last executing test programs:

24m14.511736243s ago: executing program 0 (id=399):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x20000000ec071, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f00000001c0)=""/101, &(0x7f0000000280)=0x65)
r1 = socket(0x200000000000011, 0x2, 0x1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x10, 0x7800, 0x7fffffff, 0x5, {{0x5, 0x4, 0x3, 0x19, 0x14, 0x67, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2}}}})
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000002300)='./file0\x00')
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x0)
fanotify_mark(r6, 0x201, 0x4800003e, r5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
gettid()
ioctl$HCIINQUIRY(r7, 0x400448ca, 0x0)
ioctl$sock_bt_hci(r7, 0x400448c9, 0x0)

24m8.671579553s ago: executing program 0 (id=406):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x5, 0x20040)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r1, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x9}, &(0x7f00000003c0)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={<r2=>0x0, 0xa}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x38, 0x8000, 0xfffffffd, 0x9, r2}, 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468aff4345d1118d555ec6030e011d9d6a2bf9d4cf05443fe8cbc61331e0c4541726d29faeb1accb951bf62ae0e3e92206cc1b1a1317a0d8f8b2bd2084d1d5189b41ae73e9ff1831745dfc1d29fe849b54f876855ef05bb44ea93ed8f2de16e7a145e7c75b6626fbde13058dda346dfd9616057fe973c9029b13d485750ec6bd6b6825db171aa76c860370d41866476c8980fbd3da01dbbea680590186eec08d2bb0f530173fe0b18b79447c4517393fac4122065a0cef65621d27d97bfd3a09be251848dfb253915b4f2ecd89e099d50e973580d4eef3ac050574bee3f3e05a37b63ba"], 0x48}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @etimer_thresh={0x8, 0xc, 0xca1e}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_clone(0xd024100, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=@newtfilter={0x60, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x60}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
r12 = semget(0x1, 0x3, 0x80)
semctl$IPC_RMID(r12, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0xffffffff, 0x0, 0x200f, 0x4, 0x5, 0x0, 0x5, 0x4}})

24m6.756013838s ago: executing program 0 (id=413):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f0000000480)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3, 0x0, 0x4, 0x772, 0x7, 0x0, 0x0, 0x0, 0xa0, 0x200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x300, 0x0, 0x1}, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$unix(r5, 0x0, 0xfffffffffffffd9d, 0x4000004)
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0xffffffffffffffff, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)

24m2.981024093s ago: executing program 0 (id=417):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r3, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010)
sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1a}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000002c0)={0x58, 0xa, 0x1, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e22956841e87000", 0x3032344d})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x12, &(0x7f0000006ffc)=0x10000200, 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0)
getsockname$packet(r7, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=@newqdisc={0x3c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x4000080)
bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r5, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0)
semctl$SETVAL(0x0, 0xff7f0000, 0x10, 0x0)

23m58.899423269s ago: executing program 0 (id=425):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff)
r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x80000, 0x113)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080), 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4002, &(0x7f0000000000)=0x1, 0x7, 0x0)
mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000080)=0x3, 0x8, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
r7 = syz_open_dev$amidi(&(0x7f0000000080), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r7, 0xc0245720, &(0x7f0000000100)={0x1})
syz_usb_disconnect(r0)
writev(r6, &(0x7f0000000600)=[{&(0x7f0000000040)="01f1", 0x2}], 0x1)

23m50.971367894s ago: executing program 0 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000003008000240000000030800014000000012080003"], 0x122}}, 0x0)

23m35.797133499s ago: executing program 32 (id=434):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x2a, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, 0x0, {0x10}, {0xffff, 0xffff}, {0x2, 0xfffa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xd], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x8], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

9m15.960330314s ago: executing program 3 (id=2259):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r1)
sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000)
sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r3 = dup(r0)
r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f00000006c0)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x3, 0x0, 0xfffffffd}, 0x10)
sendmsg$nl_route(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_SPORT={0x6}]}, 0x2c}}, 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x3, @loopback}, 0x1c)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9)
shutdown(r8, 0x2)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x110, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)

9m12.452556737s ago: executing program 3 (id=2263):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc12, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)={0x0, 0x0, 0x5, {0x5, 0x2, "8453be"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

9m8.65580382s ago: executing program 3 (id=2271):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
pipe2$watch_queue(0x0, 0x80)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x2)
userfaultfd(0x80001)
r2 = gettid()
read$FUSE(0xffffffffffffffff, &(0x7f0000000540)={0x2020}, 0x2020)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
userfaultfd(0x801)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a2d00000000140000001100", @ANYBLOB='\t'], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)

9m7.636077415s ago: executing program 3 (id=2279):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x3, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x6, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
io_uring_setup(0xf08, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0)
listen(r5, 0x0)
faccessat2(0xffffffffffffffff, 0x0, 0x1bc, 0x1000)
syz_emit_ethernet(0x57, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$MSR(0x0, 0x400003ff, 0x0)
mmap(&(0x7f000014e000/0x800000)=nil, 0x800000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0xffffd000)
connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)

9m3.731340254s ago: executing program 3 (id=2286):
io_uring_setup(0x174f, &(0x7f0000000300)={0x0, 0xffbefffe, 0x2, 0x1, 0x4800020})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}}}, 0x10)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)=@id={0x1e, 0x3, 0x1, {0x4e23, 0x1}}, 0x10, 0x0}, 0x20000014)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0])
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000fdff8804"])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x7, {0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0)
syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x1fffe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r8, 0x1, &(0x7f0000000000)={0x210a, r7}, 0x0)

8m52.116178233s ago: executing program 3 (id=2311):
io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x30c}, 0x2}}, 0x10, 0x0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x1fffe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)

8m36.492636457s ago: executing program 33 (id=2311):
io_uring_setup(0x479, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x2, 0x2, 0x4800020})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x30c}, 0x2}}, 0x10, 0x0}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x3b, 0x0, &(0x7f0000000240), 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1, 0x1fffe}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4040001)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)

7m26.015634239s ago: executing program 6 (id=2459):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x402040, 0x0)
io_setup(0x1, &(0x7f0000000100)=<r1=>0x0)
r2 = eventfd2(0x7, 0x801)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
r5 = eventfd(0x3)
r6 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r8=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x84, 0x10, &(0x7f0000000000)=r8, 0x8)
io_submit(r1, 0x5, &(0x7f0000000700)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f00000001c0)="d431fe9c3f72f74336816cf8eae666741f4c5b8f954529c8c42ef9a1ea1b31686a1c3aa54c988611f165f470ba1fea9ab5f30ba7ce39d0c86a12925f09faf599718d588b07318e176d78cee0889c85d497caedd6668b19c8da6e5c81bcbe5a2fc348115c92d50a4d1072faf46f8815217995ad09838dbb739175ff5d1bb8d682ec2be7b3ce451087", 0x88, 0x7, 0x0, 0x0, r2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x8, 0xfff, r0, &(0x7f00000003c0)="98a67051dfd99479b828d18e7515f5b09811b59f6f2fd64604cea8414d483d697b666347f96495a2613c23210244d4b557dd740bc3acb50aa005325ba5d22df9efc4dd04e4a7328bf045e64a41275a62e14554d59767e33810291be30326778cfe8572b87c428d2da4aa71c61694c43a615772d9a1f421e02c26db4b4bed7205de511951a90617df56cdfc754d2cf8e24acd97acec67a89eda8a4254637a14007dde2f819f4aa5d1b52f1e0ba086e5681b50028bfd0c17d0916c5269ca82788ec61097d11468483bfc079b5f322c526d56c340da45eb19a97f3f70", 0xdb, 0x0, 0x0, 0x3}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x8, 0xe, r0, &(0x7f0000000300)="f6b19c0e6806d2ed6adaf4dcbe550e4628ead21b65ac327aceb90bb8490c2c0b1053780bd96672a42aae6b35eec593c12e2089132094d2d28f4b43092e85f9ec921b3acecf4ff851ab454dceb24653", 0x4f, 0x5fc, 0x0, 0x5, r3}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0xfffe, r4, &(0x7f0000000540)="3b85d208214649d70814bfbe0adc73270dcccd9ae35cf254b08fe62a98c77a73f00f44a11dac686969687287c670d42b5f99a7999e89b8eaaefe734475b855a807eea8cd59b0a467040d368aeacdeb98eb206ee107aa1a55e018c5f80187787689e80483be17cafc990f60448223b961", 0x70, 0x80, 0x0, 0x2, r5}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000600)="5af34f8f66f1ab93d30b62423661fc8bd63c28a77190a021ce5deb8e28f78f1685004a5c694030e76002a0cf3dc53c895afc892b42b694a62830eb1a80c4f178329582271a79f08ebd22cd9c2669ef240cee956b038a49836174fee6", 0x5c, 0x7, 0x0, 0x4, r8}])
r9 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8, 0x240900)
ioctl$USBDEVFS_SETCONFIGURATION(r9, 0x80045505, &(0x7f0000000180)=0x10)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmmsg$inet(r10, &(0x7f0000001040)=[{{&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x1)
r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r11, 0xc004500a, &(0x7f00000000c0))
ppoll(&(0x7f0000000000)=[{r11, 0x5200}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r11, 0x8010500d, &(0x7f00000001c0))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r12=>r0, 0x7, 0x9, 0x7})
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r12, &(0x7f0000000000)="94", 0x1, 0x1000000, 0x0, 0x10}])

7m23.771740629s ago: executing program 6 (id=2465):
symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00')
r0 = memfd_create(0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
gettid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000009], [0x9, 0xffb], 0x108}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x43}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000a00008000001400070000ec100000001a91feb4"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40014)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x13, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000016000000000085000000ab00000095000000000000002fd4ccc6ceec348140d4dbf0b996899f303391d00351687938a771ce61113af188d60d392191a273a4fbea07aacdc9f3d87ca5ad212ec95b743df7f79226fe4caac3ebcc28d7d73d3366444df2252ced8e358d15a404400b6b5e325d3ecb99837680dccc89af8dcbd5"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

7m21.037476552s ago: executing program 6 (id=2470):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x1, 0x2d, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)

7m13.41690035s ago: executing program 6 (id=2477):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000600)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$unix(0x1, 0x5, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f00000000c0)=r3)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400001b01010101000000000000000002000000050000000000"], 0x44}}, 0x10)
r7 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x80)
ioctl$MEDIA_IOC_DEVICE_INFO(r7, 0xc1007c00, &(0x7f0000000300))
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mknodat$loop(0xffffffffffffffff, 0x0, 0x20, 0x1)
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1})
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

7m12.388386813s ago: executing program 6 (id=2479):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
socket(0x23, 0x2, 0xffff)
select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60})
close(0x3)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x50)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000180)=0x2, 0x4)
signalfd(r0, &(0x7f0000000300)={[0x100000001]}, 0x8)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
statx(r4, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0)
getdents64(r4, &(0x7f0000000240)=""/131, 0x83)

7m10.113654716s ago: executing program 6 (id=2483):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r3=>0x0, 0x4, 0x0, 0x9, 0x10001, 0x40, @loopback, @mcast1, 0x10, 0x700, 0xa7, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ff030000180000000300000017800200", @ANYRES32=r2, @ANYBLOB="00000000e4ffffffffffffff0000000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="4600000002000000000000000b00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
setresgid(0xee00, 0xee01, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r4, r4, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
setregid(0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

6m54.908273327s ago: executing program 34 (id=2483):
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/108, &(0x7f0000000080)=0x18)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r3=>0x0, 0x4, 0x0, 0x9, 0x10001, 0x40, @loopback, @mcast1, 0x10, 0x700, 0xa7, 0x7}})
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ff030000180000000300000017800200", @ANYRES32=r2, @ANYBLOB="00000000e4ffffffffffffff0000000000000000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="4600000002000000000000000b00000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
setresgid(0xee00, 0xee01, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r4, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r4, r4, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
r5 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
setregid(0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

26.518562223s ago: executing program 2 (id=3255):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r0, &(0x7f0000000100)=@other={'unlock', ' ', 'io+mem'}, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
syz_open_pts(r1, 0x101)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x511000, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff9d, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149e82, 0x244)
setresuid(0x0, 0xee01, 0xffffffffffffffff)
write$cgroup_int(r3, &(0x7f0000000000)=0xfe8e, 0x12)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x80010001, 0x1, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x2, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})
r5 = socket(0x8, 0x0, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={0x0, 0x5, 0x6, 0x5, 0x4}, &(0x7f0000000bc0)=0x14)

14.935782191s ago: executing program 5 (id=3271):
r0 = syz_io_uring_setup(0x1108, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1})
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)

13.467699121s ago: executing program 2 (id=3275):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007})
fcntl$addseals(r2, 0x409, 0xb)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
r5 = gettid()
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, <r6=>0x0, <r7=>0x0})
r8 = fsopen(&(0x7f0000000a80)='bfs\x00', 0x1)
ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000ac0)={0x9, 0x6, 0x1, 0x4080, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000b00)=<r10=>0x0)
sendmmsg$unix(r1, &(0x7f0000003480)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000380)="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", 0xfd}, {&(0x7f0000000000)="754dc2d2dcd39d66947cb5cdbf4fca7a0194ef5bd692c3c7481b278c799c5dffee5b954f401f8c6f7597f1631072", 0x2e}, {&(0x7f0000000240)="db57727d75a90bbe2ddef376f1d62e", 0xf}, {&(0x7f0000001140)="ec4724110d4fc1fac05d1cbf7552f419fff514dc137c8fd27c9bc23cfeaa51700309aca53af60720904a15b1b035d13828d3c3e5694e0cfd94b7e6e8fc7b0bb52c74dea67c61fa3947973daa0fd73f53d0fede4f8b1f687f141349f6319984601013473f1780edcb518910c71e279563c3cf23b011be892244e0f73bccc4b2370b469669db8e0172e773eabfc210612f426f63061b5d1c64f339087b680f8cf94fec0ed3fe9d0170a88215fda49cd8f723d4d49332441142a6eb0ac2c1fee847f895d503832c5ca9cf6e6eeab9716c18d86d1169a273376b866c7cd8cf41aabd357d49dd9361964a5eefd68aafa59ddb1560c3f249d5284a257c464ccbcdb1ab664827e09d5523c2ef8b701e2215fd088fbafae4a80d205a76f842196e5f291a66f23c36e8e8b6b1ab94a8c7d1a64a98ca9fee1acb5ea9a0447ded37200b2cab74cce5639256e47b85b037e713f62b4fb6ea92f41838ded7c45ffc556a0576eae25721d3c7b5c4760589cdc9d0dddf4f2185d927406b3bef3204bd83b9e6f7c0ceef2305b3d02dc00756d4d5c65cb2649bc4e38c1dfc55af7b61cf2a72400a4bbb30fa5b018bc03f4f4b80afeade67d56869e1665f580efe8c570ff6cf10992017b8170913a58a497f8c585a2dcd7b08d74035264b37f52421008230916f6c9046fb325826c6fe62f40f9e282dffcebecc189a556025bbaabfb460da2460b77786440a60369d8558b5a9446f3ae97526d7ceaf5a50037d6233e5d19f9470d7cfe56357607825c3ed1ac5c3bc1b034e85f1f8b5037e030f422b47f2a7b52c3b9ad9ea2c5d8f624f0db1b6b92247fb629f28e976f122bf35d7f1778766c041d61797dbfca044da339f34e11f72a75f1e76dff734355057874111c7c6cc73214ee259ce2b131d488ccc3948b56eb98a1e209492d58c53bfcec178ee3ed151d111dfd87a6a5fed17369c47b90bde01b194db499a7f857a6a0ad5529842b1496e3f77e9b0a9f8e64d235f889d1e2d1d65735cf03a6829c79dc8cf2a76c8251ee004864e6ea911b44daadd970cc04441f39fafffaa014eb5422af29bfd8b0638b9f91eaadbeb99f26196642cd5b10577fd57da4b5bd73da548df2c44c06b056e23316ebbadd13286acad4cd1a1d08a110089b03cf6ccfad4b0904a5a979e92fec5c084023bd64965144e6e3201d1a14d530851fa9cdd7533b7ad748af70385eff8a7c9e750ca1347458224636296aa7cbd4a65d191bfa4ad6435a99776fa8dd1d17a85681b2d1c1d060832d5b98f9772beba188247e8f671c7e8d049267fd679e53593ed7af667e3383a5371b0d552c77c21c8c96b6f8397cceefafb430f75e3789b77326b6d463a3fe0105f2061128f28bd61fdc2d7e964223c56634520d8141525424c13401bfaf45dd025ff4c8f81d144a04b31fac60d09fd263e673632844c3f5bdff90502d97681793d1bad75e59f8e62888b424bf1016023bb3ccb8115101d6e936364eae32f925fb99c1b98d3ea2b08aef1d31d6a7cd0cf4d53d262fa7d90d0ab6f4ff3c0d2128559f9bfcb92cc838d9c9d90366e20bf0d2292dbf50104ca8e9505fd1413b910631dce673d6e651f7f9796aa1a17c4a8b50a34012a1a548d2fc929f137c971524f6f5a3316911f566b7d1e1fac202c49347ac76145c4ae599403aea57859c0d599860249c7d2dc845e7d636b1927190f2ccbf81796949d93b8a3c50bb35ecb6b23db1bb5b6d502ef7b6e67a0be9dc280f1d725ecd534de0b172f28d5f531f0ee769e19b3d9633336b9d522a094dbc8b6d6be64d09d6193b11d1bb690e8de44a645df494538e3192789f55e7f806ce44bd31180cdf6e424167712318428981461e9c0da6ae8e6896c0da9fc8d2c88abfebcd681c13978d8717a765802886b145968db0e981355992c907aadbd0435eac5ae82e4fff7858beb2e68883682970485ece2d39852f259df16ea6c43a25cf2e5542489d4d560a0d4db2c69c930c6c5117a57dbbf122aa404c9269523c6e759bbade60ded31dc51a459a6536784c16e9b7b354b69ae98cdff5430e024d93007355f91898739bf79a56cae4777b25fa93e738e61a29353de036549626ab9189375039ad6a886884f8758969c84bec5a6f556ab67bd5e93eef78d5e181f47bc1ac0389d1eef2dbf99c62333cb8983cc161c278694b6971a825b7b898a3928b4cd3ea188eebf29b17f905af463a5babf4cf4abf373925d1fa286143aea1be84bd56ac52fe1b37ffe0ccbb921e9188721e57c24bb2211430bbd79bcac711f1091683b98cf12401d6095f50c8a7faf977ab76402c92f5ae59714ed74b9aad32884f8274129ae55ae6310c8737a4f5726d2ef529ef13f21a7bf8ca983cc008733ad97945ece293db990bb74b0397589e399fadf14a6a6d97ffe60df40f73789d5a5807cbe0e11416ab3635b94592ef43792406a532df8c7f69fdef83d0359628f77075f48a7908bbde7e10ecc8e3b9a342a6be3e45eceec39a6dfbb0576b648a4eb0eda6f1e0cac820ced83fa3c0490790891b4473ae7e5c10943f743869fe4b19cdc43e7209d2a4a35ae3aff40943d98f41ff01abd3ea5942ba0fafec29521437c403eccd0df48c63b2ab9b53d10df4dd93a4c09dee3bb16b234c6a0dbc17ef450d7bc3a888cc072d6bcdb94723d59fd5437ad1ae2144b2436871eea6a09001c7cc68a768297253e0aae8cffa53dd36b3ce5e1e81b94973c37d01e7170077bdfd2d1ab2820b3799a8031071fdbcf88f24806ff6f6d663d9352bd4bef5df77abece5ea861f9a69e5e0aea8e47c82eba21da2a6d5f92a76434c3927a46019cd0512a78958fdc02ce289773ba25a7cc8928548882b62367a2b562ebab3462b101828de518caf24bffc98b4a386258dd3a0913868a10bb87bb444f0b41b4da60ddc1803df046d1c220a53bafb0a68bfe52445bda4fd248c3317e2938138462ab4e562c69228bf165c52de4b3f9919a4653e6e97297e9338e3edcb532b818cd5c579b689a72e927ce107ab07958fa6c65444a0b6cff42ce3e23daf43237641eac660dca93d93609a23efca3c6e2134e0fc4c06870717ee915f445e090c2c6eac1261e41a7aa10c9cf13954802893f5b888e9dc54ef5674a31f68457f9edb391fae01a5a839fce82ad839d2848c9d66f0c8ef47533617191548b3572f85e47f19c563e19026b960de755c7448b06f49559c3a2407c1786cefeaa8db540f787252e0037c0e8e750df61203271d79ce4aaeb959a7c6dfabe70cbcafe296a8b3099e1b3df8a8f449922fcf26ea8aaa09ae2cf977001eb901e3e98b9bf8433ecb3ffed8dc94bba23f762d380185f3705a2c0fcdf78c10f4d8059de9f6c0c9fb86f47e3ea3ff5c4e1b5f5e0104ac9382cf51c5ed65f2d1de1add00d901abea8bddf9a5116e1264e541fe0f98958882f3178f95c445a2dbbae9675af36699d9ec4a4a96f534100a73d425e32db2f6f9a45ffd6c90f00588db189f384e5c5ca0fa36500d97dde7481897df30ba4cd40328d60f1eaf83552089e81e3cdd1b925463233e06f280abb00a9e409b79295e3fef70485c4089323fbea872ba4238d9762fd76fb11399673eca4383947992abfbc60d256ae20483ebf5754b61cf473f0bdc6f9db24aa64f924cff3640f29d5e8b7b2545e53038e09f7efd6418631b50122f1a137b220c1e8977a6d200cc150333e5993808916e151ce70475e0589e3040a6c6854c27e6d5ed9da3fcc59a72bb64501104d82ecfdc580d59c3db0255f560aec0755fa1f579c1e63b270f1b2cbc96e4e48ddec9571bb76209ce21177b2919cb4932347b271c34f469ffc3adc1b1d962f5feafd563cb3989071d09c0e906228b2135c2d65779acb77d85804fe953f22090fca4524884b73c457bc17e698ff7897ac0c57f8c2c82b3fa82321ca758007598043a42f917b2c7e93f9fdfc7325a6c4e2c5abe3493ace0cb4563e3a6c9021a259fe8aaeffe46954ef6930ccf124ac70f1cd36c87bccdd8eda013aba1cbbb99335066a191f975a966047f0449ccd46fea3f0b4911c90758efcbe964e7541071686fbfb55613dff1d496cca9a76902ac57fc180c0d7c9381e50a87e38fbbaa0ef1653e95cfbda58984a0b9657d09642759af20162778d0a19f7992f1fcd0af7a4ced7ed6a21422d3da14b29b036ffb5214e366ab6e12cde6d8370632ad7ea963f749002c0748011d0a07d9ca6e9bad5067742d53c4b01954e8551e0e7d7c98e1dcf71328d92947c7848e5e81ebc3dfc01a361e1264bd69f93a551466f6fc831f0900851b2257e77c2b4575a8b671345ab02f096e63038b86edcc5d52d6c0d6ba59babd4ab3cd7eb5800383b04047b3386a3327b6922816de748fa0efd0d24b10c61dcc66c1a846b5e72a7d3f4df62eeed73a52e74d41f403e9f18da85289bc54a8368f848b5187bfcb9a1e123e5d83f7d12973491c94de238579105f55932f1fd1c2de2c9ff96218cd56c9cf228b8819aca3bfe4d561fa94cfd5a356c3f874896d4edf58f6c6e7ce15b7dcae520effb99dc81f7af52b8bd9b5dae0c7ae4745849a1d84d4c08af9c26cc88fa462fe157fe93360f701e4e5a519cfa24c75d2ebce654f92fd301ccd7328b36763f3de1b59673c991892ab1f82ee93998b4e72b8c44df90f653e2c1f73c76b7c9f9000b7cc514d7bbc27675c516beee3375a9fe43a496ff46d399c8c82a3e78d3658f95c07e02c9104c46074ec4b00437d14326844350e95704b59645c5a45fe1a7fd85bb5e19b9d4883446c3138294714974e6bc6f3018d4c0f0019ed4379d144eaace5fa7102f4c428283242f52f8db4db4077b987c9c46337532a2d1a1875df61906a2e2cb53f65d95dc25fb8e0f27b8ade14cb6a034541de5b0b50a94ed9fd1398686ec87897f1220e1fd799ff1cc402727068294d7d659ed52d606072848820b0e3ad70a2299241640cdecce4bc0f501d0d06e527d930a4a77e6a55c3351f55e9fa456d9555ba6600ce6cecbbb5544493585846d6033b2cc58ee9a7a12eaceb39d4ddb7b4946d87fc12f7aadd9e1a0e3974af15616973043874665945b951d307f05bae76b3b92d52f174e7b1e60aa2f1eb38ff03456a3e1c28097aa9823f30f3f2828a4320fa2da5429eb16eacf506f2f754b676b6cfa07ac09786add20d95db992bf5fc7fe04f9a9707a9a0cca815b1574fb53e5db88196edb25688efcdfc9e78d1ecaf80668b4e319eaccb0856a1acb1204be91bf11e2003b97a36203061b9bcec05bcfa9293d26ee55226e72c76cfed00a557fd1342b9cddb71a8015b21966a4181ac9699fa6cf8a2d970c1da1b5fc0c5605edeb98bb37cda3596a3de8ae826a9ba950cbe929f4c4e3ff929f917ca7367844cfe5c715dded414c96a1753444ce6205650f856b89f34b48868dce430ce6efb3c8964e871ce7fb03a72011823a95de276587b67e9ed8e35fb823f24bec6559b4163e3d5eac61a385f25e9e8be4b4265881be8054d9f169d0424c0b1f9c8407b89b85f263d2919fa2e0e3cf5cecf58923232de270ccc2c8669e53c9d8a05e28bfa69b98cdc2d3aff36d725a161b9476c46431219068338b2a9f6040064d2bde0721fcbbfffaa9bd49ad5783f0d6292cbe931af358a513be2c14ab78edd80bffd830909a2adbfa26f237bc1d96cca6e139a1c154b850cc2faff6cec9b995fe20b560fcdfd248a12cb5f50337a757ded7a9fb4a8074e0335cb28023eacafb390ad0fe6eb099dfff58d09f63d9170294bd01c4e106a912578c3218d7c99d3ac6623a", 0x1000}], 0x4, &(0x7f0000000580)=[@rights={{0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r3, r2, r1, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r7}}}], 0x58, 0x10}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000600)="9ecb607fac956082e29f1cd5701d28f0e7d5a2872c1f33ca4dc115c67a57ea2ae8757fe21df4ae599d36ebbfb835a59b1de0c9dcb06decd4c988d3c2f161dec0128a13f08f28abe7c374514c3c741821f66f46bc74f05bec946d31e977b99185ddca4258496adec9a0b54ec2fa9f30ef9a01cdb11b69ec348f86f1ba1c8c9245846a8d19f8043ae5cae0900655d5f547d32d74e76d84309405295d3286f912ec645de28ebd7a96648e9ec887f5efff35170e9377412ce6b81572431c44e54c35225b3de58a7b5b99ec2e156f", 0xcc}, {&(0x7f0000000700)="d89d7a6177e00f612d84ee5d4f9f1123bb1a037221be928b53444ec688c3f165c23fe33c4a095856d88341b19f806ae56b0f32258b64ed2ff9e63d5d1aa13ce91e34c4c3e87b392dbcaf184923ea30e44708ac3d21847c1a88cfd208188b8d3edc811ba8b41ac31722ecc2eece47931427f5b6046060df3024e546873003e30442835214f8347c22f55fb1ffbaf144b4416787184e245f800ce5aec8b36f883cb8192868", 0xa4}, {&(0x7f0000002140)="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", 0x1000}, {&(0x7f00000007c0)="87a10a3a784c0772f3bb17e29aa6c6c605f04f7251009717dd857efd2b8c02dc3adeaab09076f9a1560e9839350e89b2b9b9ea1bd8f9f6aca4e8d03d462474036a19c0ba085f75365ed0c4ca0f6c851fca6cb48371e12bf61cdc62e3f6d520b6c2362788ec22ee66d63fb2dc3e68ef9513595d12f226957aa284de6bcfd717e7ae58960963136139b9086feb31310dca148c6d283ec835c05601906398e48fcfb52e584769615a26dc0b92b740196bafa94ff2c8ce767ada1283ccf7efba242b26421b4ccfe8246f78b9a5e18ae7", 0xce}, {&(0x7f00000008c0)="271e5244a3bef89af15b798ce3d4cc9c3117a6d9f39907757157bba0e5a6bc8053b98a4fe7999048a0e2317b526bd167e46f17226a96c71d9760e1ad9881828510f5f2", 0x43}], 0x5, 0x0, 0x0, 0x800}}, {{&(0x7f00000009c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000003740)="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", 0x1000}], 0x1, &(0x7f0000000b40)=[@rights={{0x18, 0x1, 0x1, [r4, r3]}}, @rights={{0x20, 0x1, 0x1, [r8, r3, r1, r9]}}, @cred={{0x1c, 0x1, 0x2, {r10, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r4, r0, r4, r4]}}], 0x80, 0x40000}}, {{&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003400)=[{&(0x7f0000000c40)="b35c67be6736d272", 0x8}, {&(0x7f0000000c80)="308e539814f994427266dd6c0eb2686d1dcf86fde9eb6504f13f6644db989e2acb02f068d89b1b7fcc05b5f5a89b98a496205edda682a90fde1eccf5c4d532ef269107dd95e23994b67fae9c24f1ece36cdf3b16dc74d30d6e6ec0edbbf89e8a7c55fcbfb286b97ea371840b46fd26719fc6dc0461a1b7eafa1102c72500d701133f", 0x82}, {&(0x7f0000000d40)="560c8bfb2ab448c1bdfe3cbf879853c14d58423f6b7d7a5bf802950a04be6ec99f80b720e18e52b8be64c2adec0f13b6052ec5557f2f8940c1e2d6e71dcb02c8df1af686c6e79f0c0a23c380001fa28e00c349ce9ea496636c3b76f0b39382d42f6a1e286f4f7e50387ba651f8ecc374508d97a890384cbc6671eee866f9f364e53b945704b3962a0752a8af5d787724777a7edb24b6843fc865347772573067ddbe4aebe5da51ad8b6cb26ad0aa0fc56d531a3e2ad1112716cb90851845fe2b3073d03034ce44be1b95a324b026dffb4cd1835cf07dc01ccb46dcb18208a3646d0e138e0309b838c8ee8c9b4b", 0xed}, {&(0x7f0000003140)="d9624057f7ee50ee0a5b54949e6d97edcc65a4cf45a2f68c4764ab48839fd2d1e7ced3240f16aefa718e6c1d6c6a95b3ab93d744051a0b50e505ca86c709e620194e7a516e80947da68bd52ec5461eb41498ed32b7a49e20c1a0f71011bf44b14b4bd90ccb0ad8a96b8903575e77ef5f174303c6a2b35e177f4b55d0cb9ce1876252ac98dfa3da95427e47084f95b520a3c17001563e68474c5bd20c996c67d16f81d77874939cf669ca7f68a36f39761a21628d8a748334e8385ffd9c6ff11124fed8038bf8b92fac0a1ade48bb8dd04250e052e790cb724c0ac66a78604eb287", 0xe1}, {&(0x7f0000000e40)="66064172239dc53277483ad98f8f44e9395c8b73853964ab377ff28eca71ff53f448e450d6f2b98e8cb3b438fc582e460dec97ec86aef274", 0x38}, {&(0x7f0000000e80)="1997db43c39c3a67cbbf368a3d4f6034b50a7c", 0x13}, {&(0x7f0000003240)="ab3aa0e654fa4b5883460a86b9024504f2d603ef7082208386bb6cd997f2ecd67ac692a4172b9c0bcaa7bf6cff92fe357eca9ff8c3b33778cbac9bbed74703c114cc95a8a7498aefb2383cb75a836e441c0f57191556598f3a65810819738d26325b98f9042b3417634bba4e6817ef30df7e2a2a2242efd89b3546ec65089e60149fa71a2c4b808745fd3a3963f0013220d8ef705f2912911e43217b422747520a48f1ab525c13cb0b2fde5dd9f8718a334c31e43af32d636bc433ed1bef37ebfd3149c4cb4d22aaef6db2540e6a69a0be9b53", 0xd3}, {&(0x7f0000003340)="d60268e7d04d155ce42d46f56fbc895d8a399c79228c169758181e13adb717330ab9f1a7448d670c7891e0f88261625b3a632f5b81878dd875cf94c806e7c3067c54fbe7b4189a48054ebc2b9ff27b0bcdfc1f6795cf1aefe9da2769d1eef8acc909a2b8742411cfd8a12b0b1203a30b37d64b9c946991fc56196f0e3d2314c4b6f58566e4d08f9e8889506df45ce49b1d63755b7fcf826be20ebbaf0224cf32f17a351860523c9bce94cf0040ca2233", 0xb0}], 0x8}}], 0x4, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
brk(0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r11 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r11, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r12 = accept4(r11, 0x0, 0x0, 0x80800)
recvmmsg$unix(r12, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
r13 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r13, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="020500090a00000000000000070000000300060000000e0002004e2100000000000000000000000002000100000004d400810000000000000300058e2507213a3db9be1e000000000002004e240000004eba79474b35e356165f41680e7ef3366437c9c2d8fff0e0917fde4e6ea0a733983e4611fa296488a6cdeef6bb9f3efad4fa2a4f1fa99b1cfaec43a72ffdf37343f7ca159b3595050da2eed19ebc8904c6a8284521724bcf9a4e2e37"], 0x50}, 0x1, 0x400000000000000}, 0x0)

10.708112347s ago: executing program 7 (id=3277):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}, 0x1, 0x700000000000000}, 0x4000000)

9.455378495s ago: executing program 1 (id=3279):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r1, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x88}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1f}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10)
io_setup(0x3, &(0x7f0000000340))

9.28727006s ago: executing program 5 (id=3280):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3)
gettid()
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140), 0x4240a2ca)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000ac0)=""/116, 0x74}], 0x1, &(0x7f0000000440)=""/241, 0xf1}, 0x8}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)=""/20, 0x14}, {&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f00000006c0)=""/14, 0xe}], 0x3}, 0x1000}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/76, 0x4c}], 0x2, &(0x7f0000000980)=""/92, 0x5c}, 0x5}, {{&(0x7f0000000300)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000b40)=""/49, 0x31}, {&(0x7f0000000b80)=""/77, 0x4d}, {&(0x7f0000000c00)=""/2, 0x2}, {&(0x7f0000000d40)=""/80, 0x50}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000000dc0)=""/38, 0x26}, {&(0x7f0000000e00)=""/140, 0x8c}, {&(0x7f0000000ec0)=""/139, 0x8b}, {&(0x7f0000000f80)=""/99, 0x63}], 0x9, &(0x7f00000010c0)=""/54, 0x36}, 0x8}], 0x4, 0x2, 0x0)
unshare(0x2c020400)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
msgget$private(0x0, 0x722)
msgsnd(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x2000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00')
read$FUSE(r4, &(0x7f0000004180)={0x2020}, 0x2020)
close_range(r1, 0xffffffffffffffff, 0x0)

9.199964144s ago: executing program 7 (id=3281):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x6a8003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
getrlimit(0xd, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
prlimit64(0x0, 0x19, 0x0, &(0x7f0000000200))
ioctl$SNDCTL_SYNTH_ID(0xffffffffffffffff, 0xc08c5114, &(0x7f0000000300)={"aefe24883f0a2583951256d5a86a6804ece930a9e98e4d43e0fcc79a5c96", 0xa, 0x1, 0x401, 0x0, 0x3, 0x1, 0xffff, 0x0, [0xcb, 0x9, 0x100, 0xb28, 0xfffff208, 0xd, 0x8, 0x0, 0x48, 0x6, 0x9, 0x2, 0xf, 0xe, 0x100, 0x7, 0x0, 0x1ff]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(0xffffffffffffffff, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40081271, &(0x7f0000000980)=0x4000)
mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000140)='squashfs\x00', 0x8000, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0)

9.037515359s ago: executing program 4 (id=3282):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x14c03)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r2 = dup(r1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r3 = syz_io_uring_setup(0x141c, &(0x7f0000000440)={0x0, 0x40ac, 0x10000, 0x2, 0x42, 0x0, r2}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0)

7.620239203s ago: executing program 4 (id=3283):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r0 = socket$inet6(0xa, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = gettid()
process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000004740)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r7=>0x0})
bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
socket$netlink(0x10, 0x3, 0x8000000004)

7.567337084s ago: executing program 5 (id=3284):
socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) (async)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)="94", 0x1}, {0x0}], 0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0xbd986dd2)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x1c, r6, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) (async, rerun: 64)
setresuid(0xee01, 0xee00, 0x0) (rerun: 64)
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
shutdown(r3, 0x2)
dup3(r2, r3, 0x0) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
setfsgid(0xffffffffffffffff) (async)
syz_io_uring_setup(0x1945, &(0x7f0000000380)={0x0, 0x2, 0x200, 0x0, 0x3c5}, 0x0, 0x0) (async, rerun: 32)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) (rerun: 32)

7.019659176s ago: executing program 1 (id=3285):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce)
ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000))
ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0xffffff7f, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000101010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

6.935197837s ago: executing program 2 (id=3286):
openat$kvm(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@window={0x3, 0x3, 0x8}]}}}}}}}, 0x0)
r1 = socket(0xa, 0x3, 0xa5)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c})
syz_emit_ethernet(0x2a, &(0x7f0000001240)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x32, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @info_request={0xf, 0x0, 0x0, 0x73d8, 0x1}}}}}, 0x0)

5.208305531s ago: executing program 1 (id=3287):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a33180000481100fc020000000000000000000000000000ff0200000000000000000000000000014e204e20004890780300000000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3e4af200a2bc676b85e4508546e551af9"], 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r2, 0x0, 0x12041)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x144)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000004)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x8, 0xf, 0x32315559, 0x8, 0x943c, 0x11a, 0xb, 0x8000, 0x0, 0x6, 0x1, 0x7}})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

5.196404383s ago: executing program 7 (id=3288):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x80000003)
r2 = dup2(r1, r1)
read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r2, &(0x7f0000000280)="0d1c409c14b8ddbbe2423ac75d732f3d0e9cd37b375b9673cb39c6b35cbb85c4ba83de9d23bbcdd53a9f0d7c92b66f6d872096b32f4bdac32a6136c86365cfd42c3b0a25fac76123b6d700d3ba70cc138bc435d3b1fcee2545c3a421119087bddbbfd0418488219343819cf0a6780d54166d2769a719b207136357ff3f505fc1d6144239ba630b15e7f8aeef7be5cb8c9e738faec0d1ab79d34b994e098323b94d32926bc3b0fd88c13cc781a0fc3da7c4d83fbaf3288fabe01685a3422570fa4cba7e840bd0a01e995c91c5aba51ca15461dc1916bde9e70c66f3aae48475e95aea1f8e6c6f10104d64f767b7f9b7909f5caa5fd61ec7bc7392bfb7fe4f1d1d0528601a87f9248693f31a0f2ea07a0f33e670bad3ba0c648266195c6d9a76cd973a9da6016d1f5e0d49122f64da8933cfcf6a970d11767279a9e8e37a30a007e6ea473e146069e72894fcd378e17d4fa761999c128492a0321c3153edf7b28d0cddd78758f5192a924fbe2e8c594cf35aeffc635b14903d134fc5f7857218f99266c64be16e5f4ad76a8b5f6d39ca2451afcdcb0cf42322a5166becc90621f99f28e42bb2cb610039c45e54cc4bb8e8210e612a3f1ac93366b7bd77410af8b4b3eb03085354c9f8d12cc62da82eff96a006dab656c10e1bf210124b0ed6841158ec70981a399ba7c406f3014bf77553be6197d79dc1d31ac4c598bdbd007578d50f00ce85810e0759e91505549c70005a5f923aba20d8e05d0b764680b9ea259c8fa71f1ee36b71da662b825019c07aade7db363662103887079dea43ca30c32e4f0d9ff043720541633157a3ff1dc055ac1db5b25765b7ef2e338c104db28b6be7fdae54f04075e26ce38ec71d35c029df580ee3ef68e46359031aea121d0776398d1f1e28e9cbdc20cb58adf5dfa01a2819f697bb3189ac0d32eec43c0ef75f5bd4c7926d18daf9a6e9265c961aadbed4fb9627a1f0a6c3dde66fe5530993a7f150e5b361ad0db403a864ef4f5e0f21db55aa22055bdc5b282b057d07efd6abe23f941a62d6f613a1ff8d31da632284e89a3069c6b26ef35e55fc846fb1c28651cc5a879a4994568c4639b9fba8395014c9f4f6152cee1ddf8d582bc496bcbad8e39e0a5a3e713deed021eb9d5b3f8679a8bddc08ca77d7cd101006c5021b65cc7648a646735d9d7f6e54e4fb5bcf1fd9aee4beb700e597011a2fa6c01d22e9b6c7a5afd7def8ab0a3e612d8a5ce571dba2d0696155c3dbfcc851293eebccfac6855a7b024d762e768867f57446ecd6e1d09a31959a6374c50445884dfcc68a62662e5701a25a1da8e0abd0428bb558f9f7e74c250d4af62afad71e0f23268a955c548b41cc83f6810c72c832476383a355abfa449fc05c7afa2ed70849f175e826361882503246e688983f472c418578ae4c893d847c0c7f8ec99352d3024a69134dfccbc6ec3351b321483c57d2d1e77c0c7551cdaf4c14038844b1b05c25541d1d48bf0dfd1ae40c35872a5b37c2958e3a60187531814f3adff870aeb42cf611c3f777b08f7dcacf5c087b19c17dfca413097a603823363c2c55597330de20a73465ccbe5acfad066fcb17c177827cf081c588b73c042150bf1a18aff97518fbc1b4d5d22f29077e186ae9b998b4d6fdbcbc8c3bd57dcc61cc322537743ce480c1dea39adcc6a51da745a60e5272a7181986bcb992895035f0f882cdf79c56a84cd88c9bf0b7dab9c1f453cf4c05e2a33f43f4252fdcf99cf785e639bd9d11c374d4e3107ce128d2a823b6a8631a8fdebdf14a0bfc3f79d44cd54d3e8b9c5a3f41b9a1187e23f5a5eb5fadff92d746ff3befec7189ca19c1987551d0fec321cc306d235f82b3f479f3d7a3c1d2377afe3f22a49c682646e9893d7700061a0229a99d360f89d281dc6bb95b92329cc7277b89a9e6a3edd3c753cbb93e9f1249572bae520fb7c46970f527fd93c445a8159d4992badc395c05313462d37c4f651afbdb04f9f42ad4433c5c765735731ed6d8c97e4ca9fd3a1885de6c051e652a1ea40230e9d854ec2145c78ef5574deac83e78df8932dde1d5c46862c9f808394dc7f064b5649cc7b2627a55683ed33f2712ad2d4f77ec7f2be200e01fca138b3d1f42916a54a66561916bcbd3109f6eacf5096e478442e56e5af61f7c32c681bd35bf94a429a52024a48f6002978594418b66c6eb0fa91dccc4fa83d48927349b8a7cbb70670bd78b8acbbcb554a219cdc6740de4bbfcad2250fc219436ba5db017c172d6e24eaedf29d169b8867fc84eb2e721b31b08604a6fbd8d5edd9bb0152346509619f4a0f41090228b10868f56cd7d7c025cccc8f2b4a7d85ab91862c65d5d578fd5c046928c5c8f999611dea07a1451357b4365b33bac0a2a842b84e2cd4f790dca74cc962000f72d821b093e271e63680c0e9019769f3abed377f51f2e0a373958dfe351a1db29da4b74f9ba1250a8a0b985ed86cd7a2a4ede57ce00dbe77f5c797e6b9896ccb978d3a01047f9ac7d66e820073193b6a3400ff41f2f8a98a44a0d2a608db3000571efdade9a44f278272e7ada101d275c589fed2ee0191801b7a2ea62dec117c9cfd96ccb73de7fa2eb4d60a7ce1170047a5266668da1aa8489c6e4ce564607a485afc6991ba262cd6f155c23fbb47610f555e0be090854ffa0d610ae4baa1dbd1f36249beb0510b8d96132b6396a6261214f3153bfc4f0dcfeb55046bcca5868aa913316a2e802f9bfb51caacfd0045d96b3983b883db123da07fc20d06c973e3dc74c53006c77361cfa9d3b2062da3f9740cc7335ec792d1b2c767e86417433fe047c8d9368c0c51373b5e5158503afa52ab08ef49616499ccb8dc829e343d25fc1fc2ea6c95933295ab397f07703d1d8defebeb44a2a9556bbd5414cf921abfa8df9bc5ea76922d728ef0024f516c9fd7a2927a68ba9a7dcc4f52c3d8b72909b2bde14408e476778a3221644dfa13794e365a9ebb670eaf691b3c2393adc441519c1125b960ff109ccab52294c6584d74b3084cfda3707f7153681c88a1578a77be9224a70ce400f4af3dd72452df147476abf2668c1801fe538be40042717b6c468fe1a33d1d597fb637396b8ebed9f64eee42e645bd8dc0e63fbd3a139bce3157ce7ed6f5f643ee26847908efaf61cd977627647bc0e4f119b924bb185664f1dcf2240b2697c89e8f569332d19ceec176642ebf0bf509bd3b9477272159d45b708510908e74cc5e0304104d5ed6e578b46dffcf64367fe9d274ab8f16f3154f3e83ce6d3ae92a2644ceeb8ec33e07f728319eb69dfa37bb70b40a1001ff0157173e33af633496062b17cfab8b5c06ef2fadfef280da4e1f70fbbac10981a0b35f3ada39733d7d31798e455f0dd1c530939f09df43b5aff342c39052a51d773b22acbc8c1525f3572ef469eefe66d1895a9ca3c637286e3f9acd29e890ffccbb313dd9da50aacce808d06d0b109a16a1c2bf69fc4b85b9b7cc9b9ba9e5d709c65fd0a879032caee38315eb049b12f11c4d485ef426fff3a4f91b4f1ad4c192c4074636787ff966f82c8d4fcad13a7b581718ee7318f6731da2eb1338c95c35f1f2e082bedea7f05b87d891876cfab51ddf2908ebb2bc153c20001ae9c142b35a3de474b732c5f629bd948ac9230067120671d296001cabe19e3d2302c1f32e4fcff1681ab2ef216309c21c6a5afc51ac500687a5140d015ee2bda5f3d8a15826a21a0a9495b36fe958fff32afe270f809f3a8f8cd2d8992a859e5de779bd8aa4dc6979807171282ef34502f1bf34f529cdad15671692f232a9f2dd2107f8198f7a9ea5883cbeb2a060ff1b13fc1a4df315dff940e8f013e8142c640acf51ebb2b2f878dafb6c12747cef3061f2235bccceacce4bf9829df24b9f9e9c5c259aafbe61ff6be827e492e2c03fa1e9f936196ff9acb28081f7ca74109d823c5c96b1e808bc2b8072763954ec5691f7935284e045c6d86c5c68d69b4502a5132b3c1cdc5e000ed1f6aa4bc0a9090a8923004ac05558e08827c71fd2e24f931f880244143a8d092dc8bb2b48317ff49fa0b494b3fea0741fbcac6cf780f93db42f47d23170a70619d06b0462f2fb04dabe2a0c94a1d97ecb159d426df47f0a1e13764e045d97ba75fd0eede9711d112581b4a2e66b10077aa92c98e30d6504f0c08c0c68015c88abbc991d5a799e588d1ee7492d699126627ace339c1bb024a59ccd9d3df0197c8e56219d76698b61ec94927f41ccc7bc80ab6f65380d31d58f796e7e697b28e371ecd9ccf6b58e9cf32daee54c5228268446677f600ca8d091b6a4774749d40d6d4d6a009ae12bae1c530e6961420507a13a2a32c4f0863c790159a26588bed9f50b4ffbfc8649adc8144779653b4226fed5ab93570fb3edcc1be70780f6ddc8d9ef1ff39d22bd20cd8ae0195d02ada60fa0d65e065b7a3950d5a2b77546ad8f1c1018344589085638793d26fb4a5c59c23f1c9b148ddcbc478e1867e109590c44c14f5ad6e8cda21a75358cbfe6f397c711eead2b1c73df1453d184a44e85c2f6ac0c266b0f67b001426cec02efb66085bd1b8bcaf06d6709d545895337fe36e9d26417238f36be5ba51d5cd7cd7cec452780b72bc441052f67496ed8bb4d393db8da52aa3b0ef10a74a33c2b7ee24f76642f83bfc3e686951cbd1983f1ea54d536f6c86e8b20a4eaefb9ca57308abcfd81357e3d0eebeb0ff805c151ea1d0063c3bea7120562886fc4ce284f33d4a85c830d8b9b9b1295c352c3f5db54973a5ed3788e5396a1add7022546f13db95e4ad1a994142aa4f98d644cd822192e3e1875da3b4a6cfd61cca36a82fd4c1f09db84f6b379483e2b81749609750b493e406c8add341d8855ef47d8e8cd49e9d1340be1223d268bed3a2cc949b74cf01160723d26de9b11138fd8e8957354c2a58fa30903b7544d2bdf49249e5ca9f5d030f0c17e7ec605482523d1da3b3ca6c94c8724c20b929954c1c1f321ba7f77e2e954056a2838e57696e40a2fc9f8c2b7e25a41cd500f4fffb196810b3d77f79dfc1f7179fd4e2c63957c65da8325185cdfa37a82d42ebfc631a87ce7ba60ad09132f1eabe7b870c88fa277578e19a6adabd328e6b453dae201ce4327a378174695264ff4411a3815c362480058038b1b70b652e89b0c7743548b897c80c53b16aba4d244753fd8c14c8bcdbe2a2710df7842a8af2bd0a966632655c01bbc2604151b80e349b2f5f63fc8fdfb34c7223803fc0fd1dcf7fb5471c65f59ef9b02c3c0440f7e44fa4759782a46165c64e2ffc246d0438248c461e932806ddc20d3eeb597d74e9cbfba85951c601fd8b903c80f5d8bd5fc5b824cd63d9bc2d38438eb8a8bd1fbbad944b3ca074eb318ae074ef4d7f12076ac1809ca6868be7e5fcbb953ee70bcccb7cf51422e8293faf3e88d4b179b4c7a6ab53638eb05c902715c023f33ba9e121aed0b7b5f0544b5275cf22093e64a7038cda03fc9014002cb52d4568625d321b344e566b50a7e9695c79daab4aa0fc82790cd32708bdc0242686052677eb163cba152231e45d0ad1b8238a7d1230f43612ae8b9525d1f98372774a326e9baa48e69093b215ea503e054729722a71c7e6c58b958f3cec95fdbf1811b7c8a53787e95d266a70d408798e94d9579e813a8e9e3d4bdb4f2682f7aa30b659c722aa07faa911543c57db9fb3abf73ac5b4096cadb4bfa2b25e51b11e754348a2abff384a16194af26590ccd657cf76bae1f1246b67ee0834105f008cf77b1320ecfcb87bfa7d2b2fdec1330f54b6c6cf2280119e39e9a66ccef3df0c4297e1c861a027fa2ea5a1ab530f5b94a98895405c620bb6faecd7e80bfb42d1a4646360e0e8355af548439f8db48d583352ea84385e271b3067bf7b047e69e23c3bd2c3ea74df48b3649985b0ef12a9f3803ccfa52e01381d30a9005f0415a149557b67d0ac7c439ba8b20a9eb293ee4d357cc1d9e1e7f707ad77e58f22d2b26f9a8e726e826b6722c2b910416dcdaf772476e55256fefb1fa5de0139e15c2bf84e267be5d5381bb30607b731c8f305a1b4e1e4bae0b59e61dc77b13d129dfff4fdaf48f95038cc11b14e8266aac4d59fb40346c07a7fee92327e40905e40f8135b0f6e9e31969902e9926a99d7ae30891be917581189ff998ea5310da0cf72faae333ab8ee7cb9f78bb0a8695a841b8d37709e2826594cc8927f5dd98c53ea4c5246b5fc09f756f29b61c21996dcb6c0f1e476674aa9b6f69ccfcf8672b048ee723af55104da1c2f5250e8bbb3bdf2b7edb4878a902032ab4115f516d804d2cde7bce6b0c6dcd1f0d321fe4bb279e4c45294df0fd33956469839c70bcb68c033b597daf3f515354e72fd1ecff87e4b8d1ae52e6ef0fc773a49ca76d0659454b59e9c62fc8e10131e50893c0c0a997fb5766157701ce8e6a6482bd8b0b53a6b4fd4227d8e02c6453114f161017b18e52867282010df15c361a0ed3b17636adce6567ca97d4864dc15fca353490aecd5d26af991a92dcfd3e4dd38b8ed9181dee7e2e20cc2600c3211eecafd0dac537a693573e843259c30789a3d0ef91b78f95ed5da1c9e61716f651284e4eea663aab9c30d28a620745e44fbcf71221a23d332d411d17220c5a43321cbae90ba8104ffb4415d7563a21406d6be1fdc9abfff8998b51628b28b4ed84ded6804726cae5b62281949bb7cd7bec7bb2dfa8d831d4928b274c7452d2e9f8a37c67c98239b121d3acf381a10469d0dee019d38dbba865fdecfa34e39b0dcd4cf7a66e30f87d4f26d4190fdc62d44c850e94121ace3d531de3204ed5f838f5953c98b44a387a0cc95fc5e76facdf3a9f98183d32d887fb7d997a37b4737861bb12ea8e412e1015d3cceff7b448381f3fedd35a535e524f9e6df67e14882d9ec956a81e1972392c8c79cec77fe6d0f88a00710aaab4878187d6c387cf1ade1c61ca3b9bef117ad621c9a971d4f04a2e45314422f9f7606c932ab593db97747d7666948d04aacee1ceb6ae2fb205f32d953d94e5f2c7cb332eefa4bf11c999fb67e287960b64c36fa37de3c81fe53e057abc6f5575cb900a117242340126f721f8ad4c3d744440f2d9e1abf71fb24ca6f5abd392ce1110d4d138cd312373f99eef5a9b55a2a92a73be76860c380e5f2f1c9e5526ab5dc6f91d81d086dcfb70165c69b9bba0670366910ed053d43a61bc8215e95f304d73d38a689f174ac4940f1c7c87a011fbaa364e54887a0f38281509282943c38c77f9dbf385d0f8f62d30b300ae7ce24eb5b855057fc4fc8efcb05c4451fbc4de6f8b545559fb2bd2f8200eaa2822990d4afa0398e4c4d40534ece023306239bd86e2a0b9ae2fbfa640046379c1e2f0471e0005bdbd929119e54808f53fbc9ae318fd128aecaee2e314efcd76085a1da95b1261a321fe8229434dcc57844f15914221116d53faef06466643b996d5802167c0dcabe44979e576b4290aceee7aa771820fe113b85162e45961dea78ba31e0c54faa89ef75263d15580dd144745ab42b5d510f1beb115832df59ce57be19113f97aa21d984448e7fbc92c1291fd84f98e9ddd832336be330528e9df7b88f17f47708dfa401ba49562ef3650155bca61a81348896c151d05651caf865a3c40dbaecde5036233dd42a23f5712c93b2fa1c3ab754445bd258491fcf508ac344eeb38db1a4cb9980b1d97b826d76b0b10f8b8937dd0a9385c66ffffdab1819049c35aaf90b15267f7c58ff236c425414286bc7dfc3bd22abea8aeaeb113592ed41fa566d1426c85c3db9ef04e70b31ea52ae2f9352ae1195035b517f7e36350906773fabaef38fb29348b9797ec90cce08e0afb923fcfe0fe62ed2abd97d39949993048ae10c5be54808986f6c4aa437e413b449f57b0b0fc6f393808631fac191af623b8e90193ef2b0dda64f26b4771ab256bccd61ebf4b7ad099156986d64e77d37039d4a2e5836528a10c8c9d9ca9c640804dbf2db4154384cd8a8c02ce863e102ea944c17a643c120361d631b7f349f920ae6bd06db3e3af1bf902c3204e8632d27bd928701ee206a7d64448f9a81265a17a31878e3c1a2a044fc6f956b557471d1bf7dfe160716028191e851e18439f4e3561aa589528889090a3b673f70aebc1edb12861277f04f300acd8278e5f640ac0dc7e4f8df3ea39186119b0599f3e7bedfa0ee65e4d25d8586a2d10e773182d98ea9eef3b3d9805697adce7daf083b8a934c0d9c6467be25a6a22b6b246abcb355d03b8c3345dff9f40e253ae80a2de668dd9da044a2b90bc5788b0fe3a2c6387b3c817ea456eb7713a728caf4287d15006500435ff93eb6803e42e57c087c483e23605d9dcd6f758883fbb990eb0f91f351191956ac451e1c1d1ae113c03311057f5e70d8231bef8edb7c2cbecc4ab3e46b02945afbcdb2e8b005819dd141055af1fd6a3240af08751cd3a78ff92e39bba4d3c23aef960646512b3b86d6a8fa6880cfce6d58e1fbe734ac5f9b7018451a7a5879b3767dfb359eee615bab65116237e5de5b96bf9fbacd11702c73a8e478a64895d15ac0110737c3ab91222bc4c87326b5d5e3cf089da0a76d43222a8eeeb5286a4cb2fced98ebc2f6e876e8ff48b6f8f8264e52cf5b38906d657bd8d0d91e2d7846224ac60526f878e8189d80957a73a0fb95223842fb819286234d742c0aee14c75ed069411f7631aaa3e2a011fe75e67131a51733b9d2dc7981935d559a08a965363cdbc02dbadfcc4435040cff61df0cea2dcc5017deab9076fcc1a11ebe5020b6c96a16425397df15881815cf60b942648c234a5614ecffd4d5de50884934bdbd5177d24ee76f0c97fd0a2b97e527fa86c73ec672398f1d88c03d467f2712908d8fff5e02b4e1fe2d7bff02205597b3a5360e2767a3d7c488d222a3ea39d3fec61423e349689297868a4bfcf08a0938729fbc819ca2181f03f4ea42c7892dccd76560f1ef812ba7380681a8943e7bf2d6bb0729002a33a4a595c411cec870e8757e5d9cddb17563a627e598bd170cb6eab4d0d8a02c926bd0d67d2084df5873591ba8da1309f9c309fcdb1e1afea2ed48b467170f9d2539e62e75ed1e9ad94e2f574bba5e25f7473534e82e91263cef442f31e9e568a3eafa2b9de2a99fa681c6f6f245db26c24d56ae77fe239c63a70c2edd113f0d48bf5c2a887e1512bfb2801a0c628d3b91f57b1d1401b0e5e6012d32dafacd08775b1b28f15c44b03cd340a4e45be0534c4f5099c5bda5ef0035ab7d1ddbdb2e73ad49e15f6a04b5b09280581ebe2ce940a8058e2d14a0556c14adce8a40b6f0f78cc6bf46f0d0b2c4f9ce79e60eadd828eec8fd5c6b1196f685add24c959d4f1c9cbf7d21fb010df2f26fd1f1a5186186de0ab6f7fbf7ac2406a815382aad4edde90c8aa08ce053e86777fcbb089b4cbeb596949ff04739b53c4262b84881814c1cee97eb9147854b54ea354d53d906869c21e5772be517c127a0feb3844acb8b721f060e065b096d5f390b3557e25d50bb887ac018564a9b3ca3fe38eec76dace59bcadb81ed3764c177766ffc8770b7eca1fd3c87f3fc84f157974dc6356ab41388d973ae0a5a4a1d3d08f207b4add5bb902034f0be23bd27010cf5fb3a8ce4c34b123be47bf50fb6ff1593602e720d893561f72fcabdf7141ea4a274d319e9157ee4deb55dd412296525a1d82726fc8e8ad1ebddd6f7ac4ac10d3f59473cf5b0ae0644db9224268415ad314e4a7f4e4a17be80425198c097287ef95948ef260eb02d59e235caabeb1bcbf8829240e5637358879016ea8b5b06337d58aab36bc1a981d7667974068ca1a353a8caad2885236f407fcfc277210ff15f4d7d0caa2b31e5f745f455ff36a5fd9a9036c02f319a049ecb1d67c057130ae3d68374c82191059b44f8aebdf4574cd84cf7c031b6e177e8f5808f25ac76df8d7f9aada99e1a16ea5b22cc4bb349a352aceb2cb1ea47710704d446498f4d6ff2d8705797cfe62e03de9064a5831df451d021fcd93a71c3105f81df9d1ce5dc27d26d77326ab4bedf0c428a70772f2b0630b0640f643292e68e9b44d53f5c401f6ee09f8217b77b2d308e13cbedefa56920ad948b464a74c3e9ca9259d10132880d7dbd2c972c772985f7022a41ef473c254289982b9cde41f937a1de59b9a50caf728accac23ba485842dae35ad4ed412a31d2a134bf05ede9fc70fab45fee38f1f7e749e803446b418cc1b5e7f2019777ae03eab5e129e1eef2195ca84cde2848df14a93bbc3a917f1e06ce3753cf127f2241295fb630f6e27eadeaff570f955ace44dd204dcc082f7bcbe310e2c33267852049cb839142d072e3f3ebb1fc289c78769fd0f05578630e42a5829b82c6d535c012204aa74659282ba0498156e2183ecee174054d45fd97e5a0159255d8af432563d367f045d209c67cc70f7cf13b9a6578983ea640f0e8e66113484f48d41cb65b1338eb6cec534b3acdf9e5a1a3ac9157d75986583edfda4958e79593b6808b4762f823a6f442ee1749e592bc103f2b9e16107b939ece49cb447e5a7d34d66f18567d0e981f4fef25a467144689662783503a03e1800d22f40f61903d8270453161a68386bdd94d59dd66eb5ae067d4129be23a0b17b89d0478734460bb88c5771d9444caa769aa62d56bd128bc328e03d2e18d966f5784398ca2aab86007f7ca00908d4bd7f2f3ecf3024110b073304c7bb17bd73725721a99e94c8d5e5da7a839d58f2196cace99b98d7f584a49fee2a426e6ec3f08e520f7965aa2dad97084c2ebed43c58dbc9116f420d4735decc47dea514b689f5479c56b6128dd684c4fbf0945aa15363276af833b27b82cb48541413bc9fc51f9ce57c14bb6c39f86cbc99b69e5d91e7cf72f340f67012eb2f5fb21d830e97eb3664674ecc36c754f90d1a8f6092fe3a48827849ec95ed35887cfd2ab3f26331bdc154ad034f31ef26ecec5feedac1367f4f642e99ebb409ddd5dd8d0087ebf048e4924a2119c69ff00af79233443b897f7bd1d80f4d34555719bd8dd9c0d824d0437c2adfc598fd4c2c2d8cf7693e05238987bdb9bb04751dfcd44fbced899a7dadef499b9bfb45ee52ea59369c950821a667712946c7207e36473660f3f9c9906ed889ffe7a8c735e98d41cc96aecf3e577072cb4711eb690d28ff41dbe9070cd73da26875994a7b8480f2d21bd4b92402bc293fea154071c401581a9b858dcb4113149105d793fd4d0e98894f228f24250ada364f49180fbd116e0677cbfbe928a840dbfab2791865cec67ab39affa7b76c266285ed2ede7ce77e9e6f21545b8d177cc73e5142e6bbfbb3e9793716de8d6faeb74e18475cac7541e3ccd875cc0dc8bd5a01e468700d5817fc44b6dd64d74dbe0b351c80815102a0dc2038c83dc75189bb4ca425eabeeaa70fcebfda8f16c4b083762811325fdc6b94f84b6d4629929b85d0cf678b28651cab8a825f28440ca4e7a2193c6f9c769b0aa226754fa8eabd7cd1d31ea2478a83e0d79eaff6f72bfb05c31098f4640256b8c21ef25808821c08cbc68e8b6205fdbcb10b17d63cfb5ead7fb8ae1", 0x2000, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0))
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002000)=""/102400, 0x19000)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_open_dev$video4linux(0x0, 0x92e2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020}, 0x2020)

5.116041242s ago: executing program 5 (id=3289):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x402040, 0x0)
eventfd2(0x7, 0x801)
openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
eventfd(0x3)
r2 = socket$kcm(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r4, 0x8)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x8, 0x240900)
ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000180)=0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{&(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000000b00)=[@ip_ttl={{0x14}}], 0x18}}], 0x1, 0x1)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f00000000c0))
ppoll(&(0x7f0000000000)=[{r6, 0x5200}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f00000001c0))
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r7=>r0, 0x7, 0x9, 0x7})
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000040)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r7, &(0x7f0000000000)="94", 0x1, 0x1000000, 0x0, 0x10}])

5.110368943s ago: executing program 2 (id=3290):
socket$alg(0x26, 0x5, 0x0)
syz_io_uring_setup(0xd1, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000), 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0xd1, 0x0, 0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10)
setpriority(0x1, 0xa0e, 0x0)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYRES8], 0x401, 0x0)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000780)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x102, 0xffff}, 0x0, 0x0, 0x400000000200, 0x7, 0xfffffffffffff734, 0x400000000040, 0x5, 0x4, 0xfffd, 0x344c})

4.996337226s ago: executing program 4 (id=3291):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000ff030000180000000300000017800200", @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYBLOB="4600000002000000000000000b000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0x50)
setresgid(0xee00, 0xee01, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07})
readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r3, r3, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}})
setregid(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$netlink(0x10, 0x3, 0x0)

3.85758334s ago: executing program 4 (id=3292):
socket$kcm(0x2, 0xa, 0x2)
socket$packet(0x11, 0xa, 0x300)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000002000000000000000000001e95"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7336b5d}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x200ff97, 0xd50, 0x0, &(0x7f00000002c0)="fef351f6b11f421a5b4e415288ca", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

3.750721663s ago: executing program 2 (id=3293):
syz_open_dev$sndctrl(&(0x7f0000000080), 0x1, 0x14c03)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
openat$ipvs(0xffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
r2 = dup(r1)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0x1)
r3 = syz_io_uring_setup(0x141c, &(0x7f0000000440)={0x0, 0x40ac, 0x10000, 0x2, 0x42, 0x0, r2}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000000200)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480))
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r7}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xffff, 0x20000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r8 = getpid()
sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x7b53a000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$inet(r11, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c000580"], 0x34}}, 0x0)

3.700196807s ago: executing program 1 (id=3294):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe2$watch_queue(0x0, 0x80)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
userfaultfd(0x801)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073f97a310000000008000440080000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0)

3.692664747s ago: executing program 7 (id=3295):
symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00')
r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8)
r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r3, 0x89e3, 0x0)
gettid()
openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f024})
r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)
ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}})
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x43}, 0x10)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000a00008000001400070000ec100000001a91feb4"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_NAME(0xf, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40014)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10)
mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)

3.44558425s ago: executing program 5 (id=3296):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x103cfa, 0x0, 0x3, 0x69}, &(0x7f0000000300)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, <r4=>r3})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0xc0086202, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket(0x25, 0x5, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xd}, 0x18)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r7 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000340)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x4)

2.788134211s ago: executing program 4 (id=3297):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000100)={0x1, 0x20, 0x40, 0x0, 0x80, 0x6, 0x40, 0x3b, 0x10, 0x401, 0x100, 0xfffffffe, 0x0, 0x0, 0x0})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
setsockopt$sock_int(r4, 0x1, 0x2b, &(0x7f0000002000)=0x8, 0x4)
sendto$packet(r4, &(0x7f0000000280)="33012000e70014008c007ef52f555f2a0c67127025c1df7bfbf719143baa4b1f0f853b00000000000000e2ce3912c40511ca7af5aaf2bf7528d0f45fd1d6a6cb347506fa85f937403e4552f81581d808dbb32c1a0cde59c979f303fc3ebc3c913320150f641465486149369804d6a793599cd0ceed8514a751ce1e04708b53e6070b31503b47714e7ee884acae54c5c2acf17fc75e20a731949d887bb84407fc44949387e03cab720d7000e2", 0xac, 0x40811, &(0x7f0000000080)={0x11, 0xc, r3, 0x1, 0x8, 0x6, @broadcast}, 0x14)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1)
ioctl$TCSETS(r1, 0x8910, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"})

1.846809671s ago: executing program 1 (id=3298):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x402000, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x3)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x3, &(0x7f0000000540)=""/181, 0xffffffffffffffce)
ioctl$PIO_SCRNMAP(r4, 0x4b52, &(0x7f0000000000))

1.712708578s ago: executing program 7 (id=3299):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r2 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r2, &(0x7f0000000400)=""/207, 0xcf, 0x4eb)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, r2}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x1, r3}, 0x38)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4)
r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
read$FUSE(r5, &(0x7f0000001480)={0x2020}, 0x2020)

1.455992683s ago: executing program 2 (id=3300):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20)
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, 0x0, 0x400c1)
r2 = syz_open_procfs(0x0, 0x0)
fchdir(r2)
write$binfmt_elf64(r2, 0x0, 0x0)
execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x2a, 0x2, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGKBMETA(r4, 0x4bfa, 0x0)
ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
set_mempolicy(0x2, &(0x7f0000000140)=0x8001, 0x2)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000000)=r1, 0x4)

1.455384002s ago: executing program 4 (id=3301):
openat$kvm(0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, 0x0, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x2c, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x4, 0x6071, 0x0, 0xe7, {[@window={0x3, 0x3, 0x8}]}}}}}}}, 0x0)
r1 = socket(0xa, 0x3, 0xa5)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c})
syz_emit_ethernet(0x2a, &(0x7f0000001240)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x32, 0x1c, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @info_request={0xf, 0x0, 0x0, 0x73d8, 0x1}}}}}, 0x0)

1.454751195s ago: executing program 7 (id=3302):
munmap(&(0x7f0000fde000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000584000/0x800000)=nil, 0x800000)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x0, 0x4f832, 0xffffffffffffffff, 0x0)
munmap(&(0x7f0000f2e000/0x4000)=nil, 0x4000)
munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x124)
r2 = fanotify_init(0x4, 0x1000)
fanotify_mark(r2, 0x141, 0x40001028, r1, 0x0)
r3 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0)
fallocate(r3, 0x0, 0x7ffffffffffffffe, 0x7000000)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x1, 0x7fffc}, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)

4.235575ms ago: executing program 5 (id=3303):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a33180000481100fc020000000000000000000000000000ff0200000000000000000000000000014e204e20004890780300000000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3e4af200a2bc676b85e4508546e551af9"], 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg(r2, 0x0, 0x12041)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f00000004c0)='./file0\x00', 0x144)
inotify_add_watch(r3, &(0x7f0000000080)='./file0\x00', 0x20000004)

0s ago: executing program 1 (id=3304):
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0x7e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6a33180000481100fc020000000000000000000000000000ff0200000000000000000000000000014e204e20004890780300000000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd646c098cfc27eb8549d66e7b219c2c3e4af200a2bc676b85e4508546e551af9"], 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg(r2, 0x0, 0x12041)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x144)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000004)
r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @pix={0x8, 0xf, 0x32315559, 0x8, 0x943c, 0x11a, 0xb, 0x8000, 0x0, 0x6, 0x1, 0x7}})
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind(r4, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

 an invalid descriptor of length 0, skipping remainder of the config
[ 1370.831459][T13323] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1370.856031][T15519] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[ 1370.859644][T13323] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[ 1370.881090][T13323] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[ 1370.897067][T15519] usb 3-1: device descriptor read/8, error -71
[ 1370.910027][T13323] usb 2-1: Product: syz
[ 1370.936172][T13323] usb 2-1: Manufacturer: syz
[ 1370.947121][T13323] usb 2-1: SerialNumber: syz
[ 1370.973330][T13323] usb 2-1: config 0 descriptor??
[ 1370.991337][T13323] usb 2-1: NFC: intf ffff88802b05e000 id ffffffff8eb3fac0
[ 1371.006374][T15519] usb usb3-port1: unable to enumerate USB device
[ 1371.295018][T13323] usb 2-1: USB disconnect, device number 44
[ 1371.581815][T16133] Bluetooth: Invalid esc byte 0x02
[ 1371.599651][T11620] team0 (unregistering): Port device team_slave_1 removed
[ 1371.689765][ T6725] Bluetooth: (null): Invalid header checksum
[ 1371.703971][ T6725] Bluetooth: (null): Invalid header checksum
[ 1371.743122][T11620] team0 (unregistering): Port device team_slave_0 removed
[ 1371.798598][   T13] Bluetooth: (null): Invalid header checksum
[ 1373.032278][T15519] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1373.187622][T15519] usb 5-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1373.214149][T15519] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1373.227019][T15519] usb 5-1: New USB device found, idVendor=13e7, idProduct=0030, bcdDevice= 0.08
[ 1373.236791][T15519] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1373.248022][T15519] usb 5-1: config 0 descriptor??
[ 1373.359874][T15981] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1373.367203][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1373.393872][T15981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1373.439406][T15981] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1373.451240][T15981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1373.478479][T15981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1373.637823][T15981] hsr_slave_0: entered promiscuous mode
[ 1373.648944][T15981] hsr_slave_1: entered promiscuous mode
[ 1373.661167][T15981] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1373.670736][T15981] Cannot create hsr debugfs directory
[ 1373.686206][ T5923] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 1373.858859][ T5923] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1373.886331][ T5923] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1373.911768][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1373.966438][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1374.039829][T16157] syz.1.2548: attempt to access beyond end of device
[ 1374.039829][T16157] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1374.053493][T16151] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1374.088623][T15519] usbhid 5-1:0.0: can't add hid device: -71
[ 1374.095193][T15519] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1374.103143][T16157] (syz.1.2548,16157,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1374.103178][T16157] (syz.1.2548,16157,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1374.103204][T16157] (syz.1.2548,16157,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1374.103228][T16157] (syz.1.2548,16157,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1374.159577][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1374.204634][T15519] usb 5-1: USB disconnect, device number 37
[ 1374.362143][T15981] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1374.495450][T13323] usb 3-1: USB disconnect, device number 45
[ 1376.338008][T15981] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1376.354763][T15981] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1376.412110][T15981] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1376.558587][T15981] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1376.591589][T15981] 8021q: adding VLAN 0 to HW filter on device team0
[ 1376.638796][T11620] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1376.646064][T11620] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1376.898492][T11620] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1376.905720][T11620] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1377.365000][T16182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2551'.
[ 1379.407367][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1379.407414][   T30] audit: type=1400 audit(1755082913.247:815): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=16184 comm="syz.5.2553" netif=wpan0
[ 1382.915437][T15981] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1385.100582][T16237] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1386.258933][T15981] veth0_vlan: entered promiscuous mode
[ 1387.079857][T15981] veth1_vlan: entered promiscuous mode
[ 1387.369826][T15981] veth0_macvtap: entered promiscuous mode
[ 1387.413262][T15981] veth1_macvtap: entered promiscuous mode
[ 1387.492212][T15981] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1388.325213][T15981] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1389.639860][T15981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1389.675950][T15981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1389.684731][T15981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1389.716685][T16274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'.
[ 1389.726202][T15981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1389.738900][T16274] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2572'.
[ 1390.096319][ T5845] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[ 1390.346045][ T5845] usb 6-1: Using ep0 maxpacket: 16
[ 1390.582475][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1390.700844][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1390.836294][ T5845] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1390.950310][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.014536][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'.
[ 1391.024281][T16285] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'.
[ 1393.046903][ T5845] usb 6-1: config 0 descriptor??
[ 1393.121820][ T5845] usb 6-1: can't set config #0, error -71
[ 1393.201072][ T5845] usb 6-1: USB disconnect, device number 39
[ 1393.288497][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.417184][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1393.455566][ T5980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1393.476631][ T5980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1395.029194][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'.
[ 1395.888214][T16319] 9pnet_fd: Insufficient options for proto=fd
[ 1400.258300][T11083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1400.945947][ T5954] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 1401.790288][ T5954] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1401.816141][ T5954] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1401.864688][ T5954] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1401.908221][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1401.947499][T16336] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1401.971006][ T5954] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1406.339626][ T5954] usb 3-1: USB disconnect, device number 46
[ 1406.531897][T16335] uprobe: syz.2.2590:16335 failed to unregister, leaking uprobe
[ 1408.080662][T16358] loop6: detected capacity change from 0 to 524288000
[ 1408.371838][T16358] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1408.936351][T16358] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1408.969730][T16366] No source specified
[ 1409.096048][T16359] loop6: detected capacity change from 524288000 to 0
[ 1409.103139][T16358] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1409.119085][T16358] ldm_validate_partition_table(): Disk read failed.
[ 1409.136196][T16358] Dev loop6: unable to read RDB block 0
[ 1409.146018][T16358]  loop6: unable to read partition table
[ 1409.205525][T16358] loop6: partition table beyond EOD, truncated
[ 1409.416242][ T5954] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1409.416780][T16358] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1409.529321][T15519] IPVS: starting estimator thread 0...
[ 1409.936043][ T5954] usb 2-1: Using ep0 maxpacket: 16
[ 1409.955343][ T5954] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1409.969025][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1409.980335][T16377] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1410.014115][ T5954] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1410.044514][ T5954] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1410.061717][T16383] kAFS: Can only specify source 'none' with -o dyn
[ 1410.066015][ T5954] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1411.310007][ T5954] usb 2-1: string descriptor 0 read error: -71
[ 1412.200527][ T5954] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1412.378878][ T5954] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1412.389825][ T5954] usb 2-1: config 0 descriptor??
[ 1412.396897][ T5954] usb 2-1: can't set config #0, error -71
[ 1412.413711][ T5954] usb 2-1: USB disconnect, device number 45
[ 1413.459134][T16410] netlink: 'syz.4.2613': attribute type 8 has an invalid length.
[ 1418.042136][T16448] loop6: detected capacity change from 0 to 524288000
[ 1418.136654][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.259761][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.271123][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.282006][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1418.977916][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.146010][T16452] loop6: detected capacity change from 524288000 to 0
[ 1419.184878][T16448] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1419.196179][T16448] ldm_validate_partition_table(): Disk read failed.
[ 1419.216909][T16448] Dev loop6: unable to read RDB block 0
[ 1419.241235][T16448]  loop6: unable to read partition table
[ 1419.277669][T16448] loop6: partition table beyond EOD, truncated
[ 1419.844074][T16448] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1420.441546][T16479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'.
[ 1420.527478][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2629'.
[ 1421.176232][T16477] orangefs_mount: mount request failed with -4
[ 1422.443796][T16493] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2632'.
[ 1422.453089][T16493] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2632'.
[ 1424.816274][T11083] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1428.262130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.658687][T11083] Bluetooth: hci6: Opcode 0x1003 failed: -110
[ 1428.684091][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1428.983446][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1431.882763][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1431.906007][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1433.231301][T16545] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2644'.
[ 1434.970467][T16552] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2646'.
[ 1434.980249][T16552] netlink: 116 bytes leftover after parsing attributes in process `syz.7.2646'.
[ 1435.043937][   T30] audit: type=1326 audit(1755082969.427:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1435.091299][   T30] audit: type=1326 audit(1755082969.427:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1435.125553][   T30] audit: type=1326 audit(1755082969.457:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1435.329363][   T30] audit: type=1326 audit(1755082969.457:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1435.407862][T16565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2647'.
[ 1436.099983][   T30] audit: type=1326 audit(1755082969.457:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1436.126043][   T30] audit: type=1326 audit(1755082969.467:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1436.156785][   T30] audit: type=1326 audit(1755082969.467:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1436.178981][   T30] audit: type=1326 audit(1755082969.477:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1436.203716][   T30] audit: type=1326 audit(1755082969.487:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1436.231281][   T30] audit: type=1326 audit(1755082969.487:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16561 comm="syz.4.2647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9720d8ebe9 code=0x7ffc0000
[ 1438.922270][T16571] overlayfs: conflicting lowerdir path
[ 1439.513853][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2655'.
[ 1439.523464][T16590] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2655'.
[ 1440.186249][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1441.553104][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1441.635265][T16594] FAULT_INJECTION: forcing a failure.
[ 1441.635265][T16594] name failslab, interval 1, probability 0, space 0, times 0
[ 1441.675856][   T30] kauditd_printk_skb: 61 callbacks suppressed
[ 1441.675879][   T30] audit: type=1326 audit(1755082976.017:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16580 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225238ebe9 code=0x7ffc0000
[ 1441.709401][T16594] CPU: 1 UID: 0 PID: 16594 Comm: syz.1.2654 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1441.709434][T16594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1441.709449][T16594] Call Trace:
[ 1441.709460][T16594]  <TASK>
[ 1441.709470][T16594]  dump_stack_lvl+0x189/0x250
[ 1441.709503][T16594]  ? __pfx____ratelimit+0x10/0x10
[ 1441.709528][T16594]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1441.709553][T16594]  ? __pfx__printk+0x10/0x10
[ 1441.709589][T16594]  ? __pfx___might_resched+0x10/0x10
[ 1441.709619][T16594]  should_fail_ex+0x414/0x560
[ 1441.709648][T16594]  should_failslab+0xa8/0x100
[ 1441.709675][T16594]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1441.709699][T16594]  ? __alloc_skb+0x112/0x2d0
[ 1441.709735][T16594]  __alloc_skb+0x112/0x2d0
[ 1441.709770][T16594]  netlink_sendmsg+0x5c6/0xb30
[ 1441.709814][T16594]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1441.709855][T16594]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1441.709877][T16594]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1441.709909][T16594]  __sock_sendmsg+0x21c/0x270
[ 1441.709940][T16594]  ____sys_sendmsg+0x505/0x830
[ 1441.709980][T16594]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1441.710025][T16594]  ? import_iovec+0x74/0xa0
[ 1441.710060][T16594]  ___sys_sendmsg+0x21f/0x2a0
[ 1441.710097][T16594]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1441.710177][T16594]  ? __fget_files+0x2a/0x420
[ 1441.710202][T16594]  ? __fget_files+0x3a0/0x420
[ 1441.710239][T16594]  __x64_sys_sendmsg+0x19b/0x260
[ 1441.710276][T16594]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1441.710320][T16594]  ? __pfx_ksys_write+0x10/0x10
[ 1441.710337][T16594]  ? rcu_is_watching+0x15/0xb0
[ 1441.710367][T16594]  ? do_syscall_64+0xbe/0x3b0
[ 1441.710394][T16594]  do_syscall_64+0xfa/0x3b0
[ 1441.710417][T16594]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1441.710441][T16594]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.710462][T16594]  ? clear_bhb_loop+0x60/0xb0
[ 1441.710488][T16594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.710509][T16594] RIP: 0033:0x7fb40078ebe9
[ 1441.710529][T16594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1441.710547][T16594] RSP: 002b:00007fb401566038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1441.710569][T16594] RAX: ffffffffffffffda RBX: 00007fb4009b5fa0 RCX: 00007fb40078ebe9
[ 1441.710585][T16594] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[ 1441.710598][T16594] RBP: 00007fb401566090 R08: 0000000000000000 R09: 0000000000000000
[ 1441.710611][T16594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1441.710625][T16594] R13: 00007fb4009b6038 R14: 00007fb4009b5fa0 R15: 00007ffe7dbad178
[ 1441.710659][T16594]  </TASK>
[ 1441.978793][   T30] audit: type=1326 audit(1755082976.057:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16580 comm="syz.2.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f225238ebe9 code=0x7ffc0000
[ 1442.143623][T16600] sctp: [Deprecated]: syz.4.2656 (pid 16600) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1442.143623][T16600] Use struct sctp_sack_info instead
[ 1442.364306][T16601] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2658'.
[ 1445.672044][T16620] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2663'.
[ 1445.771435][T16627] sctp: [Deprecated]: syz.1.2664 (pid 16627) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1445.771435][T16627] Use struct sctp_sack_info instead
[ 1446.087512][ T5925] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1446.330791][ T5925] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1446.342934][ T5925] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1446.357170][ T5925] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1446.370969][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1446.438694][T16625] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1446.483021][ T5925] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1446.980458][   T49] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1449.065993][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1449.081415][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1450.223207][T16651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2670'.
[ 1450.606726][ T5925] usb 6-1: USB disconnect, device number 40
[ 1451.682152][T16656] FAULT_INJECTION: forcing a failure.
[ 1451.682152][T16656] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1451.853138][T16656] CPU: 0 UID: 0 PID: 16656 Comm: syz.1.2672 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1451.853170][T16656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1451.853184][T16656] Call Trace:
[ 1451.853193][T16656]  <TASK>
[ 1451.853204][T16656]  dump_stack_lvl+0x189/0x250
[ 1451.853235][T16656]  ? __pfx____ratelimit+0x10/0x10
[ 1451.853268][T16656]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1451.853293][T16656]  ? __pfx__printk+0x10/0x10
[ 1451.853326][T16656]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1451.853371][T16656]  should_fail_ex+0x414/0x560
[ 1451.853401][T16656]  _copy_from_user+0x2d/0xb0
[ 1451.853434][T16656]  sg_io+0x29f/0x8a0
[ 1451.853464][T16656]  scsi_ioctl+0x1399/0x1fb0
[ 1451.853493][T16656]  ? __pfx_scsi_ioctl+0x10/0x10
[ 1451.853549][T16656]  ? kasan_quarantine_put+0xdd/0x220
[ 1451.853582][T16656]  ? __pfx___might_resched+0x10/0x10
[ 1451.853615][T16656]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1451.853649][T16656]  ? scsi_block_when_processing_errors+0x390/0x470
[ 1451.853674][T16656]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1451.853698][T16656]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[ 1451.853747][T16656]  sg_ioctl+0x1886/0x2230
[ 1451.853789][T16656]  ? __pfx_sg_ioctl+0x10/0x10
[ 1451.853826][T16656]  ? __fget_files+0x2a/0x420
[ 1451.853850][T16656]  ? __fget_files+0x3a0/0x420
[ 1451.853874][T16656]  ? __fget_files+0x2a/0x420
[ 1451.853898][T16656]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1451.853925][T16656]  ? __pfx_sg_ioctl+0x10/0x10
[ 1451.853954][T16656]  __se_sys_ioctl+0xfc/0x170
[ 1451.853990][T16656]  do_syscall_64+0xfa/0x3b0
[ 1451.854014][T16656]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1451.854038][T16656]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1451.854060][T16656]  ? clear_bhb_loop+0x60/0xb0
[ 1451.854088][T16656]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1451.854115][T16656] RIP: 0033:0x7fb40078ebe9
[ 1451.854143][T16656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1451.854163][T16656] RSP: 002b:00007fb401566038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1451.854188][T16656] RAX: ffffffffffffffda RBX: 00007fb4009b5fa0 RCX: 00007fb40078ebe9
[ 1451.854205][T16656] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000003
[ 1451.854220][T16656] RBP: 00007fb401566090 R08: 0000000000000000 R09: 0000000000000000
[ 1451.854235][T16656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1451.854248][T16656] R13: 00007fb4009b6038 R14: 00007fb4009b5fa0 R15: 00007ffe7dbad178
[ 1451.854283][T16656]  </TASK>
[ 1456.365180][T16671] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2677'.
[ 1457.536229][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1458.394212][T16687] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2682'.
[ 1461.140247][T16512] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1461.153036][T14010] Bluetooth: hci4: command 0x1003 tx timeout
[ 1461.493567][T16697] syz.7.2685: attempt to access beyond end of device
[ 1461.493567][T16697] nbd7: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1461.574268][T16697] (syz.7.2685,16697,1):ocfs2_get_sector:1714 ERROR: status = -5
[ 1461.838797][T16697] (syz.7.2685,16697,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1462.245526][T16697] (syz.7.2685,16697,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1462.254499][T16697] (syz.7.2685,16697,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1463.666441][ T5886] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1463.974579][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1464.029197][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1464.081462][ T5886] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1464.363664][T16731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2694'.
[ 1464.880526][ T5886] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1464.893706][ T5886] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1464.903989][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1464.958520][ T5886] usb 3-1: config 0 descriptor??
[ 1464.965450][T16721] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1465.061101][T16512] Bluetooth: hci1: unexpected subevent 0x01 length: 11 < 18
[ 1465.356865][T16744] loop6: detected capacity change from 0 to 524288000
[ 1465.364762][T16744] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1465.374268][T16744] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1465.476518][T16744] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1465.495644][ T5886] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xd
[ 1465.503265][ T5886] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[ 1465.510974][ T5886] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[ 1466.163889][T16721] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2691'.
[ 1466.219584][T16746] loop6: detected capacity change from 524288000 to 0
[ 1466.236826][T16744] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1466.253483][ T5886] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[ 1466.722737][T16744] ldm_validate_partition_table(): Disk read failed.
[ 1466.746225][ T5886] usb 3-1: USB disconnect, device number 47
[ 1466.768714][T16744] Dev loop6: unable to read RDB block 0
[ 1466.866171][T16744]  loop6: unable to read partition table
[ 1467.037524][T10300] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1467.077280][T16744] loop6: partition table beyond EOD, truncated
[ 1467.083608][T16744] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1467.266083][T10300] usb 5-1: Using ep0 maxpacket: 16
[ 1467.277306][T10300] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1467.335966][T10300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1467.359979][T10300] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1467.370050][T10300] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1467.383576][T10300] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1467.408353][T10300] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1467.424955][T10300] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1467.434819][T10300] usb 5-1: Manufacturer: syz
[ 1467.442702][T10300] usb 5-1: config 0 descriptor??
[ 1469.833052][T14010] Bluetooth: hci3: command 0x0405 tx timeout
[ 1470.006210][T10300] rc_core: IR keymap rc-hauppauge not found
[ 1470.027836][T10300] Registered IR keymap rc-empty
[ 1470.060263][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1470.921558][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1470.950496][T10300] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1470.967630][T10300] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input47
[ 1471.522516][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'.
[ 1471.633100][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1471.742793][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1471.848695][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1471.887340][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1471.956902][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1471.995990][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1472.024152][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1472.178189][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1472.215906][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1473.146597][T10300] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1473.170686][T10300] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1473.712151][T10300] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1473.760810][T10300] usb 5-1: USB disconnect, device number 38
[ 1474.844573][ T5925] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1474.949926][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2722'.
[ 1475.861903][ T5925] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[ 1475.871452][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1475.898883][ T5925] usb 5-1: Product: syz
[ 1475.923528][ T5925] usb 5-1: Manufacturer: syz
[ 1475.936443][ T5925] usb 5-1: SerialNumber: syz
[ 1475.951372][ T5925] usb 5-1: config 0 descriptor??
[ 1476.019474][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'.
[ 1476.029745][T16829] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2723'.
[ 1478.051304][ T5925] usb 5-1: can't set config #0, error -71
[ 1478.064835][ T5925] usb 5-1: USB disconnect, device number 39
[ 1478.109039][T16833] loop6: detected capacity change from 0 to 524288000
[ 1478.117561][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.125978][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.134225][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.142550][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.174139][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.296306][T16834] loop6: detected capacity change from 524288000 to 0
[ 1478.303827][T16833] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1478.517058][T16833] ldm_validate_partition_table(): Disk read failed.
[ 1478.524517][T16833] Dev loop6: unable to read RDB block 0
[ 1478.687639][ T5925] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1478.716198][T16833]  loop6: unable to read partition table
[ 1478.864951][T16833] loop6: partition table beyond EOD, truncated
[ 1478.886120][T16833] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1479.046028][ T5925] usb 5-1: Using ep0 maxpacket: 16
[ 1479.053112][ T5925] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1479.177119][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1479.699434][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1479.719921][ T5925] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1479.730101][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1479.765984][ T5925] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1479.796173][ T5925] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1479.822771][ T5925] usb 5-1: Manufacturer: syz
[ 1479.847479][ T5925] usb 5-1: config 0 descriptor??
[ 1480.187107][ T5925] rc_core: IR keymap rc-hauppauge not found
[ 1480.194760][ T5925] Registered IR keymap rc-empty
[ 1480.207514][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.226621][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.248567][ T5925] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1480.281430][ T5925] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input48
[ 1480.345212][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.376336][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.406289][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.436284][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.475912][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.496350][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.529872][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.556368][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.607111][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.643371][ T5925] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1480.702787][ T5925] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1481.325825][ T5925] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1481.356329][ T5925] usb 5-1: USB disconnect, device number 40
[ 1481.463620][T16874] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1481.951967][T16879] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2737'.
[ 1486.699586][T16907] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2746'.
[ 1486.944265][T16908] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2744'.
[ 1486.959309][T16908] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2744'.
[ 1489.715499][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1489.722157][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1489.992576][ T5936] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1490.212275][ T5936] usb 6-1: Using ep0 maxpacket: 8
[ 1490.219010][ T5936] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[ 1490.236307][ T5936] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1490.249218][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1490.270658][ T5936] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1490.295472][ T5936] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1490.346060][ T5936] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1490.380144][ T5936] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1490.567278][T16946] kAFS: Can only specify source 'none' with -o dyn
[ 1491.129187][ T5936] usb 6-1: GET_CAPABILITIES returned 0
[ 1491.135333][ T5936] usbtmc 6-1:16.0: can't read capabilities
[ 1492.010913][ T5936] usb 6-1: USB disconnect, device number 41
[ 1492.298682][T16961] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2757'.
[ 1493.182297][T16962] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2758'.
[ 1495.029807][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2764'.
[ 1496.986798][T17000] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2765'.
[ 1500.466061][ T5954] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1500.626001][ T5954] usb 2-1: Using ep0 maxpacket: 8
[ 1500.667219][ T5954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1500.677583][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1500.764786][ T5954] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87
[ 1500.869829][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 164, changing to 11
[ 1500.922745][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2036, setting to 1024
[ 1501.040406][T17043] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2778'.
[ 1501.041097][ T5954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1501.133221][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1501.210998][ T5954] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87
[ 1501.245947][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 164, changing to 11
[ 1501.309466][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2036, setting to 1024
[ 1501.426412][ T5954] usb 2-1: config 168 descriptor has 1 excess byte, ignoring
[ 1501.433924][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[ 1501.501153][ T5954] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xC7, changing to 0x87
[ 1501.521821][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 164, changing to 11
[ 1501.547334][ T5954] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 2036, setting to 1024
[ 1501.620003][ T5954] usb 2-1: string descriptor 0 read error: -22
[ 1501.628416][ T5954] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[ 1502.222048][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1502.486244][ T5954] adutux 2-1:168.0: ADU100  now attached to /dev/usb/adutux0
[ 1502.710628][ T5954] usb 2-1: USB disconnect, device number 46
[ 1505.898003][T17099] loop6: detected capacity change from 0 to 524288000
[ 1505.905284][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1505.913342][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1505.933576][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1505.969556][T17100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'.
[ 1505.986989][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1506.024041][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1506.053699][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1506.190968][T17101] loop6: detected capacity change from 524288000 to 0
[ 1506.197925][T17099] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1506.206052][T17099] ldm_validate_partition_table(): Disk read failed.
[ 1506.212683][T17099] Dev loop6: unable to read RDB block 0
[ 1506.221923][T17099]  loop6: unable to read partition table
[ 1506.232102][T17099] loop6: partition table beyond EOD, truncated
[ 1506.242548][T17099] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1506.436303][ T5936] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1506.616212][ T5936] usb 6-1: Using ep0 maxpacket: 16
[ 1506.642537][ T5936] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1506.678043][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1506.708899][ T5936] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1506.720550][ T5936] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1506.734069][ T5936] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1506.773993][ T5936] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1506.791646][ T5936] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1506.812624][ T5936] usb 6-1: Manufacturer: syz
[ 1506.863959][ T5936] usb 6-1: config 0 descriptor??
[ 1507.546377][ T5936] rc_core: IR keymap rc-hauppauge not found
[ 1507.558242][ T5936] Registered IR keymap rc-empty
[ 1507.565061][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1507.597251][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1507.847011][ T5936] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1507.874157][ T5936] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input49
[ 1508.906029][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1508.963855][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.016555][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.056211][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.131896][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.195938][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.236217][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.263837][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.325955][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.363669][ T5936] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1509.398265][T14010] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1509.408080][ T5936] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 1509.421412][T14010] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1509.433709][T14010] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1509.449810][T14010] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1509.460040][T14010] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1509.462700][ T5936] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1509.622256][ T5936] usb 6-1: USB disconnect, device number 42
[ 1509.692697][ T5979] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.009166][T17144] kAFS: Can only specify source 'none' with -o dyn
[ 1510.780849][ T5979] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.781004][T17148] CIFS: VFS: Malformed UNC in devname
[ 1510.913205][ T5979] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1511.617531][T14010] Bluetooth: hci0: command tx timeout
[ 1511.940033][T17131] chnl_net:caif_netlink_parms(): no params data found
[ 1511.941939][T17163] loop6: detected capacity change from 0 to 524288000
[ 1511.963085][T17163] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1511.985323][T17163] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1512.011104][T17163] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1512.054761][ T5979] bridge_slave_1: left allmulticast mode
[ 1512.061011][T17164] loop6: detected capacity change from 524288000 to 0
[ 1512.061115][T17163] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1512.068530][ T5979] bridge_slave_1: left promiscuous mode
[ 1512.082588][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1512.094983][T17163] ldm_validate_partition_table(): Disk read failed.
[ 1512.102590][T17163] Dev loop6: unable to read RDB block 0
[ 1512.109296][T17163]  loop6: unable to read partition table
[ 1512.115217][T17163] loop6: partition table beyond EOD, truncated
[ 1512.126480][T17163] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1512.207567][   T56] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1512.345885][ T5923] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1513.649039][ T5923] usb 6-1: Using ep0 maxpacket: 16
[ 1513.696964][T16512] Bluetooth: hci0: command tx timeout
[ 1514.180416][ T5923] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1514.208041][ T5979] bridge_slave_0: left allmulticast mode
[ 1514.213889][ T5979] bridge_slave_0: left promiscuous mode
[ 1514.219725][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1514.236371][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1514.256611][ T5923] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1514.260656][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1514.274626][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1514.326525][ T5923] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1514.365422][ T5923] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1514.455394][ T5923] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1514.499896][ T5923] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1514.520395][ T5923] usb 6-1: Manufacturer: syz
[ 1514.597379][ T5923] usb 6-1: config 0 descriptor??
[ 1515.755897][ T5923] rc_core: IR keymap rc-hauppauge not found
[ 1515.761944][ T5923] Registered IR keymap rc-empty
[ 1515.770585][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1515.792887][T14010] Bluetooth: hci0: command tx timeout
[ 1515.833323][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1515.880942][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 1515.938262][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input50
[ 1515.962648][ T5979] bond1 (unregistering): (slave gretap1): Releasing active interface
[ 1515.986943][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.016733][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.036020][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.065186][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.103991][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.125935][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.196519][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.232012][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.256229][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.296954][ T5923] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 1516.338527][ T5923] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[ 1516.357252][ T5923] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1516.676212][ T5923] usb 6-1: USB disconnect, device number 43
[ 1517.121149][ T5979] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1517.143009][ T5979] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1517.182288][ T5979] bond0 (unregistering): Released all slaves
[ 1517.201660][ T5979] bond1 (unregistering): Released all slaves
[ 1517.309802][T17207] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2821'.
[ 1517.323251][T17207] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2821'.
[ 1517.487589][ T5979] bond2 (unregistering): (slave vlan2): Releasing active interface
[ 1517.501959][ T5979] bond2 (unregistering): Released all slaves
[ 1517.566684][T17195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1517.856159][T14010] Bluetooth: hci0: command tx timeout
[ 1518.120882][T17218] Bluetooth: MGMT ver 1.23
[ 1518.342405][T17131] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1518.370022][T17131] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.392116][T17131] bridge_slave_0: entered allmulticast mode
[ 1518.408718][T17131] bridge_slave_0: entered promiscuous mode
[ 1518.473137][T17131] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1519.412234][T17131] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1519.425542][T17131] bridge_slave_1: entered allmulticast mode
[ 1519.439175][T17131] bridge_slave_1: entered promiscuous mode
[ 1519.499033][ T5979] hsr_slave_0: left promiscuous mode
[ 1519.526317][ T5979] hsr_slave_1: left promiscuous mode
[ 1519.563862][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1519.601871][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1519.614543][ T5979] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1519.639677][ T5979] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1519.799814][ T5979] veth0_macvtap: left allmulticast mode
[ 1519.814608][ T5979] veth0_macvtap: left promiscuous mode
[ 1519.852720][ T5979] veth1_vlan: left promiscuous mode
[ 1519.877586][ T5979] veth0_vlan: left promiscuous mode
[ 1520.203500][T16512] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1520.210192][T14010] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1528.353274][ T5979] team0 (unregistering): Port device team_slave_1 removed
[ 1528.425327][ T5979] team0 (unregistering): Port device team_slave_0 removed
[ 1529.931836][   T61] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1532.295845][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1532.302493][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1533.583958][T17288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2843'.
[ 1533.705539][T17131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1533.760088][T17131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1536.199975][T17131] team0: Port device team_slave_0 added
[ 1537.672704][T17131] team0: Port device team_slave_1 added
[ 1539.308366][   T56] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1541.164535][T17131] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1541.187032][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1541.264401][T17131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1541.294945][ T5979] IPVS: stop unused estimator thread 0...
[ 1541.310936][T17334] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2856'.
[ 1541.322167][T17131] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1541.331046][T17131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1541.378679][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1541.391290][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1541.446071][T17131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1542.371374][T17131] hsr_slave_0: entered promiscuous mode
[ 1542.381698][T17131] hsr_slave_1: entered promiscuous mode
[ 1543.013279][T17348] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2859'.
[ 1546.546549][ T5886] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1547.108871][ T5886] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1547.688658][ T5886] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1547.698945][ T5886] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1547.806161][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1547.835647][T17368] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1547.868511][ T5886] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1550.508869][ T5845] usb 3-1: USB disconnect, device number 48
[ 1551.477955][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1551.484554][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1552.663265][T17411] netlink: 'syz.2.2875': attribute type 5 has an invalid length.
[ 1553.162844][T17131] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1553.487413][T17131] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1554.346375][T17131] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1554.369055][T17131] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1557.203070][T17131] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1557.224671][T17131] 8021q: adding VLAN 0 to HW filter on device team0
[ 1557.272751][T17131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1557.283326][T17131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1557.313687][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1557.320966][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1558.564884][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1558.572156][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1558.677562][T17439] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2882'.
[ 1560.927346][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1561.109332][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1561.276870][T17472] FAULT_INJECTION: forcing a failure.
[ 1561.276870][T17472] name failslab, interval 1, probability 0, space 0, times 0
[ 1561.290325][T17472] CPU: 0 UID: 0 PID: 17472 Comm: syz.5.2887 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1561.290356][T17472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1561.290369][T17472] Call Trace:
[ 1561.290378][T17472]  <TASK>
[ 1561.290387][T17472]  dump_stack_lvl+0x189/0x250
[ 1561.290419][T17472]  ? __pfx____ratelimit+0x10/0x10
[ 1561.290444][T17472]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1561.290468][T17472]  ? __pfx__printk+0x10/0x10
[ 1561.290513][T17472]  should_fail_ex+0x414/0x560
[ 1561.290543][T17472]  should_failslab+0xa8/0x100
[ 1561.290571][T17472]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1561.290593][T17472]  ? sctp_add_bind_addr+0x8c/0x370
[ 1561.290625][T17472]  sctp_add_bind_addr+0x8c/0x370
[ 1561.290657][T17472]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1561.290688][T17472]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1561.290727][T17472]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1561.290755][T17472]  ? sctp_v6_is_any+0x64/0x80
[ 1561.290784][T17472]  ? sctp_copy_one_addr+0x93/0x360
[ 1561.290813][T17472]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1561.290840][T17472]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1561.290885][T17472]  sctp_connect_new_asoc+0x2e0/0x690
[ 1561.290922][T17472]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1561.290952][T17472]  ? __local_bh_enable_ip+0x13e/0x1c0
[ 1561.290984][T17472]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1561.291009][T17472]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1561.291038][T17472]  sctp_sendmsg+0x155c/0x2810
[ 1561.291066][T17472]  ? rcu_is_watching+0x15/0xb0
[ 1561.291104][T17472]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1561.291134][T17472]  ? irqentry_exit+0x74/0x90
[ 1561.291156][T17472]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1561.291209][T17472]  ? inet_sendmsg+0x15b/0x370
[ 1561.291235][T17472]  ? inet_sendmsg+0x2f4/0x370
[ 1561.291263][T17472]  __sock_sendmsg+0x19c/0x270
[ 1561.291300][T17472]  ____sys_sendmsg+0x52d/0x830
[ 1561.291340][T17472]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1561.291384][T17472]  ? import_iovec+0x74/0xa0
[ 1561.291419][T17472]  ___sys_sendmsg+0x21f/0x2a0
[ 1561.291456][T17472]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1561.291498][T17472]  ? rcu_read_unlock_special+0x3fe/0x4c0
[ 1561.291559][T17472]  ? __fget_files+0x2a/0x420
[ 1561.291584][T17472]  ? __fget_files+0x3a0/0x420
[ 1561.291621][T17472]  __sys_sendmmsg+0x227/0x430
[ 1561.291660][T17472]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1561.291740][T17472]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1561.291777][T17472]  do_syscall_64+0xfa/0x3b0
[ 1561.291803][T17472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.291824][T17472]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1561.291845][T17472]  ? clear_bhb_loop+0x60/0xb0
[ 1561.291872][T17472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1561.291893][T17472] RIP: 0033:0x7f6d47b8ebe9
[ 1561.291913][T17472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1561.291933][T17472] RSP: 002b:00007f6d4892f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1561.291956][T17472] RAX: ffffffffffffffda RBX: 00007f6d47db6090 RCX: 00007f6d47b8ebe9
[ 1561.291972][T17472] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000008
[ 1561.291987][T17472] RBP: 00007f6d4892f090 R08: 0000000000000000 R09: 0000000000000000
[ 1561.292001][T17472] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002
[ 1561.292014][T17472] R13: 00007f6d47db6128 R14: 00007f6d47db6090 R15: 00007fff05a20dd8
[ 1561.292049][T17472]  </TASK>
[ 1561.627636][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1562.207352][T17131] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1562.455807][T17481] FAULT_INJECTION: forcing a failure.
[ 1562.455807][T17481] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1562.469755][T17481] CPU: 0 UID: 0 PID: 17481 Comm: syz.7.2889 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1562.469783][T17481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1562.469799][T17481] Call Trace:
[ 1562.469809][T17481]  <TASK>
[ 1562.469819][T17481]  dump_stack_lvl+0x189/0x250
[ 1562.469848][T17481]  ? __pfx____ratelimit+0x10/0x10
[ 1562.469872][T17481]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1562.469898][T17481]  ? __pfx__printk+0x10/0x10
[ 1562.469927][T17481]  ? __might_fault+0xb0/0x130
[ 1562.469962][T17481]  should_fail_ex+0x414/0x560
[ 1562.469990][T17481]  _copy_from_user+0x2d/0xb0
[ 1562.470022][T17481]  __sys_bpf+0x1ed/0x860
[ 1562.470057][T17481]  ? __pfx___sys_bpf+0x10/0x10
[ 1562.470104][T17481]  ? ksys_write+0x22a/0x250
[ 1562.470129][T17481]  ? __pfx_ksys_write+0x10/0x10
[ 1562.470156][T17481]  ? rcu_is_watching+0x15/0xb0
[ 1562.470189][T17481]  __x64_sys_bpf+0x7c/0x90
[ 1562.470220][T17481]  do_syscall_64+0xfa/0x3b0
[ 1562.470245][T17481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1562.470267][T17481]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1562.470290][T17481]  ? clear_bhb_loop+0x60/0xb0
[ 1562.470318][T17481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1562.470340][T17481] RIP: 0033:0x7f057838ebe9
[ 1562.470361][T17481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1562.470381][T17481] RSP: 002b:00007f0579210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1562.470406][T17481] RAX: ffffffffffffffda RBX: 00007f05785b6090 RCX: 00007f057838ebe9
[ 1562.470423][T17481] RDX: 0000000000000080 RSI: 0000200000000040 RDI: 0000000000000005
[ 1562.470438][T17481] RBP: 00007f0579210090 R08: 0000000000000000 R09: 0000000000000000
[ 1562.470501][T17481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1562.470515][T17481] R13: 00007f05785b6128 R14: 00007f05785b6090 R15: 00007ffd57090d38
[ 1562.470551][T17481]  </TASK>
[ 1562.660963][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1563.218117][T17131] veth0_vlan: entered promiscuous mode
[ 1564.039968][T17131] veth1_vlan: entered promiscuous mode
[ 1564.624631][T17131] veth0_macvtap: entered promiscuous mode
[ 1565.700201][T17131] veth1_macvtap: entered promiscuous mode
[ 1565.946956][T17131] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1566.272856][T17131] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1566.288517][T17131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.302922][T17131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.313557][T17131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.328724][T17131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1566.531088][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1566.550740][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1566.633813][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1566.644379][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1567.224632][ T5886] libceph: connect (1)[c::]:6789 error -101
[ 1567.286523][ T5886] libceph: mon0 (1)[c::]:6789 connect error
[ 1567.360726][ T5834] syz_tun (unregistering): left allmulticast mode
[ 1567.367315][ T5936] libceph: connect (1)[c::]:6789 error -101
[ 1567.367534][ T5936] libceph: mon0 (1)[c::]:6789 connect error
[ 1567.530269][T17515] ceph: No mds server is up or the cluster is laggy
[ 1567.658563][ T5886] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1567.738996][T17534] libceph: connect (1)[c::]:6789 error -101
[ 1567.745217][T17534] libceph: mon0 (1)[c::]:6789 connect error
[ 1567.851701][ T5886] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1567.868654][ T5886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1567.904404][ T5886] usb 5-1: Product: syz
[ 1567.926064][ T5886] usb 5-1: Manufacturer: syz
[ 1567.936671][ T5886] usb 5-1: SerialNumber: syz
[ 1567.981961][ T5886] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1568.008325][ T5954] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1569.681869][T17543] netlink: 120 bytes leftover after parsing attributes in process `syz.7.2902'.
[ 1569.694445][T17543] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2902'.
[ 1569.777702][ T5954] usb 5-1: Service connection timeout for: 256
[ 1569.783997][ T5954] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1569.928893][ T5954] ath9k_htc: Failed to initialize the device
[ 1569.973599][ T5954] usb 5-1: ath9k_htc: USB layer deinitialized
[ 1570.027250][T16512] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1570.044212][T16512] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1570.060075][T16512] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1570.177904][T16512] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1570.186980][T16512] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1571.346162][ T5886] usb 5-1: USB disconnect, device number 41
[ 1571.914796][T17564] openvswitch: netlink: Multiple metadata blocks provided
[ 1572.260695][T14010] Bluetooth: hci2: command tx timeout
[ 1572.540568][T17572] input: syz1 as /devices/virtual/input/input51
[ 1572.851380][T17576] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2911'.
[ 1572.860836][T17576] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2911'.
[ 1573.161535][T17583] netlink: 'syz.4.2912': attribute type 5 has an invalid length.
[ 1573.825006][T17544] chnl_net:caif_netlink_parms(): no params data found
[ 1575.666372][T16512] Bluetooth: hci2: command tx timeout
[ 1575.950477][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1575.951906][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1577.699092][T14010] Bluetooth: hci2: command tx timeout
[ 1577.791943][T17544] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1577.884129][T17544] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1578.120905][T17544] bridge_slave_0: entered allmulticast mode
[ 1578.336831][T17544] bridge_slave_0: entered promiscuous mode
[ 1578.362297][T17544] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1578.394546][T17544] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1578.412573][T17544] bridge_slave_1: entered allmulticast mode
[ 1578.422902][T17618] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2923'.
[ 1579.284146][T17544] bridge_slave_1: entered promiscuous mode
[ 1579.796077][T14010] Bluetooth: hci2: command tx timeout
[ 1580.066372][T17544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1581.472587][T17544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1581.691819][T17630] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2924'.
[ 1581.701423][T17630] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2924'.
[ 1581.797995][T17632] misc userio: Invalid payload size
[ 1581.803803][T17632] misc userio: Invalid payload size
[ 1581.811963][T17632] misc userio: The device must be registered before sending interrupts
[ 1582.424528][T17544] team0: Port device team_slave_0 added
[ 1582.451351][T17544] team0: Port device team_slave_1 added
[ 1582.625628][T16528] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1584.665922][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1584.673087][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1588.826495][T17665] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[ 1589.519471][T17544] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1589.546259][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1589.600830][T17544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1589.621730][T17544] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1589.629034][T17544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1590.001164][T17544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1590.069653][T17673] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1590.102305][T17673] pim6reg0: linktype set to 768
[ 1590.199995][T17678] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2939'.
[ 1590.209560][T17678] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2939'.
[ 1590.711148][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'.
[ 1590.720693][T17683] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'.
[ 1592.758128][T17682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2940'.
[ 1592.886836][T17544] hsr_slave_0: entered promiscuous mode
[ 1592.947078][T17544] hsr_slave_1: entered promiscuous mode
[ 1592.958015][T17544] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1592.969392][T17544] Cannot create hsr debugfs directory
[ 1593.258205][T17692] netlink: 'syz.4.2942': attribute type 5 has an invalid length.
[ 1594.025007][T17694] loop6: detected capacity change from 0 to 524288000
[ 1594.037025][T17694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1594.056132][T17694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1594.064129][T17694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1594.109213][T17694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1594.376346][T17696] loop6: detected capacity change from 524288000 to 0
[ 1594.396328][T17694] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1594.475823][T15519] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1594.537325][T17694] ldm_validate_partition_table(): Disk read failed.
[ 1594.544172][T17694] Dev loop6: unable to read RDB block 0
[ 1594.579379][T17694]  loop6: unable to read partition table
[ 1594.593552][T17694] loop6: partition table beyond EOD, truncated
[ 1594.600752][T17694] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1594.865851][T15519] usb 5-1: Using ep0 maxpacket: 16
[ 1595.247957][T15519] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1595.258226][T17544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1595.395056][T15519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1595.406597][T15519] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1595.416360][T15519] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1595.433290][T15519] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1595.448635][T15519] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1595.647503][T15519] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1595.655582][T15519] usb 5-1: Manufacturer: syz
[ 1595.932591][T17544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1596.442208][T15519] usb 5-1: config 0 descriptor??
[ 1596.787931][T17720] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2951'.
[ 1597.088798][ T5954] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1597.165875][T15519] rc_core: IR keymap rc-hauppauge not found
[ 1597.182141][T15519] Registered IR keymap rc-empty
[ 1597.192113][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1597.203135][T17544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1597.240271][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1597.287012][T15519] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1597.371128][T15519] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input52
[ 1597.398684][T17544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1597.458788][ T5954] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1597.478335][ T5954] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1597.486573][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1597.488890][ T5954] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1597.508838][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1597.532653][T17716] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1597.596763][ T5954] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1598.184843][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.218178][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.255936][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.376360][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.405877][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.576439][ T5954] usb 6-1: USB disconnect, device number 44
[ 1598.675961][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.706014][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.735940][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.756056][T15519] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1598.765181][T17544] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1598.783704][T17544] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1598.792845][T15519] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1598.802826][T15519] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1598.987066][T17544] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1599.002671][T17544] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1599.022314][T15519] usb 5-1: USB disconnect, device number 42
[ 1600.093162][T17748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'.
[ 1600.102758][T17748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'.
[ 1602.173670][T17544] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1602.235283][T17544] 8021q: adding VLAN 0 to HW filter on device team0
[ 1602.271434][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1602.278633][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1602.341841][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1602.349124][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1603.653177][T17761] gre1: entered allmulticast mode
[ 1604.554042][T17544] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1605.188832][T17776] loop6: detected capacity change from 0 to 524288000
[ 1605.232654][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.308909][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.344782][T17544] veth0_vlan: entered promiscuous mode
[ 1605.439404][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.447488][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.455495][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.479395][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1605.521048][T17544] veth1_vlan: entered promiscuous mode
[ 1605.602366][T17784] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1606.478945][T17779] loop6: detected capacity change from 524288000 to 0
[ 1606.503260][T17776] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1606.610044][ T5886] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1606.713409][T17776] ldm_validate_partition_table(): Disk read failed.
[ 1606.816199][T17776] Dev loop6: unable to read RDB block 0
[ 1606.856179][ T5886] usb 5-1: Using ep0 maxpacket: 16
[ 1606.917451][T17776]  loop6: unable to read partition table
[ 1606.955466][T17776] loop6: partition table beyond EOD, truncated
[ 1606.966244][T17776] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1606.979955][T17544] veth0_macvtap: entered promiscuous mode
[ 1607.002220][T17790] netdevsim netdevsim1: Direct firmware load for � failed with error -2
[ 1607.011454][T17790] netdevsim netdevsim1: Falling back to sysfs fallback for: �
[ 1607.022809][ T5886] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1607.164002][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1607.164125][T17544] veth1_macvtap: entered promiscuous mode
[ 1607.175842][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1607.202999][T17793] netlink: 'syz.5.2968': attribute type 5 has an invalid length.
[ 1607.242486][ T5886] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1607.245532][T17544] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1607.275467][ T5886] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1607.280370][T17544] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1607.314608][ T5886] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1607.316593][T17544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1607.339493][T17544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1607.340561][ T5886] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1607.360966][ T5886] usb 5-1: Manufacturer: syz
[ 1607.754871][ T5886] usb 5-1: config 0 descriptor??
[ 1607.757857][T17544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1607.772124][T17544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1608.282949][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1608.304545][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1608.716950][ T5886] rc_core: IR keymap rc-hauppauge not found
[ 1608.733801][ T5886] Registered IR keymap rc-empty
[ 1608.756052][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1608.769667][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1608.826179][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1608.857620][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1608.867319][ T5886] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 1608.928461][ T5886] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53
[ 1608.964211][T17806] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2972'.
[ 1608.998629][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.057627][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.107454][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.192037][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.226607][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.268129][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.368153][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.589009][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.669321][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.705907][ T5886] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 1609.747042][ T5886] mceusb 5-1:0.0: Registered  with mce emulator interface version 1
[ 1609.771807][ T5886] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1609.815854][T10300] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 1609.824023][ T5886] usb 5-1: USB disconnect, device number 43
[ 1611.037877][T10300] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[ 1611.073062][T10300] usb 3-1: config 0 has no interface number 0
[ 1611.108885][T10300] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=8c.1e
[ 1611.173897][T10300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.219606][T10300] usb 3-1: config 0 descriptor??
[ 1611.241935][T10300] usb 3-1: selecting invalid altsetting 1
[ 1611.310427][T17835] xt_nfacct: accounting object `syz1' does not exists
[ 1611.494545][T10300] dvb_ttusb_budget: ttusb_init_controller: error
[ 1611.501318][T10300] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[ 1611.524026][T17840] netlink: 'syz.1.2979': attribute type 5 has an invalid length.
[ 1611.684926][T10300] DVB: Unable to find symbol ves1820_attach()
[ 1611.742840][T17838] binder: 17837:17838 ioctl 400c620e 0 returned -14
[ 1611.765834][ T5886] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[ 1611.793303][T10300] DVB: Unable to find symbol stv0297_attach()
[ 1611.805331][T10300] dvb_ttusb_budget: no frontend driver found for device [0b48:1004]
[ 1611.819658][T10300] usb 3-1: USB disconnect, device number 49
[ 1611.921379][ T5886] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[ 1611.940560][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1611.953341][ T5886] usb 5-1: config 0 descriptor??
[ 1612.318065][T17848] FAULT_INJECTION: forcing a failure.
[ 1612.318065][T17848] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1612.373573][T17848] CPU: 0 UID: 0 PID: 17848 Comm: syz.2.2983 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1612.373605][T17848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1612.373620][T17848] Call Trace:
[ 1612.373629][T17848]  <TASK>
[ 1612.373639][T17848]  dump_stack_lvl+0x189/0x250
[ 1612.373668][T17848]  ? __pfx____ratelimit+0x10/0x10
[ 1612.373692][T17848]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1612.373717][T17848]  ? __pfx__printk+0x10/0x10
[ 1612.373750][T17848]  ? get_sigframe+0x596/0x7d0
[ 1612.373789][T17848]  should_fail_ex+0x414/0x560
[ 1612.373818][T17848]  _copy_to_user+0x31/0xb0
[ 1612.373849][T17848]  copy_siginfo_to_user+0x22/0xc0
[ 1612.373875][T17848]  x64_setup_rt_frame+0x777/0xd40
[ 1612.373924][T17848]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 1612.373982][T17848]  arch_do_signal_or_restart+0x3dc/0x750
[ 1612.374021][T17848]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1612.374068][T17848]  ? exit_to_user_mode_loop+0x40/0x110
[ 1612.374091][T17848]  exit_to_user_mode_loop+0x75/0x110
[ 1612.374112][T17848]  do_syscall_64+0x2bd/0x3b0
[ 1612.374136][T17848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1612.374158][T17848]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1612.374180][T17848]  ? clear_bhb_loop+0x60/0xb0
[ 1612.374214][T17848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1612.374234][T17848] RIP: 0033:0x7f2c1ab8ebe7
[ 1612.374251][T17848] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[ 1612.374269][T17848] RSP: 002b:00007f2c1b95d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1612.374293][T17848] RAX: 0000000000000000 RBX: 00007f2c1adb5fa0 RCX: 00007f2c1ab8ebe9
[ 1612.374316][T17848] RDX: 0000000000002020 RSI: 000020000000c400 RDI: 0000000000000003
[ 1612.374329][T17848] RBP: 00007f2c1b95d090 R08: 0000000000000000 R09: 0000000000000000
[ 1612.374342][T17848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1612.374354][T17848] R13: 00007f2c1adb6038 R14: 00007f2c1adb5fa0 R15: 00007ffe93360528
[ 1612.374386][T17848]  </TASK>
[ 1612.576454][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1612.590313][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1612.596944][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1614.026237][ T5886] pegasus 5-1:0.0: probe with driver pegasus failed with error -110
[ 1615.406373][ T5925] usb 5-1: USB disconnect, device number 44
[ 1615.545426][T17860] loop6: detected capacity change from 0 to 524288000
[ 1615.557271][T17860] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1615.565354][T17860] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1615.588292][T17860] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1615.613378][T17866] sctp: [Deprecated]: syz.2.2987 (pid 17866) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1615.613378][T17866] Use struct sctp_sack_info instead
[ 1615.636760][T17867] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2989'.
[ 1615.683571][T17865] loop6: detected capacity change from 524288000 to 0
[ 1615.693612][T17860] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1615.707394][T17860] ldm_validate_partition_table(): Disk read failed.
[ 1615.714270][T17860] Dev loop6: unable to read RDB block 0
[ 1615.727259][T17860]  loop6: unable to read partition table
[ 1615.755233][T17860] loop6: partition table beyond EOD, truncated
[ 1615.762252][T17860] loop_reread_partitions: partition scan of loop6 (�^L����A;���b��@���֔:B�w�<��g�nf.-ӑ��.�i���>^.�dDd��) failed (rc=-5)
[ 1620.512852][T17905] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1620.815823][ T5845] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1621.036119][ T5845] usb 2-1: device descriptor read/64, error -71
[ 1621.540272][ T5845] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1622.278648][T17929] FAULT_INJECTION: forcing a failure.
[ 1622.278648][T17929] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1622.295496][T17929] CPU: 0 UID: 0 PID: 17929 Comm: syz.4.3006 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1622.295524][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1622.295536][T17929] Call Trace:
[ 1622.295545][T17929]  <TASK>
[ 1622.295553][T17929]  dump_stack_lvl+0x189/0x250
[ 1622.295582][T17929]  ? __pfx____ratelimit+0x10/0x10
[ 1622.295604][T17929]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1622.295628][T17929]  ? __pfx__printk+0x10/0x10
[ 1622.295653][T17929]  ? __might_fault+0xb0/0x130
[ 1622.295695][T17929]  should_fail_ex+0x414/0x560
[ 1622.295721][T17929]  _copy_from_user+0x2d/0xb0
[ 1622.295750][T17929]  restore_altstack+0x9d/0x4b0
[ 1622.295777][T17929]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[ 1622.295813][T17929]  ? __pfx_restore_altstack+0x10/0x10
[ 1622.295844][T17929]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1622.295863][T17929]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1622.295887][T17929]  __ia32_sys_rt_sigreturn+0x1ac/0x7b0
[ 1622.295920][T17929]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1622.295941][T17929]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[ 1622.295969][T17929]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1622.295986][T17929]  ? signal_setup_done+0x230/0x310
[ 1622.296012][T17929]  ? __lock_acquire+0xab9/0xd20
[ 1622.296051][T17929]  ? __task_pid_nr_ns+0x28/0x470
[ 1622.296083][T17929]  ? do_syscall_64+0xbe/0x3b0
[ 1622.296109][T17929]  do_syscall_64+0xfa/0x3b0
[ 1622.296129][T17929]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1622.296149][T17929]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1622.296169][T17929]  ? clear_bhb_loop+0x60/0xb0
[ 1622.296194][T17929]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1622.296213][T17929] RIP: 0033:0x7f9720d2add9
[ 1622.296232][T17929] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[ 1622.296250][T17929] RSP: 002b:00007f9721c245c0 EFLAGS: 00000202 ORIG_RAX: 000000000000000f
[ 1622.296271][T17929] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9720d2add9
[ 1622.296286][T17929] RDX: 00007f9721c245c0 RSI: 00007f9721c246f0 RDI: 0000000000000021
[ 1622.296300][T17929] RBP: 00007f9721c24c10 R08: 0000000000000000 R09: 0000000000000000
[ 1622.296313][T17929] R10: 0000000000000000 R11: 0000000000000202 R12: cccccccccccccccd
[ 1622.296344][T17929] R13: 00007f9720fb6038 R14: 00007f9720fb5fa0 R15: 00007fffa4ded678
[ 1622.296379][T17929]  </TASK>
[ 1627.168367][ T6725] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1629.145872][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1630.021300][T14010] Bluetooth: hci3: command 0x0405 tx timeout
[ 1631.208311][T17983] sctp: failed to load transform for md5: -2
[ 1638.425438][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3033'.
[ 1639.296028][T14010] Bluetooth: hci4: command 0x1003 tx timeout
[ 1639.304490][T16512] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1639.484759][T17956] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.689229][T18061] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1639.813537][T14010] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1639.817959][T14010] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1639.818901][T14010] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1639.820033][T14010] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1639.820840][T14010] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1639.885337][T17956] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1639.911821][   T30] audit: type=1326 audit(1755083174.297:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1639.937456][T18060] tty tty1: ldisc open failed (-12), clearing slot 0
[ 1640.052001][   T30] audit: type=1326 audit(1755083174.297:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.151312][   T30] audit: type=1326 audit(1755083174.357:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.199274][   T30] audit: type=1326 audit(1755083174.357:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.223311][   T30] audit: type=1326 audit(1755083174.357:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.248800][T18069] syz.1.3039: attempt to access beyond end of device
[ 1640.248800][T18069] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0
[ 1640.250082][T17956] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1640.296235][T18069] (syz.1.3039,18069,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1640.304056][T18069] (syz.1.3039,18069,0):ocfs2_sb_probe:753 ERROR: status = -5
[ 1640.331162][   T30] audit: type=1326 audit(1755083174.357:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.358704][T18069] (syz.1.3039,18069,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1640.367643][T18069] (syz.1.3039,18069,0):ocfs2_fill_super:1177 ERROR: status = -5
[ 1640.424214][   T30] audit: type=1326 audit(1755083174.357:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.480163][   T30] audit: type=1326 audit(1755083174.357:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.551118][   T30] audit: type=1326 audit(1755083174.357:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1640.837074][   T30] audit: type=1326 audit(1755083174.507:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18055 comm="syz.7.3038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1641.712218][T18056] chnl_net:caif_netlink_parms(): no params data found
[ 1641.964404][T14010] Bluetooth: hci1: command tx timeout
[ 1642.769225][T18095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3046'.
[ 1642.961451][T17956] bridge_slave_1: left allmulticast mode
[ 1642.999357][T17956] bridge_slave_1: left promiscuous mode
[ 1643.179948][ T6725] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1643.834783][T17956] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1644.017699][T16512] Bluetooth: hci1: command tx timeout
[ 1645.216013][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1645.224783][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1645.327054][T17956] bridge_slave_0: left allmulticast mode
[ 1645.335128][T17956] bridge_slave_0: left promiscuous mode
[ 1645.344845][T17956] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1645.827739][T10300] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1646.157725][T14010] Bluetooth: hci1: command tx timeout
[ 1646.268289][T10300] usb 6-1: New USB device found, idVendor=8086, idProduct=011a, bcdDevice=bf.ad
[ 1646.290358][T10300] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1646.314394][T10300] usb 6-1: config 0 descriptor??
[ 1646.652616][T18114] ALSA: mixer_oss: invalid OSS volume 'DIGITAL'
[ 1647.093923][T10300] usb 6-1: string descriptor 0 read error: -71
[ 1647.126395][T10300] usb 6-1: USB disconnect, device number 45
[ 1647.911347][T18120] 9pnet_fd: Insufficient options for proto=fd
[ 1648.006829][T18121] fuse: Bad value for 'fd'
[ 1648.176314][T14010] Bluetooth: hci1: command tx timeout
[ 1648.570416][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1648.570437][   T30] audit: type=1326 audit(1755083182.957:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.705788][   T30] audit: type=1326 audit(1755083182.957:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.843507][   T30] audit: type=1326 audit(1755083182.997:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.866713][   T30] audit: type=1326 audit(1755083182.997:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.889090][   T30] audit: type=1326 audit(1755083182.997:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.963947][   T30] audit: type=1326 audit(1755083182.997:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1649.996600][   T30] audit: type=1326 audit(1755083182.997:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1651.074660][   T30] audit: type=1326 audit(1755083182.997:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1651.096501][   T30] audit: type=1326 audit(1755083182.997:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1651.118291][   T30] audit: type=1326 audit(1755083182.997:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18122 comm="syz.7.3054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057838ebe9 code=0x7ffc0000
[ 1652.006602][T18138] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3058'.
[ 1652.016476][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1652.016527][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1652.023664][T18138] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3058'.
[ 1652.120790][T17956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1652.242288][T17956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1652.632544][T17956] bond0 (unregistering): Released all slaves
[ 1652.714921][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3056'.
[ 1652.867895][T18142] netlink: 'syz.1.3060': attribute type 21 has an invalid length.
[ 1652.904312][T17956] �: left promiscuous mode
[ 1652.940310][T18142] netlink: 'syz.1.3060': attribute type 6 has an invalid length.
[ 1652.948571][T18142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3060'.
[ 1653.703603][T17956] tipc: Left network mode
[ 1653.712164][T18056] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1653.734022][T18056] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1653.757887][T18056] bridge_slave_0: entered allmulticast mode
[ 1653.796247][T18056] bridge_slave_0: entered promiscuous mode
[ 1653.819500][T18056] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1653.853770][T18056] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1653.875659][T18056] bridge_slave_1: entered allmulticast mode
[ 1653.891123][T18056] bridge_slave_1: entered promiscuous mode
[ 1655.104156][T18169] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3065'.
[ 1655.374987][T18171] netlink: 'syz.2.3065': attribute type 1 has an invalid length.
[ 1656.205128][T18056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1656.655977][ T5954] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1656.985438][T18056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1657.017678][T18180] syz.5.3067: attempt to access beyond end of device
[ 1657.017678][T18180] nbd5: rw=0, sector=0, nr_sectors = 2 limit=0
[ 1657.042193][T18180] (syz.5.3067,18180,0):ocfs2_get_sector:1714 ERROR: status = -5
[ 1657.056546][T18180] (syz.5.3067,18180,1):ocfs2_sb_probe:753 ERROR: status = -5
[ 1657.065056][T18180] (syz.5.3067,18180,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 1657.150713][T18180] (syz.5.3067,18180,1):ocfs2_fill_super:1177 ERROR: status = -5
[ 1657.183703][ T5954] usb 2-1: Using ep0 maxpacket: 16
[ 1657.219745][ T5954] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1657.230838][T17956] hsr_slave_0: left promiscuous mode
[ 1657.237668][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1657.247129][ T5954] usb 2-1: Product: syz
[ 1657.251742][ T5954] usb 2-1: Manufacturer: syz
[ 1657.257472][ T5954] usb 2-1: SerialNumber: syz
[ 1657.273169][T17956] hsr_slave_1: left promiscuous mode
[ 1657.280094][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1657.313340][T17956] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1657.314368][ T5954] usb 2-1: config 0 descriptor??
[ 1657.351345][T17956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1657.367354][T17956] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1657.413407][T17956] veth1_macvtap: left promiscuous mode
[ 1657.430147][T17956] veth0_macvtap: left promiscuous mode
[ 1657.456020][T17956] veth1_vlan: left promiscuous mode
[ 1657.472792][T17956] veth0_vlan: left promiscuous mode
[ 1659.153697][ T5954] usb 2-1: USB disconnect, device number 49
[ 1659.467337][T18197] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3072'.
[ 1660.320137][T17956] team0 (unregistering): Port device team_slave_1 removed
[ 1660.451924][T17956] team0 (unregistering): Port device team_slave_0 removed
[ 1661.122325][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3070'.
[ 1661.316633][T18056] team0: Port device team_slave_0 added
[ 1661.387983][T18056] team0: Port device team_slave_1 added
[ 1661.562054][T18056] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1661.617311][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1661.645222][T18056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1661.669744][T18056] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1661.677420][T18056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1661.711296][T18056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1661.817350][T17956] IPVS: stop unused estimator thread 0...
[ 1661.942440][T18056] hsr_slave_0: entered promiscuous mode
[ 1661.951898][T18056] hsr_slave_1: entered promiscuous mode
[ 1661.963958][T18056] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1661.972532][T18056] Cannot create hsr debugfs directory
[ 1662.988490][T18056] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1663.001156][T18056] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1663.016390][T18056] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1663.029281][T18056] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1663.232951][T18056] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1663.267276][T18056] 8021q: adding VLAN 0 to HW filter on device team0
[ 1663.284910][T17956] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1663.292170][T17956] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1663.405629][T17956] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1663.412863][T17956] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1663.547861][T18232] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3082'.
[ 1663.616256][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1663.622830][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1663.984225][T18056] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1664.250981][T18253] netlink: 'syz.1.3086': attribute type 5 has an invalid length.
[ 1664.389928][T18258] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[ 1664.612480][T18056] veth0_vlan: entered promiscuous mode
[ 1664.627032][T18056] veth1_vlan: entered promiscuous mode
[ 1664.682467][T18056] veth0_macvtap: entered promiscuous mode
[ 1664.694658][T18056] veth1_macvtap: entered promiscuous mode
[ 1664.719318][T18056] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1664.734806][T18056] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1664.753682][T18056] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1664.762748][T18056] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1664.773989][T18056] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1664.784541][T18056] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1665.070175][T18269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3092'.
[ 1665.127281][ T5980] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1665.141560][T17956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1665.153797][T17956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1665.171965][ T5980] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1665.319258][T18276] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3094'.
[ 1665.622564][T18284] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3095'.
[ 1665.638876][T18286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3095'.
[ 1665.654456][T18284] unsupported nlmsg_type 40
[ 1667.331025][T18305] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3103'.
[ 1667.375924][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1667.376457][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1673.687684][T16293] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1673.818317][T18372] FAULT_INJECTION: forcing a failure.
[ 1673.818317][T18372] name failslab, interval 1, probability 0, space 0, times 0
[ 1673.831482][T18372] CPU: 0 UID: 0 PID: 18372 Comm: syz.5.3121 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1673.831509][T18372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1673.831524][T18372] Call Trace:
[ 1673.831533][T18372]  <TASK>
[ 1673.831542][T18372]  dump_stack_lvl+0x189/0x250
[ 1673.831573][T18372]  ? __pfx____ratelimit+0x10/0x10
[ 1673.831595][T18372]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1673.831618][T18372]  ? __pfx__printk+0x10/0x10
[ 1673.831650][T18372]  ? __pfx___might_resched+0x10/0x10
[ 1673.831671][T18372]  ? fs_reclaim_acquire+0x7d/0x100
[ 1673.831700][T18372]  should_fail_ex+0x414/0x560
[ 1673.831727][T18372]  should_failslab+0xa8/0x100
[ 1673.831750][T18372]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1673.831769][T18372]  ? security_inode_alloc+0x39/0x330
[ 1673.831803][T18372]  security_inode_alloc+0x39/0x330
[ 1673.831834][T18372]  inode_init_always_gfp+0x9ed/0xdc0
[ 1673.831864][T18372]  ? __pfx_sock_alloc_inode+0x10/0x10
[ 1673.831887][T18372]  alloc_inode+0x82/0x1b0
[ 1673.831910][T18372]  __sock_create+0x12d/0x9f0
[ 1673.831945][T18372]  mptcp_subflow_create_socket+0xfd/0xb40
[ 1673.831973][T18372]  ? smk_ipv4_check+0x555/0x680
[ 1673.832003][T18372]  ? smk_ipv4_check+0xe2/0x680
[ 1673.832032][T18372]  ? __pfx_mptcp_subflow_create_socket+0x10/0x10
[ 1673.832060][T18372]  ? __pfx_smk_ipv4_check+0x10/0x10
[ 1673.832095][T18372]  __mptcp_nmpc_sk+0x148/0x750
[ 1673.832127][T18372]  ? __pfx___mptcp_nmpc_sk+0x10/0x10
[ 1673.832154][T18372]  ? look_up_lock_class+0x74/0x170
[ 1673.832183][T18372]  mptcp_connect+0x6f/0x790
[ 1673.832210][T18372]  __inet_stream_connect+0x2ab/0xe80
[ 1673.832245][T18372]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1673.832266][T18372]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1673.832291][T18372]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1673.832312][T18372]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1673.832346][T18372]  inet_stream_connect+0x66/0xa0
[ 1673.832398][T18372]  __sys_connect+0x316/0x440
[ 1673.832426][T18372]  ? __fget_files+0x3a0/0x420
[ 1673.832452][T18372]  ? __pfx___sys_connect+0x10/0x10
[ 1673.832502][T18372]  ? __pfx_ksys_write+0x10/0x10
[ 1673.832520][T18372]  ? rcu_is_watching+0x15/0xb0
[ 1673.832553][T18372]  __x64_sys_connect+0x7a/0x90
[ 1673.832584][T18372]  do_syscall_64+0xfa/0x3b0
[ 1673.832611][T18372]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1673.832632][T18372]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1673.832653][T18372]  ? clear_bhb_loop+0x60/0xb0
[ 1673.832680][T18372]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1673.832701][T18372] RIP: 0033:0x7f6d47b8ebe9
[ 1673.832721][T18372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1673.832739][T18372] RSP: 002b:00007f6d4892f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1673.832762][T18372] RAX: ffffffffffffffda RBX: 00007f6d47db6090 RCX: 00007f6d47b8ebe9
[ 1673.832778][T18372] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000005
[ 1673.832792][T18372] RBP: 00007f6d4892f090 R08: 0000000000000000 R09: 0000000000000000
[ 1673.832806][T18372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1673.832819][T18372] R13: 00007f6d47db6128 R14: 00007f6d47db6090 R15: 00007fff05a20dd8
[ 1673.832865][T18372]  </TASK>
[ 1674.156325][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1674.164307][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1674.182909][T18372] socket: no more sockets
[ 1674.695945][T16293] usb 3-1: Using ep0 maxpacket: 8
[ 1674.706767][T16293] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1674.716020][T16293] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1674.726352][T16293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1674.736260][T16293] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1674.746528][T16293] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1674.759830][T16293] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1674.768948][T16293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1675.128323][T16293] usb 3-1: usb_control_msg returned -32
[ 1675.147864][T16293] usbtmc 3-1:16.0: can't read capabilities
[ 1675.302407][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1675.306339][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1675.492793][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1675.663204][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1677.688848][T18407] FAULT_INJECTION: forcing a failure.
[ 1677.688848][T18407] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1677.716682][T18407] CPU: 0 UID: 0 PID: 18407 Comm: syz.7.3131 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1677.716715][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1677.716729][T18407] Call Trace:
[ 1677.716738][T18407]  <TASK>
[ 1677.716747][T18407]  dump_stack_lvl+0x189/0x250
[ 1677.716777][T18407]  ? __pfx____ratelimit+0x10/0x10
[ 1677.716799][T18407]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1677.716823][T18407]  ? __pfx__printk+0x10/0x10
[ 1677.716862][T18407]  should_fail_ex+0x414/0x560
[ 1677.716890][T18407]  strncpy_from_user+0x36/0x290
[ 1677.716926][T18407]  getname_flags+0xf3/0x540
[ 1677.716957][T18407]  user_path_at+0x24/0x60
[ 1677.716986][T18407]  __se_sys_mount+0x2d3/0x410
[ 1677.717016][T18407]  ? __pfx___se_sys_mount+0x10/0x10
[ 1677.717075][T18407]  ? rcu_is_watching+0x15/0xb0
[ 1677.717105][T18407]  ? do_syscall_64+0xbe/0x3b0
[ 1677.717128][T18407]  ? __x64_sys_mount+0x20/0xc0
[ 1677.717156][T18407]  do_syscall_64+0xfa/0x3b0
[ 1677.717179][T18407]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1677.717203][T18407]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1677.717225][T18407]  ? clear_bhb_loop+0x60/0xb0
[ 1677.717251][T18407]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1677.717272][T18407] RIP: 0033:0x7f057838ebe9
[ 1677.717294][T18407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1677.717314][T18407] RSP: 002b:00007f0579231038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1677.717338][T18407] RAX: ffffffffffffffda RBX: 00007f05785b5fa0 RCX: 00007f057838ebe9
[ 1677.717354][T18407] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1677.717369][T18407] RBP: 00007f0579231090 R08: 0000200000000380 R09: 0000000000000000
[ 1677.717384][T18407] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1677.717397][T18407] R13: 00007f05785b6038 R14: 00007f05785b5fa0 R15: 00007ffd57090d38
[ 1677.717431][T18407]  </TASK>
[ 1677.966385][T17534] usb 3-1: USB disconnect, device number 50
[ 1680.657062][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1680.666355][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1681.971192][T18453] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1682.649335][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3145'.
[ 1682.660039][T18454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3145'.
[ 1684.880118][T18474] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3154'.
[ 1684.906651][T11620] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1686.896201][T14010] Bluetooth: hci4: command 0x1003 tx timeout
[ 1686.945912][T16512] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1691.466080][T14010] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1691.767411][T18528] overlay: Unknown parameter 'fsuuid'
[ 1692.093519][T17956] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1692.125731][T18532] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[ 1692.145982][T18532] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1694.095966][T16512] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1694.218981][T18547] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1694.875875][ T5845] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 1695.047858][ T5845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1022, setting to 64
[ 1695.086145][ T5845] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1695.114996][ T5845] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.148517][ T5845] usb 2-1: config 0 descriptor??
[ 1695.154547][T18557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1695.611366][ T5845] uclogic 0003:5543:0003.000A: hidraw0: USB HID v4.01 Device [HID 5543:0003] on usb-dummy_hcd.1-1/input0
[ 1696.633156][T18578] ip6tnl1: entered promiscuous mode
[ 1696.661987][T18578] tmpfs: Unknown parameter 'roo'
[ 1696.915891][ T5925] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1697.249076][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1697.261623][ T5925] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 1697.276025][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1697.567848][ T5925] usb 3-1: config 0 descriptor??
[ 1697.722964][ T5923] usb 2-1: USB disconnect, device number 50
[ 1698.027903][ T5925] logitech-djreceiver 0003:046D:C71F.000B: unbalanced collection at end of report description
[ 1698.046136][ T5925] logitech-djreceiver 0003:046D:C71F.000B: logi_dj_probe: parse failed
[ 1698.054629][ T5925] logitech-djreceiver 0003:046D:C71F.000B: probe with driver logitech-djreceiver failed with error -22
[ 1700.117550][ T5979] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1700.412795][T18601] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3186'.
[ 1702.015841][ T5853] Bluetooth: hci2: command 0x0406 tx timeout
[ 1702.107166][ T5853] Bluetooth: hci4: command 0x1003 tx timeout
[ 1702.117057][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1702.243334][ T5845] usb 3-1: USB disconnect, device number 51
[ 1705.520364][T18631] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1707.094710][   T13] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1708.375893][T18672] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3206'.
[ 1709.135990][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1709.136545][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1711.125814][ T5954] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1711.577881][T18697] FAULT_INJECTION: forcing a failure.
[ 1711.577881][T18697] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.590923][T18697] CPU: 0 UID: 0 PID: 18697 Comm: syz.7.3213 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1711.590954][T18697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1711.590966][T18697] Call Trace:
[ 1711.590974][T18697]  <TASK>
[ 1711.590981][T18697]  dump_stack_lvl+0x189/0x250
[ 1711.591003][T18697]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1711.591021][T18697]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1711.591044][T18697]  ? dump_stack+0x9/0x20
[ 1711.591065][T18697]  should_fail_ex+0x414/0x560
[ 1711.591086][T18697]  should_failslab+0xa8/0x100
[ 1711.591106][T18697]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1711.591121][T18697]  ? getname_flags+0xb8/0x540
[ 1711.591143][T18697]  getname_flags+0xb8/0x540
[ 1711.591165][T18697]  user_path_at+0x24/0x60
[ 1711.591188][T18697]  __se_sys_mount+0x2d3/0x410
[ 1711.591210][T18697]  ? __pfx___se_sys_mount+0x10/0x10
[ 1711.591227][T18697]  ? rcu_is_watching+0x15/0xb0
[ 1711.591248][T18697]  ? do_syscall_64+0xbe/0x3b0
[ 1711.591264][T18697]  ? __x64_sys_mount+0x20/0xc0
[ 1711.591284][T18697]  do_syscall_64+0xfa/0x3b0
[ 1711.591302][T18697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1711.591317][T18697]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1711.591333][T18697]  ? clear_bhb_loop+0x60/0xb0
[ 1711.591352][T18697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1711.591367][T18697] RIP: 0033:0x7f057838ebe9
[ 1711.591381][T18697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1711.591395][T18697] RSP: 002b:00007f0579210038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1711.591412][T18697] RAX: ffffffffffffffda RBX: 00007f05785b6090 RCX: 00007f057838ebe9
[ 1711.591424][T18697] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[ 1711.591435][T18697] RBP: 00007f0579210090 R08: 0000200000000380 R09: 0000000000000000
[ 1711.591446][T18697] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001
[ 1711.591455][T18697] R13: 00007f05785b6128 R14: 00007f05785b6090 R15: 00007ffd57090d38
[ 1711.591480][T18697]  </TASK>
[ 1711.804540][ T5954] usb 5-1: Using ep0 maxpacket: 8
[ 1711.839115][ T5954] usb 5-1: config 6 has an invalid interface number: 2 but max is 0
[ 1712.197809][ T5954] usb 5-1: config 6 has no interface number 0
[ 1712.215774][ T5954] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1712.259099][ T5954] usb 5-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1712.287807][ T5954] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1712.306863][ T5954] usb 5-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1712.430820][ T5954] usb 5-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[ 1712.844040][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1713.295238][ T5954] usb 5-1: Product: syz
[ 1713.303878][ T5954] usb 5-1: Manufacturer: syz
[ 1713.313014][ T5954] usb 5-1: SerialNumber: syz
[ 1713.345131][ T5954] hso 5-1:6.2: Failed to find BULK IN ep
[ 1713.547469][ T5954] usb 5-1: USB disconnect, device number 45
[ 1713.681546][T18704] DRBG: could not allocate digest TFM handle: hmac(sha512)
[ 1713.911044][T18719] netlink: 'syz.5.3219': attribute type 21 has an invalid length.
[ 1713.921375][   T30] kauditd_printk_skb: 1 callbacks suppressed
[ 1713.921393][   T30] audit: type=1326 audit(1755083248.307:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1713.952164][   T30] audit: type=1326 audit(1755083248.307:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1713.974530][   T30] audit: type=1326 audit(1755083248.307:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1713.997463][   T30] audit: type=1326 audit(1755083248.307:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.027057][   T30] audit: type=1326 audit(1755083248.307:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.035136][T10300] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1714.064918][   T30] audit: type=1326 audit(1755083248.307:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.087718][   T30] audit: type=1326 audit(1755083248.307:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.146063][   T30] audit: type=1326 audit(1755083248.307:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.214535][   T30] audit: type=1326 audit(1755083248.307:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.258890][   T30] audit: type=1326 audit(1755083248.307:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18718 comm="syz.5.3219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d47b8ebe9 code=0x7ffc0000
[ 1714.304135][T10300] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1714.316948][T10300] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1714.326069][T10300] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1714.337462][T10300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1714.359884][T10300] usb 3-1: config 0 descriptor??
[ 1714.414363][ T6725] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1714.736109][ T5845] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1715.179593][ T5845] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1715.191557][ T5845] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1715.198745][ T5845] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1715.208029][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.416181][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1717.921209][ T5845] usb 5-1: config 0 descriptor??
[ 1718.025467][T10300] usbhid 3-1:0.0: can't add hid device: -71
[ 1718.061849][ T5845] usb 5-1: can't set config #0, error -71
[ 1718.061967][T10300] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1718.541896][ T5845] usb 5-1: USB disconnect, device number 46
[ 1718.548231][T10300] usb 3-1: USB disconnect, device number 52
[ 1718.994509][ T1103] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1719.001506][ T1103] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1721.056715][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1721.064709][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1722.136149][ T5925] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1722.186211][ T5979] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1722.288466][ T5925] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1722.303906][ T5925] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1722.311144][ T5925] usb 6-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[ 1722.320501][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.340365][ T5925] usb 6-1: config 0 descriptor??
[ 1724.287436][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1724.297080][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1726.059848][ T5925] usbhid 6-1:0.0: can't add hid device: -71
[ 1726.292386][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1726.422638][ T5925] usb 6-1: USB disconnect, device number 46
[ 1726.956050][T18789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3243'.
[ 1728.388306][T18809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1728.408771][T18809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1728.432887][T18809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3244'.
[ 1730.493167][ T5979] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1731.989167][T18826] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes.
[ 1732.931826][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1732.946304][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1735.578753][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.591233][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1740.997111][T10300] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1742.655901][ T5936] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1742.894302][T10300] usb 6-1: device descriptor read/64, error -71
[ 1743.906132][ T5936] usb 2-1: device not accepting address 51, error -71
[ 1744.447912][T18878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3264'.
[ 1744.457505][T18878] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3264'.
[ 1746.869325][T18890] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3267'.
[ 1746.906044][T18890] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3267'.
[ 1749.152700][T18911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3272'.
[ 1750.008969][ T5925] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1750.235740][ T5925] usb 2-1: Using ep0 maxpacket: 32
[ 1750.269062][ T5925] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1750.294713][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.390641][ T5925] usb 2-1: config 0 descriptor??
[ 1750.656343][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1750.665462][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1750.677021][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1750.684192][ T5925] usb 2-1: media controller created
[ 1752.307976][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1752.392040][ T5925] az6027: usb out operation failed. (-71)
[ 1752.412833][ T5925] az6027: usb out operation failed. (-71)
[ 1752.472394][ T5925] stb0899_attach: Driver disabled by Kconfig
[ 1752.528627][ T5925] az6027: no front-end attached
[ 1752.528627][ T5925] 
[ 1752.542173][ T5925] az6027: usb out operation failed. (-71)
[ 1752.554300][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1752.727872][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input55
[ 1753.624934][ T5925] dvb-usb: schedule remote query interval to 400 msecs.
[ 1753.696067][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1753.725112][ T5925] usb 2-1: USB disconnect, device number 53
[ 1754.162898][ T5925] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1756.823379][T18970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3283'.
[ 1758.678294][T18986] sctp: [Deprecated]: syz.5.3289 (pid 18986) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1758.678294][T18986] Use struct sctp_sack_info instead
[ 1760.569136][ T5980] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1762.575796][T14010] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1762.582992][T16512] Bluetooth: hci4: command 0x1003 tx timeout
[ 1763.199378][T19031] BUG: assuming non migratable context at ./include/linux/filter.h:703
[ 1763.210207][T19031] in_atomic(): 0, irqs_disabled(): 0, migration_disabled() 0 pid: 19031, name: syz.2.3300
[ 1763.220868][T19031] 3 locks held by syz.2.3300/19031:
[ 1763.226609][T19031]  #0: ffff888032ff2898 (sk_lock-AF_INET){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0
[ 1763.240487][T19031]  #1: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: __ip_queue_xmit+0x63/0x1b00
[ 1763.251343][T19031]  #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: nf_hook+0x9d/0x380
[ 1763.262100][T19031] CPU: 0 UID: 0 PID: 19031 Comm: syz.2.3300 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1763.262129][T19031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1763.262142][T19031] Call Trace:
[ 1763.262153][T19031]  <TASK>
[ 1763.262163][T19031]  dump_stack_lvl+0x189/0x250
[ 1763.262195][T19031]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1763.262231][T19031]  ? print_lock_name+0xde/0x100
[ 1763.262278][T19031]  __cant_migrate+0x238/0x2e0
[ 1763.262305][T19031]  ? __pfx___cant_migrate+0x10/0x10
[ 1763.262330][T19031]  ? __pfx_nf_hook_run_bpf+0x10/0x10
[ 1763.262353][T19031]  ? nf_hook_run_bpf+0x74/0x1f0
[ 1763.262380][T19031]  nf_hook_run_bpf+0x8f/0x1f0
[ 1763.262401][T19031]  ? __pfx_ipt_do_table+0x10/0x10
[ 1763.262430][T19031]  ? __pfx_nf_hook_run_bpf+0x10/0x10
[ 1763.262451][T19031]  ? iptable_mangle_hook+0x189/0x4c0
[ 1763.262479][T19031]  ? nf_hook+0x9d/0x380
[ 1763.262497][T19031]  ? nf_hook_slow+0x30/0x220
[ 1763.262523][T19031]  ? nf_nat_ipv4_out+0x2f7/0x4e0
[ 1763.262549][T19031]  ? __pfx_nf_hook_run_bpf+0x10/0x10
[ 1763.262572][T19031]  nf_hook_slow+0xc5/0x220
[ 1763.262606][T19031]  nf_hook+0x217/0x380
[ 1763.262629][T19031]  ? nf_hook+0x9d/0x380
[ 1763.262648][T19031]  ? __pfx_nf_hook+0x10/0x10
[ 1763.262670][T19031]  ? __pfx_ip_finish_output+0x10/0x10
[ 1763.262702][T19031]  ip_output+0x16c/0x220
[ 1763.262717][T19031]  ? __pfx_ip_finish_output+0x10/0x10
[ 1763.262740][T19031]  ? __ip_queue_xmit+0x63/0x1b00
[ 1763.262759][T19031]  __ip_queue_xmit+0x1101/0x1b00
[ 1763.262781][T19031]  ? __pfx_tcp_syn_options+0x10/0x10
[ 1763.262807][T19031]  ? __ip_queue_xmit+0x63/0x1b00
[ 1763.262832][T19031]  ? __pfx_ip_queue_xmit+0x10/0x10
[ 1763.262854][T19031]  __tcp_transmit_skb+0x2215/0x3680
[ 1763.262895][T19031]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[ 1763.262931][T19031]  ? __pfx___tcp_transmit_skb+0x10/0x10
[ 1763.262971][T19031]  ? __asan_memset+0x22/0x50
[ 1763.263002][T19031]  ? tcp_rbtree_insert+0x11e/0x170
[ 1763.263024][T19031]  ? tcp_connect+0x1e69/0x4ef0
[ 1763.263048][T19031]  tcp_connect+0x1f76/0x4ef0
[ 1763.263108][T19031]  ? __pfx_tcp_connect+0x10/0x10
[ 1763.263135][T19031]  ? get_random_u16+0x154/0x940
[ 1763.263168][T19031]  ? get_random_u16+0x4df/0x940
[ 1763.263207][T19031]  ? __asan_memset+0x22/0x50
[ 1763.263242][T19031]  ? __pfx_tcp_fastopen_defer_connect+0x10/0x10
[ 1763.263280][T19031]  ? sk_setup_caps+0x850/0xac0
[ 1763.263315][T19031]  ? dst_release+0x72/0x1b0
[ 1763.263339][T19031]  tcp_v4_connect+0x10e7/0x19d0
[ 1763.263386][T19031]  ? __pfx_tcp_v4_connect+0x10/0x10
[ 1763.263410][T19031]  ? preempt_schedule+0xae/0xc0
[ 1763.263429][T19031]  ? inet_stream_connect+0x51/0xa0
[ 1763.263454][T19031]  ? preempt_schedule_common+0x83/0xd0
[ 1763.263479][T19031]  __inet_stream_connect+0x2ab/0xe80
[ 1763.263512][T19031]  ? preempt_schedule_thunk+0x16/0x30
[ 1763.263545][T19031]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1763.263570][T19031]  ? __local_bh_enable_ip+0x13e/0x1c0
[ 1763.263593][T19031]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1763.263628][T19031]  inet_stream_connect+0x66/0xa0
[ 1763.263657][T19031]  __sys_connect+0x316/0x440
[ 1763.263689][T19031]  ? __pfx___sys_connect+0x10/0x10
[ 1763.263732][T19031]  ? rcu_is_watching+0x15/0xb0
[ 1763.263764][T19031]  __x64_sys_connect+0x7a/0x90
[ 1763.263794][T19031]  do_syscall_64+0xfa/0x3b0
[ 1763.263819][T19031]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1763.263839][T19031]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1763.263861][T19031]  ? clear_bhb_loop+0x60/0xb0
[ 1763.263887][T19031]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1763.263907][T19031] RIP: 0033:0x7f2c1ab8ebe9
[ 1763.263927][T19031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1763.263953][T19031] RSP: 002b:00007f2c1b93c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1763.263975][T19031] RAX: ffffffffffffffda RBX: 00007f2c1adb6090 RCX: 00007f2c1ab8ebe9
[ 1763.263992][T19031] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 000000000000000a
[ 1763.264006][T19031] RBP: 00007f2c1ac11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1763.264020][T19031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1763.264033][T19031] R13: 00007f2c1adb6128 R14: 00007f2c1adb6090 R15: 00007ffe93360528
[ 1763.264066][T19031]  </TASK>