last executing test programs:

21m47.498851297s ago: executing program 32 (id=520):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000000c0)=0x3ff)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000900)={0x0, 0xaee1, 0x10, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x768, 0x2, 0x100002, 0xf36, 0x8, "f494bfeba3160200160000000000006d004000"})

21m5.290583577s ago: executing program 33 (id=805):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000b00)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x18000000, 0xffffffffffffffff, 0xfff, 0x3, 0x10000, {0x40, 0x2, 0x5, 0x80, 0x9}, {0x6, 0x0, 0x4, 0x4, 0xf0f6, 0x5}, 0x6cf8, 0x5}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0)

20m4.847821617s ago: executing program 34 (id=1242):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
futex(0x0, 0xd, 0x1, 0x0, 0x0, 0x3)
syz_mount_image$fuse(0x0, 0x0, 0x1309008, 0x0, 0xf9, 0x0, 0x0)
open_tree(0xffffffffffffffff, 0x0, 0x89901)

19m23.063345073s ago: executing program 35 (id=1575):
r0 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x11, 0x0, @fd, 0x0, 0x0, 0x0, {0x40}})
io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0)

19m4.159106358s ago: executing program 36 (id=1690):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$EVIOCGID(r2, 0x80084502, &(0x7f00000000c0)=""/183)

16m48.361118188s ago: executing program 37 (id=2705):
syz_usb_connect(0x3, 0x1c, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x2, {0x3}}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x8, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0x7, 0x2}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98)

16m36.195727606s ago: executing program 38 (id=2769):
syz_mount_image$fuse(0x0, &(0x7f0000004040)='./file0\x00', 0x2000080, 0x0, 0xfd, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f0000000240)='./file0\x00')
syz_fuse_handle_req(r0, &(0x7f0000000900)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a30bf328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88a86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061cddf2b257cacbba656cda626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34130a0000e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d12e7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff0552d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13776204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9e9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39a8f3f1b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edcd3f35cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d77a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd37ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x7f94, {0x7, 0x28, 0x3, 0x42800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
umount2(&(0x7f0000000100)='./file0\x00', 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'gre0\x00'})
syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x0, 0x2, 0x81, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16m30.627036376s ago: executing program 39 (id=2791):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = eventfd2(0x5, 0x801)
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x800000000000a, 0x0, 0x2, r2})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0x7f, 0x2000, 0x1, r2})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12m6.233166678s ago: executing program 2 (id=4231):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)="9b", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000017c0)="f00924a100767ff70d6297cd9fac1ec3f751", 0x12}, {0x0}], 0x2}}], 0x2, 0x20000010)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x4000000)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xffff, 0x1, [0x6]}, 0xa)

12m5.0349073s ago: executing program 2 (id=4238):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x6ab7, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x42000000, 0x4)
recvmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f00000000c0)=@nl=@unspec, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/190}], 0x0, &(0x7f0000000140)=""/21}, 0x3}], 0x40000000000022b, 0x45833af92e4bbbfe, 0x0)

12m3.947825942s ago: executing program 40 (id=4244):
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
close(r1)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

12m3.926254832s ago: executing program 2 (id=4247):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x4)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfef, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
umount2(&(0x7f0000000340)='./file0\x00', 0x3)

12m3.65332317s ago: executing program 2 (id=4251):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x8010, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0xffffffffffffffff, {0x7, 0x2b, 0x0, 0x300900, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

12m3.387770852s ago: executing program 2 (id=4252):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x1, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
socket(0x10, 0x3, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x48}}, 0x0)

12m2.140256828s ago: executing program 2 (id=4257):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgrp(0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)

12m1.687100159s ago: executing program 41 (id=4257):
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = getpgrp(0x0)
r4 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
fcntl$setownex(r2, 0xf, &(0x7f0000000100)={0x2, r3})
sendmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1)

11m37.77676532s ago: executing program 4 (id=4323):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
chown(&(0x7f00000040c0)='./file0\x00', 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', r3, 0x0, 0x50)
umount2(&(0x7f00000001c0)='./file0\x00', 0x3)

11m37.107683372s ago: executing program 4 (id=4325):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r2 = fsmount(r1, 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x0, 0x4})
fchmod(r0, 0x0)
msgget$private(0x0, 0xafb0e20fef6483ff)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)

11m36.263410149s ago: executing program 4 (id=4328):
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r2, r0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

11m35.706762487s ago: executing program 4 (id=4329):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

11m34.550157882s ago: executing program 4 (id=4331):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8100, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@broadcast, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)

11m34.09072026s ago: executing program 4 (id=4333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x0, 0x25dfdbf9}, 0x14}}, 0x2000c050)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a)

11m33.396085749s ago: executing program 42 (id=4333):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x0, 0x1, 0x0, 0x25dfdbf9}, 0x14}}, 0x2000c050)
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43a"], 0x340a)

11m0.104420105s ago: executing program 7 (id=4463):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, &(0x7f0000000040)={0x1, 0x8, 0x0, 0x20000000000000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000024000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b9800000c00f326635010000000f3064660f38828e4258660f086766c744240012e93bf96766c7442402010000006766c744240600000000670f011c2466b9800000c00f326635002000000f300f01df66b80500000066b900200000a90a000f01c40f019f09000f01c2", 0x6b}], 0x1, 0x41, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000300)={[0xbb5, 0xffffffffffffffca, 0x100, 0xfffffffffffffff6, 0x6, 0x401, 0x6, 0x2, 0x0, 0x8, 0x100000001, 0xba25, 0x1000, 0x3, 0xfffffffffffffe00, 0x4], 0xeeef0000, 0x40080})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

10m59.591182241s ago: executing program 7 (id=4465):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000000480)=@abs={0x1, 0x0, 0x4e20}, 0x1c)
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add4050000000000000001117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ffff0100f5c71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)

10m59.307764663s ago: executing program 7 (id=4468):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', 0x200000, 0x7a)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0)
landlock_restrict_self(r0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f0000000500)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./file1/file4/file7/file5\x00', 0x0)

10m58.961263464s ago: executing program 7 (id=4473):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0x1370, &(0x7f0000000340)={0x0, 0x49fa, 0x80, 0x0, 0x4e}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x3, 0x0})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

10m57.2198239s ago: executing program 7 (id=4483):
r0 = socket$igmp(0x2, 0x3, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [<r5=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x8, 0x2, 0x5})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={r5})
close_range(r0, 0xffffffffffffffff, 0x0)

10m56.919689057s ago: executing program 7 (id=4485):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

10m41.420119209s ago: executing program 43 (id=4485):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084)

9m23.489775644s ago: executing program 6 (id=4844):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x13, r0, 0x80000)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}}, 0x0)
r2 = fsmount(r1, 0x1, 0x0)
fchdir(r2)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

9m23.264957791s ago: executing program 6 (id=4848):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)

9m22.194816995s ago: executing program 6 (id=4849):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20)
syz_clone(0xa2540400, 0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)

9m18.19612274s ago: executing program 6 (id=4860):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x2)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
chroot(&(0x7f0000000780)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')

9m17.846125272s ago: executing program 6 (id=4863):
socket(0x10, 0x803, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00')
r1 = memfd_create(&(0x7f00000002c0)='D\xa3\xd5Wj\x00\x00\x8b\x14\xc2\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x9b\x12\x0eW\xcf\t\xb0\xa9 +H/\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2y\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xde\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4\x86\xd4\xc9\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg(\x03\xa7\x92\xe5\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xf8A\xaf\\\xaa\xf5u\xde\xfa\xa1\xc0\xf9&gR\x81.\xff\x83k\xe6\rDa\x16\xbd\x1a\xb2w\b\x00'/244, 0x0)
write(r1, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = dup3(r0, r1, 0x0)
fchdir(r2)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x80000300)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

9m17.23059541s ago: executing program 6 (id=4868):
r0 = socket(0x1, 0x5, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
close(0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0x2cf67cb7a14e88d7})
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x9, 0x0, 0x0)

9m15.691550423s ago: executing program 44 (id=4868):
r0 = socket(0x1, 0x5, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
close(0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x3)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
r3 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000500)={0x2cf67cb7a14e88d7})
epoll_pwait(r3, &(0x7f0000000040)=[{}], 0x1, 0x9, 0x0, 0x0)

5m50.905733959s ago: executing program 8 (id=5537):
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
close(r0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0xb0b2748, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

5m50.751900519s ago: executing program 8 (id=5538):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22180, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0xb, 0x7, 0x0, 0x1c, 0x5, 0x2, 0x4d, 0x2, 0xf9, 0x3, 0x80, 0x9, 0x8000000000000000}, {0x6, 0x80, 0x4, 0xc4, 0x4, 0x7, 0x6, 0x3, 0x7, 0xf9, 0x0, 0x7d}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0xe, 0xd, 0x6, 0xff, 0x6, 0x56, 0x7}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0xffffffffffffffff, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x1, 0x0, 0x100000000004, 0x0, 0x0, 0x0, 0x7fffffff], 0x80a0000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m49.845828793s ago: executing program 8 (id=5541):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
close(0x3)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', <r3=>0x0})
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
write$dsp(r0, 0x0, 0x0)

5m48.9880093s ago: executing program 8 (id=5543):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r3)
dup2(r2, r0)

5m48.553349223s ago: executing program 8 (id=5547):
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0)
socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffebe}, 0x90)
r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000300)=<r1=>0x0, &(0x7f00000004c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x2d3e, 0x0, 0x40, 0x0, 0x0)

5m48.339801394s ago: executing program 8 (id=5549):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

5m47.882714484s ago: executing program 45 (id=5549):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x26)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0)

13.981033475s ago: executing program 0 (id=6480):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x24, &(0x7f0000000380)={0x40, 0x1, 0x4, "f9d4697e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

8.647408521s ago: executing program 1 (id=6493):
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x4800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x104}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x204202, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x3})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.646444628s ago: executing program 0 (id=6503):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000580)={0x0, 0x80, 0x0, &(0x7f0000000180)=[0x6bd1a312, 0x2ec66, 0x8, 0x8, 0x7, 0x800000000000008, 0x0, 0x1, 0x10000, 0x100, 0x9004, 0x40000000000000, 0x3, 0x5, 0x5, 0x49, 0x3ff, 0x2, 0x0, 0xb, 0x8000000008, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0xffffffff, 0xffffffff00000000, 0x0, 0x1, 0x7, 0x23b, 0x3, 0x2, 0x888f, 0x8, 0x8, 0x6, 0x6, 0x3, 0xa3de, 0x20000000006, 0x8, 0x5c3e, 0x400, 0x1, 0x5, 0xfffffffffffffffa, 0x1, 0xe, 0x7, 0x4, 0x100000000, 0x200000000000101, 0x5, 0x9, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0xa, 0x5, 0x9, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x7, 0x2, 0xcdc, 0x7, 0x2, 0x3, 0x2, 0x5, 0xfff, 0x9, 0x4, 0x6, 0xab6, 0x0, 0x4, 0xfff, 0xffffffffffffff81, 0x9, 0xff, 0x8, 0xff8, 0x5, 0x400000000008061d, 0x6, 0x8, 0xf6, 0x7, 0x6, 0x200, 0x7, 0xe53e, 0x2c, 0x2, 0x2293332f, 0x6, 0x5, 0x40000000000, 0xd, 0x2, 0x5, 0x2, 0x2, 0x6, 0xdfd7, 0xfffd, 0x10, 0x8, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb692, 0x3ffc00000, 0x8, 0x5]})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x120182})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.15296471s ago: executing program 0 (id=6497):
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215f", 0x1f0, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0)

7.190817151s ago: executing program 3 (id=6499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c001700000000001f3c93f185000000fdf10000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000000004043550300000000000001090224000100008000090400000103000000092100000001220500090581030004000000c12722870363193d097a02dce9028b7c05e9259309d49bdba37e0c9f9d90d9d5f32b3a33c54bed7765dced6bbe33350b8c159463268d8e1e"], 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="02001f"], 0x0}, 0x0)

6.939108784s ago: executing program 1 (id=6500):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000080)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c)
sendmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010)

6.593110332s ago: executing program 0 (id=6501):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffb}, &(0x7f0000000000)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x800000008ec0, 0xa)

5.964120982s ago: executing program 1 (id=6502):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x183, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x8, 0x1, 0x5})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000000c0)={0x323, @time={0x0, 0x6}, 0x0, {}, 0x1, 0x0, 0x1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

4.73644042s ago: executing program 3 (id=6505):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"})
r1 = syz_open_pts(r0, 0x101)
r2 = dup3(r1, r0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xc8c7, 0x0, 0xfffffffd, 0x2}, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
write$UHID_INPUT(r2, &(0x7f0000002440)={0xa, {"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", 0xe24}}, 0xffffff5c)

4.646562204s ago: executing program 9 (id=6506):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_io_uring_setup(0x882, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x4}]}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0xfffffffffffffd6b)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

4.4143686s ago: executing program 0 (id=6507):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

4.413243106s ago: executing program 5 (id=6517):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r2 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r2)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r4})
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a0000008d0000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)

4.006100042s ago: executing program 1 (id=6508):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = socket$kcm(0x11, 0x3, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4)
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x5b)
setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)}, {0x0}], 0x2}, 0x40000)

3.84675473s ago: executing program 5 (id=6509):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket(0x1, 0x803, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080))
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0)
socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2)

3.74309834s ago: executing program 3 (id=6510):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

3.256574998s ago: executing program 9 (id=6511):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x183, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x8, 0x1, 0x5})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

2.848554226s ago: executing program 3 (id=6512):
r0 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r2, 0x20, &(0x7f00000003c0)="1eb3bf65654102f4af4d221c8bd458d1e7cbdaf3657d0f34e790c85bdba7931791f6d15c3e681411f7a496c0dace6a3c242f5b016fef8a9cedaf6bec340dee49474360d34cb800", 0x0, 0x48)
r4 = dup(r3)
r5 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)

2.822043814s ago: executing program 5 (id=6513):
pipe2$watch_queue(&(0x7f00000000c0), 0x80)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
close(0x3)
socket(0x400000000010, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x141101)
dup(r0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2.532219994s ago: executing program 9 (id=6514):
socket$inet(0x2, 0x1, 0x0)
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
r3 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0x5011, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000002180)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.511879384s ago: executing program 1 (id=6515):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8}, {0x4, 0x2, 0x0, 0x1, [@vti_common_policy]}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x58840}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0))
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000000000)=0x8001fffc, 0x4)
listen(r2, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff000000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)

2.050884429s ago: executing program 5 (id=6516):
r0 = socket(0x10, 0x3, 0x9)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc, 0x80}, 0xc)
timerfd_settime(0xffffffffffffffff, 0x2, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000380)})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b700000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, 0x1406, 0x700, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}}, 0x800)

1.073979608s ago: executing program 3 (id=6518):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x94)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000001c0))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x81, 0xce, 0x6, 0x89, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001f", 0x72}], 0x1}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.055010153s ago: executing program 5 (id=6519):
socket$inet6(0xa, 0x800000000000002, 0x0)
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, 0x0}, 0x94)
r2 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f00000002c0)={0xa, 0xffff, @rand_addr=0x64010101}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x6b}, 0xc000040)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x400c080}, 0x0)
close(r0)

921.146519ms ago: executing program 9 (id=6520):
mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000d)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r0, 0x8979)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b36e48d276c1a0fce104", 0x0, 0xe000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ftruncate(r0, 0xfff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x70, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, r5, {0x1}, {}, {0xe, 0x6}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x42, 0x0, 0x0, 0x959f, 0x0, 0x7fff, 0x2, 0x2}}, {0x8, 0x1b, [0x8001, 0x8000]}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xe7}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8}, 0x0)

621.82786ms ago: executing program 9 (id=6521):
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0)

594.671864ms ago: executing program 5 (id=6522):
creat(&(0x7f00000002c0)='./bus\x00', 0x20)
openat$pidfd(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000006, 0xc276, 0x0, 0xfffffffffffffffb, 0x0, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x1, 0x7fffffff}, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002780)={0x14, 0x0, 0xb, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xa880}, 0x44040050)

229.248787ms ago: executing program 1 (id=6523):
sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x0)
set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8924, 0x0)
syz_io_uring_setup(0x1e1e, 0x0, &(0x7f0000002000), 0x0)

202.348099ms ago: executing program 0 (id=6524):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
write$binfmt_aout(r3, 0x0, 0xffffffdb)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x84, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$binfmt_aout(r1, 0x0, 0xffffffdb)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

58.712034ms ago: executing program 3 (id=6525):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000140)=""/177, 0xb1)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20000023896)
close(r2)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)

0s ago: executing program 9 (id=6526):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x68000)
fcntl$setstatus(r0, 0x4, 0x2000)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x427c2, 0x19e)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, 0x0)
r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f0000000b40)={0x56, 0x0, 0x8, {0x80c, 0x1}, {0x45, 0x400}, @rumble={0xdc, 0x8}})
write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250)

kernel console output (not intermixed with test programs):

up link
[ 1137.351345][ T5877] Bluetooth: hci2: command tx timeout
[ 1137.358688][T24685] team0: Port device team_slave_0 added
[ 1137.433625][T24685] team0: Port device team_slave_1 added
[ 1138.314538][T24685] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1138.331925][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1138.379685][T24685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1138.445606][T24685] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1138.456131][T24685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1138.497152][T24685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1138.964561][T24685] hsr_slave_0: entered promiscuous mode
[ 1138.986099][T24685] hsr_slave_1: entered promiscuous mode
[ 1139.481211][ T5877] Bluetooth: hci2: command tx timeout
[ 1139.567839][T24685] debugfs: 'hsr0' already exists in 'hsr'
[ 1139.579940][T24685] Cannot create hsr debugfs directory
[ 1141.512051][ T5877] Bluetooth: hci2: command tx timeout
[ 1143.049391][T24685] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1143.112752][T24685] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1143.248929][T24685] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1143.423550][   T44] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1143.628298][T24685] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1143.685103][   T44] usb 6-1: config index 0 descriptor too short (expected 45, got 36)
[ 1143.766447][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1143.817732][   T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[ 1143.870628][   T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1143.952267][   T44] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1143.964987][   T44] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1143.993475][   T44] usb 6-1: config 0 descriptor??
[ 1144.169297][T24791] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1144.412617][T24685] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1144.514815][T24685] 8021q: adding VLAN 0 to HW filter on device team0
[ 1144.601340][   T78] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1144.608742][   T78] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1144.632656][   T44] plantronics 0003:047F:FFFF.0057: reserved main item tag 0xd
[ 1144.682126][ T3029] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1144.689896][ T3029] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1144.691091][   T44] plantronics 0003:047F:FFFF.0057: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1144.993084][   T44] usb 6-1: USB disconnect, device number 48
[ 1145.017557][T24816] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1145.404480][T24685] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1145.996751][T24685] veth0_vlan: entered promiscuous mode
[ 1146.070288][T24685] veth1_vlan: entered promiscuous mode
[ 1146.078798][ T5877] Bluetooth: hci4: unexpected event for opcode 0x0c1a
[ 1146.153009][T24685] veth0_macvtap: entered promiscuous mode
[ 1146.222418][T24685] veth1_macvtap: entered promiscuous mode
[ 1146.387598][T24685] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1146.476620][T24685] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1146.633918][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.696264][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.717445][T24849] input: syz1 as /devices/virtual/input/input78
[ 1146.749192][T24845] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5592'.
[ 1146.771268][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1146.990312][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1147.281808][T24861] binder: 24858:24861 ioctl c018620c 80000280 returned -22
[ 1147.402707][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.451921][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1147.826128][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1147.861690][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1148.414921][T24886] netlink: 'syz.5.5601': attribute type 4 has an invalid length.
[ 1148.475382][T24889] netlink: 'syz.5.5601': attribute type 4 has an invalid length.
[ 1151.921036][   T44] usb 10-1: new high-speed USB device number 60 using dummy_hcd
[ 1152.441521][   T44] usb 10-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1152.551769][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.763107][   T44] usb 10-1: Product: syz
[ 1152.768146][   T44] usb 10-1: Manufacturer: syz
[ 1152.830004][   T44] usb 10-1: SerialNumber: syz
[ 1152.875546][   T44] usb 10-1: config 0 descriptor??
[ 1152.953307][   T44] ch341 10-1:0.0: ch341-uart converter detected
[ 1154.185463][   T44] usb 10-1: ch341-uart converter now attached to ttyUSB0
[ 1154.565536][T17566] usb 10-1: USB disconnect, device number 60
[ 1154.740426][T17566] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[ 1155.218853][T17566] ch341 10-1:0.0: device disconnected
[ 1156.195565][T24974] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5623'.
[ 1159.552514][T25008] syzkaller0: entered promiscuous mode
[ 1159.571208][T25008] syzkaller0: entered allmulticast mode
[ 1161.581332][T17574] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1162.251651][T17574] usb 1-1: Using ep0 maxpacket: 32
[ 1162.356438][T17574] usb 1-1: config 0 has no interfaces?
[ 1162.406022][T17574] usb 1-1: New USB device found, idVendor=3277, idProduct=009e, bcdDevice=2e.0f
[ 1162.498396][T17574] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.512581][T17574] usb 1-1: Product: syz
[ 1162.519222][T17574] usb 1-1: Manufacturer: syz
[ 1162.771035][T17574] usb 1-1: SerialNumber: syz
[ 1162.914218][T17574] usb 1-1: config 0 descriptor??
[ 1163.865993][T17566] usb 1-1: USB disconnect, device number 66
[ 1168.635360][T25094] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5649'.
[ 1168.789915][ T3029] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1168.871651][ T3029] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1169.027746][T25101] vlan2: entered allmulticast mode
[ 1169.039813][T25101] bridge0: entered allmulticast mode
[ 1169.049547][T25101] bridge1: port 1(vlan2) entered blocking state
[ 1169.085462][T25101] bridge1: port 1(vlan2) entered disabled state
[ 1169.237579][T25101] vlan2: entered promiscuous mode
[ 1169.493522][T25101] bridge0: entered promiscuous mode
[ 1169.969749][ T3029] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1170.047834][ T3029] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.071811][T17574] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1170.271292][T17574] usb 6-1: Using ep0 maxpacket: 16
[ 1170.338704][T17574] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1170.372554][T17574] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1170.444889][T17574] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1170.493301][ T3029] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1170.494222][T17574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1170.547017][ T3029] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1170.585298][T17574] usb 6-1: Product: syz
[ 1170.620617][T17574] usb 6-1: Manufacturer: syz
[ 1170.641255][T17574] usb 6-1: SerialNumber: syz
[ 1170.739649][T17574] usb 6-1: config 0 descriptor??
[ 1170.845098][T17574] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1170.898591][T17574] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1171.005458][ T3029] team0: Port device netdevsim0 removed
[ 1171.099645][ T3029] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1171.191129][ T3029] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1171.390408][T25148] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1171.405304][T17566] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[ 1171.468847][T17574] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1171.477784][T17574] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1171.621564][T17566] usb 4-1: Using ep0 maxpacket: 8
[ 1171.659559][T17566] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[ 1171.681023][T17566] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1171.741031][T17566] usb 4-1: Product: syz
[ 1171.745795][T17566] usb 4-1: Manufacturer: syz
[ 1171.841580][T17566] usb 4-1: SerialNumber: syz
[ 1171.912895][T17566] usb 4-1: config 0 descriptor??
[ 1172.105720][T17574] em28xx 6-1:0.0: Unknown AC97 audio processor detected!
[ 1172.142564][ T3029] bridge_slave_1: left allmulticast mode
[ 1172.184368][T17566] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1172.201613][ T3029] bridge_slave_1: left promiscuous mode
[ 1172.214592][   T44] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 1172.239547][ T3029] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1172.572580][T25163] binder: 25162:25163 ioctl c0306201 800003c0 returned -14
[ 1172.597265][ T3029] bridge_slave_0: left allmulticast mode
[ 1172.601117][   T44] usb 1-1: Using ep0 maxpacket: 8
[ 1172.608963][ T3029] bridge_slave_0: left promiscuous mode
[ 1172.616162][   T44] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[ 1172.648368][   T44] usb 1-1: config 0 has no interface number 0
[ 1172.684316][ T3029] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1172.715004][   T44] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1172.721375][T17574] em28xx 6-1:0.0: couldn't setup AC97 register 2
[ 1172.836448][   T44] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1172.847137][T17574] em28xx 6-1:0.0: couldn't setup AC97 register 4
[ 1173.011455][T17574] em28xx 6-1:0.0: couldn't setup AC97 register 6
[ 1173.053832][T17574] em28xx 6-1:0.0: couldn't setup AC97 register 54
[ 1173.063569][   T44] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1173.075988][T17574] em28xx 6-1:0.0: couldn't setup AC97 register 56
[ 1173.136370][T17574] usb 6-1: USB disconnect, device number 49
[ 1173.153201][   T44] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1173.198556][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5668'.
[ 1173.290452][   T44] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1173.368857][   T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.443139][   T44] usb 1-1: config 0 descriptor??
[ 1173.505998][   T44] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1173.852020][T17566] gspca_sunplus: reg_r err -71
[ 1173.857856][T17566] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[ 1173.899992][T17566] usb 4-1: USB disconnect, device number 30
[ 1173.934359][T17571] usb 1-1: USB disconnect, device number 67
[ 1173.966719][T17571] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[ 1174.096039][T25178] kvm: pic: level sensitive irq not supported
[ 1174.096104][T25178] kvm: pic: non byte read
[ 1174.163373][T25178] kvm: pic: non byte read
[ 1174.209214][T25178] kvm: pic: non byte read
[ 1174.272892][T25178] kvm: pic: single mode not supported
[ 1174.272920][T25178] kvm: pic: level sensitive irq not supported
[ 1174.294399][T25178] kvm: pic: non byte read
[ 1174.366133][T25178] kvm: pic: non byte read
[ 1174.383479][T25178] kvm: pic: non byte read
[ 1174.404798][T25178] kvm: pic: non byte read
[ 1174.437876][T25183] binder: 25182:25183 ioctl c0306201 80000140 returned -14
[ 1174.449647][T25178] kvm: pic: level sensitive irq not supported
[ 1174.449730][T25178] kvm: pic: non byte read
[ 1174.491487][T25178] kvm: pic: level sensitive irq not supported
[ 1174.491566][T25178] kvm: pic: non byte read
[ 1174.597704][ T3029] bond5 (unregistering): (slave ip6gretap1): Removing an active aggregator
[ 1174.668014][ T3029] bond5 (unregistering): (slave ip6gretap1): Releasing backup interface
[ 1175.946210][ T3029] erspan0 (unregistering): left promiscuous mode
[ 1176.288677][ T3029] gretap0 (unregistering): left promiscuous mode
[ 1177.152718][T25225] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1177.209797][T25227] binder: 25226:25227 ioctl c0306201 80000040 returned -14
[ 1177.297859][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1177.301324][   T30] audit: type=1326 audit(1757626441.887:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25226 comm="syz.0.5679" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e539 code=0x0
[ 1177.651151][T25232] netlink: 'syz.5.5680': attribute type 1 has an invalid length.
[ 1179.767349][ T3029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1179.799057][ T3029] bond_slave_0: left promiscuous mode
[ 1179.827361][ T3029] bond_slave_0: left allmulticast mode
[ 1179.931735][ T3029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1179.969342][ T3029] bond_slave_1: left promiscuous mode
[ 1179.984193][ T3029] bond_slave_1: left allmulticast mode
[ 1180.007755][ T3029] bond0 (unregistering): Released all slaves
[ 1180.021602][T25261] netlink: 'syz.1.5684': attribute type 10 has an invalid length.
[ 1180.041812][T25261] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5684'.
[ 1180.097993][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1180.147509][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1180.267145][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1180.565849][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1180.593569][T25267] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1180.604204][ T5959] IPVS: starting estimator thread 0...
[ 1180.710352][T25269] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1180.727948][ T3029] bond1 (unregistering): Released all slaves
[ 1181.049457][ T3029] bond2 (unregistering): (slave veth3): Releasing active interface
[ 1181.060712][ T3029] bond2 (unregistering): Released all slaves
[ 1181.357875][ T3029] bond3 (unregistering): Released all slaves
[ 1181.646687][ T3029] bond4 (unregistering): (slave veth7): Releasing backup interface
[ 1181.660737][ T3029] bond4 (unregistering): Released all slaves
[ 1181.957437][ T3029] bond5 (unregistering): Released all slaves
[ 1182.039624][T25232] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1182.055439][T25234] vlan2: entered allmulticast mode
[ 1182.097117][T25234] macvtap0: entered allmulticast mode
[ 1182.111156][T25234] veth0_macvtap: entered allmulticast mode
[ 1182.323721][T25261] team0: Port device geneve0 added
[ 1182.344093][T25262] debugfs: 'netdev:nicvf0' already exists in 'phy52'
[ 1182.478667][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1182.487993][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1182.568413][ T3029] tipc: Left network mode
[ 1183.760801][T17575] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1183.927948][T17575] usb 2-1: Using ep0 maxpacket: 32
[ 1184.597027][ T3029] batadv_slave_1: left promiscuous mode
[ 1184.609254][T17575] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[ 1184.655236][T17575] usb 2-1: config 0 has no interface number 0
[ 1184.673240][T17575] usb 2-1: config 0 interface 184 has no altsetting 0
[ 1184.707221][ T3029] hsr_slave_0: left promiscuous mode
[ 1184.715085][T17575] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1184.752835][T17575] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.762633][ T3029] hsr_slave_1: left promiscuous mode
[ 1184.798101][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1184.832329][T17575] usb 2-1: Product: syz
[ 1184.836232][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1184.864639][ T3029] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1184.887513][ T3029] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1184.888668][T17575] usb 2-1: Manufacturer: syz
[ 1184.920432][T17575] usb 2-1: SerialNumber: syz
[ 1184.983811][T17575] usb 2-1: config 0 descriptor??
[ 1185.023799][T17575] smsc75xx v1.0.0
[ 1185.046001][ T3029] veth1_macvtap: left promiscuous mode
[ 1185.084807][ T3029] veth0_macvtap: left promiscuous mode
[ 1185.654988][T17575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1185.721167][T17575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1187.574966][T17575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1187.641661][T17575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1187.907146][T17575] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1187.955182][T17575] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71
[ 1187.965641][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1188.109033][T17575] usb 2-1: USB disconnect, device number 48
[ 1192.597610][ T3029] team0 (unregistering): Port device team_slave_1 removed
[ 1193.193841][ T3029] team0 (unregistering): Port device team_slave_0 removed
[ 1193.548404][   T30] audit: type=1804 audit(1757626458.147:365): pid=25418 uid=0 auid=0 ses=1 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5720" name="file0" dev="ramfs" ino=130718 res=1 errno=0
[ 1194.771370][T17574] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1194.975906][T17574] usb 6-1: Using ep0 maxpacket: 32
[ 1195.011995][T17574] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[ 1195.029290][T17574] usb 6-1: config 0 has no interface number 0
[ 1195.055091][T17574] usb 6-1: config 0 interface 184 has no altsetting 0
[ 1195.067863][T17574] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1195.090807][T17574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1195.119725][T17574] usb 6-1: Product: syz
[ 1195.126750][T17574] usb 6-1: Manufacturer: syz
[ 1195.133516][T17574] usb 6-1: SerialNumber: syz
[ 1195.191588][T17574] usb 6-1: config 0 descriptor??
[ 1195.211199][T17574] smsc75xx v1.0.0
[ 1195.692625][T17575] usb 10-1: new high-speed USB device number 61 using dummy_hcd
[ 1195.835750][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1195.890997][T17575] usb 10-1: Using ep0 maxpacket: 16
[ 1195.910681][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1195.975313][T17575] usb 10-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[ 1196.015599][T17575] usb 10-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[ 1196.036447][T17575] usb 10-1: Product: syz
[ 1196.073053][T17575] usb 10-1: Manufacturer: syz
[ 1196.080279][T17575] usb 10-1: SerialNumber: syz
[ 1196.142232][T17575] usb 10-1: config 0 descriptor??
[ 1196.653914][T17575] usb 10-1: USB disconnect, device number 61
[ 1196.779771][   T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1196.958050][   T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1197.129826][   T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1197.280504][   T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1197.382318][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000118: -71
[ 1197.452478][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRH: -71
[ 1197.501059][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1197.531693][T17574] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1197.621376][T17574] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[ 1197.687947][T17574] usb 6-1: USB disconnect, device number 50
[ 1197.877849][   T37] bridge_slave_1: left allmulticast mode
[ 1197.890653][   T37] bridge_slave_1: left promiscuous mode
[ 1197.903267][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1197.962057][   T37] bridge_slave_0: left allmulticast mode
[ 1197.975814][   T37] bridge_slave_0: left promiscuous mode
[ 1197.991151][T17570] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[ 1198.013543][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.191017][T17570] usb 4-1: Using ep0 maxpacket: 16
[ 1198.229072][T17570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1198.274018][T17570] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1198.323465][T17570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.385910][T17570] usb 4-1: Product: syz
[ 1198.407285][T17570] usb 4-1: Manufacturer: syz
[ 1198.451038][T17570] usb 4-1: SerialNumber: syz
[ 1198.467672][T17570] usb 4-1: config 0 descriptor??
[ 1198.498984][T17570] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1198.648095][T17570] em28xx 4-1:0.0: DVB interface 0 found: bulk
[ 1199.154392][T19275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1199.164887][T17570] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 1199.173615][T19275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1199.183148][T19275] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1199.197034][T19275] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1199.206355][T19275] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1199.641515][T17570] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 1199.656797][T17570] em28xx 4-1:0.0: board has no eeprom
[ 1199.828792][   T37] team0: Port device geneve0 removed
[ 1200.306583][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1200.337546][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1200.376614][   T37] bond0 (unregistering): Released all slaves
[ 1200.403833][   T37] bond1 (unregistering): (slave bond2): Releasing backup interface
[ 1200.425419][   T37] bond1 (unregistering): Released all slaves
[ 1200.815039][   T37] bond2 (unregistering): Released all slaves
[ 1200.833587][T25461] em28xx 4-1:0.0: reading from i2c device at 0x0 failed (error=-5)
[ 1200.852909][   T37] bond3 (unregistering): Released all slaves
[ 1200.863564][T17570] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[ 1200.878740][T17570] em28xx 4-1:0.0: dvb set to bulk mode.
[ 1200.888487][T17566] em28xx 4-1:0.0: Binding DVB extension
[ 1200.916753][T17570] usb 4-1: USB disconnect, device number 31
[ 1200.937330][T17570] em28xx 4-1:0.0: Disconnecting em28xx
[ 1201.075717][T17566] em28xx 4-1:0.0: Registering input extension
[ 1201.097100][T17570] em28xx 4-1:0.0: Closing input extension
[ 1201.163757][T17570] em28xx 4-1:0.0: Freeing device
[ 1201.271243][ T5877] Bluetooth: hci1: command tx timeout
[ 1202.861648][   T37] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING)
[ 1203.351363][ T5877] Bluetooth: hci1: command tx timeout
[ 1203.786520][T25483] chnl_net:caif_netlink_parms(): no params data found
[ 1204.029424][T25537] kvm: pic: non byte write
[ 1204.050636][T25537] kvm: pic: non byte write
[ 1204.068545][T25537] kvm: pic: non byte write
[ 1204.087264][T25537] kvm: pic: non byte write
[ 1204.123637][T25537] kvm: pic: non byte write
[ 1204.211438][T25537] kvm: pic: non byte write
[ 1204.241790][T25537] kvm: pic: non byte write
[ 1204.246776][T25537] kvm: pic: non byte write
[ 1204.286685][T25537] kvm: pic: non byte write
[ 1204.300638][T25537] kvm: pic: non byte write
[ 1204.543843][T25537] kvm: pic: single mode not supported
[ 1204.544074][T25537] kvm: pic: single mode not supported
[ 1204.715040][   T37] hsr_slave_0: left promiscuous mode
[ 1204.795822][   T37] hsr_slave_1: left promiscuous mode
[ 1204.826173][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1204.861585][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1204.895872][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1204.919439][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1205.032960][T25556] loop6: detected capacity change from 0 to 2560
[ 1205.050277][   T37] veth1_macvtap: left promiscuous mode
[ 1205.061278][   T37] veth0_macvtap: left promiscuous mode
[ 1205.063283][T25556] buffer_io_error: 1712 callbacks suppressed
[ 1205.063308][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.070030][   T37] veth1_vlan: left promiscuous mode
[ 1205.098773][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.154895][T25559] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1205.167784][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.169164][   T37] veth0_vlan: left promiscuous mode
[ 1205.254213][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.270761][   T44] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 1205.313463][T25559] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1205.391118][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.431015][ T5877] Bluetooth: hci1: command tx timeout
[ 1205.453576][T25559] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1205.497041][   T44] usb 1-1: Using ep0 maxpacket: 8
[ 1205.521169][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.531682][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.541285][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.546049][   T44] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1205.550014][T25556] ldm_validate_partition_table(): Disk read failed.
[ 1205.561013][T25559] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2
[ 1205.565613][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.584697][T25556] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1205.596117][T25556] Dev loop6: unable to read RDB block 0
[ 1205.602592][T25556]  loop6: unable to read partition table
[ 1205.621068][   T44] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[ 1205.628005][T25556] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[ 1205.656794][T25559] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[ 1205.672212][   T44] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1205.677196][T25559] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2
[ 1205.708457][T25559] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2
[ 1205.730984][   T44] usb 1-1: config 250 has no interface number 0
[ 1205.738451][   T44] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[ 1205.771046][T25559] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 67 prio class 2
[ 1205.789146][   T44] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1205.811350][   T44] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[ 1205.840234][   T44] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[ 1205.876276][   T44] usb 1-1: config 250 interface 228 has no altsetting 0
[ 1205.902491][   T44] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1206.011083][   T44] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1206.034453][   T44] usb 1-1: Product: syz
[ 1206.041929][   T44] usb 1-1: SerialNumber: syz
[ 1206.093443][   T44] hub 1-1:250.228: bad descriptor, ignoring hub
[ 1206.099781][   T44] hub 1-1:250.228: probe with driver hub failed with error -5
[ 1206.322110][   T44] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 68 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[ 1207.254690][T25558] usb 1-1: reset high-speed USB device number 68 using dummy_hcd
[ 1207.511175][ T5877] Bluetooth: hci1: command tx timeout
[ 1207.753464][    C1] usblp0: nonzero read bulk status received: -71
[ 1207.981669][   T44] usb 1-1: USB disconnect, device number 68
[ 1208.001832][   T44] usblp0: removed
[ 1208.881231][ T5959] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[ 1209.137535][ T5959] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1209.149039][ T5959] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1209.162747][ T5959] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1209.236289][ T5959] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[ 1209.256059][ T5959] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[ 1209.266302][ T5959] usb 4-1: Product: syz
[ 1209.271818][ T5959] usb 4-1: Manufacturer: syz
[ 1209.276977][ T5959] usb 4-1: SerialNumber: syz
[ 1209.519688][ T5959] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1209.544817][   T37] team0 (unregistering): Port device team_slave_1 removed
[ 1209.845489][T17575] usb 4-1: USB disconnect, device number 32
[ 1209.864304][T25584] usblp0: removed
[ 1209.951743][   T37] team0 (unregistering): Port device team_slave_0 removed
[ 1210.017111][T17566] usb 10-1: new high-speed USB device number 62 using dummy_hcd
[ 1210.198790][T17566] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1210.208124][T17566] usb 10-1: no configurations
[ 1210.214072][T17566] usb 10-1: can't read configurations, error -22
[ 1211.001091][T17575] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[ 1211.189341][T17575] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1211.215651][T17575] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1211.250138][T17575] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1211.381175][T17575] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1211.397488][T17575] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1211.418656][T17575] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1211.434231][T17575] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1211.445443][T17575] usb 4-1: Product: syz
[ 1211.451807][T17575] usb 4-1: Manufacturer: syz
[ 1211.479918][T17575] cdc_wdm 4-1:1.0: skipping garbage
[ 1211.486608][T17575] cdc_wdm 4-1:1.0: skipping garbage
[ 1211.494817][T17575] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[ 1211.503471][T17575] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1211.768998][T25574] syzkaller0: entered promiscuous mode
[ 1211.778071][T25574] syzkaller0: entered allmulticast mode
[ 1212.391639][T17575] usb 4-1: USB disconnect, device number 33
[ 1213.024910][   T30] audit: type=1800 audit(1757626477.617:366): pid=25616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5763" name="/" dev="fuse" ino=3 res=0 errno=0
[ 1213.131479][T25618] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5)
[ 1213.138488][T25618] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1213.183676][T25618] vhci_hcd vhci_hcd.0: Device attached
[ 1213.260119][T25620] vhci_hcd: connection closed
[ 1213.260614][   T12] vhci_hcd: stop threads
[ 1213.279814][   T12] vhci_hcd: release socket
[ 1213.292727][   T12] vhci_hcd: disconnect device
[ 1213.376720][T17575] vhci_hcd: vhci_device speed not set
[ 1215.714772][T17575] usb 10-1: new high-speed USB device number 64 using dummy_hcd
[ 1215.930957][T17575] usb 10-1: Using ep0 maxpacket: 8
[ 1215.938535][T17575] usb 10-1: unable to get BOS descriptor or descriptor too short
[ 1215.955968][T17575] usb 10-1: config 7 has an invalid interface number: 7 but max is 0
[ 1215.966365][T17575] usb 10-1: config 7 has no interface number 0
[ 1215.975453][T17575] usb 10-1: config 7 interface 7 has no altsetting 0
[ 1215.991384][T17575] usb 10-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=f9.7e
[ 1216.006403][T17575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1216.041098][T17575] usb 10-1: Product: syz
[ 1216.046032][T17575] usb 10-1: Manufacturer: syz
[ 1216.053517][T17575] usb 10-1: SerialNumber: syz
[ 1216.136254][T25651] loop6: detected capacity change from 0 to 524287999
[ 1216.368741][T17575] usb 10-1: Expected 3 endpoints, found: 0
[ 1216.415847][T17575] usb 10-1: USB disconnect, device number 64
[ 1219.318131][ T5959] usb 10-1: new high-speed USB device number 65 using dummy_hcd
[ 1219.536999][ T5959] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1219.553323][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.580961][ T5959] usb 10-1: Product: syz
[ 1219.590050][ T5959] usb 10-1: Manufacturer: syz
[ 1219.621483][ T5959] usb 10-1: SerialNumber: syz
[ 1220.616288][T25483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1220.643083][T25483] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1220.666506][T25483] bridge_slave_0: entered allmulticast mode
[ 1220.850378][T25483] bridge_slave_0: entered promiscuous mode
[ 1221.021351][T25483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1221.065361][T25483] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1221.087149][T25483] bridge_slave_1: entered allmulticast mode
[ 1221.217548][T25483] bridge_slave_1: entered promiscuous mode
[ 1221.931766][T25483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1221.949809][T25483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1222.103457][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000080. ret = -EPROTO
[ 1222.168542][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1222.269269][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1222.358852][T25483] team0: Port device team_slave_0 added
[ 1222.386790][ T5959] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1222.418016][T25483] team0: Port device team_slave_1 added
[ 1222.453857][ T5959] usb 10-1: USB disconnect, device number 65
[ 1222.900017][T25483] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1222.955689][T25483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1223.014470][T25483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1223.107642][T25483] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1223.181830][T25483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1223.265234][T25483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1223.537118][T25483] hsr_slave_0: entered promiscuous mode
[ 1223.565743][T25483] hsr_slave_1: entered promiscuous mode
[ 1223.585352][T25483] debugfs: 'hsr0' already exists in 'hsr'
[ 1223.601661][T25483] Cannot create hsr debugfs directory
[ 1223.681009][ T5959] usb 10-1: new high-speed USB device number 66 using dummy_hcd
[ 1223.872442][ T5959] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1223.901836][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.930551][ T5959] usb 10-1: Product: syz
[ 1223.951194][ T5959] usb 10-1: Manufacturer: syz
[ 1223.955973][ T5959] usb 10-1: SerialNumber: syz
[ 1224.435929][T25721] picdev_write: 364 callbacks suppressed
[ 1224.435953][T25721] kvm: pic: non byte write
[ 1224.459818][T25721] kvm: pic: non byte write
[ 1224.468347][T25721] kvm: pic: non byte write
[ 1224.476793][T25721] kvm: pic: non byte write
[ 1224.484446][T25721] kvm: pic: non byte write
[ 1224.490759][T25721] kvm: pic: non byte write
[ 1224.499956][T25721] kvm: pic: non byte write
[ 1224.520320][T25721] kvm: pic: non byte write
[ 1224.550161][T25721] kvm: pic: non byte write
[ 1224.567264][T25721] kvm: pic: non byte write
[ 1224.838895][T25721] kvm: pic: single mode not supported
[ 1224.839046][T25721] kvm: pic: single mode not supported
[ 1225.048160][T25483] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1225.114097][T25483] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1225.149012][T25483] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1225.175821][T25483] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1225.919343][T25754] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0)
[ 1225.920081][T25483] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1226.097173][T25483] 8021q: adding VLAN 0 to HW filter on device team0
[ 1226.165002][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1226.172464][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1226.220758][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -EPROTO
[ 1226.283248][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1226.290650][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1226.308723][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO
[ 1226.348490][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[ 1226.367832][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1226.465625][ T5959] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1226.565179][T25483] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1226.572893][ T5959] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71
[ 1226.586057][T25483] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1226.679306][ T5959] usb 10-1: USB disconnect, device number 66
[ 1226.808041][T25483] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1227.045158][T25483] veth0_vlan: entered promiscuous mode
[ 1227.087721][T25483] veth1_vlan: entered promiscuous mode
[ 1227.298102][T25483] veth0_macvtap: entered promiscuous mode
[ 1227.310654][T25483] veth1_macvtap: entered promiscuous mode
[ 1227.357443][T25483] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1227.378696][T25483] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1227.456967][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.471658][ T5959] usb 10-1: new high-speed USB device number 67 using dummy_hcd
[ 1227.525052][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.606515][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.628502][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1227.677158][ T5959] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1227.714914][ T5959] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1227.791126][ T5959] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1228.105791][ T5959] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1228.194199][ T5959] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1228.241914][ T5959] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1228.259891][ T5959] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1228.295985][ T5959] usb 10-1: Product: syz
[ 1228.321369][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.337243][ T5959] usb 10-1: Manufacturer: syz
[ 1228.363052][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.383911][ T5959] cdc_wdm 10-1:1.0: skipping garbage
[ 1228.394240][ T5959] cdc_wdm 10-1:1.0: skipping garbage
[ 1228.657679][ T5959] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device
[ 1228.684202][ T5959] cdc_wdm 10-1:1.0: Unknown control protocol
[ 1228.703897][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1228.791175][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1228.954059][T25798] binder: 25794:25798 ioctl 4008662c 0 returned -22
[ 1229.292025][T17571] usb 10-1: USB disconnect, device number 67
[ 1229.321199][ T5959] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1229.651857][ T5959] usb 2-1: Using ep0 maxpacket: 16
[ 1229.664283][ T5959] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1229.700939][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1229.746144][ T5959] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1229.843200][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1230.301046][ T5959] usb 2-1: Product: syz
[ 1230.358660][ T5959] usb 2-1: Manufacturer: syz
[ 1230.387417][ T5959] usb 2-1: SerialNumber: syz
[ 1230.407577][ T5959] usb 2-1: config 0 descriptor??
[ 1230.425545][ T5959] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1230.538176][ T5959] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 1231.051126][ T5959] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 1231.073291][ T5959] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 1231.101809][   T44] usb 10-1: new high-speed USB device number 68 using dummy_hcd
[ 1231.301109][   T44] usb 10-1: Using ep0 maxpacket: 32
[ 1231.323920][   T44] usb 10-1: config 0 has an invalid interface number: 96 but max is 0
[ 1231.354499][   T44] usb 10-1: config 0 has no interface number 0
[ 1231.382975][   T44] usb 10-1: New USB device found, idVendor=05d1, idProduct=9006, bcdDevice=48.7b
[ 1231.409521][   T44] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1231.436614][   T44] usb 10-1: Product: syz
[ 1231.451430][   T44] usb 10-1: Manufacturer: syz
[ 1231.469921][   T44] usb 10-1: SerialNumber: syz
[ 1231.508611][   T44] usb 10-1: config 0 descriptor??
[ 1231.536441][   T44] hub 10-1:0.96: bad descriptor, ignoring hub
[ 1231.554087][   T44] hub 10-1:0.96: probe with driver hub failed with error -5
[ 1231.583597][   T44] ftdi_sio 10-1:0.96: FTDI USB Serial Device converter detected
[ 1231.609620][   T44] ftdi_sio ttyUSB0: unknown device type: 0x487b
[ 1231.907768][T17566] usb 10-1: USB disconnect, device number 68
[ 1231.916994][T17566] ftdi_sio 10-1:0.96: device disconnected
[ 1231.921294][T17571] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 1232.092310][T17571] usb 1-1: Using ep0 maxpacket: 8
[ 1232.114900][T17571] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1232.133306][T17571] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 1232.145387][T17571] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[ 1232.157771][ T5959] em28xx 2-1:0.0: AC97 vendor ID = 0x00fc00fe
[ 1232.176443][T17571] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[ 1232.194461][T17571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1232.257194][T17571] usb 1-1: Product: syz
[ 1232.281400][T17571] usb 1-1: Manufacturer: syz
[ 1232.293531][T17571] usb 1-1: SerialNumber: syz
[ 1232.359152][ T5959] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[ 1232.368492][T25837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5815'.
[ 1232.411139][ T5959] em28xx 2-1:0.0: couldn't setup AC97 register 2
[ 1232.472350][ T5959] em28xx 2-1:0.0: couldn't setup AC97 register 4
[ 1232.513513][ T5959] em28xx 2-1:0.0: couldn't setup AC97 register 6
[ 1232.602302][ T5959] em28xx 2-1:0.0: couldn't setup AC97 register 54
[ 1232.638404][T25840] bond1: (slave geneve2): Enslaving as an active interface with an up link
[ 1232.667580][T17571] usb 1-1: USB disconnect, device number 69
[ 1232.681376][ T5959] em28xx 2-1:0.0: couldn't setup AC97 register 56
[ 1232.709978][   T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1232.752023][ T5959] usb 2-1: USB disconnect, device number 49
[ 1232.829165][T14227] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1233.231653][T10692] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1233.251648][T10692] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1233.728004][T25850] netlink: 'syz.3.5817': attribute type 10 has an invalid length.
[ 1233.797980][T25850] 8021q: adding VLAN 0 to HW filter on device team0
[ 1233.867048][T25850] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1235.687963][T25869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5823'.
[ 1238.041334][T17571] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1238.200942][T17571] usb 6-1: Using ep0 maxpacket: 16
[ 1238.208392][T17571] usb 6-1: config 1 has an invalid interface number: 105 but max is 0
[ 1238.251239][T17571] usb 6-1: config 1 has no interface number 0
[ 1238.262963][   T30] audit: type=1326 audit(1757626502.827:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25898 comm="syz.3.5832" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7fc00000
[ 1238.269700][T17571] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1238.371641][T17571] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1239.231545][T17571] usb 6-1: config 1 interface 105 has no altsetting 0
[ 1239.249948][T17571] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1239.266474][T17571] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1239.281932][T17571] usb 6-1: Product: syz
[ 1239.286966][T17571] usb 6-1: Manufacturer: syz
[ 1239.301609][T17571] usb 6-1: SerialNumber: syz
[ 1239.318983][T25903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1239.395200][T25903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1239.828561][T25903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1239.836252][T25903] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1239.941082][ T5952] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[ 1240.265194][ T5952] usb 1-1: config 0 has an invalid interface number: 113 but max is 0
[ 1240.285049][ T5952] usb 1-1: config 0 has no interface number 0
[ 1240.355707][ T5952] usb 1-1: config 0 interface 113 has no altsetting 0
[ 1240.406527][ T5952] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[ 1240.444096][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1240.469298][   T30] audit: type=1326 audit(1757626505.067:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.497229][T17571] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1240.531428][ T5952] usb 1-1: Product: syz
[ 1240.535820][ T5952] usb 1-1: Manufacturer: syz
[ 1240.548843][T17571] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[ 1240.567942][ T5952] usb 1-1: SerialNumber: syz
[ 1240.591101][   T30] audit: type=1326 audit(1757626505.067:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.593090][T17571] aqc111 6-1:1.105 eth17: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:d0:6b:f0:f2:67
[ 1240.629824][ T5952] usb 1-1: config 0 descriptor??
[ 1240.676649][   T30] audit: type=1326 audit(1757626505.067:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.688024][ T5952] pn533_usb 1-1:0.113: NFC: Could not find bulk-in or bulk-out endpoint
[ 1240.728540][   T30] audit: type=1326 audit(1757626505.067:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.761295][   T30] audit: type=1326 audit(1757626505.067:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.871800][   T30] audit: type=1326 audit(1757626505.067:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.942050][   T30] audit: type=1326 audit(1757626505.067:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1240.967788][T17570] usb 1-1: USB disconnect, device number 70
[ 1240.977681][   T30] audit: type=1326 audit(1757626505.067:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1241.022896][T17571] usb 6-1: USB disconnect, device number 51
[ 1241.045203][T17571] aqc111 6-1:1.105 eth17: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[ 1241.088458][   T30] audit: type=1326 audit(1757626505.067:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25902 comm="syz.5.5834" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702e539 code=0x7ffc0000
[ 1241.188446][T17571] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1241.218239][T17571] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[ 1241.242907][T17571] aqc111 6-1:1.105 eth17 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[ 1241.739666][T25941] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1243.276036][ T5945] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 1243.456909][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1243.468947][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1243.479595][ T5945] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[ 1243.502366][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1243.544914][T25963] netlink: 'syz.9.5848': attribute type 10 has an invalid length.
[ 1243.554624][ T5945] usb 4-1: config 0 descriptor??
[ 1243.595932][T25963] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[ 1243.774355][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.814349][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1243.923193][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1244.040353][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1244.189198][ T5945] hid-steam 0003:28DE:1142.0058: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[ 1244.315990][ T5945] hid-steam 0003:28DE:1142.0058: Steam wireless receiver connected
[ 1244.405091][ T5945] hid-steam 0003:28DE:1142.0058: No HID_FEATURE_REPORT submitted -  nothing to read
[ 1244.472423][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1244.532617][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1244.565447][T25956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1244.572472][ T5945] hid-steam 0003:28DE:1142.0059: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0
[ 1244.612722][T25956] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1244.786260][T25979] netlink: 'syz.0.5852': attribute type 1 has an invalid length.
[ 1244.933962][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1244.933980][   T30] audit: type=1800 audit(1757626509.537:385): pid=25982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5850" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1245.132898][T25979] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1245.421597][T25985] vlan2: entered allmulticast mode
[ 1245.615640][T25985] macvtap0: entered allmulticast mode
[ 1245.942603][T25985] bond5: (slave vlan2): Opening slave failed
[ 1246.325573][T17571] usb 4-1: USB disconnect, device number 34
[ 1246.447761][T17571] hid-steam 0003:28DE:1142.0058: Steam wireless receiver disconnected
[ 1246.815020][T25998] binder: 25997:25998 ioctl c0306201 800003c0 returned -14
[ 1251.383489][ T5959] usb 10-1: new high-speed USB device number 69 using dummy_hcd
[ 1251.778128][ T5959] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1251.839413][ T5959] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1251.885623][ T5959] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1251.941989][ T5959] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1252.012433][ T5959] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1252.058150][ T5959] usb 10-1: config 0 descriptor??
[ 1252.520298][ T5959] plantronics 0003:047F:FFFF.005A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0
[ 1252.978870][T26074] veth1_to_bond: entered allmulticast mode
[ 1253.016888][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5872'.
[ 1253.209611][T26074] bond0: (slave bond_slave_1): Releasing backup interface
[ 1253.289090][T26074] veth1_to_bond (unregistering): left allmulticast mode
[ 1254.745433][ T5959] usb 10-1: USB disconnect, device number 69
[ 1255.850216][T26120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5883'.
[ 1256.231067][T19275] Bluetooth: hci2: command 0x0406 tx timeout
[ 1257.030998][ T5945] usb 10-1: new high-speed USB device number 70 using dummy_hcd
[ 1257.195263][ T5945] usb 10-1: Using ep0 maxpacket: 8
[ 1257.235039][ T5945] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1257.253836][ T5945] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1257.502690][ T5945] usb 10-1: config 0 descriptor??
[ 1259.611990][ T5945] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[ 1259.640091][ T5945] asix 10-1:0.0: probe with driver asix failed with error -71
[ 1259.678589][ T5945] usb 10-1: USB disconnect, device number 70
[ 1260.892350][T17575] usb 10-1: new high-speed USB device number 71 using dummy_hcd
[ 1261.054421][T17575] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1261.084911][T17575] usb 10-1: config 7 has 1 interface, different from the descriptor's value: 2
[ 1261.127673][T17575] usb 10-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 0.84
[ 1261.169227][T17575] usb 10-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[ 1261.212094][T17575] usb 10-1: Product: syz
[ 1261.217246][T17575] usb 10-1: SerialNumber: syz
[ 1261.241441][T17571] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[ 1261.246003][T17575] usb 10-1: bad CDC descriptors
[ 1261.277990][T17575] option 10-1:7.0: GSM modem (1-port) converter detected
[ 1261.432893][T17571] usb 4-1: Using ep0 maxpacket: 32
[ 1261.465774][T17571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1261.496266][T17571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1261.579567][T17571] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1261.628177][T17571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1261.668299][T17571] usb 4-1: config 0 descriptor??
[ 1261.749876][T17571] hub 4-1:0.0: USB hub found
[ 1261.786126][T17574] usb 10-1: USB disconnect, device number 71
[ 1261.827939][T17574] option 10-1:7.0: device disconnected
[ 1261.941976][T17571] hub 4-1:0.0: 1 port detected
[ 1262.098197][   T30] audit: type=1326 audit(1757626526.687:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26214 comm="syz.1.5903" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf709e539 code=0x0
[ 1262.200619][T26221] binder: 26214:26221 ioctl c0306201 80000000 returned -14
[ 1262.597609][T17571] hub 4-1:0.0: activate --> -90
[ 1263.042883][ T5945] usb 4-1: USB disconnect, device number 35
[ 1263.401102][T17571] usb 4-1-port1: config error
[ 1263.467282][T17575] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[ 1263.769536][T17575] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1263.811385][T17575] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1263.942881][T17575] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1263.972244][T17575] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22
[ 1263.990744][T17575] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1264.006192][T17575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1264.038349][T17575] usb 1-1: SerialNumber: syz
[ 1264.433904][T17575] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[ 1264.450558][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5917'.
[ 1264.459947][T17575] cdc_acm 1-1:1.0: This needs exactly 3 endpoints
[ 1264.507824][T17575] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22
[ 1264.610081][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5917'.
[ 1265.079221][ T5945] usb 1-1: USB disconnect, device number 71
[ 1265.228544][T26265] netlink: 16 bytes leftover after parsing attributes in process `syz.9.5920'.
[ 1267.611981][T26308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5931'.
[ 1269.600668][T26326] syzkaller0: entered promiscuous mode
[ 1269.634051][T26326] syzkaller0: entered allmulticast mode
[ 1269.938212][ T5959] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1270.264939][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1270.291538][ T5959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1270.331043][ T5959] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[ 1270.378108][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1270.420281][ T5959] usb 2-1: config 0 descriptor??
[ 1270.824840][T26334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5939'.
[ 1275.556820][ T5959] usbhid 2-1:0.0: can't add hid device: -32
[ 1275.567849][ T5959] usbhid 2-1:0.0: probe with driver usbhid failed with error -32
[ 1277.611684][ T5959] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1277.761701][ T5959] usb 6-1: Using ep0 maxpacket: 16
[ 1277.775567][ T5959] usb 6-1: config 3 has an invalid interface number: 155 but max is 0
[ 1277.785055][ T5959] usb 6-1: config 3 has an invalid interface association descriptor of length 3, skipping
[ 1277.796361][ T5959] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.806953][ T5959] usb 6-1: config 3 has no interface number 0
[ 1277.822068][ T5959] usb 6-1: config 3 interface 155 has no altsetting 0
[ 1277.832357][ T5959] usb 6-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[ 1277.841875][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.849980][ T5959] usb 6-1: Product: syz
[ 1277.866405][ T5959] usb 6-1: Manufacturer: syz
[ 1277.873745][ T5959] usb 6-1: SerialNumber: syz
[ 1278.125824][ T5959] uvcvideo 6-1:3.155: probe with driver uvcvideo failed with error -22
[ 1278.165689][ T5959] usb 6-1: USB disconnect, device number 52
[ 1279.015862][T26334] bridge0: entered promiscuous mode
[ 1279.024923][T26334] bridge0: left promiscuous mode
[ 1279.101532][T26365] vlan2: entered allmulticast mode
[ 1279.121238][T26365] bond0: entered allmulticast mode
[ 1279.130217][T26365] bond_slave_0: entered allmulticast mode
[ 1279.141353][T26365] bond_slave_1: entered allmulticast mode
[ 1279.322891][ T5959] usb 2-1: USB disconnect, device number 50
[ 1282.675265][T26411] syz_tun: entered allmulticast mode
[ 1282.784404][T26411] dvmrp6: entered allmulticast mode
[ 1282.815323][T26410] syz_tun: left allmulticast mode
[ 1282.823266][T26410] dvmrp6: left allmulticast mode
[ 1284.700695][T26435] binder_alloc: 26434: pid 26434 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1285.234260][   T30] audit: type=1800 audit(1757626549.827:387): pid=26444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5971" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1288.780960][T17566] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1289.011147][T17566] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1289.070977][T17566] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1289.134612][T17566] usb 2-1: Product: syz
[ 1289.139086][T17566] usb 2-1: Manufacturer: syz
[ 1289.159926][T17566] usb 2-1: SerialNumber: syz
[ 1290.194884][T26478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1291.383541][T17566] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[ 1291.443280][T17566] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE
[ 1292.287121][T17566] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO
[ 1292.341540][T17566] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1292.365334][T17566] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1292.428852][T17566] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[ 1292.599861][T17566] usb 2-1: USB disconnect, device number 51
[ 1292.652776][T26496] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1292.781607][T26495] kvm: pic: level sensitive irq not supported
[ 1292.781745][T26495] kvm: pic: non byte read
[ 1292.881547][T26495] kvm: pic: level sensitive irq not supported
[ 1292.881710][T26495] kvm: pic: non byte read
[ 1292.947730][T26495] kvm: pic: level sensitive irq not supported
[ 1292.948904][T26495] kvm: pic: non byte read
[ 1293.010159][T26499] syzkaller0: entered promiscuous mode
[ 1293.081359][T26499] syzkaller0: entered allmulticast mode
[ 1293.093564][T26495] kvm: pic: level sensitive irq not supported
[ 1293.093884][T26495] kvm: pic: non byte read
[ 1293.826584][T26511] binder_alloc: 26510: binder_alloc_buf size 1024 failed, no address space
[ 1293.842060][T26511] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0)
[ 1294.313732][T26523] binder: BINDER_SET_CONTEXT_MGR already set
[ 1294.355943][T26523] binder: 26522:26523 ioctl 4018620d 800002c0 returned -16
[ 1297.270737][   T30] audit: type=1800 audit(1757626561.857:388): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6001" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1298.010774][ T5959] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1298.324617][ T5959] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1298.340921][ T5959] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1298.373375][ T5959] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1298.491310][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1298.553016][T26568] binder: 26567:26568 ioctl c0306201 80000440 returned -14
[ 1298.630343][ T5959] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1298.865010][ T5959] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1301.401570][T17566] usb 2-1: USB disconnect, device number 52
[ 1301.469225][T26586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6011'.
[ 1305.358132][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1305.364836][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1307.055110][T26633] cgroup: fork rejected by pids controller in /syz1
[ 1308.829310][T26804] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[ 1308.836162][T26804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1308.849555][T26804] vhci_hcd vhci_hcd.0: Device attached
[ 1308.921430][T26812] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(7)
[ 1308.928117][T26812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1308.947918][T26812] vhci_hcd vhci_hcd.0: Device attached
[ 1309.107105][T26804] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(10)
[ 1309.114123][T26804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1309.122837][T17571] vhci_hcd: vhci_device speed not set
[ 1309.201041][T17571] usb 33-1: new full-speed USB device number 3 using vhci_hcd
[ 1309.285915][T26812] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9)
[ 1309.292631][T26812] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1309.323540][T26812] vhci_hcd vhci_hcd.0: Device attached
[ 1309.402251][T26804] vhci_hcd vhci_hcd.0: Device attached
[ 1309.803296][T26828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6034'.
[ 1309.897311][T26817] vhci_hcd: connection closed
[ 1309.899837][T26813] vhci_hcd: connection closed
[ 1309.899855][T26815] vhci_hcd: connection closed
[ 1309.911722][T26810] vhci_hcd: connection reset by peer
[ 1309.922343][ T3029] vhci_hcd: stop threads
[ 1309.928612][ T3029] vhci_hcd: release socket
[ 1309.977644][ T3029] vhci_hcd: disconnect device
[ 1310.021767][ T3029] vhci_hcd: stop threads
[ 1310.040495][ T3029] vhci_hcd: release socket
[ 1310.049328][ T3029] vhci_hcd: disconnect device
[ 1310.068030][ T3029] vhci_hcd: stop threads
[ 1310.218587][ T3029] vhci_hcd: release socket
[ 1310.252140][ T3029] vhci_hcd: disconnect device
[ 1310.263165][ T3029] vhci_hcd: stop threads
[ 1310.284429][ T3029] vhci_hcd: release socket
[ 1310.295104][ T3029] vhci_hcd: disconnect device
[ 1310.480319][T26834] syzkaller0: entered promiscuous mode
[ 1310.487989][T26834] syzkaller0: entered allmulticast mode
[ 1312.586321][T26857] syz.3.6040 (26857): drop_caches: 1
[ 1313.088096][T26859] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6041'.
[ 1313.156447][T26857] syz.3.6040 (26857): drop_caches: 1
[ 1314.305489][T17571] vhci_hcd: vhci_device speed not set
[ 1314.434085][ T5945] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1314.644155][ T5945] usb 4-1: Using ep0 maxpacket: 8
[ 1314.664393][ T5945] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1314.673874][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1314.705412][ T5945] usb 4-1: config 0 descriptor??
[ 1314.951197][ T5945] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1317.253539][ T5945] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1317.265297][ T5945] asix 4-1:0.0: probe with driver asix failed with error -71
[ 1317.302556][ T5945] usb 4-1: USB disconnect, device number 36
[ 1318.571682][ T5945] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1318.738522][ T5945] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1318.757368][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.770380][ T5945] usb 4-1: config 0 descriptor??
[ 1318.793532][ T5945] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1320.306035][T26909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6056'.
[ 1321.748129][ T5945] usb 4-1: USB disconnect, device number 37
[ 1322.807827][T19275] Bluetooth: hci1: command 0x0406 tx timeout
[ 1324.035494][T26932] syzkaller0: entered promiscuous mode
[ 1324.086970][T26932] syzkaller0: entered allmulticast mode
[ 1327.321006][T17574] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1327.493646][T17574] usb 2-1: Using ep0 maxpacket: 16
[ 1327.514527][T17574] usb 2-1: config 11 has an invalid interface number: 202 but max is 0
[ 1327.537528][T17574] usb 2-1: config 11 has no interface number 0
[ 1327.556317][T17574] usb 2-1: config 11 interface 202 has no altsetting 0
[ 1327.611910][T17574] usb 2-1: New USB device found, idVendor=110a, idProduct=1251, bcdDevice=4d.10
[ 1327.641326][T17574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1327.654036][T17574] usb 2-1: Product: syz
[ 1327.658386][T17574] usb 2-1: Manufacturer: syz
[ 1327.668348][T17574] usb 2-1: SerialNumber: syz
[ 1327.679159][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1327.933052][T17574] mxuport 2-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1327.969120][T17574] mxuport 2-1:11.202: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[ 1328.000422][T17574] mxuport 2-1:11.202: probe with driver mxuport failed with error -71
[ 1328.050272][T17574] usb 2-1: USB disconnect, device number 53
[ 1330.231667][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1330.318675][T26982] syz.1.6075: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1330.340175][T26982] CPU: 0 UID: 0 PID: 26982 Comm: syz.1.6075 Not tainted syzkaller #0 PREEMPT(full) 
[ 1330.340210][T26982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1330.340226][T26982] Call Trace:
[ 1330.340236][T26982]  <TASK>
[ 1330.340246][T26982]  dump_stack_lvl+0x189/0x250
[ 1330.340282][T26982]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1330.340311][T26982]  ? __pfx__printk+0x10/0x10
[ 1330.340344][T26982]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1330.340373][T26982]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1330.340404][T26982]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1330.340433][T26982]  warn_alloc+0x214/0x310
[ 1330.340475][T26982]  ? __pfx_warn_alloc+0x10/0x10
[ 1330.340519][T26982]  ? __get_vm_area_node+0x28f/0x300
[ 1330.340551][T26982]  ? hash_netport4_resize+0x235/0x1b60
[ 1330.340583][T26982]  __vmalloc_node_range_noprof+0x67e/0x12f0
[ 1330.340650][T26982]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1330.340696][T26982]  ? rcu_is_watching+0x15/0xb0
[ 1330.340723][T26982]  ? hash_netport4_resize+0x235/0x1b60
[ 1330.340753][T26982]  ? hash_netport4_resize+0x235/0x1b60
[ 1330.340781][T26982]  __kvmalloc_node_noprof+0x3b8/0x5f0
[ 1330.340819][T26982]  ? hash_netport4_resize+0x235/0x1b60
[ 1330.340864][T26982]  hash_netport4_resize+0x235/0x1b60
[ 1330.340892][T26982]  ? hash_netport4_uadt+0xc97/0xf30
[ 1330.340927][T26982]  ? __pfx_hash_netport4_add+0x10/0x10
[ 1330.340955][T26982]  ? __pfx_hash_netport4_uadt+0x10/0x10
[ 1330.340995][T26982]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1330.341032][T26982]  call_ad+0x44e/0xb00
[ 1330.341077][T26982]  ? __pfx_call_ad+0x10/0x10
[ 1330.341125][T26982]  ? __nla_parse+0x40/0x60
[ 1330.341155][T26982]  ip_set_ad+0x791/0x930
[ 1330.341200][T26982]  ? __pfx_ip_set_ad+0x10/0x10
[ 1330.341280][T26982]  nfnetlink_rcv_msg+0xb4a/0x1130
[ 1330.341317][T26982]  ? nfnetlink_rcv_msg+0x20d/0x1130
[ 1330.341381][T26982]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1330.341414][T26982]  ? kasan_save_free_info+0x46/0x50
[ 1330.341494][T26982]  netlink_rcv_skb+0x205/0x470
[ 1330.341521][T26982]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1330.341557][T26982]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1330.341596][T26982]  ? bpf_lsm_capable+0x9/0x20
[ 1330.341627][T26982]  ? security_capable+0x7e/0x2e0
[ 1330.341672][T26982]  nfnetlink_rcv+0x26a/0x2520
[ 1330.341711][T26982]  ? __dev_queue_xmit+0x1d79/0x3b50
[ 1330.341755][T26982]  ? __dev_queue_xmit+0x27b/0x3b50
[ 1330.341801][T26982]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1330.341836][T26982]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1330.341897][T26982]  ? ref_tracker_free+0x63a/0x7d0
[ 1330.341921][T26982]  ? __asan_memcpy+0x40/0x70
[ 1330.341947][T26982]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1330.341989][T26982]  ? skb_clone+0x246/0x3a0
[ 1330.342024][T26982]  ? __netlink_deliver_tap+0x807/0x850
[ 1330.342048][T26982]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1330.342082][T26982]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1330.342116][T26982]  netlink_unicast+0x82c/0x9e0
[ 1330.342166][T26982]  ? __pfx_netlink_unicast+0x10/0x10
[ 1330.342206][T26982]  ? netlink_sendmsg+0x642/0xb30
[ 1330.342229][T26982]  ? skb_put+0x11b/0x210
[ 1330.342260][T26982]  netlink_sendmsg+0x805/0xb30
[ 1330.342297][T26982]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1330.342327][T26982]  ? __import_iovec+0x5d4/0x7f0
[ 1330.342355][T26982]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1330.342382][T26982]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1330.342407][T26982]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1330.342434][T26982]  __sock_sendmsg+0x21c/0x270
[ 1330.342475][T26982]  ____sys_sendmsg+0x505/0x830
[ 1330.342513][T26982]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1330.342563][T26982]  ___sys_sendmsg+0x21f/0x2a0
[ 1330.342597][T26982]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1330.342628][T26982]  ? futex_private_hash_put+0x4b/0x280
[ 1330.342653][T26982]  ? futex_private_hash_put+0x245/0x280
[ 1330.342717][T26982]  ? __fget_files+0x2a/0x420
[ 1330.342737][T26982]  ? __fget_files+0x3a0/0x420
[ 1330.342770][T26982]  __sys_sendmsg+0x164/0x220
[ 1330.342802][T26982]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1330.342851][T26982]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1330.342887][T26982]  __do_fast_syscall_32+0xb6/0x2b0
[ 1330.342915][T26982]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1330.342943][T26982]  do_fast_syscall_32+0x34/0x80
[ 1330.342970][T26982]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1330.343000][T26982] RIP: 0023:0xf709e539
[ 1330.343022][T26982] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1330.343044][T26982] RSP: 002b:00000000f548e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1330.343070][T26982] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0
[ 1330.343086][T26982] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1330.343101][T26982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1330.343114][T26982] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1330.343129][T26982] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1330.343163][T26982]  </TASK>
[ 1330.852998][T26982] Mem-Info:
[ 1330.856180][T26982] active_anon:8243 inactive_anon:0 isolated_anon:0
[ 1330.856180][T26982]  active_file:3142 inactive_file:3525 isolated_file:0
[ 1330.856180][T26982]  unevictable:768 dirty:53 writeback:0
[ 1330.856180][T26982]  slab_reclaimable:6673 slab_unreclaimable:111114
[ 1330.856180][T26982]  mapped:42721 shmem:1597 pagetables:1786
[ 1330.856180][T26982]  sec_pagetables:0 bounce:0
[ 1330.856180][T26982]  kernel_misc_reclaimable:0
[ 1330.856180][T26982]  free:1317864 free_pcp:22465 free_cma:0
[ 1330.917933][T26982] Node 0 active_anon:32972kB inactive_anon:0kB active_file:12524kB inactive_file:13968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172840kB dirty:212kB writeback:0kB shmem:4852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13440kB pagetables:6904kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1330.957600][T26982] Node 1 active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:44kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1330.993195][T26982] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1331.023914][T26982] lowmem_reserve[]: 0 2497 2499 2499 2499
[ 1331.030135][T26982] Node 0 DMA32 free:1390516kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32560kB inactive_anon:0kB active_file:12484kB inactive_file:12744kB unevictable:1536kB writepending:280kB present:3129332kB managed:2557416kB mlocked:0kB bounce:0kB free_pcp:39920kB local_pcp:20976kB free_cma:0kB
[ 1331.066972][T26982] lowmem_reserve[]: 0 0 1 1 1
[ 1331.072074][T26982] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:352kB inactive_anon:0kB active_file:40kB inactive_file:1224kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB
[ 1331.106963][T26982] lowmem_reserve[]: 0 0 0 0 0
[ 1331.112439][T26982] Node 1 Normal free:3865680kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:44kB inactive_file:132kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:50012kB local_pcp:24936kB free_cma:0kB
[ 1331.146876][T26982] lowmem_reserve[]: 0 0 0 0 0
[ 1331.151805][T26982] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1331.164748][T26982] Node 0 DMA32: 3323*4kB (UME) 1399*8kB (UME) 955*16kB (UME) 741*32kB (UME) 373*64kB (ME) 245*128kB (UME) 154*256kB (UME) 55*512kB (UME) 16*1024kB (UME) 4*2048kB (UM) 288*4096kB (UM) = 1390516kB
[ 1331.187196][T26982] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB
[ 1331.199872][T26982] Node 1 Normal: 232*4kB (UME) 22*8kB (UME) 12*16kB (UE) 88*32kB (UE) 75*64kB (UME) 25*128kB (UME) 9*256kB (UME) 6*512kB (UM) 4*1024kB (UM) 5*2048kB (UM) 936*4096kB (UM) = 3865680kB
[ 1331.222901][T26982] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1331.234661][T26982] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[ 1331.244336][T26982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1331.256461][T26982] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1331.265958][T26982] 8261 total pagecache pages
[ 1331.270588][T26982] 1 pages in swap cache
[ 1331.275039][T26982] Free swap  = 124992kB
[ 1331.279312][T26982] Total swap = 124996kB
[ 1331.283947][T26982] 2097051 pages RAM
[ 1331.287952][T26982] 0 pages HighMem/MovableOnly
[ 1331.293032][T26982] 425671 pages reserved
[ 1331.297372][T26982] 0 pages cma reserved
[ 1331.805853][ T5945] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1331.995743][ T5945] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1332.007828][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1332.019843][ T5945] usb 2-1: Product: syz
[ 1332.024344][ T5945] usb 2-1: Manufacturer: syz
[ 1332.029275][ T5945] usb 2-1: SerialNumber: syz
[ 1332.051267][ T5945] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1332.299722][ T5959] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1332.961340][T17575] usb 2-1: USB disconnect, device number 54
[ 1333.601766][ T5959] usb 2-1: Service connection timeout for: 256
[ 1333.609693][ T5959] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 1333.639514][ T5959] ath9k_htc: Failed to initialize the device
[ 1333.648250][T17575] usb 2-1: ath9k_htc: USB layer deinitialized
[ 1336.946247][T27038] bridge0: port 3(vxlan0) entered blocking state
[ 1336.969413][T27038] bridge0: port 3(vxlan0) entered disabled state
[ 1337.075976][T27038] vxlan0: entered allmulticast mode
[ 1337.264979][T27038] vxlan0: entered promiscuous mode
[ 1339.420908][T17574] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1339.870940][T17574] usb 6-1: Using ep0 maxpacket: 16
[ 1339.967939][T17574] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[ 1339.977727][T17574] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.020563][T17574] usb 6-1: Product: syz
[ 1340.029941][T17574] usb 6-1: Manufacturer: syz
[ 1340.037578][T17574] usb 6-1: SerialNumber: syz
[ 1340.094615][T17574] usb 6-1: config 0 descriptor??
[ 1340.128515][T17574] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[ 1340.152067][T17574] usb 6-1: Detected FT232H
[ 1340.416986][T17574] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[ 1340.844623][T17574] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[ 1341.145224][T17575] usb 6-1: USB disconnect, device number 53
[ 1341.192443][T17575] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[ 1341.247785][T17575] ftdi_sio 6-1:0.0: device disconnected
[ 1341.711003][ T5959] usb 1-1: new high-speed USB device number 72 using dummy_hcd
[ 1343.066895][T27103] loop6: detected capacity change from 0 to 63
[ 1343.129945][T27103] buffer_io_error: 6 callbacks suppressed
[ 1343.129970][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.144103][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.153048][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.162635][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.172579][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.194853][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.206388][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.217124][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.233177][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1343.235488][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1343.258463][T27103] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1344.009035][ T5959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.050362][ T5959] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1344.122323][ T5959] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1344.152329][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.557121][ T5959] usb 1-1: config 0 descriptor??
[ 1344.601507][T17571] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1344.657096][ T5959] usb 1-1: can't set config #0, error -71
[ 1344.681482][ T5959] usb 1-1: USB disconnect, device number 72
[ 1344.799153][T17571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1344.813450][T17571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1344.846353][T17571] usb 2-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[ 1344.886894][T17571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1344.926250][T17571] usb 2-1: config 0 descriptor??
[ 1345.577844][T17575] usb 10-1: new high-speed USB device number 72 using dummy_hcd
[ 1345.714608][T27121] syz.0.6113 (27121): drop_caches: 1
[ 1345.721838][T17571] razer 0003:1532:010E.005B: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.1-1/input0
[ 1345.811212][T17575] usb 10-1: Using ep0 maxpacket: 8
[ 1345.945035][T17575] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1345.961022][T17575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.021927][T27121] syz.0.6113 (27121): drop_caches: 1
[ 1346.042632][T17571] usb 2-1: USB disconnect, device number 55
[ 1346.058719][T17575] usb 10-1: Product: syz
[ 1346.080015][T17575] usb 10-1: Manufacturer: syz
[ 1346.121932][T17575] usb 10-1: SerialNumber: syz
[ 1346.210645][T17575] usb 10-1: config 0 descriptor??
[ 1346.445532][T27122] fido_id[27122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[ 1346.489758][T17575] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1346.968994][   T30] audit: type=1804 audit(1757626611.527:389): pid=27131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6117" name="bus" dev="ramfs" ino=141609 res=1 errno=0
[ 1347.135055][   T30] audit: type=1804 audit(1757626611.527:390): pid=27131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6117" name="bus" dev="ramfs" ino=141609 res=1 errno=0
[ 1347.581112][T17571] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1347.734773][T17571] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1347.770160][T17571] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1347.843492][T17571] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1347.863127][T17571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.899278][T27135] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1347.993513][T17571] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1348.134899][T17575] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[ 1348.165885][T17575] usb 10-1: USB disconnect, device number 72
[ 1348.367046][T17571] usb 6-1: USB disconnect, device number 54
[ 1351.024728][T27176] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[ 1355.526114][   T30] audit: type=1804 audit(1757626620.107:391): pid=27211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6138" name="/newroot/315/file1" dev="fuse" ino=1 res=1 errno=0
[ 1356.825961][T27232] binder_alloc: 27231: pid 27231 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1364.610944][ T5945] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[ 1364.815991][ T5945] usb 6-1: Using ep0 maxpacket: 8
[ 1364.832326][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1364.855406][ T5945] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[ 1364.885417][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1364.927751][ T5945] usb 6-1: Product: syz
[ 1364.940960][ T5945] usb 6-1: Manufacturer: syz
[ 1364.955116][ T5945] usb 6-1: SerialNumber: syz
[ 1364.972602][ T5945] usb 6-1: config 0 descriptor??
[ 1365.194672][ T5945] usb 6-1: USB disconnect, device number 55
[ 1365.304361][T25117] udevd[25117]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1366.817772][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1366.831156][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1367.080752][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6181'.
[ 1367.128620][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6181'.
[ 1367.193466][T27359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6181'.
[ 1367.992726][ T5959] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[ 1368.820950][T17571] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1369.216117][T17571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1369.232371][T17571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1369.242323][T17571] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1369.317635][T17571] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1369.378263][T17571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1369.522336][T17571] usb 4-1: config 0 descriptor??
[ 1369.973977][T17571] plantronics 0003:047F:FFFF.005C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[ 1370.451190][T27401] loop6: detected capacity change from 0 to 63
[ 1370.519320][T17571] usb 4-1: USB disconnect, device number 38
[ 1370.554125][T27394] fido_id[27394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[ 1370.565343][T25086] buffer_io_error: 3798 callbacks suppressed
[ 1370.565371][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1371.139490][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1371.176657][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1371.378135][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1371.437283][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1375.991103][T27453] binder: BINDER_SET_CONTEXT_MGR already set
[ 1376.018377][T27453] binder: 27451:27453 ioctl 4018620d 80000040 returned -16
[ 1376.071523][T27453] binder: 27451:27453 ioctl c0306201 80001440 returned -11
[ 1376.492962][T17566] usb 10-1: new high-speed USB device number 73 using dummy_hcd
[ 1376.651376][T17566] usb 10-1: Using ep0 maxpacket: 16
[ 1376.672870][T17566] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1376.698669][T17566] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1376.765421][T17566] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1376.827619][T17566] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1376.898234][T17566] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1376.912897][T17566] usb 10-1: Product: syz
[ 1376.923450][T17566] usb 10-1: Manufacturer: syz
[ 1376.929464][T17566] usb 10-1: SerialNumber: syz
[ 1377.681303][T17566] usb 10-1: 0:2 : does not exist
[ 1378.717512][T17566] usb 10-1: 1:0: failed to get current value for ch 0 (-22)
[ 1378.742409][T17566] usb 10-1: USB disconnect, device number 73
[ 1378.989362][   T30] audit: type=1326 audit(1757626643.587:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1378.995436][T25086] udevd[25086]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1379.031869][   T30] audit: type=1326 audit(1757626643.587:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1379.035366][T27474] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6216'.
[ 1379.115661][   T30] audit: type=1326 audit(1757626643.587:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1379.124247][T27479] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6216'.
[ 1379.312461][   T30] audit: type=1326 audit(1757626643.587:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1379.344749][   T30] audit: type=1326 audit(1757626643.587:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1379.450147][   T30] audit: type=1326 audit(1757626643.587:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1380.556590][   T30] audit: type=1326 audit(1757626643.587:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1380.570929][T17575] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[ 1380.693346][T27474] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6216'.
[ 1380.737956][   T30] audit: type=1326 audit(1757626643.587:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1381.050858][   T30] audit: type=1326 audit(1757626643.587:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1381.150914][T17575] usb 6-1: Using ep0 maxpacket: 32
[ 1381.171657][T17575] usb 6-1: config 0 has an invalid interface number: 12 but max is 0
[ 1381.260947][T17575] usb 6-1: config 0 has no interface number 0
[ 1381.348552][T17575] usb 6-1: config 0 interface 12 has no altsetting 0
[ 1381.446324][T17575] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1381.495178][T17575] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1381.520362][T17575] usb 6-1: Product: syz
[ 1381.537435][T17575] usb 6-1: Manufacturer: syz
[ 1381.549725][T17575] usb 6-1: SerialNumber: syz
[ 1381.571691][T17575] usb 6-1: config 0 descriptor??
[ 1381.584927][   T30] audit: type=1326 audit(1757626643.587:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27473 comm="syz.0.6216" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e539 code=0x7ffc0000
[ 1382.446288][T27502] loop6: detected capacity change from 0 to 63
[ 1382.465692][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.518478][T27502] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.570548][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.588166][T27502] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.951708][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1382.991342][T27502] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1383.039836][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1383.057873][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1383.128829][T27502] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1383.300514][T27502] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1384.012367][T17566] usb 10-1: new high-speed USB device number 74 using dummy_hcd
[ 1384.107191][T17575] f81534 6-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 1384.120926][T17575] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71
[ 1384.181209][T17575] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1384.217437][T27513] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6226'.
[ 1384.235407][T17575] f81534 6-1:0.12: probe with driver f81534 failed with error -71
[ 1384.264920][T27511] veth1_to_bond: entered allmulticast mode
[ 1384.280931][T17566] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.328321][T17566] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1384.338145][T27511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6224'.
[ 1384.353541][T17575] usb 6-1: USB disconnect, device number 57
[ 1384.385611][T17566] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.418484][T17566] usb 10-1: config 0 descriptor??
[ 1384.456892][T17566] pwc: Askey VC010 type 2 USB webcam detected.
[ 1384.508979][T27511] bond0: (slave bond_slave_1): Releasing backup interface
[ 1384.897448][T17566] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1384.940373][T17566] pwc: recv_control_msg error -32 req 02 val 2700
[ 1384.983335][T17566] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1385.024256][T17566] pwc: recv_control_msg error -32 req 04 val 1000
[ 1385.042267][T17566] pwc: recv_control_msg error -32 req 04 val 1300
[ 1385.051508][T17566] pwc: recv_control_msg error -32 req 04 val 1400
[ 1385.076558][T17566] pwc: recv_control_msg error -32 req 02 val 2000
[ 1385.131664][T17566] pwc: recv_control_msg error -32 req 02 val 2100
[ 1385.202912][T17566] pwc: recv_control_msg error -32 req 04 val 1500
[ 1385.443488][T17566] pwc: recv_control_msg error -71 req 02 val 2400
[ 1385.454233][T17566] pwc: recv_control_msg error -71 req 02 val 2600
[ 1385.461616][T17566] pwc: recv_control_msg error -71 req 02 val 2900
[ 1385.469096][T17566] pwc: recv_control_msg error -71 req 02 val 2800
[ 1385.476641][T17566] pwc: recv_control_msg error -71 req 04 val 1100
[ 1385.486542][T17566] pwc: recv_control_msg error -71 req 04 val 1200
[ 1385.519183][T17566] pwc: Registered as video103.
[ 1385.551085][T17566] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input80
[ 1385.591456][T17566] usb 10-1: USB disconnect, device number 74
[ 1390.919457][T27588] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6244'.
[ 1391.593332][T27603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1391.627892][T27601] binder: 27599:27601 ioctl c0306201 80000280 returned -14
[ 1393.081333][T17566] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[ 1393.269637][T17566] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[ 1393.297513][T17566] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.388811][T17566] usb 1-1: Product: syz
[ 1393.403313][T17566] usb 1-1: Manufacturer: syz
[ 1393.429407][T17566] usb 1-1: SerialNumber: syz
[ 1393.883180][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6266'.
[ 1396.324536][T17566] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO
[ 1396.441224][T17566] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO
[ 1396.451930][T17566] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[ 1396.463776][T17566] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[ 1396.477072][T17566] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[ 1396.501318][T17566] usb 1-1: USB disconnect, device number 73
[ 1398.023271][T27656] fanotify: failed to encode fid (type=0, len=0, err=-2)
[ 1398.056191][T27671] loop6: detected capacity change from 0 to 63
[ 1398.079409][T27671] buffer_io_error: 21 callbacks suppressed
[ 1398.079429][T27671] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.101909][T27671] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.110323][T27671] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.120649][T27671] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.130845][T27671] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.190121][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.232532][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.248725][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.264834][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1398.275178][T27676] binder: BINDER_SET_CONTEXT_MGR already set
[ 1398.281648][T27676] binder: 27673:27676 ioctl 4018620d 800002c0 returned -16
[ 1398.291998][T25086] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1399.437962][T27682] binder_alloc: 27680: pid 27680 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1405.025649][T27755] sch_tbf: burst 1023 is lower than device lo mtu (11337746) !
[ 1408.275931][T27788] syz_tun: entered allmulticast mode
[ 1408.610387][T27788] dvmrp8: entered allmulticast mode
[ 1408.662463][T27787] syz_tun: left allmulticast mode
[ 1408.681120][T27787] dvmrp8: left allmulticast mode
[ 1409.076454][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'.
[ 1409.154653][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'.
[ 1409.224546][T27797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'.
[ 1409.260135][T27796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6304'.
[ 1409.331613][T17571] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1409.500867][T17571] usb 2-1: Using ep0 maxpacket: 32
[ 1409.525691][T17571] usb 2-1: config 6 has an invalid interface number: 244 but max is -1
[ 1409.534613][T17571] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 0
[ 1409.573705][T17571] usb 2-1: config 6 has no interface number 0
[ 1409.590706][T17571] usb 2-1: config 6 interface 244 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 1409.623684][T17571] usb 2-1: config 6 interface 244 has no altsetting 0
[ 1409.656124][T17571] usb 2-1: New USB device found, idVendor=0e41, idProduct=4750, bcdDevice=26.9c
[ 1409.676383][T17571] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.700888][T17571] usb 2-1: Product: syz
[ 1409.729798][T17571] usb 2-1: Manufacturer: syz
[ 1409.746914][T17571] usb 2-1: SerialNumber: syz
[ 1409.792273][T17571] snd_usb_toneport 2-1:6.244: Line 6 GuitarPort found
[ 1410.012439][T17571] snd_usb_toneport 2-1:6.244: set_interface failed
[ 1410.037883][T17571] snd_usb_toneport 2-1:6.244: Line 6 GuitarPort now disconnected
[ 1410.050383][T17571] snd_usb_toneport 2-1:6.244: probe with driver snd_usb_toneport failed with error -71
[ 1410.069136][T17571] usb 2-1: USB disconnect, device number 56
[ 1410.415156][T27820] binder_alloc: 27819: pid 27819 spamming oneway? 1 buffers allocated for a total size of 4096
[ 1413.892385][T27853] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1415.141718][ T5959] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1415.329518][ T5959] usb 4-1: Using ep0 maxpacket: 8
[ 1415.337049][ T5959] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1415.358836][ T5959] usb 4-1: config 0 has no interface number 0
[ 1415.374651][ T5959] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1415.400298][ T5959] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1415.415869][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1415.438816][ T5959] usb 4-1: config 0 descriptor??
[ 1415.457786][ T5959] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1415.606076][ T5959] hid-generic 0000:0000:0000.005D: unknown main item tag 0x0
[ 1415.662719][ T5959] hid-generic 0000:0000:0000.005D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1415.712200][ T5945] usb 4-1: USB disconnect, device number 39
[ 1416.231966][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6333'.
[ 1416.272048][T27893] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1416.334209][T27893] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1416.691129][ T5959] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1416.850998][ T5959] usb 4-1: Using ep0 maxpacket: 32
[ 1416.876243][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1416.906254][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1416.938647][ T5959] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1416.970282][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1417.141060][ T5959] usb 4-1: config 0 descriptor??
[ 1417.372432][ T5959] usbhid 4-1:0.0: can't add hid device: -71
[ 1417.378973][ T5959] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1417.577375][ T5959] usb 4-1: USB disconnect, device number 40
[ 1419.702158][T17566] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1419.926192][T17566] usb 2-1: config 0 has an invalid interface number: 229 but max is 0
[ 1419.960534][T17566] usb 2-1: config 0 has no interface number 0
[ 1419.986114][T17566] usb 2-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19
[ 1420.038080][T17566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1420.179966][T17566] usb 2-1: config 0 descriptor??
[ 1421.136357][T17566] usb 2-1: USB disconnect, device number 57
[ 1421.525451][T17571] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[ 1421.701278][T17571] usb 4-1: Using ep0 maxpacket: 8
[ 1421.729037][T17571] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1421.865620][T17571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.044048][T17571] usb 4-1: Product: syz
[ 1422.060579][T17571] usb 4-1: Manufacturer: syz
[ 1422.069845][T17571] usb 4-1: SerialNumber: syz
[ 1422.084707][T17571] usb 4-1: config 0 descriptor??
[ 1422.102952][T17571] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1424.445345][T17571] gspca_sonixj: reg_w1 err -71
[ 1424.450285][T17571] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[ 1424.502757][T17571] usb 4-1: USB disconnect, device number 41
[ 1426.113171][T27985] binder_alloc: 27982: binder_alloc_buf size -624 failed, no address space
[ 1426.165937][T27985] binder_alloc: allocated: 16 (num: 2 largest: 8), free: 8176 (num: 1 largest: 8176)
[ 1428.236023][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1428.246323][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1430.751349][T28038] loop6: detected capacity change from 0 to 63
[ 1430.774471][T25117] buffer_io_error: 3117 callbacks suppressed
[ 1430.774488][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1430.797708][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1430.807609][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1430.818656][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1430.828573][T25117] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1432.627602][T28061] syzkaller0: entered promiscuous mode
[ 1432.681077][T28061] syzkaller0: entered allmulticast mode
[ 1433.252084][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1433.252104][   T30] audit: type=1800 audit(1757626697.857:411): pid=28064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6381" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1434.243158][   T30] audit: type=1800 audit(1757626698.847:412): pid=28083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6386" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[ 1435.211646][T28096] binder: transaction release 474 bad handle 1, ret = -22
[ 1435.731922][T17571] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1435.959172][T17571] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1435.971550][T17571] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1436.010952][T17571] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1436.027602][T17571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1436.038663][T17571] usb 2-1: SerialNumber: syz
[ 1436.312977][T17571] usb 2-1: 0:2 : does not exist
[ 1436.513240][T17571] usb 2-1: USB disconnect, device number 58
[ 1436.888598][T25086] udevd[25086]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1439.461375][T28130] binder_alloc: 28129: binder_alloc_buf, no vma
[ 1441.189575][   T30] audit: type=1326 audit(1757626705.787:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.262334][   T30] audit: type=1326 audit(1757626705.787:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.402990][   T30] audit: type=1326 audit(1757626705.847:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.516302][   T30] audit: type=1326 audit(1757626705.847:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.616639][   T30] audit: type=1326 audit(1757626705.847:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.690704][   T30] audit: type=1326 audit(1757626705.857:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.751561][   T30] audit: type=1326 audit(1757626705.857:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.777410][   T30] audit: type=1326 audit(1757626705.857:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.826014][   T30] audit: type=1326 audit(1757626705.857:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1441.849137][   T30] audit: type=1326 audit(1757626705.867:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28143 comm="syz.3.6405" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd2539 code=0x7ffc0000
[ 1443.632275][T28166] futex_wake_op: syz.0.6414 tries to shift op by -1; fix this program
[ 1443.955671][T17566] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[ 1444.206582][T28180] loop6: detected capacity change from 0 to 63
[ 1444.219039][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.227370][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.235724][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.244854][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.253135][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.261630][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.269907][T28183] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.316181][T17566] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[ 1444.372538][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.421493][ T5959] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[ 1444.429704][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.437840][T17566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1444.614009][T17566] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1444.632829][T28180] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1444.816940][T17566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1444.980049][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 1445.019022][ T5959] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1445.048906][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.072897][T17566] usb 1-1: config 0 descriptor??
[ 1445.118659][ T5959] usb 4-1: config 0 descriptor??
[ 1445.183537][T28179] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[ 1445.706363][T17566] ath6kl: Failed to submit usb control message: -71
[ 1445.714566][T17566] ath6kl: unable to send the bmi data to the device: -71
[ 1445.747272][T17566] ath6kl: Unable to send get target info: -71
[ 1445.768190][T17566] ath6kl: Failed to init ath6kl core: -71
[ 1445.776361][T17566] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[ 1445.809123][T17566] usb 1-1: USB disconnect, device number 74
[ 1445.919635][ T5959] elan 0003:04F3:0755.005E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[ 1446.036595][ T5959] usb 4-1: USB disconnect, device number 42
[ 1446.573873][T28190] fido_id[28190]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1447.513535][   T30] kauditd_printk_skb: 29 callbacks suppressed
[ 1447.513557][   T30] audit: type=1800 audit(1757626712.117:452): pid=28205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6421" name="/" dev="fuse" ino=1 res=0 errno=0
[ 1450.137968][T28236] bridge3: entered allmulticast mode
[ 1452.447851][   T30] audit: type=1326 audit(1757626717.037:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28258 comm="syz.5.6436" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf702e539 code=0x0
[ 1452.554059][   T30] audit: type=1326 audit(1757626717.147:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28258 comm="syz.5.6436" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf702e539 code=0x0
[ 1453.701327][   T30] audit: type=1804 audit(1757626718.267:455): pid=28270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.6438" name="/newroot/355/file1" dev="fuse" ino=1 res=1 errno=0
[ 1454.282702][T28278] vlan3: entered promiscuous mode
[ 1454.347978][   T30] audit: type=1800 audit(1757626718.947:456): pid=28285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.6441" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1456.911219][T17566] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1457.102723][T17566] usb 2-1: Using ep0 maxpacket: 8
[ 1457.128907][T17566] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1457.161134][T17566] usb 2-1: config 0 has no interface number 0
[ 1457.167328][T17566] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1457.247235][T17566] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1457.283240][T17566] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1457.318029][T17566] usb 2-1: config 0 descriptor??
[ 1457.369653][T17566] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1457.907463][T28305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1458.366912][T28305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1458.426488][ T5959] usb 2-1: USB disconnect, device number 59
[ 1458.625092][T28326] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6456'.
[ 1461.042325][T17574] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[ 1461.519069][T17574] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=a9.25
[ 1461.556811][T17574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.604749][T17574] usb 4-1: Product: syz
[ 1461.614449][T17574] usb 4-1: Manufacturer: syz
[ 1461.650230][T17574] usb 4-1: SerialNumber: syz
[ 1461.684818][T17574] usb 4-1: config 0 descriptor??
[ 1462.149811][T17574] usb 4-1: USB disconnect, device number 43
[ 1463.071046][T28380] syz_tun: entered allmulticast mode
[ 1463.171594][T28380] dvmrp6: entered allmulticast mode
[ 1463.283262][T28379] syz_tun: left allmulticast mode
[ 1463.300445][T28379] dvmrp6: left allmulticast mode
[ 1463.721324][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'.
[ 1463.787738][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'.
[ 1463.836691][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'.
[ 1463.879806][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'.
[ 1463.932847][T28391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6476'.
[ 1464.838988][T28400] netlink: 'syz.5.6487': attribute type 9 has an invalid length.
[ 1464.848992][T28400] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6487'.
[ 1466.095967][T17566] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[ 1466.460876][T17566] usb 1-1: Using ep0 maxpacket: 8
[ 1466.511961][T17566] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1466.697619][T17566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1466.742044][T17566] usb 1-1: config 0 descriptor??
[ 1466.984700][T17566] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[ 1468.163623][T28430] netdevsim netdevsim1: Direct firmware load for ..€ failed with error -2
[ 1468.235430][T28430] netdevsim netdevsim1: Falling back to sysfs fallback for: ..€
[ 1468.530222][   T30] audit: type=1800 audit(1757626733.127:457): pid=28438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.6486" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[ 1468.896676][T28433] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1468.904220][T28433] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 1468.914283][T28433] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1468.920371][T28433] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1468.973878][T28433] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1468.981057][T28433] Bluetooth: hci4: Opcode 0x0406 failed: -4
[ 1468.998002][T28433] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1469.005926][T28433] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 1469.019396][T28433] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1469.027052][T28433] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 1470.044221][T17566] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1470.095050][T17566] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[ 1470.314223][T17566] asix 1-1:0.0: probe with driver asix failed with error -71
[ 1470.456209][T17566] usb 1-1: USB disconnect, device number 75
[ 1470.471077][ T5877] Bluetooth: hci0: command 0x0406 tx timeout
[ 1470.951197][ T5877] Bluetooth: hci3: command 0x0406 tx timeout
[ 1471.030994][ T5877] Bluetooth: hci1: command 0x0406 tx timeout
[ 1471.037391][ T5877] Bluetooth: hci2: command 0x0406 tx timeout
[ 1471.044112][T19275] Bluetooth: hci4: command 0x0406 tx timeout
[ 1471.204011][T17574] usb 6-1: new high-speed USB device number 58 using dummy_hcd
[ 1471.360888][T17571] usb 10-1: new high-speed USB device number 75 using dummy_hcd
[ 1471.390827][T17574] usb 6-1: Using ep0 maxpacket: 8
[ 1471.398321][T17574] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1471.408070][T17574] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1471.425508][T17574] usb 6-1: config 0 descriptor??
[ 1471.513101][T17571] usb 10-1: config 0 has no interfaces?
[ 1471.527687][T17571] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1471.537738][T17571] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1471.551547][ T5945] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1471.567508][T17571] usb 10-1: config 0 descriptor??
[ 1471.711053][ T5945] usb 1-1: Using ep0 maxpacket: 16
[ 1471.741686][ T5945] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1471.761543][ T5945] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1471.800682][T28475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1471.855268][ T5945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1471.877132][T28475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1471.907389][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1471.948907][T17567] usb 10-1: USB disconnect, device number 75
[ 1471.959458][ T5945] usb 1-1: Product: syz
[ 1471.964115][ T5945] usb 1-1: Manufacturer: syz
[ 1471.968778][ T5945] usb 1-1: SerialNumber: syz
[ 1472.214134][ T5945] usb 1-1: 0:2 : does not exist
[ 1472.250150][ T5945] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1472.338173][ T5945] usb 1-1: USB disconnect, device number 76
[ 1472.429519][T25086] udevd[25086]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1472.481011][T17567] usb 10-1: new high-speed USB device number 76 using dummy_hcd
[ 1472.551112][ T5959] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[ 1472.561459][T28470] Bluetooth: hci0: command 0x0406 tx timeout
[ 1472.660955][T17567] usb 10-1: Using ep0 maxpacket: 16
[ 1472.671205][T17567] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1472.687094][T17567] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1472.711400][T17567] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[ 1472.713713][ T5959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1472.748399][T17567] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1472.770880][ T5959] usb 4-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00
[ 1472.801463][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1472.841652][T17567] usb 10-1: Product: syz
[ 1472.842703][ T5959] usb 4-1: config 0 descriptor??
[ 1472.846060][T17567] usb 10-1: Manufacturer: syz
[ 1472.857663][T17567] usb 10-1: SerialNumber: syz
[ 1473.031366][T28470] Bluetooth: hci3: command 0x0406 tx timeout
[ 1473.111007][T28470] Bluetooth: hci2: command 0x0406 tx timeout
[ 1473.117157][T28470] Bluetooth: hci4: command 0x0406 tx timeout
[ 1473.123413][T28469] Bluetooth: hci1: command 0x0406 tx timeout
[ 1473.440163][T17567] usb 10-1: 0:2 : does not exist
[ 1473.516352][ T5959] uclogic 0003:5543:0003.005F: unknown main item tag 0x0
[ 1473.544149][ T5959] uclogic 0003:5543:0003.005F: unknown main item tag 0x0
[ 1473.556543][ T5959] uclogic 0003:5543:0003.005F: unknown main item tag 0x0
[ 1473.589833][ T5959] uclogic 0003:5543:0003.005F: unknown main item tag 0x0
[ 1473.691794][T17567] usb 10-1: 5:0: failed to get current value for ch 0 (-22)
[ 1473.805400][ T5959] uclogic 0003:5543:0003.005F: unknown main item tag 0x0
[ 1473.921853][T17567] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1473.956131][T17567] usb 10-1: 5:0: cannot get min/max values for control 4 (id 5)
[ 1474.076035][ T5959] uclogic 0003:5543:0003.005F: hidraw0: USB HID v0.00 Device [HID 5543:0003] on usb-dummy_hcd.3-1/input0
[ 1474.124619][ T5959] usb 4-1: USB disconnect, device number 44
[ 1474.128529][T17567] usb 10-1: 5:0: cannot get min/max values for control 3 (id 5)
[ 1474.226330][T17567] usb 10-1: USB disconnect, device number 76
[ 1474.265780][T17574] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[ 1474.301576][T17574] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[ 1474.370978][T17574] asix 6-1:0.0: probe with driver asix failed with error -71
[ 1474.439584][T17574] usb 6-1: USB disconnect, device number 58
[ 1474.442939][T28497] fido_id[28497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 1476.068574][T28517] vlan3: entered promiscuous mode
[ 1476.208020][T28517] vlan3: entered allmulticast mode
[ 1476.244669][T28517] hsr_slave_1: entered allmulticast mode
[ 1478.969986][T28552] netlink: 'syz.5.6522': attribute type 1 has an invalid length.
[ 1479.021488][T28552] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.6522'.
[ 1479.504389][T28566] 
[ 1479.506787][T28566] =====================================================
[ 1479.513754][T28566] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 1479.521372][T28566] syzkaller #0 Not tainted
[ 1479.525813][T28566] -----------------------------------------------------
[ 1479.532801][T28566] syz.9.6526/28566 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 1479.540610][T28566] ffff888053e83f30 (&new->fa_lock){...-}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 1479.549480][T28566] 
[ 1479.549480][T28566] and this task is already holding:
[ 1479.556885][T28566] ffff8880216e5028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1479.566705][T28566] which would create a new lock dependency:
[ 1479.572625][T28566]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){...-}-{3:3}
[ 1479.580772][T28566] 
[ 1479.580772][T28566] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 1479.590359][T28566]  (&dev->event_lock#2){..-.}-{3:3}
[ 1479.590401][T28566] 
[ 1479.590401][T28566] ... which became SOFTIRQ-irq-safe at:
[ 1479.603419][T28566]   lock_acquire+0x120/0x360
[ 1479.608070][T28566]   _raw_spin_lock_irqsave+0xa7/0xf0
[ 1479.613394][T28566]   input_event+0x76/0xe0
[ 1479.617753][T28566]   powermate_irq+0x156/0x390
[ 1479.622463][T28566]   __usb_hcd_giveback_urb+0x376/0x540
[ 1479.627939][T28566]   dummy_timer+0x862/0x4550
[ 1479.632540][T28566]   __hrtimer_run_queues+0x52c/0xc60
[ 1479.637844][T28566]   hrtimer_run_softirq+0x187/0x2b0
[ 1479.643054][T28566]   handle_softirqs+0x283/0x870
[ 1479.648002][T28566]   __irq_exit_rcu+0xca/0x1f0
[ 1479.652785][T28566]   irq_exit_rcu+0x9/0x30
[ 1479.657218][T28566]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1479.662948][T28566]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1479.669029][T28566]   finish_task_switch+0x26b/0x950
[ 1479.674154][T28566]   __schedule+0x17a0/0x4cc0
[ 1479.678755][T28566]   preempt_schedule_irq+0xb5/0x150
[ 1479.683961][T28566]   irqentry_exit+0x6f/0x90
[ 1479.688577][T28566]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1479.694669][T28566]   lock_release+0x2b5/0x3e0
[ 1479.699281][T28566]   batadv_nc_worker+0x28c/0x610
[ 1479.704245][T28566]   process_scheduled_works+0xae1/0x17b0
[ 1479.709886][T28566]   worker_thread+0x8a0/0xda0
[ 1479.714589][T28566]   kthread+0x70e/0x8a0
[ 1479.718772][T28566]   ret_from_fork+0x436/0x7d0
[ 1479.723492][T28566]   ret_from_fork_asm+0x1a/0x30
[ 1479.728379][T28566] 
[ 1479.728379][T28566] to a SOFTIRQ-irq-unsafe lock:
[ 1479.735420][T28566]  (tasklist_lock){.+.+}-{3:3}
[ 1479.735456][T28566] 
[ 1479.735456][T28566] ... which became SOFTIRQ-irq-unsafe at:
[ 1479.748095][T28566] ...
[ 1479.748107][T28566]   lock_acquire+0x120/0x360
[ 1479.755315][T28566]   _raw_read_lock+0x36/0x50
[ 1479.759927][T28566]   __do_wait+0xde/0x740
[ 1479.764182][T28566]   do_wait+0x1f8/0x520
[ 1479.768350][T28566]   kernel_wait+0xab/0x170
[ 1479.772882][T28566]   call_usermodehelper_exec_work+0xbe/0x230
[ 1479.778890][T28566]   process_scheduled_works+0xae1/0x17b0
[ 1479.784530][T28566]   worker_thread+0x8a0/0xda0
[ 1479.789224][T28566]   kthread+0x70e/0x8a0
[ 1479.793549][T28566]   ret_from_fork+0x436/0x7d0
[ 1479.798241][T28566]   ret_from_fork_asm+0x1a/0x30
[ 1479.803172][T28566] 
[ 1479.803172][T28566] other info that might help us debug this:
[ 1479.803172][T28566] 
[ 1479.813418][T28566] Chain exists of:
[ 1479.813418][T28566]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 1479.813418][T28566] 
[ 1479.827014][T28566]  Possible interrupt unsafe locking scenario:
[ 1479.827014][T28566] 
[ 1479.835507][T28566]        CPU0                    CPU1
[ 1479.840885][T28566]        ----                    ----
[ 1479.846261][T28566]   lock(tasklist_lock);
[ 1479.850521][T28566]                                local_irq_disable();
[ 1479.857283][T28566]                                lock(&dev->event_lock#2);
[ 1479.864502][T28566]                                lock(&client->buffer_lock);
[ 1479.871902][T28566]   <Interrupt>
[ 1479.875361][T28566]     lock(&dev->event_lock#2);
[ 1479.880837][T28566] 
[ 1479.880837][T28566]  *** DEADLOCK ***
[ 1479.880837][T28566] 
[ 1479.889075][T28566] 7 locks held by syz.9.6526/28566:
[ 1479.894273][T28566]  #0: ffff888029327118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 1479.903458][T28566]  #1: ffff888029322230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340
[ 1479.913682][T28566]  #2: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340
[ 1479.923379][T28566]  #3: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 1479.932982][T28566]  #4: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 1479.942148][T28566]  #5: ffff8880216e5028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 1479.952345][T28566]  #6: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 1479.961423][T28566] 
[ 1479.961423][T28566] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 1479.971925][T28566]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 1479.977609][T28566]     IN-SOFTIRQ-W at:
[ 1479.982399][T28566]                       lock_acquire+0x120/0x360
[ 1479.988841][T28566]                       _raw_spin_lock_irqsave+0xa7/0xf0
[ 1479.995889][T28566]                       input_event+0x76/0xe0
[ 1480.001999][T28566]                       powermate_irq+0x156/0x390
[ 1480.008458][T28566]                       __usb_hcd_giveback_urb+0x376/0x540
[ 1480.015665][T28566]                       dummy_timer+0x862/0x4550
[ 1480.022189][T28566]                       __hrtimer_run_queues+0x52c/0xc60
[ 1480.029226][T28566]                       hrtimer_run_softirq+0x187/0x2b0
[ 1480.036182][T28566]                       handle_softirqs+0x283/0x870
[ 1480.042787][T28566]                       __irq_exit_rcu+0xca/0x1f0
[ 1480.049311][T28566]                       irq_exit_rcu+0x9/0x30
[ 1480.055401][T28566]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 1480.064713][T28566]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1480.072570][T28566]                       finish_task_switch+0x26b/0x950
[ 1480.079582][T28566]                       __schedule+0x17a0/0x4cc0
[ 1480.086048][T28566]                       preempt_schedule_irq+0xb5/0x150
[ 1480.093035][T28566]                       irqentry_exit+0x6f/0x90
[ 1480.099297][T28566]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1480.107128][T28566]                       lock_release+0x2b5/0x3e0
[ 1480.113573][T28566]                       batadv_nc_worker+0x28c/0x610
[ 1480.120276][T28566]                       process_scheduled_works+0xae1/0x17b0
[ 1480.127658][T28566]                       worker_thread+0x8a0/0xda0
[ 1480.134096][T28566]                       kthread+0x70e/0x8a0
[ 1480.140127][T28566]                       ret_from_fork+0x436/0x7d0
[ 1480.146748][T28566]                       ret_from_fork_asm+0x1a/0x30
[ 1480.153380][T28566]     INITIAL USE at:
[ 1480.157401][T28566]                      lock_acquire+0x120/0x360
[ 1480.163796][T28566]                      _raw_spin_lock_irqsave+0xa7/0xf0
[ 1480.170947][T28566]                      input_inject_event+0xa5/0x340
[ 1480.177735][T28566]                      kbd_led_trigger_activate+0xbc/0x100
[ 1480.184972][T28566]                      led_trigger_set+0x52a/0x950
[ 1480.191497][T28566]                      led_trigger_set_default+0x260/0x2a0
[ 1480.198759][T28566]                      led_classdev_register_ext+0x73d/0x930
[ 1480.206143][T28566]                      input_leds_connect+0x517/0x790
[ 1480.212941][T28566]                      input_register_device+0xcfd/0x1140
[ 1480.220078][T28566]                      atkbd_connect+0x72e/0xa00
[ 1480.226431][T28566]                      serio_driver_probe+0x82/0xd0
[ 1480.233157][T28566]                      really_probe+0x26d/0x9e0
[ 1480.239624][T28566]                      __driver_probe_device+0x18c/0x2f0
[ 1480.247212][T28566]                      driver_probe_device+0x4f/0x430
[ 1480.254006][T28566]                      __driver_attach+0x452/0x700
[ 1480.260531][T28566]                      bus_for_each_dev+0x233/0x2b0
[ 1480.267141][T28566]                      serio_handle_event+0x1f9/0x8d0
[ 1480.273915][T28566]                      process_scheduled_works+0xae1/0x17b0
[ 1480.281235][T28566]                      worker_thread+0x8a0/0xda0
[ 1480.287581][T28566]                      kthread+0x70e/0x8a0
[ 1480.293404][T28566]                      ret_from_fork+0x436/0x7d0
[ 1480.299740][T28566]                      ret_from_fork_asm+0x1a/0x30
[ 1480.306281][T28566]   }
[ 1480.309005][T28566]   ... key      at: [<ffffffff99e30fa0>] input_allocate_device.__key.5+0x0/0x20
[ 1480.318243][T28566] -> (&client->buffer_lock){....}-{3:3} {
[ 1480.324014][T28566]    INITIAL USE at:
[ 1480.328415][T28566]                    lock_acquire+0x120/0x360
[ 1480.334715][T28566]                    _raw_spin_lock+0x2e/0x40
[ 1480.341179][T28566]                    evdev_pass_values+0xb9/0xbd0
[ 1480.347635][T28566]                    evdev_events+0x1e6/0x340
[ 1480.353768][T28566]                    input_pass_values+0x288/0x890
[ 1480.360304][T28566]                    input_event_dispose+0x330/0x6b0
[ 1480.367110][T28566]                    input_inject_event+0x1dd/0x340
[ 1480.373726][T28566]                    evdev_write+0x2fc/0x480
[ 1480.379747][T28566]                    vfs_write+0x27b/0xb30
[ 1480.385695][T28566]                    ksys_write+0x145/0x250
[ 1480.391631][T28566]                    __do_fast_syscall_32+0xb6/0x2b0
[ 1480.398344][T28566]                    do_fast_syscall_32+0x34/0x80
[ 1480.404861][T28566]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1480.412770][T28566]  }
[ 1480.415275][T28566]  ... key      at: [<ffffffff99e31240>] evdev_open.__key.25+0x0/0x20
[ 1480.423527][T28566]  ... acquired at:
[ 1480.427332][T28566]    lock_acquire+0x120/0x360
[ 1480.432147][T28566]    _raw_spin_lock+0x2e/0x40
[ 1480.436858][T28566]    evdev_pass_values+0xb9/0xbd0
[ 1480.441906][T28566]    evdev_events+0x1e6/0x340
[ 1480.446602][T28566]    input_pass_values+0x288/0x890
[ 1480.451732][T28566]    input_event_dispose+0x330/0x6b0
[ 1480.457036][T28566]    input_inject_event+0x1dd/0x340
[ 1480.462252][T28566]    evdev_write+0x2fc/0x480
[ 1480.466869][T28566]    vfs_write+0x27b/0xb30
[ 1480.471316][T28566]    ksys_write+0x145/0x250
[ 1480.475841][T28566]    __do_fast_syscall_32+0xb6/0x2b0
[ 1480.481152][T28566]    do_fast_syscall_32+0x34/0x80
[ 1480.486203][T28566]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1480.492752][T28566] 
[ 1480.495088][T28566] 
[ 1480.495088][T28566] the dependencies between the lock to be acquired
[ 1480.495099][T28566]  and SOFTIRQ-irq-unsafe lock:
[ 1480.508803][T28566]   -> (tasklist_lock){.+.+}-{3:3} {
[ 1480.514126][T28566]      HARDIRQ-ON-R at:
[ 1480.518383][T28566]                         lock_acquire+0x120/0x360
[ 1480.524907][T28566]                         _raw_read_lock+0x36/0x50
[ 1480.531441][T28566]                         __do_wait+0xde/0x740
[ 1480.537632][T28566]                         do_wait+0x1f8/0x520
[ 1480.543725][T28566]                         kernel_wait+0xab/0x170
[ 1480.550071][T28566]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1480.557985][T28566]                         process_scheduled_works+0xae1/0x17b0
[ 1480.565561][T28566]                         worker_thread+0x8a0/0xda0
[ 1480.572183][T28566]                         kthread+0x70e/0x8a0
[ 1480.578300][T28566]                         ret_from_fork+0x436/0x7d0
[ 1480.584903][T28566]                         ret_from_fork_asm+0x1a/0x30
[ 1480.591690][T28566]      SOFTIRQ-ON-R at:
[ 1480.595862][T28566]                         lock_acquire+0x120/0x360
[ 1480.602391][T28566]                         _raw_read_lock+0x36/0x50
[ 1480.609001][T28566]                         __do_wait+0xde/0x740
[ 1480.615171][T28566]                         do_wait+0x1f8/0x520
[ 1480.621271][T28566]                         kernel_wait+0xab/0x170
[ 1480.627618][T28566]                         call_usermodehelper_exec_work+0xbe/0x230
[ 1480.635543][T28566]                         process_scheduled_works+0xae1/0x17b0
[ 1480.643110][T28566]                         worker_thread+0x8a0/0xda0
[ 1480.649724][T28566]                         kthread+0x70e/0x8a0
[ 1480.655816][T28566]                         ret_from_fork+0x436/0x7d0
[ 1480.662429][T28566]                         ret_from_fork_asm+0x1a/0x30
[ 1480.669302][T28566]      INITIAL USE at:
[ 1480.673386][T28566]                        lock_acquire+0x120/0x360
[ 1480.679844][T28566]                        _raw_write_lock_irq+0xa2/0xf0
[ 1480.686709][T28566]                        copy_process+0x224f/0x3c00
[ 1480.693312][T28566]                        kernel_clone+0x21e/0x840
[ 1480.699914][T28566]                        user_mode_thread+0xdd/0x140
[ 1480.706604][T28566]                        rest_init+0x23/0x300
[ 1480.712693][T28566]                        start_kernel+0x3a9/0x410
[ 1480.719126][T28566]                        x86_64_start_reservations+0x24/0x30
[ 1480.726595][T28566]                        x86_64_start_kernel+0x143/0x1c0
[ 1480.733633][T28566]                        common_startup_64+0x13e/0x147
[ 1480.740508][T28566]      INITIAL READ USE at:
[ 1480.745029][T28566]                             lock_acquire+0x120/0x360
[ 1480.752244][T28566]                             _raw_read_lock+0x36/0x50
[ 1480.759117][T28566]                             __do_wait+0xde/0x740
[ 1480.765637][T28566]                             do_wait+0x1f8/0x520
[ 1480.772090][T28566]                             kernel_wait+0xab/0x170
[ 1480.778786][T28566]                             call_usermodehelper_exec_work+0xbe/0x230
[ 1480.787065][T28566]                             process_scheduled_works+0xae1/0x17b0
[ 1480.794991][T28566]                             worker_thread+0x8a0/0xda0
[ 1480.801942][T28566]                             kthread+0x70e/0x8a0
[ 1480.808377][T28566]                             ret_from_fork+0x436/0x7d0
[ 1480.815348][T28566]                             ret_from_fork_asm+0x1a/0x30
[ 1480.822571][T28566]    }
[ 1480.825323][T28566]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 1480.833409][T28566]    ... acquired at:
[ 1480.837399][T28566]    lock_acquire+0x120/0x360
[ 1480.842095][T28566]    _raw_read_lock+0x36/0x50
[ 1480.846877][T28566]    send_sigurg+0x12b/0x420
[ 1480.851480][T28566]    sk_send_sigurg+0x6c/0x2e0
[ 1480.856304][T28566]    queue_oob+0x420/0x4f0
[ 1480.860764][T28566]    unix_stream_sendmsg+0xc3f/0xdf0
[ 1480.866093][T28566]    __sock_sendmsg+0x21c/0x270
[ 1480.870969][T28566]    ____sys_sendmsg+0x505/0x830
[ 1480.875921][T28566]    ___sys_sendmsg+0x21f/0x2a0
[ 1480.880797][T28566]    __sys_sendmsg+0x164/0x220
[ 1480.885599][T28566]    __do_fast_syscall_32+0xb6/0x2b0
[ 1480.890907][T28566]    do_fast_syscall_32+0x34/0x80
[ 1480.895942][T28566]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1480.902460][T28566] 
[ 1480.904785][T28566]  -> (&f_owner->lock){....}-{3:3} {
[ 1480.910100][T28566]     INITIAL USE at:
[ 1480.914091][T28566]                      lock_acquire+0x120/0x360
[ 1480.920352][T28566]                      _raw_write_lock_irq+0xa2/0xf0
[ 1480.927126][T28566]                      __f_setown+0x67/0x370
[ 1480.933116][T28566]                      fcntl_dirnotify+0x3fa/0x6a0
[ 1480.939632][T28566]                      do_fcntl+0x6d0/0x1910
[ 1480.945631][T28566]                      do_compat_fcntl64+0x477/0x720
[ 1480.952329][T28566]                      __do_fast_syscall_32+0xb6/0x2b0
[ 1480.959209][T28566]                      do_fast_syscall_32+0x34/0x80
[ 1480.965821][T28566]                      entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1480.974071][T28566]     INITIAL READ USE at:
[ 1480.978492][T28566]                           lock_acquire+0x120/0x360
[ 1480.985212][T28566]                           _raw_read_lock_irqsave+0xaf/0x100
[ 1480.992694][T28566]                           send_sigio+0x38/0x370
[ 1480.999125][T28566]                           dnotify_handle_event+0x169/0x440
[ 1481.006507][T28566]                           fsnotify+0x1814/0x1a80
[ 1481.013027][T28566]                           path_openat+0x171e/0x3830
[ 1481.019806][T28566]                           do_filp_open+0x1fa/0x410
[ 1481.026580][T28566]                           do_sys_openat2+0x121/0x1c0
[ 1481.033449][T28566]                           __ia32_compat_sys_open+0x117/0x140
[ 1481.041124][T28566]                           __do_fast_syscall_32+0xb6/0x2b0
[ 1481.048435][T28566]                           do_fast_syscall_32+0x34/0x80
[ 1481.055477][T28566]                           entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.064084][T28566]   }
[ 1481.066686][T28566]   ... key      at: [<ffffffff99b31fa0>] file_f_owner_allocate.__key+0x0/0x20
[ 1481.075644][T28566]   ... acquired at:
[ 1481.079547][T28566]    lock_acquire+0x120/0x360
[ 1481.084251][T28566]    _raw_read_lock_irqsave+0xaf/0x100
[ 1481.089815][T28566]    send_sigio+0x38/0x370
[ 1481.094600][T28566]    kill_fasync+0x24d/0x4d0
[ 1481.099469][T28566]    lease_break_callback+0x26/0x30
[ 1481.104685][T28566]    __break_lease+0x6a2/0x1620
[ 1481.109548][T28566]    do_dentry_open+0x8b7/0x13f0
[ 1481.114602][T28566]    vfs_open+0x3b/0x340
[ 1481.118860][T28566]    path_openat+0x2ee5/0x3830
[ 1481.123643][T28566]    do_filp_open+0x1fa/0x410
[ 1481.128524][T28566]    do_sys_openat2+0x121/0x1c0
[ 1481.133406][T28566]    __ia32_compat_sys_openat+0x131/0x160
[ 1481.139232][T28566]    __do_fast_syscall_32+0xb6/0x2b0
[ 1481.144554][T28566]    do_fast_syscall_32+0x34/0x80
[ 1481.149599][T28566]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.156114][T28566] 
[ 1481.158448][T28566] -> (&new->fa_lock){...-}-{3:3} {
[ 1481.163602][T28566]    IN-SOFTIRQ-R at:
[ 1481.167594][T28566]                     lock_acquire+0x120/0x360
[ 1481.173778][T28566]                     _raw_read_lock_irqsave+0xaf/0x100
[ 1481.180754][T28566]                     kill_fasync+0x199/0x4d0
[ 1481.186844][T28566]                     sock_wake_async+0x137/0x160
[ 1481.193268][T28566]                     sock_def_readable+0x3bb/0x550
[ 1481.199875][T28566]                     tcp_child_process+0x4d9/0xa60
[ 1481.206548][T28566]                     tcp_v6_rcv+0x1fb8/0x2c30
[ 1481.212721][T28566]                     ip6_protocol_deliver_rcu+0xcb0/0x15c0
[ 1481.220016][T28566]                     ip6_input_finish+0x191/0x370
[ 1481.226547][T28566]                     NF_HOOK+0x309/0x3a0
[ 1481.232301][T28566]                     ip6_input+0x16a/0x270
[ 1481.238208][T28566]                     NF_HOOK+0x309/0x3a0
[ 1481.244111][T28566]                     __netif_receive_skb+0xd3/0x380
[ 1481.250813][T28566]                     process_backlog+0x60e/0x14f0
[ 1481.257331][T28566]                     __napi_poll+0xc4/0x360
[ 1481.263326][T28566]                     net_rx_action+0x707/0xe30
[ 1481.269602][T28566]                     handle_softirqs+0x283/0x870
[ 1481.276141][T28566]                     do_softirq+0xec/0x180
[ 1481.282064][T28566]                     __local_bh_enable_ip+0x17d/0x1c0
[ 1481.288934][T28566]                     __dev_queue_xmit+0x1d79/0x3b50
[ 1481.295728][T28566]                     ip6_finish_output2+0x11bc/0x16a0
[ 1481.302606][T28566]                     ip6_xmit+0x107a/0x1840
[ 1481.308714][T28566]                     inet6_csk_xmit+0x473/0x720
[ 1481.315081][T28566]                     __tcp_transmit_skb+0x1db8/0x3680
[ 1481.321967][T28566]                     tcp_write_xmit+0x1862/0x67f0
[ 1481.328491][T28566]                     __tcp_push_pending_frames+0x97/0x360
[ 1481.335901][T28566]                     __tcp_close+0x50c/0xe10
[ 1481.342031][T28566]                     tcp_close+0x28/0x110
[ 1481.347859][T28566]                     inet_release+0x141/0x190
[ 1481.354045][T28566]                     sock_close+0xc0/0x240
[ 1481.359976][T28566]                     __fput+0x449/0xa70
[ 1481.365634][T28566]                     task_work_run+0x1d1/0x260
[ 1481.371911][T28566]                     exit_to_user_mode_loop+0xec/0x110
[ 1481.378908][T28566]                     __do_fast_syscall_32+0x1f4/0x2b0
[ 1481.385783][T28566]                     do_fast_syscall_32+0x34/0x80
[ 1481.392402][T28566]                     entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.400595][T28566]    INITIAL USE at:
[ 1481.404517][T28566]                    lock_acquire+0x120/0x360
[ 1481.410617][T28566]                    _raw_write_lock_irq+0xa2/0xf0
[ 1481.417166][T28566]                    fasync_remove_entry+0xf1/0x1c0
[ 1481.423783][T28566]                    sock_fasync+0x85/0xf0
[ 1481.429616][T28566]                    __fput+0x8a2/0xa70
[ 1481.435175][T28566]                    task_work_run+0x1d1/0x260
[ 1481.441366][T28566]                    exit_to_user_mode_loop+0xec/0x110
[ 1481.448324][T28566]                    __do_fast_syscall_32+0x1f4/0x2b0
[ 1481.455102][T28566]                    do_fast_syscall_32+0x34/0x80
[ 1481.461542][T28566]                    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.469472][T28566]    INITIAL READ USE at:
[ 1481.473825][T28566]                         lock_acquire+0x120/0x360
[ 1481.480393][T28566]                         _raw_read_lock_irqsave+0xaf/0x100
[ 1481.487704][T28566]                         kill_fasync+0x199/0x4d0
[ 1481.494136][T28566]                         sock_wake_async+0x137/0x160
[ 1481.500930][T28566]                         unix_write_space+0x3bb/0x470
[ 1481.507843][T28566]                         sock_wfree+0x1d3/0x7a0
[ 1481.514191][T28566]                         unix_destruct_scm+0x150/0x1a0
[ 1481.521409][T28566]                         skb_release_head_state+0xfe/0x250
[ 1481.528707][T28566]                         sk_skb_reason_drop+0xe9/0x170
[ 1481.535741][T28566]                         unix_release_sock+0x9ea/0xd50
[ 1481.542694][T28566]                         unix_release+0x92/0xd0
[ 1481.549041][T28566]                         sock_close+0xc0/0x240
[ 1481.555302][T28566]                         __fput+0x449/0xa70
[ 1481.561294][T28566]                         fput_close_sync+0x119/0x200
[ 1481.568167][T28566]                         __ia32_sys_close+0x7f/0x110
[ 1481.574943][T28566]                         __do_fast_syscall_32+0xb6/0x2b0
[ 1481.582071][T28566]                         do_fast_syscall_32+0x34/0x80
[ 1481.589027][T28566]                         entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.597370][T28566]  }
[ 1481.599874][T28566]  ... key      at: [<ffffffff99b31fc0>] fasync_insert_entry.__key+0x0/0x20
[ 1481.608584][T28566]  ... acquired at:
[ 1481.612450][T28566]    lock_acquire+0x120/0x360
[ 1481.617291][T28566]    _raw_read_lock_irqsave+0xaf/0x100
[ 1481.622782][T28566]    kill_fasync+0x199/0x4d0
[ 1481.627395][T28566]    evdev_pass_values+0x627/0xbd0
[ 1481.632526][T28566]    evdev_events+0x1e6/0x340
[ 1481.637216][T28566]    input_pass_values+0x288/0x890
[ 1481.642352][T28566]    input_event_dispose+0x330/0x6b0
[ 1481.647668][T28566]    input_inject_event+0x1dd/0x340
[ 1481.652886][T28566]    evdev_write+0x2fc/0x480
[ 1481.657482][T28566]    vfs_write+0x27b/0xb30
[ 1481.661911][T28566]    ksys_write+0x145/0x250
[ 1481.666429][T28566]    __do_fast_syscall_32+0xb6/0x2b0
[ 1481.671815][T28566]    do_fast_syscall_32+0x34/0x80
[ 1481.676850][T28566]    entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.683454][T28566] 
[ 1481.685782][T28566] 
[ 1481.685782][T28566] stack backtrace:
[ 1481.691681][T28566] CPU: 0 UID: 0 PID: 28566 Comm: syz.9.6526 Not tainted syzkaller #0 PREEMPT(full) 
[ 1481.691704][T28566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1481.691718][T28566] Call Trace:
[ 1481.691726][T28566]  <TASK>
[ 1481.691735][T28566]  dump_stack_lvl+0x189/0x250
[ 1481.691763][T28566]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1481.691784][T28566]  ? __pfx__printk+0x10/0x10
[ 1481.691815][T28566]  validate_chain+0x1f05/0x2140
[ 1481.691844][T28566]  __lock_acquire+0xab9/0xd20
[ 1481.691874][T28566]  ? kill_fasync+0x199/0x4d0
[ 1481.691894][T28566]  lock_acquire+0x120/0x360
[ 1481.691920][T28566]  ? kill_fasync+0x199/0x4d0
[ 1481.691946][T28566]  _raw_read_lock_irqsave+0xaf/0x100
[ 1481.691976][T28566]  ? kill_fasync+0x199/0x4d0
[ 1481.691996][T28566]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 1481.692025][T28566]  ? do_raw_spin_lock+0x121/0x290
[ 1481.692051][T28566]  kill_fasync+0x199/0x4d0
[ 1481.692070][T28566]  ? kill_fasync+0x53/0x4d0
[ 1481.692091][T28566]  evdev_pass_values+0x627/0xbd0
[ 1481.692113][T28566]  ? evdev_pass_values+0x681/0xbd0
[ 1481.692134][T28566]  evdev_events+0x1e6/0x340
[ 1481.692152][T28566]  ? evdev_events+0x79/0x340
[ 1481.692170][T28566]  ? input_pass_values+0x8d/0x890
[ 1481.692186][T28566]  input_pass_values+0x288/0x890
[ 1481.692206][T28566]  ? input_handle_event+0x70c/0xf30
[ 1481.692233][T28566]  input_event_dispose+0x330/0x6b0
[ 1481.692260][T28566]  input_inject_event+0x1dd/0x340
[ 1481.692286][T28566]  ? input_inject_event+0xb6/0x340
[ 1481.692313][T28566]  evdev_write+0x2fc/0x480
[ 1481.692331][T28566]  ? futex_private_hash_put+0x245/0x280
[ 1481.692354][T28566]  ? __pfx_evdev_write+0x10/0x10
[ 1481.692373][T28566]  ? bpf_lsm_file_permission+0x9/0x20
[ 1481.692396][T28566]  ? security_file_permission+0x75/0x290
[ 1481.692422][T28566]  ? rw_verify_area+0x255/0x4d0
[ 1481.692445][T28566]  ? __lock_acquire+0xab9/0xd20
[ 1481.692471][T28566]  ? __pfx_evdev_write+0x10/0x10
[ 1481.692490][T28566]  vfs_write+0x27b/0xb30
[ 1481.692517][T28566]  ? __pfx_vfs_write+0x10/0x10
[ 1481.692541][T28566]  ? __fget_files+0x2a/0x420
[ 1481.692563][T28566]  ? __fget_files+0x2a/0x420
[ 1481.692578][T28566]  ? __fget_files+0x3a0/0x420
[ 1481.692592][T28566]  ? __fget_files+0x2a/0x420
[ 1481.692611][T28566]  ksys_write+0x145/0x250
[ 1481.692635][T28566]  ? __pfx_ksys_write+0x10/0x10
[ 1481.692661][T28566]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1481.692681][T28566]  __do_fast_syscall_32+0xb6/0x2b0
[ 1481.692704][T28566]  do_fast_syscall_32+0x34/0x80
[ 1481.692725][T28566]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1481.692747][T28566] RIP: 0023:0xf7fa5539
[ 1481.692765][T28566] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1481.692781][T28566] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1481.692801][T28566] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000040
[ 1481.692814][T28566] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000
[ 1481.692825][T28566] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1481.692836][T28566] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1481.692848][T28566] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1481.692865][T28566]  </TASK>