last executing test programs:

24.240381068s ago: executing program 3 (id=3775):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000))
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100"], 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'batadv0\x00', &(0x7f0000000080)=@ethtool_gstrings={0x1b, 0x1}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
dup(0xffffffffffffffff)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000003dc0), 0x80000, 0x0)
preadv(r6, &(0x7f0000006100)=[{&(0x7f0000000040)=""/22, 0x16}], 0x1, 0xd7, 0x6)
write$binfmt_script(r6, &(0x7f0000000780)={'#! ', './file0', [{0x20, '/dev/vmci\x00'}, {0x20, '+}/%'}], 0xa, "6633ccb6c0e7f59c15b7c60a5eda8fe92fd206dc0b21204b521d37fb6f32362d09fa3798e01497cee49de91723abe6a9ef526799c442fdc30a9bfb68e3c513992009fd5119059a2c874858690aedd05b2619ffe7f117418f5fd835ec1c274db186c112f4c87010b37573d4cbc328c0d83442bb466376de50ef31271df8cbc3cf1edb70c19c299e2805ce43ea234f740c587318a81bf832db249dd20149e19f967889a0496062528fad426aef386a30857ee9305f6a38a92be16a612277b2e144a0b77b2b0d77ca752b2eed7d565c55ebb31d7503b495ce155f82734f5809f2b74029412bcd6374054a519f569fcf96abbc41"}, 0x10d)
getsockname$packet(r2, &(0x7f0000000700)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x880)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)={0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0x401}]}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x42, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast2}]}}]}, 0x50}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)

22.149193678s ago: executing program 3 (id=3780):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = socket$inet(0x2, 0x2000000080002, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x2, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000fffff9000000000000000000000000000000000000000000000000000000000000000000fcffffff0000ef0000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000200)={<r1=>0x0, 0x4e, "bf33a010d38de7ad3c2fa2b8c3302362b11e6cbb12b3e25b6d8c6620179ff41f4caebe5aca6d33772207188272cfa448acd19ba9229335aababf963d3097ab8153ae0eec45718a0d5275db4ade59"}, &(0x7f0000000180)=0x56)
getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000300)={r1, 0x2c6}, &(0x7f0000000340)=0x8)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket(0x200000100000011, 0x803, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x56, &(0x7f00000008c0)=ANY=[@ANYRES16]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1c0d}}, {0x4a, &(0x7f0000000440)=@string={0x4a, 0x3, "053464403ef2b404b6dd9d5e4558824c04a7908f5c784c5b9f000000000000c70350b07cfa888ab76ded79e5091ae70e1e03d8d4ce607f12e752a8964513d392dbeca8b90a387e58"}}]})
syz_usb_connect$uac1(0x0, 0x97, &(0x7f0000000800)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x0, 0x0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@processing_unit={0xc, 0x24, 0x7, 0x0, 0x0, 0x40, "32341681c7"}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x0, 0x4, 0xa1, 0x0, "8ff404000000940000"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x4, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0xfe}}}}}}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x25, &(0x7f0000000500)={0x5, 0xf, 0x25, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "79f03953c4c96fe6b1d67b8b584cc085"}, @ssp_cap={0xc, 0x10, 0xa, 0x0, 0x0, 0x3}]}, 0x3, [{0x9d, &(0x7f0000000740)=ANY=[@ANYBLOB="9d0379594b8573ba1de807f914061bb486a9eeb5549fd83515f82e0ca4117d5ecd579cf2a3eafef7377079eb0ecbf1b89b7a7dd3f19e9d890fe3648f133d8272af8bcd089bd8594252b1872d5a6286907b9542e69738c76ff4da43850d9423d6322609bc995eb8b7b088fd0910d90259ac61a382107a6d336cbedf657fae87a95e5a3336022d8b70ad3a67729d309b05d45251f40b91e28bfeca08fe7e43e2139e2a1b34eefdf6f454730039"]}, {0x18, &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, {0x0, 0x0}]})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x40}}, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r7, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0x8f}, 0x20)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10000a1, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x20000004}, 0x4)
r9 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0)
ioctl$VIDIOC_G_CROP(r9, 0xc014563b, 0x0)
r10 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r10, 0xc0585609, &(0x7f00000000c0)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "a19422ed"}})
socket$igmp6(0xa, 0x3, 0x2)

20.07226402s ago: executing program 3 (id=3784):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x40, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000002c0)="0802fc7073e28bcdae6fe3567e98a9eb60ca3174aefe323624", 0x19}], 0x1}}], 0x1, 0x4040052)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

19.629401031s ago: executing program 3 (id=3786):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = io_uring_setup(0x168e, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000003c0)={0x800000000000009, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
write(r3, &(0x7f0000000300)="29acbe0ebf280d823c32289df1b210e27c69738efdaf14c01cbbe8a0c93e21fc9d541e8d95c0c412ba8ce3d1a93a04e35c654c691a93e64f8f916ea6bb97f8708219e6012282c11b3db43fec46cc896e9df57be67b7b7cb6bcd256e4af57a1ad427e3590c0bad08ce03c02bb4bfc612eb12807a8172cf4d7da9b0dd2e38bb9f62af5ffb62eaacc635426aa180d45986ba23df1976adf78479f42018282a9872e28cc7cd4f090334996841fb06fdae7be75dd785f310677f78f9c1f22e2f0d760bb13a3dd73dcaaba7d6db3b2c55bd40547ed79686143008f99", 0xd9)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)='\v\x00\x00\x00', 0x4}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000385e5d7b00000008000300", @ANYRES32=r6], 0x2c}}, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0x8}, 0x8)

16.85837509s ago: executing program 4 (id=3801):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9}}, 0x50)
read$FUSE(r2, &(0x7f00000044c0)={0x2020, 0x0, <r4=>0x0}, 0xfe63)
write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r5, r2, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r6, 0x100, 0x0)
r7 = dup(r1)
r8 = semget$private(0x0, 0x5, 0x0)
semop(r8, &(0x7f0000000000)=[{0x3, 0x100}], 0x1)
semop(r8, &(0x7f0000000180)=[{0x1, 0xfffe}], 0x1)
semctl$IPC_RMID(0x0, 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400400, 0x40)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000480)="400f01dfc4c131c6b70e0000009c440f01d1f30f1eebc7442400d5000000c744240200509f08c7442406000000000f01142466ba430066b8004866ef67f30f300f00564c66ba200088", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioperm(0x5, 0xfffffffffffffffe, 0x24000000000000)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000fdffffffbfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000000f040000000000001d4002000000000065040000000000000f030000000000001d440000000000007a0a00fe000000000f14000000000000b5000000000000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b1100886475923906f88b53987ad0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d64364f56e24e6d2105bd901128c7e0ec82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7dfcb59b854e9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b884114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae315c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c2811e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96735600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
connect$l2tp(r7, &(0x7f0000000040)={0x2, 0x0, @private=0xa010101, 0x3}, 0x10)

16.099648604s ago: executing program 4 (id=3805):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000040)={0x80, 0x8c8, 0x0, 0x0})
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x80000001})
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
setsockopt$RDS_FREE_MR(r2, 0x114, 0x3, &(0x7f00000001c0)={{0x8}, 0x1a}, 0x10)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000180)={0x3, 0x6000, 0x0, r2, 0x9})
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
fchdir(r3)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0xc000, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0)
landlock_restrict_self(r4, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f00000010c0)={0x0, 0x29, &(0x7f0000000100)={&(0x7f0000001040)={0x14, 0x0, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0xfffc}}, 0x14}, 0x1, 0x0, 0x0, 0x4008004}, 0x8001)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f003})

12.070611734s ago: executing program 4 (id=3815):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, 0x0)
r2 = io_uring_setup(0x29ea, &(0x7f0000000480)={0x0, 0x0, 0x800})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f00000000c0)=[0xc, 0x7], 0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'gre0\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x800, &(0x7f0000000200)={0x11, 0x8100, r6, 0x1, 0x0, 0x6, @link_local}, 0x14)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="2300330040900700ffffffffffff080210ee00015050505050508b00bcc4408103010d000800a1000700000008009f0006000000080026006c090000"], 0x58}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000005b000100000700000000000007020000", @ANYRES32=0x0], 0x18}, 0x1, 0x5502000000000000}, 0x0)

10.587237735s ago: executing program 0 (id=3822):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x10000, 0x2ffffffff}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_CONNECTINFO(r6, 0x80045503, &(0x7f0000002a40))
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x700}, 0x0)

10.042229228s ago: executing program 0 (id=3824):
r0 = fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
epoll_create1(0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000987000000000010000008", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, r2, 0x1000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="64000000100003050000000000ffff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800c0001006d6163766c616e00240002800800010010000000100005800a000400aaaaaaaaaa000000080003000300000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0)
epoll_create1(0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
r5 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="800006000a000200aaaaaaaaaa0c"], 0x28}}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583"], 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x0)
fanotify_mark(r0, 0x1, 0x8001022, 0xffffffffffffffff, 0x0)
ftruncate(r5, 0xdcb)

6.893449075s ago: executing program 2 (id=3833):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f00000002c0)="1500ff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0x1b309) (async)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) (async)
syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async)
shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x13, 0x0, &(0x7f0000000440)="cc9f4d42ef21760fc9ae7ef1558f46be00d0b5", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
shmat(0x0, &(0x7f0000ffc000/0x1000)=nil, 0x7000)

6.892798692s ago: executing program 0 (id=3834):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0xfffffffd, 0x4}}, 0x2e)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@hyper})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x2}, {@hyper}, 0x400, "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"}, 0x418})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0x7fff0006}]})
fchmod(0xffffffffffffffff, 0x4)
close(0x4)
linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1000)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0xbfffffff, 0xdcf, 0x3}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0xb, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.611916871s ago: executing program 1 (id=3835):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r2, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1])
fcntl$setflags(r1, 0x2, 0x0)

4.929616166s ago: executing program 2 (id=3836):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)

4.597160482s ago: executing program 1 (id=3837):
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000039000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="8fe848ee06380f01d10f21f83500000d000f23f8b8f83aa9970f23d80f21f835800000f00f23f80f01c866bad104b0d1eec4e3b96802ff0f97fe0f0010660f63c4360f78b9fc000000", 0x49}], 0x1, 0x52, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="650f8a020066b9030100c00f32f20f320fc7a9406366b8005000000f23d00f21f866353000000d0f23f8f3260f32b805008ed8b800088ec80f01c40fdf840b00", 0x40}], 0x1, 0x41, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x1, 0x0, [{0x80000001, 0x3, 0x0, 0x1, 0x4}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x7a01)

4.545308689s ago: executing program 2 (id=3838):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000440)=[<r3=>0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64d0, &(0x7f0000000280)={0x0, r3})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
gettid()
fcntl$lock(r0, 0x26, 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000001380), 0x7, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x8000, 0x1})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r5, 0xc0286687, &(0x7f0000000100)={0x2, 0x100, 0xe9, &(0x7f0000000000)=""/233})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001e000d04000019000000000000000000317f50cf83e47ded1de94a684205d3620ae42f450af7363ae43228c9332e847698e290256837bcd943d6c84849d410662427803b1346428423bbd964a0eb544bcf262cf6d9745bcb00c015293cf6d081159feccb027f17b897dbeb7b3e482498d900651c8a7410cb0ab6b769f3e00c646a64be374c179215b43541dfe3e00d04c7fae044f9a182d972565667ad203e58b8d90d48a3a2"], 0x14}}, 0x0)
socket(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x100000000000000, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4.169264809s ago: executing program 2 (id=3839):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = syz_open_dev$midi(&(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, 0x0)
syz_emit_ethernet(0x10a, 0x0, 0x0)
semget$private(0x0, 0x6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
syz_usb_connect(0x6, 0x5d6, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0xc6, 0x9e, 0xd3, 0x20, 0x50d, 0x128, 0x687b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c4, 0x4, 0x3, 0x2, 0x20, 0x7, [{{0x9, 0x4, 0xa7, 0x7, 0x2, 0xff, 0xff, 0x0, 0x0, [@hid_hid={0x9, 0x21, 0x3, 0x7f, 0x1, {0x22, 0x53a}}], [{{0x9, 0x5, 0x0, 0x2, 0x20, 0xb3, 0xd5, 0xf}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0xad, 0x10, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x80}]}}]}}, {{0x9, 0x4, 0x7c, 0x9, 0x3, 0x12, 0x53, 0x43, 0xb, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x7ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0xfc00, 0x2}, {0x6, 0x24, 0x1a, 0x2, 0x1}}], [{{0x9, 0x5, 0x4, 0x4, 0x3ff, 0x7, 0x6, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xb}]}}, {{0x9, 0x5, 0x80, 0x10, 0x40, 0x3, 0xa8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}, @generic={0xdf, 0x4, "d47523a1eff48e50280df6c19d817f17fc96e0e40bfd294573a3ff0e0333d6ebef5d40fcbcc91b4ece8bb43dad0e8a47cad7fe0831f3eaeb80668dcbf0d28b9fd4637d928ef221e6de960a5d8af4add4ad75d380cb640405a0d7225c0184fd8a0f197d8bf96fe040b0dc7d99774d10012c5ed84cab9c225803dc8ebe07ce20c442c9ec3b388ce72f9ab6d0d6e6591efabc0d017a8b0487f59774001c2eeb171e3da362a8c559e5909c961fba427738e32a134ff7a63587c8546f0df143d1d69a77bf71b418498b2a22500c4eb1b2b222ee7c249b2d6ed682a0ec32f304"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x400, 0x8, 0x2a, 0xa, [@generic={0x6, 0x23, "515f7eb1"}]}}]}}, {{0x9, 0x4, 0x87, 0x3, 0xe, 0x5b, 0x5c, 0x8b, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x2}, [@extension_unit={0xd, 0x24, 0x8, 0x2, 0x2, 0x5, "c60495f5b91b"}, @extension_unit={0xa, 0x24, 0x8, 0x4, 0x6, 0x1, "f9a7a8"}, @mixer_unit={0x5, 0x24, 0x4, 0x4, 0x80}]}, @uac_control={{0xa, 0x24, 0x1, 0x3, 0x6}}], [{{0x9, 0x5, 0x7, 0x0, 0x410, 0x3, 0x4, 0x1, [@generic={0x35, 0x7, "ccd5dad2440c63450a8f758cf90eb181b58a935a9105bdfbc9a5f6ef306fadbfd46063d14350c498ae55ff7d1a56f48da82e83"}, @generic={0x4b, 0xd, "7f20ef2e007c2eec9f02cddc69d0e03e54b5ea1eb4e59deaa3e905e9a63b9645aae4b9b7d8749c1dad489f77df903349c6e166ffb15fc4608dc83af47c9210c4764ffa8ded70c375d1"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x20, 0x7, 0xc, 0x10}}, {{0x9, 0x5, 0x4, 0xc, 0x20, 0x65, 0x8, 0xf7, [@generic={0x2b, 0x11, "0cdd0e7e3e6b55ba94e3efe96c01b0cbfae18ff662a03455fbc29d8b5143d9641e7cf48e38689b59b2"}, @generic={0xa7, 0x23, "9b7d575115c3e42ef64d929d270ecd564c4aea0ed4b0c30dd4182723aef6278803a182c77e02cbd5c66989ec4293e4a246a6b45bfa3823b77d463cb73ab81fcd074061739982eb437fbb6d6a563935d744f5191a3c80ffd1dc1fb68fd5be3b488684b8c108a6af8ed93a5af7c9accc4f3de607c8cb4e52b19db9bd248bbee18bddd23286ad8988c8f19ef296085e93c701d3f89123e84dab042f6c1aa39294ecf8a19b3c4a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0x6, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x41, 0xfe}, @generic={0x63, 0x6, "a997996e3f4847a37231f6849c94af26734dc9dad74ffb12cd013c3886a353590c166b44c0bce9db03b15eb03e180753182f0e44e9e434fb52604ad6db0ee3f9d73397facdf821601fd99f37f9adb7480f96f00850230467c1ea82b91b933f64be"}]}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0xb0, 0xe, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0xc5c9b028e8e5e33d, 0x7, 0x4e}]}}, {{0x9, 0x5, 0x0, 0x1, 0x38, 0x6, 0x6, 0xf9}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x4, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf6, 0x7}]}}, {{0x9, 0x5, 0x1, 0x10, 0x40, 0x0, 0x77, 0x2}}, {{0x9, 0x5, 0x6, 0x2, 0x8, 0x6, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0xe9}]}}, {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0x5, 0xd, 0xa, [@generic={0x6a, 0x8, "aea020704e5a592023fb1b47f9e8e695f243e009efd6445b011fc95b65ab0c86a8fc30f54495aeea8a87860bfe5d471842abda7b6ec14f6d69c07d4038b7b7a23a9160e742ca0b938c02fb1cd5c3fb0ecf904a78294300c0ac43c256d62b6c13f3c98be3b4530d21"}]}}, {{0x9, 0x5, 0x8b, 0x2, 0x200, 0xc, 0x5, 0xc3, [@generic={0xea, 0x3, "30211298f396ca5e2e4ffdd10127e966c8e5f3c4ec2eab3cee94d455fdfa04b9ca6d37c5dfb74e7cf8204dc688a46c81d6fa533714a0e894f63dda230061b5f7d8ca30aabeac5656c3d25f8057803e0c95cad8eebe366a7da6d3129a09f32f36bced801c0dc7d02fb5373f8e1b755b651dd4f7ca8fc9767804bccf65bb21f969935f59c3cfb79221fe94b9b2524c7209c51af0877c01327ac35512859751b3c41672ea88714c5e1fc30b9cf1ebefccedb5d81716df0b29d57299364cd8449a994a35afb94dc1841df01d1616a58ce29e41b7ddf737694f8a71e3d2655696820b21c4c49f33ff756b"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0x1, 0x1, 0x3ff, 0x7, 0x7, 0x2, [@generic={0x72, 0x21, "d9f92696b376c306e382f059cc27d6d93781aa554351f4a9fad99c0677727a4c74b15e28fcb9e8eb6c138293b76668c4aea718a7e5807c247d1d86ac59ca44f62708358f2fea0bf7e263b5f0072518a8724ad82fa202821d7644d7a0ee1a8b52740adf19beeabc7527048ef692cc5ca1"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x40, 0x5c, 0x7, 0x3}}]}}, {{0x9, 0x4, 0x13, 0xd, 0x0, 0xff, 0xff, 0xff, 0x5}}]}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0xa, 0x3, 0x6, 0x40, 0x4}, 0x21, &(0x7f0000000940)={0x5, 0xf, 0x21, 0x4, [@generic={0x3, 0x10, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x3, 0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x2, 0x3, 0xdd, 0x6, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0xd, 0x4}]}, 0x5, [{0x61, &(0x7f0000000a40)=@string={0x61, 0x3, "c3f3ba1fe0853f4822132413f7fc5baa8aec77fb666a2bde21be3dba84441ffa26c7b186133b8e02e3bfb082166d917b0cb5a4b5fddada4ccfbe287faee433e584c63bf13072ab1f53e0acbd308849dc0ff8362ff23e7aea067efc81cc6aa1"}}, {0x7b, &(0x7f00000015c0)=@string={0x7b, 0x3, "1a1bf70905a7c5957d4a59f9215219998011d8e148f042806a7f38c2feeb2264622d3aeed10746bea22624b2baae7a2d4f8c7787dc0d6b8aaa45d52bc5527e73069a7f9c8e835b0a9032e7c51114445b44646f0a38cb3085faa773de1b67f8fc339f7fd8c705b1b1a3db5b60e404410c82da4408117d9eb98f"}}, {0x98, &(0x7f0000001640)=@string={0x98, 0x3, "c39e9c08c93c945bdad130d9644f9719064badd28cc410af0fd257093ac46f6e6e92e628ea3f969a8f762428334b1b3faae4667045ebc747286fd68ae288a24fb0786eb03a071b81f41f7a46ed8fe60c6a7a97ea525fe7ecc30d9829240940f4d18c42df1f9f14200755ba7c8e2597149fbb6342bcbd34d46dbb416a05ce6ed4764089d92577167d3765f3a14abe5eb49e155266902e"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x843}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x41f}}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}]}, 0x24}}, 0xa000)
sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}}, 0x28}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/18, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0)

4.101394751s ago: executing program 1 (id=3840):
openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0) (async)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae03, 0x4a)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = socket$rds(0x15, 0x5, 0x0)
vmsplice(r2, &(0x7f0000001700)=[{&(0x7f0000000080)="ad3f0c09c65eac670457a6a70638d39250a39f47dd06b671ab986212c3894917b9d90617686cfea1c5", 0x29}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f00000000c0)="a9eef81695eaa278de48db72939aa291f0e7ee073966e7922a07243f4a50391fdbf2058f74890c803f", 0x29}, {&(0x7f0000000100)="a54b7a30142f77a45e78a6c442be82a31e82bf9a366b2cde0fd8e8567928c55b5f4933fbe453c1d544bda32d90ab884136c4bbccb7e725138f823f6d4580f0a3bfcba81081558b7eca66245afdd4c0565385d334f9f6703aa106e08e815899a49838671a65999f711ee4c1b88cc099ceec89fa75be3854bec140c1a5bf807bcbfc1adc56242da072ff702f06e8b7ded3eac68574f17f4bbb175c95785bc6b8f550e6efc86e1398ac3bed2405a162a5ca41b64b2c23b238c84d108a8681031196f95c6c76b80e5223ba8f3237abcee76ab083e14dc70d69b9586b658af6b5f20b6a23d20b72e095b4", 0xe8}, {&(0x7f0000000200)="dae112e0d70e6f3f121c0687c544f38ae0cf2b904dde3487174e4b1e53cb69a3e88aa78e7adaa609ee4ad76cac6913bb4e8323fed9ec6010bedd8a65ce55ed4f3bd23454268e08b7d188c78909f361e8b75cb7b3a3283903f7f130c09212c1e2261f8f3433f04148bc97d8b4f0a11075d1", 0x71}, {&(0x7f0000000280)="5e8489d40f8db59f05a1e579a72c0ec075a8b147a5fe23e8f37f7c44bee5c8c9d07a8dbd2eab88adb9eb68495df597f000b3eb8ec981c63cc67bcb9b10b8cc980f83d4df218018b371ab8554c35b30f13fd78120fe8e38943e2883936471fa6dce6a6f2285400e6766d2f696d9124b6851bf44831143378c9a1ba1512eca1d5cf099552d7ac542ab982bad562310d6c1d4aa93478e9b0b4ae36d476cc161dcf7f4c83d27960a12c0369a3b0e052f443ce86e009b1d49a21cda18f69b4e60a972f39d83e5e1324f9497cda66462003104522f3789baadd6a1fbb8f8652e83", 0xde}, {&(0x7f0000000380)="c13099a7b977cfc36fdbf412bf80f6fef36159dfeaf7c0341c1f4222f3ac78da7e6a715ceb0f7d126948d5b890a196fce044230a7aba93afde893bf2d0f26a20bfdbad2bf8bff82cb123a9d5696e0aff95355a7516d09b3d3b2bd68fdde53ab0cb5bfb101f0c44072c9f2699e57922ec955609d818f15254788c14d61bf5d489783f9c86982eaab222ea3b20250bc8595765e5e1bd95cd28a6949c55598e17656b9c9aa83fe4a98c0b4aa839e5a8f046b71fca1efa10fdc3f4c125b2e9c8cc11ba9a5bb6a133b786d1924d0d2407a739aa146a4b4943db0d4624c1900940db3645da76532b9cc6d7", 0xe8}, {&(0x7f00000004c0)="461d471422777ed1acef9c08ec0232315b18f23d6e760143fb9a428ad66029d247406484b4580043b5ae403d14", 0x2d}, {&(0x7f0000000500)="c43d50ced5327b78a72a084b8c9ebf07ccc9812752808859bc3458bbe626249659db8e7b825df1020194e088e89c2ec50d272519f82876ac36f382c8ec8e99db068c1c113239982c4ba5d663aefe1e51f51f12182bf1141793e8d3fde618a271448cc4d7a7756a65968db8f7f43af13341e4dc6b7c3bbfe49aa980212a2f66a821e9eedb43e6149391696b4eb991f0f192ed4a8eca50f9661c6e7caa2558a65b61067eb8731b96414b37ae82a949498480e2db08a393db98e9ee3572", 0xbc}, {&(0x7f00000005c0)="f7bf0791d511a8cd9aab59b0a9ad04dcfdd3dc71919b7bc9ebba8bb836e179bb78f7647a38ae78a4f896ee9b34349959564131d9c7e801be8fde07e526f81ecdea342438594df27f974dc76e76d74fc5ffeb097a393cd5ce98c14a47e363823a0d67763c75", 0x65}], 0xa, 0x0) (async)
r3 = socket$kcm(0x29, 0x2, 0x0) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) (rerun: 32)
sendfile(r3, r4, 0x0, 0x8000fb00)

4.100961083s ago: executing program 3 (id=3786):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_DESTROY(r0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = io_uring_setup(0x168e, &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f00000003c0)={0x800000000000009, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1)
write(r3, &(0x7f0000000300)="29acbe0ebf280d823c32289df1b210e27c69738efdaf14c01cbbe8a0c93e21fc9d541e8d95c0c412ba8ce3d1a93a04e35c654c691a93e64f8f916ea6bb97f8708219e6012282c11b3db43fec46cc896e9df57be67b7b7cb6bcd256e4af57a1ad427e3590c0bad08ce03c02bb4bfc612eb12807a8172cf4d7da9b0dd2e38bb9f62af5ffb62eaacc635426aa180d45986ba23df1976adf78479f42018282a9872e28cc7cd4f090334996841fb06fdae7be75dd785f310677f78f9c1f22e2f0d760bb13a3dd73dcaaba7d6db3b2c55bd40547ed79686143008f99", 0xd9)
move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], &(0x7f00000001c0)=[0x1], 0x0, 0x0)
writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000100)='\v\x00\x00\x00', 0x4}], 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000385e5d7b00000008000300", @ANYRES32=r6], 0x2c}}, 0x0)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0x8}, 0x8)

3.707371702s ago: executing program 1 (id=3841):
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB])
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x8000)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r2 = syz_io_uring_setup(0x236, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=<r3=>0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r2, 0xfffffffa, 0x0, 0x0, 0x0, 0x0)
read$dsp(r1, &(0x7f0000001200)=""/4096, 0x1000)
write$dsp(r0, &(0x7f0000002200)="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", 0x1000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000004580)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r5, 0xffffffffffffffff, 0x0)
openat$ppp(0xffffff9c, &(0x7f0000000740), 0x80, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)=0x3)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
close(r6)

3.387954054s ago: executing program 0 (id=3842):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x100)
ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000040)=0x800000)
r2 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0xffffc000)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x10002, 0x0)
fadvise64(r0, 0x0, 0x0, 0x2)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)

2.188503144s ago: executing program 1 (id=3843):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000d000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x31, &(0x7f0000000140)=[@cr4={0x1, 0xc}], 0x1)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text64={0x40, &(0x7f0000000280)="b9800000c00f3235000800000f3141d18c9aa76100200000217c51b05a00000066baf80cb8107bdb8948b879000000000000000f23d80f21f835000000900f23f866bafc0cb8d0000000ef66baf80cb8eb889480ef66bafc0cec67410f9d3d8e000000fe03440f0866430f019f00900000420f06", 0x74}], 0x1, 0x1, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x2, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000)

1.884643223s ago: executing program 3 (id=3844):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$sock(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)="651e06d2ff1824a7b0d27cc01959ccc0ac3ce6602a86d7f907a6442b30edcbe9ce43d4c9b0e7f7dc53dc4154d6139f231098a5bcc6a617d11b5c57bcacd27fe46cd3d03dba278085f73d2117e77256e7845c97386d2471ac675fb9432005567a2e190f", 0x63}, {&(0x7f0000000240)="bb09c0404c4e2a6d661ab81718c6b1eb1f55a1da8275a7171bc24aae18f0385a8b744b3bb2ba57d5110ac3f6d538d929db88c76216bec7342c8e018ce1c11227a932d72048a40176a421067620cb2ed8e191c22160abbda624df577d9ee9aa9a0bc68aba1c218901e6b83f5308851c", 0x6f}, {&(0x7f0000000480)="4fda6335c93803f4d7506f448823cbfee7cc3a7ae8fdb04815087965e199bec8705f889b84bf3e8ca42c6f4d523fd6e5a927668b529b3deaa7d668ffb28e725b8f0c396f08a4b58a6bbedde4f9f9374ce697de6f5937226b4de51ddc2da9c7322f713655d53c40db372c67bd1841fd4f441c0ddc8cdf200b2f148d8beb40f041d585a0a71b60aa3c459c8b9e9f4890db19f7dcec992534e5c82542f814e7b1255282979903adfa04c17b77a92e3f5213df69", 0xb2}, {&(0x7f00000002c0)="eb595962c4db883ae1c69c011c8dd54dc4e9ef0add0aa959829e16b9124ee5b3f4491da5a4d3d7c5eb68519a1a6bf4330288fc22a48ec6ff82426a945fdafa7f36d41c126fc6", 0x46}], 0x4}, 0x20004003)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r2)
close(r2)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_setup(0xc40, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000003c0)=0x3, 0x4)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d"], 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCXONC(r3, 0x540a, 0x4)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r5 = syz_open_dev$vim2m(&(0x7f0000000400), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2})
ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x2, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0x24}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000500000000001c00028004000100140003800c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x20004084}, 0x0)

1.749263301s ago: executing program 1 (id=3845):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003055740ed0b0011c316549eaca7ec00000001090212000101"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000080), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
openat$cgroup(r2, &(0x7f0000001980)='syz1\x00', 0x200002, 0x0)
pipe(&(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1)
socket$inet6(0xa, 0x1, 0x100)
close(r5)
socket$netlink(0x10, 0x3, 0x4)
write$binfmt_misc(r4, &(0x7f0000000280), 0xff36)
splice(r3, 0x0, r5, 0x0, 0x80000001, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
setrlimit(0xf, &(0x7f0000008240)={0x6, 0x6})
r6 = syz_create_resource$binfmt(&(0x7f0000000e40)='./file0\x00')
r7 = openat$binfmt(0xffffff9c, r6, 0x41, 0x1ff)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0xf3, 0x109000)
r9 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r9, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r9, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000019c0)=ANY=[@ANYBLOB="aaaa37635db67b184d3dc9b99e6ee84f7a38aaaaaaaaaaaaaaaaaaaa86dd607a9d0700102100fc000000000000000000000000000000fe80000000000000e6ffffffffffffa90000000004019078"], 0x0)
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000040)=""/95)
write$binfmt_script(r7, &(0x7f0000000040)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}]}, 0x13)
execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
execve(&(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001280)={[&(0x7f0000000080)='#! ']})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB="06d287e4cca358f0510375724d3005570880de5ecd66b9948ded8a7d8901a18ab91dd15bc548befd000000001f6cb3fc2df4eaa4a7bde83e1fa5b01a1b472fb18547b43b6192cbceb90e1e6623802cfbb32f0d8896bd709bd0f0ee55b8ba44140b7e6183ddaef331f9276cd60e225d33dac57ce7e83a4013eb4ec8febb1edb72cc51380002056470fd688ec004cca16e498d73937a22df4f74fecc0ac25036bd2d6808413d1acdad49ee62460400a3ced2a980ae9a2368323dda9649f7c72027c31dcb62ce00000000", @ANYRES32=r1], 0x54}, 0x1, 0x0, 0x0, 0x8008044}, 0x44054)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0)

1.342878392s ago: executing program 4 (id=3817):
r0 = fanotify_init(0x200, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
epoll_create1(0x0)
r1 = epoll_create1(0x0)
r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f014, 0x105})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000001040)={0x9000001d})
read(r2, &(0x7f0000002e00)=""/4088, 0xff8)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xaa4, 0x0, &(0x7f0000000100)})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000015c0)=@assoc_value={0x0, 0xfc36}, 0x8)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000001480)=[{&(0x7f00000001c0)="d6eba706674926807edc4e199baddb3421504fb7cfbc6bb4dffe9cb15675a75d8d62f29f8b14eff28acdb1986e1440dd0adad9626292a947e8f2f756f0926b3bce380ff59b93390097b38fd3477e4718531fe7251d24deafede73a73b1782931810559a8315479c0d1433514176eaf85f0354039cea49c62662d6bf1af03e5c184771bb22982900182cfee35737768a62ecda8b3a46c2200d08e2cf3bedf1ed0719dab1a241086", 0xa7}, {&(0x7f0000000280)="1d8f18e026bea020342ccd02d999d86c9b42705f2ee8599c797d4aa632031e9291558ef0be1f543fb26a50958c1a46ad1eb5ebea7b30cc9438a23e421b5cf162af98632455e164e43e176735f51a90a0046a705901340ac4af06efb89bb5cb711e1605b29594a12c4f9a159c551f07d7dcbde808c5050968390011f106acd1aa641682a7956b37c2edf2bb62b156f4131c7931a1dbb36d61bfceb6a787324dd7f779d59628485377f61f2a768bdb12a92c266144a8ac7ee293cea089767477356023742540", 0xc5}, {&(0x7f0000000380)="a506cf5602f9c542a375709cc1f090d3f2ae5c378f3d07ecf5570c7c6fc4fa9a2df6977955e4cf3fe98eb97cc1dc789f55d44ea8434023693925c9841a7858e21db7c49f18a32b1acdc0a9505308cafee18a4bf78123d22188", 0x59}, {&(0x7f0000000400)="5e07f3aabc183b887378da7fcacb", 0xe}, {&(0x7f0000000440)="8f5e65c21340f9f22988ba2140b1523a784c7637a21c88b7e08676ed2058898eee74d65ae71535187c7a372e133cca4a4458d8f6e5719b0c91dde2150b5972c1d612b8b447a760bb342372a4ac1e7badffc1b0586d90e441760b9648fed58b80ecb5b5ca0ebe6b3ca0090d301035eb67d9f8baecbffcf29eb440ab83b9479f3dff33fa7d5e6850f709b760c3c8d33c78cafcce99638a0b3e567213e6b7981b83ce0cedf9301abe498cc776db1189b079cbca69355440057f782ffe42e6ea77b83dfc098fc98ad07aec975f13310d019415fb60c473f92d5730275dddea9df2b69c7db18a4f0c3e5fe9e6602ee52f59d6433e0b37af2fe85ae8503d1337d690d0e27e0f5ce59acc8af547c9b43e437ae4ef5c0618667f63f9c2b7b4ade020cf23ab16f8915bb3a339aca6a30606017e482e0fa80328eaeecef0e915799f736bb2a4e1d155408ba49e2b246f38a3fc17921515c42304dd347b01e24127909699ac7993f95297b0ac4033d9bb2fab222b6ce5d1f4cd3144b485cc400e78a1693620729ea7c1dc7797a769255fc2896cdc33df2b829493fbbe70fee1931dabd09942823336cfab5491b81000d62a695f2e87ba90fae0b493cc153da0e3ef0cb26463e62c8a38ecfbc837cd4f2778177d13c00bb5f329b94016ab8c96c4857476b6ae12f78f2e65fc6fa2ce668881510fde9db0f523b85aa60e37242b89d59e81f049661730b994e6be2561d445951fb44554ca7cac06f35fefb15a3531576eba05565d8eb1db670fc3a31c2cf0da76653a477b8e34b055facc4664c67463af565487132df0324e1f6b11a11272e824aed173a64e9ee991c9ff1c79aaee3b4ae1bca6f07bd8d764fed05e03bb0382d8e3d012f8efca9b6e1f688dc6a9c7dc8735b01ae0bb2bdbe2665c31ff046f21b56bb47b784a948c32778428854c3b6b1bfb2db34697dfca3cf3b6f39370863f3c277d9803328ca460909608c4a749d5fff4e01a3c705a089f1fcf6c1f4bd0f425f8193e5ba1184934df997c7878d3e0bfb7bb12f3063252920a371f63ec598d59b1ef81abe191f3b9713bc514e24d401a6d92acaa9eee54d219ef9aff9b069b5f4ffbbb14d04c84fa9966375460162b80966d8350d40b7590c4d9dc49b94863646f4e1b52bd5324d49567f4ca7a0ada78691bd6c52d1983bc935ab52dc5f55a92092d98c51e659f61377a5362df25aabeb47eb3f2b5aa84845d53f464425e2c7fc4c6ac02f7933e57c7f79315b869e4a3a8067c28f180264f115914336aafcddd067edf2988bf53c6d1354c1a157d0f94201e585c4a9fd518d716af4df584df67328d43c90abae4a8716eb7d5d59816d6d6d3f72cfc8423540cd0cae17fd6f5f72b61c5eb303d8c4c53a59cad2dc4715d5b188bdc0362f4c1cb8703a2d83a5c4c9cea9a3e769bc54d507a3501f60a055ef2f371b4e1b03d484a294bc6eb0cb69f48f44d3da47ea3e89e2e2d3be28b134dc4b3e1e89e083980c2d133877bd82da99457793844fdc5b5a67066730e3fbcd91b1d6113e1ecb9214437355a53fb5cea5606cccce9e57329cbcb7fe1b79b93dc835393aff5d8f986205cdb28a774445e040849309ebb9ee3730fad29959acce7841b233ab4d3fa4e1a6a14bf0593e049ddf0820a5ca2d6201b57bddba8cd5f24328d910c19bb0e7331e3d75e8cfda2bd6594c4a6fb33309f17f3905a3c30cfc024d97ebea1e11ee278cf7273d95871f9a7e9cce6f698f242bc999774a85b5e2ba7454281160c20f3a985a5a01c4e79dd11d791d5718f956c45f40c4fdd4356587a4f31321e40d8b803440ea68736472cdb8bf6a3418510cddf52edf20fc00cab806231bd97ad1dc3b70b4d780bd7b00b67030e8301e83d181a3e4aac5a5c98e464a64a806a968fcfecc6d452cc9b986dc89cc842a4d5a52a5c094c18a89316c97d03b06abb3db88c1866ca1ae752fae3d73f6763fc7ad293ed57b13b3ed3f5dbcc87591e3b134c63bd50586772f9ff3c359f6de08ed9a78fb50e358fcae00b4964b4b6b023e05e6a7ad18482d002606851cb52af72b91d45ed8545b68436bc563c19867a507fb78ef30c57d2b869b09487d0db7652df39e6da0be52adcbdfb19002312be671ce7049bd1cd0224763964a9866fcb406ad2f229f59fba1e2be399fc6a33db7546a86c82f54202d4bcab89e6be183bed02e94a27bb19e33e9d0d1e00d2b7f22764da1d9ea9346dc805b8380d454d62fb24fa716853b87b3c7d340b23f3e012e6f5a909a01de022e7b7a835cffee4c11b30e4e04a22c7cb5dd1f98b613951aaf2e21def54a7d038245e335ebeca4055e95e2556bb45a1ada5fba0bf96b927056c36fa946420de2c146b7c893245c09e1c00c9f2d423c466a62ed21a5997b24fcc47faebc7ea69888a26cb625030819f9597092935fab23c1e64dfe3bbe57b48886b403da1c9aded2bc895c15e864a2436ef622b9da136ed6d855034afaa0b90494c2d5350efcbebbdbc06d90a822e6f603d3d035c59ad76d0849a6cf13a9389864ede04d500542bb8c0e9492ec0102e0ea5e5c060124f7e33a47dd062647cba1d0be5611a992ef33baf97b407ccb9ae8b1aa797b6361edcc927305f7d4fc6646f1c17a3f60df4d5c9b55b46e2b4c951a27b62eefeac6dbe663d10238500300202f4e9e82458c84f01a5fed51657dd923003b0fc42429adff9310ab3c0f088d8020721dd6209beac84550607c2a53c28eda94f14d3afcc3988ad50e02f7dc52b35abd0b5b9a87690023f9c9bb622d95724727257f51302111ca0f04866019b3cdd4d23228f00149a8e1847b622234877c25afe2d955205ecc020a36248b8a4853882521f7cf608a8e66cc185d31d8b9a69f1dce362857e95cbc9066a8ec132514fbea8b8d4e1dc7d7930eceb3744ea0542a394cc8a1bb6d86275162663b43b61aec634d8cdb8e507e8e33904a03edace9a56f2c06dffc40bb037c997d81a8a21cb721e436884384253038bdae6ec1a07cf420e409996c81201ad4f57b0168f3e974ae8e5e340af427a11c6f6e19e3c1d05eb3e10a43e3c06ec0fc3fea8cd4a04f60a204ea576af63e5b16917f90e5384fdfc798a311a84fb2ab9612afba2b7231e97b2ef32b3d1b4f131e220df143ee15b198c1ad88073d362fbcafdd407cccc394162c6fec54b27704fffaf13a756849a03a4df6830aeba952fd8de6f4a29b5aebdee634e747f1a583da9d5a70856c08601752642405daed6b9861b1d866c58e264dda3cdcc0e09bb972c569b0f60c8e959e8ddb2871dfae25814a8d0b28d727183e135963808e1a0f83675acadd8715010f2d27903a6528d3817e8aeacce241bc8aa42af38ea81c7b610d3190689eb5f08767b9c15fb08c6ed6f7d157a75a056ae46e440edc280d2ebf67d18c1459ee47c0b49f832bfe2e6f7e1295a5e585929eb4c59aad23178b583c3cbcb617bd51f9da1d785c453788a1611e766c073c2a014a06f9825f04eb1860044dfc4f3599f8085b19c9f7238f1015567200f1740d64402b173a0cf757961d1e055b299fcd0e93ea40899a544597b03c09f9b80598cbce007e826dd32109b369b83ac72175efdd1c1121aae08c7a81ed9536d338b6c56b72fceb9d15fee73543d3df6dd91ca55bbd3b7d0dd2aaaacdf9258364b3e150c7b78dec721ab132a0e37cb192a50cc70b077889b24c902445a7f2d513210f4a3306ec881ab8dbf4ebeeb0639473815f8ab0cc82dceb64bce219e944c58d9aa07c14b5c78937439b3d9a7c2ff80b844ea7bd1fff7c624f5e81159325322f3651955d801de3aa7c51ffb8267352df2af1bacba586edee1af7f1a9be5558346483ee00a5cbe06a67b15f0f8d381c74304af5439056037f1fb01deb05b6f028ba4876668f14be2ec49b8f736055d2d1d2c1455a6efafa6bc843c5f79ae9fb79007f038e41bb8fc8bf5c292fccff2207d56054712216d2108ec71c6313d3bd091ae11ed0375e4cf9f3aaac8fdee914f8fa5f9718faf428c345ab870294509c316d32c1bba9802f84e7aa95bf239aebbe641baebe4a98c81b6daeb087e81f5ced80dbbd3feeb08b57c07ab1a02888312b9126ac973af253082464569db717391299cf29c79d8d737894d7724bdadf514413292e573d2797376cc4e5caa594f72f13b2620110908d8671c2c5dbe060ac5730457ebcedba730c7dfdd08aa2f355948ba595e5bf243f0a698c05234a26e40e24fbfb97d2057c6cd94ea93057249221df14a949527c8e00adcf17ff672a00de708b0d05e9bb12dc8e32be152945db65709796e007920275c4047072bdb2a75d62ea9c8bda86f3086a107a9f9bd42b5c191f775df3812bbd38fecb6a5f631956f1233c289a3e71cc1a18f11e90d06d225d4a7aae52f7fb705952b99c6dbdf06930011d124533e4651c97e69fa8eba0848a322c1d40a87bf915211868c2bf40c2dd6de7de6199a107d2425856d6fbc0f7e10c999982c81841ff59b83a6d24f045c7e58c55349b602e1352d0a7df4f9342a4eae0bc33bf32586a0db8528c3849f3f61ec9ea8ad2dd2daac77ac8b0f391bba1634c6b4508734f0159ec80fe4766e6e4165662689c0fa3c74ba5ee780fa47ebe9100a15f6b3cb00806d915505f30266076d1c948ceeecd6f3ee4bb14a949472005d88d23cd559f3e8dfae4887c1506672b533c66f5702d7dc5be3ec805e71be150fb3247bae16ac9c92ff7d7a8486b970e6307b3f6f03b7d46d9d1114f8bd39f7789cb4d585d4667998c517463b23fe3a2a4d9995d63c3b42f5a54766926f0e8438f5ecdd50c93c145c7b38edae375e4dea35e3412c8fab031843c4c8fc85ba3ec3e2f3cbe8394a27ed2373ffbf4bb478825949dbb9b5dfd766c4c8b09666d7889a135e5542057c8a911f432bb0df75e43a92b450bcaa0072a95a061d925cacfb35ea8ab062a9d986c679340e21f22e25e0a875d981097b357f793a8275a00a61ddde3ffdc04a48b399770cdc943c7a7dcf84dc8f6929984edc17eba578e53d8d277e259c6456090350ac51bc100899caeb2c647a6d9c38d1f189dd7ee10a0ac0d111250a5ffd9b972e8f855bc140c07dce8cd37b427baa972f9872c79ca27804057b5843207ae0a853630fb222e0c5eac8d63766024eb8925bea5a75fd922c77a82ac6babd337c8349208072db699eb74cf69d5c0dd66a43be56387ba26fc855c2c96df5fdff1e98babd39f65d6b97ed014d86dbe8a9dad939d73079d1e4205b226788c992bf4b0b712c9fa7b72a66e859bf679c9c94cffbf48cadfe34f88298a60e9d3b0f4efc11f83586fa29bf338b781c0424c1dfcefe0b34e9f01da002f7bf79d4f65ea0ff16b9264c8987d21e63273128f6ffa28075bd166b0510bf8a288992c0d0b4efca73d304db6f44b746292bd02b526f3f0280afdcbc8ad8ca1ece909f7decaf5db2d799016d53ec4f4c6f26f79be6059b7156f6161080a3ac2ad187e482874643fc1829859d65c903aae5209907472ff66dcef304ada44794e023739a130dbff6379840a4721cc56305e2aa6f991dbd940fd86736a1dee39a7ead6b70724b72ba73fc433bd1bd015ce0ae863e09ddf9b4d38b35cbd232b397620f8ab6220baf4e23739f501e6b9dd01e4aa8bcfc5f06ce0140b0b8923217c6ae9fde469cb766d9a82b762d795b3593466ccd8950c9cbbb521555bdfe827fe3fef76e6ce7ec5d0b07bc217f33a83cd218845108548dac3e7865db82d7e2ef5f5ab97685876afb7c2d119501421be486a3c4bb3de37c7ab46173ceda216dccf1", 0x1000}, {&(0x7f0000001440)="b5818efc48c5c9f9e3eadd7c06f0ff760579fff5", 0x14}], 0x6, &(0x7f0000001500)=[{0x48, 0x116, 0x69b, "4d4f0bcd02f3a5bc1d2af9566473ebb1de91d92f142a164a0791d16445366c9d39f9be7b45c0bdace05ecc50d81480a9f8"}], 0x48}, 0x8800)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040))
ioctl$KVM_SET_CLOCK(r5, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x95d})
r6 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0)
r7 = dup(r6)
fanotify_mark(r0, 0x1, 0x8001022, r7, 0x0)
ftruncate(r6, 0xdcb)
sendfile(r6, r7, 0x0, 0x80000000)

1.155729207s ago: executing program 0 (id=3846):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100020072bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000010008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x67}], 0x1}, 0x0)
syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='cmdline\x00')
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$dsp(r3, &(0x7f00000001c0)='\\', 0x1)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r2, 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1])
fcntl$setflags(r1, 0x2, 0x0)

899.613793ms ago: executing program 2 (id=3847):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0)

758.669526ms ago: executing program 2 (id=3848):
openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000440)=[<r4=>0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x3})
ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64d0, &(0x7f0000000280)={0x0, r4})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
gettid()
fcntl$lock(r1, 0x26, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000001380), 0x7, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f0000000040)={0x3, 0x8000, 0x1})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FS_IOC_READ_VERITY_METADATA(r6, 0xc0286687, &(0x7f0000000100)={0x2, 0x100, 0xe9, &(0x7f0000000000)=""/233})
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001e000d04000019000000000000000000317f50cf83e47ded1de94a684205d3620ae42f450af7363ae43228c9332e847698e290256837bcd943d6c84849d410662427803b1346428423bbd964a0eb544bcf262cf6d9745bcb00c015293cf6d081159feccb027f17b897dbeb7b3e482498d900651c8a7410cb0ab6b769f3e00c646a64be374c179215b43541dfe3e00d04c7fae044f9a182d972565667ad203e58b8d90d48a3a2"], 0x14}}, 0x0)
socket(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x6c}}, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000380)={0x8, 0x0, &(0x7f0000000280)=[@release], 0x0, 0x100000000000000, 0x0})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

361.021822ms ago: executing program 4 (id=3849):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a1810039000000000bf0ffffff00000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0)
syz_emit_ethernet(0x2a, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc10c5541, 0x0)
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000))

1.067928ms ago: executing program 0 (id=3850):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000004c0)={{0x4, 0x9}, 'port1\x00', 0xe, 0x1000, 0xfffffffa, 0x6, 0x3, 0x0, 0x800020}) (async)
r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async)
ppoll(&(0x7f00000000c0), 0x200000000000030d, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f046}) (async)
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800503a00fe8000000000000000000000040000bbfe8000000000000000000000000000aa0200907800000000605b29ab00001100fc010000000000000000000000000000ff01000000000000000000000000000100000000000000000533000000000000fb36eeca6fad50b375a22a584d16ca55"], 0x0) (async, rerun: 64)
read$FUSE(r2, &(0x7f00000024c0)={0x2020}, 0x2020) (async, rerun: 64)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) (async)
ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000480)=0x2) (async)
clock_gettime(0x0, &(0x7f0000000100)={<r6=>0x0, <r7=>0x0})
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r9 = dup(r8)
read$FUSE(r9, &(0x7f000001aa80)={0x2020}, 0x2020) (async)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx2\x00'}, 0x58) (async)
r11 = accept4(r9, 0x0, 0x0, 0x0)
sendfile(r11, r9, 0x0, 0x8a000) (async, rerun: 32)
getdents64(r9, &(0x7f0000000400)=""/10, 0xa) (async, rerun: 32)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004500)=ANY=[@ANYBLOB="bc6fcdd7fc488528f73cbc84d9a0efbf9191ed10b4f04d27d265057dcffb10c18dab0470be23d43fd6e9324fddaddc6b46b01aec3cc3b60770ae3260adfa19b8f29846ff5e396641b076a0e6b831bcf34f73e45fa8c907105d1ef60774e6a5b33b835cc9c6b198ff435d2a65e38c66563dbc1e97977b676bcc34106649702c47324c2f64129339d1f12b577e077337e0ea934acc8d42c7c375fc3840d222af0c43c6165fd8c13fdd4b2b19752987a0b7aa24c76b21cae6a15a9d8c7450bce329dd314eeb6207364c6af433feaa907f15bbd75ee0649a780889b3ba93a14f779d6c3d58a037d31c045f3672059d8eee9bbf6ebb2ab5ed2649b97ecc419b4e82d28f41b693c24be88523448184b2845166b1320bd0e3d77135a4a57c40b5b3e8ea356427c04009d70c6ccac92a2800f6fb129caacc8781cdb7e0a380a6b2e851a61b9dc4656c01b0aa0f95ae9b536d49fd773846fb7acac2ad7ec6055f1b4bfc07edc22b72ab14874ef3d39a19ccd67b16722ecd595ee42b60d6f71f0e77a410f5ecb662034fc60ac0e619013c25b4a5e35db0fb823bc366b98b12c1cf5dd2a659201e3196359710bbd7b6adb7e191fbf628d1452b2bd88d1aece322d451c00c71df34d0b27d5c04e909f9be659e42c009a4ced6e69da13187aef80acc11c8903cdc22fa32b0acdb88178be47064125af18a32d24722d8a3a80955db10f362574e51f16e3d6790239dae007bb8528f80b5473d3964c3079c5d3c97f4be5ce1c629ace5afe743923bfa40496992853445f331e11180aae794365e0afe0893a82f5a2f1db827c9f30629482ba410ee589d638754eb0491ea982e26a2521d692a6a92839f2f83b8fea4639c3d58974c2c00ed541495917729e4835eb460451e3c959feab105b78cadc1d83c413ecf2863e1d4acf4261036b07305d99f0c9a822512de499f617122217b98767e6134b3bd7a6f60317c508d3c0cf7618bf13014ab58ac8f2815a25690bb19814221dff3e95887d94a0004c2e3a57516512b0a950355534375c0013e1ba8a5bf8ee39d16de55d204a098f66af17ffe3824ceab86c4ea1b31687efe6197022a49c100ffd75e832135f24b0bc9dce0e081d7ddad063df288ec93a72d98c2b12ddd5152cb1d3d45f0faa4da2981bb9ac4aefadc0be1fcd1b13089814854c7ebf46dd10f9b968243efc9ea476d14f03dbfa8156c3f5f712b2da53ee8ae50796fbc72a72604a1bb911bc48f70125b29334808197d0d4b351635517cd5d59a4f35504d28df89451437a83b957e8c385964a27bbde8f1b87a09fd7170599312e65b839b883b5f08cc228a178f9bdb3ce5cff95e7cde7d7fb0c468318ca42865148b00cafba5bd078fc1cbdb5d82738681f19110a050988403df453e3c4e50cbcda48c8f188d51bf3ae6b3043ef8fbc4a5d533b7805e416fbc3776f13537cd8e7bad57b4e5dbaf3d82bb13ed7693a9d6eeb2ef0d6b9552c0e3d0635606a5c867cec5e9d93f3d7cefc6479757c27944cfc9495f26e71d6394ad792212f4d68bd65c44b250926b411d3bee5ce402d1a321f76ff54a48e103feeed094e03727affd388debc023cebfcfe027726adea3abb5ecd7ab53676682e667e43e017376b3a49624739272ac03429028471763fc7fbd2f86945a4c307231756f66c5f3bd48803f83adcd20cdd64a56dd91515d75ea7daa158125eda5a489725ea62a461353dae0496c37b6132ba97f9d197dc61d1c514998eab52b40c3fa9c2fac7de0150e2148592dd34f7079fc66d78b39654c85013fd27e2b9bb21076d119305365af1b1d403d4bb219b512feea2b98a86e86c4099a730ee2a616f05b952f4b3c0319e93a910733312e4b883b196baaad570a67ac0d43dc3a044ad280451a8a0c17c4b860776e09ee09843441ea807dc2aaeb417d555a7cd61e3ef10608571fc46201323b2421b8b64a48b962821006872c43f08bde180fc29dd1d4fdc1681306120c3b6d661ab4fda53383bf2c57dee2dc9cf76f3f5bd26e6f7d8d00134258e598ac5046a924f3656ae7c7f4756439500d60d238bdff2bc33a5f2c48758382cf3a0bc564ec6688294cf247601b8d22359a596e7d0d295286b5c45e60c0b5ef95529cb86b879ae51294b486d831456a41fb6d4e6886ead5ebbb4028f3066349fc92f85f6c5cc26d0666fbbbdc995c30c0ee41ec01ec399cc8909634c2c3525d244c96ebd9959b3d0987631d801c610aa8be76a06b2b2318d382c7cf8b1a5eaae6fba7d635519ad3f5c856090c67f81ec80512895d35ab268a4c4af4f1786072b3fa7779bd2bad0f62b2ce7b74c11b4596580cd720ed132f244b9d099d32e5660c2cf5abbe51c8f14eff1ac09b4458bfd68056db04b7c6409b1b09c730394e6ad3b9677254b4f2ab64dab19bc9ee6f265ba33cce48b59e6e3c476de6b6c509457178bd5e0ac5a8bf4f91fa2e0c70e8ee6072e5c1b23b98baf08fcfd8af44598f95ab4efe04a181bbc432b806ee8808cc5292d159e7f11bf4324306e5fb48980b5efe43ed8deb33b8f5b8928a7ed097b5a7717d750981dee75bab0b852d3a3f8676d3421bcc4a587153dbbb40b460dcd0234268e835717f50694a4b5ebaafc9deebbecd98e9c459f76744fcc33663a5970f3381a91508cfc56fa8d8ccdb25974b8478212fc99b815e3f3f5e49df1d1009e03abe811430398fb578a22a11a30d5748b04146692820455d6fd3d82209dd92be1794a2b9022e03f699d29a06b6cf65d69a38b75273c1b44a204f4ab1b1b71115befbe5c8af31c8caa2ccb7a3200e34885cd578f2696d54b98401d068c6cc9171b468493d22d56b5d2066f7f07583ee006dad5327ccf0955f23128f0507233b6b32a2bd3d5f73f02b41bfb91a31e1d965ffe317020be4815f190bfb5a6081e919bfd07baa8d16f7f355e5db00025367efb337e162700a07344df36ba0bb5c7421d042bf29f69cde27183a1c01694f7122c0fad46fcf5792e41dd02490ff1a0bda580c351ed39a44b2a76cefc999ada2290792ed05d775d52c6a63b4653756573ac665221c033749eed674200c327a355576269716af6e43171996224772aeb616bf50ad728c40f4c8253f5ff281b3c38e66edcaf353d624cb4da2de01fed4986be92395ecfe994b00951540c312236b0b8d37b81075be937a991e4079bf65a48c9434f666069892a0568e9f024d2dd8be6760279b0514246b78e1023c49345a6e5748b20bed0d8cb069ea43c85371f6f5d3a5f7712f0bd8cadcdc89a88a573c7ca1cd2bcda07a21c9cd00c1c164a5f261d61ddb41534d6688ed83f14be8f1b4d9d575e91dfa2afa970326a2b0f94af21f6fce4760aab26010df1f29a40936a204f319e2c58bc489d5eb02cb6d280a78091d469920528c90fd4532ebc0614f5513a77d9c6ee4bfd08138ef91eea5becd2b7ce1326d74748b25aa162881e8029e77be5f5b0896ffd78e637751d110509974e3573972cc83a738c4e875c39818c2f6100f03d2c21845cca3197e04984a59118c19ec306d5cd98a5fdef45ed41b03a5c90f4ce84a05730c1dc32fe38617ad55cedb9d1f864bf601742eb1a8dfe0ebf05309192aca080bbd3d12e7b80caf0af4a70e9b26cca157ad00b39c5ac8d92277f0a90059e327c06704a5f57f6587b4f0b86da6a3f8d57a969480a9b6bee099521abf943bf534a5ca9d68888df617a7ca205bfe16bfab86efe57466cfd7f12187289cb60e908a1daa922ba9d335b624c22d0ba7d49bdda2d099395a85e39ba1e70b1ceeaa0d23a3e0e75d2bee122437da99f127374980e5e22032ee13c83f094b88df0c79ecf31e75a3904d4b19df9d6d3c0a2809539ba35fc61792d05a245e7292ce2a5f28e4f45e870750ec1b2af28019750d0c10364fa5b4b20f713a42ca88fd15da479845af30587fb55af0851f76af35ef68b74bafff80eb26d809717acb6126fb578e1c8ca2400aa1913c2d6ca57b4e295f7b131b41d321325ca36f51dd1dfc6c00eed458601c14e68da41bf4183cfb99bf17a2ecc24177ae18eb7014eca9c9e36536726e99d60e3f0f5b4b75cd4980c52dcd968b3469a0b5b565b47e07f2bc60133b2a2367f121bd9b294649693a338ac39a40f308ee5a7f1bc92a89c9ba9f3bb2ac65ba7f5a41c4b1c2603d6e12d8bd68cbd6f1a3a2a8c2d1e174fa55b5db44749dd26d69d46b1bdfc7a1147e35a6da377383f645175389983d394f6bb59db5da6a647bc2886b21c8735e187854575aefe9fdd0f72af4305b642548391a39c89a9c0d7b819074135fc74ee947246cf99a18197d9fc1472474271b0201a81caa64f3dcf6c62701d42877812fd92769bcfb2e1c8004f3121af12bb011c4dfed1aad07b4d804b797b94a1e9a7f61e0efbe8545bb7872de21ad31e7b6a70d056d69f698a201cbb69f4bca1c903a23389214e9d8429032c8ba9456bdb019506a68071123cf0ab9e5128096a1550787211c86691ef868364eaa2d6da61eed580460ff2c1b4740a7a4e3dae4a27e1b42376042338827fc4eff03f882915bb2572ea714b29d71a18f0b2a35b8e8893f1bb0b4f2041f23c153dd3a3bf2d1e8293d1bebb46ac2912e8970c127be4e61fc7c765c7150b70d3515fce2f1046314462394420268138cdeb75556e3427f9c00e22a4171111a81f09cb37f88db9ed099722731e5e68d378e212f0e923e53c5893f0cd126fd00973cbcdeb9d12e4dd5f3c2a852c9e4e0227a070b44fe361c1e312a3aedfa2be356598cb6c608f38ce9237c76bb3756caf4ebd0f2947c9db6062d5742f5d6204148a182b6dd78553b975c9b4933e9a20665e5d03c694cd1832956959f94c882253f11dedb176e2405f33325838d1c753d7759854a3437d2889a362a539e1f17ce080a811e53fcc555b76ac50c1bc53336eaaa5a6f41c88723a5359b79a6f7c0d35c3e1353ce0629fcd7f4d4e14928a50a2fc1df9b6d669131d711c72d2f438bb2759bd664381a526370a5af4faab6991ce3f0ddf1e9d72bb61bb20f1eb6718c8f56c094b364a18358fc51abcd3e043080601727c5b77af2b6bd6fb60ee388ebc407ce5e507db24fce180169596a847ca675b9a6cf77a382458d654d481a0341b2e2b01aa5fc3ba0625b64574b64028896395ed8ea00c926d041763048e8705550704894ac171608a4b9b908d674ec59cafd380ec9838a05efd76a708405062f17be8669d9e2575b788295ee3682ba41cf36fd43c87594618dbe8554141442126230b5ea37a7f8661f8830a73c97bc94b8b9d0d3c0216a1d18568fdaa25720049ebb3629888ef194d004e8579365df05f8b153e28a1db05780f175eeb24d5e7ae5269879d95da3087c83267257c370d1ca96eb5e3effbed4806f051a63175ee69745b3c08b934f43260f17f8b1ff1004483ee0943baa95d0104ff696a26aaf73d632a4dbc8ff42c13039a6f06bb9cc6b2cea980ded689c77f531741fa79a4e12629e979156a71903e65ad388e18a1c6b553fc0686ffbe07e20ff5b46818dd513a21829fb8b6989a4c4a0dbe8575fce56e387ff6ac3bba9555c6942f814a79aea596139f4ec8355b953c5cb2d19d6ceea0f3a398d751de08d7796b3bf28247de525269089fa8f7e88ee76e101cbcf4b98dd571b86dccc23951c26b687e9316eddd6005b528a9e99c058b0b32b24d640c20a04a10765f2dac318fa5a7df7282d612a38c231bda18bd45d74249a713f6ad3b85d7f1dc40e95759016ba50c6f5e388a0d3a06d7d91fb832937d9ca267eddd78c8e06871ccaa6a3112c3813d0a5d3f24d71e4ebc4fd0000000000000000000000000000000000ccff9980d4d6522b4cd5bbfe1ceb059a47b81213471d1881ccc055df8ab0bd43e8dcedff232aac131f84fe7a8ac3b54eca64a729ea3b249c0926ebc89df3d5c84fd52e8cfbd68a38db0e0e24d614a38897c32137302a065881906d7ae9bd4d5245ade89100b16afd98287c8ba752031992e2c838afb452cd036e48b7c4bc74b4fec0bdf6e8828a9b4171a6618ee7af14dab9127c2147827b93c3b88e150e5e76a7f984cc79afabcca4a0536e0874550b22b2649275cc2f17033a9397b5f46c512a20bde2"], 0x5c}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
r13 = syz_open_dev$vcsn(&(0x7f0000000240), 0x8001, 0x83200)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000280)=@multiplanar_userptr={0x6, 0x2, 0x4, 0x100000, 0x1, {r6, r7/1000+10000}, {0x3, 0x2, 0x6, 0x9, 0xb, 0x3, "e3a65a5b"}, 0x7e3, 0x2, {&(0x7f00000001c0)=[{0x6, 0x8, {&(0x7f0000000140)}, 0xfffffffe}, {0x5, 0xcce, {&(0x7f0000000180)}, 0x9}]}, 0x0, 0x0, r13})
write$sndseq(r13, &(0x7f0000000340)=[{0x8, 0xa0, 0x7, 0x7f, @time={0x2, 0x40}, {0x7, 0x3}, {0x8}, @note={0x3, 0x1, 0x0, 0x5f, 0xfff}}, {0x40, 0x7, 0x4, 0x80, @time={0x7ff, 0x8000}, {0x9}, {0x2, 0x8}, @raw32={[0x1ffe00, 0x1]}}, {0xf5, 0x5, 0x3, 0x8b, @time={0x4, 0x7f}, {0x9, 0x27}, {0x8b, 0x3}, @time=@time={0x1, 0x4}}, {0xf, 0xf, 0x8, 0x4c, @tick=0x7, {0x3, 0x4}, {0x7, 0xa}, @quote={{0x2, 0x6}, 0x3, &(0x7f0000000300)={0x0, 0xa, 0x6, 0x49, @tick=0x1206, {0x2, 0x69}, {0x9, 0xfb}, @result={0x3, 0x200}}}}, {0x0, 0xd3, 0x5, 0x0, @tick=0x6, {0x4, 0x2}, {0x0, 0x80}, @raw32={[0x40, 0x80000001, 0xf0]}}, {0x1, 0xb, 0x3, 0xd7, @tick=0x2bf, {0x1}, {0xa, 0x9}, @control={0x81, 0x80000000, 0x80000000}}], 0xa8) (async)
r14 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC2(r14, 0x4068aea3, &(0x7f0000000680))

0s ago: executing program 4 (id=3851):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$pppl2tp(r0, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x2, 0x0, 0xfffffffd, 0x4}}, 0x2e)
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000040)={@hyper})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000080)={&(0x7f0000000740)={{@host, 0x2}, {@hyper}, 0x400, "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"}, 0x418})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000280)=[{0x6, 0xff, 0x0, 0x7fff0006}]})
fchmod(0xffffffffffffffff, 0x4)
close(0x4)
linkat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x1000)
r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000000)={0x9, {0x0, 0xbfffffff, 0xdcf, 0x3}})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0xb, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vxcan0\x00'})
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$NS_GET_PARENT(r5, 0xb702, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

kernel console output (not intermixed with test programs):

rt 8472 - 0
[ 1047.628085][T23240] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1047.739165][T23290] FAULT_INJECTION: forcing a failure.
[ 1047.739165][T23290] name failslab, interval 1, probability 0, space 0, times 0
[ 1047.763698][T23290] CPU: 0 UID: 0 PID: 23290 Comm: syz.4.3626 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0
[ 1047.774529][T23290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1047.784615][T23290] Call Trace:
[ 1047.787921][T23290]  <TASK>
[ 1047.790864][T23290]  dump_stack_lvl+0x241/0x360
[ 1047.795544][T23290]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1047.800736][T23290]  ? __pfx__printk+0x10/0x10
[ 1047.805331][T23290]  ? fs_reclaim_acquire+0x93/0x130
[ 1047.810454][T23290]  ? __pfx___might_resched+0x10/0x10
[ 1047.815764][T23290]  should_fail_ex+0x3b0/0x4e0
[ 1047.820457][T23290]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1047.826186][T23290]  should_failslab+0xac/0x100
[ 1047.830864][T23290]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1047.836619][T23290]  __kmalloc_noprof+0xd8/0x400
[ 1047.841401][T23290]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1047.846960][T23290]  tomoyo_path_number_perm+0x23a/0x880
[ 1047.852432][T23290]  ? tomoyo_path_number_perm+0x208/0x880
[ 1047.858071][T23290]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1047.864090][T23290]  ? __fget_files+0x29/0x470
[ 1047.868682][T23290]  ? __fget_files+0x3f3/0x470
[ 1047.873362][T23290]  security_file_ioctl+0xc6/0x2a0
[ 1047.878416][T23290]  __se_sys_ioctl+0x47/0x170
[ 1047.883021][T23290]  do_syscall_64+0xf3/0x230
[ 1047.887538][T23290]  ? clear_bhb_loop+0x35/0x90
[ 1047.892224][T23290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.898426][T23290] RIP: 0033:0x7fb9ff77dff9
[ 1047.902867][T23290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1047.922488][T23290] RSP: 002b:00007fba004d8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1047.930996][T23290] RAX: ffffffffffffffda RBX: 00007fb9ff935f80 RCX: 00007fb9ff77dff9
[ 1047.938969][T23290] RDX: 0000000020000040 RSI: 000000004008ae89 RDI: 0000000000000005
[ 1047.946936][T23290] RBP: 00007fba004d8090 R08: 0000000000000000 R09: 0000000000000000
[ 1047.954903][T23290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1047.962887][T23290] R13: 0000000000000000 R14: 00007fb9ff935f80 R15: 00007fb9ffa5fa28
[ 1047.970880][T23290]  </TASK>
[ 1047.974011][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1047.989977][T23290] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1048.028341][T23240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1048.039462][T23240] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.095675][T23201] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1048.168433][T23201] 8021q: adding VLAN 0 to HW filter on device team0
[ 1048.210237][ T5238] Bluetooth: hci2: command tx timeout
[ 1048.292987][T23240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1048.303542][T23240] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1048.338835][T23300] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1048.389909][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1048.397155][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1048.446066][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1048.453358][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1048.753867][T23308] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1048.787840][   T29] audit: type=1326 audit(1728875183.766:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23307 comm="syz.4.3633" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9ff77dff9 code=0x0
[ 1048.839509][T23312] program syz.4.3633 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1048.865233][T23201] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1048.891169][T23240] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1048.913319][T23240] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1048.957259][T23311] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3632'.
[ 1048.966676][T23311] 0�: renamed from 
c1� (while UP)
[ 1048.977209][T23311] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[ 1048.997957][T23240] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1049.054941][T23240] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1049.125191][T23311] netlink: 'syz.0.3632': attribute type 10 has an invalid length.
[ 1049.133629][T23311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3632'.
[ 1049.329977][T23201] veth0_vlan: entered promiscuous mode
[ 1049.382572][T23201] veth1_vlan: entered promiscuous mode
[ 1049.402038][T23240] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1049.458092][T23201] veth0_macvtap: entered promiscuous mode
[ 1049.464980][ T5303] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1049.517257][T23240] 8021q: adding VLAN 0 to HW filter on device team0
[ 1049.561149][T23201] veth1_macvtap: entered promiscuous mode
[ 1049.610406][ T3760] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1049.617497][ T3760] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1049.643203][ T5303] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1049.668121][ T5238] Bluetooth: hci3: command tx timeout
[ 1049.690884][ T5303] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1049.702346][ T3760] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1049.709436][ T3760] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1049.779443][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.800211][ T5303] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1049.806320][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.813022][ T5303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.819833][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.838083][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.848500][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.861037][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.871041][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.881738][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.891673][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.902317][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.912245][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.922892][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.932911][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.943486][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.953445][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1049.964970][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1049.977508][T23201] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1049.988598][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1049.999505][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.009616][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.021046][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.021959][T23315] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1050.031352][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.048811][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.060229][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.061788][ T5303] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1050.071774][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.087920][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.098466][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.108486][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.119071][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.129035][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.139651][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.149586][T23201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1050.160926][T23201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1050.173400][T23201] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1050.203926][T23240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1050.214738][T23240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1050.301508][ T5238] Bluetooth: hci2: command tx timeout
[ 1050.444797][T23201] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.457884][T23201] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.472746][T23201] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.531277][T23201] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1050.615923][T23326] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3637'.
[ 1050.647446][T23326] 1�: renamed from 
c0� (while UP)
[ 1050.759372][T23326] A link change request failed with some changes committed already. Interface 
c1� may have been left with an inconsistent configuration, please check.
[ 1050.789074][T23328] netlink: 'syz.0.3637': attribute type 10 has an invalid length.
[ 1050.798816][T23328] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3637'.
[ 1050.980871][T23240] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1051.104034][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.130184][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.163476][   T46] usb 3-1: USB disconnect, device number 62
[ 1051.249556][T23240] veth0_vlan: entered promiscuous mode
[ 1051.259153][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1051.270505][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1051.294610][T23240] veth1_vlan: entered promiscuous mode
[ 1051.347346][T23240] veth0_macvtap: entered promiscuous mode
[ 1051.401878][T23240] veth1_macvtap: entered promiscuous mode
[ 1051.445710][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.466167][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.500580][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.526041][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.552086][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.591562][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.605872][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.624476][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.645040][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.675719][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.718325][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.740675][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.769637][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.790114][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.819122][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.840073][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.849945][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1051.870927][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.897570][T23240] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1051.924004][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1051.947127][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1051.968750][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1051.990729][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.013806][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.029653][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.048932][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.076196][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.086397][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.097127][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.110632][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.121184][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.131939][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.142443][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.157902][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.170618][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.181788][T23240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1052.192454][T23240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1052.204015][T23240] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1052.217851][T23240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.238947][T23240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.250593][T23240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.262408][T23240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1052.370463][ T5238] Bluetooth: hci2: command tx timeout
[ 1052.647370][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1052.657736][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1052.665857][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1052.668992][T23371] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3647'.
[ 1052.694294][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1053.103686][T23381] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3648'.
[ 1053.128729][T23381] 0�: renamed from hsr_slave_1 (while UP)
[ 1053.162652][T23381] 0�: entered allmulticast mode
[ 1053.167847][T23381] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[ 1053.200865][T23388] netlink: 'syz.1.3648': attribute type 10 has an invalid length.
[ 1053.210931][T23388] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3648'.
[ 1053.228497][T23388] hsr0: entered promiscuous mode
[ 1053.235511][T23388] hsr0: entered allmulticast mode
[ 1053.240971][T23388] hsr_slave_0: entered allmulticast mode
[ 1053.248057][T23388] bridge0: port 3(hsr0) entered blocking state
[ 1053.254941][T23388] bridge0: port 3(hsr0) entered disabled state
[ 1053.267033][T23388] bridge0: port 3(hsr0) entered blocking state
[ 1053.273368][T23388] bridge0: port 3(hsr0) entered forwarding state
[ 1053.480745][  T937] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1053.763722][  T937] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1053.807385][  T937] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1053.861177][  T937] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1053.938423][  T937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.033034][T23386] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1054.132759][  T937] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[ 1054.411195][   T25] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1054.662950][ T5337] usb 1-1: USB disconnect, device number 25
[ 1054.670821][   T25] usb 5-1: Using ep0 maxpacket: 8
[ 1054.710426][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1054.740895][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1054.751141][   T25] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00
[ 1054.760312][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1054.774755][   T25] usb 5-1: config 0 descriptor??
[ 1054.794874][   T25] usbhid 5-1:0.0: can't add hid device: -22
[ 1054.806120][   T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[ 1054.882292][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.888824][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.915638][ T3760] bridge_slave_1: left allmulticast mode
[ 1054.921523][ T3760] bridge_slave_1: left promiscuous mode
[ 1054.927323][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.953337][ T3760] bridge_slave_0: left allmulticast mode
[ 1054.959197][ T3760] bridge_slave_0: left promiscuous mode
[ 1054.975800][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1055.004129][T23415] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1056.189330][T15929] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1056.290386][   T46] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 1056.384460][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1056.403904][T15929] usb 3-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=51.38
[ 1056.419878][T15929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.446392][T15929] usb 3-1: Product: syz
[ 1056.451543][   T46] usb 2-1: Using ep0 maxpacket: 8
[ 1056.456961][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1056.474523][T15929] usb 3-1: Manufacturer: syz
[ 1056.479786][   T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13
[ 1056.501774][T15929] usb 3-1: SerialNumber: syz
[ 1056.514713][   T46] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58
[ 1056.526405][ T3760] bond0 (unregistering): Released all slaves
[ 1056.555222][T15929] usb 3-1: config 0 descriptor??
[ 1056.570364][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1056.614624][   T46] usb 2-1: Product: syz
[ 1056.618843][   T46] usb 2-1: Manufacturer: syz
[ 1056.627984][T23440] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 1056.656511][   T46] usb 2-1: SerialNumber: syz
[ 1056.657482][T23440] 0�: renamed from 
c1� (while UP)
[ 1056.685978][T23440] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[ 1056.699013][   T46] usb 2-1: config 0 descriptor??
[ 1056.708599][T23442] netlink: 'syz.0.3663': attribute type 10 has an invalid length.
[ 1056.734634][   T46] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae
[ 1056.760289][T23442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3663'.
[ 1056.856936][ T3760] tipc: Disabling bearer <udp:syz1>
[ 1056.862808][ T3760] tipc: Left network mode
[ 1057.029101][   T25] usb 3-1: USB disconnect, device number 63
[ 1057.353670][ T3760] hsr_slave_0: left promiscuous mode
[ 1057.360760][   T25] usb 5-1: USB disconnect, device number 49
[ 1057.419693][ T3760] hsr_slave_1: left promiscuous mode
[ 1057.432605][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1057.455725][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1057.469141][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1057.487722][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1057.537981][ T3760] veth1_macvtap: left promiscuous mode
[ 1057.543828][ T3760] veth0_macvtap: left promiscuous mode
[ 1057.549462][ T3760] veth1_vlan: left promiscuous mode
[ 1057.554936][ T3760] veth0_vlan: left promiscuous mode
[ 1058.163721][   T46] gspca_zc3xx: reg_w_i err -71
[ 1058.224966][ T5337] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1058.411984][ T5337] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1058.431968][ T5337] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1058.442273][ T5337] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1058.470256][ T5337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1058.518571][T23466] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1058.529650][ T5337] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1058.770215][   T46] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1058.796508][   T46] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[ 1058.826574][   T46] usb 2-1: USB disconnect, device number 90
[ 1059.631888][ T3760] team0 (unregistering): Port device team_slave_1 removed
[ 1059.806479][ T3760] team0 (unregistering): Port device team_slave_0 removed
[ 1060.343602][   T25] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[ 1060.582134][   T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1060.606731][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.645797][   T25] usb 4-1: Product: syz
[ 1060.660375][   T25] usb 4-1: Manufacturer: syz
[ 1060.670116][   T25] usb 4-1: SerialNumber: syz
[ 1060.714260][   T25] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1060.784663][ T5228] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1061.032998][T23503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1061.234604][T23503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1061.669082][T23498] tap0: tun_chr_ioctl cmd 1074025673
[ 1061.789650][   T46] usb 3-1: USB disconnect, device number 64
[ 1061.810261][ T5228] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1061.817463][ T5228] ath9k_htc: Failed to initialize the device
[ 1061.845266][ T5228] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1062.299623][T23525] netlink: 'syz.4.3686': attribute type 11 has an invalid length.
[ 1062.310229][T23525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3686'.
[ 1062.712812][   T29] audit: type=1326 audit(1728875197.696:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1062.760409][T15929] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[ 1062.830816][   T29] audit: type=1326 audit(1728875197.696:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1062.902595][   T29] audit: type=1326 audit(1728875197.696:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1062.942252][T15929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1062.990394][   T29] audit: type=1326 audit(1728875197.696:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1063.016177][T15929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1063.049224][   T29] audit: type=1326 audit(1728875197.696:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1063.088197][   T29] audit: type=1326 audit(1728875197.736:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1063.099154][T15929] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[ 1063.136801][T15929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1063.220486][   T29] audit: type=1326 audit(1728875197.736:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb9ff77cadf code=0x7ffc0000
[ 1063.263602][T15929] usb 3-1: config 0 descriptor??
[ 1063.310148][   T29] audit: type=1326 audit(1728875197.736:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23536 comm="syz.4.3690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ff77dff9 code=0x7ffc0000
[ 1063.543552][T23549] 8021q: VLANs not supported on bridge0
[ 1063.918802][T15929] arvo 0003:1E7D:30D4.0040: unknown main item tag 0x0
[ 1063.925782][T15929] arvo 0003:1E7D:30D4.0040: unknown main item tag 0x0
[ 1063.934034][T15929] arvo 0003:1E7D:30D4.0040: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0
[ 1063.967561][ T5283] usb 4-1: USB disconnect, device number 42
[ 1064.050641][    T8] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 1064.157620][ T5283] usb 3-1: USB disconnect, device number 65
[ 1064.206519][    T8] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1064.233610][    T8] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1064.243934][    T8] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1064.254410][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1064.271198][T23553] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[ 1064.283184][    T8] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1064.300258][T15929] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1064.461382][T15929] usb 5-1: Using ep0 maxpacket: 32
[ 1064.481834][T15929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1064.501960][T15929] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[ 1064.522189][T15929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1064.532012][T15929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1064.550394][T15929] usb 5-1: SerialNumber: syz
[ 1064.563894][T15929] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[ 1064.580144][T15929] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[ 1064.586638][T15929] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[ 1065.000124][T15929] usb 1-1: new low-speed USB device number 26 using dummy_hcd
[ 1065.180181][T15929] usb 1-1: Invalid ep0 maxpacket: 32
[ 1065.320456][T15929] usb 1-1: new low-speed USB device number 27 using dummy_hcd
[ 1065.490489][T15929] usb 1-1: Invalid ep0 maxpacket: 32
[ 1065.651842][T15929] usb usb1-port1: attempt power cycle
[ 1066.453410][    T8] usb 5-1: USB disconnect, device number 50
[ 1066.549052][T15929] usb 1-1: new low-speed USB device number 28 using dummy_hcd
[ 1066.788941][T23587] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3703'.
[ 1066.850515][T23587] 0�: renamed from 
c1� (while UP)
[ 1066.939977][T23587] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[ 1066.986105][T15929] usb 1-1: Invalid ep0 maxpacket: 32
[ 1066.998098][T23587] netlink: 'syz.2.3703': attribute type 10 has an invalid length.
[ 1067.006340][T23587] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3703'.
[ 1067.037703][    T8] usb 2-1: USB disconnect, device number 91
[ 1067.120189][T15929] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[ 1067.140948][T15929] usb 1-1: Invalid ep0 maxpacket: 32
[ 1067.146503][T15929] usb usb1-port1: unable to enumerate USB device
[ 1067.263336][T23594] FAULT_INJECTION: forcing a failure.
[ 1067.263336][T23594] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1067.278964][T23594] CPU: 1 UID: 0 PID: 23594 Comm: syz.1.3705 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0
[ 1067.289802][T23594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1067.299889][T23594] Call Trace:
[ 1067.303195][T23594]  <TASK>
[ 1067.306166][T23594]  dump_stack_lvl+0x241/0x360
[ 1067.310862][T23594]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1067.316062][T23594]  ? __pfx__printk+0x10/0x10
[ 1067.320650][T23594]  ? __pfx_lock_release+0x10/0x10
[ 1067.325709][T23594]  should_fail_ex+0x3b0/0x4e0
[ 1067.330392][T23594]  _copy_to_user+0x2f/0xb0
[ 1067.334825][T23594]  video_usercopy+0xe5e/0x1180
[ 1067.339636][T23594]  ? __pfx___video_do_ioctl+0x10/0x10
[ 1067.345029][T23594]  ? __pfx_video_usercopy+0x10/0x10
[ 1067.350245][T23594]  ? __fget_files+0x29/0x470
[ 1067.354837][T23594]  ? __fget_files+0x3f3/0x470
[ 1067.359514][T23594]  v4l2_ioctl+0x189/0x1e0
[ 1067.363852][T23594]  ? __pfx_v4l2_ioctl+0x10/0x10
[ 1067.368704][T23594]  __se_sys_ioctl+0xf9/0x170
[ 1067.373304][T23594]  do_syscall_64+0xf3/0x230
[ 1067.377807][T23594]  ? clear_bhb_loop+0x35/0x90
[ 1067.382483][T23594]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1067.388379][T23594] RIP: 0033:0x7f88dad7dff9
[ 1067.392795][T23594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1067.412423][T23594] RSP: 002b:00007f88dbc1b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1067.420834][T23594] RAX: ffffffffffffffda RBX: 00007f88daf35f80 RCX: 00007f88dad7dff9
[ 1067.428800][T23594] RDX: 0000000020000040 RSI: 00000000c008561c RDI: 0000000000000004
[ 1067.436765][T23594] RBP: 00007f88dbc1b090 R08: 0000000000000000 R09: 0000000000000000
[ 1067.444732][T23594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1067.452702][T23594] R13: 0000000000000000 R14: 00007f88daf35f80 R15: 00007f88db05fa28
[ 1067.460684][T23594]  </TASK>
[ 1067.798433][T13469] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1067.990289][ T5228] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[ 1068.010191][ T5283] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1068.024274][T13469] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.181592][T13469] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.210512][ T5228] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1068.248564][ T5228] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1068.257387][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1068.279241][ T5283] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1068.279892][ T5228] usb 2-1: Product: syz
[ 1068.306407][ T5283] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1068.315868][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.340408][ T5244] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1068.350782][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1068.359645][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1068.368563][ T5283] usb 3-1: config 0 descriptor??
[ 1068.376573][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1068.385486][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1068.394254][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1068.422010][ T5228] usb 2-1: Manufacturer: syz
[ 1068.457125][ T5228] usb 2-1: SerialNumber: syz
[ 1068.483932][T13469] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1068.500358][  T937] usb 1-1: new low-speed USB device number 30 using dummy_hcd
[ 1068.517838][ T5228] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1068.581960][T15929] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1068.632850][T23606] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1068.680760][  T937] usb 1-1: too many configurations: 21, using maximum allowed: 8
[ 1068.692456][  T937] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1068.702032][  T937] usb 1-1: can't read configurations, error -61
[ 1068.840192][  T937] usb 1-1: new low-speed USB device number 31 using dummy_hcd
[ 1068.948074][ T5283] hid-led 0003:0FC5:B080.0041: unknown main item tag 0x2
[ 1069.027268][T13469] bridge_slave_1: left allmulticast mode
[ 1069.030161][ T5337] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1069.041942][  T937] usb 1-1: too many configurations: 21, using maximum allowed: 8
[ 1069.043568][T13469] bridge_slave_1: left promiscuous mode
[ 1069.053584][  T937] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1069.064074][  T937] usb 1-1: can't read configurations, error -61
[ 1069.071603][  T937] usb usb1-port1: attempt power cycle
[ 1069.076110][T13469] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1069.108642][T13469] bridge_slave_0: left allmulticast mode
[ 1069.127711][T13469] bridge_slave_0: left promiscuous mode
[ 1069.137089][T13469] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1069.203893][ T5337] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1069.221264][ T5337] usb 5-1: config 0 has no interfaces?
[ 1069.240418][ T5337] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1069.256055][ T5337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1069.276788][ T5337] usb 5-1: Product: syz
[ 1069.282992][ T5337] usb 5-1: Manufacturer: syz
[ 1069.288045][ T5337] usb 5-1: SerialNumber: syz
[ 1069.322255][ T5337] usb 5-1: config 0 descriptor??
[ 1069.428316][  T937] usb 1-1: new low-speed USB device number 32 using dummy_hcd
[ 1069.452909][  T937] usb 1-1: too many configurations: 21, using maximum allowed: 8
[ 1069.473305][  T937] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1069.481699][  T937] usb 1-1: can't read configurations, error -61
[ 1069.613962][   T46] usb 5-1: USB disconnect, device number 51
[ 1069.630477][  T937] usb 1-1: new low-speed USB device number 33 using dummy_hcd
[ 1069.708013][  T937] usb 1-1: too many configurations: 21, using maximum allowed: 8
[ 1069.730232][T15929] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 1069.740895][  T937] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1069.741036][T15929] ath9k_htc: Failed to initialize the device
[ 1069.748505][  T937] usb 1-1: can't read configurations, error -61
[ 1069.785215][T15929] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1069.799728][  T937] usb usb1-port1: unable to enumerate USB device
[ 1070.451462][ T5244] Bluetooth: hci3: command tx timeout
[ 1070.531458][  T937] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1070.570922][T13469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1070.593079][T13469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1070.633641][T13469] bond0 (unregistering): Released all slaves
[ 1070.745328][  T937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1070.756702][  T937] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1070.766689][  T937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1070.775884][  T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.784918][ T5283] hid-led 0003:0FC5:B080.0041: probe with driver hid-led failed with error -71
[ 1070.814733][ T5283] usb 3-1: USB disconnect, device number 66
[ 1070.822264][T23619] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 1070.872876][  T937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1071.235826][ T5228] usb 2-1: USB disconnect, device number 92
[ 1071.262216][T23613] chnl_net:caif_netlink_parms(): no params data found
[ 1071.469483][T23633] fuse: Unknown parameter '/dev/kvm'
[ 1071.778521][T23640] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3717'.
[ 1071.787871][T23640] 1�: renamed from 
c0� (while UP)
[ 1071.796878][T23640] A link change request failed with some changes committed already. Interface 
c1� may have been left with an inconsistent configuration, please check.
[ 1071.817816][T23647] =======================================================
[ 1071.817816][T23647] WARNING: The mand mount option has been deprecated and
[ 1071.817816][T23647]          and is ignored by this kernel. Remove the mand
[ 1071.817816][T23647]          option from the mount to silence this warning.
[ 1071.817816][T23647] =======================================================
[ 1071.993756][T23633] dccp_invalid_packet: P.Data Offset(172) too large
[ 1072.067760][T23645] netlink: 'syz.2.3717': attribute type 10 has an invalid length.
[ 1072.097424][T23645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3717'.
[ 1072.414535][ T5228] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[ 1072.531351][ T5244] Bluetooth: hci3: command tx timeout
[ 1072.617899][ T5228] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1072.653564][ T5228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12352, setting to 1024
[ 1072.685866][ T5228] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1072.711454][ T5228] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1072.723810][T13469] hsr_slave_0: left promiscuous mode
[ 1072.737162][ T5228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.745568][T13469] hsr_slave_1: left promiscuous mode
[ 1072.755596][ T5228] usb 1-1: Product: syz
[ 1072.759797][ T5228] usb 1-1: Manufacturer: syz
[ 1072.767002][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1072.769506][ T5228] usb 1-1: SerialNumber: syz
[ 1072.789255][T13469] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1072.793744][ T5228] usb 1-1: config 0 descriptor??
[ 1072.809023][T23637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.809261][T13469] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1072.820293][T23637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1072.824693][T13469] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1072.862504][T13469] veth1_macvtap: left promiscuous mode
[ 1072.868222][T13469] veth0_macvtap: left promiscuous mode
[ 1072.874821][T13469] veth1_vlan: left promiscuous mode
[ 1072.880372][T13469] veth0_vlan: left promiscuous mode
[ 1073.057987][T23633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1073.088243][T23633] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 1073.363824][ T5283] usb 5-1: USB disconnect, device number 52
[ 1073.462397][   T29] audit: type=1326 audit(1728875208.446:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.518795][   T29] audit: type=1326 audit(1728875208.446:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.518912][ T5228] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1073.549775][   T29] audit: type=1326 audit(1728875208.446:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.592299][   T29] audit: type=1326 audit(1728875208.446:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.641566][   T29] audit: type=1326 audit(1728875208.446:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.664638][   T29] audit: type=1326 audit(1728875208.446:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.687944][   T29] audit: type=1326 audit(1728875208.446:1709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.713915][   T29] audit: type=1326 audit(1728875208.446:1710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.749188][   T29] audit: type=1326 audit(1728875208.446:1711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.782948][   T29] audit: type=1326 audit(1728875208.446:1712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23664 comm="syz.1.3721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88dad7dff9 code=0x7fc00000
[ 1073.900244][ T5283] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1074.060075][ T5283] usb 5-1: Using ep0 maxpacket: 8
[ 1074.072237][ T5283] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[ 1074.082725][ T5283] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1074.106368][ T5283] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1074.128263][ T5283] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1074.151506][ T5283] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1074.179736][ T5283] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1074.198388][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1074.331815][T13469] team0 (unregistering): Port device team_slave_1 removed
[ 1074.427801][T13469] team0 (unregistering): Port device team_slave_0 removed
[ 1074.438588][ T5283] usb 5-1: GET_CAPABILITIES returned 0
[ 1074.447718][ T5283] usbtmc 5-1:16.0: can't read capabilities
[ 1074.610302][ T5244] Bluetooth: hci3: command tx timeout
[ 1074.676148][   T46] usb 5-1: USB disconnect, device number 53
[ 1074.846457][ T5228] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[ 1074.877596][ T5228] usb 1-1: USB disconnect, device number 34
[ 1074.897197][T19115] udevd[19115]: setting owner of /dev/bus/usb/001/034 to uid=0, gid=0 failed: No such file or directory
[ 1075.007984][T23676] program syz.0.3723 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1075.474516][T23613] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1075.488769][T23613] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.505272][T23613] bridge_slave_0: entered allmulticast mode
[ 1075.512674][T23613] bridge_slave_0: entered promiscuous mode
[ 1075.537333][T23613] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1075.564926][T23613] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1075.572570][T23613] bridge_slave_1: entered allmulticast mode
[ 1075.579803][T23613] bridge_slave_1: entered promiscuous mode
[ 1075.680322][ T5228] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1075.747467][T23613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1075.771002][T23613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1075.822841][T23686] tun0: tun_chr_ioctl cmd 1074025677
[ 1075.828383][T23686] tun0: linktype set to 65534
[ 1075.875319][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1075.945889][ T5228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1075.955858][ T5228] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1075.966348][ T5228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1075.980946][ T5228] usb 5-1: config 0 descriptor??
[ 1075.995741][T23613] team0: Port device team_slave_0 added
[ 1076.094494][T23613] team0: Port device team_slave_1 added
[ 1076.189186][T23682] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1076.327785][T23613] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1076.339351][T23613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1076.397379][T23613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1076.444549][T23613] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1076.468830][ T5228] hid-led 0003:0FC5:B080.0042: unknown main item tag 0x2
[ 1076.597200][T23613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1076.632484][T23613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1076.650611][   T46] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1076.690368][ T5244] Bluetooth: hci3: command tx timeout
[ 1076.778439][T23613] hsr_slave_0: entered promiscuous mode
[ 1076.835659][T23613] hsr_slave_1: entered promiscuous mode
[ 1076.852676][T23613] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1076.870150][T23613] Cannot create hsr debugfs directory
[ 1076.878425][   T46] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1076.964102][   T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1077.052918][   T46] usb 3-1: Product: syz
[ 1077.145350][   T46] usb 3-1: Manufacturer: syz
[ 1077.352035][   T46] usb 3-1: SerialNumber: syz
[ 1077.395583][   T46] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1077.427525][T15929] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1077.697128][T23707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1077.748863][T23707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1078.495821][T23613] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1078.532413][T15929] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1078.560989][T15929] ath9k_htc: Failed to initialize the device
[ 1078.594670][T15929] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1078.601617][T23613] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1078.635254][ T5228] hid-led 0003:0FC5:B080.0042: probe with driver hid-led failed with error -71
[ 1078.671226][T23613] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1078.707809][ T5228] usb 5-1: USB disconnect, device number 54
[ 1078.744103][T23613] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1078.805027][T23739] x_tables: unsorted underflow at hook 4
[ 1079.026647][T23613] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1079.112696][T23613] 8021q: adding VLAN 0 to HW filter on device team0
[ 1079.120766][T23739] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3736'.
[ 1079.177167][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1079.184326][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1079.264509][   T67] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1079.271700][   T67] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1079.624188][T23613] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1080.227942][   T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.423289][ T5286] usb 3-1: USB disconnect, device number 67
[ 1080.657676][   T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.711165][T23613] veth0_vlan: entered promiscuous mode
[ 1080.736333][T23613] veth1_vlan: entered promiscuous mode
[ 1080.868442][   T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1080.891786][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1080.904323][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1080.913263][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1080.925744][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1080.930381][ T5303] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[ 1080.943223][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[ 1080.950629][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1081.181675][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.202878][ T5303] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.232333][ T5303] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[ 1081.254523][ T5303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1081.272286][ T5303] usb 1-1: config 0 descriptor??
[ 1081.330573][ T5281] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1081.377431][   T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1081.452712][T23613] veth0_macvtap: entered promiscuous mode
[ 1081.484367][T23782] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1081.512179][ T5281] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1081.523113][ T5281] usb 5-1: config 0 has no interfaces?
[ 1081.527425][T23613] veth1_macvtap: entered promiscuous mode
[ 1081.530173][ T5228] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1081.565089][ T5281] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1081.583183][ T5281] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.591407][ T5281] usb 5-1: Product: syz
[ 1081.595743][ T5281] usb 5-1: Manufacturer: syz
[ 1081.601625][ T5281] usb 5-1: SerialNumber: syz
[ 1081.610985][ T5281] usb 5-1: config 0 descriptor??
[ 1081.668572][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1081.679543][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1081.720186][ T5228] usb 3-1: Using ep0 maxpacket: 8
[ 1081.732581][ T5228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1081.755340][ T5228] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1081.780633][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1081.819715][ T5303] hid-led 0003:0FC5:B080.0043: unknown main item tag 0x2
[ 1081.828859][ T5228] usb 3-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40
[ 1081.860203][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1081.880258][ T5228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1081.897506][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1081.911207][ T5228] usb 3-1: Product: syz
[ 1081.915461][ T5228] usb 3-1: Manufacturer: syz
[ 1081.948006][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1081.959606][ T5228] usb 3-1: SerialNumber: syz
[ 1082.000479][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1082.020765][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.042545][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1082.073922][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.096415][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1082.121419][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.144336][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1082.162454][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.180583][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1082.200144][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.233664][T23613] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1082.315975][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.331179][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.341949][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.353147][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.363570][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.375904][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.389288][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.403976][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.415214][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.427803][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.438361][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.460490][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.482553][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.505248][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.525368][T23613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1082.548716][T23613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1082.573678][T23613] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1082.611794][T23800] chnl_net:caif_netlink_parms(): no params data found
[ 1082.648150][T23613] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.667706][T23613] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.685274][T23613] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.699517][ T5228] hid (null): report_id 2668810406 is invalid
[ 1082.703410][T23613] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1082.792193][ T5228] asus 0003:0B05:19B6.0044: report_id 2668810406 is invalid
[ 1082.835640][ T5228] asus 0003:0B05:19B6.0044: item 0 4 1 8 parsing failed
[ 1082.870574][ T5228] asus 0003:0B05:19B6.0044: Asus hid parse failed: -22
[ 1082.877619][ T5228] asus 0003:0B05:19B6.0044: probe with driver asus failed with error -22
[ 1082.906087][ T5283] usb 3-1: USB disconnect, device number 68
[ 1083.012058][ T5244] Bluetooth: hci2: command tx timeout
[ 1083.043186][   T52] bridge0: port 3(hsr0) entered disabled state
[ 1083.064155][   T52] bridge_slave_1: left allmulticast mode
[ 1083.085830][   T52] bridge_slave_1: left promiscuous mode
[ 1083.096200][   T52] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1083.120899][   T52] bridge_slave_0: left allmulticast mode
[ 1083.127033][   T52] bridge_slave_0: left promiscuous mode
[ 1083.145884][   T52] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1083.637262][ T5303] hid-led 0003:0FC5:B080.0043: probe with driver hid-led failed with error -71
[ 1083.715482][ T5303] usb 1-1: USB disconnect, device number 35
[ 1084.110162][ T5303] usb 5-1: USB disconnect, device number 55
[ 1084.677449][   T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1084.703153][   T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1084.724495][   T52] bond0 (unregistering): Released all slaves
[ 1084.759162][T23800] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1084.778318][T23800] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1084.787462][T23800] bridge_slave_0: entered allmulticast mode
[ 1084.838569][T23800] bridge_slave_0: entered promiscuous mode
[ 1084.874480][T23853] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3749'.
[ 1084.990125][    T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1085.079482][T23800] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1085.090297][ T5244] Bluetooth: hci2: command tx timeout
[ 1085.098023][T23800] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1085.105616][T23800] bridge_slave_1: entered allmulticast mode
[ 1085.143797][T23800] bridge_slave_1: entered promiscuous mode
[ 1085.152365][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1085.162562][    T8] usb 5-1: config 0 has no interfaces?
[ 1085.173607][    T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1085.185393][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.193859][    T8] usb 5-1: Product: syz
[ 1085.198177][    T8] usb 5-1: Manufacturer: syz
[ 1085.203304][    T8] usb 5-1: SerialNumber: syz
[ 1085.209969][    T8] usb 5-1: config 0 descriptor??
[ 1085.360936][T15929] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1085.379131][T23800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1085.475359][T23800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1085.511846][T15929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1085.526090][T15929] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1085.554723][T15929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1085.587870][T15929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1085.602344][ T7307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1085.632187][ T7307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1085.650603][   T52] hsr_slave_0: left promiscuous mode
[ 1085.664472][   T52] 0�: left promiscuous mode
[ 1085.674290][T23877] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1085.688947][T15929] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1085.780944][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1085.804489][   T52] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1085.827175][   T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1085.856433][   T52] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1085.918880][T23877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1085.940868][   T52] veth1_macvtap: left promiscuous mode
[ 1085.946484][   T52] veth0_macvtap: left promiscuous mode
[ 1085.969063][   T52] veth1_vlan: left promiscuous mode
[ 1085.992953][   T52] veth0_vlan: left promiscuous mode
[ 1086.008997][T23877] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1086.023481][T15929] usb 3-1: USB disconnect, device number 69
[ 1086.506619][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1086.521108][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1086.530834][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1086.544604][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1086.552221][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1086.560304][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1087.170638][ T5244] Bluetooth: hci2: command tx timeout
[ 1087.430390][    T8] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1087.688022][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1087.711361][    T8] usb 3-1: config 0 has no interfaces?
[ 1087.722883][ T5283] usb 5-1: USB disconnect, device number 56
[ 1087.763840][    T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1087.795536][    T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1087.807125][    T8] usb 3-1: Product: syz
[ 1087.819272][    T8] usb 3-1: Manufacturer: syz
[ 1087.825958][    T8] usb 3-1: SerialNumber: syz
[ 1087.845201][    T8] usb 3-1: config 0 descriptor??
[ 1087.905181][   T52] team0 (unregistering): Port device team_slave_1 removed
[ 1088.078632][   T52] team0 (unregistering): Port device team_slave_0 removed
[ 1088.618936][ T5244] Bluetooth: hci1: command tx timeout
[ 1088.888791][T23800] team0: Port device team_slave_0 added
[ 1088.909268][T23800] team0: Port device team_slave_1 added
[ 1088.944467][T23800] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1088.957676][T23800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1088.991453][T23800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1089.129848][T23800] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1089.137288][T23800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1089.203551][T23800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1089.250417][ T5244] Bluetooth: hci2: command tx timeout
[ 1089.273101][T23907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3761'.
[ 1089.358382][ T3760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1089.402543][ T3760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1089.418383][T23800] hsr_slave_0: entered promiscuous mode
[ 1089.454655][T23800] hsr_slave_1: entered promiscuous mode
[ 1089.471131][T23800] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1089.500070][T23800] Cannot create hsr debugfs directory
[ 1089.730553][ T5283] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1089.920251][ T5283] usb 5-1: Using ep0 maxpacket: 8
[ 1089.933443][ T5283] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1089.954582][ T5283] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1089.976440][ T5283] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1089.976958][T23894] chnl_net:caif_netlink_parms(): no params data found
[ 1090.007435][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1090.045359][ T5283] usb 5-1: Product: ࠇ
[ 1090.050084][ T5283] usb 5-1: Manufacturer: 뿾ⵐᶺ틐즓藟鈲豭芎鹒镆ꌾ跉ᦶ羽䛧௣辝挩￿ໆ퐏밷寘᭐뤶㒟青永䥨仢똍ᶷ⊓ℜ斑ỿ֫ꛅ탙鳧蠽狛⽒綷腗鹢봊䠱홓곱꘳좒࿫쿝䢎ꑮ㔦
[ 1090.081097][ T5283] usb 5-1: SerialNumber: Й
[ 1090.348539][T23912] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[ 1090.355482][T23912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1090.371584][T23912] vhci_hcd vhci_hcd.0: Device attached
[ 1090.504362][T23894] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1090.590166][T23894] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1090.590200][    T8] vhci_hcd: vhci_device speed not set
[ 1090.640316][T23894] bridge_slave_0: entered allmulticast mode
[ 1090.672674][T23934] vhci_hcd: connection closed
[ 1090.676040][T23894] bridge_slave_0: entered promiscuous mode
[ 1090.691650][ T5244] Bluetooth: hci1: command tx timeout
[ 1090.697338][    T8] usb 17-1: new full-speed USB device number 2 using vhci_hcd
[ 1090.700183][ T1052] vhci_hcd: stop threads
[ 1090.729198][ T5283] usb 5-1: 0:2 : does not exist
[ 1090.740223][ T5228] usb 3-1: USB disconnect, device number 70
[ 1090.761093][ T5283] usb 5-1: USB disconnect, device number 57
[ 1090.783629][ T1052] vhci_hcd: release socket
[ 1090.801073][T23894] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1090.808190][T23894] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1090.838331][ T1052] vhci_hcd: disconnect device
[ 1090.860659][T23894] bridge_slave_1: entered allmulticast mode
[ 1090.880562][T23894] bridge_slave_1: entered promiscuous mode
[ 1090.933074][T23943] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1090.952213][T23943] kAFS: unable to lookup cell '.,'
[ 1091.047101][T23894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1091.133543][T23894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1091.140235][T15929] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1091.204833][T23894] team0: Port device team_slave_0 added
[ 1091.228930][T23894] team0: Port device team_slave_1 added
[ 1091.312124][T15929] usb 4-1: Using ep0 maxpacket: 16
[ 1091.343163][T15929] usb 4-1: New USB device found, idVendor=f7d4, idProduct=bee3, bcdDevice=3d.f7
[ 1091.349063][T23894] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1091.361493][T23894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.370327][T15929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1091.390806][T23894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1091.430146][T15929] usb 4-1: Product: syz
[ 1091.435615][T15929] usb 4-1: Manufacturer: syz
[ 1091.446633][T23894] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1091.453891][T15929] usb 4-1: SerialNumber: syz
[ 1091.464164][T23894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1091.470796][T15929] usb 4-1: config 0 descriptor??
[ 1091.508452][T23894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1091.517781][T15929] cdc_eem 4-1:0.0: probe with driver cdc_eem failed with error -22
[ 1091.668758][T23894] hsr_slave_0: entered promiscuous mode
[ 1091.685984][T23894] hsr_slave_1: entered promiscuous mode
[ 1091.695793][T23894] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1091.708631][T23894] Cannot create hsr debugfs directory
[ 1091.729663][T23800] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1091.755242][T23800] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1091.771693][ T5286] usb 4-1: USB disconnect, device number 43
[ 1091.786499][T23800] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1091.821842][T23800] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1092.108949][T23894] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.350814][T23894] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.404932][T23800] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1092.465401][T23894] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.531831][T15929] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1092.545880][T23800] 8021q: adding VLAN 0 to HW filter on device team0
[ 1092.699646][T15929] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1092.723653][T23894] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.734114][T15929] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1092.745737][T15929] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1092.765926][T15929] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1092.780771][ T5244] Bluetooth: hci1: command tx timeout
[ 1092.781873][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1092.793325][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1092.822184][T15929] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1092.832150][T15929] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1092.841912][T15929] usb 5-1: Product: syz
[ 1092.846318][T15929] usb 5-1: Manufacturer: syz
[ 1092.865075][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1092.872272][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1092.898728][T15929] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1093.018348][T23800] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1093.039135][T23800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1093.183283][T23966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1093.205935][T23966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1093.219398][T23894] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1093.231034][T23894] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1093.251422][T23966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3769'.
[ 1093.290385][  T937] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1093.300818][T23894] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1093.322819][T23894] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1093.363671][T23800] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1093.405631][ T5286] usb 5-1: USB disconnect, device number 58
[ 1093.454893][  T937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1093.479384][  T937] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1093.492333][T23800] veth0_vlan: entered promiscuous mode
[ 1093.521549][  T937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1093.531227][T23800] veth1_vlan: entered promiscuous mode
[ 1093.554384][  T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1093.588001][  T937] usb 4-1: config 0 descriptor??
[ 1093.643966][T23894] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1093.685543][T23800] veth0_macvtap: entered promiscuous mode
[ 1093.716282][T23800] veth1_macvtap: entered promiscuous mode
[ 1093.768325][T23894] 8021q: adding VLAN 0 to HW filter on device team0
[ 1093.803090][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.819044][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.832001][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.844358][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.855680][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.877593][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.915874][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1093.939606][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1093.991220][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1094.046229][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.081807][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1094.120917][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.154540][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1094.182167][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.219135][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1094.253542][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.304723][T23800] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1094.351765][T24023] netlink: 47 bytes leftover after parsing attributes in process `syz.2.3777'.
[ 1094.357605][ T5286] usb 4-1: USB disconnect, device number 44
[ 1094.424451][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.470325][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.513056][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.580914][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.609264][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.656802][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.683984][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.704897][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.732892][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.743761][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.755305][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.774572][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.796190][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.818630][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.838929][T23800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1094.850199][ T5244] Bluetooth: hci1: command tx timeout
[ 1094.860989][T23800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1094.914033][T23800] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1094.953398][ T7307] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1094.960581][ T7307] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1094.996026][T23800] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.015377][T23800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.050292][T23800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.075668][T23800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1095.107224][ T7307] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1095.114439][ T7307] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1095.270190][ T5286] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[ 1095.332142][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1095.340378][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1095.395641][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1095.399004][T23894] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1095.410028][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1095.441175][T15929] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[ 1095.454416][ T5286] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1095.487388][T23894] veth0_vlan: entered promiscuous mode
[ 1095.490546][ T5286] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1095.510960][T23894] veth1_vlan: entered promiscuous mode
[ 1095.514612][ T5286] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1095.525409][ T5303] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1095.535559][ T5286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.549891][ T5286] usb 4-1: Manufacturer: 넧㠹⒈㴘橇掆ㆻ⠍酂튱
[ 1095.581330][T23894] veth0_macvtap: entered promiscuous mode
[ 1095.590172][ T5286] usb 4-1: SerialNumber: syz
[ 1095.610912][T15929] usb 3-1: Using ep0 maxpacket: 32
[ 1095.619122][T15929] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[ 1095.642373][T23894] veth1_macvtap: entered promiscuous mode
[ 1095.657663][T15929] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1095.689816][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.702159][T15929] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1095.720374][T15929] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1095.741334][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.761013][ T5303] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[ 1095.781002][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.792643][ T5303] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.806013][T15929] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1095.832845][ T5303] usb 5-1: Product: syz
[ 1095.840378][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.857228][T15929] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1095.867665][ T5303] usb 5-1: Manufacturer: syz
[ 1095.883426][T15929] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1095.893199][ T5303] usb 5-1: SerialNumber: syz
[ 1095.900219][    T8] vhci_hcd: vhci_device speed not set
[ 1095.915006][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.930303][T24063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3741'.
[ 1095.937624][ T5303] usb 5-1: config 0 descriptor??
[ 1095.948002][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1095.958960][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1095.960797][T15929] usb 3-1: Product: syz
[ 1095.974476][T15929] usb 3-1: Manufacturer: syz
[ 1095.993036][T15929] usb 3-1: SerialNumber: syz
[ 1095.998282][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.017104][T15929] usb 3-1: config 0 descriptor??
[ 1096.039758][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.044592][T15929] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1096.069210][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.085258][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.101626][T15929] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1096.144007][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.186915][T15929] usb 5-1: USB disconnect, device number 59
[ 1096.205782][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.277903][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.303138][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.336187][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.357005][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1096.404232][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.436976][T23894] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1096.502198][T24065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3741'.
[ 1096.520854][ T5286] usb 4-1: 0:2 : does not exist
[ 1096.540699][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.634206][ T5286] usb 4-1: USB disconnect, device number 45
[ 1096.656488][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.710251][T19115] udevd[19115]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1096.737203][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.754594][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.766330][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.783094][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.793977][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.876880][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.898553][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.914198][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.929513][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1096.978557][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1096.993552][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1097.013041][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1097.127603][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1097.154302][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1097.175836][T23894] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1097.194678][T23894] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1097.215546][T23894] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1097.320724][T23894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.330333][T23894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.339923][T23894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.390065][T23894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1097.594705][ T3760] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.762143][ T3760] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1097.857786][ T1052] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1097.876270][ T1052] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1097.943665][ T3760] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1098.014324][T24075] netlink: 'syz.4.3787': attribute type 21 has an invalid length.
[ 1098.024293][T24075] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3787'.
[ 1098.107726][ T3760] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1098.172797][ T5303] usb 3-1: USB disconnect, device number 71
[ 1098.192834][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1098.211586][ T5303] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[ 1098.235035][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1098.324010][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1098.335840][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1098.344627][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1098.399516][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1098.414092][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1098.424708][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1098.499464][ T3760] bridge_slave_1: left allmulticast mode
[ 1098.535751][ T3760] bridge_slave_1: left promiscuous mode
[ 1098.570732][ T3760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1098.622416][ T3760] bridge_slave_0: left allmulticast mode
[ 1098.648572][ T3760] bridge_slave_0: left promiscuous mode
[ 1098.676907][   T29] kauditd_printk_skb: 57 callbacks suppressed
[ 1098.676925][   T29] audit: type=1326 audit(1728875233.656:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24084 comm="syz.4.3789" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb9ff77dff9 code=0x0
[ 1098.711591][ T3760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1098.749315][T24096] program syz.4.3789 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1099.665059][T24121] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3795'.
[ 1099.990670][ T3760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1100.031354][ T3760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1100.056296][ T3760] bond0 (unregistering): Released all slaves
[ 1100.100516][T24089] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1100.450374][ T5244] Bluetooth: hci3: command tx timeout
[ 1100.580160][   T25] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 1100.812808][   T25] usb 2-1: Using ep0 maxpacket: 8
[ 1100.836032][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1100.887840][   T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1100.920849][ T5283] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[ 1100.931266][   T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[ 1100.965060][ T3760] hsr_slave_0: left promiscuous mode
[ 1101.009947][   T25] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00
[ 1101.033966][ T3760] hsr_slave_1: left promiscuous mode
[ 1101.044104][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.080272][ T5283] usb 1-1: Using ep0 maxpacket: 16
[ 1101.087286][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[ 1101.110857][   T25] usb 2-1: config 0 descriptor??
[ 1101.122435][ T5283] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[ 1101.139102][ T5283] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1101.158622][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1101.187343][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1101.196932][ T5283] usb 1-1: config 0 descriptor??
[ 1101.200133][ T5303] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[ 1101.229193][ T3760] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1101.267080][ T3760] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1101.320447][ T3760] veth1_macvtap: left promiscuous mode
[ 1101.326578][ T3760] veth0_macvtap: left promiscuous mode
[ 1101.347371][ T3760] veth1_vlan: left promiscuous mode
[ 1101.363306][ T3760] veth0_vlan: left promiscuous mode
[ 1101.368829][T24139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.383714][T24139] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.412543][ T5303] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1101.500168][ T5303] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.528596][ T5303] usb 3-1: Product: syz
[ 1101.538065][ T5303] usb 3-1: Manufacturer: syz
[ 1101.548876][ T5303] usb 3-1: SerialNumber: syz
[ 1101.573243][ T5303] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1101.601960][ T5228] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1101.782178][T24151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.829712][T24165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1101.864811][T24151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.877739][T24165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1101.958019][ T5283] hid-generic 0003:0158:0100.0045: unknown main item tag 0x1
[ 1101.999788][ T5283] hid-generic 0003:0158:0100.0045: unexpected long global item
[ 1102.030639][ T5283] hid-generic 0003:0158:0100.0045: probe with driver hid-generic failed with error -22
[ 1102.095121][ T5283] usb 1-1: USB disconnect, device number 36
[ 1102.108076][   T25] usbhid 2-1:0.0: can't add hid device: -71
[ 1102.114704][   T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1102.171877][   T25] usb 2-1: USB disconnect, device number 93
[ 1102.530581][ T5244] Bluetooth: hci3: command tx timeout
[ 1102.734798][ T5228] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 1102.742154][ T5228] ath9k_htc: Failed to initialize the device
[ 1103.006254][ T5228] usb 3-1: ath9k_htc: USB layer deinitialized
[ 1103.317589][ T3760] team0 (unregistering): Port device team_slave_1 removed
[ 1103.456808][ T3760] team0 (unregistering): Port device team_slave_0 removed
[ 1103.896756][   T29] audit: type=1326 audit(1728875238.876:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24188 comm="syz.1.3811" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f181e37dff9 code=0x0
[ 1103.960437][T24192] program syz.1.3811 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1104.633605][ T5244] Bluetooth: hci3: command tx timeout
[ 1104.705502][T24079] chnl_net:caif_netlink_parms(): no params data found
[ 1104.774878][T24182] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3810'.
[ 1104.819561][T24189] batadv0: entered promiscuous mode
[ 1104.829328][T24190] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1104.912799][ T5283] usb 3-1: USB disconnect, device number 72
[ 1105.099450][   T29] audit: type=1326 audit(1728875240.076:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.207790][   T29] audit: type=1326 audit(1728875240.116:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.257961][T24203] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3813'.
[ 1105.290755][T24079] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1105.306400][   T29] audit: type=1326 audit(1728875240.116:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.332132][T24079] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1105.349467][T24079] bridge_slave_0: entered allmulticast mode
[ 1105.377731][T24079] bridge_slave_0: entered promiscuous mode
[ 1105.386637][   T29] audit: type=1326 audit(1728875240.116:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.409066][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1105.418570][T24079] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1105.420983][ T5244] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[ 1105.440870][ T5244] Bluetooth: hci2: Injecting HCI hardware error event
[ 1105.452978][ T5244] Bluetooth: hci2: hardware error 0x00
[ 1105.458045][T24079] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1105.471744][T24079] bridge_slave_1: entered allmulticast mode
[ 1105.478995][T24079] bridge_slave_1: entered promiscuous mode
[ 1105.510218][   T29] audit: type=1326 audit(1728875240.116:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.626199][   T29] audit: type=1326 audit(1728875240.116:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.737777][   T29] audit: type=1326 audit(1728875240.116:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.762088][T24212] netlink: 'syz.0.3818': attribute type 1 has an invalid length.
[ 1105.806686][T24214] team_slave_1: entered promiscuous mode
[ 1105.834310][   T29] audit: type=1326 audit(1728875240.116:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.857011][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1105.937057][   T29] audit: type=1326 audit(1728875240.116:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24195 comm="syz.1.3812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f181e37dff9 code=0x7ffc0000
[ 1105.959506][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1106.068852][T24214] team0: Port device team_slave_1 removed
[ 1106.081682][T24079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1106.090677][T24079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1106.230967][T15628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1106.248814][T15628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1106.257713][T15628] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1106.267861][T15628] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1106.280592][T15628] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1106.287926][T15628] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1106.333326][T24079] team0: Port device team_slave_0 added
[ 1106.388443][T24079] team0: Port device team_slave_1 added
[ 1106.631932][T24079] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1106.648869][T24079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1106.702950][T24079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1106.705429][T15628] Bluetooth: hci3: command tx timeout
[ 1106.749834][T24243] batadv0: entered promiscuous mode
[ 1106.784651][T24079] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1106.803456][T24079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1106.848336][T24079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1106.895345][T24246] program syz.2.3823 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1106.963159][T24245] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1107.045198][T24079] hsr_slave_0: entered promiscuous mode
[ 1107.070572][T24079] hsr_slave_1: entered promiscuous mode
[ 1107.078168][T24079] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1107.086754][T24079] Cannot create hsr debugfs directory
[ 1107.628508][T24233] chnl_net:caif_netlink_parms(): no params data found
[ 1107.660240][ T5244] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[ 1107.670413][ T5283] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[ 1107.870376][ T5283] usb 1-1: Using ep0 maxpacket: 16
[ 1107.877911][ T5283] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[ 1107.940908][ T5283] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[ 1107.960185][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.015161][ T5283] usb 1-1: Product: syz
[ 1108.027369][ T5283] usb 1-1: Manufacturer: syz
[ 1108.038399][ T5283] usb 1-1: SerialNumber: syz
[ 1108.052644][ T5283] usb 1-1: config 0 descriptor??
[ 1108.083908][ T5283] hub 1-1:0.0: bad descriptor, ignoring hub
[ 1108.104906][ T5283] hub 1-1:0.0: probe with driver hub failed with error -5
[ 1108.136529][ T5283] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input76
[ 1108.270390][T24281] kvm: Disabled LAPIC found during irq injection
[ 1108.295858][T24279] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3828'.
[ 1108.305918][T24233] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1108.336527][T24233] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1108.354160][T24233] bridge_slave_0: entered allmulticast mode
[ 1108.369400][T24233] bridge_slave_0: entered promiscuous mode
[ 1108.377454][ T5244] Bluetooth: hci0: command tx timeout
[ 1108.401784][T24233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1108.423289][T24233] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1108.431930][T24233] bridge_slave_1: entered allmulticast mode
[ 1108.439316][T24233] bridge_slave_1: entered promiscuous mode
[ 1108.622818][T24233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1108.635988][T24233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1108.775968][T24233] team0: Port device team_slave_0 added
[ 1108.876873][T24233] team0: Port device team_slave_1 added
[ 1108.951492][T24233] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1108.958491][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1108.991145][T24233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1109.002975][T24079] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1109.018096][T24079] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1109.030616][T24233] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1109.038009][T24233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1109.065437][T24233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1109.085786][T24079] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1109.092851][T15929] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[ 1109.103397][T24079] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1109.141664][T24233] hsr_slave_0: entered promiscuous mode
[ 1109.149128][T24233] hsr_slave_1: entered promiscuous mode
[ 1109.160056][T24233] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1109.167660][T24233] Cannot create hsr debugfs directory
[ 1109.210427][   T46] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[ 1109.260225][T15929] usb 3-1: Using ep0 maxpacket: 16
[ 1109.282616][T15929] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1109.305895][T15929] usb 3-1: config 1 interface 0 has no altsetting 0
[ 1109.322970][T15929] usb 3-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.40
[ 1109.337578][T15929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.357583][T15929] usb 3-1: Product: ᎂ쟃躿栭ߊ膠鸂纾ᚣ၂ጭ㽓ꈞ븃鈄곗欴諉⇞跼짮ꔾၕ熅쬙鲰魛肵깂헡뼉偬欦ኇⱙ諸呂ߘ瓠㹩뭪鶸砸ꇷ뢙남杕掮꡵滝⌁ᜊ⤢ढ涋ফ쩽剏⨓쨶焫䔋֭㶽ꆧ닷Њᴈ孓崦㓙蟰⾁斧퓊䘶슛뒠멡潔㿳㌀纓违밌瘒畡꺀㻘뒨勓㞂⋭猈䞽퍯枔鸎棾ụӍ
[ 1109.398024][T15929] usb 3-1: Manufacturer: ఌ
[ 1109.404185][T15929] usb 3-1: SerialNumber: syz
[ 1109.423445][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[ 1109.449096][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1109.451180][T24233] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.488137][   T46] usb 2-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d
[ 1109.518138][   T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.526414][   T46] usb 2-1: Product: syz
[ 1109.530819][   T46] usb 2-1: Manufacturer: syz
[ 1109.535491][   T46] usb 2-1: SerialNumber: syz
[ 1109.538969][T24079] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1109.561601][   T46] usb 2-1: config 0 descriptor??
[ 1109.583276][   T46] usb 2-1: Found UVC 0.00 device syz (468c:90ea)
[ 1109.589750][   T46] usb 2-1: No valid video chain found.
[ 1109.590948][T24079] 8021q: adding VLAN 0 to HW filter on device team0
[ 1109.628915][T24079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1109.639431][T24079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1109.694599][T24233] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.740736][T13469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1109.747925][T13469] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1109.768229][T13469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1109.775459][T13469] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1109.893242][T24233] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.963861][T24079] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1110.036568][T24233] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1110.145902][T15929] usbhid 3-1:1.0: can't add hid device: -71
[ 1110.153895][T15929] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 1110.232315][T15929] usb 3-1: USB disconnect, device number 73
[ 1110.310580][   T46] usb 1-1: USB disconnect, device number 37
[ 1110.336149][T24079] veth0_vlan: entered promiscuous mode
[ 1110.398919][   T29] kauditd_printk_skb: 2 callbacks suppressed
[ 1110.398936][   T29] audit: type=1326 audit(1728875245.376:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.402903][T24079] veth1_vlan: entered promiscuous mode
[ 1110.438823][   T29] audit: type=1326 audit(1728875245.416:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.480059][ T5244] Bluetooth: hci0: command tx timeout
[ 1110.515884][T24233] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1110.520294][   T29] audit: type=1326 audit(1728875245.416:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.569425][T24079] veth0_macvtap: entered promiscuous mode
[ 1110.580183][   T29] audit: type=1326 audit(1728875245.416:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.606230][T24233] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1110.621563][   T29] audit: type=1326 audit(1728875245.416:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.630489][T15929] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[ 1110.647054][T24233] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1110.676290][T24079] veth1_macvtap: entered promiscuous mode
[ 1110.690325][   T29] audit: type=1326 audit(1728875245.416:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.714978][T24233] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1110.787459][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.798264][   T29] audit: type=1326 audit(1728875245.416:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.798308][   T29] audit: type=1326 audit(1728875245.416:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.798340][   T29] audit: type=1326 audit(1728875245.416:1791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24314 comm="syz.0.3834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c6517dff9 code=0x7ffc0000
[ 1110.850734][T15929] usb 3-1: Using ep0 maxpacket: 8
[ 1110.889947][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1110.919022][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1110.940309][T15929] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[ 1110.948639][T15929] usb 3-1: config 179 has no interface number 0
[ 1110.960297][T15929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1110.980133][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.000086][T15929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[ 1111.012529][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.023507][T15929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1111.034966][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.048697][T15929] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[ 1111.060818][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.071755][T15929] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 1111.085224][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.098326][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.109328][T15929] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[ 1111.131864][   T46] usb 2-1: USB disconnect, device number 94
[ 1111.150769][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.160861][T15929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1111.182030][T24316] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1111.200117][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.228035][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.258554][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.310111][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.331390][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.360151][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.406304][   T46] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input77
[ 1111.422297][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1111.439170][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.463368][T24079] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1111.596319][ T5228] usb 3-1: USB disconnect, device number 74
[ 1111.602399][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[ 1111.602452][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 1111.631130][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.645899][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.658533][ T5228] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 1111.679061][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.700168][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.721963][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.747563][   T29] audit: type=1326 audit(1728875246.726:1792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24338 comm="syz.1.3835" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f181e37dff9 code=0x0
[ 1111.769928][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.787261][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.802779][T24346] program syz.1.3835 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1111.820545][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.841052][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.861348][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.871738][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.888044][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.899962][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.919283][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.936115][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1111.959693][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1111.981776][T24079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1112.002379][T24079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1112.032221][T24079] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1112.075499][T24342] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1112.102783][T24079] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.115549][T24079] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.126367][T24079] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.139084][T24079] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1112.217839][T24233] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1112.241653][T24233] 8021q: adding VLAN 0 to HW filter on device team0
[ 1112.253164][T13469] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1112.260383][T13469] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1112.364676][T13469] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1112.371876][T13469] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1112.530977][ T5244] Bluetooth: hci0: command tx timeout
[ 1112.536709][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.550089][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.690221][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1112.707926][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1112.738254][T24233] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1112.821002][T24367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3838'.
[ 1112.864093][T24233] veth0_vlan: entered promiscuous mode
[ 1112.917305][T24233] veth1_vlan: entered promiscuous mode
[ 1113.024305][T24233] veth0_macvtap: entered promiscuous mode
[ 1113.069933][T24233] veth1_macvtap: entered promiscuous mode
[ 1113.124008][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.158792][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.182059][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.202941][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.217643][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.235735][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.261452][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.283876][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.430997][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.462414][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.472696][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.483470][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.494497][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.505264][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.515836][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.536920][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.577728][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.597397][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3839'.
[ 1113.629001][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.675232][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1113.689546][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1113.727163][T24233] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1113.842430][T24395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3839'.
[ 1113.914346][T24401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3786'.
[ 1113.928224][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1113.986815][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.073349][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.170178][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.191381][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.230218][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.300426][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.325458][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.368288][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.431133][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.490076][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.529741][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.580793][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.611616][ T5244] Bluetooth: hci0: command tx timeout
[ 1114.645742][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.670944][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.683206][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.694676][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.752116][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.792261][T24233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1114.854094][T24233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1114.995705][T24233] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1115.095577][T24233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.140910][T24233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.178450][T24233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.210255][T24233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1115.502403][T13469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1115.532467][T13469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1115.604031][T13469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1115.638131][T13469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1115.670803][   T46] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 1115.700186][T15929] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[ 1115.831532][   T46] usb 2-1: too many configurations: 167, using maximum allowed: 8
[ 1115.886502][T15929] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1115.908365][T15929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.916788][   T46] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1115.929781][   T46] usb 2-1: can't read configurations, error -61
[ 1115.945876][T15929] usb 4-1: Product: syz
[ 1115.950288][T15929] usb 4-1: Manufacturer: syz
[ 1115.954935][T15929] usb 4-1: SerialNumber: syz
[ 1115.980950][T15929] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1116.074238][   T25] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1116.101287][   T46] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[ 1116.142681][T24443] batadv0: entered promiscuous mode
[ 1116.167125][T24443] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1116.197186][   T29] audit: type=1326 audit(1728875251.176:1793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24442 comm="syz.0.3846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7c6517dff9 code=0x0
[ 1116.260876][   T46] usb 2-1: too many configurations: 167, using maximum allowed: 8
[ 1116.270919][   T46] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1116.278962][T24446] program syz.0.3846 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1116.294310][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.298030][   T46] usb 2-1: can't read configurations, error -61
[ 1116.302738][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.313529][   T46] usb usb2-port1: attempt power cycle
[ 1116.415623][T24435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1116.437625][T24435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1116.533782][T24449] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3848'.
[ 1116.660274][   T46] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[ 1116.703845][   T46] usb 2-1: too many configurations: 167, using maximum allowed: 8
[ 1116.717985][   T46] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1116.781426][   T46] usb 2-1: can't read configurations, error -61
[ 1116.834767][T24452] netlink: 'syz.4.3849': attribute type 10 has an invalid length.
[ 1116.844336][T24452] macvlan0: entered promiscuous mode
[ 1116.849847][T24452] macvlan0: entered allmulticast mode
[ 1116.934025][T24452] veth1_vlan: entered allmulticast mode
[ 1116.962171][T24452] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[ 1116.980196][   T46] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[ 1117.014916][   T46] usb 2-1: too many configurations: 167, using maximum allowed: 8
[ 1117.042016][   T46] usb 2-1: unable to read config index 0 descriptor/start: -61
[ 1117.049708][   T46] usb 2-1: can't read configurations, error -61
[ 1117.056650][   T46] usb usb2-port1: unable to enumerate USB device
[ 1117.097407][   T25] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1117.104981][   T25] ath9k_htc: Failed to initialize the device
[ 1117.140323][   T25] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1117.187806][T24458] ==================================================================
[ 1117.195924][T24458] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.204542][T24458] Write of size 2560 at addr ffffc900041a1000 by task vivid-000-vid-c/24458
[ 1117.213224][T24458] 
[ 1117.215555][T24458] CPU: 1 UID: 0 PID: 24458 Comm: vivid-000-vid-c Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0
[ 1117.226762][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1117.236840][T24458] Call Trace:
[ 1117.240140][T24458]  <TASK>
[ 1117.243080][T24458]  dump_stack_lvl+0x241/0x360
[ 1117.247786][T24458]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1117.252997][T24458]  ? __pfx__printk+0x10/0x10
[ 1117.257701][T24458]  ? _printk+0xd5/0x120
[ 1117.261875][T24458]  print_report+0x169/0x550
[ 1117.266398][T24458]  ? __virt_addr_valid+0xbd/0x530
[ 1117.271433][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.277079][T24458]  kasan_report+0x143/0x180
[ 1117.281596][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.287246][T24458]  kasan_check_range+0x282/0x290
[ 1117.292195][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.297847][T24458]  __asan_memcpy+0x40/0x70
[ 1117.302276][T24458]  tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.307771][T24458]  vivid_thread_vid_cap_tick+0xf8e/0x60d0
[ 1117.313511][T24458]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1117.319852][T24458]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1117.325079][T24458]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 1117.331262][T24458]  ? timekeeping_get_ns+0x2c0/0x420
[ 1117.336491][T24458]  vivid_thread_vid_cap+0x8aa/0xf30
[ 1117.341720][T24458]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1117.347454][T24458]  kthread+0x2f0/0x390
[ 1117.351530][T24458]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1117.357265][T24458]  ? __pfx_kthread+0x10/0x10
[ 1117.361864][T24458]  ret_from_fork+0x4b/0x80
[ 1117.366294][T24458]  ? __pfx_kthread+0x10/0x10
[ 1117.370888][T24458]  ret_from_fork_asm+0x1a/0x30
[ 1117.375666][T24458]  </TASK>
[ 1117.378686][T24458] 
[ 1117.381013][T24458] The buggy address belongs to the virtual mapping at
[ 1117.381013][T24458]  [ffffc90004179000, ffffc900041a2000) created by:
[ 1117.381013][T24458]  vb2_vmalloc_alloc+0xf2/0x340
[ 1117.398918][T24458] 
[ 1117.401252][T24458] Memory state around the buggy address:
[ 1117.406891][T24458]  ffffc900041a0f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1117.414965][T24458]  ffffc900041a0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1117.423044][T24458] >ffffc900041a1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1117.431119][T24458]                    ^
[ 1117.435233][T24458]  ffffc900041a1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1117.443311][T24458]  ffffc900041a1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1117.451378][T24458] ==================================================================
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1117.554683][T24458] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1117.561934][T24458] CPU: 0 UID: 0 PID: 24458 Comm: vivid-000-vid-c Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0
[ 1117.573241][T24458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[ 1117.583314][T24458] Call Trace:
[ 1117.586612][T24458]  <TASK>
[ 1117.589554][T24458]  dump_stack_lvl+0x241/0x360
[ 1117.594253][T24458]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1117.599472][T24458]  ? __pfx__printk+0x10/0x10
[ 1117.604089][T24458]  ? preempt_schedule+0xe1/0xf0
[ 1117.608966][T24458]  ? vscnprintf+0x5d/0x90
[ 1117.613311][T24458]  panic+0x349/0x880
[ 1117.617228][T24458]  ? check_panic_on_warn+0x21/0xb0
[ 1117.622358][T24458]  ? __pfx_panic+0x10/0x10
[ 1117.626792][T24458]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[ 1117.632807][T24458]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1117.639164][T24458]  ? print_report+0x502/0x550
[ 1117.643870][T24458]  check_panic_on_warn+0x86/0xb0
[ 1117.648827][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.654490][T24458]  end_report+0x77/0x160
[ 1117.658751][T24458]  kasan_report+0x154/0x180
[ 1117.663285][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.668944][T24458]  kasan_check_range+0x282/0x290
[ 1117.673902][T24458]  ? tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.679557][T24458]  __asan_memcpy+0x40/0x70
[ 1117.683986][T24458]  tpg_fill_plane_buffer+0x1ad1/0x5af0
[ 1117.689493][T24458]  vivid_thread_vid_cap_tick+0xf8e/0x60d0
[ 1117.695333][T24458]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[ 1117.701686][T24458]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1117.706923][T24458]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 1117.713200][T24458]  ? timekeeping_get_ns+0x2c0/0x420
[ 1117.718402][T24458]  vivid_thread_vid_cap+0x8aa/0xf30
[ 1117.724060][T24458]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1117.729832][T24458]  kthread+0x2f0/0x390
[ 1117.733951][T24458]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1117.739703][T24458]  ? __pfx_kthread+0x10/0x10
[ 1117.744309][T24458]  ret_from_fork+0x4b/0x80
[ 1117.748753][T24458]  ? __pfx_kthread+0x10/0x10
[ 1117.753368][T24458]  ret_from_fork_asm+0x1a/0x30
[ 1117.758151][T24458]  </TASK>
[ 1117.761425][T24458] Kernel Offset: disabled
[ 1117.765745][T24458] Rebooting in 86400 seconds..