, 0xa2f]})
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x78, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x0, 0x4, 0x3, 0x5}, 0x0, 0x1, 0x1, 0xffffff81, 0x3, 0x20, 0xe, 0xf, 0x0, 0x8, {0x8, 0x90, 0xf23c, 0xf, 0x8, 0xffff0001}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40098}, 0xc804)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)

45m56.896446384s ago: executing program 2 (id=1672):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000000)=ANY=[])
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r2, 0xfffffffa)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
accept4(r2, 0x0, 0x0, 0x80000)

45m55.963539279s ago: executing program 2 (id=1680):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
unshare(0x2c020400)

45m55.01383s ago: executing program 2 (id=1687):
memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
sendto(0xffffffffffffffff, 0x0, 0x0, 0x1, &(0x7f0000000380)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x80)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1)

45m54.72495884s ago: executing program 2 (id=1689):
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000200)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

45m53.896878829s ago: executing program 33 (id=1689):
ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000200)})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="2c0100001300010000000000000000001c01008085013ee98bf0a850b89d66cc"], 0x12c}], 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000240)=0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

15.634970263s ago: executing program 4 (id=9570):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0)
socket(0xa, 0x800, 0xfffffffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
listen(r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getflags(r2, 0x408)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRESHEX])
memfd_secret(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x42, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)

15.035773679s ago: executing program 5 (id=9573):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x100)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0))
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)

13.191487912s ago: executing program 0 (id=9578):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x3, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r4)
keyctl$link(0x8, r4, r4)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

11.577302885s ago: executing program 6 (id=9581):
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_secret(0x6c2bd70012c39c6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = timerfd_create(0x0, 0x800)
readv(r2, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x4c6)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12)

11.577044487s ago: executing program 5 (id=9582):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
r0 = socket$netlink(0x10, 0x3, 0x2)
getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, 0x0, 0x0, 0x20, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xc, 0xe, &(0x7f0000001880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x1, 0x0, 0x1}, 0x10}, 0x94)
ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x7aed979249b5ae9d, 0x0)
rseq(&(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x1000000000000, 0x800, 0x7}, 0x6}, 0x20, 0x1, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006)
openat$tcp_mem(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

11.576853641s ago: executing program 4 (id=9583):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x12)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x10, 0x0, 0x28}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x10}, 0x20040001)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000080)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90)
r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
write$binfmt_script(r4, &(0x7f00000002c0)={'#! ', './file0'}, 0xb)
write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000300)=ANY=[], 0x28)
close(r4)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)

11.570359803s ago: executing program 0 (id=9590):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x100)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x81, 0x0, &(0x7f00000010c0))
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)

9.891697992s ago: executing program 6 (id=9584):
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', <r2=>0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000240))
sendto$packet(0xffffffffffffffff, &(0x7f0000000480)="86", 0x590, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_open_procfs(0x0, &(0x7f0000000040)='children\x00')
syz_pidfd_open(0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
preadv(r6, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f0000005b80)={0x2020}, 0x2020)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r8 = dup(r7)
write$UHID_INPUT(r8, &(0x7f0000001300)={0xc, {"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", 0x1000}}, 0x1006)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r10, @ANYBLOB="7a140010"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

9.889416024s ago: executing program 1 (id=9585):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x3, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, r4)
keyctl$link(0x8, r4, r4)
r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

8.68700988s ago: executing program 1 (id=9586):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000240)=ANY=[])
r4 = open(0x0, 0x1850c2, 0x14c)
ftruncate(r4, 0x200004)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r7, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x5c}, 0x6e)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socket$packet(0x11, 0x2, 0x300)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
write$apparmor_exec(r4, 0x0, 0x8)
sendfile(r3, r4, 0x0, 0x80001d00c0d1)
bind$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

8.103613845s ago: executing program 4 (id=9587):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x3, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r4)
keyctl$link(0x8, r4, r4)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

8.036756425s ago: executing program 1 (id=9588):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x100)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0))
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)

7.195156645s ago: executing program 4 (id=9589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, r0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49)
io_setup(0x1, &(0x7f00000016c0)=<r6=>0x0)
io_submit(r6, 0x0, &(0x7f0000000140))
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfdbf, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010)
sendmmsg$inet(r2, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000300)="1744493947f3f194d945da4a5105056f0f665ecfbb449db768cb01290f9eaaf57ab4fd1b986e", 0x26}, {&(0x7f0000000440)="ec2795a51677975067161cd21531c57f6a1506eee2bfed36334025c28b0e2dd4ac6da428b42e6ec6930863de5c136e2902a53b730b2cb4b4a6f2053817b24a6db33afb4989a62e", 0x47}, {&(0x7f0000000340)="c8250af5859494ca246324a514b1f51f227767a5c28efeaa5b89fee2445002474fa6eff7cc7e3e577b4c4ce3b553972ad9b89278a2be6408a3f524f554c0d8882f", 0x41}, {&(0x7f0000000500)="7f0545478791604f5c2acabcf0c6c2700a63ff39", 0x14}], 0x5, &(0x7f0000000800)=[@ip_tos_int={{0x10, 0x0, 0x1, 0x1}}], 0x10}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000840)="81ef5108ef6a32b31a034a00935e753631576ba5273e4c5f21f9e092a7e94eeee2cb1c6da251f55c4476ec39ba572f3b9b7d47c1dfb073b6905a68bdd1cd5d6a996b5ed5eed836acdcdb5c36c2dd93f6641201ab3959d8eda706f2bde95d7507858c6aa16c1759ff8ca42f8313ef2e9704d8d1b5f24b141156ac9ee0ccf09fd24d63ef2ba3f7163784b1117acc11645cb5fe62f7beecf560a4efdd4295a1ac501faa1cb7b6ca02ffaf4c004990dc7f862e67aea6d22fa985bf5d2f93b4ad1df4134cc84ad370114a5074715f81dd66f533216ef00bca961536a3934059e7ba651ca471", 0xe3}, {&(0x7f0000000940)="cffbe8b77c07517094ff595ce2e6fc7df39bb1cd2b7b54ceb65f93f33461c79e4beeb23b829ecd342ea42deea38c0339f3d9e13ba7fce45912512546f2711e635111a891667849bd71ff049977a124893473e6e79a4af60dd15aaeedf0cb49da847591e4a5", 0x65}, {&(0x7f00000009c0)="7f", 0x1}], 0x3, &(0x7f0000000a40)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @rr={0x7, 0x27, 0xd, [@remote, @multicast2, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @local, @remote, @broadcast]}]}}}, @ip_ttl={{0x10, 0x0, 0x2, 0x99a}}, @ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_pktinfo={{0x18, 0x0, 0x8, {r8, @local, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x8c}}], 0x2, 0x8080)
sendfile(r3, r4, 0x0, 0x20000023896)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c0100001a00130700000000fcdbde252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000100", @ANYRES32=0xee00, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

6.66222623s ago: executing program 6 (id=9591):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x100)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0))
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)

6.593984364s ago: executing program 0 (id=9592):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
socket$inet(0x2, 0x3, 0x100)
socket$inet_sctp(0x2, 0x5, 0x84)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d240600000308"], 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r5, 0x84, 0x81, 0x0, &(0x7f00000010c0))
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_ro(r6, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)

5.417230363s ago: executing program 5 (id=9593):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x53, 0xffffffffffffffff, 0x0)
socket(0xa, 0x800, 0xfffffffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
personality(0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
listen(r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$getflags(r2, 0x408)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x9, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5e, 0x1, 0x3, 0x5, 0x1, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x131, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x8, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x9, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x7, 0x3, 0xa, 0x7, 0x42, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7, 0xa, 0x3e7, 0x9, 0x5, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x7, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x0, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYRESHEX])
memfd_secret(0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x700, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x6c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x42, 0x3, "7e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc1e966554b"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0xa}}}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x4000800)

4.2166365s ago: executing program 5 (id=9594):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00')
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60)
read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7)
sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRESHEX, @ANYRES64=r3, @ANYRES16=r6, @ANYRES8, @ANYRES16=r4, @ANYRES16=r3], 0x30}}, 0x4008810)
r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_QUERYCTRL(r8, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x2})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6400000010008105000000000000000000000f00", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff01"], 0x64}}, 0x0)

4.129404985s ago: executing program 1 (id=9595):
socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x2d, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x808ed3a56aee9e48)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000400, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYBLOB, @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c6d61785f726561643d3078303030303030303030303030303030312c6d61785f726561643d3078303030303030303030303030303037662c6d474e87386fab61643d3078303030303030303030303030303031302c616c6c6f775f6f7468"], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r3, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x90})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x2a00)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0)

3.835747688s ago: executing program 4 (id=9596):
socket$packet(0x11, 0x2, 0x300)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
memfd_secret(0x6c2bd70012c39c6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = timerfd_create(0x0, 0x800)
readv(r2, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x6490, 0x4)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x802c550a, &(0x7f0000000000)=ANY=[])
ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f00000002c0))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1c0000f5000000000000000000000000000064ace260048c2f01fe880000000000000000000000000001200100000000000000000000000000000c21880b0000000202000002000008000c0086dd080088be0000000210230802010000000000003e080022eb000000032248256102000000fffffffbf587051a08006558000000023b4caef13d37b5aec2969ee8dfb0c61838c8e2779da6255efad50884e77c428f4d86b6e778ee3a1891fedfd7190ffbe3b2e015a550ab6e452b2902440d13bd03605e906d3831f80dd0206c111128aa48442d787c7567db85a59e4ad3cce683b4e10f311b00f815c9ca0df017e1f5fbea8114d1ba6de8010363528577c133ce558e5e5f5bdcb84de895a585525edc929cfa7fcc7c9680b3f037c0659eb1603ad18feb20ffbd689ddb32ebaf48b8003acd66c6bd27bcba284aef84220491b9f9f468dcd85a18625466ea89c06669619527749e024143c8b26e67ae99e7dfcfbce29319044ef1bb29eecac81a47aeaf8af6fb7b9e3f12cd2703a50566b86c041391e05bfe81d6b14d9fa7797e5dcfc41d19260c1a39d48c8d7a11a5645619e2c1bb78dfddb23b88129cfe5d27947881b21b1b4a05ef9940135a9aea70f6633c2d555a4117368ccecfe8b333a9a10a78a0d76549bedd7a1b08f76901369865ca7bdad40ab576acbc6ebe23a0e5636c2941b4f28d5088717bcd59febc6f0b4fb6c5b2e958ce5ce1d8bdc30acfc99b449f06be1a59eaba0d13a0855e387efc64bddb5655d7cd22d97529b8bb6229d822e4340b381c4f212a25"], 0x4c6)
write$cgroup_int(r3, &(0x7f0000000000)=0x2b00, 0x12)

3.540653867s ago: executing program 6 (id=9597):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x101080, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x3, 0x1, 0x1, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f00000001c0)=@echo=0x8)
r5 = io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x3000, 0x80000000, 0xfefffffd})
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)={0x10000008})
socket$rxrpc(0x21, 0x2, 0x0)
r7 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @loopback, 0x11}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c)
r8 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

2.521538537s ago: executing program 1 (id=9598):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r0, 0x0, &(0x7f0000000100))
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, <r5=>r3, 0x80000})
r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5})
r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r10, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50})
r11 = fsmount(r7, 0x0, 0x6)
fchdir(r11)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2a0000a, 0x0, 0x0, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

2.520878824s ago: executing program 0 (id=9608):
fcntl$notify(0xffffffffffffffff, 0x402, 0x5c)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0xa0600, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

2.149476174s ago: executing program 6 (id=9599):
openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x40000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETSW2(r2, 0x545d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "ce7e12d0d1f64d5270e0a78955d1c58401eb9b"})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x3e, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440))
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x78, 0x0, 0x1, {0x3, 0x3, 0x0, {0x0, 0xffffffff, 0x177, 0x1a6, 0x7f, 0x7, 0x7, 0x3, 0x8, 0xc000, 0x2, 0x0, 0x0, 0x8, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = epoll_create(0x10000e9)
r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r6 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r6, 0xffff)
fcntl$addseals(r6, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000100)={r6, 0x0, 0x0, 0x1000})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000240))
fsetxattr$security_capability(r0, &(0x7f00000001c0), &(0x7f0000000200)=@v3={0x3000000, [{0x10, 0x10000}, {0x7fff, 0x3}]}, 0x18, 0x2)
r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x4, 0x3)
dup3(r7, 0xffffffffffffffff, 0x0)

2.149182031s ago: executing program 5 (id=9600):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0x2, 0x1, 0x2, 0x3, 0x7fffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000400)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="640100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe80000000000000000000000000000014000400ff0200000000000000000000000000010c00028005000100000000000800074000000000d0000d8008000100ac141400080002000000", @ANYRESHEX=0x0], 0x164}, 0x1, 0x0, 0x0, 0x8090}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r4 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(0x0, 0x0, 0x0, 0x0, r4)
keyctl$link(0x8, r4, r4)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000700)={{0x0, 0xff}, {0x11, 0x76}, 0xfffffffd, 0x1})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b800069907000000b0000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002)

986.351555ms ago: executing program 4 (id=9601):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1)
listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x30, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0x9, 0x0, 0x1, "100056f200"})
ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r5=>r1, {0xdaf}}, './file0\x00'})
openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x30b001, 0x0)
socket$kcm(0xa, 0x3, 0x87)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x7, 0x101, 0x0, 0x0, {0xf, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_ethernet(0x1de, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0)

985.547738ms ago: executing program 0 (id=9612):
fcntl$notify(0xffffffffffffffff, 0x402, 0x5c)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0xa0600, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

508.024235ms ago: executing program 5 (id=9602):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000140)={0x4000000})
ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1})
pread64(r2, 0x0, 0x0, 0x100000000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x21c, &(0x7f0000001140)=ANY=[@ANYBLOB="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"])
bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}], 0x1}, 0x3}], 0x1, 0x1, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f00000004c0)="5d2c53fbef80181fae0c3c362425a3dc9c29ab06095c301a247a05663dd0339e33f937723c0e747e4b692263874b83110b47a6464cf43728c8f87a5de29499a43ba740851fece0e2073dfeeced3bb6060d5f60cd20e5e9f30ebb", 0x5a, 0x20000000, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @local, 0x100000}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="010028bd70000000000001000000840008808000008024000100d1732899f611cd8994034d7f513dc957630e5493c285aca40065cb6311be696b5800098028000080060001000a0000001400020000000000000000000000000000000000050003000200000028000080060001000a000000140002000000000000000000000000000000000005000300010000000400008014000200776730000000000000000000000000000800050001000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)
recvmsg(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {0x0}], 0x2}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
setxattr$security_capability(&(0x7f0000000d00)='./file0\x00', &(0x7f00000010c0), &(0x7f0000001100)=@v2={0x2000000, [{0xed, 0x10001}, {0x37d1, 0x4a}]}, 0x14, 0x1)

506.780916ms ago: executing program 1 (id=9614):
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x60, 0x43, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r3}, 0x38)
bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000280)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00')
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000340)=@random={'trusted.', '/dev/rnullb0\x00'})
syz_open_dev$ttys(0xc, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000002c0), 0x2, 0x3}}, 0x20)
r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
socket$tipc(0x1e, 0x5, 0x0)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)={0x3c, r6, 0x401, 0x70bd2b, 0x1000800, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0xc5a1ce0}, @ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x200}]}, 0x3c}}, 0x0)

239.626517ms ago: executing program 6 (id=9603):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0xe)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='sessionid\x00')
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f00000007c0)={0x0, 0x0, '\x00', @raw_data=[0x800b, 0x10, 0x6, 0x1, 0xffff, 0xebf, 0xfffff001, 0x7, 0xd7a, 0x3, 0xfff, 0x80, 0xffff207c, 0x7, 0xc, 0xee9, 0x2, 0x30, 0x5, 0x5, 0x3, 0x6, 0x3479, 0x4, 0x9, 0x3, 0xf, 0x4, 0xffff, 0x3, 0x100, 0x400]})
write$6lowpan_control(r4, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000200)='cmdline\x00')
preadv(r6, &(0x7f0000000180)=[{&(0x7f0000000500)=""/146, 0x92}, {0x0}], 0x3a, 0xdffff62d, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r10=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[<r11=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r8, 0xc03064b7, &(0x7f00000001c0)={r10, 0x0, r11, 0x8000, 0x20, 0x10001, 0x1, 0x8001, 0x2, 0xff, 0x2, 0x6})
epoll_create(0x4)
ioctl$VHOST_SET_VRING_CALL(r7, 0x4008af21, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

0s ago: executing program 0 (id=9604):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x10)
write$cgroup_int(r2, &(0x7f0000000000)=0x2b00, 0x12)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="d80000001400810c4e81f782db44b9040a1d080211000000040000a118000200ff05140100000e1208000f0100810401a80016ea1f000840042e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb0900073905a2b4f76c70cbc981e700001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d1601000000eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e006000000000000e87fbb9ad809d5e1cace81b341139fe3cd40", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x2040)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
inotify_init1(0x80000)
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00')
read$FUSE(r5, &(0x7f00000040c0)={0x2020}, 0x2020)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000800)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x12, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8a140, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r6, 0xc0403d08, 0x0)

kernel console output (not intermixed with test programs):

5053][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 2827.815077][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2827.859225][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2828.078710][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2828.105559][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2828.191435][T12164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2828.205539][T12164] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2828.344498][T12179] delete_channel: no stack
[ 2828.467044][T28311] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[ 2828.694972][T28311] usb 2-1: Using ep0 maxpacket: 32
[ 2828.706023][T28311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2828.748763][T28311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2828.784964][T28310] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[ 2828.848080][T28311] usb 2-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00
[ 2828.899165][T28311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2828.928399][T28311] usb 2-1: config 0 descriptor??
[ 2828.951319][T28310] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2828.988581][T28310] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 2829.085022][T28310] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2829.114694][T28310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2829.366844][T28311] kye 0003:0458:501B.0052: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 2829.442040][   T30] kauditd_printk_skb: 36 callbacks suppressed
[ 2829.442058][   T30] audit: type=1326 audit(1763792495.537:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2829.502926][T12179] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[ 2829.553732][T28311] kye 0003:0458:501B.0052: unknown main item tag 0x0
[ 2829.561391][T28310] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 2829.573947][T28311] kye 0003:0458:501B.0052: unknown main item tag 0x0
[ 2829.607516][   T30] audit: type=1326 audit(1763792495.577:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2829.667276][   T30] audit: type=1326 audit(1763792495.577:3474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2829.715186][T28311] kye 0003:0458:501B.0052: hidraw0: USB HID v0.04 Device [HID 0458:501b] on usb-dummy_hcd.1-1/input0
[ 2829.792086][T28311] kye 0003:0458:501B.0052: tablet-enabling feature report not found
[ 2829.830458][   T30] audit: type=1326 audit(1763792495.577:3475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2829.876551][T28311] kye 0003:0458:501B.0052: tablet enabling failed
[ 2829.961266][   T30] audit: type=1326 audit(1763792495.577:3476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2830.278211][T12180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2830.288492][   T30] audit: type=1326 audit(1763792495.577:3477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2830.315630][T12180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2830.353878][   T30] audit: type=1326 audit(1763792495.577:3478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2830.435259][   T30] audit: type=1326 audit(1763792495.577:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2830.469715][   T30] audit: type=1326 audit(1763792495.577:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2830.585015][   T30] audit: type=1326 audit(1763792495.577:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12181 comm="syz.6.8869" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 2831.727930][ T6978] usb 2-1: USB disconnect, device number 110
[ 2832.410824][ T6978] usb 1-1: USB disconnect, device number 42
[ 2832.638931][T12217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8863'.
[ 2834.536587][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8864'.
[ 2836.094531][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8872'.
[ 2836.142455][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2836.160035][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2836.205715][T28311] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[ 2837.230770][T12263] IPVS: ip_vs_add_dest(): server weight less than zero
[ 2837.273079][T12269] IPv6: Can't replace route, no match found
[ 2838.900015][T12282] syz.4.8874 (12282): drop_caches: 2
[ 2838.916517][T12282] syz.4.8874 (12282): drop_caches: 2
[ 2840.348230][T12311] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8892'.
[ 2841.149811][T12317] vcan0: tx drop: invalid sa for name 0x0000020000000000
[ 2841.685584][T12318] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 2842.585748][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8883'.
[ 2842.818219][T12333] IPv6: Can't replace route, no match found
[ 2843.820963][T12345] IPv6: Can't replace route, no match found
[ 2843.830055][T12347] IPv6: Can't replace route, no match found
[ 2844.010497][T12349] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8889'.
[ 2844.030350][T12349] IPv6: Can't replace route, no match found
[ 2845.303932][T12360] IPv6: Can't replace route, no match found
[ 2846.960282][T12389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2847.019412][T12389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2847.160618][T12390] IPv6: Can't replace route, no match found
[ 2847.245025][T28310] usb 6-1: new full-speed USB device number 42 using dummy_hcd
[ 2847.435338][T28310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2847.459304][T28310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2847.509738][T28310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2847.531712][T28310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2847.565146][T28310] usb 6-1: Product: syz
[ 2847.583777][T28310] usb 6-1: Manufacturer: syz
[ 2847.601199][T28310] usb 6-1: SerialNumber: syz
[ 2847.625957][ T6978] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[ 2848.312130][ T6978] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2848.382724][ T6978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2848.659982][ T6978] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2848.669637][ T6978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2848.679929][ T6978] usb 1-1: Product: syz
[ 2848.684285][ T6978] usb 1-1: Manufacturer: syz
[ 2848.697483][ T6978] usb 1-1: SerialNumber: syz
[ 2849.155010][T15070] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[ 2849.902507][T28310] usb 6-1: 0:2 : does not exist
[ 2849.917962][T28310] usb 6-1: USB disconnect, device number 42
[ 2849.937985][T15070] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2849.958519][T15070] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2849.993573][T15070] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2850.008359][T15070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2850.025387][T15070] usb 2-1: Product: syz
[ 2850.029645][T15070] usb 2-1: Manufacturer: syz
[ 2850.034309][T15070] usb 2-1: SerialNumber: syz
[ 2851.115523][T12421] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8905'.
[ 2851.128934][T12421] IPv6: Can't replace route, no match found
[ 2851.143625][T12422] IPv6: Can't replace route, no match found
[ 2851.647441][ T6978] usb 1-1: 0:2 : does not exist
[ 2851.678649][ T6978] usb 1-1: USB disconnect, device number 44
[ 2851.780291][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2851.941992][T15070] usb 2-1: 0:2 : does not exist
[ 2851.973797][T15070] usb 2-1: USB disconnect, device number 111
[ 2852.019029][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2852.504960][T15070] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[ 2852.680468][T12444] IPv6: Can't replace route, no match found
[ 2852.699035][T15070] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2852.764956][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2852.813412][T15070] usb 1-1: Product: syz
[ 2852.820763][T15070] usb 1-1: Manufacturer: syz
[ 2852.836273][T15070] usb 1-1: SerialNumber: syz
[ 2852.858906][T15070] usb 1-1: config 0 descriptor??
[ 2853.072115][T15070] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 2853.552009][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8911'.
[ 2854.399114][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2854.457535][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2854.615274][T28310] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[ 2854.776645][T28310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2854.794815][T28310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2854.816515][T28310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2854.897097][T28310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2854.906081][T28310] usb 6-1: Product: syz
[ 2854.910450][T28310] usb 6-1: Manufacturer: syz
[ 2854.915605][T28310] usb 6-1: SerialNumber: syz
[ 2855.713904][T28311] usb 1-1: USB disconnect, device number 45
[ 2857.179671][T12486] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8917'.
[ 2857.462994][T28310] usb 6-1: 0:2 : does not exist
[ 2857.767456][T28310] usb 6-1: USB disconnect, device number 43
[ 2857.910589][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2858.096641][T12495] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8919'.
[ 2858.118267][T12495] IPv6: Can't replace route, no match found
[ 2858.664952][T28310] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[ 2858.905775][T28310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2858.923673][T28310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2859.267850][T28310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2859.321383][T28310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2859.376516][T10594] usb 2-1: new full-speed USB device number 112 using dummy_hcd
[ 2859.386397][T28310] usb 6-1: Product: syz
[ 2859.398242][T28310] usb 6-1: Manufacturer: syz
[ 2859.424951][T28310] usb 6-1: SerialNumber: syz
[ 2860.215446][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2860.231046][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2860.299640][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2860.310845][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2860.322185][T10594] usb 2-1: Product: syz
[ 2860.327896][T10594] usb 2-1: Manufacturer: syz
[ 2860.333858][T10594] usb 2-1: SerialNumber: syz
[ 2860.698473][T28310] usb 6-1: 0:2 : does not exist
[ 2860.731791][T28310] usb 6-1: USB disconnect, device number 44
[ 2861.127586][T12531] IPv6: Can't replace route, no match found
[ 2862.006539][T10594] usb 2-1: 0:2 : does not exist
[ 2862.066650][T10594] usb 2-1: USB disconnect, device number 112
[ 2862.183804][T12543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2862.234781][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2862.277062][T12543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2862.618829][T10594] usb 2-1: new full-speed USB device number 113 using dummy_hcd
[ 2862.818500][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2862.880969][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2862.907536][T12548] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8931'.
[ 2862.923407][T12548] IPv6: Can't replace route, no match found
[ 2863.024992][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2863.049421][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2863.063202][T10594] usb 2-1: Product: syz
[ 2863.074155][T10594] usb 2-1: Manufacturer: syz
[ 2863.092094][T10594] usb 2-1: SerialNumber: syz
[ 2863.356378][T12552] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8932'.
[ 2864.552000][T12562] IPv6: Can't replace route, no match found
[ 2865.198680][T15070] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[ 2865.366724][T15070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2865.397230][T15070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2865.421589][T15070] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2865.435781][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2865.459606][T15070] usb 1-1: Product: syz
[ 2865.477661][T15070] usb 1-1: Manufacturer: syz
[ 2865.487340][T15070] usb 1-1: SerialNumber: syz
[ 2866.070540][T12578] IPv6: Can't replace route, no match found
[ 2866.242077][T10594] usb 2-1: 0:2 : does not exist
[ 2866.260771][T10594] usb 2-1: USB disconnect, device number 113
[ 2866.348100][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2866.755022][T12404] usb 2-1: new full-speed USB device number 114 using dummy_hcd
[ 2866.937803][T12404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2866.948285][T12404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2866.992066][T12404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2867.013497][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2867.036304][T12404] usb 2-1: Product: syz
[ 2867.050715][T12404] usb 2-1: Manufacturer: syz
[ 2867.065794][T12404] usb 2-1: SerialNumber: syz
[ 2867.342029][T12587] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8939'.
[ 2867.925108][T10594] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[ 2868.086791][T10594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2868.097336][T10594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2868.147139][T10594] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2868.173680][T10594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2868.196541][T10594] usb 6-1: Product: syz
[ 2868.205142][T10594] usb 6-1: Manufacturer: syz
[ 2868.214891][T10594] usb 6-1: SerialNumber: syz
[ 2868.391921][T15070] usb 1-1: 0:2 : does not exist
[ 2868.402898][T15070] usb 1-1: USB disconnect, device number 46
[ 2868.703392][T12605] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8942'.
[ 2868.724434][T12605] IPv6: Can't replace route, no match found
[ 2869.986371][T12615] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8945'.
[ 2870.053678][T12618] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8946'.
[ 2870.063016][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8946'.
[ 2870.079644][T12618] IPv6: Can't replace route, no match found
[ 2871.022040][T12623] IPv6: Can't replace route, no match found
[ 2872.578973][T12634] IPv6: Can't replace route, no match found
[ 2873.057571][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2873.297658][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2873.361676][T12404] usb 2-1: 0:2 : does not exist
[ 2873.387484][T10594] usb 6-1: 0:2 : does not exist
[ 2873.389081][T12404] usb 2-1: USB disconnect, device number 114
[ 2873.438902][T10594] usb 6-1: USB disconnect, device number 45
[ 2873.469146][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2873.512560][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2873.572901][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 2873.775036][T15070] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[ 2873.929293][T15070] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2873.938896][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2873.952895][T15070] usb 1-1: Product: syz
[ 2873.968126][T15070] usb 1-1: Manufacturer: syz
[ 2873.983189][T15070] usb 1-1: SerialNumber: syz
[ 2874.010363][T15070] usb 1-1: config 0 descriptor??
[ 2874.297901][T15070] usb-storage 1-1:0.0: USB Mass Storage device detected
[ 2874.505776][T15070] usb 1-1: USB disconnect, device number 47
[ 2874.953600][T15070] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[ 2875.190422][T12661] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8956'.
[ 2875.203313][T12661] IPv6: Can't replace route, no match found
[ 2875.622754][T15070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2875.633189][T15070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2875.804227][T15070] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2875.813673][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2875.822627][T15070] usb 1-1: Product: syz
[ 2875.828701][T15070] usb 1-1: Manufacturer: syz
[ 2875.834516][T15070] usb 1-1: SerialNumber: syz
[ 2876.555051][T12429] usb 2-1: new full-speed USB device number 115 using dummy_hcd
[ 2876.700978][T12677] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8960'.
[ 2876.714977][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8960'.
[ 2876.736209][T12677] IPv6: Can't replace route, no match found
[ 2876.840663][T12429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2876.851073][T12429] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2876.862748][T12429] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2876.871986][T12429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2876.882135][T12429] usb 2-1: Product: syz
[ 2876.886432][T12429] usb 2-1: Manufacturer: syz
[ 2876.893278][T12429] usb 2-1: SerialNumber: syz
[ 2877.243215][T12681] IPv6: Can't replace route, no match found
[ 2877.705728][T12687] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8963'.
[ 2877.752274][T12687] IPv6: Can't replace route, no match found
[ 2877.852894][T12690] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8962'.
[ 2877.878313][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8962'.
[ 2878.002335][T15070] usb 1-1: 0:2 : does not exist
[ 2878.039971][T15070] usb 1-1: USB disconnect, device number 48
[ 2878.505315][T12697] netlink: 188 bytes leftover after parsing attributes in process `syz.6.8965'.
[ 2879.207511][T12404] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 2879.250295][T12429] usb 2-1: 0:2 : does not exist
[ 2879.385081][T12429] usb 2-1: USB disconnect, device number 115
[ 2879.406136][T12404] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2879.415388][T12404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2879.423645][T12404] usb 6-1: Product: syz
[ 2879.438505][T12404] usb 6-1: Manufacturer: syz
[ 2879.453606][T12404] usb 6-1: SerialNumber: syz
[ 2879.466511][T12404] usb 6-1: config 0 descriptor??
[ 2879.501336][T12398] udevd[12398]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2879.685096][T15070] usb 1-1: new full-speed USB device number 49 using dummy_hcd
[ 2879.730604][T12404] usb-storage 6-1:0.0: USB Mass Storage device detected
[ 2879.829483][T12703] tipc: Resetting bearer <eth:gre0>
[ 2879.837048][T12703] tipc: Resetting bearer <eth:gre0>
[ 2879.859896][T12703] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[ 2880.113322][T12718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2880.409700][T12718] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2880.437106][T15070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2880.447528][T15070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2880.462882][T15070] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2880.516599][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2880.525426][T15070] usb 1-1: Product: syz
[ 2880.529672][T15070] usb 1-1: Manufacturer: syz
[ 2880.543408][T15070] usb 1-1: SerialNumber: syz
[ 2880.669681][T12724] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8970'.
[ 2880.703370][T12724] IPv6: Can't replace route, no match found
[ 2882.013542][T12429] usb 6-1: USB disconnect, device number 46
[ 2882.316832][T15070] usb 1-1: 0:2 : does not exist
[ 2882.420419][T15070] usb 1-1: USB disconnect, device number 49
[ 2882.618414][T12742] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8974'.
[ 2882.636980][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8974'.
[ 2883.135674][T15070] usb 2-1: new full-speed USB device number 116 using dummy_hcd
[ 2883.306636][T15070] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2883.334906][T15070] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2883.446781][T15070] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2883.527313][T12753] IPv6: Can't replace route, no match found
[ 2883.540943][T15070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2883.554822][T15070] usb 2-1: Product: syz
[ 2883.560072][T15070] usb 2-1: Manufacturer: syz
[ 2883.564749][T15070] usb 2-1: SerialNumber: syz
[ 2883.649631][T12758] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8977'.
[ 2883.675868][T12758] IPv6: Can't replace route, no match found
[ 2883.935023][T10594] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[ 2884.163551][T10594] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2884.206952][T10594] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2884.409934][T10594] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2884.419512][T10594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2884.428069][T10594] usb 1-1: Product: syz
[ 2884.435745][T10594] usb 1-1: Manufacturer: syz
[ 2884.449470][T10594] usb 1-1: SerialNumber: syz
[ 2884.632781][T12765] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8979'.
[ 2884.642144][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8979'.
[ 2884.792058][T12767] IPv6: Can't replace route, no match found
[ 2885.771493][T12774] netlink: 216 bytes leftover after parsing attributes in process `syz.6.8982'.
[ 2885.785115][T12774] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8982'.
[ 2885.809533][T12774] IPv6: Can't replace route, no match found
[ 2886.461606][T15070] usb 2-1: 0:2 : does not exist
[ 2886.542727][T15070] usb 2-1: USB disconnect, device number 116
[ 2887.447391][T12791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2887.466702][T12791] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2888.305316][T10594] usb 1-1: 0:2 : does not exist
[ 2888.422191][T10594] usb 1-1: USB disconnect, device number 50
[ 2888.507739][T12808] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8989'.
[ 2888.519161][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8989'.
[ 2888.540529][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2888.774981][T15070] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 2888.941391][T15070] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2888.967359][T15070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2888.990823][T15070] usb 2-1: Product: syz
[ 2889.002973][T15070] usb 2-1: Manufacturer: syz
[ 2889.015836][T15070] usb 2-1: SerialNumber: syz
[ 2889.039657][T15070] usb 2-1: config 0 descriptor??
[ 2889.291498][T15070] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2889.668505][T12817] netlink: 216 bytes leftover after parsing attributes in process `syz.0.8990'.
[ 2889.693560][T12818] netlink: 216 bytes leftover after parsing attributes in process `syz.5.8991'.
[ 2889.706868][T12818] IPv6: Can't replace route, no match found
[ 2890.374161][T10594] usb 2-1: USB disconnect, device number 117
[ 2890.750040][T12827] netlink: 208 bytes leftover after parsing attributes in process `syz.0.8993'.
[ 2890.871488][T10594] usb 2-1: new full-speed USB device number 118 using dummy_hcd
[ 2891.087657][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2891.098941][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2891.123599][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2891.139596][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2891.161021][T10594] usb 2-1: Product: syz
[ 2891.173050][T10594] usb 2-1: Manufacturer: syz
[ 2891.186258][T10594] usb 2-1: SerialNumber: syz
[ 2891.902528][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2891.914149][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2891.984499][T12841] netlink: 216 bytes leftover after parsing attributes in process `syz.4.8996'.
[ 2892.026613][T12841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8996'.
[ 2894.085262][T12429] usb 6-1: new full-speed USB device number 47 using dummy_hcd
[ 2894.248062][T12429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2894.260084][T12429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2894.271968][T12862] netlink: 208 bytes leftover after parsing attributes in process `syz.0.9001'.
[ 2894.287817][T12429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2894.297172][T12429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2894.305340][T12429] usb 6-1: Product: syz
[ 2894.310041][T12429] usb 6-1: Manufacturer: syz
[ 2894.314658][T12429] usb 6-1: SerialNumber: syz
[ 2894.440424][T10594] usb 2-1: 0:2 : does not exist
[ 2894.695054][T10594] usb 2-1: USB disconnect, device number 118
[ 2895.961057][T12871] netlink: 216 bytes leftover after parsing attributes in process `syz.0.9004'.
[ 2896.095365][T12878] netlink: 216 bytes leftover after parsing attributes in process `syz.4.9005'.
[ 2896.157717][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9005'.
[ 2896.568670][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2896.580968][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2896.892827][T12429] usb 6-1: 0:2 : does not exist
[ 2896.974125][T12429] usb 6-1: USB disconnect, device number 47
[ 2897.042079][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2897.116225][T12888] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9008'.
[ 2897.157995][T12888] IPv6: Can't replace route, no match found
[ 2897.274937][T28310] usb 1-1: new full-speed USB device number 51 using dummy_hcd
[ 2897.355002][T10594] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 2897.545625][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2897.552001][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2897.680259][T10594] usb 2-1: device descriptor read/all, error -71
[ 2897.851478][T28310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2897.862271][T28310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2897.873993][T28310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2897.883694][T28310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2897.891931][T28310] usb 1-1: Product: syz
[ 2897.911956][T28310] usb 1-1: Manufacturer: syz
[ 2897.922393][T28310] usb 1-1: SerialNumber: syz
[ 2899.282176][T12913] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9013'.
[ 2899.292128][T12913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9013'.
[ 2899.305960][T12913] IPv6: Can't replace route, no match found
[ 2899.560403][T12919] netlink: 208 bytes leftover after parsing attributes in process `syz.6.9015'.
[ 2899.580200][T10594] usb 6-1: new full-speed USB device number 48 using dummy_hcd
[ 2899.596398][T12919] IPv6: Can't replace route, no match found
[ 2899.767734][T10594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2899.778205][T10594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2899.793711][T10594] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2899.803532][T10594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2899.811981][T10594] usb 6-1: Product: syz
[ 2899.817106][T10594] usb 6-1: Manufacturer: syz
[ 2899.821989][T10594] usb 6-1: SerialNumber: syz
[ 2899.871787][T28310] usb 1-1: 0:2 : does not exist
[ 2899.887109][T28310] usb 1-1: USB disconnect, device number 51
[ 2900.804453][T12934] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9018'.
[ 2900.862036][T12934] IPv6: Can't replace route, no match found
[ 2902.246371][T10594] usb 6-1: 0:2 : does not exist
[ 2902.329917][T10594] usb 6-1: USB disconnect, device number 48
[ 2902.405334][T15070] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 2902.769351][T12952] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9031'.
[ 2902.789270][T15070] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2902.798715][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9031'.
[ 2902.809424][T15070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2902.833436][T12952] IPv6: Can't replace route, no match found
[ 2902.839553][T15070] usb 2-1: Product: syz
[ 2902.843773][T15070] usb 2-1: Manufacturer: syz
[ 2902.849377][T15070] usb 2-1: SerialNumber: syz
[ 2902.856115][T15070] usb 2-1: config 0 descriptor??
[ 2902.868491][T12951] hub 9-0:1.0: USB hub found
[ 2902.875250][T12951] hub 9-0:1.0: 1 port detected
[ 2903.065111][T15070] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2903.136030][   T30] kauditd_printk_skb: 14 callbacks suppressed
[ 2903.136046][   T30] audit: type=1326 audit(1763792569.227:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.274643][   T30] audit: type=1326 audit(1763792569.227:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.492311][   T30] audit: type=1326 audit(1763792569.227:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.582042][   T30] audit: type=1326 audit(1763792569.227:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.706312][   T30] audit: type=1326 audit(1763792569.227:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.843107][   T30] audit: type=1326 audit(1763792569.257:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.926233][   T30] audit: type=1326 audit(1763792569.257:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2903.985408][T12962] fuse: Bad value for 'fd'
[ 2904.066188][   T30] audit: type=1326 audit(1763792569.267:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2904.175939][   T30] audit: type=1326 audit(1763792569.287:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=150 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2904.259279][   T30] audit: type=1326 audit(1763792569.477:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12954 comm="syz.0.9022" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 2904.995106][T28310] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[ 2905.013143][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 2905.174919][T28310] usb 1-1: device descriptor read/64, error -32
[ 2905.445521][T28310] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[ 2905.454158][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 2905.558118][T10594] usb 2-1: USB disconnect, device number 121
[ 2905.584930][T28310] usb 1-1: device descriptor read/64, error -32
[ 2905.610163][T12995] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9029'.
[ 2905.621700][T12994] netlink: 208 bytes leftover after parsing attributes in process `syz.6.9028'.
[ 2905.632411][T12995] IPv6: Can't replace route, no match found
[ 2905.688301][T12994] IPv6: Can't replace route, no match found
[ 2905.763515][T28310] usb usb1-port1: attempt power cycle
[ 2906.124989][T28310] usb 1-1: new full-speed USB device number 54 using dummy_hcd
[ 2906.649733][T28310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2906.660100][T28310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2906.673996][T28310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2906.685166][T28310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2906.693230][T28310] usb 1-1: Product: syz
[ 2906.700914][T28310] usb 1-1: Manufacturer: syz
[ 2906.706229][T28310] usb 1-1: SerialNumber: syz
[ 2906.890147][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2906.961354][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2908.524561][T13023] netlink: 216 bytes leftover after parsing attributes in process `syz.5.9036'.
[ 2908.534261][T13023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9036'.
[ 2908.551270][T13023] IPv6: Can't replace route, no match found
[ 2909.311421][T13025] can: request_module (can-proto-3) failed.
[ 2909.357442][T28310] usb 1-1: 0:2 : does not exist
[ 2909.377848][T28310] usb 1-1: USB disconnect, device number 54
[ 2909.419380][T12428] udevd[12428]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2910.508151][T13057] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9042'.
[ 2910.523435][T13057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9042'.
[ 2910.543464][T13057] IPv6: Can't replace route, no match found
[ 2911.395387][T13061] IPv6: Can't replace route, no match found
[ 2911.677611][T13070] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9044'.
[ 2911.729444][T13070] IPv6: Can't replace route, no match found
[ 2911.959422][T13075] IPv6: Can't replace route, no match found
[ 2913.464998][T15070] usb 6-1: new full-speed USB device number 49 using dummy_hcd
[ 2913.535106][T12404] usb 2-1: new full-speed USB device number 122 using dummy_hcd
[ 2913.657840][T15070] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2913.687379][T15070] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2913.719347][T15070] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2913.730149][T15070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2913.738671][T15070] usb 6-1: Product: syz
[ 2913.743076][T15070] usb 6-1: Manufacturer: syz
[ 2913.748089][T15070] usb 6-1: SerialNumber: syz
[ 2913.823546][T13102] netlink: 216 bytes leftover after parsing attributes in process `syz.6.9052'.
[ 2913.833847][T13102] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9052'.
[ 2913.850922][T13102] IPv6: Can't replace route, no match found
[ 2913.865280][T12404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2913.894897][T12404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2914.130928][T12404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2914.154682][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2914.174484][T12404] usb 2-1: Product: syz
[ 2914.185084][T12404] usb 2-1: Manufacturer: syz
[ 2914.196477][T12404] usb 2-1: SerialNumber: syz
[ 2914.454935][T28310] usb 1-1: new full-speed USB device number 55 using dummy_hcd
[ 2914.617586][T28310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2914.637773][T28310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2914.684961][T28310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2914.704908][T28310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2914.717844][T28310] usb 1-1: Product: syz
[ 2914.722025][T28310] usb 1-1: Manufacturer: syz
[ 2914.727840][T28310] usb 1-1: SerialNumber: syz
[ 2914.817841][T13110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2914.837084][T13110] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2916.216464][T15070] usb 6-1: 0:2 : does not exist
[ 2916.248742][T12404] usb 2-1: 0:2 : does not exist
[ 2916.257081][T15070] usb 6-1: USB disconnect, device number 49
[ 2916.290073][T12404] usb 2-1: USB disconnect, device number 122
[ 2916.564500][T13127] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9057'.
[ 2917.703174][T13132] IPv6: Can't replace route, no match found
[ 2917.776547][T28310] usb 1-1: 0:2 : does not exist
[ 2918.057423][T28310] usb 1-1: USB disconnect, device number 55
[ 2918.130706][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2918.212067][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2918.310341][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 2918.436368][T12404] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[ 2918.600109][T12404] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2918.618797][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2918.645033][T12404] usb 2-1: Product: syz
[ 2918.649439][T12404] usb 2-1: Manufacturer: syz
[ 2918.666998][T13145] netlink: 208 bytes leftover after parsing attributes in process `syz.6.9061'.
[ 2918.696448][T12404] usb 2-1: SerialNumber: syz
[ 2918.703012][T12404] usb 2-1: config 0 descriptor??
[ 2918.748108][T13145] IPv6: Can't replace route, no match found
[ 2920.578277][T12404] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2920.704266][T12404] usb 2-1: USB disconnect, device number 123
[ 2920.826830][T13166] netlink: 208 bytes leftover after parsing attributes in process `syz.1.9065'.
[ 2920.872275][T13166] IPv6: Can't replace route, no match found
[ 2921.255603][T28310] usb 6-1: new full-speed USB device number 50 using dummy_hcd
[ 2921.460046][T28310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2921.482612][T28310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2921.517740][T28310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2921.530918][T28310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2921.549322][T28310] usb 6-1: Product: syz
[ 2921.553890][T28310] usb 6-1: Manufacturer: syz
[ 2921.585414][T28310] usb 6-1: SerialNumber: syz
[ 2921.725007][T10594] usb 1-1: new full-speed USB device number 56 using dummy_hcd
[ 2921.926446][T10594] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2921.956850][T10594] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2921.997531][T10594] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2922.015355][T10594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2922.036227][T10594] usb 1-1: Product: syz
[ 2922.041161][T10594] usb 1-1: Manufacturer: syz
[ 2922.046277][T10594] usb 1-1: SerialNumber: syz
[ 2922.092708][T13186] netlink: 208 bytes leftover after parsing attributes in process `syz.1.9070'.
[ 2922.115976][T13186] IPv6: Can't replace route, no match found
[ 2923.058654][T13191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2923.067698][T13191] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2923.445015][T28311] usb 2-1: new full-speed USB device number 124 using dummy_hcd
[ 2923.616643][T28311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2923.626877][T28311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2923.638338][T28311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2923.647655][T28311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2923.655799][T28311] usb 2-1: Product: syz
[ 2923.660013][T28311] usb 2-1: Manufacturer: syz
[ 2923.664658][T28311] usb 2-1: SerialNumber: syz
[ 2925.515577][T28310] usb 6-1: 0:2 : does not exist
[ 2925.593757][T10594] usb 1-1: 0:2 : does not exist
[ 2925.600417][T28310] usb 6-1: USB disconnect, device number 50
[ 2925.647611][T10594] usb 1-1: USB disconnect, device number 56
[ 2926.145556][T28311] usb 2-1: 0:2 : does not exist
[ 2926.293075][T28311] usb 2-1: USB disconnect, device number 124
[ 2926.450320][T13093] udevd[13093]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2926.490069][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 2927.103769][T13230] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9081'.
[ 2927.226622][T13232] IPv6: Can't replace route, no match found
[ 2928.145465][T13243] netlink: 208 bytes leftover after parsing attributes in process `syz.6.9083'.
[ 2928.209111][T13243] IPv6: Can't replace route, no match found
[ 2928.759459][T12404] usb 6-1: new full-speed USB device number 51 using dummy_hcd
[ 2928.925269][T28311] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[ 2928.936959][T12404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2928.947740][T12404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2928.968633][T12404] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2929.014402][T12404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2929.045011][T12404] usb 6-1: Product: syz
[ 2929.049263][T12404] usb 6-1: Manufacturer: syz
[ 2929.125189][T28311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2929.154940][T12404] usb 6-1: SerialNumber: syz
[ 2929.217315][T28311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2929.296185][T28311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2929.311347][T28311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2929.331660][T28311] usb 1-1: Product: syz
[ 2929.336907][T28311] usb 1-1: Manufacturer: syz
[ 2929.341755][T28311] usb 1-1: SerialNumber: syz
[ 2929.828829][T13265] IPv6: Can't replace route, no match found
[ 2930.774942][T10594] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[ 2930.827158][T13276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2930.836072][T13276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2931.031309][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2931.041845][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2931.285260][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2931.294784][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2931.303241][T10594] usb 2-1: Product: syz
[ 2931.307847][T10594] usb 2-1: Manufacturer: syz
[ 2931.312537][T10594] usb 2-1: SerialNumber: syz
[ 2931.524709][T12404] usb 6-1: 0:2 : does not exist
[ 2931.539694][T28311] usb 1-1: 0:2 : does not exist
[ 2931.550596][T12404] usb 6-1: USB disconnect, device number 51
[ 2931.735771][T28311] usb 1-1: USB disconnect, device number 57
[ 2933.818360][T13302] netlink: 208 bytes leftover after parsing attributes in process `syz.0.9095'.
[ 2935.247954][T10594] usb 2-1: 0:2 : does not exist
[ 2935.273656][T10594] usb 2-1: USB disconnect, device number 125
[ 2935.362537][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory
[ 2935.767401][T15070] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 2935.822503][T13331] IPv6: Can't replace route, no match found
[ 2935.907222][T13335] IPv6: Can't replace route, no match found
[ 2935.939663][T15070] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 2935.962607][T15070] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2936.029499][T15070] usb 2-1: Product: syz
[ 2936.048681][T15070] usb 2-1: Manufacturer: syz
[ 2936.074103][T15070] usb 2-1: SerialNumber: syz
[ 2936.093691][T15070] usb 2-1: config 0 descriptor??
[ 2938.682033][T15070] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 2938.828726][T28311] usb 1-1: new full-speed USB device number 58 using dummy_hcd
[ 2938.874202][T15070] usb 2-1: USB disconnect, device number 126
[ 2938.935114][T12429] usb 6-1: new full-speed USB device number 52 using dummy_hcd
[ 2939.023738][T13366] IPv6: Can't replace route, no match found
[ 2939.200997][T12429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2939.255334][T28311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2939.277095][T12429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2939.294991][T28311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2939.328406][T28311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2939.337768][T28311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2939.346230][T28311] usb 1-1: Product: syz
[ 2939.350615][T28311] usb 1-1: Manufacturer: syz
[ 2939.378709][T28311] usb 1-1: SerialNumber: syz
[ 2939.513218][T12429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2939.522514][T12429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2939.620908][T12429] usb 6-1: Product: syz
[ 2939.633483][T12429] usb 6-1: Manufacturer: syz
[ 2939.648677][T12429] usb 6-1: SerialNumber: syz
[ 2941.593948][T13391] IPv6: Can't replace route, no match found
[ 2941.618920][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2941.629903][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2941.914179][T28311] usb 1-1: 0:2 : does not exist
[ 2941.926889][T28311] usb 1-1: USB disconnect, device number 58
[ 2941.957232][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2942.841299][T13404] IPv6: Can't replace route, no match found
[ 2942.895373][T12429] usb 6-1: 0:2 : does not exist
[ 2942.912298][T12429] usb 6-1: USB disconnect, device number 52
[ 2942.948087][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2944.473820][T13427] IPv6: Can't replace route, no match found
[ 2945.985050][T15070] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[ 2946.248121][T15070] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2946.259488][T15070] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2946.407693][T13444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2946.817305][T15070] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2946.830110][T13444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2946.840938][T15070] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2946.859454][T15070] usb 1-1: Product: syz
[ 2946.865195][T15070] usb 1-1: Manufacturer: syz
[ 2946.874083][T15070] usb 1-1: SerialNumber: syz
[ 2947.144975][T12429] usb 6-1: new full-speed USB device number 53 using dummy_hcd
[ 2947.331370][T13458] IPv6: Can't replace route, no match found
[ 2947.394518][T12429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2947.406803][T12429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2947.611947][T12429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2947.651021][T12429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2947.673508][T12429] usb 6-1: Product: syz
[ 2947.684916][T13463] IPv6: Can't replace route, no match found
[ 2947.705058][T12429] usb 6-1: Manufacturer: syz
[ 2947.714933][T12429] usb 6-1: SerialNumber: syz
[ 2949.219856][T13475] IPv6: Can't replace route, no match found
[ 2949.287300][T15070] usb 1-1: 0:2 : does not exist
[ 2949.376354][T15070] usb 1-1: USB disconnect, device number 59
[ 2949.816913][T13483] IPv6: Can't replace route, no match found
[ 2950.773863][T12429] usb 6-1: 0:2 : does not exist
[ 2950.925971][T28311] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[ 2950.929321][T12429] usb 6-1: USB disconnect, device number 53
[ 2951.268738][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2951.317071][T28311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2951.379054][T28311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2951.474206][T28311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2951.507302][T28311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2951.562950][T28311] usb 2-1: Product: syz
[ 2951.572197][T28311] usb 2-1: Manufacturer: syz
[ 2951.656197][T28311] usb 2-1: SerialNumber: syz
[ 2952.785510][T13518] IPv6: Can't replace route, no match found
[ 2952.973924][T13520] IPv6: Can't replace route, no match found
[ 2954.246566][T28311] usb 2-1: 0:2 : does not exist
[ 2954.303372][T28311] usb 2-1: USB disconnect, device number 127
[ 2954.936348][T13540] IPv6: Can't replace route, no match found
[ 2956.062601][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2956.184962][T28311] usb 6-1: new full-speed USB device number 54 using dummy_hcd
[ 2956.397115][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2956.877266][T28311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2956.937193][T28311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2956.988070][T28311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2956.997807][T28311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2957.025136][T28311] usb 6-1: Product: syz
[ 2957.045169][T28311] usb 6-1: Manufacturer: syz
[ 2957.084898][T28311] usb 6-1: SerialNumber: syz
[ 2958.980123][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 2958.986527][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 2959.231662][T13586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2959.246134][T13582] IPv6: Can't replace route, no match found
[ 2959.257661][T13586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2960.832902][T28311] usb 6-1: 0:2 : does not exist
[ 2960.846593][T28311] usb 6-1: USB disconnect, device number 54
[ 2961.196538][T13612] IPv6: Can't replace route, no match found
[ 2961.221174][T13613] IPv6: Can't replace route, no match found
[ 2962.527257][T13625] IPv6: Can't replace route, no match found
[ 2963.480358][T13630] IPv6: Can't replace route, no match found
[ 2964.095008][T28311] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 2964.114990][T10594] usb 6-1: new full-speed USB device number 55 using dummy_hcd
[ 2964.276334][T10594] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2964.286782][T10594] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2964.302508][T10594] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2964.313652][T10594] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.322318][T10594] usb 6-1: Product: syz
[ 2964.326940][T10594] usb 6-1: Manufacturer: syz
[ 2964.331538][T10594] usb 6-1: SerialNumber: syz
[ 2964.359600][T13638] IPv6: Can't replace route, no match found
[ 2964.434955][T28311] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2964.446053][T28311] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2964.794950][T28311] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2964.804780][T28311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2964.814196][T28311] usb 1-1: Product: syz
[ 2964.822806][T28311] usb 1-1: Manufacturer: syz
[ 2964.832917][T28311] usb 1-1: SerialNumber: syz
[ 2965.055590][T10594] usb 6-1: 0:2 : does not exist
[ 2965.090368][T10594] usb 6-1: USB disconnect, device number 55
[ 2965.250502][T13645] batadv_slave_0: left promiscuous mode
[ 2965.258308][T13645] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[ 2965.266828][T13645] vxlan1: left promiscuous mode
[ 2965.273655][T13645] gtp0: left promiscuous mode
[ 2965.835219][T12404] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[ 2966.051413][T13660] IPv6: Can't replace route, no match found
[ 2966.225401][T12404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2966.248794][T12404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2966.290283][T12404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2966.322987][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2966.352667][T12404] usb 2-1: Product: syz
[ 2966.369134][T12404] usb 2-1: Manufacturer: syz
[ 2966.381701][T12404] usb 2-1: SerialNumber: syz
[ 2967.023721][T13667] IPv6: Can't replace route, no match found
[ 2968.288552][T13679] IPv6: Can't replace route, no match found
[ 2969.684736][T13696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2969.706661][T13696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2970.098281][T28311] usb 1-1: 0:2 : does not exist
[ 2970.156940][T12404] usb 2-1: 0:2 : does not exist
[ 2970.216921][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2970.241016][T12404] usb 2-1: USB disconnect, device number 2
[ 2970.318942][T13114] udevd[13114]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2970.364963][T12429] usb 1-1: USB disconnect, device number 60
[ 2970.565494][T12404] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[ 2970.716590][T12404] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2970.731965][T12404] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2970.756580][T12404] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2970.776669][T12404] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2970.799350][T13712] IPv6: Can't replace route, no match found
[ 2970.823870][T12404] usb 2-1: Product: syz
[ 2970.833631][T12404] usb 2-1: Manufacturer: syz
[ 2970.851323][T12404] usb 2-1: SerialNumber: syz
[ 2970.875035][T12429] usb 6-1: new full-speed USB device number 56 using dummy_hcd
[ 2971.071315][T12429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2971.181578][T12429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2971.355924][T12429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2971.400055][T12429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2971.435224][T12429] usb 6-1: Product: syz
[ 2971.468143][T12429] usb 6-1: Manufacturer: syz
[ 2971.477902][T12429] usb 6-1: SerialNumber: syz
[ 2972.121080][T13721] IPv6: Can't replace route, no match found
[ 2972.478722][T12404] usb 2-1: 0:2 : does not exist
[ 2972.585534][T12404] usb 2-1: USB disconnect, device number 3
[ 2972.592032][T12429] usb 6-1: 0:2 : does not exist
[ 2972.732654][T12429] usb 6-1: USB disconnect, device number 56
[ 2972.926786][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2973.572759][T13742] IPv6: Can't replace route, no match found
[ 2973.685302][T12404] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[ 2974.298647][T13752] IPv6: Can't replace route, no match found
[ 2974.456676][T12404] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2974.485373][T12404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2974.514940][T10594] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 2974.768368][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2974.778635][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2974.793477][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2974.802994][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2974.811711][T10594] usb 2-1: Product: syz
[ 2974.816231][T10594] usb 2-1: Manufacturer: syz
[ 2974.820997][T10594] usb 2-1: SerialNumber: syz
[ 2974.864404][T12404] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2974.913171][T12404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2974.937277][T12404] usb 1-1: Product: syz
[ 2974.944794][T12404] usb 1-1: Manufacturer: syz
[ 2974.957966][T12404] usb 1-1: SerialNumber: syz
[ 2975.785036][T12429] usb 6-1: new full-speed USB device number 57 using dummy_hcd
[ 2976.008410][T12429] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2976.029987][T12429] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2976.092078][T12429] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2976.101298][T12429] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2976.109544][T12429] usb 6-1: Product: syz
[ 2976.113812][T12429] usb 6-1: Manufacturer: syz
[ 2976.118630][T12429] usb 6-1: SerialNumber: syz
[ 2977.914903][T13779] IPv6: Can't replace route, no match found
[ 2979.037048][T10594] usb 2-1: 0:2 : does not exist
[ 2979.058509][T10594] usb 2-1: USB disconnect, device number 4
[ 2979.145273][T12404] usb 1-1: 0:2 : does not exist
[ 2979.179768][T13791] IPv6: Can't replace route, no match found
[ 2979.375574][T12404] usb 1-1: USB disconnect, device number 61
[ 2980.655383][T12429] usb 6-1: 0:2 : does not exist
[ 2980.688103][T12429] usb 6-1: USB disconnect, device number 57
[ 2980.776559][T13806] IPv6: Can't replace route, no match found
[ 2980.825998][T13092] udevd[13092]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2980.863525][T13808] IPv6: Can't replace route, no match found
[ 2982.374958][T10594] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[ 2982.638515][T10594] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2982.692334][T10594] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2982.840874][T10594] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2982.891351][T10594] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2982.922161][T10594] usb 2-1: Product: syz
[ 2982.942389][T10594] usb 2-1: Manufacturer: syz
[ 2982.954227][T10594] usb 2-1: SerialNumber: syz
[ 2983.529655][T13838] IPv6: Can't replace route, no match found
[ 2983.548814][T13839] IPv6: Can't replace route, no match found
[ 2986.595027][T28310] usb 6-1: new full-speed USB device number 58 using dummy_hcd
[ 2986.604767][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9225'.
[ 2986.746912][T28310] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2986.764463][T28310] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2986.829960][T28310] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2986.844290][T28310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2986.885015][T12429] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[ 2986.943557][T28310] usb 6-1: Product: syz
[ 2986.947902][T28310] usb 6-1: Manufacturer: syz
[ 2986.952504][T28310] usb 6-1: SerialNumber: syz
[ 2986.960599][T13875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2986.982740][T13875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2987.071671][T12429] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2987.109760][T12429] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2987.145059][T12429] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2987.158399][T12429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2987.170345][T12429] usb 1-1: Product: syz
[ 2987.178629][T12429] usb 1-1: Manufacturer: syz
[ 2987.193554][T12429] usb 1-1: SerialNumber: syz
[ 2988.646447][T10594] usb 2-1: 0:2 : does not exist
[ 2988.910095][T15070] usb 2-1: USB disconnect, device number 5
[ 2989.677247][T28310] usb 6-1: 0:2 : does not exist
[ 2989.713187][T28310] usb 6-1: USB disconnect, device number 58
[ 2989.759631][T13093] udevd[13093]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2990.774150][T13904] IPv6: Can't replace route, no match found
[ 2991.233151][T13909] IPv6: Can't replace route, no match found
[ 2992.006038][T12429] usb 1-1: 0:2 : does not exist
[ 2992.209422][T12429] usb 1-1: USB disconnect, device number 62
[ 2993.280072][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2993.302044][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2993.336652][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2993.349361][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2993.583377][T13941] IPv6: Can't replace route, no match found
[ 2993.690864][T13949] hsr0: entered promiscuous mode
[ 2993.697276][T13949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9239'.
[ 2993.715115][T13949] hsr_slave_0: left promiscuous mode
[ 2993.787001][T13949] hsr_slave_1: left promiscuous mode
[ 2993.853520][T13949] hsr0 (unregistering): left promiscuous mode
[ 2995.065341][T13961] EXT4-fs: Conflicting test_dummy_encryption options
[ 2996.530834][T13970] IPv6: Can't replace route, no match found
[ 2997.925924][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9242'.
[ 2998.497590][T13996] IPv6: Can't replace route, no match found
[ 3001.062189][T14027] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[ 3001.068750][T14027] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 3001.116843][T14027] vhci_hcd vhci_hcd.0: Device attached
[ 3001.183853][T14030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9255'.
[ 3001.572051][T14028] vhci_hcd: connection closed
[ 3001.587994][ T1319] vhci_hcd: stop threads
[ 3001.598435][ T1319] vhci_hcd: release socket
[ 3001.615791][ T1319] vhci_hcd: disconnect device
[ 3002.603275][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3002.612965][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3002.631665][T14047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3002.652031][T14047] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3003.621247][T14061] IPv6: Can't replace route, no match found
[ 3004.142171][T14065] netlink: 'syz.1.9262': attribute type 4 has an invalid length.
[ 3004.152205][T14065] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9262'.
[ 3004.344390][T14065] delete_channel: no stack
[ 3005.076373][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3006.387105][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3007.555232][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3008.138446][   T30] kauditd_printk_skb: 19 callbacks suppressed
[ 3008.138464][   T30] audit: type=1800 audit(1763792674.237:3525): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.9272" name="file0" dev="fuse" ino=0 res=0 errno=0
[ 3008.655920][ T1319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3009.775587][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3010.486080][T14144] IPv6: Can't replace route, no match found
[ 3010.879617][T14140] ip6t_REJECT: ECHOREPLY is not supported
[ 3010.905092][ T4473] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3012.085058][T22213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3012.544984][T28310] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 3012.679334][T14164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 3012.785872][T28310] usb 2-1: Using ep0 maxpacket: 32
[ 3012.817011][T28310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11
[ 3012.845992][T28310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[ 3012.877429][T28310] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 3012.892112][T28310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 3012.917047][T28310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 3012.950884][T28310] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68
[ 3012.963309][T28310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3012.974083][T28310] usb 2-1: Product: syz
[ 3012.979212][T28310] usb 2-1: Manufacturer: syz
[ 3012.985818][T28310] usb 2-1: SerialNumber: syz
[ 3012.992692][T28310] usb 2-1: config 0 descriptor??
[ 3013.036774][T14167] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 3013.068823][T28310] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input174
[ 3013.265213][T12214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3013.327241][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.378597][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.446290][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.457407][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.651658][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.711896][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.836815][T14169] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3013.972611][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3014.060006][ T5184] xpad 2-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90
[ 3015.063179][T28310] usb 2-1: USB disconnect, device number 6
[ 3015.337224][T14207] openvswitch: netlink: Message has 1 unknown bytes.
[ 3015.370150][T14207] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3015.382578][T14206] IPv6: Can't replace route, no match found
[ 3016.821442][T14223] IPv6: Can't replace route, no match found
[ 3017.323755][T14234] netlink: 'syz.6.9299': attribute type 4 has an invalid length.
[ 3017.331778][T14234] netlink: 17 bytes leftover after parsing attributes in process `syz.6.9299'.
[ 3017.406190][T14234] delete_channel: no stack
[ 3020.037645][T14252] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9303'.
[ 3020.349389][T14257] IPv6: Can't replace route, no match found
[ 3020.426008][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 3020.442537][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 3020.667332][   T30] audit: type=1326 audit(1763792686.767:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3020.689478][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3020.751435][T14268] netlink: 'syz.6.9307': attribute type 4 has an invalid length.
[ 3020.763664][   T30] audit: type=1326 audit(1763792686.807:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3020.819530][T14268] netlink: 17 bytes leftover after parsing attributes in process `syz.6.9307'.
[ 3020.996595][   T30] audit: type=1326 audit(1763792686.807:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.082140][   T30] audit: type=1326 audit(1763792686.807:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.216942][   T30] audit: type=1326 audit(1763792686.807:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.291259][   T30] audit: type=1326 audit(1763792686.807:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.331711][   T30] audit: type=1326 audit(1763792686.807:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.355578][   T30] audit: type=1326 audit(1763792686.807:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.377642][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3021.445708][   T30] audit: type=1326 audit(1763792686.807:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.581410][   T30] audit: type=1326 audit(1763792686.807:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14263 comm="syz.0.9306" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3021.625539][T14268] delete_channel: no stack
[ 3024.552641][T14308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9313'.
[ 3025.434988][T10594] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 3025.665146][T10594] usb 1-1: Using ep0 maxpacket: 8
[ 3025.812508][T10594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3025.885242][T10594] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3025.917021][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9319'.
[ 3025.939719][T14331] ip6gretap0: left allmulticast mode
[ 3025.964452][T14331] bridge0: port 3(ip6gretap0) entered disabled state
[ 3026.005956][T14331] bridge_slave_1: left allmulticast mode
[ 3026.023750][T14331] bridge_slave_1: left promiscuous mode
[ 3026.038745][T14331] bridge0: port 2(bridge_slave_1) entered disabled state
[ 3026.080257][T14331] 
: left allmulticast mode
[ 3026.128269][T14331] 
: left promiscuous mode
[ 3026.139936][T14331] bridge0: port 1(
) entered disabled state
[ 3026.215216][T10594] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 3026.291545][T10594] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3026.324898][T10594] usb 1-1: Product: syz
[ 3026.339304][T10594] usb 1-1: Manufacturer: syz
[ 3026.365626][T10594] usb 1-1: SerialNumber: syz
[ 3026.378907][T10594] usb 1-1: config 0 descriptor??
[ 3026.439609][T14336] netlink: 'syz.4.9317': attribute type 4 has an invalid length.
[ 3026.447881][T14336] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9317'.
[ 3026.758836][T14313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3026.800420][T14337] delete_channel: no stack
[ 3026.909436][T14313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3027.502348][T14345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3027.514328][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9320'.
[ 3027.548577][T14345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3028.453686][T28310] usb 1-1: USB disconnect, device number 63
[ 3033.231958][T14416] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9332'.
[ 3033.595651][T14419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9330'.
[ 3034.080654][T14433] delete_channel: no stack
[ 3034.132667][T14433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3034.151774][T14433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3034.171324][T14433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3034.184740][T14433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3034.206370][T14433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3034.345025][T28310] usb 1-1: new full-speed USB device number 64 using dummy_hcd
[ 3034.555514][T15070] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 3034.567287][T28310] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3034.701376][T28310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3034.718212][T15070] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 3034.754169][T28310] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3034.782279][T28310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3034.796937][T15070] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 3034.815419][T28310] usb 1-1: Product: syz
[ 3034.825137][T28310] usb 1-1: Manufacturer: syz
[ 3034.838137][T28310] usb 1-1: SerialNumber: syz
[ 3034.843825][T15070] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3034.909297][T15070] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3034.950192][T14436] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 3035.215635][T14433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3035.248616][T14433] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3037.213467][T28310] usb 1-1: 0:2 : does not exist
[ 3037.230300][T28310] usb 1-1: USB disconnect, device number 64
[ 3037.253632][T14288] udevd[14288]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3037.363664][T15070] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3038.682147][T14476] tipc: Resetting bearer <eth:gre0>
[ 3038.778215][T15070] usb 2-1: USB disconnect, device number 7
[ 3039.588484][T14478] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[ 3039.595034][T14478] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 3039.604600][T14478] vhci_hcd vhci_hcd.0: Device attached
[ 3039.629002][T14478] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9342'.
[ 3039.865595][T15070] usb 42-1: SetAddress Request (6) to port 0
[ 3039.871806][T15070] usb 42-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 3039.988597][T14484] vhci_hcd: connection reset by peer
[ 3040.000111][ T1319] vhci_hcd: stop threads
[ 3040.004389][ T1319] vhci_hcd: release socket
[ 3040.009358][ T1319] vhci_hcd: disconnect device
[ 3040.198283][T14497] openvswitch: netlink: Message has 1 unknown bytes.
[ 3040.210989][T14497] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 3041.727127][T14509] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[ 3042.718481][T14517] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3042.744212][T14517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9354'.
[ 3042.873769][T14517] bond9: option resend_igmp: invalid value (511)
[ 3042.881262][T14517] bond9: option resend_igmp: allowed values 0 - 255
[ 3042.892483][T14517] bond9 (unregistering): Released all slaves
[ 3043.234939][T28310] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 3043.384924][T28310] usb 2-1: Using ep0 maxpacket: 32
[ 3043.396545][T28310] usb 2-1: config 0 has an invalid interface number: 169 but max is 0
[ 3043.406349][T28310] usb 2-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config
[ 3043.426523][T28310] usb 2-1: config 0 has no interface number 0
[ 3043.441250][T28310] usb 2-1: config 0 interface 169 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 3043.474657][T28310] usb 2-1: config 0 interface 169 has no altsetting 0
[ 3043.491353][T28310] usb 2-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=33.49
[ 3043.505954][T28310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3043.526472][T28310] usb 2-1: Product: syz
[ 3043.530645][T28310] usb 2-1: Manufacturer: syz
[ 3043.576687][T28310] usb 2-1: SerialNumber: syz
[ 3043.606930][T28310] usb 2-1: config 0 descriptor??
[ 3043.628604][T28310] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3043.668434][T28310] snd-usb-audio 2-1:0.169: probe with driver snd-usb-audio failed with error -2
[ 3043.739847][T14288] udevd[14288]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.169/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3043.859274][T14522] netlink: 'syz.1.9355': attribute type 21 has an invalid length.
[ 3043.867448][T14522] netlink: 156 bytes leftover after parsing attributes in process `syz.1.9355'.
[ 3043.876743][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9355'.
[ 3044.180793][T28310] usb 2-1: USB disconnect, device number 8
[ 3044.966209][T15070] usb 42-1: device descriptor read/8, error -110
[ 3045.455670][T15070] usb usb42-port1: attempt power cycle
[ 3046.026787][T15070] usb usb42-port1: unable to enumerate USB device
[ 3046.565594][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3046.571865][T14541] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 3046.857444][T28310] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[ 3047.045366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3047.069423][T28310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3047.096183][T28310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3047.153873][T28310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3047.169767][T28310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3047.202854][T28310] usb 2-1: Product: syz
[ 3047.222899][T28310] usb 2-1: Manufacturer: syz
[ 3047.233760][T28310] usb 2-1: SerialNumber: syz
[ 3047.742407][T28310] usb 2-1: 0:2 : does not exist
[ 3047.829895][T28310] usb 2-1: USB disconnect, device number 9
[ 3047.960090][T14288] udevd[14288]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3048.983405][T14590] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[ 3048.989955][T14590] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[ 3049.003888][T14590] vhci_hcd vhci_hcd.0: Device attached
[ 3049.038967][T14590] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9364'.
[ 3049.266146][T15070] usb 36-1: SetAddress Request (6) to port 0
[ 3049.272413][T15070] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd
[ 3049.740705][T14591] vhci_hcd: connection reset by peer
[ 3049.755923][T22213] vhci_hcd: stop threads
[ 3049.775450][T22213] vhci_hcd: release socket
[ 3049.785145][T22213] vhci_hcd: disconnect device
[ 3049.815210][T14596] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 3050.216824][T14608] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9368'.
[ 3050.238169][T14608] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9368'.
[ 3052.918088][T14638] netlink: 'syz.1.9375': attribute type 3 has an invalid length.
[ 3053.095510][T14640] syz.0.9374 (14640): drop_caches: 2
[ 3053.101665][T14640] syz.0.9374 (14640): drop_caches: 2
[ 3054.405598][T15070] usb 36-1: device descriptor read/8, error -110
[ 3054.595676][   T30] kauditd_printk_skb: 44 callbacks suppressed
[ 3054.595690][   T30] audit: type=1326 audit(1763792720.687:3580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3054.644332][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3054.663348][   T30] audit: type=1326 audit(1763792720.697:3581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3054.720050][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3054.856308][   T30] audit: type=1326 audit(1763792720.727:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3054.901556][   T30] audit: type=1326 audit(1763792720.727:3583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3054.901590][T15070] usb usb36-port1: attempt power cycle
[ 3054.978733][   T30] audit: type=1326 audit(1763792720.727:3584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.000805][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3055.069216][   T30] audit: type=1326 audit(1763792720.727:3585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.142079][   T30] audit: type=1326 audit(1763792720.727:3586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.164235][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3055.212956][   T30] audit: type=1326 audit(1763792720.727:3587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.235259][   T30] audit: type=1326 audit(1763792720.727:3588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.261092][   T30] audit: type=1326 audit(1763792720.727:3589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14649 comm="syz.1.9381" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe6539 code=0x7ffc0000
[ 3055.283159][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3055.696677][T15070] usb usb36-port1: unable to enumerate USB device
[ 3056.156378][T14675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9383'.
[ 3056.647382][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3056.995760][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.005219][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.013963][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.023952][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.033975][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.054563][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.069533][T14657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3057.958231][T14694] IPv6: Can't replace route, no match found
[ 3058.582135][T14686] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3059.280405][T14708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3059.308071][T14708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3059.472168][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3059.788556][T14710] netlink: 'syz.5.9390': attribute type 3 has an invalid length.
[ 3060.940682][T14732] netlink: 'syz.1.9393': attribute type 1 has an invalid length.
[ 3061.167714][T14739] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.9395' sets config #1
[ 3063.001507][T14762] netlink: 'syz.5.9397': attribute type 4 has an invalid length.
[ 3063.039789][T14762] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9397'.
[ 3063.108900][T14763] syz.6.9407 (14763): drop_caches: 2
[ 3063.115118][T14763] syz.6.9407 (14763): drop_caches: 2
[ 3063.140443][T14759] delete_channel: no stack
[ 3066.433077][T14797] netlink: 'syz.0.9405': attribute type 10 has an invalid length.
[ 3066.465904][T14797] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 3067.948133][T14811] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.9410' sets config #1
[ 3068.392951][T14814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9409'.
[ 3068.465842][T14814] bond2: option resend_igmp: invalid value (511)
[ 3068.472324][T14814] bond2: option resend_igmp: allowed values 0 - 255
[ 3069.618278][T14814] bond2 (unregistering): Released all slaves
[ 3070.555616][T14812] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3070.874939][T14849] delete_channel: no stack
[ 3071.345000][T28310] usb 6-1: new high-speed USB device number 59 using dummy_hcd
[ 3072.032963][T28310] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 3072.139316][T28310] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 3072.144949][T28310] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 3072.144976][T28310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 3072.258227][T14849] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 3072.505096][T28310] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 3072.565574][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3072.708775][T14846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3072.709004][T14846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3073.763800][T15070] usb 6-1: USB disconnect, device number 59
[ 3074.332836][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9418'.
[ 3074.399756][T14873] netlink: 320 bytes leftover after parsing attributes in process `syz.5.9418'.
[ 3074.620656][T28310] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 3075.176587][T28310] usb 1-1: config 160 has an invalid interface number: 200 but max is 0
[ 3075.185181][T28310] usb 1-1: config 160 has no interface number 0
[ 3075.191506][T28310] usb 1-1: config 160 interface 200 has no altsetting 0
[ 3075.229207][T28310] usb 1-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 3075.242690][T28310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3075.294191][T28310] usb 1-1: Product: syz
[ 3075.300022][T28310] usb 1-1: Manufacturer: syz
[ 3075.304726][T28310] usb 1-1: SerialNumber: syz
[ 3075.399474][T14884] netlink: 'syz.5.9420': attribute type 10 has an invalid length.
[ 3076.695935][T14899] IPv6: Can't replace route, no match found
[ 3076.750427][T14897] input: syz0 as /devices/virtual/input/input175
[ 3077.133280][T28310] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 3077.142019][T28310] usb 1-1: MIDIStreaming interface descriptor not found
[ 3077.209430][T28310] usb 1-1: USB disconnect, device number 65
[ 3077.440704][T14915] trusted_key: encrypted_key: keylen parameter is missing
[ 3078.533629][T14930] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9427'.
[ 3078.612006][T14930] bond12: option resend_igmp: invalid value (511)
[ 3078.618836][T14930] bond12: option resend_igmp: allowed values 0 - 255
[ 3078.657198][T14930] bond12 (unregistering): Released all slaves
[ 3079.185794][T14923] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3079.303343][T14929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3079.327908][T14929] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3080.805422][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3080.894475][T14955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9433'.
[ 3081.519427][T14962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9436'.
[ 3081.860716][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 3081.868785][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 3084.006382][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9445'.
[ 3084.922025][T15008] bond0: (slave netdevsim0): Releasing backup interface
[ 3087.385607][T15027] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9449'.
[ 3087.449425][T15027] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9449'.
[ 3087.460225][T15027] netlink: 'syz.1.9449': attribute type 3 has an invalid length.
[ 3087.470969][T15027] netlink: 11 bytes leftover after parsing attributes in process `syz.1.9449'.
[ 3087.578473][T15027] 
: renamed from bridge_slave_0
[ 3087.719410][T15035] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9451'.
[ 3088.537983][T15040] IPv6: Can't replace route, no match found
[ 3091.000473][T15066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3091.023477][T15066] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3091.186111][T15070] usb 6-1: new high-speed USB device number 60 using dummy_hcd
[ 3091.366166][T15070] usb 6-1: Using ep0 maxpacket: 8
[ 3091.381860][T15070] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 3091.393857][T15070] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 3091.418780][T15070] usb 6-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01
[ 3091.430406][T15070] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3091.458761][T15070] usb 6-1: Product: syz
[ 3091.467730][T15070] usb 6-1: Manufacturer: syz
[ 3091.482637][T15070] usb 6-1: SerialNumber: syz
[ 3091.501137][T15070] usb 6-1: config 0 descriptor??
[ 3092.055051][T15071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3092.077403][T15071] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3093.388444][T15070] usb 6-1: USB disconnect, device number 60
[ 3094.129307][T15095] syz.5.9459 (15095): drop_caches: 2
[ 3094.191386][T15095] syz.5.9459 (15095): drop_caches: 2
[ 3095.288976][   T30] kauditd_printk_skb: 28 callbacks suppressed
[ 3095.288995][   T30] audit: type=1326 audit(1763792761.387:3618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.401267][   T30] audit: type=1326 audit(1763792761.387:3619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.485370][   T30] audit: type=1326 audit(1763792761.417:3620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.571624][   T30] audit: type=1326 audit(1763792761.417:3621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.754666][   T30] audit: type=1326 audit(1763792761.417:3622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.848000][   T30] audit: type=1326 audit(1763792761.417:3623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.969691][   T30] audit: type=1326 audit(1763792761.417:3624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3095.991756][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3096.126064][   T30] audit: type=1326 audit(1763792761.417:3625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3096.247413][   T30] audit: type=1326 audit(1763792761.417:3626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3096.435052][   T30] audit: type=1326 audit(1763792761.417:3627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15100 comm="syz.0.9462" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f43539 code=0x7ffc0000
[ 3096.457164][    C0] vkms_vblank_simulate: vblank timer overrun
[ 3097.049557][T15120] input: syz0 as /devices/virtual/input/input176
[ 3097.867973][T15132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9467'.
[ 3098.216550][T15132] bond0: option resend_igmp: invalid value (511)
[ 3098.224114][T15132] bond0: option resend_igmp: allowed values 0 - 255
[ 3098.459712][T15132] bond0 (unregistering): Released all slaves
[ 3098.486420][T15133] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3098.497520][T15144] fuse: Bad value for 'fd'
[ 3098.567243][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9481'.
[ 3098.905067][T28310] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 3099.505067][T28310] usb 2-1: config 160 has an invalid interface number: 200 but max is 0
[ 3099.515268][T28310] usb 2-1: config 160 has no interface number 0
[ 3099.521555][T28310] usb 2-1: config 160 interface 200 has no altsetting 0
[ 3099.565321][T28310] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[ 3099.574657][T28310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3099.583065][T28310] usb 2-1: Product: syz
[ 3099.587432][T28310] usb 2-1: Manufacturer: syz
[ 3099.593765][T28310] usb 2-1: SerialNumber: syz
[ 3100.048160][T15165] netlink: 'syz.6.9471': attribute type 10 has an invalid length.
[ 3100.565013][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3101.330009][T28310] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 3101.360587][T28310] usb 2-1: MIDIStreaming interface descriptor not found
[ 3101.479753][T28310] usb 2-1: USB disconnect, device number 10
[ 3101.587739][T15177] udevd[15177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3101.685637][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3101.717126][T15184] netlink: 'syz.0.9476': attribute type 4 has an invalid length.
[ 3101.727914][T15184] netlink: 17 bytes leftover after parsing attributes in process `syz.0.9476'.
[ 3101.749395][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3101.849045][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3102.007841][T15189] delete_channel: no stack
[ 3102.040049][T15195] syz.1.9477 (15195): drop_caches: 2
[ 3102.061864][T15195] syz.1.9477 (15195): drop_caches: 2
[ 3103.405272][T15211] IPv6: Can't replace route, no match found
[ 3104.532351][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3104.754422][T15220] net_ratelimit: 49 callbacks suppressed
[ 3104.754450][T15220] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 3105.150475][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9484'.
[ 3105.168910][T15225] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3105.327891][T15228] bond9: option resend_igmp: invalid value (511)
[ 3105.335314][T15228] bond9: option resend_igmp: allowed values 0 - 255
[ 3105.370665][T15228] bond9 (unregistering): Released all slaves
[ 3106.530190][T15243] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9488'.
[ 3106.588594][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 3106.588609][   T30] audit: type=1800 audit(1763792772.687:3645): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.9488" name="bus" dev="tmpfs" ino=9658 res=0 errno=0
[ 3107.285373][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3108.029785][T15255] IPv6: Can't replace route, no match found
[ 3109.081651][T15268] IPv6: Can't replace route, no match found
[ 3112.472818][T15303] netlink: 'syz.1.9510': attribute type 10 has an invalid length.
[ 3112.486822][T15303] netlink: 'syz.1.9510': attribute type 10 has an invalid length.
[ 3112.494759][T15303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9510'.
[ 3112.517971][   T30] audit: type=1326 audit(1763792778.587:3646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.645425][   T30] audit: type=1326 audit(1763792778.597:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.671701][   T30] audit: type=1326 audit(1763792778.597:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.696009][   T30] audit: type=1326 audit(1763792778.597:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.725636][   T30] audit: type=1326 audit(1763792778.607:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.808487][   T30] audit: type=1326 audit(1763792778.607:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.885754][   T30] audit: type=1326 audit(1763792778.607:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3112.935542][   T30] audit: type=1326 audit(1763792778.607:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3113.000835][   T30] audit: type=1326 audit(1763792778.607:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3113.044289][   T30] audit: type=1326 audit(1763792778.607:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15298 comm="syz.5.9499" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3114.019576][T15332] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9503'.
[ 3114.073042][T15327] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9502'.
[ 3114.101077][T15327] netlink: 320 bytes leftover after parsing attributes in process `syz.6.9502'.
[ 3115.364984][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9506'.
[ 3115.392324][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9506'.
[ 3115.406602][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9506'.
[ 3116.685218][T12429] usb 1-1: new full-speed USB device number 66 using dummy_hcd
[ 3116.852318][T12429] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3116.874685][T12429] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3116.918269][T12429] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3117.099287][T12429] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3117.120850][T12429] usb 1-1: Product: syz
[ 3117.158544][T12429] usb 1-1: Manufacturer: syz
[ 3117.227190][T12429] usb 1-1: SerialNumber: syz
[ 3119.163523][T15385] 8021q: adding VLAN 0 to HW filter on device bond11
[ 3119.770360][T12429] usb 1-1: 0:2 : does not exist
[ 3119.831060][T12429] usb 1-1: USB disconnect, device number 66
[ 3119.927980][T15364] udevd[15364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3120.211999][T15403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9520'.
[ 3120.253482][T15403] netlink: 320 bytes leftover after parsing attributes in process `syz.0.9520'.
[ 3120.668099][T15405] IPv6: Can't replace route, no match found
[ 3121.082228][T15417] IPv6: Can't replace route, no match found
[ 3121.166603][T15419] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9523'.
[ 3122.833755][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9527'.
[ 3122.858772][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9527'.
[ 3122.869790][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9527'.
[ 3123.162719][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9528'.
[ 3125.208846][T15477] netlink: 132 bytes leftover after parsing attributes in process `syz.6.9533'.
[ 3125.221999][   T30] kauditd_printk_skb: 15 callbacks suppressed
[ 3125.222014][   T30] audit: type=1800 audit(1763792791.317:3671): pid=15477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.9533" name="bus" dev="tmpfs" ino=8483 res=0 errno=0
[ 3125.255336][T15476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.265276][T15476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.335700][T15476] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.362752][T15479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.418169][T15479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.431091][T15478] tipc: Resetting bearer <eth:gre0>
[ 3125.438128][T15479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.485089][T15479] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.493906][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.502469][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 3125.528856][T15478] 
: (slave bond_slave_0): Releasing backup interface
[ 3125.741108][T15478] 
: (slave bond_slave_1): Releasing backup interface
[ 3126.010969][T15478] team0: Port device team_slave_1 removed
[ 3126.072454][T15478] 
: (slave netdevsim0): Releasing backup interface
[ 3127.042138][T15478] bond1: (slave bridge1): Releasing active interface
[ 3127.069288][T15478] bond2: (slave macvlan2): Releasing active interface
[ 3127.090629][T15478] bond3: (slave bond4): Releasing backup interface
[ 3127.109830][T15478] bond6: (slave bridge6): Removing an active aggregator
[ 3127.123831][T15478] bond6: (slave bridge6): Releasing backup interface
[ 3127.300613][T15478] bond7: (slave bond8): Releasing backup interface
[ 3127.307989][T15478] bond7: (slave bond8): the permanent HWaddr of slave - 2e:9e:37:71:fa:07 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 3127.325879][T15478] bond8: left promiscuous mode
[ 3127.330892][T15478] bond7: (slave gretap1): making interface the new active one
[ 3127.338981][T15478] gretap1: entered promiscuous mode
[ 3127.349070][T15478] bond7: (slave gretap1): Releasing backup interface
[ 3127.356294][T15478] gretap1: left promiscuous mode
[ 3127.363733][T15478] bond0: (slave geneve3): Releasing active interface
[ 3127.371162][T15478] geneve3: left allmulticast mode
[ 3127.620333][   T30] audit: type=1326 audit(1763792793.717:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3127.718538][   T30] audit: type=1326 audit(1763792793.737:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3127.770214][   T30] audit: type=1326 audit(1763792793.747:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3127.847480][   T30] audit: type=1326 audit(1763792793.747:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3127.898454][   T30] audit: type=1326 audit(1763792793.747:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3127.965823][   T30] audit: type=1326 audit(1763792793.747:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3128.024966][   T30] audit: type=1326 audit(1763792793.747:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3128.075466][   T30] audit: type=1326 audit(1763792793.747:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3128.100895][T15499] 8021q: adding VLAN 0 to HW filter on device bond0
[ 3128.107766][   T30] audit: type=1326 audit(1763792793.747:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15487 comm="syz.6.9536" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf709d539 code=0x7ffc0000
[ 3129.445362][T15522] IPv6: Can't replace route, no match found
[ 3130.772525][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9541'.
[ 3130.786374][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9541'.
[ 3130.802961][T15526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9541'.
[ 3130.907092][T15544] IPv6: Can't replace route, no match found
[ 3132.435494][T12429] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[ 3132.986647][T12429] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3132.998339][T12429] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3133.111390][T12429] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3133.120882][T12429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3133.129597][T12429] usb 2-1: Product: syz
[ 3133.133884][T12429] usb 2-1: Manufacturer: syz
[ 3133.139496][T12429] usb 2-1: SerialNumber: syz
[ 3133.592023][T15586] IPVS: stopping backup sync thread 10251 ...
[ 3134.656913][T15601] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check.
[ 3135.299307][T15611] IPv6: Can't replace route, no match found
[ 3137.753701][T12429] usb 2-1: 0:2 : does not exist
[ 3137.823269][T12429] usb 2-1: USB disconnect, device number 11
[ 3137.853267][T15563] udevd[15563]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 3138.062828][T15629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9558'.
[ 3138.076768][T15629] netlink: 320 bytes leftover after parsing attributes in process `syz.4.9558'.
[ 3138.209239][T15634] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 3138.969049][T15632] 8021q: adding VLAN 0 to HW filter on device bond9
[ 3139.712206][T12404] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 3139.875608][T12404] usb 1-1: Using ep0 maxpacket: 32
[ 3139.886123][T12404] usb 1-1: config index 0 descriptor too short (expected 44, got 36)
[ 3139.894531][T12404] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[ 3139.924314][T12404] usb 1-1: config 0 has no interface number 0
[ 3139.941505][T12404] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[ 3139.958397][T12404] usb 1-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0
[ 3139.969521][T12404] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0
[ 3139.980985][T12404] usb 1-1: config 0 interface 126 has no altsetting 0
[ 3139.992508][T12404] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[ 3140.002591][T12404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3140.011671][T12404] usb 1-1: Product: syz
[ 3140.016442][T12404] usb 1-1: Manufacturer: syz
[ 3140.021099][T12404] usb 1-1: SerialNumber: syz
[ 3140.034348][T12404] usb 1-1: config 0 descriptor??
[ 3140.047091][T15644] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 3140.846288][T15649] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9564'.
[ 3141.661227][T15663] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9566'.
[ 3141.680277][T15663] netlink: 7 bytes leftover after parsing attributes in process `syz.6.9566'.
[ 3142.888612][T12404] ir_usb 1-1:0.126: IR Dongle converter detected
[ 3143.020653][T12404] usb 1-1: IRDA class descriptor not found, device not bound
[ 3143.192821][T12404] usb 1-1: USB disconnect, device number 67
[ 3143.308505][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[ 3143.317041][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[ 3143.750145][T15686] IPv6: Can't replace route, no match found
[ 3143.796765][   T30] kauditd_printk_skb: 33 callbacks suppressed
[ 3143.796782][   T30] audit: type=1326 audit(1763792809.897:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3143.878896][   T30] audit: type=1326 audit(1763792809.897:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3143.968718][   T30] audit: type=1326 audit(1763792809.937:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.040732][   T30] audit: type=1326 audit(1763792809.937:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.087144][   T30] audit: type=1326 audit(1763792809.957:3718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.131932][   T30] audit: type=1326 audit(1763792809.957:3719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.216388][   T30] audit: type=1326 audit(1763792809.957:3720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.399000][   T30] audit: type=1326 audit(1763792809.957:3721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.474641][   T30] audit: type=1326 audit(1763792809.967:3722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.523178][   T30] audit: type=1326 audit(1763792809.967:3723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15683 comm="syz.4.9570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd539 code=0x7ffc0000
[ 3144.635521][T12404] usb 6-1: new full-speed USB device number 61 using dummy_hcd
[ 3144.644385][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[ 3144.775491][T12404] usb 6-1: device descriptor read/64, error -32
[ 3145.085541][T12404] usb 6-1: new full-speed USB device number 62 using dummy_hcd
[ 3145.096796][    C1] raw-gadget.1 gadget.5: ignoring, device is not running
[ 3145.285585][T12404] usb 6-1: device descriptor read/64, error -32
[ 3145.465892][T12404] usb usb6-port1: attempt power cycle
[ 3145.805278][T12404] usb 6-1: new full-speed USB device number 63 using dummy_hcd
[ 3146.520016][T15714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9579'.
[ 3146.605627][T15712] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3146.656279][T15714] bond12: option resend_igmp: invalid value (511)
[ 3146.663049][T15714] bond12: option resend_igmp: allowed values 0 - 255
[ 3146.672747][T15714] bond12 (unregistering): Released all slaves
[ 3146.818976][T12404] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3146.867073][T12404] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3147.334113][T12404] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3147.364751][T12404] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3147.394110][T12404] usb 6-1: Product: syz
[ 3147.418773][T12404] usb 6-1: can't set config #1, error -71
[ 3147.446393][T12404] usb 6-1: USB disconnect, device number 63
[ 3147.842694][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9580'.
[ 3147.875887][T15732] netlink: 320 bytes leftover after parsing attributes in process `syz.1.9580'.
[ 3147.925515][T12404] usb 1-1: new full-speed USB device number 68 using dummy_hcd
[ 3148.089882][T12404] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3148.100613][T12404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3148.185762][T12404] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3148.224094][T12404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3148.242832][T12404] usb 1-1: Product: syz
[ 3148.257775][T12404] usb 1-1: Manufacturer: syz
[ 3148.269683][T12404] usb 1-1: SerialNumber: syz
[ 3148.489800][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3149.429698][T15748] IPv6: Can't replace route, no match found
[ 3151.805320][T28310] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[ 3151.988406][T28310] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3151.998734][T28310] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3152.011595][T28310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3152.021026][T28310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3152.029145][T28310] usb 2-1: Product: syz
[ 3152.033699][T28310] usb 2-1: Manufacturer: syz
[ 3152.038404][T28310] usb 2-1: SerialNumber: syz
[ 3152.075427][T15765] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9589'.
[ 3152.143971][T15766] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9589'.
[ 3152.538224][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 3152.550457][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 3152.755609][T12404] usb 1-1: 0:2 : does not exist
[ 3152.876050][T12404] usb 1-1: USB disconnect, device number 68
[ 3154.010288][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 3154.010307][   T30] audit: type=1326 audit(1763792820.097:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.100947][   T30] audit: type=1326 audit(1763792820.097:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.184796][   T30] audit: type=1326 audit(1763792820.097:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.276947][   T30] audit: type=1326 audit(1763792820.097:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.358481][   T30] audit: type=1326 audit(1763792820.097:3745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.525043][   T30] audit: type=1326 audit(1763792820.097:3746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.557520][   T30] audit: type=1326 audit(1763792820.097:3747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.674116][   T30] audit: type=1326 audit(1763792820.097:3748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.746379][   T30] audit: type=1326 audit(1763792820.097:3749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.903813][T28310] usb 2-1: 0:2 : does not exist
[ 3154.925617][   T30] audit: type=1326 audit(1763792820.097:3750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.5.9593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f73539 code=0x7ffc0000
[ 3154.947731][    C1] vkms_vblank_simulate: vblank timer overrun
[ 3155.022801][T28310] usb 2-1: USB disconnect, device number 12
[ 3155.100375][T15783] udevd[15783]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 3155.148020][T15791] fuse: Unknown parameter 'mGN‡8o«ad'
[ 3155.285629][T12404] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[ 3155.456540][T12404] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 3155.471441][T12404] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 3155.533752][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9594'.
[ 3155.647939][T15799] bond10: option resend_igmp: invalid value (511)
[ 3155.654731][T15799] bond10: option resend_igmp: allowed values 0 - 255
[ 3155.678884][T15799] bond10 (unregistering): Released all slaves
[ 3155.696482][T15792] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3155.730046][T12404] usb 1-1: string descriptor 0 read error: -71
[ 3155.736688][T12404] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 3155.750124][T12404] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 3155.769153][T12404] usb 1-1: can't set config #1, error -71
[ 3155.782112][T12404] usb 1-1: USB disconnect, device number 69
[ 3157.106779][T15819] IPv6: Can't replace route, no match found
[ 3157.765452][ T5830] Bluetooth: hci1: command 0x0c1a tx timeout
[ 3158.842798][T15835] fuse: Unknown parameter '0x0000000000000008'
[ 3159.295415][   T31] INFO: task kworker/1:7:12708 blocked for more than 143 seconds.
[ 3159.304180][   T31]       Not tainted syzkaller #0
[ 3159.310035][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 3159.330148][   T31] task:kworker/1:7     state:D stack:25864 pid:12708 tgid:12708 ppid:2      task_flags:0x4208060 flags:0x00080000
[ 3159.359595][   T31] Workqueue: usb_hub_wq hub_event
[ 3159.378599][   T31] Call Trace:
[ 3159.388406][   T31]  <TASK>
[ 3159.396438][   T31]  __schedule+0x1798/0x4cc0
[ 3159.405200][   T31]  ? __pfx___schedule+0x10/0x10
[ 3159.422332][   T31]  ? schedule+0x91/0x360
[ 3159.430945][   T31]  schedule+0x165/0x360
[ 3159.442947][   T31]  schedule_preempt_disabled+0x13/0x30
[ 3159.461200][   T31]  __mutex_lock+0x7e6/0x1350
[ 3159.495241][   T31]  ? __mutex_lock+0x5bb/0x1350
[ 3159.513661][   T31]  ? hub_event+0x21e5/0x4a20
[ 3159.532849][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 3159.557129][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 3159.582369][   T31]  hub_event+0x21e5/0x4a20
[ 3159.620695][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 3159.643440][   T31]  ? do_raw_spin_lock+0x121/0x290
[ 3159.663911][   T31]  ? __pfx_hub_event+0x10/0x10
[ 3159.683845][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3159.706944][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3159.724953][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3159.738644][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 3159.754108][   T31]  process_scheduled_works+0xae1/0x17b0
[ 3159.772167][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 3159.793067][T15850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9604'.
[ 3159.807143][   T31]  worker_thread+0x8a0/0xda0
[ 3159.825402][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 3159.848988][   T31]  ? __kthread_parkme+0x7b/0x200
[ 3159.886737][   T31]  kthread+0x711/0x8a0
[ 3159.893063][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 3159.911264][   T31]  ? __pfx_kthread+0x10/0x10
[ 3159.924900][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3159.942661][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3159.955879][   T31]  ? __pfx_kthread+0x10/0x10
[ 3159.965570][   T31]  ret_from_fork+0x4bc/0x870
[ 3159.976904][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3159.992546][   T31]  ? __switch_to_asm+0x39/0x70
[ 3160.001451][   T31]  ? __switch_to_asm+0x33/0x70
[ 3160.013264][   T31]  ? __pfx_kthread+0x10/0x10
[ 3160.022540][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3160.036501][   T31]  </TASK>
[ 3160.044289][   T31] 
[ 3160.044289][   T31] Showing all locks held in the system:
[ 3160.059070][   T31] 1 lock held by khungtaskd/31:
[ 3160.064120][   T31]  #0: ffffffff8df3d6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 3160.103357][   T31] 2 locks held by getty/5589:
[ 3160.119486][   T31]  #0: ffff88814dc960a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 3160.142123][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 3160.171291][   T31] 5 locks held by kworker/1:5/27113:
[ 3160.186400][   T31]  #0: ffff88823be18f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 3160.209884][   T31]  #1: ffffc9000f047ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 3160.242177][   T31]  #2: ffff888028a90198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 3160.261477][   T31]  #3: ffff888028a94518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 3160.281714][   T31]  #4: ffff88802777d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 3160.303631][   T31] 5 locks held by kworker/1:1/6930:
[ 3160.315992][   T31]  #0: ffff88823be18f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 3160.341455][   T31]  #1: ffffc9000f257ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 3160.369935][   T31]  #2: ffff888028cec198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 3160.387894][   T31]  #3: ffff888028cef518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 3160.413668][   T31]  #4: ffff888027605f68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 3160.443917][   T31] 5 locks held by kworker/1:7/12708:
[ 3160.452761][   T31]  #0: ffff88823be18f48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 3160.493426][   T31]  #1: ffffc9000f8ffba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 3160.524409][   T31]  #2: ffff888028af9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[ 3160.544896][   T31]  #3: ffff888028afc518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20
[ 3160.560835][   T31]  #4: ffff88802777d468 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20
[ 3160.577176][   T31] 1 lock held by syz.1.9614/15826:
[ 3160.582565][   T31]  #0: ffff88807f622ce0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x211/0x4d0
[ 3160.592384][   T31] 1 lock held by syz.1.9614/15829:
[ 3160.598179][   T31]  #0: ffff88807f622ce0 (&mm->mmap_lock){++++}-{4:4}, at: mmap_read_lock_killable+0x1d/0x70
[ 3160.608844][   T31] 2 locks held by syz.1.9614/15835:
[ 3160.614269][   T31] 1 lock held by syz.6.9603/15851:
[ 3160.621543][   T31] 3 locks held by syz.0.9604/15848:
[ 3160.629247][   T31] 5 locks held by syz.0.9604/15849:
[ 3160.634718][   T31]  #0: ffff88803171c2b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x247/0x320
[ 3160.644049][   T31]  #1: ffff8880335fc420 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xb30
[ 3160.663692][   T31]  #2: ffff8880409e7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[ 3160.684286][   T31]  #3: ffff8881412db788 (kn->active#60){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[ 3160.717411][   T31]  #4: ffffffff8dded268 (system_transition_mutex){+.+.}-{4:4}, at: software_resume+0x47/0x410
[ 3160.746148][   T31] 
[ 3160.760910][   T31] =============================================
[ 3160.760910][   T31] 
[ 3160.794897][   T31] NMI backtrace for cpu 0
[ 3160.794923][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 3160.794946][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3160.794959][   T31] Call Trace:
[ 3160.794968][   T31]  <TASK>
[ 3160.794977][   T31]  dump_stack_lvl+0x189/0x250
[ 3160.795012][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 3160.795040][   T31]  ? __pfx__printk+0x10/0x10
[ 3160.795073][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 3160.795212][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 3160.795236][   T31]  ? __pfx__printk+0x10/0x10
[ 3160.795260][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 3160.795294][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 3160.795323][   T31]  watchdog+0xf60/0xfa0
[ 3160.795349][   T31]  ? watchdog+0x1e2/0xfa0
[ 3160.795374][   T31]  kthread+0x711/0x8a0
[ 3160.795403][   T31]  ? __pfx_watchdog+0x10/0x10
[ 3160.795421][   T31]  ? __pfx_kthread+0x10/0x10
[ 3160.795446][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3160.795476][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 3160.795501][   T31]  ? __pfx_kthread+0x10/0x10
[ 3160.795526][   T31]  ret_from_fork+0x4bc/0x870
[ 3160.795548][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 3160.795571][   T31]  ? __switch_to_asm+0x39/0x70
[ 3160.795586][   T31]  ? __switch_to_asm+0x33/0x70
[ 3160.795601][   T31]  ? __pfx_kthread+0x10/0x10
[ 3160.795625][   T31]  ret_from_fork_asm+0x1a/0x30
[ 3160.795655][   T31]  </TASK>
[ 3160.795684][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 3160.940628][    C1] NMI backtrace for cpu 1
[ 3160.940657][    C1] CPU: 1 UID: 0 PID: 6762 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[ 3160.940677][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 3160.940692][    C1] RIP: 0010:__rdgsbase_inactive+0x1f/0x60
[ 3160.940714][    C1] Code: 90 90 90 90 90 90 90 90 90 90 90 83 3d 99 c3 36 04 00 74 16 65 8b 05 70 54 28 07 85 c0 75 0b 65 8b 05 ed 50 28 07 85 c0 75 1b <eb> 1f cc cc cc f3 0f 1e fa 90 bf 02 01 00 c0 e8 ad b6 1e f6 90 c3
[ 3160.940729][    C1] RSP: 0018:ffffc900001979d8 EFLAGS: 00000046
[ 3160.940745][    C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: dffffc0000000000
[ 3160.940757][    C1] RDX: 0000000040000000 RSI: ffffffff8bbf08c0 RDI: ffffffff8bbf0880
[ 3160.940770][    C1] RBP: ffffc90000197bb0 R08: ffffffff8f7cef77 R09: 1ffffffff1ef9dee
[ 3160.940783][    C1] R10: dffffc0000000000 R11: fffffbfff1ef9def R12: ffff88807e3218de
[ 3160.940795][    C1] R13: 0000000000000001 R14: ffff88807e320000 R15: ffff88807e3218e0
[ 3160.940808][    C1] FS:  0000000000000000(0000) GS:ffff888126239000(0063) knlGS:0000000057a9f440
[ 3160.940822][    C1] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 3160.940834][    C1] CR2: 00007f9ab6d54720 CR3: 0000000064a6e000 CR4: 00000000003526f0
[ 3160.940849][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 3160.940859][    C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 3160.940870][    C1] Call Trace:
[ 3161.082538][    C1] vkms_vblank_simulate: vblank timer overrun