last executing test programs:

19.741169841s ago: executing program 3 (id=2956):
mq_open(&(0x7f0000000000)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05|?\x82\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7jo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xf0-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2\x1e\xd8\xdfJ\xcc\xd7\x9b\xfa\xf0\x0f\x05\xf1\xc4 \xde@\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xec\x87\x1b\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8\x99$\xfb(\x9b5\xcbF4?O\x1d\xd7\x01*\xc9\xd6L\x86 \x1b\xab9\x1b\x12k\xf9\xec\xd8\x16E\x11-\xfd\x10\x89\x8d\xccbP\x14\x89w\xef\x90\x1d\xc9\x02\xeb\x01V\xfbm\x86\x8a\xc1.m\xd0\xa2\xa4\xc9\a;(\n\xc0\"\x1f\xe4\x1d\x85\xb3\x95\xec\xbb\x9b\x01\x85\xffx\xf2\a\f=\xd1\xcf\xec\xb8!\v\x958\xbf\x15b-\x92\xd6\xb5\xbf\xe2\x92\xc2\xa3}\xd0;\xd1\x96\x86\x8a\x1b\xe1w\xf9\xb0\xd2\xab\xc9\x8a\x19\n\xc5o\x1e\x13/\xe4\x91\x7f\xa5\xf1\xddW\xdb\x98\xcd\x94\xfc\x90\xa0\x05*\xfe\x8c\xdf\x83d\x01\xec\xc5\xd3\x9aE\xab\x9eH\xd4\xda\xf3X\x19\xbbG\xf5|\x89\xd5\xc2K\xfcXBK#\xdb\xc0\'\xf2\xd8\xfe`u\x89\xe7\f\x84\xa5\x1b\xfb\x03?\\\xf8(\xb41\xe1\x84\xf1\xa5\x1a\xa7i\x9f\xbda\x9c\x1b\x94\x16td-*', 0x40, 0x1dd, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_io_uring_setup(0x496, &(0x7f00000000c0)={0x0, 0x450c, 0x100, 0x3, 0x165}, 0x0, 0x0)
syz_io_uring_setup(0x4a57, &(0x7f0000000340)={0x0, 0x7a92, 0x40, 0x3, 0x11, 0x0, r0}, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
syz_io_uring_setup(0x1e21, &(0x7f0000000200)={0x0, 0x86f8, 0x10100, 0x0, 0x3}, 0x0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000bc0)={{@my=0x0}, {@my=0x0, 0x4000}, 0x400, "884fbe2726aa0a32f3e65f909acda971a093228292456e0332e6c11577b514f0bb8db731789d860e9589c4cbdd60b7a851a8a3c55ada2f90c51a69bf4a5c3e32296535dc838ef00dc18a32a79118dc858628f741f107552021e5a81d38e4374a8a717a7ca9015083cfff5d16156ef9cabf4f60c0da46870a10bf520cc5abcf9e3a437761ea75776763139fadd55c46daf5338870951822f6a803ccfbab9c3f507672d7c39ea9ccf81d9bc2b4649e7b44ed9fd7cb9bd389240cd41c415113d1caac4536f05c07e596d6addad2a4d27ba21a3b655753c508caedcc812ca235a7cd1686426b208bdecf8a4265ba8f6824aa60306e2d623481eed301b6dc21041fa8b6592be00bb74de1989a45a5aa32c189e9f5a5bb878281d0129afcfb8410cd1fa5acd080993d2d084213130a9b8d517d13251e6605a03d9b8faf507e820205a1f471af7b261419e79e09c547f7c10fd3f1ad876f59fdcc5e07d0ff4dee6ea2e3856616a352d648b9b5261b6263020fc3ae8eb404bc25703b3d3b8317ad07ff22907d6631d226c8247c92c1826ff814590dfe8c7fc54dfb265e906f756846546316b20e0105e2a5355a210b2b7f5db61d8f90bb783b41ce368233bd08044e9283531fffe49e3d305ecfb16075a047557f57bb7baf8babfc02975ad0d60ed8de9cb8adc9f667bc6826cbea8e260e4bff28a5ec19d38d1fc019db3cfaf310e764d78619cb27fb17af05a0e8ae831ce8413721e71138e62cc4ad8e7974d1506b4fb581c549a3dd7b7ef44ac37201aa3bce6f37f648d781bcb4f329fd45ffa640f1b04efb38a36e0ed0e2abcb07e4ad88ae3edfb6d840d75340204243d0e1c1c3139823b0d5ad196430bf4566619a1a97df4376a7e9a9e9c1d97b9f773c921778f2cb5165c02da1423305c502076177e4af50cb3343c10b01b78e3fe5520bdfae2b3dbe42db0f0eb55bbcb19038018d45ccdb8b0df400085a02c61b033f430fb6a7408e090c65798bc49d35e049d276fd1952d2b3dfd92a2548411e21be26216fe68fc3cf1c6625031260153708a53255b3d3d0411d5f0e8ab2102a97e539c34e9c769a7d9ef05e928c2c52775de467fa843cbcdabc290097eeb2ee7c58d86e3fccc39a5b694c18a4cc0d6af1e61d9c69e6466bc0cbef15365109e4f67a6268625f8c3f358fb7d567cbea52e1bc289bd8effda4e362a729e8cd3064970b97e3f72535d9ba88e97a14834cfd8dc86b5d2f9b35425a4162f3abe8b785ef462883e716c91b8eb281d81f68f606f16fcbc5cddfdec3b515818a647d86a4c17bae6ad525e95598052c49cdee821ceb45b2350dda13628db0dd266f30285241a2b147d65113b8ed3665a3451f7a56cf430ec98aeac702d9b9f776d97520a9d039e5b2fff34ac4d4e0a32e1f35c8f38e4f4fe1b3212a70f185ad71ec86b8c900"}, 0x418})
unshare(0x28040680)
pselect6(0x40, &(0x7f00000001c0)={0x400300, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)

19.22227132s ago: executing program 3 (id=2960):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f74"], 0x58}}, 0x0)

18.442370897s ago: executing program 3 (id=2963):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd606410a600440000fc020000000000000000000000000000ff0200000000000000000000000000b1da398f478f76943a941f28e2d3685501223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81ed"], 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x10)
syz_open_dev$sg(&(0x7f00000000c0), 0x7fffffff, 0x100)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r3 = dup(r1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000))

18.087235975s ago: executing program 3 (id=2965):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$inet(0x2, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

17.778209245s ago: executing program 3 (id=2966):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36)
r1 = syz_io_uring_setup(0x23b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0))
socket$kcm(0x21, 0x7, 0x2)
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
socket$netlink(0x10, 0x3, 0x2)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x6, 0xb, 0x0, 0xfffffffffffffffe, 0x7, 0x14}, 0x0)
connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x41, 0x1}, 0x2}}, 0x10)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40})

16.792846644s ago: executing program 1 (id=2970):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='3=\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYRES64=r0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008100)="58785f58471eb4b5b3ff3946acaad41068511507291e72541d949ffc8a54ff637ccef1fe8511899ea7f3c82cbc6539763a34f6760c1608c911801ca672e62708ba4fc023749076ff6a0daba0caa57000acbd9ecf5e97201f7f14e715bc8c089c3d65e92fd65dedb76d61715067ccf6dfec2b56a48f2b274b564d90c3d868f2bdc07b7e636ad78904bca826fa69b7783e7be2b8e7c997b99225467747875695f6d500cb82b479fe9486bb94e06f796f89906bbfccc964830f86986760ade90c3f7a9dde3172a5124c1889075ad30b5ee2a5f257a6ac790a8e89b247ccbc8d241b7b95f8fc649deffc1bc37d51a8c3dfae38ac968eb48695de38df941f9632ef9ad6779e41ccea8a3ff1cac4fa4b47a152a8f9a1bb0094f41580bbf60fa11cfaf2c535a12c866e9414ee9b58226fbdb0d221e1bdc50e3fa300351364f6350030383856f1f809aee19f337f3d3435ae6754916be1eec24643cec1bd1007ffa38418735988cc901603895f66bd6450d54f99e1246ded898499d2a447f899c00368ce1dd4a4f4cf9cdf7d4f8b38dcb98a598ac490f1086ec712b0cb94610abfdb25b0f6947b46e1dd628897ab68445568578049fa6140250a5d821d70f102fadc2fa273a6e486f250712ec847de3b02a121e19775311e8629045f3404bdfa3207aecdac43c3571b86a9423bd716aa67cb688f9ee4f2b14ea42c89f2766c78fd4ec41ab34eebb4256e885bd7e3abe4348772993bb630aa3397084bbc66cdad664d6a9d33767cc375a44dbc0b08931053a6780a796fd31e1d7c512599f9e010883a52c07ec0938ce1acb3fe3baac6af9fb7e9d7942662e41bd3626d240d5ed34ebcbcc0ccf1c3280c76fbf6cdfb04bdb2d3b4ec6a8961b1eb036b211eff6247b95039cc67d222f2ff122340c56d74b4fffa79a202144bb10ad766f1fd6b32abc3e09213da84b36698e5c67dbd76342baf2fdbd26e9563dadd01fce19d7ec025d05d0494e53229379d13c1cae48ec058cff0bc1ccdc94a74b11a9bc87c580bb6a3f45fe15d15d89bf6102dc1085bfe27b2ab462aaf642b8ceed519cf88b31e9e00fdc23e8f6967a72b4c38b2458656dbf26dd75586731bb519a97d0ff43f4358cd40c7ed371ae8a24f46e320d4c4c0a1b8c42f10908a1c283d8032d76f52d4509d78c2f3a0716c37bc0c786ce9174a88d468e88a6d154e4712778aecded0ca5de28e52c04e33672ecea5135438e908aa1bf00e65ba6dacc4bd018b7bb1c30aa5d9acc679220cb5e7207f1759bd7722d10469225aae24973031a21358532a63aab42f33b1f8f40d545fec7799703ba067592b34247fbc7375acdcb3883ace7d34cf33484f2cf662f3f0e18b5c475ae311fb20f6e6b85320b2bc37e56512dc27815b37bfd9f172be1a119197eb53b535c440fd7f24724e1d466309c0f8556965bd02d75c3dbe2baa0c6a515db07af1f77306577d0b38f0aa8cb188cf5523368951b8210f4bfc6afa0d058ad84656d27a46faef225e6268396ecb54a5182591bff3a86792db5454e238afe7c26eae85fd3c1c060760d89223bbdbe8966ae2558f47d799839cd959c974b69ad262cf8ab4fee554288e767ede9bc5d7f0cfba05966ef7858e41db363122680abe978345d45e4b52b73fe9f52ad26371a5b0539d88aa0c572aa01a41b079dde5a14e031ad903629d06c8d85ad82828c25a9ba7ce0fef2316eb011643e47feca7d280833f8b3008841fb2d88ea84df65b03aa5baaa29d6234ed5db8db461fc5df77aad38690277cd5dac1ed3c23c9f2778295578561f9a4d31159a826b4b62b2a867e6e8a9514edddaacad22106880e6633fb2f3b17c8d10bec633d6128489f7253b3e3e38e5942743ddd1547dfab27a152549f61891e3a5ad17f733b042f7ef915ad7423b9719fee9142407fe1d10ec8b64a21cd24fd39de4496ca3f394f07149bdbf1393181b5afee090ff40ee31d34a9c6a113e3823fac425fa85e212de1a9f7c4937ba64f3327961fccf85e6fa29be12de9589671d60d4658b1562ce7dedcde8ec79d265c13f5e197b66989c3f067d2801fcd78bb92b45e55fb4089a7cd3b179284af782ae0327ba56fc307a281772384448ee465dccefe41be8d75c8cd0eb5c0217d7ca706848f9b82500b77c2d838cbd536304556af87d3b6fb9183b5dc9cf2d0f7ecbb24d9f790151b9c6092dfb2c14decbe6448362cd7c13515f66a99c37b56134d12e8c7f1a5b75e14e47f84d8658f0b65ea91014e2e4fd361f03dbf8ca509d426ca1bba7e43ce918268393ff16b17d9e1bb49fb2b4f6eeb8b4b226c79303b19412a55b7ea7c8774ccebd8d66abe117a8be9a3c4faea730902136df57aff991b59dd71610ba4c8e1cded8287c21c56526f4fb6c502ea73ae310d56640990b3e695b278de6e1eebd51108cf7547c0e457e5fdf59691baf080dd3f5dc3c9a10bd4cc5e10ba42d4d3d9dc4f7ebe0bd2981a1d6fb06f7457dca1e56fac3f0fa7ca19ec2fb7940ee837e960d93a73bf085eaa2888fe3025aadd33cae85d63273be6ae3a92e35d78602d8e23b9460f04b7c0e0e710d10fdb0dd3fa9b880865603500d81dc7e968e8046569830b526e441f25f8b0af47d524aa80fd7dd9c3f72facec2032e2c06bc33c6b739c5368bf54e32b6acdca9d2d14276a8348ae92bfbd60f6aceecf98f3c6fe70747499b25667a96c52e21236421b27deafbc6b5e2b8a4ea2a0d3cd5ee1a10f3153b529b5c04a1961223a943842e17ee0cd114ce6983536400fc40f3d4708436954803fd60caf2b5ed7e4ce90bc75385e2424191c6a5038fa15d99aade49fa1affe63fb73078a6bb4ee560b0b521aeb33f507bdf876829f4d3f695197468e41503a10870a8e6df800608ac33dfdecc03f64d03fb6180287a684063c7edfc8db1366f6bb502fe446085f6acc4741b273a0b736f0f55da28967390bc7434db54ad0da9d1d002ceaa5c3e53efa95e7aaa792db32501a072e669da29fb734d771a6fa8c753fb2fcc204e31d668992473e7937fcf751bc79b125db1725f2a495bd2a4207e4db8d44810a4db5113705c5cb8733866ade3375d1bdbcb965cbd927e7d285f2933bf037911959088b64cfac0ff1e39244f2e9416653ed87ec564eb686af1062354a8bd7034c1022cb0d0b6996762ef4a0a3ab4f3deb459f023a867a38fcad2a10fcf0872862b386ff7c5ea7ce13abb112d1f0ed0723870eccc76d16f7e3cc00e28945bb93d9f2bd8e2017993102f0824867ec141f20df951202a2ab1cd796516ca0b4fdd9e6de8b82fcd30f9ab85cf0a5547e1ad1ef1ad5be7a878a16864d7c06b4ae002f3ba485a9bb36b8a591ecb64a4a5c0fd3b4beb015f58ea4cfe190f3b46cc4d9108d10c52a9de859814edac575d2a3d937a9b31db049e70aa76c085ab63d61c1317205c228f7027fa39125de8fec40ed7982e36a7cfa9fedca30f0b692bd4c7794f6b56d69ada1fed168cf03cc57321fe37e3a8cea4bd093e87b657fe5acb13d2591bebb52898362ddf0335810c70a4838faf8fff16301d16707eaa38e52f913f8aa3e27b2387ca1a217ac69966e287ad5cb0286535d5d00b7006661dbc7923a066945c1a2040a4e95d7b0de4dc8217bf1d4e9b6cccc671fdd9a5770c21e749b407df8c463a3bf17e47bfcba6a890a0435d3fbb7252fe072b149b7bfeb185b088686dd70e0c9cda275497b553aff2b319f7d7b0ed64002c5f9f6ccfc3d55d8c908d314487452f37a650f4561326a84c660b6111702a87db03595b5d080c60288203f091de9f78b997e47233f4bab9b044a98ab118a6c45b7ca746cc2fb90182a923d67216412e24a955c0c2307acc47bdd319955249d8412a5ccf444437f53f524c69ba0167c920f0c1f775cd1a225636200a9e4adf61f418d20f717339d0c8c5386af0936f628cc589a8d5581c1c8cad0b564a3f38b606473280a3fa586a5ba932fd38eeb23096df29a92ab54c409f88ef4f03217f0bb90fea539e629d8a025c802f6b5c3d735fe950c8ff7136e6db287851dfbffea1ef81491a50cb75a103367e85afa3484d6af865dfbca91dc05632b0d94aa384ee0c585424a5ddf80babe0b913b0a2eedda34c7ea7814642a69f8eae868274b16fe0f52fb60b201e6685dad3f419413d5b8186992855a25ffe0d4773a14c7977181a120cbc42af4f9acca3fee1d54ccc125ea49b62ab60c58a0ecdf50ee7c16f3b6b12b254fc08fcc85d409eef7c3f30cf705617f926a17e6588a9fd7e34be9fd863a7b157a2d9a336356d568c2d2dbaf76c2d2b2ff8703748b860e36f02b04d6e4f2fd49511f12ce395dc18622cd51948a32cc432cd797d8a68838cebbbdd9bcb6f2e85719785706012e894cb043bb9a53998131fd4aae3321d81fc001e718c4a99c0580af1d4a0c81665cc5adcf337c8bc00fc0fb3c7be0d5e5ff6a6fae5891858eafedbed69223170ccc71ce36ae439d769c3520972601fbab93f54808d6950cb7cf1e5a3b32d8c6a975e3adccca0b2ee28a4eb5ca3b0ceb9d31a8f767c3f4486a62215171738007675a55abf5916513f7eb9b21ff291f2b4b48bbfcf394cf861fe016b3680be422a8bff49963ce096d1bc17186822b1392e68b1a05fa6c70bd2d9a164f12301a6e78caa8f4cd43749704829f54c5d93637aeef80794d3f206741363e74fa181c9f1dc47557553de620794f096c59ccd74a178f5adb466ad5a62fffc1886f56ebceca4ed46ed2396bcbc31160b4eb1b7d69642e33315e3adbdbe1b9794931e7babf745ecfca37dd4190013793d530df12d6521bc069a05a94e0ffe91900a0c2209a6914d2f85bd161ff77284198129a9b1ba600bda3e52769d39c1bd61c4a70c627c3ad89aa0bdf0c93a2c35e166da9a08b4d2f92deacb6e9034274305b6d254c4052868ba32bec9aa3cec75debe24e78e43374efffe444722a983935f9007fe3de37dd83c52be16e034d09592a179275dd0c91281be579cd19c0162123886893713f25cdae19cf258926bf2070741111eee6b3df708c3fc416b7d046c948bf8500779c0cd5460e640bb1f860f58052b8087e6eb2f16e48f4984c9f9fc9fb2652ac5305861ece5362db08ae912ba055af766da1322057d0bfa647d98b8d4f1e7ed43ecdf1050c0eb19dae93b8014da57241cdab4ffacf0ec1348d4a89b3e8ff187098d83d8eba34e5c7ad4215f1977968a9d337d08fd1188754e7cf41baf0189ccaa5f3b1005f807b0255ce1920ca7d919e4684af70c3d089a99922727c607a2b06e713dd61122842a913036f6cd64dfb313fbdf639fcbd712852bb85337d056685b0a54225ae27e1e8c7ce5acd1f017b8f712c268b9cc0ee26d26c63955df0591f52ef3ef5e6f0a8b0a40fccec5f945431a2e81c35720d178feb481092e4f51978493c5fd502f252bc0152f145f268ead14932990069169483ecc7abc901657460c8730715c078b61059bd2621f50fb838376e0b808a3f118f761efea45bbac4274016960063cc67c428e72e516685552dc3bf473e442d76f2d3ed07b319694490054302a538b52e3b8496b7e37fbf4a2ffff2b484f98fdb14c66ecb8447834733f8a7a5a3c83de34b6647842dd56d8201f9d9240f3b3a5b5cbccf174a08853d06fd164fe74e04608ae12df8a35b73517d22a87c7ebca60942932d03102ff7e8644611b5520b5ebce950945498ce19210c866e48284d18fb7e049deaa43ee5283e3dfad7316ba85490e93182d13efe7ba64ee5ceeaabcff3eb24d46a3a129dd5a6b82e8c48210cb1e6564833f3e15dda4dec383b4319741cebf6374cf2c5d64722afccf7c4e2d81ae28d45f2c35b764281f1f08fec8f8e9277277ae1ae8a8981f85e041d2450afc9374e978f73b66da9aadb2087223f28e21e946eb07710ec86cdcad0948d4ca93827ea34e28806d172c3feb83471ed2d4d7ada2360b209d16b9d35861082d85b6be3c3589a6bdaf6f9b5d52ac8fd7388e32b24f1d5d34b5442c1ceebde311decd709f075d064f07bc60ab14c101ef51039eed56ae1e0a374e3e956603737b3a16db684a81e9b8998a0bb9b17a0876a92b2a3b9924f44b16ae4c7ff376ea8a8c91b504c1dbeb522cf846fc3ec6b9a01f452eeb35cade34c6a0463b92c46e013ee7906ee934141870ddd1464ae688805933504a2dc7cb1f947e28bf22f5eea6afb5de3b950056bf44065b84fd5589385d0feec4ef1db4fb4b595957130e575dc383e3686f4674143debb23e17b398f32683fb4805f297369d0e5f2e63af6891491e4e37186b4a3dffbbdcfff63d1fea4e12d24ef96fde3ed7a323a3605cdf5eaa43da738004556c2c20aa30c40079bc2e9ebe102c1fcf5259f1e3acc6b2a2bc9da4d0b1252433c58a1810581152a235e93deabf7f728eace350bcc4db4f249d4234bbd858c4e61a0eda4e3db0ae530c78eb63425502d651fd0cb986341ba69c44ede18eb3ebf25b2336cdda02447a9e20426d8206368c63b5fd6828612d3b99f627e331bab0009579de8270c36aa03861c300d34f2a3703870712325190073e6c17d8699f6744acb1b5468f93b57ab0366796181a4f543511d7ea2b32606c33cda61e81ed1c2194d305be47a3f1a9145d023620af12e79ec188573526ec35b9ce44e95fdb3530bd0431dd12a227d0ffe317cda1bbd787979261d6c9cf728b3d6bec3ba6ae15a595a30fc242bc5f25d837c1c642219afcfe043bb68a82965574b8b2139789235b262cf4af95a538e6954acf8e27ac3c95328df6e4bd615a376cd96bbc9e0d9802fbb40f80a848225e076219e26e0e63f57330b8bda69ec8dbd8b3272798cbfbb085b1885a1c22b3e2df2a879020ac1110b7af4f53ac97f556596ba0e164df0c85842026a87cf9631c9c9d851549efd8ca37e3b863e88436d5da5f4d3b5b5528e2d08d92b0d3ac6a06a0699653718e93a25b5afe254a068e300751eb6c67e3f5a1813d58d428f1ec108b88ec81444ccb50e8452941510c11f2e80bfd712f64b32b686c92ce922baf6c8eed1e9f0717a654d53b3ce1001880de80b5b15362b20286db9dfdf6c41f48aae84d5ab12ac45310f0eefc56e54113bcf95c1b2a259895af2ae9c679de4e2b898bf8a40a199a2059f8248c1303351dca3fb38906a682f66a94ee6ae6eafa7144758fabbaa60debd6eaaee7b2f1051781084b3c9d626263d011a3daf971b708750a77614753b89b5e1a77a52510ced5708083fb48c554dfd6aacfcf97650f3a3b3f97566050e76da968d4eceb83bc1e005ed1596d6e0ec5e2c90231e62496d7435ec5b28f805e3b7aefdd3718e4ff53065b8e4b15175d80eec59218d8278e711c6049bf6d62ae7069578e957135463d7616b37c1e4bf44d60dac6c7aa04cbbc4a64bb0cc0b059abb6b26f8ed5203232ddd8a6c5882e6e6c53068a71bc84c5834104e85bc96db2163798a3881929248b8c788e5bdc9e46e5f7f3f6ad43fad6fa381a0b924bd938702470b330fb90ba73d557c0d203d55edaed6e3a01aeb53b061dad57713ab27e1a9e0d06b534a65d85beb061bb5258bbb38179ea612a6f402affb8ca018ebf0d6f61d44d5a657c080c7d2dbc9b08c07713b17b0f173ada59b57abb401212f4f1fa026491b48d08cf46a704ab43e46de8ea596d68658523b61a156278b3b77bd1f4491381bfd874ed72b00675fd5b4b7c0ec13c6837434ba8e22230d32e7bb1287e488e14f5c5602cd4ca88012b244c7f23f4897e27027aa862ca139bc8b5fe14be7554832ab02e4ba19699a1e66825d94c7c44451062819a38d3376f0a3716b210c7adf4bfbbc303058aa2e054b3bd53539764f177b11b05451705550f90196997de3d1d480e500cd9d234078cb1a09c63d8911381d327402702c2765fe92b8ba3a0189b2b11b7460996c36eaae3ecb4f4e63bfafd7953ff086dfc0b12e616bbdca4707631467b830d244bd3f4371744bc8a4baac728a397818875d1b6a4a2f0d10be607122a6fe813f52e4456b8a5eb6c9ee0cf889f777a03cc26a055f9f259cfc4f8552b568a4b371260af062619dfb215ecfe7b318f8d627d2777bd5103d6ca2948d19d5812112962b63c2bf3d090ff19185dbc5ad49a580451de717c0baa288cd96669babe88a8b1ab6d0936c4c407878786695f46f59ef06c5c2166b661542c598b6e0551d490946182841184a7a0e669c6ccd73a342f65c4525dc7522dccab15fa72bd07588b5bca71635b9466ca72a504c74cca1c573e8d40d83d1b5c5326481ff8a2055a2e0fb997fe8e4787deaa2a8a57afe74a971e7f1f280895f2fc9d99c41416adef7b70ec47e7a12d0ca3c0ab1dba3c2d65bb172fde1fcd7f97692d3d8c9657e3277ce95947d59bf37dde3f35f7a5d76575f5c14caf7f0926c0896995a5f42efd0d38c42de202bea5b5db39bf697f9a96b54aefec723db523893186634763e7399bfa8029c2708dc817984528601c77a1d78bd4b2c85f10f5ca9363badcdab51a1b315cafa5c2ef64f60395f53efb9d60d89e1b2a5f147508c90d2b09476eee3cb9b5957669a77cd2c522909480dea9be3406d1779ffe4539f2e03efb5f8c2d040f0ea776ff869a36862246294d0ced556a129ef78327617052dc1ef5cfb4e5986ba2f0e063b90e1657d8977b58827a3c4e3d556eb3cf0540685f7c9eda461aa2ecc539fec3d2d56be99a518f11752f2be2f670c5fbe8010ac4eae0ede31c1a48f747ff2eac9fc069d3700a40bf5fcda80a3a4f5fa920f117a72de6da51195d2d7f0cc92ff7835bce2ba6b564832f582df56b24cf30c8297a826a4bbfe0afeb1da3e986b3d0a95509e0037d212a70178ecb246061e067238ea9238e4c4a9a7c6fc5dcba290970f50c52598423336c523f2de7580d059fb53934cb0beb208585e897fafeba30853e54badefa197478fe6b9f26ed0d33babb53acee7b7221d8e0cad7a6bd0d9383ced6391bf88ca7aa50c75c136075e87b92445f02fbbc92f7cb65fe2bbe0bf0c9fc2577da63a56f1efbeb276c1f4d01da6f6f7a842212d96dd45edcd2aee7f2c553ace15eb9336bb1804ec252998c5c8b25033894b05c01ce7c77b73ec0e239478c67d5378fe5a53fe6269025d54006e9bb1cbd09b81a39615517c609f3d74e377888f641587121f0f097b48d8be85800295ebab9407978a9cd379966577cb6e1f5261e4305696a2cdd50d8cb1964d3ae18ec730d40f9c782533efba47db8378c6aa15ce85985e211fff2659729599802a7b585cbef3a2762595f67e2054a0fb4457b146e7a656abb2c4b2387d760f7e5b8b7864132317d5ba29a662f50af8dc182d2fbe216db8e997ac856bc59855ca48999699cd6c5576cc47bf8a8c30638c7e08847e5083aa82068940409461d1065c2b53292d3ab145d5bb590bcd278e48ebd34920b18a2e1731c1855ae5a3ed637ff568d205a08cf98c58f5d79c99912e6c1ab257ece0d68ef13d69a56364419aac7df43f43d5faa9ad851c9810648f9050012e55475109ca3ada3452b78a7964377e0d862e022c73ca3ed6cee8c5fbb2d7c12f91c4851fea7c5b02e0a3c5364b7fcca110f20f8858465c498d7e9c6049417fc5c7d4e0059852a6d794af426e938a401cf43b2ba9f4f3f6f0f2eb710ecf3c0c36c4b3072597f805eca9cb14602292ec7d5601e6b1555c8d024aa4bb81a4cff98cb03725cb184ea7dbed6814106a1402bf68a2e51660af930a500d5530651a0dbf2fdc01a31a99be25350b5c8a5fe01155343d028c03e09009ef2c386a24eba8d842cac581402c8faec7dca1623afe25a230d8d4a8bd23df3cf12abedc2a50e387285acf1b3105011a2bdefb204a53b20be213b50f5244511f25852271e05c03fb9a799ac7ea675ffbde8de181368748a9707674e7e70f28a75e4036b6cf9e0693f91a65be4478b6630067ad8dae030a4b7b9784a206b2f7cfeeefc65aae11fc20190f4d6387bab05fa6e17f0bfbfb0c4f604878771aeace0676d12325e61b19a5317c4d4bb9fe6f3fc8b171f1116528b7cbcc4a91c26a729b512196828075f4d0aeac98887e2a6a19b4e1f1f66233962961c0d49df14c3e6123c9ec8dd7152ad045000107365fd5ed7ce6a6d65ae0736a7e227f77c9b0903d4589ac58ceb691583cdb93ae3fc792c886663cb7c5b0640deb66e29b3c69d2f1a3d1d47d7b672ee3c49e90bd406aa84a0189808924c4e67c5495b045e779c58ca65b42889f52d7315c66be3716dc8592b4875629cd0cb02c29d42bdf9ca5c16bc9051c2a6c09d0695bfba58c19a995838c022e9936c407d8999aa65e4a9d6d8eff99f8dcfac9b561375b6d1293441b9d32533161062c053c63ef09f6100cd748700a710f5bfc2a6297b15242b1f41e21bd004b885d6429a0d334a8c115f7d53d278dad24c9d295b97c50eb340d1e6d523f1757e2014c1605c3bd35f0cfdb74f79850423a37e2f95dfe41c56df09724d21065377f1818311f0c70aaf6fb2d4fc8d9eef576136617371d85481770ce9c390859eacfebba34e75a238ce80bcccadd6c42e8e186be3c15451131fbe9e345c05ab8e23f917d269686a9b5f06dd474f95757b9e5a3328416595539cbdfa69efa9702e5a268b1a70c6e5ff2c118a6e574bfecf17b1576e4f20fee566b0b2b5388476a68562991ac01412fa463b0f9e586ad4bde59e91a4b303268b5d8644cb7996cfbba422facd59875ed6ac057e563412255c412be0928a0b6fdb6f35d7008b5d5528ca796a4a69bd90b993a52da9c7d62f4b71a2763f822bb39f3ed39cc5ad5a4d51b5c27d31d105000f3f1e705ed5c42067106f3fe6d30151021bcab7f3a1ad9175b3d3644325aa676b9e057bf9d9aa3348b1d9b31bd639c59bb63f46a6c18794ae006db3b1ee20368160a82e26aee5a9fdc6b44df8be294f3ac0a1275e57ebf5e384b141ce89dd51aaf2248274468894645ba54bc4e6b9788b1eb5043c1f0dffe2e13c6179d0238d8cd037b6fe3e484445ab458fa09e4e8010d3288aa6e6cdbfba4b62c7984d058da8993d5de1df75a1ce8e3bd5875709fd2ede4cd5843e7102ed4031ed096a0c6e3ae9d522ad95ef4af83599507dd32fe3325819cdd7718c9797e921e6e365175e1dd53991edcd2baf27df8b1670d01967e97b3e3e75d297f908deedf2e3b91bd61973e8aa75a5a6f9db11525dd35556bbd13873602a320af74677832f93bd01f1e0631c882c8ab254a26b73a60a6c90cf9b96bd576e05b9befbce882c5d29198451bd15acaa894a5276ea9d870f49a33ee9d2429ef35a905b281deb75be54fa0c9e47be5876d7dce01986f2d0e7ae6df9b87a0ba6cfa55cec0c65dd386db5adc427eac18a00c9aded475417add4ebb8880ef3dd218a9ec3e6e13456f8de1630774e918fe5288dbaec3dd2a74698ec9e28ad573761b9e78af3d5c7a61e3eefc1a54c25bb841529b3fc9137836a2e7eff5ffae8e44f0257160da51ec0b3d144b92f1f43d2782513705baf5930903602d40cb4de87feca7243d2248a78a5d684e303ae147acc96e0b755eea77092b5f6efa723afc8a4240c75529dfe1c2fb75aa42d67e6b6c9a44c575738725815a9af1ced5", 0x2000, &(0x7f0000000340)={&(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x5040a, 0x7fff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc56161eaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce70bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bccb4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d791e8fb222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7e18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14808e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c37900002665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250934ab0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea00", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, 0x0, 0x0, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x5)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008202"])
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_pid(r4, 0x0, 0x0)
creat(&(0x7f00000002c0)='./file0/file0\x00', 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x2, 0x1, 0x0, 0x6, 0x47, 0x0, 0x70bd27, 0x25dfdbfc, [@sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_key={0x1f, 0x9, 0x750, 0x0, "39ad3a4a51b6dd4fd84cfa92af26e95fd9ad5b2a70481f94abe37b73b6862f997f43973723bb177fad44a10cb49d671881e4c6d018f088a0ef84f5949e4b058ba4e1e0b60cdd1eb6b8ac1c12f6d62f1c9738f0178d06ced277babd5477b52f151d1939a4793bf328eef7770fcf07c7d0e5e174caf02e0ea5bf31cdccef1b4b93672a469624f4adc9bc31843c4320e334ced35953f919533a017324b18c6a208666f67ba153efeea91422ea3b6f326fb07df1aa24df54167db462d3b9061e5d09c21abe89d5f243bd4850b04d66dc8ec3b26f9abc30b63ab4f8d20e4d72ce72b9de1a870d9c3371cc8ff8"}, @sadb_x_nat_t_type={0x1, 0x14, 0xb}, @sadb_sa={0x2, 0x1, 0x4d4, 0x40, 0xff, 0x9, 0x0, 0x80000000}, @sadb_ident={0x2, 0xb, 0x1, 0x0, 0x81}, @sadb_key={0x18, 0x8, 0x590, 0x0, "06e521b65c0db2eca9a5127086b343186df680536a8c11b7d52835767bef546a0d7d384945d0581786909d0fc6133e5f8a2680a73f31f0a3e74f2e2c3e3c1b75321638157015a2190f1c64df92c806c488c58ffd0d6aaeec0c2dbfbaadce8405e253122b836db0d417ba7f2f01bc766ad171ac3249d74e17fc874f8e93da01abb78d9a8425e9ce2d3ecd04d68f39eb87216f506537378f308b52fb68d3c33f91f0f7c8cab08a93a8b70d041bc62e86238769"}, @sadb_x_filter={0x5, 0x1a, @in=@loopback, @in=@empty, 0x2}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e21}, @sadb_x_nat_t_port={0x1, 0x0, 0x4e23}]}, 0x238}}, 0x40000)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r6, &(0x7f0000000400)={0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="000b8e0000008e099fee84b64bde36f9961000000000000000d4430ba51d8505c0df1160dc9c1b557cc3839ffd4a0f9c80df570011284d5698f1995b95d4dd344113dd197bc2aabb2c9fbcb8f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619cb556c4e9b4483b193de415c39c663fd08361b7ab60abd7cc254f04bbca9853709f06"], &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])

16.706386115s ago: executing program 3 (id=2971):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sync()
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r5}, 0x38)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYBLOB="421004000441020005001000040000000500210052000000110022002374a12bc6dc2f631bcd93e46600000008002e000300000008001c"], 0x64}}, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0)

12.837838851s ago: executing program 1 (id=2979):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x44, 0x0, 0x0, @private2, @mcast2, {[@fragment={0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x65}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741"}}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))

12.223186489s ago: executing program 1 (id=2981):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sync()
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10})
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYBLOB="421004000441020005001000040000000500210052000000110022002374a12bc6dc2f631bcd93e46600000008002e000300000008001c"], 0x64}}, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0)

11.339394869s ago: executing program 4 (id=2985):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e145802000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0xf0ff)

10.699961534s ago: executing program 4 (id=2986):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
keyctl$clear(0x3, 0xfffffffffffffffd)
keyctl$join(0x1, &(0x7f0000002200)={'syz', 0x2})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000140), 0x10)
sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
fsopen(0x0, 0x1)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x40010)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x8000000000000, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
symlink(0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000001a00), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0xc}}, 0x20)

10.368542812s ago: executing program 2 (id=2987):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c0007010000000000030000010000000400fc800c00018008000600ffff0000080002800400728008000900", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

8.966320172s ago: executing program 2 (id=2988):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000880)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0000000d0085a168d0bf46d32345653600648d270012000200000049935ade4a460c89b6ec2069e91b4123b243da377aaae6ac0cff3959547f509058ba86c902000000004a32000400160012000a0000000000", 0x78, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x1, 0x700, {0x0, 0x0, 0x0, 0x0, 0x2201}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040c0}, 0xc0b4)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r3, 0x800, 0x75507}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x20008010)
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000380)=""/176, 0xb0}, {&(0x7f0000000440)=""/233, 0xe9}, {&(0x7f0000000540)=""/237, 0xed}], 0x9, 0x40, 0x200)

7.94638421s ago: executing program 2 (id=2990):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x44, 0x0, 0x0, @private2, @mcast2, {[@fragment={0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x65}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741"}}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))

7.719980823s ago: executing program 2 (id=2991):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sync()
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r5}, 0x38)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYBLOB="421004000441020005001000040000000500210052000000110022002374a12bc6dc2f631bcd93e46600000008002e000300000008001c"], 0x64}}, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0)

7.143787935s ago: executing program 1 (id=2994):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000400)=@assoc_value={0x0, 0xe1}, 0x8)
mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', &(0x7f0000002100), 0x8880, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16=r0, @ANYRESHEX, @ANYRES64=r1, @ANYBLOB=',group_id=', @ANYRES64=r1])
r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
read$FUSE(r2, &(0x7f000001a240)={0x2020, 0x0, <r3=>0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r3, {0x7, 0x1f, 0x2, 0x210600, 0x8, 0x240, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}}, 0x50)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000600)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f00000002c0)=""/92, 0x5c}], 0x2}, 0x0)
recvfrom$inet6(r6, &(0x7f0000000680)=""/254, 0xfe, 0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0xffffffffffffffda}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r8 = syz_open_dev$vim2m(&(0x7f0000000780), 0x83, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x0, 0x1, 0x2, "8eb8a8e93b07f1dd06da7a41bfeac48048beb13efbba176fb1de26098c68d900", 0x32314d48})
r9 = dup2(r7, r0)
r10 = userfaultfd(0x800)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000007, 0x1, &(0x7f00000003c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
capget(&(0x7f0000000280)={0x19980330}, 0x0)
ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x46})
lseek(r9, 0x0, 0x4)
r11 = syz_open_procfs(r4, &(0x7f0000000240)='pagemap\x00')
pread64(r11, &(0x7f0000001240)=""/102384, 0x18ff0, 0x1000000000)
write$RDMA_USER_CM_CMD_GET_EVENT(r11, 0x0, 0x0)

6.623828687s ago: executing program 0 (id=2996):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x2b, 0x80801, 0x1)
unshare(0x22020600)
ppoll(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffdd)
close(r0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r0, 0x0, 0x0)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040218000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

6.531792549s ago: executing program 1 (id=2997):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
writev(r0, &(0x7f0000000780)=[{&(0x7f0000000800)='@', 0x1}, {&(0x7f0000000980)="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", 0x1000}], 0x2)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0xa00, 0xa00})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, 0x0, 0x0)
openat$audio(0xffffff9c, 0x0, 0x80, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000002c0)={0x48})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000100)=0x1)
syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x5b, 0x57, 0xd5, 0x20, 0xfd9, 0x2c, 0x7101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xfd, 0x20, 0x0, [{{0x9, 0x4, 0x8c, 0x0, 0x0, 0xf6, 0x7b, 0xbf}}]}}]}}, 0x0)

5.992929186s ago: executing program 4 (id=2998):
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201500242864220"], 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010300, 0x0, 0x2, 0x600, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb5245e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

5.623801436s ago: executing program 0 (id=2999):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000180)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x5e2796afef1a2f31, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000001, 0xffffffff, 0x7, 0x8, 0x5, 0x110, 0x3}]})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0x3)
ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000100)=0x10000)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ppoll(&(0x7f0000000040)=[{r4, 0x200}, {r4, 0x1000}], 0x2, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r3, 0x5402, &(0x7f00000000c0)={0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, "0400"})
ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000000))
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$sock_int(r5, 0x1, 0xa, &(0x7f0000000000)=0xfffffffe, 0x4)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)={0xe0, 0x15, 0x800, 0x70bd29, 0x25dfdbfc, {0x6, 0xa}, [@INET_DIAG_REQ_BYTECODE={0x9d, 0x1, "5e8a642d1e6c06681e731a0399f4afe4612e3bcac1e172156a0dcd71c24dd15226dbcbfec7ebf6370d3f13dc22641812a4bbad8f5b3960a5cc6cdf9ef57302ac318a235274afdd93dfc1551746b3e6032abdd875950435186b2e508c1ba23a990cc2454db7c321a484715323c89e891f7020f9a8fd2d83589413bb135050120ec1278ec70045c92a205ad1b8112fcd5d4b2993010f9a49336e"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "06addfa55d5c12d9a8477891d13b33455969ecd9bad365d8d85d2adb55"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, "fe"}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000084)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

4.608586651s ago: executing program 4 (id=3000):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
syz_emit_ethernet(0x7a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x44, 0x0, 0x0, @private2, @mcast2, {[@fragment={0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x65}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741"}}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))

4.431607639s ago: executing program 4 (id=3001):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
close(0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180))
socket$pppoe(0x18, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200))
sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x881)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) (async)
listen(r0, 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async)
close(0x3) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) (async)
socket$pppoe(0x18, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902"], 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_GET_MSRS(r4, 0xc048aeca, &(0x7f0000000200)) (async)
sendmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x170}}], 0x1, 0x881) (async)

4.393228868s ago: executing program 2 (id=3002):
r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/ip6_tables_matches\x00')
read$ptp(r0, &(0x7f0000000040)=""/148, 0x94)
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
pipe2(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4000)
readv(r3, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1)
close(r3)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x8, '\x00', r2, r3, 0x1, 0x2, 0x1}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', <r6=>r2, 0x1, 0x8, 0x6, 0x4, {{0x6, 0x4, 0x1, 0xa, 0x18, 0x68, 0x0, 0x10, 0x27, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@ra={0x94, 0x4}]}}}}})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x11, 0x8, 0x2, 0x8, 0x21, r5, 0xff, '\x00', r6, r4, 0x5, 0x5, 0x4}, 0x50)
r7 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r10=>0x0})
setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000040)={r10, 0x1, 0x2, @multicast}, 0x10)
setsockopt$packet_drop_memb(r9, 0x107, 0x2, &(0x7f0000000080)={r10, 0x1, 0x6, @multicast}, 0x10)
syz_usb_control_io$uac1(r7, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @string={0x4, 0x3, "13dc"}}}, 0x0)

4.189613872s ago: executing program 0 (id=3003):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x22, 0x2, 0x24)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
listen(0xffffffffffffffff, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
sync()
r4 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x5)
ioctl$VT_ACTIVATE(r4, 0x5606, 0x7)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e7400"], 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x11, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000004c0), 0x83f, r5}, 0x38)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000010000100"/20, @ANYBLOB="421004000441020005001000040000000500210052000000110022002374a12bc6dc2f631bcd93e46600000008002e000300000008001c"], 0x64}}, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x0)
epoll_create1(0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000180009000000000000000000020000006e00000100000000080005"], 0x24}}, 0x0)

3.021599336s ago: executing program 1 (id=3004):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0xc, 0x5, 0x0, 0x0, 0x0, 0x4, 0x400009, 0x8, 0xa, 0xcf}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r2, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)=0x82)
close(0xffffffffffffffff)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)=0x10000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
unshare(0x66000080)
r5 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
unshare(0x10000400)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010000000000000000141c"], 0x24}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f00000004c0)={0x0, 0x5f, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101010100000000000000000200ffff06001240000400003c0001800c00028005000100210000002c0001801400030000000000000000000000ffff0000000014000400bc01000000000000000000dd000000050c0019800800010005"], 0x64}}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8)

2.731824073s ago: executing program 4 (id=3005):
unshare(0x68040200)
setns(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r0 = socket$kcm(0x10, 0x2, 0x0)
rt_sigprocmask(0xa1, &(0x7f0000000100)={[0x100000003]}, 0x0, 0x8)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

531.167695ms ago: executing program 0 (id=3006):
open(&(0x7f0000000100)='./file0\x00', 0x820c0, 0x1a4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x40, 0x0, 0x0, @private2, @mcast2, {[@fragment={0x0, 0x0, 0x2a, 0x0, 0x0, 0x4, 0x65}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f1"}}}}}, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))

206.688717ms ago: executing program 2 (id=3007):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
futex_waitv(&(0x7f0000001b00)=[{0xfff, &(0x7f0000000340)=0xfffffffffffff697, 0x6}], 0x1, 0x0, 0x0, 0x1)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x2)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501)
ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0)
openat$cgroup_freezer_state(r4, &(0x7f00000000c0), 0x2, 0x0)
mkdirat$cgroup(r4, &(0x7f0000000000)='syz1\x00', 0x1ff)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x200)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xcc, r7, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x5, 0x34}}}}, [@NL80211_ATTR_KEY_SEQ={0x14, 0xa, "4872f5385d8900fe8d48322884e6b25e"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "05755ad5ba"}, @NL80211_ATTR_KEY={0x74, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4087e2a19e45df41b08171c414"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x12, 0x4, "c380018bf43447b8933b9fecec6e"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x24, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "dabd4e2ac4"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004084}, 0x200000c0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, <r9=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x0, 0x0]})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r5}, 0x0, 0x0}, 0x20)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
r10 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0xb, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc))
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000500)={0x7, 0xfffffffd, 0x8, 0x7, 0x6, 0x401, 0x1, 0xfffffffffffffffa, 0x9, 0xe09, 0x7f})
write$cgroup_pid(r4, &(0x7f0000000240)=r10, 0x12)

170.594249ms ago: executing program 0 (id=3008):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf0220000000000061114c000000000085000301610000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48)

0s ago: executing program 0 (id=3009):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x20000000000001cc, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
removexattr(0x0, 0x0)

kernel console output (not intermixed with test programs):

t from the descriptor's value: 66
[  813.078301][ T6639] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  813.168475][ T6639] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  813.180352][T14184] netlink: 'syz.3.2502': attribute type 2 has an invalid length.
[  813.228989][ T6639] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  813.238497][ T6639] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  813.246573][ T6639] usb 3-1: Product: syz
[  813.298210][ T6639] usb 3-1: Manufacturer: syz
[  813.349050][ T6639] cdc_wdm 3-1:1.0: skipping garbage
[  813.375095][ T6639] cdc_wdm 3-1:1.0: skipping garbage
[  813.418419][ T6639] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  813.458073][ T6639] cdc_wdm 3-1:1.0: Unknown control protocol
[  813.548150][T14199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  813.569094][T14199] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  814.858366][ T6645] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  815.186919][T14245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2516'.
[  815.240726][ T6645] usb 2-1: config 0 has no interfaces?
[  815.254186][ T6645] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  815.265271][ T6645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  815.277703][ T6645] usb 2-1: Product: syz
[  815.305224][ T6645] usb 2-1: Manufacturer: syz
[  815.350807][T14245] vlan2: entered promiscuous mode
[  815.396016][ T6645] usb 2-1: SerialNumber: syz
[  815.425936][ T6645] usb 2-1: config 0 descriptor??
[  815.472515][T14249] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2517'.
[  815.534579][T14249] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  815.638578][T14252] input: syz1 as /devices/virtual/input/input47
[  815.671957][T14252] program syz.0.2514 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  815.809981][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  815.894578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  815.901751][ T6645] usb 3-1: USB disconnect, device number 86
[  815.908306][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  815.962758][ T5198] ldm_validate_privheads(): Disk read failed.
[  815.981129][ T5198] Dev loop2: unable to read RDB block 3
[  816.000145][T14255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2520'.
[  816.015872][ T5198]  loop2: unable to read partition table
[  816.041676][ T5198] loop2: partition table beyond EOD, truncated
[  816.136434][T14259] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2518'.
[  816.308314][ T5198] ldm_validate_privheads(): Disk read failed.
[  816.321337][ T5198] Dev loop2: unable to read RDB block 3
[  816.340970][ T5198]  loop2: unable to read partition table
[  816.382867][ T5198] loop2: partition table beyond EOD, truncated
[  816.512991][T14267] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  816.520431][T14267] IPv6: NLM_F_CREATE should be set when creating new route
[  816.698181][ T6644] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  816.890038][ T6644] usb 3-1: Using ep0 maxpacket: 8
[  816.921374][ T6644] usb 3-1: too many configurations: 39, using maximum allowed: 8
[  816.942888][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  816.961549][ T6644] usb 3-1: config 0 has no interfaces?
[  816.979740][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.002069][ T6644] usb 3-1: config 0 has no interfaces?
[  817.017250][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.032336][ T6644] usb 3-1: config 0 has no interfaces?
[  817.045083][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.062595][ T6644] usb 3-1: config 0 has no interfaces?
[  817.076694][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.101973][ T6644] usb 3-1: config 0 has no interfaces?
[  817.117029][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.136579][ T6644] usb 3-1: config 0 has no interfaces?
[  817.177186][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.227102][ T6644] usb 3-1: config 0 has no interfaces?
[  817.241161][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  817.253758][ T6644] usb 3-1: config 0 has no interfaces?
[  817.263321][ T6644] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  817.286333][ T6644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.311586][ T6644] usb 3-1: config 0 descriptor??
[  817.378665][ T6639] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  817.398272][T14279] xt_hashlimit: max too large, truncated to 1048576
[  817.405621][T14279] xt_bpf: check failed: parse error
[  817.688596][T14266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  817.725352][ T6639] usb 5-1: device descriptor read/64, error -71
[  817.726142][T14266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  817.827766][T14266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  817.889942][T14266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  817.970285][ T5913] usb 3-1: USB disconnect, device number 87
[  817.988739][ T6639] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  818.196936][T14289] xt_hashlimit: max too large, truncated to 1048576
[  818.205519][T14289] xt_bpf: check failed: parse error
[  818.236701][ T6639] usb 5-1: device descriptor read/64, error -71
[  818.888749][ T6639] usb usb5-port1: attempt power cycle
[  819.094823][ T5913] usb 2-1: USB disconnect, device number 115
[  819.192771][ T5198] ldm_validate_privheads(): Disk read failed.
[  819.202976][ T5198] Dev loop2: unable to read RDB block 3
[  819.218518][ T5198]  loop2: unable to read partition table
[  819.230682][ T5198] loop2: partition table beyond EOD, truncated
[  819.371199][ T6639] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  819.418189][ T6639] usb 5-1: device descriptor read/8, error -71
[  819.690166][ T6639] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  819.740572][ T6639] usb 5-1: device descriptor read/8, error -71
[  819.849284][ T6639] usb usb5-port1: unable to enumerate USB device
[  819.973904][ T5198] ldm_validate_privheads(): Disk read failed.
[  819.998223][T14300] loop6: detected capacity change from 0 to 7
[  820.019228][ T5198] Dev loop2: unable to read RDB block 3
[  820.027903][T14300] Dev loop6: unable to read RDB block 7
[  820.058132][T14300]  loop6: unable to read partition table
[  820.066653][T14300] loop6: partition table beyond EOD, truncated
[  820.074838][ T5198]  loop2: unable to read partition table
[  820.085868][ T5198] loop2: partition table beyond EOD, truncated
[  820.101883][T14300] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  820.322384][ T5198] ldm_validate_privheads(): Disk read failed.
[  820.337131][T14307] netlink: 'syz.4.2531': attribute type 4 has an invalid length.
[  820.354685][ T5198] Dev loop2: unable to read RDB block 3
[  820.373011][ T5198]  loop2: unable to read partition table
[  820.390991][ T5198] loop2: partition table beyond EOD, truncated
[  820.579268][ T5198] ldm_validate_privheads(): Disk read failed.
[  820.597848][ T5198] Dev loop2: unable to read RDB block 3
[  820.608679][ T5198]  loop2: unable to read partition table
[  820.620628][ T5198] loop2: partition table beyond EOD, truncated
[  820.826132][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2534'.
[  820.835507][T14321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2534'.
[  820.980638][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2537'.
[  821.000199][T14326] input: syz1 as /devices/virtual/input/input48
[  821.015354][T14325] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  821.035625][T14326] program syz.1.2535 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  821.166479][T14329] netlink: 'syz.0.2538': attribute type 11 has an invalid length.
[  821.253814][ T5198] ldm_validate_privheads(): Disk read failed.
[  821.347636][ T5198] Dev loop2: unable to read RDB block 3
[  821.372309][ T5198]  loop2: unable to read partition table
[  821.404420][ T5198] loop2: partition table beyond EOD, truncated
[  821.500768][T14334] xt_hashlimit: size too large, truncated to 1048576
[  822.222214][ T5198] ldm_validate_privheads(): Disk read failed.
[  822.239275][ T5198] Dev loop2: unable to read RDB block 3
[  822.261044][ T5198]  loop2: unable to read partition table
[  822.298730][ T5198] loop2: partition table beyond EOD, truncated
[  823.125158][ T5198] ldm_validate_privheads(): Disk read failed.
[  823.235694][ T5198] Dev loop2: unable to read RDB block 3
[  823.261818][ T5198]  loop2: unable to read partition table
[  823.268798][ T5198] loop2: partition table beyond EOD, truncated
[  823.348342][T10529] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  823.605195][T14371] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(13)
[  823.611909][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  823.622904][T14371] vhci_hcd vhci_hcd.0: Device attached
[  823.644506][T14371] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(15)
[  823.651330][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  823.668287][T10529] usb 5-1: Using ep0 maxpacket: 32
[  823.673935][T14371] vhci_hcd vhci_hcd.0: Device attached
[  823.688161][T10529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  823.699662][T14371] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(18)
[  823.706368][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  823.717880][T10529] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  823.717904][T14371] vhci_hcd vhci_hcd.0: Device attached
[  823.753712][T14371] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(21)
[  823.760399][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  823.775976][T14371] vhci_hcd vhci_hcd.0: Device attached
[  823.790546][T10529] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  823.884142][ T5913] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  823.892749][T14371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  823.908613][T10529] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  823.923826][T10529] usb 5-1: config 0 descriptor??
[  823.942605][T14383] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  823.959285][T14371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  823.995344][T14371] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(34)
[  824.002042][T14371] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  824.058481][T14371] vhci_hcd vhci_hcd.0: Device attached
[  824.059512][T14380] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(23)
[  824.070720][T14380] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  824.152753][T14380] vhci_hcd vhci_hcd.0: Device attached
[  824.249724][T14376] vhci_hcd: connection closed
[  824.250046][T14378] vhci_hcd: connection closed
[  824.279797][T10158] vhci_hcd: stop threads
[  824.300240][T14374] vhci_hcd: connection closed
[  824.300560][T14372] vhci_hcd: connection reset by peer
[  824.387785][T14389] netlink: 'syz.0.2550': attribute type 4 has an invalid length.
[  824.456385][T14381] vhci_hcd: connection closed
[  824.465338][T10158] vhci_hcd: release socket
[  824.486419][T10158] vhci_hcd: disconnect device
[  824.502077][T10158] vhci_hcd: stop threads
[  824.515279][T10158] vhci_hcd: release socket
[  824.528299][T10158] vhci_hcd: disconnect device
[  824.554772][ T5198] ldm_validate_privheads(): Disk read failed.
[  824.561612][ T5198] Dev loop2: unable to read RDB block 3
[  824.587039][ T5198]  loop2: unable to read partition table
[  824.593568][T10158] vhci_hcd: stop threads
[  824.603687][T10158] vhci_hcd: release socket
[  824.610415][ T5198] loop2: partition table beyond EOD, truncated
[  824.631636][T10529] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  824.633112][T10158] vhci_hcd: disconnect device
[  824.685215][T10158] vhci_hcd: stop threads
[  824.723477][T10158] vhci_hcd: release socket
[  824.747676][T10158] vhci_hcd: disconnect device
[  824.766064][T10158] vhci_hcd: stop threads
[  824.842579][T10158] vhci_hcd: release socket
[  824.908671][T10158] vhci_hcd: disconnect device
[  825.101866][ T5198] ldm_validate_privheads(): Disk read failed.
[  825.112048][T14384] vhci_hcd: connection closed
[  825.141364][   T13] vhci_hcd: stop threads
[  825.153182][   T13] vhci_hcd: release socket
[  825.163345][ T5198] Dev loop2: unable to read RDB block 3
[  825.186625][   T13] vhci_hcd: disconnect device
[  825.207159][ T5198]  loop2: unable to read partition table
[  825.238459][ T5198] loop2: partition table beyond EOD, truncated
[  825.430292][ T5198] ldm_validate_privheads(): Disk read failed.
[  825.450195][ T5198] Dev loop2: unable to read RDB block 3
[  825.455834][ T5198]  loop2: unable to read partition table
[  825.479299][ T5198] loop2: partition table beyond EOD, truncated
[  825.494834][   T30] audit: type=1326 audit(1750900188.090:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14398 comm="syz.3.2554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc8cd8e929 code=0x0
[  825.885728][ T5198] ldm_validate_privheads(): Disk read failed.
[  825.892428][ T5198] Dev loop2: unable to read RDB block 3
[  825.907782][ T5198]  loop2: unable to read partition table
[  825.922880][ T5198] loop2: partition table beyond EOD, truncated
[  825.968563][ T6645] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  827.362957][ T6646] usb 5-1: USB disconnect, device number 116
[  827.388136][ T6645] usb 2-1: Using ep0 maxpacket: 32
[  827.579668][ T6645] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  827.618074][ T6645] usb 2-1: config 0 has no interface number 0
[  827.634705][ T6645] usb 2-1: config 0 interface 184 has no altsetting 0
[  827.637236][T14414] FAULT_INJECTION: forcing a failure.
[  827.637236][T14414] name failslab, interval 1, probability 0, space 0, times 0
[  827.646720][ T6645] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  827.699444][ T6645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  827.717301][ T6645] usb 2-1: Product: syz
[  827.730937][ T6645] usb 2-1: Manufacturer: syz
[  827.741610][ T6645] usb 2-1: SerialNumber: syz
[  827.808268][T14414] CPU: 1 UID: 0 PID: 14414 Comm: syz.2.2557 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  827.808307][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  827.808322][T14414] Call Trace:
[  827.808331][T14414]  <TASK>
[  827.808340][T14414]  dump_stack_lvl+0x189/0x250
[  827.808387][T14414]  ? __pfx____ratelimit+0x10/0x10
[  827.808417][T14414]  ? __pfx_dump_stack_lvl+0x10/0x10
[  827.808441][T14414]  ? __pfx__printk+0x10/0x10
[  827.808463][T14414]  ? __pfx___might_resched+0x10/0x10
[  827.808487][T14414]  ? fs_reclaim_acquire+0x7d/0x100
[  827.808511][T14414]  should_fail_ex+0x414/0x560
[  827.808538][T14414]  should_failslab+0xa8/0x100
[  827.808557][T14414]  __kmalloc_noprof+0xcb/0x4f0
[  827.808572][T14414]  ? kfree+0x4d/0x440
[  827.808592][T14414]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  827.808619][T14414]  tomoyo_realpath_from_path+0xe3/0x5d0
[  827.808641][T14414]  ? tomoyo_domain+0xd9/0x130
[  827.808668][T14414]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  827.808685][T14414]  tomoyo_path_number_perm+0x1e8/0x5a0
[  827.808704][T14414]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  827.808734][T14414]  ? __lock_acquire+0xab9/0xd20
[  827.808772][T14414]  ? __fget_files+0x2a/0x420
[  827.808793][T14414]  ? __fget_files+0x2a/0x420
[  827.808808][T14414]  ? __fget_files+0x3a0/0x420
[  827.808823][T14414]  ? __fget_files+0x2a/0x420
[  827.808843][T14414]  security_file_ioctl+0xcb/0x2d0
[  827.808862][T14414]  __se_sys_ioctl+0x47/0x170
[  827.808888][T14414]  do_syscall_64+0xfa/0x3b0
[  827.808901][T14414]  ? lockdep_hardirqs_on+0x9c/0x150
[  827.808923][T14414]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.808938][T14414]  ? clear_bhb_loop+0x60/0xb0
[  827.808957][T14414]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  827.808971][T14414] RIP: 0033:0x7f31fb58e929
[  827.808987][T14414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  827.809000][T14414] RSP: 002b:00007f31fc464038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  827.809017][T14414] RAX: ffffffffffffffda RBX: 00007f31fb7b5fa0 RCX: 00007f31fb58e929
[  827.809029][T14414] RDX: 0000200000000000 RSI: 0000000000005393 RDI: 0000000000000007
[  827.809039][T14414] RBP: 00007f31fc464090 R08: 0000000000000000 R09: 0000000000000000
[  827.809049][T14414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  827.809058][T14414] R13: 0000000000000000 R14: 00007f31fb7b5fa0 R15: 00007f31fb8dfa28
[  827.809081][T14414]  </TASK>
[  827.809146][T14414] ERROR: Out of memory at tomoyo_realpath_from_path.
[  828.104622][ T6645] usb 2-1: config 0 descriptor??
[  828.274105][ T6645] smsc75xx v1.0.0
[  828.313436][ T6645] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  828.385662][T14424] input: syz1 as /devices/virtual/input/input49
[  828.423317][T14424] program syz.4.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  828.695963][ T5198] ldm_validate_privheads(): Disk read failed.
[  828.711141][ T6645] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  828.823909][ T5198] Dev loop2: unable to read RDB block 3
[  828.835083][T14426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2560'.
[  828.845353][ T5198]  loop2: unable to read partition table
[  828.855422][ T5198] loop2: partition table beyond EOD, truncated
[  828.998521][ T5913] vhci_hcd: vhci_device speed not set
[  829.004771][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2563'.
[  829.024663][T14428] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  829.236965][ T6645] usb 2-1: USB disconnect, device number 116
[  829.289383][ T5198] ldm_validate_privheads(): Disk read failed.
[  829.295693][ T5198] Dev loop2: unable to read RDB block 3
[  829.318545][ T5198]  loop2: unable to read partition table
[  829.324635][ T5198] loop2: partition table beyond EOD, truncated
[  829.376187][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'.
[  829.427452][T14435] openvswitch: : Dropping previously announced user features
[  829.674298][T14439] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2567'.
[  830.028470][T14451] netlink: 'syz.3.2562': attribute type 11 has an invalid length.
[  830.029025][T14453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2570'.
[  830.067027][ T5198] ldm_validate_privheads(): Disk read failed.
[  830.073988][ T5198] Dev loop2: unable to read RDB block 3
[  830.091627][ T5198]  loop2: unable to read partition table
[  830.097668][ T5198] loop2: partition table beyond EOD, truncated
[  830.331272][ T5198] ldm_validate_privheads(): Disk read failed.
[  830.338279][ T6645] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  830.364732][ T5198] Dev loop2: unable to read RDB block 3
[  830.373058][ T6644] usb usb36-port1: attempt power cycle
[  830.396224][ T5198]  loop2: unable to read partition table
[  830.416922][ T5198] loop2: partition table beyond EOD, truncated
[  830.529012][ T6645] usb 5-1: Using ep0 maxpacket: 8
[  830.561779][ T6645] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  830.575122][ T6645] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  830.599640][ T6645] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  830.607764][ T6645] usb 5-1: Product: syz
[  830.672942][ T6645] usb 5-1: Manufacturer: syz
[  830.686025][ T6645] usb 5-1: SerialNumber: syz
[  830.718592][ T6645] usb 5-1: config 0 descriptor??
[  830.787071][T14471] tc_dump_action: action bad kind
[  830.849946][T14475] bridge0: port 1(ip6gretap0) entered blocking state
[  830.857419][T14475] bridge0: port 1(ip6gretap0) entered disabled state
[  830.868699][T14475] ip6gretap0: entered allmulticast mode
[  830.875792][T14475] ip6gretap0: entered promiscuous mode
[  830.915477][T14475] bridge0: port 1(ip6gretap0) entered blocking state
[  830.916400][T14476] trusted_key: encrypted_key: insufficient parameters specified
[  830.922557][T14475] bridge0: port 1(ip6gretap0) entered forwarding state
[  830.958885][ T6644] usb usb36-port1: unable to enumerate USB device
[  831.097846][T14484] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2580'.
[  831.284939][T14492] input: syz1 as /devices/virtual/input/input50
[  831.399434][T14492] program syz.1.2581 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  831.540045][ T5198] ldm_validate_privheads(): Disk read failed.
[  831.546486][ T5198] Dev loop2: unable to read RDB block 3
[  831.561623][ T5198]  loop2: unable to read partition table
[  831.576999][ T5198] loop2: partition table beyond EOD, truncated
[  831.691725][T14498] netlink: 'syz.3.2585': attribute type 11 has an invalid length.
[  831.801758][T14501] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2586'.
[  832.020944][ T5198] ldm_validate_privheads(): Disk read failed.
[  832.033309][ T5198] Dev loop2: unable to read RDB block 3
[  832.058983][ T5198]  loop2: unable to read partition table
[  832.065152][ T5198] loop2: partition table beyond EOD, truncated
[  832.252407][ T5198] ldm_validate_privheads(): Disk read failed.
[  832.272081][ T5198] Dev loop2: unable to read RDB block 3
[  832.302374][ T5198]  loop2: unable to read partition table
[  832.318392][ T5198] loop2: partition table beyond EOD, truncated
[  832.505155][ T5198] ldm_validate_privheads(): Disk read failed.
[  832.514471][ T5198] Dev loop2: unable to read RDB block 3
[  832.524825][ T5198]  loop2: unable to read partition table
[  832.539480][ T5198] loop2: partition table beyond EOD, truncated
[  832.857642][T14524] xt_recent: Unsupported userspace flags (000000de)
[  833.348699][ T5913] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  833.395140][T14545] netlink: 'syz.3.2597': attribute type 11 has an invalid length.
[  833.557291][ T5913] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  833.584830][ T5198] ldm_validate_privheads(): Disk read failed.
[  833.597329][ T5913] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  833.640521][ T5198] Dev loop2: unable to read RDB block 3
[  833.655738][ T5198]  loop2: unable to read partition table
[  833.661750][ T5913] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  833.676127][ T5198] loop2: partition table beyond EOD, truncated
[  833.688043][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  833.723155][ T5913] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  833.940598][T14559] xt_hashlimit: max too large, truncated to 1048576
[  833.947835][T14559] xt_bpf: check failed: parse error
[  833.996611][ T6644] usb 5-1: USB disconnect, device number 117
[  834.127139][T14538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2593'.
[  834.155071][ T5913] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  834.354625][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  835.134511][T14570] netlink: 'syz.0.2602': attribute type 13 has an invalid length.
[  835.260552][T14570] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2602'.
[  835.600403][T14576] program syz.3.2603 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  836.058587][ T6639] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  836.132053][ T5198] ldm_validate_privheads(): Disk read failed.
[  836.168580][ T5198] Dev loop2: unable to read RDB block 3
[  836.210068][ T5198]  loop2: unable to read partition table
[  836.238340][ T5198] loop2: partition table beyond EOD, truncated
[  836.279530][ T6639] usb 5-1: Using ep0 maxpacket: 16
[  836.310259][ T6639] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  836.371959][ T6639] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  836.413698][ T6639] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  836.424014][ T6639] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  836.442098][ T6639] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  836.460948][ T6639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  836.484834][ T6639] usb 5-1: Product: syz
[  836.510217][ T6639] usb 5-1: Manufacturer: syz
[  836.551719][ T6639] usb 5-1: SerialNumber: syz
[  836.617866][ T6639] usb 5-1: config 0 descriptor??
[  836.641500][ T6639] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  836.837916][ T6639] usb 5-1: USB disconnect, device number 118
[  837.057316][ T6645] usb 2-1: USB disconnect, device number 117
[  837.092678][T14535] delete_channel: no stack
[  837.228730][T14597] netlink: 'syz.1.2608': attribute type 11 has an invalid length.
[  837.512607][ T5198] ldm_validate_privheads(): Disk read failed.
[  837.539776][T14609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2613'.
[  837.558351][ T5198] Dev loop2: unable to read RDB block 3
[  837.565031][ T5198]  loop2: unable to read partition table
[  837.578312][ T5198] loop2: partition table beyond EOD, truncated
[  837.598703][T14609] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  837.688732][T14607] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  837.802142][ T5198] ldm_validate_privheads(): Disk read failed.
[  837.821532][ T5198] Dev loop2: unable to read RDB block 3
[  837.833914][ T5198]  loop2: unable to read partition table
[  837.843769][T14619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2618'.
[  837.857902][ T5198] loop2: partition table beyond EOD, truncated
[  837.964817][T14619] ip6gretap0: entered promiscuous mode
[  837.977878][T14619] ip6gretap0: left promiscuous mode
[  837.978248][ T6639] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  838.034393][T14623] input: syz1 as /devices/virtual/input/input52
[  838.046615][T14623] program syz.2.2619 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  838.183962][ T6639] usb 4-1: config 0 has an invalid interface number: 117 but max is 0
[  838.237012][ T6639] usb 4-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config
[  838.327339][ T6639] usb 4-1: config 0 has no interface number 0
[  838.360802][ T6639] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xA has an invalid bInterval 97, changing to 10
[  838.461602][ T6639] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0xA has invalid maxpacket 24677, setting to 1024
[  838.490441][ T6639] usb 4-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  838.564538][ T6639] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  838.592093][ T6639] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  838.634381][ T6639] usb 4-1: Product: syz
[  838.652003][ T6639] usb 4-1: Manufacturer: syz
[  838.669961][ T6639] usb 4-1: SerialNumber: syz
[  838.784205][ T6639] usb 4-1: config 0 descriptor??
[  839.037219][ T6639] usb 4-1: USB disconnect, device number 89
[  839.832833][ T5198] ldm_validate_privheads(): Disk read failed.
[  839.852237][ T5198] Dev loop2: unable to read RDB block 3
[  839.869440][ T5198]  loop2: unable to read partition table
[  839.875546][ T5198] loop2: partition table beyond EOD, truncated
[  840.165421][ T5198] ldm_validate_privheads(): Disk read failed.
[  840.178798][ T5198] Dev loop2: unable to read RDB block 3
[  840.184510][ T5198]  loop2: unable to read partition table
[  840.229361][ T5198] loop2: partition table beyond EOD, truncated
[  840.357540][T14664] input: syz1 as /devices/virtual/input/input54
[  840.472225][ T6645] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  840.489679][ T5198] ldm_validate_privheads(): Disk read failed.
[  840.521028][ T5198] Dev loop2: unable to read RDB block 3
[  840.565291][ T5198]  loop2: unable to read partition table
[  840.573080][ T5198] loop2: partition table beyond EOD, truncated
[  840.573720][T14671] FAULT_INJECTION: forcing a failure.
[  840.573720][T14671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  840.639838][ T6645] usb 2-1: Using ep0 maxpacket: 16
[  840.655473][T14671] CPU: 1 UID: 0 PID: 14671 Comm: syz.0.2639 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  840.655508][T14671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  840.655521][T14671] Call Trace:
[  840.655535][T14671]  <TASK>
[  840.655546][T14671]  dump_stack_lvl+0x189/0x250
[  840.655591][T14671]  ? __pfx____ratelimit+0x10/0x10
[  840.655623][T14671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  840.655654][T14671]  ? __pfx__printk+0x10/0x10
[  840.655679][T14671]  ? __might_fault+0xb0/0x130
[  840.655714][T14671]  should_fail_ex+0x414/0x560
[  840.655748][T14671]  _copy_from_user+0x2d/0xb0
[  840.655774][T14671]  snd_pcm_oss_write+0x84f/0x11a0
[  840.655832][T14671]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  840.655864][T14671]  ? bpf_lsm_file_permission+0x9/0x20
[  840.655894][T14671]  ? security_file_permission+0x75/0x290
[  840.655920][T14671]  ? rw_verify_area+0x258/0x650
[  840.655953][T14671]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  840.655984][T14671]  vfs_write+0x27e/0xa90
[  840.656025][T14671]  ? __pfx_vfs_write+0x10/0x10
[  840.656066][T14671]  ? __fget_files+0x2a/0x420
[  840.656093][T14671]  ? __fget_files+0x2a/0x420
[  840.656114][T14671]  ? __fget_files+0x3a0/0x420
[  840.656135][T14671]  ? __fget_files+0x2a/0x420
[  840.656167][T14671]  ksys_write+0x145/0x250
[  840.656190][T14671]  ? __pfx_ksys_write+0x10/0x10
[  840.656214][T14671]  ? do_syscall_64+0xbe/0x3b0
[  840.656238][T14671]  do_syscall_64+0xfa/0x3b0
[  840.656255][T14671]  ? lockdep_hardirqs_on+0x9c/0x150
[  840.656286][T14671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.656308][T14671]  ? clear_bhb_loop+0x60/0xb0
[  840.656331][T14671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.656350][T14671] RIP: 0033:0x7f579df8e929
[  840.656370][T14671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  840.656387][T14671] RSP: 002b:00007f579ed24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  840.656410][T14671] RAX: ffffffffffffffda RBX: 00007f579e1b5fa0 RCX: 00007f579df8e929
[  840.656424][T14671] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003
[  840.656438][T14671] RBP: 00007f579ed24090 R08: 0000000000000000 R09: 0000000000000000
[  840.656450][T14671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  840.656462][T14671] R13: 0000000000000000 R14: 00007f579e1b5fa0 R15: 00007f579e2dfa28
[  840.656495][T14671]  </TASK>
[  840.942451][ T5198] ldm_validate_privheads(): Disk read failed.
[  841.069199][ T6645] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  841.077494][ T6645] usb 2-1: config 0 has no interface number 0
[  841.090683][ T5198] Dev loop2: unable to read RDB block 3
[  841.096551][ T5198]  loop2: unable to read partition table
[  841.106791][ T5198] loop2: partition table beyond EOD, truncated
[  841.113883][ T6645] usb 2-1: New USB device found, idVendor=0846, idProduct=9041, bcdDevice=91.0a
[  841.123364][ T6645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  841.136381][ T6645] usb 2-1: Product: syz
[  841.141169][ T6645] usb 2-1: Manufacturer: syz
[  841.145948][ T6645] usb 2-1: SerialNumber: syz
[  841.154049][ T6645] usb 2-1: config 0 descriptor??
[  841.245068][ T5198] ldm_validate_privheads(): Disk read failed.
[  841.265582][ T5198] Dev loop2: unable to read RDB block 3
[  841.275671][ T5198]  loop2: unable to read partition table
[  841.287165][ T5198] loop2: partition table beyond EOD, truncated
[  841.628977][T14689] input: syz1 as /devices/virtual/input/input55
[  841.714926][ T6639] usb 5-1: new full-speed USB device number 119 using dummy_hcd
[  841.869229][ T6645] usb 2-1: USB disconnect, device number 118
[  841.892701][T14689] program syz.2.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  841.971653][ T6639] usb 5-1: config 0 has no interfaces?
[  841.990528][ T6639] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  842.013700][ T6639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  842.024752][ T6639] usb 5-1: Product: syz
[  842.115804][ T6639] usb 5-1: Manufacturer: syz
[  842.137924][ T6639] usb 5-1: SerialNumber: syz
[  842.198669][ T6639] usb 5-1: config 0 descriptor??
[  842.516090][T14682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  842.527747][T14682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  843.405778][T14713] batadv_slave_0: entered promiscuous mode
[  843.608364][T14715] netlink: 'syz.0.2651': attribute type 4 has an invalid length.
[  844.042584][ T5198] ldm_validate_privheads(): Disk read failed.
[  844.070556][ T5198] Dev loop2: unable to read RDB block 3
[  844.076200][ T5198]  loop2: unable to read partition table
[  844.140864][ T5198] loop2: partition table beyond EOD, truncated
[  844.160681][T14711] batadv_slave_0: left promiscuous mode
[  844.413071][ T5198] ldm_validate_privheads(): Disk read failed.
[  844.437232][ T5198] Dev loop2: unable to read RDB block 3
[  844.477886][ T5198]  loop2: unable to read partition table
[  844.488620][ T5198] loop2: partition table beyond EOD, truncated
[  844.697628][ T6639] usb 5-1: USB disconnect, device number 119
[  844.836049][ T6646] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  844.989142][ T6646] usb 3-1: Using ep0 maxpacket: 8
[  845.008392][ T6646] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  845.028290][ T6646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  845.051328][ T6646] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  845.077318][ T6646] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  845.090155][ T6646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  845.100951][ T6646] usb 3-1: Product: syz
[  845.110071][ T6646] usb 3-1: Manufacturer: syz
[  845.114845][ T6646] usb 3-1: SerialNumber: syz
[  845.138993][ T6646] usb 3-1: config 0 descriptor??
[  845.159157][T14728] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  845.230071][T14742] xt_hashlimit: size too large, truncated to 1048576
[  845.401752][ T6645] usb 3-1: USB disconnect, device number 88
[  845.422359][T14748] input: syz1 as /devices/virtual/input/input56
[  845.457283][T14748] program syz.3.2662 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  846.361158][ T5198] ldm_validate_privheads(): Disk read failed.
[  846.384628][ T5198] Dev loop2: unable to read RDB block 3
[  846.397297][ T5198]  loop2: unable to read partition table
[  846.468578][ T5198] loop2: partition table beyond EOD, truncated
[  846.731112][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2665'.
[  846.740252][T14760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'.
[  846.989999][ T5198] ldm_validate_privheads(): Disk read failed.
[  847.029794][ T5198] Dev loop2: unable to read RDB block 3
[  847.035526][ T5198]  loop2: unable to read partition table
[  847.077298][ T5198] loop2: partition table beyond EOD, truncated
[  847.105147][T14769] FAULT_INJECTION: forcing a failure.
[  847.105147][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  847.154700][T14769] CPU: 0 UID: 0 PID: 14769 Comm: syz.2.2669 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  847.154737][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  847.154758][T14769] Call Trace:
[  847.154769][T14769]  <TASK>
[  847.154779][T14769]  dump_stack_lvl+0x189/0x250
[  847.154819][T14769]  ? __pfx____ratelimit+0x10/0x10
[  847.154851][T14769]  ? __pfx_dump_stack_lvl+0x10/0x10
[  847.154882][T14769]  ? __pfx__printk+0x10/0x10
[  847.154904][T14769]  ? __might_fault+0xb0/0x130
[  847.154935][T14769]  should_fail_ex+0x414/0x560
[  847.154967][T14769]  _copy_from_user+0x2d/0xb0
[  847.154989][T14769]  snd_pcm_oss_write+0x84f/0x11a0
[  847.155041][T14769]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  847.155072][T14769]  ? bpf_lsm_file_permission+0x9/0x20
[  847.155100][T14769]  ? security_file_permission+0x75/0x290
[  847.155125][T14769]  ? rw_verify_area+0x258/0x650
[  847.155155][T14769]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  847.155187][T14769]  vfs_write+0x27e/0xa90
[  847.155228][T14769]  ? __pfx_vfs_write+0x10/0x10
[  847.155261][T14769]  ? __fget_files+0x2a/0x420
[  847.155286][T14769]  ? __fget_files+0x2a/0x420
[  847.155307][T14769]  ? __fget_files+0x3a0/0x420
[  847.155328][T14769]  ? __fget_files+0x2a/0x420
[  847.155360][T14769]  ksys_write+0x145/0x250
[  847.155382][T14769]  ? __pfx_ksys_write+0x10/0x10
[  847.155397][T14769]  ? rcu_is_watching+0x15/0xb0
[  847.155433][T14769]  ? do_syscall_64+0xbe/0x3b0
[  847.155456][T14769]  do_syscall_64+0xfa/0x3b0
[  847.155473][T14769]  ? lockdep_hardirqs_on+0x9c/0x150
[  847.155501][T14769]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.155520][T14769]  ? clear_bhb_loop+0x60/0xb0
[  847.155544][T14769]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  847.155564][T14769] RIP: 0033:0x7f31fb58e929
[  847.155584][T14769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  847.155602][T14769] RSP: 002b:00007f31fc464038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  847.155625][T14769] RAX: ffffffffffffffda RBX: 00007f31fb7b5fa0 RCX: 00007f31fb58e929
[  847.155647][T14769] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003
[  847.155662][T14769] RBP: 00007f31fc464090 R08: 0000000000000000 R09: 0000000000000000
[  847.155675][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  847.155686][T14769] R13: 0000000000000000 R14: 00007f31fb7b5fa0 R15: 00007f31fb8dfa28
[  847.155719][T14769]  </TASK>
[  848.041573][ T5198] ldm_validate_privheads(): Disk read failed.
[  848.161785][ T5198] Dev loop2: unable to read RDB block 3
[  848.167705][ T5198]  loop2: unable to read partition table
[  848.244262][ T5198] loop2: partition table beyond EOD, truncated
[  848.616113][ T5198] ldm_validate_privheads(): Disk read failed.
[  848.663421][ T5198] Dev loop2: unable to read RDB block 3
[  848.671130][ T5198]  loop2: unable to read partition table
[  848.677304][ T5198] loop2: partition table beyond EOD, truncated
[  849.030632][ T5198] ldm_validate_privheads(): Disk read failed.
[  849.079679][ T5198] Dev loop2: unable to read RDB block 3
[  849.121653][ T5198]  loop2: unable to read partition table
[  849.160851][ T5198] loop2: partition table beyond EOD, truncated
[  849.318881][ T6639] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  849.499065][ T6639] usb 3-1: device descriptor read/64, error -71
[  849.748321][ T6639] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  849.931453][T14810] input: syz1 as /devices/virtual/input/input57
[  849.968943][ T6639] usb 3-1: device descriptor read/64, error -71
[  850.011939][T14810] program syz.1.2685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  850.080817][ T6639] usb usb3-port1: attempt power cycle
[  850.478717][ T6639] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  850.498866][ T6639] usb 3-1: device descriptor read/8, error -71
[  850.778604][ T6639] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  850.798862][ T6639] usb 3-1: device descriptor read/8, error -71
[  850.909896][ T6639] usb usb3-port1: unable to enumerate USB device
[  850.928694][ T6646] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  851.088257][ T6646] usb 4-1: Using ep0 maxpacket: 32
[  851.121448][ T6646] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  851.163630][ T6646] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  851.185356][ T6646] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  851.207179][ T6646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024
[  851.238138][ T6646] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  851.258326][ T6646] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  851.278105][ T6646] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  851.298120][ T6646] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  851.318104][ T6646] usb 4-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  851.333589][ T6646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  851.343702][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'.
[  851.355683][T14824] openvswitch: : Dropping previously announced user features
[  851.363416][ T6646] usb 4-1: config 0 descriptor??
[  851.369547][T14816] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  851.379269][ T6646] usblp0: Disabling reads from problematic bidirectional printer
[  851.474277][T14826] xt_hashlimit: size too large, truncated to 1048576
[  851.594773][ T6646] usblp 4-1:0.0: usblp0: USB Unidirectional printer dev 90 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004
[  851.657808][ T6646] usb 4-1: USB disconnect, device number 90
[  851.704197][ T6646] usblp0: removed
[  852.121500][ T5198] ldm_validate_privheads(): Disk read failed.
[  852.140818][ T5198] Dev loop2: unable to read RDB block 3
[  852.146551][ T5198]  loop2: unable to read partition table
[  852.193333][ T5198] loop2: partition table beyond EOD, truncated
[  852.222405][T14843] xt_hashlimit: max too large, truncated to 1048576
[  852.229922][T14843] xt_bpf: check failed: parse error
[  852.485321][T14840] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2695'.
[  852.586840][ T5198] ldm_validate_privheads(): Disk read failed.
[  852.624545][ T5198] Dev loop2: unable to read RDB block 3
[  852.639641][ T5198]  loop2: unable to read partition table
[  852.655495][ T5198] loop2: partition table beyond EOD, truncated
[  853.161308][T14851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'.
[  853.170787][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2698'.
[  853.577018][T14858] openvswitch: : Dropping previously announced user features
[  854.775763][ T5198] ldm_validate_privheads(): Disk read failed.
[  854.788568][ T5198] Dev loop2: unable to read RDB block 3
[  854.799642][ T5198]  loop2: unable to read partition table
[  854.815924][ T5198] loop2: partition table beyond EOD, truncated
[  854.888217][ T6646] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  855.085934][ T6646] usb 4-1: config 0 has no interfaces?
[  855.103991][ T6646] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  855.136243][ T6646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.178084][ T6646] usb 4-1: Product: syz
[  855.212347][ T6646] usb 4-1: Manufacturer: syz
[  855.232155][ T6646] usb 4-1: SerialNumber: syz
[  855.260763][ T6646] usb 4-1: config 0 descriptor??
[  855.426542][T14879] xt_TPROXY: Can be used only with -p tcp or -p udp
[  855.768208][T14881] binder: 14864:14881 ioctl 4018620d 0 returned -22
[  856.486547][ T5198] ldm_validate_privheads(): Disk read failed.
[  856.493315][ T5198] Dev loop2: unable to read RDB block 3
[  856.500493][ T5198]  loop2: unable to read partition table
[  856.514314][ T5198] loop2: partition table beyond EOD, truncated
[  856.726290][T14884] libceph: resolve '
[  856.726290][T14884] -&���f�Y�ǝ�a���2i�
[  856.726290][T14884] .���?��&�*��&' (ret=-3): failed
[  856.903105][ T5198] ldm_validate_privheads(): Disk read failed.
[  856.926113][ T5198] Dev loop2: unable to read RDB block 3
[  856.951287][ T5198]  loop2: unable to read partition table
[  856.971976][ T5198] loop2: partition table beyond EOD, truncated
[  857.221190][ T5198] ldm_validate_privheads(): Disk read failed.
[  857.257315][ T5198] Dev loop2: unable to read RDB block 3
[  857.290314][ T5198]  loop2: unable to read partition table
[  857.314947][ T5198] loop2: partition table beyond EOD, truncated
[  857.528808][ T6639] usb 4-1: USB disconnect, device number 91
[  857.539566][ T5950] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[  857.719084][ T5950] usb 3-1: Using ep0 maxpacket: 32
[  857.737331][ T5950] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  857.757647][ T5950] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  857.788312][ T5950] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  857.839630][ T5950] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  857.843209][T14907] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  857.856535][ T5913] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  857.908104][ T5950] usb 3-1: config 0 interface 0 has no altsetting 0
[  857.918218][ T6644] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  857.930525][ T5950] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  857.963571][ T5950] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  858.002529][ T5950] usb 3-1: Product: syz
[  858.021049][ T5950] usb 3-1: Manufacturer: syz
[  858.025820][ T5950] usb 3-1: SerialNumber: syz
[  858.036930][ T5913] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  858.047609][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.079103][ T6644] usb 2-1: Using ep0 maxpacket: 16
[  858.089077][ T6644] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  858.100448][ T6644] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.136946][ T5913] usb 5-1: config 0 descriptor??
[  858.145433][ T6644] usb 2-1: config 0 descriptor??
[  858.146398][ T5950] usb 3-1: config 0 descriptor??
[  858.219996][ T6644] gspca_main: sonixj-2.14.0 probing 0471:0327
[  858.242546][ T5950] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  858.252125][ T5913] cp210x 5-1:0.0: cp210x converter detected
[  858.280942][ T5950] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  858.469710][ T6645] usb 3-1: USB disconnect, device number 93
[  858.592134][ T6645] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  858.876798][ T5913] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -71
[  858.925945][ T5913] cp210x 5-1:0.0: GPIO initialisation failed: -71
[  858.971151][ T5913] usb 5-1: cp210x converter now attached to ttyUSB0
[  859.012139][ T5913] usb 5-1: USB disconnect, device number 120
[  859.061594][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  859.092590][ T5913] cp210x 5-1:0.0: device disconnected
[  859.239174][ T5198] ldm_validate_privheads(): Disk read failed.
[  859.296489][ T5198] Dev loop2: unable to read RDB block 3
[  859.318131][ T5198]  loop2: unable to read partition table
[  859.339284][ T5198] loop2: partition table beyond EOD, truncated
[  859.683263][T14926] netlink: 'syz.2.2721': attribute type 13 has an invalid length.
[  859.729988][T14926] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2721'.
[  859.920728][ T5198] ldm_validate_privheads(): Disk read failed.
[  859.937653][ T5198] Dev loop2: unable to read RDB block 3
[  859.957846][ T5198]  loop2: unable to read partition table
[  859.987429][ T5198] loop2: partition table beyond EOD, truncated
[  860.257794][T14937] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2726'.
[  860.580864][T14928] syz.0.2722 (14928): /proc/14927/oom_adj is deprecated, please use /proc/14927/oom_score_adj instead.
[  860.633931][ T6644] gspca_sonixj: reg_w1 err -71
[  860.638307][ T5913] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  860.650759][ T6644] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  860.671840][ T6644] usb 2-1: USB disconnect, device number 119
[  860.808580][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  860.827427][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  860.851327][ T5913] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  860.873286][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  860.908271][ T5913] usb 4-1: Product: syz
[  860.912580][ T5913] usb 4-1: Manufacturer: syz
[  860.917335][ T5913] usb 4-1: SerialNumber: syz
[  860.934993][ T5913] usb 4-1: config 0 descriptor??
[  861.141302][ T5198] ldm_validate_privheads(): Disk read failed.
[  861.160445][ T5198] Dev loop2: unable to read RDB block 3
[  861.284681][ T5198]  loop2: unable to read partition table
[  861.307819][ T5198] loop2: partition table beyond EOD, truncated
[  861.474225][ T5198] ldm_validate_privheads(): Disk read failed.
[  861.485240][ T5198] Dev loop2: unable to read RDB block 3
[  861.491677][ T5198]  loop2: unable to read partition table
[  861.523970][ T5198] loop2: partition table beyond EOD, truncated
[  861.573657][T14960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2733'.
[  861.615113][T14960] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  861.919214][ T5198] ldm_validate_privheads(): Disk read failed.
[  861.960538][ T5198] Dev loop2: unable to read RDB block 3
[  861.971951][ T5198]  loop2: unable to read partition table
[  862.004702][ T5198] loop2: partition table beyond EOD, truncated
[  862.515040][T14969] sctp: [Deprecated]: syz.2.2735 (pid 14969) Use of struct sctp_assoc_value in delayed_ack socket option.
[  862.515040][T14969] Use struct sctp_sack_info instead
[  863.093290][T14987] xt_recent: Unsupported userspace flags (000000de)
[  863.622395][T14985] bridge0: entered promiscuous mode
[  863.628654][T14985] macsec1: entered promiscuous mode
[  863.637832][T14985] bridge0: left promiscuous mode
[  864.079939][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2742'.
[  864.100624][T14995] : entered promiscuous mode
[  864.178309][ T5913] usb 4-1: USB disconnect, device number 92
[  864.398537][ T5198] ldm_validate_privheads(): Disk read failed.
[  864.410484][ T5198] Dev loop2: unable to read RDB block 3
[  864.433241][ T5198]  loop2: unable to read partition table
[  864.450075][ T5198] loop2: partition table beyond EOD, truncated
[  864.505339][T15004] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2746'.
[  864.646291][ T5198] ldm_validate_privheads(): Disk read failed.
[  864.648246][ T5950] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[  864.653023][ T5198] Dev loop2: unable to read RDB block 3
[  864.665905][ T5198]  loop2: unable to read partition table
[  864.672893][ T5198] loop2: partition table beyond EOD, truncated
[  864.816196][ T5950] usb 2-1: device descriptor read/64, error -71
[  864.909836][ T5198] ldm_validate_privheads(): Disk read failed.
[  864.919709][ T5198] Dev loop2: unable to read RDB block 3
[  866.277627][ T5198]  loop2: unable to read partition table
[  866.284012][ T5198] loop2: partition table beyond EOD, truncated
[  866.418517][ T5950] usb 2-1: new full-speed USB device number 121 using dummy_hcd
[  866.569963][ T5950] usb 2-1: device descriptor read/64, error -71
[  866.679021][ T5950] usb usb2-port1: attempt power cycle
[  866.718335][ T5913] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  866.825599][T15028] FAULT_INJECTION: forcing a failure.
[  866.825599][T15028] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  866.869849][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  866.878231][T15028] CPU: 0 UID: 0 PID: 15028 Comm: syz.3.2753 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  866.878267][T15028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  866.878281][T15028] Call Trace:
[  866.878297][T15028]  <TASK>
[  866.878308][T15028]  dump_stack_lvl+0x189/0x250
[  866.878351][T15028]  ? __pfx____ratelimit+0x10/0x10
[  866.878383][T15028]  ? __pfx_dump_stack_lvl+0x10/0x10
[  866.878413][T15028]  ? __pfx__printk+0x10/0x10
[  866.878436][T15028]  ? __might_fault+0xb0/0x130
[  866.878468][T15028]  should_fail_ex+0x414/0x560
[  866.878500][T15028]  _copy_from_user+0x2d/0xb0
[  866.878525][T15028]  snd_pcm_oss_write+0x84f/0x11a0
[  866.878592][T15028]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  866.878622][T15028]  ? bpf_lsm_file_permission+0x9/0x20
[  866.878651][T15028]  ? security_file_permission+0x75/0x290
[  866.878673][T15028]  ? rw_verify_area+0x258/0x650
[  866.878705][T15028]  ? __pfx_snd_pcm_oss_write+0x10/0x10
[  866.878736][T15028]  vfs_write+0x27e/0xa90
[  866.878776][T15028]  ? __pfx_vfs_write+0x10/0x10
[  866.878806][T15028]  ? __fget_files+0x2a/0x420
[  866.878846][T15028]  ? __fget_files+0x2a/0x420
[  866.878868][T15028]  ? __fget_files+0x3a0/0x420
[  866.878887][T15028]  ? __fget_files+0x2a/0x420
[  866.878918][T15028]  ksys_write+0x145/0x250
[  866.878939][T15028]  ? __pfx_ksys_write+0x10/0x10
[  866.878964][T15028]  ? do_syscall_64+0xbe/0x3b0
[  866.878985][T15028]  do_syscall_64+0xfa/0x3b0
[  866.879001][T15028]  ? lockdep_hardirqs_on+0x9c/0x150
[  866.879028][T15028]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.879050][T15028]  ? clear_bhb_loop+0x60/0xb0
[  866.879074][T15028]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  866.879095][T15028] RIP: 0033:0x7fcc8cd8e929
[  866.879116][T15028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  866.879135][T15028] RSP: 002b:00007fcc8dc7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  866.879159][T15028] RAX: ffffffffffffffda RBX: 00007fcc8cfb5fa0 RCX: 00007fcc8cd8e929
[  866.879175][T15028] RDX: 000000000000fc36 RSI: 0000200000000500 RDI: 0000000000000003
[  866.879188][T15028] RBP: 00007fcc8dc7b090 R08: 0000000000000000 R09: 0000000000000000
[  866.879200][T15028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  866.879212][T15028] R13: 0000000000000000 R14: 00007fcc8cfb5fa0 R15: 00007fcc8d0dfa28
[  866.879243][T15028]  </TASK>
[  867.170594][ T5913] usb 3-1: config 0 has an invalid interface number: 151 but max is 0
[  867.179414][ T5913] usb 3-1: config 0 has no interface number 0
[  867.185726][ T5913] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  867.196979][ T5913] usb 3-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  867.220376][ T5950] usb 2-1: new full-speed USB device number 122 using dummy_hcd
[  867.245466][ T5913] usb 3-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  867.254855][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  867.263151][ T5913] usb 3-1: Product: syz
[  867.267342][ T5913] usb 3-1: Manufacturer: syz
[  867.272355][ T5913] usb 3-1: SerialNumber: syz
[  867.279982][ T5913] usb 3-1: config 0 descriptor??
[  867.285927][ T5950] usb 2-1: device descriptor read/8, error -71
[  867.627525][ T5913] usb 3-1: USB disconnect, device number 94
[  867.790493][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  868.254115][ T5198] ldm_validate_privheads(): Disk read failed.
[  868.329655][ T5198] Dev loop2: unable to read RDB block 3
[  868.335560][ T5198]  loop2: unable to read partition table
[  868.347275][ T5198] loop2: partition table beyond EOD, truncated
[  868.408806][ T5913] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  868.824466][T15050] netlink: 'syz.1.2761': attribute type 13 has an invalid length.
[  868.858447][ T5950] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[  868.873426][T15050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2761'.
[  868.894183][ T5913] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  868.907208][ T5913] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  868.971652][ T5913] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  869.023546][ T5913] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  869.039740][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.071991][ T5913] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  869.082341][ T5950] usb 3-1: config 0 has no interfaces?
[  869.093798][ T5950] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  869.103500][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.119578][ T5913] usb 4-1: invalid MIDI out EP 0
[  869.132285][T15051] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  869.145142][ T5950] usb 3-1: Product: syz
[  869.188127][ T5950] usb 3-1: Manufacturer: syz
[  869.203456][T15051] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  869.223002][ T5950] usb 3-1: SerialNumber: syz
[  869.273220][T15052] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2757'.
[  869.319918][T15052] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2757'.
[  869.340621][ T5950] usb 3-1: config 0 descriptor??
[  869.388657][ T5913] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  869.415365][T15054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  869.425965][T15054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'.
[  869.470758][ T8999] udevd[8999]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  869.523235][T15051] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  869.530042][T15051] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  869.580870][T15046] pimreg: left allmulticast mode
[  869.882193][T15051] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  869.891092][T15051] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  869.945516][T15051] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  869.961922][T15051] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  870.024129][T15051] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  870.047193][T15051] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  870.089106][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.108880][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.164642][T15042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  870.190869][T15042] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  870.223886][ T5913] usb 4-1: USB disconnect, device number 93
[  870.498495][ T5950] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  870.669576][ T5950] usb 2-1: Using ep0 maxpacket: 8
[  870.682351][ T5950] usb 2-1: too many configurations: 39, using maximum allowed: 8
[  870.709985][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.736787][ T5950] usb 2-1: config 0 has no interfaces?
[  870.758989][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.788398][ T5950] usb 2-1: config 0 has no interfaces?
[  870.797891][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.813723][ T5950] usb 2-1: config 0 has no interfaces?
[  870.826616][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.846332][ T5950] usb 2-1: config 0 has no interfaces?
[  870.866278][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.878719][ T5950] usb 2-1: config 0 has no interfaces?
[  870.890638][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.917116][ T5950] usb 2-1: config 0 has no interfaces?
[  870.927743][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.938482][ T5950] usb 2-1: config 0 has no interfaces?
[  870.948934][ T5950] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  870.971976][ T5950] usb 2-1: config 0 has no interfaces?
[  870.990081][ T5950] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  871.001975][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.016788][ T5950] usb 2-1: config 0 descriptor??
[  871.088436][ T5913] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  871.168496][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  871.232438][ T5950] usb 3-1: USB disconnect, device number 95
[  871.268525][ T5913] usb 4-1: Using ep0 maxpacket: 8
[  871.276760][ T5913] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  871.296178][ T5913] usb 4-1: config 0 has no interface number 0
[  871.306046][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  871.317391][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  871.329319][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.332884][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.351746][ T5913] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  871.364846][ T5913] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  871.382965][ T5913] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  871.400479][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  871.414792][T15060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.437516][ T5913] usb 4-1: config 0 descriptor??
[  871.471600][ T5913] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  871.489892][T15060] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.550378][ T6646] usb 2-1: USB disconnect, device number 124
[  871.568908][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  871.703923][T15070] fuse: Unknown parameter 'r'
[  871.813249][T15073] Cannot find set identified by id 2 to match
[  871.831190][ T5198] ldm_validate_privheads(): Disk read failed.
[  871.857453][ T5198] Dev loop2: unable to read RDB block 3
[  871.884279][ T5198]  loop2: unable to read partition table
[  871.898623][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  871.911919][ T5198] loop2: partition table beyond EOD, truncated
[  871.968624][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  872.010160][T15080] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2772'.
[  872.048202][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  872.616293][T15079] sctp: [Deprecated]: syz.2.2771 (pid 15079) Use of int in maxseg socket option.
[  872.616293][T15079] Use struct sctp_assoc_value instead
[  872.650707][ T6646] usb 5-1: new high-speed USB device number 121 using dummy_hcd
[  872.800313][ T5198] ldm_validate_privheads(): Disk read failed.
[  872.807092][ T5198] Dev loop2: unable to read RDB block 3
[  872.813290][ T5198]  loop2: unable to read partition table
[  872.820181][ T5198] loop2: partition table beyond EOD, truncated
[  872.824833][ T6646] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  872.855955][ T6646] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  872.873411][ T6646] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  873.108357][ T6644] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[  873.358327][ T5831] Bluetooth: hci0: command 0x0406 tx timeout
[  873.378440][ T6646] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  873.387694][ T6646] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.433105][ T6646] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  873.442711][ T6646] usb 5-1: invalid MIDI out EP 0
[  873.463898][ T5913] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  873.648175][ T5831] Bluetooth: hci1: command 0x0406 tx timeout
[  873.648661][ T5913] usb 2-1: Using ep0 maxpacket: 16
[  873.664963][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  873.685045][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.694785][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.708872][T15088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  873.718889][T15088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  873.735683][ T6644] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  873.745234][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  873.754081][ T6644] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  873.793074][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  873.809432][ T5913] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  873.820209][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.878276][ T6644] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  873.990271][ T5831] Bluetooth: hci2: command 0x0406 tx timeout
[  874.031604][ T6644] usb 3-1: config 0 descriptor??
[  874.048126][ T5831] Bluetooth: hci3: command 0x0406 tx timeout
[  874.128859][ T5831] Bluetooth: hci4: command 0x0406 tx timeout
[  874.145757][ T6646] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  874.166469][ T5913] usb 2-1: config 0 descriptor??
[  874.173731][ T8550] udevd[8550]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  874.186609][ T6646] usb 4-1: USB disconnect, device number 94
[  874.224068][ T6646] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  874.401490][ T5950] usb 5-1: USB disconnect, device number 121
[  874.472605][ T6644] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[  874.490676][T15106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'.
[  874.511385][T15106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2781'.
[  874.541068][T15106] : entered promiscuous mode
[  874.647013][T15093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.663472][T15098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  874.677680][T15093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.691683][T15098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  874.703844][ T6644] usb 3-1: USB disconnect, device number 96
[  874.739872][ T5913] HID 045e:07da: Invalid code 65791 type 1
[  874.760877][ T5913] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0014/input/input59
[  874.786253][ T5913] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  875.228160][ T6644] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  875.418799][ T5198] ldm_validate_privheads(): Disk read failed.
[  875.425093][ T5198] Dev loop2: unable to read RDB block 3
[  875.431246][ T5198]  loop2: unable to read partition table
[  875.437212][ T5198] loop2: partition table beyond EOD, truncated
[  875.553617][ T6644] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  875.598196][ T6644] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  875.620217][ T6644] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  875.702422][ T6644] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  875.730972][ T6644] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  875.781668][ T6644] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  875.798683][ T5913] usb 5-1: new high-speed USB device number 122 using dummy_hcd
[  875.809305][ T6644] usb 4-1: invalid MIDI out EP 0
[  875.907601][ T5198] ldm_validate_privheads(): Disk read failed.
[  875.926254][ T5198] Dev loop2: unable to read RDB block 3
[  875.940620][ T5198]  loop2: unable to read partition table
[  875.985900][ T5198] loop2: partition table beyond EOD, truncated
[  876.016828][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2056, setting to 64
[  876.039813][ T5950] usb 2-1: reset high-speed USB device number 125 using dummy_hcd
[  876.054355][T15126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.065628][T15126] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.081322][T15114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  876.104775][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a
[  876.125878][T15114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  876.169068][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.195113][ T5913] usb 5-1: Product: syz
[  876.219031][ T5913] usb 5-1: Manufacturer: syz
[  876.248081][ T5913] usb 5-1: SerialNumber: syz
[  876.277349][ T6644] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  876.291515][ T9000] udevd[9000]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  876.310974][ T5913] usb 5-1: config 0 descriptor??
[  876.544258][    T9] usb 4-1: USB disconnect, device number 95
[  876.777684][T15118] ALSA: mixer_oss: invalid OSS volume '2176'
[  876.828467][T15118] ALSA: mixer_oss: invalid OSS volume 'Pss:'
[  876.853022][T15118] ALSA: mixer_oss: invalid OSS volume 'Pss_Dirty:'
[  876.908782][T15118] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:'
[  876.938233][T15118] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:'
[  876.975161][ T6639] usb 2-1: USB disconnect, device number 125
[  876.978961][T15118] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:'
[  877.009554][T15118] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:'
[  877.110615][ T5913] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8
[  877.133612][ T5913] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8
[  877.169595][ T5913] usb 5-1: USB disconnect, device number 122
[  877.188433][ T6646] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  877.339892][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  877.346806][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  877.348253][ T6646] usb 1-1: device descriptor read/64, error -71
[  877.525159][ T5198] ldm_validate_privheads(): Disk read failed.
[  877.531948][ T5198] Dev loop2: unable to read RDB block 3
[  877.541492][ T5198]  loop2: unable to read partition table
[  877.548529][ T5198] loop2: partition table beyond EOD, truncated
[  877.629925][ T6646] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  877.660713][ T6644] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  877.769473][ T6646] usb 1-1: device descriptor read/64, error -71
[  877.808470][ T6644] usb 2-1: device descriptor read/64, error -71
[  877.878697][ T6646] usb usb1-port1: attempt power cycle
[  878.048218][ T6644] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  878.189788][ T6644] usb 2-1: device descriptor read/64, error -71
[  878.229823][ T6646] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  878.263598][ T6646] usb 1-1: device descriptor read/8, error -71
[  878.264997][T15150] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  878.308589][ T6644] usb usb2-port1: attempt power cycle
[  878.518386][ T6646] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  878.539324][ T6646] usb 1-1: device descriptor read/8, error -71
[  878.626015][T15156] input: syz1 as /devices/virtual/input/input60
[  878.659852][T15156] program syz.3.2795 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  878.688228][ T6644] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  878.696711][ T6646] usb usb1-port1: unable to enumerate USB device
[  878.708808][ T6644] usb 2-1: device descriptor read/8, error -71
[  878.952029][ T6644] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  879.082321][ T6644] usb 2-1: device descriptor read/8, error -71
[  879.198601][ T6644] usb usb2-port1: unable to enumerate USB device
[  879.666748][ T5198] ldm_validate_privheads(): Disk read failed.
[  879.682600][ T5198] Dev loop2: unable to read RDB block 3
[  879.691794][ T5198]  loop2: unable to read partition table
[  879.697880][ T5198] loop2: partition table beyond EOD, truncated
[  880.012325][ T5198] ldm_validate_privheads(): Disk read failed.
[  880.038171][ T5198] Dev loop2: unable to read RDB block 3
[  880.062796][ T5198]  loop2: unable to read partition table
[  880.083715][ T5198] loop2: partition table beyond EOD, truncated
[  880.341167][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.352304][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.360707][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.370652][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.379246][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.408630][ T5913] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[  880.442022][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.462287][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.498788][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.513884][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  880.526992][T15180] netlink: 'syz.4.2803': attribute type 1 has an invalid length.
[  881.211562][ T5913] usb 3-1: Using ep0 maxpacket: 8
[  881.235978][ T5913] usb 3-1: config 0 has no interfaces?
[  881.243921][ T5913] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=e6.d0
[  881.265309][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.278631][ T5913] usb 3-1: Product: syz
[  881.284660][ T5913] usb 3-1: Manufacturer: syz
[  881.301468][ T5913] usb 3-1: SerialNumber: syz
[  881.319471][ T5913] usb 3-1: config 0 descriptor??
[  881.455124][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'.
[  881.485386][T15193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2805'.
[  881.593409][ T5950] usb 3-1: USB disconnect, device number 97
[  881.778171][ T5913] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  881.940588][ T5913] usb 2-1: config 0 has no interfaces?
[  881.955050][ T5913] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  881.975024][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.998400][ T5913] usb 2-1: Product: syz
[  882.002793][ T5913] usb 2-1: Manufacturer: syz
[  882.008651][ T5913] usb 2-1: SerialNumber: syz
[  882.023390][ T5913] usb 2-1: config 0 descriptor??
[  882.168347][ T5950] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  882.198740][ T5198] ldm_validate_privheads(): Disk read failed.
[  882.218824][ T5198] Dev loop2: unable to read RDB block 3
[  882.254439][ T5198]  loop2: unable to read partition table
[  882.284024][ T5198] loop2: partition table beyond EOD, truncated
[  882.349919][ T5950] usb 1-1: Using ep0 maxpacket: 16
[  882.393059][ T5950] usb 1-1: config 0 has no interfaces?
[  882.405935][ T5950] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  882.431067][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.489610][ T5950] usb 1-1: config 0 descriptor??
[  882.618577][T15216] xt_hashlimit: size too large, truncated to 1048576
[  882.668249][ T5913] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[  882.705947][T15202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  882.724793][T15202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  882.799202][ T6639] usb 1-1: USB disconnect, device number 112
[  882.848913][ T5913] usb 3-1: Using ep0 maxpacket: 32
[  882.859381][ T5913] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  882.870465][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  882.885809][ T5913] usb 3-1: config 0 descriptor??
[  882.912627][ T5913] gspca_main: sq930x-2.14.0 probing 041e:403c
[  883.653735][ T6644] usb 2-1: USB disconnect, device number 4
[  883.776197][T15232] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2820'.
[  883.878197][ T5913] gspca_sq930x: reg_w 0105 bf00 failed -71
[  883.940310][ T5913] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  883.985343][ T5913] usb 3-1: USB disconnect, device number 98
[  884.166362][T15240] @: renamed from syz_tun
[  884.423553][ T5198] ldm_validate_privheads(): Disk read failed.
[  884.464603][ T5198] Dev loop2: unable to read RDB block 3
[  884.488125][ T5198]  loop2: unable to read partition table
[  884.503966][ T5198] loop2: partition table beyond EOD, truncated
[  884.510464][ T5913] usb 4-1: new full-speed USB device number 96 using dummy_hcd
[  884.542116][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2824'.
[  884.600561][T15245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2824'.
[  884.742685][ T5913] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  884.752795][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  884.778527][ T5913] usb 4-1: config 0 descriptor??
[  884.808953][ T5913] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  884.825616][ T5198] ldm_validate_privheads(): Disk read failed.
[  884.858263][ T5198] Dev loop2: unable to read RDB block 3
[  884.906178][ T5198]  loop2: unable to read partition table
[  884.923415][ T5198] loop2: partition table beyond EOD, truncated
[  885.008549][ T5913] gp8psk: usb in 128 operation failed.
[  885.275983][ T5913] gp8psk: usb in 146 operation failed.
[  885.281975][ T5198] ldm_validate_privheads(): Disk read failed.
[  885.290061][ T5913] gp8psk: failed to get FW version
[  885.296069][ T5198] Dev loop2: unable to read RDB block 3
[  885.313515][ T5913] gp8psk: FPGA Version = 173
[  885.319992][ T5198]  loop2: unable to read partition table
[  885.364763][ T5198] loop2: partition table beyond EOD, truncated
[  885.496872][T15242] IPVS: Unknown mcast interface: batadv0
[  885.525920][ T5913] gp8psk: usb in 138 operation failed.
[  885.536547][ T5913] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  885.598496][ T5913] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  885.629100][ T5913] usb 4-1: USB disconnect, device number 96
[  885.656891][T15258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2829'.
[  885.815361][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2830'.
[  885.830903][T15261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2830'.
[  886.185622][ T5198] ldm_validate_privheads(): Disk read failed.
[  886.195060][ T5198] Dev loop2: unable to read RDB block 3
[  886.201749][ T5198]  loop2: unable to read partition table
[  886.207829][ T5198] loop2: partition table beyond EOD, truncated
[  886.780244][ T5913] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  886.950878][ T5913] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  886.993965][ T5913] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  887.058330][ T5913] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  887.085703][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.186125][ T5913] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  887.251763][ T5913] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  887.420815][T15281] delete_channel: no stack
[  887.464896][ T5913] usb 3-1: USB disconnect, device number 99
[  887.474437][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  887.686747][T15293] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns
[  887.706865][T15293] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  889.111314][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'.
[  889.169878][T15301] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'.
[  889.233918][T15301] ip6gretap0: entered promiscuous mode
[  889.312033][T15305] binder: 15291:15305 ioctl 4018620d 0 returned -22
[  890.370077][ T5198] ldm_validate_privheads(): Disk read failed.
[  890.376345][ T5198] Dev loop2: unable to read RDB block 3
[  890.389741][ T5198]  loop2: unable to read partition table
[  890.395956][ T5198] loop2: partition table beyond EOD, truncated
[  891.414106][ T5198] ldm_validate_privheads(): Disk read failed.
[  891.441541][T15339] Cannot find set identified by id 0 to match
[  891.557867][ T5198] Dev loop2: unable to read RDB block 3
[  891.631397][ T5198]  loop2: unable to read partition table
[  891.639784][ T5198] loop2: partition table beyond EOD, truncated
[  891.651518][T15344] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2857'.
[  891.986682][T15348] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2859'.
[  892.031132][ T5198] ldm_validate_privheads(): Disk read failed.
[  892.037773][ T5198] Dev loop2: unable to read RDB block 3
[  892.086772][ T5198]  loop2: unable to read partition table
[  892.120784][ T5198] loop2: partition table beyond EOD, truncated
[  893.176552][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2866'.
[  893.209964][T15370] binder: 15350:15370 ioctl 4018620d 0 returned -22
[  893.798136][ T6644] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  893.930024][ T6644] usb 2-1: device descriptor read/64, error -71
[  893.950574][ T6639] usb 1-1: new full-speed USB device number 113 using dummy_hcd
[  894.128375][ T6639] usb 1-1: device descriptor read/64, error -71
[  894.188093][ T6644] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  894.348227][ T6644] usb 2-1: device descriptor read/64, error -71
[  894.378376][ T6639] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  894.392728][ T5198] ldm_validate_privheads(): Disk read failed.
[  894.399336][ T5950] usb 5-1: new high-speed USB device number 123 using dummy_hcd
[  894.407622][ T5198] Dev loop2: unable to read RDB block 3
[  894.415539][ T5198]  loop2: unable to read partition table
[  894.422969][ T5198] loop2: partition table beyond EOD, truncated
[  894.458932][ T6644] usb usb2-port1: attempt power cycle
[  894.528306][ T6639] usb 1-1: device descriptor read/64, error -71
[  894.570574][ T5950] usb 5-1: Using ep0 maxpacket: 32
[  894.597235][ T5950] usb 5-1: unable to get BOS descriptor or descriptor too short
[  894.611344][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2871'.
[  894.625615][ T5950] usb 5-1: too many configurations: 105, using maximum allowed: 8
[  894.634608][T15385] vlan2: entered promiscuous mode
[  894.709086][ T6639] usb usb1-port1: attempt power cycle
[  894.717200][ T5950] usb 5-1: unable to read config index 0 descriptor/start: -71
[  894.725450][ T5950] usb 5-1: can't read configurations, error -71
[  894.809839][ T6644] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  894.832631][T15387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2872'.
[  894.839336][ T6644] usb 2-1: device descriptor read/8, error -71
[  895.098644][ T6644] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  895.123931][ T6639] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  895.159817][ T6639] usb 1-1: device descriptor read/8, error -71
[  895.160342][ T6644] usb 2-1: device descriptor read/8, error -71
[  895.187374][T15392] xt_hashlimit: max too large, truncated to 1048576
[  895.196104][T15392] xt_bpf: check failed: parse error
[  895.508930][ T6644] usb usb2-port1: unable to enumerate USB device
[  895.628134][ T6639] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[  895.666422][ T6639] usb 1-1: device descriptor read/8, error -71
[  896.013370][ T6639] usb usb1-port1: unable to enumerate USB device
[  896.038751][ T5198] ldm_validate_privheads(): Disk read failed.
[  896.054486][ T5198] Dev loop2: unable to read RDB block 3
[  896.069098][ T5198]  loop2: unable to read partition table
[  896.076195][ T5198] loop2: partition table beyond EOD, truncated
[  896.787340][T15395] validate_nla: 56 callbacks suppressed
[  896.787384][T15395] netlink: 'syz.4.2874': attribute type 2 has an invalid length.
[  896.968676][ T5198] ldm_validate_privheads(): Disk read failed.
[  896.990968][ T5198] Dev loop2: unable to read RDB block 3
[  897.016122][ T5198]  loop2: unable to read partition table
[  897.026109][T15421] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2883'.
[  897.044300][ T5198] loop2: partition table beyond EOD, truncated
[  897.399096][ T5198] ldm_validate_privheads(): Disk read failed.
[  897.405395][ T5198] Dev loop2: unable to read RDB block 3
[  897.413138][ T5198]  loop2: unable to read partition table
[  897.428385][ T5198] loop2: partition table beyond EOD, truncated
[  897.576017][ T5198] ldm_validate_privheads(): Disk read failed.
[  897.586052][ T5198] Dev loop2: unable to read RDB block 3
[  897.601527][ T5198]  loop2: unable to read partition table
[  897.622755][ T5198] loop2: partition table beyond EOD, truncated
[  898.682802][ T5198] ldm_validate_privheads(): Disk read failed.
[  898.704256][ T5198] Dev loop2: unable to read RDB block 3
[  898.723679][ T5198]  loop2: unable to read partition table
[  898.732016][ T5198] loop2: partition table beyond EOD, truncated
[  898.771886][T15455] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  898.783496][T15455] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  898.805081][T15457] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2895'.
[  898.814739][T15455] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  898.838405][T15455] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  898.850803][T15455] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  899.440425][ T5198] ldm_validate_privheads(): Disk read failed.
[  899.446769][ T5198] Dev loop2: unable to read RDB block 3
[  899.462115][T15451] netlink: 'syz.4.2894': attribute type 2 has an invalid length.
[  899.478147][ T5198]  loop2: unable to read partition table
[  899.487613][ T5198] loop2: partition table beyond EOD, truncated
[  899.504808][T15476] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  900.220973][ T5198] ldm_validate_privheads(): Disk read failed.
[  900.238179][ T5198] Dev loop2: unable to read RDB block 3
[  900.291214][ T5198]  loop2: unable to read partition table
[  900.297153][ T5198] loop2: partition table beyond EOD, truncated
[  900.928299][ T5831] Bluetooth: hci3: command tx timeout
[  901.209191][ T5198] ldm_validate_privheads(): Disk read failed.
[  901.215585][ T5198] Dev loop2: unable to read RDB block 3
[  901.248438][ T5198]  loop2: unable to read partition table
[  901.254544][ T5198] loop2: partition table beyond EOD, truncated
[  901.281026][T15464] chnl_net:caif_netlink_parms(): no params data found
[  901.422730][   T49] bridge_slave_1: left allmulticast mode
[  901.475146][   T49] bridge_slave_1: left promiscuous mode
[  901.514965][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  901.576011][   T49] bridge_slave_0: left allmulticast mode
[  901.595021][   T49] bridge_slave_0: left promiscuous mode
[  901.618592][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  901.634221][T15507] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2906'.
[  901.691107][ T5198] ldm_validate_privheads(): Disk read failed.
[  901.697397][ T5198] Dev loop2: unable to read RDB block 3
[  901.723825][ T5198]  loop2: unable to read partition table
[  901.733766][ T5198] loop2: partition table beyond EOD, truncated
[  901.836698][   T49] ip6gretap0 (unregistering): left promiscuous mode
[  902.001012][ T5198] ldm_validate_privheads(): Disk read failed.
[  902.014201][ T5198] Dev loop2: unable to read RDB block 3
[  902.026846][ T5198]  loop2: unable to read partition table
[  902.050756][ T5198] loop2: partition table beyond EOD, truncated
[  902.132266][ T6639] usb 5-1: new high-speed USB device number 125 using dummy_hcd
[  902.224164][ T5198] ldm_validate_privheads(): Disk read failed.
[  902.243164][ T5198] Dev loop2: unable to read RDB block 3
[  902.278346][ T5198]  loop2: unable to read partition table
[  902.286539][ T5198] loop2: partition table beyond EOD, truncated
[  902.318100][ T6639] usb 5-1: Using ep0 maxpacket: 32
[  902.337269][ T6639] usb 5-1: unable to get BOS descriptor or descriptor too short
[  902.384969][ T6639] usb 5-1: too many configurations: 105, using maximum allowed: 8
[  902.405454][T15531] netlink: 'syz.3.2912': attribute type 4 has an invalid length.
[  902.438969][ T6639] usb 5-1: unable to read config index 0 descriptor/start: -71
[  902.446760][ T6639] usb 5-1: can't read configurations, error -71
[  902.488812][ T6646] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  902.658698][ T6646] usb 3-1: Using ep0 maxpacket: 16
[  902.667652][ T6646] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  902.677153][ T6646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  902.685730][ T6646] usb 3-1: Product: syz
[  902.690581][ T6646] usb 3-1: Manufacturer: syz
[  902.713990][ T6646] usb 3-1: SerialNumber: syz
[  902.722220][ T6646] usb 3-1: config 0 descriptor??
[  902.742211][ T6646] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  902.946100][ T6646] gp8psk: usb in 128 operation failed.
[  902.969689][ T6646] gp8psk: usb in 137 operation failed.
[  902.975273][ T6646] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  903.003737][ T6646] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  903.014904][ T5831] Bluetooth: hci3: command tx timeout
[  903.042073][ T6646] usb 3-1: media controller created
[  903.091366][ T6646] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  903.166743][ T6646] gp8psk_fe: Frontend revision 1 attached
[  903.175981][ T6646] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  903.205020][ T6646] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  903.227393][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  903.252209][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  903.274886][   T49] bond0 (unregistering): Released all slaves
[  903.522498][ T6646] gp8psk: usb in 138 operation failed.
[  903.531934][ T6646] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  903.542703][ T6646] gp8psk: found Genpix USB device pID = 201 (hex)
[  903.568496][ T6646] usb 3-1: USB disconnect, device number 100
[  903.647136][   T49] bond1 (unregistering): Released all slaves
[  903.913449][ T6646] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  903.935969][   T49] : left promiscuous mode
[  904.105350][ T5198] ldm_validate_privheads(): Disk read failed.
[  904.132368][ T5198] Dev loop2: unable to read RDB block 3
[  904.144040][ T5198]  loop2: unable to read partition table
[  904.159563][ T5198] loop2: partition table beyond EOD, truncated
[  904.227532][T15464] bridge0: port 1(bridge_slave_0) entered blocking state
[  904.234828][   T49] tipc: Left network mode
[  904.242417][T15464] bridge0: port 1(bridge_slave_0) entered disabled state
[  904.250864][T15464] bridge_slave_0: entered allmulticast mode
[  904.259991][T15464] bridge_slave_0: entered promiscuous mode
[  904.275471][T15464] bridge0: port 2(bridge_slave_1) entered blocking state
[  904.287541][T15464] bridge0: port 2(bridge_slave_1) entered disabled state
[  904.295440][T15464] bridge_slave_1: entered allmulticast mode
[  904.307464][T15464] bridge_slave_1: entered promiscuous mode
[  904.326885][T15553] xt_TPROXY: Can be used only with -p tcp or -p udp
[  904.371242][T15554] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  905.089978][ T5831] Bluetooth: hci3: command tx timeout
[  905.305467][T15464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  905.384756][   T49] hsr_slave_0: left promiscuous mode
[  905.392125][   T49] hsr_slave_1: left promiscuous mode
[  905.804397][ T5198] ldm_validate_privheads(): Disk read failed.
[  905.820685][ T5198] Dev loop2: unable to read RDB block 3
[  905.846974][ T5198]  loop2: unable to read partition table
[  905.865578][ T5198] loop2: partition table beyond EOD, truncated
[  905.950508][T15572] netlink: 'syz.2.2922': attribute type 13 has an invalid length.
[  905.974038][T15572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2922'.
[  906.021792][T15574] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2923'.
[  906.188360][ T5950] usb 5-1: new high-speed USB device number 127 using dummy_hcd
[  906.373743][ T5950] usb 5-1: Using ep0 maxpacket: 16
[  906.382656][ T5950] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  906.422427][ T5950] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  906.433531][ T5950] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  906.468355][ T5950] usb 5-1: config 1 has no interface number 1
[  906.474916][ T5950] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  906.523012][ T5950] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  906.540141][ T5950] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  906.572184][ T5950] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  906.580870][ T5950] usb 5-1: Product: syz
[  906.585725][ T5950] usb 5-1: Manufacturer: syz
[  906.627249][ T5950] usb 5-1: SerialNumber: syz
[  906.663959][T15585] loop6: detected capacity change from 0 to 7
[  906.685200][T15585] Dev loop6: unable to read RDB block 7
[  906.698184][T15585]  loop6: unable to read partition table
[  906.704270][T15585] loop6: partition table beyond EOD, truncated
[  906.728233][T15585] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[  907.174919][ T5831] Bluetooth: hci3: command tx timeout
[  907.925444][T15464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  908.075739][ T5950] usb 5-1: USB disconnect, device number 127
[  908.096347][ T5198] ldm_validate_privheads(): Disk read failed.
[  908.109920][ T5198] Dev loop2: unable to read RDB block 3
[  908.137038][ T5198]  loop2: unable to read partition table
[  908.152912][ T5198] loop2: partition table beyond EOD, truncated
[  908.226701][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  908.284482][T15464] team0: Port device team_slave_0 added
[  908.356482][T15464] team0: Port device team_slave_1 added
[  908.457025][T15607] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536
[  908.505265][T15464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  908.515010][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  908.602265][T15464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  908.632707][T15464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  908.647474][T15464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  908.710957][T15464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  909.159977][T15464] hsr_slave_0: entered promiscuous mode
[  909.182265][T15464] hsr_slave_1: entered promiscuous mode
[  909.197743][T15464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  909.230951][T15464] Cannot create hsr debugfs directory
[  909.309516][T15618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2930'.
[  910.197330][T15641] netlink: 'syz.3.2938': attribute type 11 has an invalid length.
[  910.228753][T15641] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2938'.
[  910.676400][T15649] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2939'.
[  910.846700][ T5198] ldm_validate_privheads(): Disk read failed.
[  910.891771][ T5198] Dev loop2: unable to read RDB block 3
[  910.967278][ T5198]  loop2: unable to read partition table
[  910.973657][ T5198] loop2: partition table beyond EOD, truncated
[  911.085453][T15654] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  911.092812][T15654] IPv6: NLM_F_CREATE should be set when creating new route
[  911.211589][ T5198] ldm_validate_privheads(): Disk read failed.
[  911.217874][ T5198] Dev loop2: unable to read RDB block 3
[  911.232806][ T5198]  loop2: unable to read partition table
[  911.245666][ T5198] loop2: partition table beyond EOD, truncated
[  911.403765][T15656] netlink: 'syz.1.2942': attribute type 1 has an invalid length.
[  911.849222][ T5198] ldm_validate_privheads(): Disk read failed.
[  911.855517][ T5198] Dev loop2: unable to read RDB block 3
[  911.917222][ T5198]  loop2: unable to read partition table
[  911.954442][ T5198] loop2: partition table beyond EOD, truncated
[  912.053405][ T6646] usb 4-1: new high-speed USB device number 97 using dummy_hcd
[  912.330311][ T6646] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  912.382492][ T6646] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  912.467283][ T6646] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  912.508261][ T6646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  912.635528][ T6646] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  912.671489][ T6646] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  912.817747][T15670] delete_channel: no stack
[  912.839495][ T6646] usb 4-1: USB disconnect, device number 97
[  912.880126][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  913.149180][ T6644] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  913.279942][T15687] netlink: 'syz.1.2950': attribute type 11 has an invalid length.
[  913.288435][T15687] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2950'.
[  913.331772][ T6644] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  913.345967][ T6644] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  913.454413][ T6644] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  913.511789][ T6644] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  913.555701][ T6644] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.819930][ T6644] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  913.834133][ T5198] ldm_validate_privheads(): Disk read failed.
[  913.905585][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.915147][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.925697][ T5198] Dev loop2: unable to read RDB block 3
[  913.932829][ T5198]  loop2: unable to read partition table
[  913.944644][ T5198] loop2: partition table beyond EOD, truncated
[  913.956221][T15684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  913.965801][T15684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  913.969106][ T6644] usb 5-1: invalid MIDI out EP 0
[  914.004899][T15464] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  914.143161][T15464] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  914.180873][ T5198] ldm_validate_privheads(): Disk read failed.
[  914.197669][T15464] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  914.221958][ T5198] Dev loop2: unable to read RDB block 3
[  914.258254][T15464] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  914.293567][T12820] udevd[12820]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  914.327000][ T5198]  loop2: unable to read partition table
[  914.338288][ T6644] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  914.350486][ T5198] loop2: partition table beyond EOD, truncated
[  914.388499][ T6644] usb 5-1: USB disconnect, device number 2
[  914.618261][ T6646] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  914.706505][T15464] 8021q: adding VLAN 0 to HW filter on device bond0
[  914.768390][ T6646] usb 3-1: Using ep0 maxpacket: 32
[  914.771309][T15464] 8021q: adding VLAN 0 to HW filter on device team0
[  914.788253][ T6646] usb 3-1: unable to get BOS descriptor or descriptor too short
[  914.808405][ T6646] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  914.845454][ T6646] usb 3-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  914.872977][T10154] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.880309][T10154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  914.912261][ T6646] usb 3-1: config 1 interface 0 has no altsetting 0
[  914.932681][ T6646] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  914.952467][ T6646] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  914.953778][T10154] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.967845][T10154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  914.993169][ T6646] usb 3-1: Product: syz
[  914.997466][ T6646] usb 3-1: Manufacturer: syz
[  915.038170][ T6646] usb 3-1: SerialNumber: syz
[  915.200329][T15464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  915.304577][ T6646] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  915.339734][ T6646] usb 3-1: USB disconnect, device number 101
[  915.374569][T15464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  915.584270][T15724] xt_hashlimit: max too large, truncated to 1048576
[  915.592443][T15724] xt_bpf: check failed: parse error
[  915.686931][T15464] veth0_vlan: entered promiscuous mode
[  915.773597][T15464] veth1_vlan: entered promiscuous mode
[  916.308545][T15731] netlink: 'syz.3.2960': attribute type 11 has an invalid length.
[  916.318897][T15731] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2960'.
[  916.405399][ T5198] ldm_validate_privheads(): Disk read failed.
[  916.422113][ T5198] Dev loop2: unable to read RDB block 3
[  916.454815][ T5198]  loop2: unable to read partition table
[  916.481362][ T5198] loop2: partition table beyond EOD, truncated
[  916.558838][ T6646] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  916.670155][ T5198] ldm_validate_privheads(): Disk read failed.
[  916.697374][ T5198] Dev loop2: unable to read RDB block 3
[  916.710384][ T6646] usb 5-1: Using ep0 maxpacket: 32
[  916.736637][ T5198]  loop2: unable to read partition table
[  916.766941][ T6646] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40
[  916.788394][ T5198] loop2: partition table beyond EOD, truncated
[  916.800049][ T6646] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.839574][ T6646] usb 5-1: Product: 㠊
[  916.853147][T15464] veth0_macvtap: entered promiscuous mode
[  916.857583][ T6646] usb 5-1: Manufacturer: ࠐ
[  916.897008][ T6646] usb 5-1: SerialNumber: й
[  916.912735][T15464] veth1_macvtap: entered promiscuous mode
[  917.007319][T15743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2965'.
[  917.064589][T15464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  917.094688][T15464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  917.132713][T15464] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  917.168104][T15464] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  917.200639][T15464] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  917.222747][ T5198] ldm_validate_privheads(): Disk read failed.
[  917.230968][T15464] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  917.245654][ T6646] usbhid 5-1:1.0: can't add hid device: -71
[  917.257772][ T5198] Dev loop2: unable to read RDB block 3
[  917.273105][ T6646] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  917.293165][ T5198]  loop2: unable to read partition table
[  917.312901][ T5198] loop2: partition table beyond EOD, truncated
[  917.340813][ T6646] usb 5-1: USB disconnect, device number 3
[  918.288498][ T6646] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  918.498346][T10157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.506347][T10157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.515003][T15770] fuse: Bad value for 'user_id'
[  918.573133][T15770] fuse: Bad value for 'user_id'
[  918.794284][ T6646] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  918.798191][ T6639] usb 4-1: new high-speed USB device number 98 using dummy_hcd
[  918.878337][ T6646] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  918.938521][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  918.948902][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  918.973583][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  918.974188][ T6646] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  919.001655][ T6639] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  919.027184][ T6639] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  919.067046][ T6639] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  919.076684][ T6646] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.124152][ T6639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  919.155985][ T6646] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  919.180398][    T9] usb 2-1: Using ep0 maxpacket: 16
[  919.246698][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  919.364704][T15757] delete_channel: no stack
[  919.393172][ T6646] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  919.409830][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  919.426160][ T6639] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  919.445902][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  919.463758][T15769] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2971'.
[  919.480444][T15769] delete_channel: no stack
[  919.564389][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  919.569908][ T6646] usb 3-1: USB disconnect, device number 102
[  919.628990][ T6639] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[  919.640612][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  919.682254][ T6639] usb 4-1: USB disconnect, device number 98
[  919.694542][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  919.746796][ T9025] udevd[9025]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  919.768354][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  919.806715][    T9] usb 2-1: Manufacturer: syz
[  919.896012][    T9] usb 2-1: config 0 descriptor??
[  920.418411][    T9] rc_core: IR keymap rc-hauppauge not found
[  920.427212][    T9] Registered IR keymap rc-empty
[  920.550665][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  920.597701][ T5198] ldm_validate_privheads(): Disk read failed.
[  920.606458][ T5198] Dev loop2: unable to read RDB block 3
[  920.616959][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  920.636571][ T5198]  loop2: unable to read partition table
[  920.667736][ T5198] loop2: partition table beyond EOD, truncated
[  920.699995][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  920.800971][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64
[  920.925470][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.077060][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.179782][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.222498][T15801] Scaler: =================  START STATUS  =================
[  921.230218][T15801] Scaler: ==================  END STATUS  ==================
[  921.293765][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.333630][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.385511][T15803] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2975'.
[  921.431743][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.478804][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.548165][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.749776][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.805073][    T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  921.894615][    T9] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  921.930141][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  922.021607][    T9] usb 2-1: USB disconnect, device number 9
[  922.883675][T15821] @: renamed from syz_tun (while UP)
[  923.468136][ T6645] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  923.702401][T15455] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  923.724903][T15455] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  923.736849][T15455] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  923.762962][ T6645] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  923.775193][T15455] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  923.829708][T15841] Cannot find set identified by id 0 to match
[  923.917927][T15455] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  923.988851][ T6645] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  924.029092][ T6645] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  924.038412][ T6645] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  924.085669][ T6645] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  924.464046][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  924.533243][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2981'.
[  924.567484][ T6645] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[  924.601912][ T5198] ldm_validate_privheads(): Disk read failed.
[  924.648643][ T5198] Dev loop2: unable to read RDB block 3
[  924.665011][ T5198]  loop2: unable to read partition table
[  924.695219][ T5198] loop2: partition table beyond EOD, truncated
[  925.613135][ T6644] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  925.739879][T15854] openvswitch: : Dropping previously announced user features
[  925.936589][ T5198] ldm_validate_privheads(): Disk read failed.
[  925.969083][T15455] Bluetooth: hci5: command tx timeout
[  926.011888][ T6644] usb 5-1: config 0 has no interfaces?
[  926.024058][ T6644] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  926.033561][ T6644] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.043540][ T6644] usb 5-1: Product: syz
[  926.047905][ T6644] usb 5-1: Manufacturer: syz
[  926.056408][ T6644] usb 5-1: SerialNumber: syz
[  926.128558][ T6644] usb 5-1: config 0 descriptor??
[  926.174491][T15870] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2988'.
[  926.210017][ T5198] Dev loop2: unable to read RDB block 3
[  926.226535][ T5198]  loop2: unable to read partition table
[  926.302217][ T5198] loop2: partition table beyond EOD, truncated
[  926.617831][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.968811][ T5198] ldm_validate_privheads(): Disk read failed.
[  926.976381][ T5198] Dev loop2: unable to read RDB block 3
[  927.000929][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.014595][ T5198]  loop2: unable to read partition table
[  927.027107][ T5198] loop2: partition table beyond EOD, truncated
[  927.171004][ T5198] ldm_validate_privheads(): Disk read failed.
[  927.185156][ T5198] Dev loop2: unable to read RDB block 3
[  927.197312][ T5198]  loop2: unable to read partition table
[  927.211284][ T5198] loop2: partition table beyond EOD, truncated
[  927.305916][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.654228][T15826] delete_channel: no stack
[  927.660953][ T6644] usb 2-1: USB disconnect, device number 10
[  927.778141][ T6639] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  928.049655][ T6639] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  928.049783][T15455] Bluetooth: hci5: command tx timeout
[  928.061366][ T6639] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  928.110324][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.121731][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2995'.
[  928.244170][ T6639] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  928.380613][ T6639] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  928.562809][T15843] chnl_net:caif_netlink_parms(): no params data found
[  928.598887][ T6639] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  928.660952][ T6639] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[  928.734943][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  928.814736][    T9] usb 5-1: USB disconnect, device number 4
[  928.865813][T15913] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  928.904174][T15889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2991'.
[  929.015602][T15914] vimc link validate: Scaler:src:4096x2160 (0x33424752, 10, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  929.081707][T15889] delete_channel: no stack
[  929.093197][    T9] usb 3-1: USB disconnect, device number 103
[  929.388319][ T6644] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  929.466852][T15843] bridge0: port 1(bridge_slave_0) entered blocking state
[  929.474555][ T6639] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  929.512902][T15843] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.552742][T15843] bridge_slave_0: entered allmulticast mode
[  929.560679][ T6644] usb 2-1: config 0 has an invalid interface number: 140 but max is 0
[  929.572829][ T6644] usb 2-1: config 0 has no interface number 0
[  929.582069][ T6644] usb 2-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01
[  929.595926][ T6644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  929.617094][ T6644] usb 2-1: Product: syz
[  929.630751][ T6644] usb 2-1: Manufacturer: syz
[  929.635977][T15843] bridge_slave_0: entered promiscuous mode
[  929.641275][ T6644] usb 2-1: SerialNumber: syz
[  929.656584][T15843] bridge0: port 2(bridge_slave_1) entered blocking state
[  929.669448][ T6644] usb 2-1: config 0 descriptor??
[  929.679736][T15843] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.698542][ T6639] usb 5-1: Using ep0 maxpacket: 32
[  929.724780][ T6639] usb 5-1: unable to get BOS descriptor or descriptor too short
[  929.737736][T15843] bridge_slave_1: entered allmulticast mode
[  929.760383][ T6639] usb 5-1: too many configurations: 105, using maximum allowed: 8
[  929.783958][T15843] bridge_slave_1: entered promiscuous mode
[  929.799426][ T6639] usb 5-1: unable to read config index 0 descriptor/start: -71
[  929.842165][ T6639] usb 5-1: can't read configurations, error -71
[  930.134347][T15455] Bluetooth: hci5: command tx timeout
[  930.245834][T15843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  930.286260][T15843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  930.313376][   T13] ip6gretap0: left allmulticast mode
[  930.328184][   T13] ip6gretap0: left promiscuous mode
[  930.341499][   T13] bridge0: port 1(ip6gretap0) entered disabled state
[  930.533613][ T5198] ldm_validate_privheads(): Disk read failed.
[  930.557431][ T5198] Dev loop2: unable to read RDB block 3
[  930.578720][ T5198]  loop2: unable to read partition table
[  930.605634][ T5198] loop2: partition table beyond EOD, truncated
[  930.932039][ T6639] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  930.969018][ T6645] usb 3-1: new full-speed USB device number 104 using dummy_hcd
[  931.091870][ T6639] usb 5-1: Using ep0 maxpacket: 16
[  931.103907][ T6639] usb 5-1: config 0 has no interfaces?
[  931.113166][ T6639] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  931.127520][ T6639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  931.137340][ T6639] usb 5-1: Product: syz
[  931.148446][ T6645] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  931.188695][ T6639] usb 5-1: Manufacturer: syz
[  931.193920][ T6639] usb 5-1: SerialNumber: syz
[  931.201373][ T6645] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  931.209259][    T9] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  931.246848][ T6639] usb 5-1: config 0 descriptor??
[  931.324404][ T6645] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  931.339847][ T6645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  931.386600][ T6645] usb 3-1: SerialNumber: syz
[  931.452471][    T9] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  931.455562][ T6645] usb 3-1: 0:2 : does not exist
[  931.666958][    T9] usb 1-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  931.688431][ T6644] as10x_usb: device has been detected
[  931.702017][ T6644] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe)
[  931.762973][ T6644] usb 2-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)...
[  931.845004][ T6644] as10x_usb: error during firmware upload part1
[  931.873538][ T6644] Registered device Elgato EyeTV DTT Deluxe
[  931.889171][ T6644] usb 2-1: USB disconnect, device number 11
[  931.974761][    T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  932.035606][ T6644] Unregistered device Elgato EyeTV DTT Deluxe
[  932.037769][ T6644] as10x_usb: device has been disconnected
[  932.048417][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  932.070182][ T6639] usb 5-1: USB disconnect, device number 6
[  932.206231][    T9] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  932.208630][T15455] Bluetooth: hci5: command tx timeout
[  932.370761][T11990] udevd[11990]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  932.391331][    T9] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  932.570047][ T6639] usb 1-1: USB disconnect, device number 117
[  932.582560][T15936] delete_channel: no stack
[  932.756456][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  932.995739][    T9] usb 2-1: config 0 has no interfaces?
[  933.046470][    T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  933.056313][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.082524][    T9] usb 2-1: Product: syz
[  933.095936][    T9] usb 2-1: Manufacturer: syz
[  933.122853][    T9] usb 2-1: SerialNumber: syz
[  933.155343][    T9] usb 2-1: config 0 descriptor??
[  933.237416][T15949] netlink: 'syz.4.3005': attribute type 2 has an invalid length.
[  933.527349][   T13] bond0 (unregistering): Released all slaves
[  933.656698][T15954] xt_CT: No such helper "pptp"
[  934.032453][   T13] bond1 (unregistering): Released all slaves
[  934.453386][   T13] bond2 (unregistering): Released all slaves
[  934.501524][T15932] batadv_slave_1: entered promiscuous mode
[  934.545005][T15951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'.
[  934.563747][T15939] batadv_slave_1: left promiscuous mode
[  934.635520][ T5913] usb 3-1: USB disconnect, device number 104
[  934.704649][T15843] team0: Port device team_slave_0 added
[  934.713228][ T5198] ldm_validate_privheads(): Disk read failed.
[  934.722761][ T5198] Dev loop2: unable to read RDB block 3
[  934.730866][ T5198]  loop2: unable to read partition table
[  934.739055][ T5198] loop2: partition table beyond EOD, truncated
[  934.778518][   T13] : left promiscuous mode
[  934.830750][T15843] team0: Port device team_slave_1 added
[  934.976089][T15964] input: syz1 as /devices/virtual/input/input65
[  934.994127][T15964] program syz.2.3007 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  935.218966][   T13] tipc: Left network mode
[  935.225903][T15843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  935.286077][   T13] IPVS: stopping master sync thread 9274 ...
[  935.294742][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.392791][T15843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  935.507085][T15843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  935.523921][T15843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.605031][T15843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.869339][   T13] 
[  935.871779][   T13] ======================================================
[  935.878864][   T13] WARNING: possible circular locking dependency detected
[  935.886105][   T13] 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 Not tainted
[  935.893292][   T13] ------------------------------------------------------
[  935.900321][   T13] kworker/u8:1/13 is trying to acquire lock:
[  935.906328][   T13] ffff888034a94e00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0
[  935.916247][   T13] 
[  935.916247][   T13] but task is already holding lock:
[  935.923673][   T13] ffff88807c4c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  935.934256][   T13] 
[  935.934256][   T13] which lock already depends on the new lock.
[  935.934256][   T13] 
[  935.944803][   T13] 
[  935.944803][   T13] the existing dependency chain (in reverse order) is:
[  935.953866][   T13] 
[  935.953866][   T13] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}:
[  935.961682][   T13]        lock_acquire+0x120/0x360
[  935.966860][   T13]        __mutex_lock+0x182/0xe80
[  935.971953][   T13]        ieee80211_open+0xed/0x1f0
[  935.977119][   T13]        __dev_open+0x470/0x880
[  935.982035][   T13]        netif_open+0xaa/0x170
[  935.986865][   T13]        dev_open+0x125/0x260
[  935.991605][   T13]        team_add_slave+0xb36/0x2840
[  935.997211][   T13]        do_set_master+0x530/0x6d0
[  936.002401][   T13]        do_setlink+0xcf0/0x41c0
[  936.007397][   T13]        rtnl_newlink+0x160b/0x1c70
[  936.012746][   T13]        rtnetlink_rcv_msg+0x7cc/0xb70
[  936.018271][   T13]        netlink_rcv_skb+0x208/0x470
[  936.023608][   T13]        netlink_unicast+0x75b/0x8d0
[  936.028943][   T13]        netlink_sendmsg+0x805/0xb30
[  936.034291][   T13]        __sock_sendmsg+0x219/0x270
[  936.039561][   T13]        ____sys_sendmsg+0x505/0x830
[  936.044861][   T13]        ___sys_sendmsg+0x21f/0x2a0
[  936.050075][   T13]        __x64_sys_sendmsg+0x19b/0x260
[  936.055566][   T13]        do_syscall_64+0xfa/0x3b0
[  936.060866][   T13]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  936.067297][   T13] 
[  936.067297][   T13] -> #0 (team->team_lock_key#4){+.+.}-{4:4}:
[  936.075610][   T13]        validate_chain+0xb9b/0x2140
[  936.080945][   T13]        __lock_acquire+0xab9/0xd20
[  936.086163][   T13]        lock_acquire+0x120/0x360
[  936.091202][   T13]        __mutex_lock+0x182/0xe80
[  936.096257][   T13]        team_del_slave+0x32/0x1c0
[  936.101393][   T13]        team_device_event+0x285/0xa20
[  936.106866][   T13]        notifier_call_chain+0x1b3/0x3e0
[  936.112612][   T13]        unregister_netdevice_many_notify+0x15d8/0x2320
[  936.119594][   T13]        unregister_netdevice_queue+0x33c/0x380
[  936.125982][   T13]        _cfg80211_unregister_wdev+0x165/0x590
[  936.132178][   T13]        ieee80211_remove_interfaces+0x49a/0x6d0
[  936.138542][   T13]        ieee80211_unregister_hw+0x5d/0x2c0
[  936.144502][   T13]        mac80211_hwsim_del_radio+0x275/0x460
[  936.150634][   T13]        hwsim_exit_net+0x584/0x640
[  936.155881][   T13]        ops_undo_list+0x49a/0x990
[  936.161016][   T13]        cleanup_net+0x4c5/0x800
[  936.165972][   T13]        process_scheduled_works+0xae1/0x17b0
[  936.172064][   T13]        worker_thread+0x8a0/0xda0
[  936.177232][   T13]        kthread+0x70e/0x8a0
[  936.181874][   T13]        ret_from_fork+0x3fc/0x770
[  936.187082][   T13]        ret_from_fork_asm+0x1a/0x30
[  936.192425][   T13] 
[  936.192425][   T13] other info that might help us debug this:
[  936.192425][   T13] 
[  936.202858][   T13]  Possible unsafe locking scenario:
[  936.202858][   T13] 
[  936.210326][   T13]        CPU0                    CPU1
[  936.215716][   T13]        ----                    ----
[  936.221093][   T13]   lock(&rdev->wiphy.mtx);
[  936.225615][   T13]                                lock(team->team_lock_key#4);
[  936.233100][   T13]                                lock(&rdev->wiphy.mtx);
[  936.240755][   T13]   lock(team->team_lock_key#4);
[  936.245721][   T13] 
[  936.245721][   T13]  *** DEADLOCK ***
[  936.245721][   T13] 
[  936.253885][   T13] 5 locks held by kworker/u8:1/13:
[  936.259018][   T13]  #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  936.270062][   T13]  #1: ffffc90000127bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  936.280723][   T13]  #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  936.290175][   T13]  #3: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0
[  936.300103][   T13]  #4: ffff88807c4c8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0
[  936.311141][   T13] 
[  936.311141][   T13] stack backtrace:
[  936.317095][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(full) 
[  936.317122][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  936.317138][   T13] Workqueue: netns cleanup_net
[  936.317174][   T13] Call Trace:
[  936.317188][   T13]  <TASK>
[  936.317198][   T13]  dump_stack_lvl+0x189/0x250
[  936.317232][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  936.317257][   T13]  ? __pfx__printk+0x10/0x10
[  936.317277][   T13]  ? print_lock_name+0xde/0x100
[  936.317295][   T13]  print_circular_bug+0x2ee/0x310
[  936.317315][   T13]  check_noncircular+0x134/0x160
[  936.317334][   T13]  validate_chain+0xb9b/0x2140
[  936.317353][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  936.317383][   T13]  __lock_acquire+0xab9/0xd20
[  936.317411][   T13]  ? team_del_slave+0x32/0x1c0
[  936.317438][   T13]  lock_acquire+0x120/0x360
[  936.317459][   T13]  ? team_del_slave+0x32/0x1c0
[  936.317485][   T13]  ? __mutex_trylock_common+0x153/0x260
[  936.317504][   T13]  __mutex_lock+0x182/0xe80
[  936.317530][   T13]  ? team_del_slave+0x32/0x1c0
[  936.317554][   T13]  ? rcu_is_watching+0x15/0xb0
[  936.317585][   T13]  ? team_del_slave+0x32/0x1c0
[  936.317610][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  936.317634][   T13]  ? bond_netdev_event+0xd9/0xe80
[  936.317655][   T13]  ? __pfx___mutex_lock+0x10/0x10
[  936.317679][   T13]  ? __pfx_bond_netdev_event+0x10/0x10
[  936.317698][   T13]  team_del_slave+0x32/0x1c0
[  936.317724][   T13]  team_device_event+0x285/0xa20
[  936.317745][   T13]  notifier_call_chain+0x1b3/0x3e0
[  936.317776][   T13]  unregister_netdevice_many_notify+0x15d8/0x2320
[  936.317808][   T13]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  936.317834][   T13]  ? __lock_acquire+0xab9/0xd20
[  936.317864][   T13]  unregister_netdevice_queue+0x33c/0x380
[  936.317888][   T13]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  936.317913][   T13]  _cfg80211_unregister_wdev+0x165/0x590
[  936.317937][   T13]  ieee80211_remove_interfaces+0x49a/0x6d0
[  936.317969][   T13]  ? __pfx_synchronize_rcu+0x10/0x10
[  936.317987][   T13]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  936.318014][   T13]  ? rcu_is_watching+0x15/0xb0
[  936.318044][   T13]  ieee80211_unregister_hw+0x5d/0x2c0
[  936.318071][   T13]  mac80211_hwsim_del_radio+0x275/0x460
[  936.318093][   T13]  ? __pfx_mac80211_hwsim_del_radio+0x10/0x10
[  936.318115][   T13]  hwsim_exit_net+0x584/0x640
[  936.318141][   T13]  ? __pfx_hwsim_exit_net+0x10/0x10
[  936.318173][   T13]  ? __ip_vs_dev_cleanup_batch+0x238/0x260
[  936.318200][   T13]  ops_undo_list+0x49a/0x990
[  936.318223][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  936.318244][   T13]  cleanup_net+0x4c5/0x800
[  936.318263][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  936.318281][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  936.318303][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  936.318329][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  936.318353][   T13]  process_scheduled_works+0xae1/0x17b0
[  936.318388][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  936.318420][   T13]  worker_thread+0x8a0/0xda0
[  936.318454][   T13]  kthread+0x70e/0x8a0
[  936.318474][   T13]  ? __pfx_worker_thread+0x10/0x10
[  936.318498][   T13]  ? __pfx_kthread+0x10/0x10
[  936.318516][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  936.318537][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  936.318559][   T13]  ? __pfx_kthread+0x10/0x10
[  936.318576][   T13]  ret_from_fork+0x3fc/0x770
[  936.318603][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  936.318627][   T13]  ? __switch_to_asm+0x39/0x70
[  936.318643][   T13]  ? __switch_to_asm+0x33/0x70
[  936.318658][   T13]  ? __pfx_kthread+0x10/0x10
[  936.318675][   T13]  ret_from_fork_asm+0x1a/0x30
[  936.318698][   T13]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  936.728448][   T13] mac80211_hwsim hwsim7 wlan1 (unregistering): left promiscuous mode
[  936.765442][   T13] team0: Port device wlan1 removed
[  937.566044][   T13] hsr_slave_0: left promiscuous mode
[  937.583871][   T13] hsr_slave_1: left promiscuous mode
[  937.611541][   T13] veth1_macvtap: left promiscuous mode
[  937.628143][   T13] veth0_macvtap: left promiscuous mode
[  937.633894][   T13] veth1_vlan: left promiscuous mode
[  937.640839][   T13] veth0_vlan: left promiscuous mode
[  938.789864][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  938.796380][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  938.947640][ T6644] usb 2-1: USB disconnect, device number 12
[  939.204200][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.228636][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  939.373130][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.384182][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  939.454056][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.466184][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  939.554374][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.564854][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  939.689599][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.729521][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.784540][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.859676][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  939.954824][   T13] bridge_slave_1: left allmulticast mode
[  939.972380][   T13] bridge_slave_1: left promiscuous mode
[  939.981304][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  939.990746][   T13] bridge_slave_0: left allmulticast mode
[  939.996458][   T13] bridge_slave_0: left promiscuous mode
[  940.004027][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.015029][   T13] bridge_slave_1: left allmulticast mode
[  940.022255][   T13] bridge_slave_1: left promiscuous mode
[  940.029838][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.040781][   T13] bridge_slave_0: left allmulticast mode
[  940.046497][   T13] bridge_slave_0: left promiscuous mode
[  940.056719][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.072943][   T13] bridge_slave_1: left allmulticast mode
[  940.080088][   T13] bridge_slave_1: left promiscuous mode
[  940.085932][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  940.095567][   T13] bridge_slave_0: left allmulticast mode
[  940.103680][   T13] bridge_slave_0: left promiscuous mode
[  940.110506][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  940.377869][   T13] bond3 (unregistering): (slave geneve3): Releasing active interface
[  940.666329][   T13] bond1 (unregistering): (slave macvlan2): Releasing active interface
[  940.678892][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  940.690559][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.700299][   T13] bond0 (unregistering): (slave team0): Releasing backup interface
[  940.710272][   T13] bond0 (unregistering): Released all slaves
[  940.724761][   T13] bond1 (unregistering): Released all slaves
[  940.890052][   T13] bond2 (unregistering): Released all slaves
[  940.900873][   T13] bond3 (unregistering): Released all slaves
[  940.975233][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  940.985781][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  940.995653][   T13] bond0 (unregistering): Released all slaves
[  941.077461][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  941.089261][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  941.099620][   T13] bond0 (unregistering): Released all slaves
[  941.216576][   T13] : left promiscuous mode
[  941.291397][   T13] tipc: Left network mode
[  941.485805][   T13] mac80211_hwsim hwsim3 wlan1 (unregistering): left promiscuous mode
[  941.495367][   T13] team0: Port device wlan1 removed
[  941.822010][   T13] hsr_slave_0: left promiscuous mode
[  941.828406][   T13] hsr_slave_1: left promiscuous mode
[  941.834454][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.843996][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.856029][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.864140][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.877561][   T13] hsr_slave_0: left promiscuous mode
[  941.883765][   T13] hsr_slave_1: left promiscuous mode
[  941.893241][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  941.901079][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  941.912204][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  941.920800][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  941.936211][   T13] veth1_macvtap: left promiscuous mode
[  941.942452][   T13] veth0_macvtap: left promiscuous mode
[  941.949055][   T13] veth1_vlan: left promiscuous mode
[  941.954447][   T13] veth0_vlan: left promiscuous mode
[  942.512415][   T13] team_slave_1 (unregistering): left promiscuous mode
[  942.521459][   T13] team0 (unregistering): Port device team_slave_1 removed
[  942.575989][   T13] team_slave_0 (unregistering): left promiscuous mode
[  942.584957][   T13] team0 (unregistering): Port device team_slave_0 removed
[  943.291063][   T13] team0 (unregistering): Port device team_slave_1 removed
[  943.306011][   T13] team0 (unregistering): Port device team_slave_0 removed
[  943.552962][   T13] team0 (unregistering): Port device team_slave_1 removed
[  943.603787][   T13] team0 (unregistering): Port device team_slave_0 removed
[  944.508300][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.582215][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.623124][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.687672][   T13] netdevsim netdevsim4 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  944.792275][   T13] bridge_slave_1: left allmulticast mode
[  944.801545][   T13] bridge_slave_1: left promiscuous mode
[  944.807426][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  944.816557][   T13] bridge_slave_0: left allmulticast mode
[  944.824125][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.956052][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  944.967280][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  944.978580][   T13] bond0 (unregistering): Released all slaves
[  945.047586][   T13] : left promiscuous mode
[  945.110244][   T13] tipc: Left network mode
[  945.219213][   T13] mac80211_hwsim hwsim9 wlan1 (unregistering): left promiscuous mode
[  945.230561][   T13] team0: Port device wlan1 removed
[  945.377249][   T13] hsr_slave_0: left promiscuous mode
[  945.386242][   T13] hsr_slave_1: left promiscuous mode
[  945.396468][   T13] veth1_macvtap: left promiscuous mode
[  945.407210][   T13] veth0_macvtap: left promiscuous mode
[  945.415187][   T13] veth1_vlan: left promiscuous mode
[  945.420757][   T13] veth0_vlan: left promiscuous mode
[  945.624207][   T13] team_slave_1 (unregistering): left promiscuous mode
[  945.632698][   T13] team0 (unregistering): Port device team_slave_1 removed
[  945.672255][   T13] team_slave_0 (unregistering): left promiscuous mode
[  945.679973][   T13] team0 (unregistering): Port device team_slave_0 removed