last executing test programs:

11.590376495s ago: executing program 3 (id=1109):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1acf, &(0x7f0000002d00)={0x0, 0xfec0, 0x1000, 0x2, 0x234}, &(0x7f0000002d80), &(0x7f0000002dc0), &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000003480)={0xffffffff, 0x0, 0x0, 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344], 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', 0x0})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffe, 0x0, 0xd}, 'syz1\x00', 0x2c})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

10.728665097s ago: executing program 0 (id=1110):
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x14, 0xd, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}}, 0x0)
r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f00000002c0)=[{r2, 0x1000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000040)=0x14)
ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000000))
socket$igmp(0x2, 0x3, 0x2)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4138ae84, 0x0)
pipe(&(0x7f00000000c0))
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50)
r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x25, 0x19, @void}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000a80)=ANY=[@ANYRES32=r5, @ANYRES32, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB, @ANYRES64=0x0], 0x20)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000002200)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, <r11=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r12=>0x0)
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup(r13)
syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x403, 0xb8d8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2, 0x0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x42, 0x10, 0x61, {0x7, 0x25, 0x1, 0x8, 0x3, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x81, 0x81, 0xc, {0x7, 0x25, 0x1, 0x8, 0x8, 0x8000}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x4fb6, 0x0, 0x3, 0x129, 0x0, r14}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x1, 0x10000004, 0x0, r14}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x8000, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r11, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000700)={0x2, @pix_mp={0x8, 0x96, 0x31384142, 0x1, 0x7, [{0xc00000, 0x7fff}, {0x5, 0x7}, {0x6, 0xd4}, {0x7, 0x3}, {0x8001}, {0x2, 0x3}, {0x736}, {0xfbb9, 0x6}], 0xbe, 0xf, 0x4, 0x0, 0x4}})

10.529839455s ago: executing program 2 (id=1112):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc)
madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd})
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
listen(0xffffffffffffffff, 0x732)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xd8, 0x73, 0xff, 0x1, 0x80, 0x9, 0x7f, 0x5, 0x8, 0x5, 0x1, 0x5, 0xf, 0x67}, 0xe)
ioctl$DVB_DEMUX_DMX_ADD_PID(r6, 0x40026f33, &(0x7f00000000c0)=0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d00", @ANYBLOB='j'], 0x0)

9.820462935s ago: executing program 3 (id=1113):
timer_settime(0x0, 0x1, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
lsm_set_self_attr(0x64, 0x0, 0x88, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
unshare(0x42000000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0}}]}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x9c}}, 0x0)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x1, 0x803, 0x1, {0xa, 0x4e21, 0x398fb041, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x13d}}}, 0x32)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_opts(r5, 0x0, 0xf, 0x0, &(0x7f0000000340))
setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x2a, 0x0, "c66ce656ea0ba31b8748b369039eb693fcf802c71b3817104c504a671a17bc57f53807e4e059c4f117fb64fc92cb81adcb8d5fcb468c63dd9ebd6126d09cd1a460171338e5976632ae1d195040e6ebf5"}, 0xd8)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
write$UHID_INPUT2(r6, &(0x7f0000000200)={0xc, {0x7f, "d5ed8bf5c3c24c7d0cedeacefe5db3c8f4d69b94af7b2547d627f177e30a9fd69e7f75b027f0817f293b5ca329440ff02d8e6154f665912c890b70989ae8093918fc66792f9396163a784868ad60e710062acaa7f91f3c3ee01026adc1a8cbd3c120e3fb3a0954d59564a14835b3b95026f4e18760384953726ac11c6f6a7e"}}, 0x85)
sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newsa={0x138, 0x1a, 0x713, 0x0, 0x0, {{@in=@private=0xa010102, @in=@loopback, 0x0, 0x0, 0x0, 0x2}, {@in=@remote, 0x0, 0x33}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, {0x0, 0x0, 0xffffffffffffffff}, {0xffffffff}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@algo_auth={0x48, 0x1, {{'sha1\x00'}}}]}, 0x138}, 0x1, 0x1000000}, 0x0)

9.080000773s ago: executing program 1 (id=1115):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006001200040000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0)
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r2, 0xc028564e, &(0x7f00000000c0)={0x2, 0x0, [0x101, 0x9, 0x2, 0xe9cb, 0x8, 0x6, 0x8, 0x40]})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x10}, 0x18)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r3, &(0x7f0000000100)="c556cb1fba8f120072950edacac3a143692724beed4165f62201ebc94d073f52b5f75aa12a6c0c28480ed4ddd1aa120d9ee354a90f2a846b87fe52a7c86da1b0529cbd891ab3549e6de62c9e93dc7e0b25a0681a356cb092247561959e1b8425c593c264c02e48aace7d93915773375d9b26aa5d97f451ac8f2c9a1aab7d1932f02190f6bcbe1dc9285af5c0f4f505dddacf314d5d8da75b38d1f3a5180e143c0e630c8f81494e78928ef407c0f44a3a025b", &(0x7f00000001c0)=@tcp=r4, 0x2}, 0x20)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x3)
r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000240)={0x60, 0x2, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x800201, 0x0, 0x0, 0xa5, 0x56})
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r6, 0xc040564a, &(0x7f0000000000)={0x7, 0x0, 0x36, 0x100, 0x2, 0x8, 0x4, 0x1})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

7.276838074s ago: executing program 0 (id=1116):
sync()
sync()
sync()
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4)
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r2, r0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000880), 0xde9, r3}, 0x38)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01"], 0x40)
unshare(0x22020600)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200048c1}, 0x2000009c)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r5, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa)
ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0xe43)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f00000003c0)={r6, 0x2, 0x7ff, 0x4, &(0x7f0000000340)=[{0xfff9, 0x0, 0x400}, {0x258f, 0xfff, 0x1, 0x3}, {0x2, 0xa, 0x8446, 0x2}, {0x482, 0x46ea, 0xb, 0x6}]})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18)
sendmsg$can_j1939(r9, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1", 0x7}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@delqdisc={0x34, 0x25, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x2, 0xb}, {0x10, 0x9}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0xeb, 0x7}}, @TCA_RATE={0x6, 0x5, {0x80, 0x4}}]}, 0x34}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4)

7.152190087s ago: executing program 4 (id=1117):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
r5 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_enter(r5, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
ioctl$CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f00000005c0))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)

7.069037756s ago: executing program 2 (id=1118):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80, 0x1c0000)
stat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000002a80)={0x50, 0x0, 0xfffffffffffffca6, {0x7, 0x2d, 0x2, 0x4500b820, 0x3, 0x1462, 0x0, 0x9, 0x0, 0x0, 0x56, 0x2}}, &(0x7f0000002b00)={0x18, 0x0, 0x0, {0x80000001}}, 0x0, &(0x7f0000002b80)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000002bc0)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, &(0x7f0000002c00)={0x28, 0xfffffffffffffff5, 0x3, {{0x5, 0x1000, 0x2}}}, &(0x7f0000002c40)={0x60, 0xfffffffffffffffe, 0x800, {{0x383, 0x4, 0x7ff, 0xc6, 0x7fff, 0x5, 0x1, 0x6}}}, &(0x7f0000002cc0)={0x18, 0xfffffffffffffffe, 0x5, {0x7f}}, &(0x7f0000002d00)={0x11, 0x0, 0x0, {'.'}}, &(0x7f0000002d40)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x2}}, &(0x7f0000002d80)={0x78, 0x0, 0x8, {0x3ff, 0x35d3, 0x0, {0x2, 0x5, 0x6, 0x4, 0x8, 0x7f, 0x66, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x2, 0x400}}}, &(0x7f0000002e00)={0x90, 0xfffffffffffffffe, 0x800, {0x5, 0x0, 0xfffffffffffffff8, 0x401, 0x7f, 0x7, {0x2, 0x0, 0x7, 0x8, 0xf2, 0x7, 0x1d1, 0xfffffff8, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9c}}}, &(0x7f0000000500)={0x198, 0xfffffffffffffff5, 0x8, [{0x5, 0x3, 0x0, 0x6ba1}, {0x5, 0x3bd5, 0xe, 0x80000000, '/dev/swradio#\x00'}, {0x6, 0xffffffffffff7fff, 0x7, 0x7, 'target '}, {0x6, 0x100, 0x7, 0x26bd, 'target '}, {0x4, 0x10000, 0x1, 0xc, 'c'}, {0x0, 0x7, 0x9, 0x9, '/dev/kvm\x00'}, {0x0, 0x1, 0x1, 0x5, '\x00'}, {0x3, 0x1, 0x60, 0x200, '\xcb\xa7\x88\vbp\xbbn\xa0\xd3\xeb|\x14\xcc\xbe\xc6\x14\xcc\xb1\x12?\xc8\xff6\xae\xfdL\xa9#\xa4\x04-\x1f\xaegC\xa9\xf9\xc2\xfeg\xfffr\x1du\x7f\xab\xfd\xabx@\xae@L\x9d\x80=\xc5\x8eA\xf8RCd\x9d\xf8\xca\xfc\xc3]\xd6At\xd9q\xaayu\x106\x8f]\xe5\xa6Ko\x8a\xe3\x9b\xe2\nZ\xb5Fm'}, {0x5, 0x10000, 0x9, 0x0, '/dev/kvm\x00'}]}, &(0x7f0000003480)=ANY=[@ANYBLOB="60060000000000000002000000000000060000000000000001000000000000000002000000000000ff7f000000000000f6ffffff0500000001000000000000007f000000000000000000c000000000000200000000000000002000000000000000000000000000000200000040000000ea0000000060000000100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000800000000000000400000000000000060000000000000002000000aaa00000232f0000000000000600000000000000030000000000000004000000000000000600000000000000ffffffff020000000500000000000000040000000000000001f8ffffffffffff4380d615000000000400000000000000080000000000000001010000080000000100010000100000ff7f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0700000004000000000000000100000000000000b60000000000000001000000070000003a000000000000000400000000000000010000000000000000040000000000000600000000000000010000000d0000000600000000000000d4080000000000000700000000000000000000000000000006000000000000000100000000000080f005000000040000feffffff7e9046e405000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000027020000000000000000000000000000040d00000000000004000000ff0700002f6465762f7667615f617262697465720000000000000000050000000000000000000000000000000000000000000000fdffffffffffffff8100000000000000010000000000000007000000000000000500000000000000000000000000000002000000000000000c00000000002100030000000200000007ffffff00b0000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000104000000000000050000000000000005000000000000000700000000000000746172676574200005000000000000000200000000000000060000000000000005000000000000000c00000005000000000000000000000000000001000000000500000000000000040000000000000036000000000000000300000000000000000400007e8b00000200000000c0000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000c000000000000000500000000000000070000000000000001000000370000002e00000000000000000000000000000001000000000000000300000000000000020000000000000007000000000000000400000000000000ffff0000000000000000008000000000010000000000000008000000000000000500000000000000c100000000800000090000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="08000000080000000000000005000000000000000900000000000000030000000f0000007b2b2f000000000006000000000000000300000000000000f8ffffffffffffff0500000000000000000000000101000001000000000000000100000000000000040000000000000009000000000000000800000000000000ff0100000000000007000000040000004ff600000010000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd51000000080000000000000100000000000000e165ffffffffffff0d000000710600007d2f5b2bf15b2d2e253a212d2e0000000600000000000000010000000000000002000000000000000100000000000000170300000e00000002000000000000000000000000000000cb0000000000000046f20000000000000f000000000000000100000000000000060000000000ffff0400000000100000feffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000002000000000000000600000000000000080000000000000007000000feffffff242c247b795e210000000000000000000000000000000000bb0000000000000053ca000000000000010000000900000000000000000000000900000000000000ff010000000000000100000000000000100000000000000009000000000000007f00000001000000010000000040000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000500000000000000000000000000000005000000000000000000000005000000"], &(0x7f0000003b00)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0x100000000, 0x3, 0x9, 0x1000, {0x0, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x1, 0x9, 0x8000, 0x1, 0xee01, 0x0, 0x4, 0xc}}}}, &(0x7f0000003bc0)={0x20, 0xffffffffffffffda, 0x6, {0x3, 0x0, 0x4, 0x4}}, &(0x7f0000003cc0)={0x130, 0x0, 0x3, {0x9, 0x8, 0x0, '\x00', {0x7ff, 0x6, 0x6, 0x5, 0xffffffffffffffff, r3, 0x2000, '\x00', 0xd5dc, 0x4f, 0x1, 0xfffffffffffffffb, {0x1, 0x1000}, {0xa, 0x80}, {0x1000, 0x9}, {0x7fffffffffffffff, 0x1}, 0x1, 0xe, 0x100, 0x1}}}})
syz_open_dev$dri(0x0, 0xd21, 0x4000)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x4, 0x10, 0x2}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
msgsnd(0x0, 0x0, 0xe3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, 0x0)

6.899428498s ago: executing program 3 (id=1119):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
mlockall(0x2)
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x39c4, 0x2, 0x3, 0xfffffffe}, &(0x7f0000000580), &(0x7f0000000280), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000180)=[0x2, 0x6], 0x2)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000020601080000000000000000000000001400078008001100050005190a0000000000000000"], 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_deladdrlabel={0x1c, 0x49, 0x4, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x20, 0x0, r2, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040040}, 0x56592a445bc89e6d)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x5000)
shmat(0x0, &(0x7f0000ffb000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETGAMMA(r4, 0xc02064a5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc})
write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8)
landlock_restrict_self(0xffffffffffffffff, 0xc)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af3650400120038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_pidfd_open(0x0, 0x0)

6.866146491s ago: executing program 1 (id=1120):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

6.549269138s ago: executing program 1 (id=1121):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = gettid()
waitid(0x2, r3, 0x0, 0x2, 0x0)
syz_open_dev$sndpcmp(0x0, 0xfffffffffffffff1, 0x402000)
syz_open_dev$vbi(&(0x7f0000000340), 0x3, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa0e, 0xffffffff}, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4342, 0x0)
r5 = dup(r4)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r7 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0)
r9 = syz_clone(0x2808000, 0x0, 0x0, 0x0, 0x0, 0x0)
move_pages(r9, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000064c0), 0x0, 0x30100, 0x0)
sendmmsg(r7, 0x0, 0x0, 0x4000000)
mq_open(&(0x7f0000000000)='*\xfd#^^\x00', 0x40, 0xe, &(0x7f0000000040)={0xdc, 0x0, 0x29c, 0x9267})
close(r6)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd86)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x100, 0x9, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '0'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffe01}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_ADT={0x40, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x41}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xfffffffffffffffe}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb5f}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x87}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x80}, 0x4800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))

6.544524213s ago: executing program 0 (id=1131):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
r5 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_enter(r5, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100)
syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r7, 0xffffffffffffffff, 0x0)

5.84188833s ago: executing program 3 (id=1122):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x4000)
shmdt(r4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]})
r5 = syz_io_uring_setup(0x617a, &(0x7f00000002c0)={0x0, 0x1992, 0x20000, 0x1, 0x15a}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0))
io_uring_enter(r5, 0x542d, 0xeaba, 0x0, &(0x7f0000000400)={[0x9b34]}, 0x8)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000)
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8)
r7 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x6a000)
ioctl$CEC_ADAP_G_LOG_ADDRS(r7, 0x805c6103, &(0x7f00000005c0))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source', 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r8, 0xffffffffffffffff, 0x0)

5.0758824s ago: executing program 4 (id=1123):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
set_mempolicy(0x3, &(0x7f0000000140)=0x83e3, 0x1e37)
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109})
mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000b00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x80, 0x1}, 'port1\x00', 0x68, 0x100c65, 0x7fff, 0x0, 0x1ff, 0xffff7ffe, 0xfffffffe, 0x0, 0x6, 0x20})
r2 = dup(0xffffffffffffffff)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, <r3=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x23, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xb5, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10)
syz_usb_connect$uac1(0x5, 0x72, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000300000040820523004000010203010902600003010700030904000000010100000a240181000a000201020904010000010200000904010101010200000905010940000709a00725010810"], 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="4300636fb927de7e0f20ae299194285126a5fadb8d085941e10ce118097bd6d5c029c44d316429b1484e2efa8fdb323369b1ff686a4217823a4c6d89536516039c00fd88ba3040eccfe7073a619e5f788b3bc454a41bc7914764bbf53eff9a888eaeaef637ab410a67480c325dbf519071b7ef9d653314d1a20b5a129776794cf820bd88be0029b5d9ca147856746416af756356e9b13b73bdf2ea9f8acf4c80bdc27825fb0339687a443ab30caeba0f481bc5f4382e7238b0b0", @ANYRES32=r2, @ANYBLOB='\x00'/20, @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="03000000010000000400"/28], 0x50)
write$UHID_INPUT(r2, &(0x7f0000001680)={0x18, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c832, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000)
capset(&(0x7f0000000440)={0x19980330}, &(0x7f0000000480)={0x9, 0x3ff, 0x962, 0x80000000, 0x4, 0x8})
fchdir(0xffffffffffffffff)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0)
socket$kcm(0x2d, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)

5.039557147s ago: executing program 2 (id=1124):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x28, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0x11, 0x16, 0x0, 0x0, @str='&*(-^/[#\\.\xa5%\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x42014}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000240), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x80804120, &(0x7f0000001780))
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0))
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x10)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
poll(&(0x7f00000002c0)=[{r6, 0x80ad}], 0x1, 0x2)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa, 0x1, "fefe807eb37b"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsopen(&(0x7f0000000200)='befs\x00', 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0xbc18a000)

4.508585595s ago: executing program 1 (id=1125):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x7, 0x0, 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000001f00)=""/4093, 0xffd)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(r3, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f56164a3d6f7b80a24d275f6", 0x3f}, {&(0x7f00000006c0)}], 0x3}, 0x40000)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)
quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000401, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})
r6 = socket(0xa, 0x3, 0x3a)
getsockopt(0xffffffffffffffff, 0x128b, 0x100, &(0x7f00000004c0)=""/34, &(0x7f0000000800)=0x22)
setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0)
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.856885864s ago: executing program 4 (id=1126):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x0, 0x1, 0xfffffffc, 0x6, 0x4, 0x0, "5debca561a5fbf61048955f6f876b2ff"})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r4)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0)
keyctl$update(0x2, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001840)=@newchain={0xf14, 0x64, 0x8, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x9, 0x5}, {0x1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x5460}, @filter_kind_options=@f_basic={{0xa}, {0xe8c, 0x2, [@TCA_BASIC_EMATCHES={0x14, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}]}, @TCA_BASIC_ACT={0xe74, 0x3, [@m_pedit={0xe70, 0x11, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x5, 0x5, 0x5, 0x7fff}, 0xe, 0x1, [{0x80000001, 0xe3, 0x629dca08, 0x82, 0xb, 0x6}]}, [{0x7, 0xd, 0xfffffffc, 0x3f, 0xb29, 0x2}, {0x711, 0x0, 0x3, 0x9, 0x6, 0xa}, {0x7, 0x400, 0x1, 0x25, 0x0, 0x1}, {0x0, 0x0, 0x6, 0x1a30, 0x9, 0x85aa}, {0x9, 0xe73, 0x8, 0x9, 0x0, 0x2}, {0x81, 0x54eb, 0x2, 0xfff, 0x9, 0x9}, {0x80, 0x3ff, 0x0, 0x80000001, 0x1, 0x9}, {0x2, 0x8, 0x1, 0x9, 0xff, 0x7f}, {0x1000, 0x4, 0x0, 0x2, 0x6}, {0x3, 0x8, 0xc, 0x7, 0x9, 0xffffffff}, {0x200, 0xffffffff, 0x4, 0xffffff7f, 0xbec, 0x6}, {0x8, 0x0, 0x6, 0x10, 0xfffffffc, 0x7}, {0xfffff7f4, 0x7, 0xfffeffff, 0x80000000, 0x2, 0x100}, {0x1000, 0xbdd, 0x5, 0x4, 0x7, 0xeee}, {0xfffffff9, 0x9, 0x1000, 0x80000000, 0xab}, {0x0, 0x1, 0x8, 0x5, 0x5, 0x7}, {0x5, 0x8, 0x5, 0x3, 0x101, 0xe}, {0x8, 0x89af00, 0x187d, 0xb8, 0x0, 0x2}, {0x0, 0x3, 0x0, 0x9, 0x7ff, 0x7}, {0x8, 0xffffffff, 0x5068, 0x8001, 0x800, 0x4655}, {0x1, 0x641, 0x4, 0x9, 0xb2, 0x1}, {0x0, 0x3, 0x2, 0x9, 0x7, 0xff}, {0x3, 0x7, 0x22, 0x1ff, 0x9, 0x6}, {0xd3, 0x1, 0xfffffff7, 0x7, 0x6, 0x80000000}, {0x3, 0x0, 0x101, 0x2, 0x9, 0x8}, {0x9, 0x1, 0x1, 0x1, 0x10, 0xd143}, {0x7fff, 0x3, 0x7, 0x8, 0x2, 0x50}, {0x8, 0x800, 0x5, 0x6, 0x46, 0x1}, {0x8, 0x0, 0x1ff, 0x7, 0x8, 0x6}, {0x6, 0x3, 0x2, 0x3, 0x0, 0x10}, {0x610b, 0x5, 0xadea, 0x1, 0xc2d, 0x3ff}, {0x10, 0x3ff, 0x6, 0xd51, 0x6, 0x2}, {0x6, 0xffffffff, 0xfff, 0x3, 0xfffffffe, 0x40}, {0x0, 0x4, 0x6, 0x0, 0x8000, 0x7f}, {0xf, 0x1, 0xc, 0x3, 0xd5, 0x41e}, {0x8001, 0x41, 0x5, 0x401, 0x400, 0x1}, {0xa68, 0x3, 0x1, 0x9, 0x136, 0x4}, {0x5fa, 0x40952045, 0x5, 0x3, 0xb, 0x91}, {0x9, 0x2, 0xffffdb1f, 0x8, 0x9, 0x8}, {0x7, 0x7ff, 0x9, 0x1, 0x5, 0x1}, {0x4af9, 0x1, 0xfffffff9, 0xff, 0x7, 0x4}, {0x4, 0x1, 0xf4, 0x8, 0x8, 0x2}, {0x4d7, 0x5, 0x80, 0x9, 0x6, 0x4}, {0x4, 0x3, 0x5, 0x60d, 0x3, 0xe}, {0x3, 0xd, 0x2, 0x5, 0x5, 0x7}, {0xfffffffa, 0x80000001, 0x4, 0x5, 0x5, 0x1}, {0x1, 0x4, 0xffff, 0x81, 0xae, 0x1}, {0x3, 0xf9e, 0x2, 0x7fffffff, 0x6, 0x7f}, {0x80000001, 0x80, 0x0, 0x2, 0x80000001, 0x7}, {0xc000, 0xfffffff9, 0x9, 0xe, 0xfffff800, 0x1}, {0x8, 0x80, 0x0, 0xfffffffe, 0x8, 0x10000}, {0x2, 0x7, 0x3, 0x7546743, 0x5, 0x7}, {0x9, 0x4, 0xfff, 0xb509, 0x200, 0x40d}, {0x3, 0x101, 0x8, 0x3, 0x4, 0x4a94}, {0x7, 0xaec4, 0x7fff, 0x1ff, 0x5, 0x3}, {0x8, 0x3, 0x1, 0x8, 0x81, 0x1ff}, {0x7fff, 0x1, 0x7, 0x40, 0x5}, {0xd1, 0x9, 0x8, 0x5, 0xfffffff8, 0x9}, {0xa, 0x7, 0x6, 0x8, 0x4, 0x7}, {0x101, 0x7fffffff, 0x7, 0xe, 0xffff, 0x5}, {0x8, 0x7, 0x0, 0x5, 0x717, 0x2}, {0x0, 0x5, 0x6, 0xfffffc00, 0x6, 0xf754683}, {0xff, 0x1, 0x26f7, 0xa35, 0x3, 0x3}, {0x8, 0xd, 0x40, 0x71a, 0x707, 0x9}, {0x4, 0x0, 0x4bc6, 0x8, 0x6, 0x7}, {0x60000000, 0x81, 0x0, 0x0, 0x7, 0x7ff}, {0x9, 0x0, 0x2, 0x2, 0x80, 0x2}, {0xa, 0x1, 0x4, 0x400, 0x2}, {0x1, 0x9, 0x200, 0x1, 0xb08e6eb, 0x5}, {0x9, 0x3, 0x5, 0x60, 0x1, 0x3ff}, {0x9, 0x8, 0x5, 0x1, 0x9, 0x1}, {0x1, 0xd, 0x7, 0x6, 0x8, 0x80000001}, {0x7fff, 0x67c4, 0x1, 0x7fffffff, 0x1, 0xd}, {0xffffffff, 0xd0a, 0x3, 0xf, 0x40, 0x3}, {0x3, 0x3, 0x2, 0x4, 0x2, 0x1}, {0x10000, 0x1, 0x4, 0xfffffff8, 0x0, 0xce}, {0x5, 0x1, 0x2, 0x2, 0x95af, 0xfff}, {0xffffffff, 0x200, 0xc85, 0xe90e, 0x9d6, 0x909}, {0x3, 0x10000, 0x1, 0x2, 0x8, 0x1}, {0x8, 0xa2, 0x1, 0xe8a, 0x9, 0x5}, {0x4, 0x7, 0x3, 0x7, 0xdca, 0x100}, {0xd, 0x6, 0x7fff, 0x7b, 0x3a40000, 0x8000}, {0x7c4d000, 0x5, 0x8, 0x7289, 0x4b, 0x3ff}, {0x6, 0x8, 0x3, 0x4, 0x407, 0xaea}, {0x4, 0xffffffff, 0xba1, 0x1, 0x0, 0x13f}, {0x9, 0x10000, 0xffff6816, 0x100, 0x8, 0x20005}, {0x2, 0x705, 0x7f, 0x80000000, 0x2, 0x1}, {0x0, 0x6, 0x80000001, 0x7, 0xffffffff, 0x1}, {0x1000, 0x7, 0x0, 0x9c2, 0x8, 0x4}, {0x80000000, 0x4, 0x7, 0x8, 0x8001, 0x8001}, {0x4, 0x200, 0x2, 0x8, 0x2, 0x200}, {0x1000, 0x1000, 0x8, 0x1, 0x3, 0x7fff}, {0x0, 0x10000, 0x2, 0x10000, 0x0, 0x4}, {0x5, 0xfffeffff, 0xffff, 0x6, 0x2, 0xd}, {0x2, 0x8, 0x4742e04c, 0x4, 0x80, 0x87}, {0x5, 0x5, 0xcf1d, 0x7fff, 0x3, 0x7}, {0x4, 0x9, 0x0, 0xffffffff, 0x6}, {0xff, 0x3, 0xfffffff5, 0x81, 0xffff, 0x3}, {0x6, 0x1e1, 0x7ff, 0x3, 0x3ff, 0x4}, {0x0, 0xfffffffc, 0x8, 0x3, 0x0, 0x7}, {0x2, 0xfffffffb, 0x2, 0x8, 0xe9}, {0x4, 0x2, 0x5, 0x6, 0x3, 0xfffffff8}, {0x5f56, 0xa28, 0x10001, 0x5, 0x9, 0xfffffffc}, {0x1, 0x989, 0x10001, 0x0, 0x9, 0x1}, {0xdd24189f, 0x3, 0x4, 0x7, 0xf, 0x3}, {0x8001, 0x6, 0x10, 0x800, 0x5, 0x8000}, {0x6, 0xfdf, 0x104, 0x8, 0x8, 0xc74}, {0x2, 0x100, 0x401, 0xfffffffe, 0x401, 0xfffffff7}, {0x1ff, 0x4, 0x1, 0x5, 0x1, 0x3}, {0x9, 0xfff, 0x1, 0x1, 0x7ff, 0x2}, {0x8, 0x5, 0x7, 0x5, 0x401}, {0x8, 0x8, 0x4, 0x8000, 0x10, 0x2}, {0x2, 0x4, 0x8, 0x0, 0x5f, 0x7}, {0x5, 0x1d, 0xe2d, 0x8000, 0x728, 0xf44e}, {0x6, 0x8, 0xf99, 0x0, 0x1}, {0x3c, 0x1a4, 0x1, 0x6, 0x9, 0x5}, {0x0, 0x0, 0x5, 0x4, 0x2, 0x7f}, {0x7f, 0x0, 0x4, 0x2, 0x0, 0x9}, {0xf, 0x963, 0x0, 0x8, 0x1ff, 0x10}, {0x1, 0x6, 0xdd17, 0xffffffff, 0x72, 0x1}, {0x3, 0x9, 0x160000, 0xd78, 0xffff, 0xf40}, {0x8b20, 0x4, 0x1, 0x6ca, 0x8, 0x3}, {0x7, 0x8, 0x5, 0x5, 0x1ff, 0x9}, {0x5, 0xfffffffb, 0x10001, 0x1, 0x5, 0x80}, {0x3d2, 0x7, 0x5, 0x7ff, 0x200, 0x9}, {0x3d, 0xf, 0x1000000, 0x8, 0x100, 0xff}, {0x40, 0x7fff, 0x9, 0x95ad, 0xc, 0x8}, {0x2, 0x7, 0x0, 0x5, 0x0, 0x7}], [{0x3, 0x1}, {0x2}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {}, {}, {0x3}, {0x2}, {0x5}, {0x4}, {0x6, 0x1}, {0x0, 0x1}, {0x6}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x1}, {0x4}, {0x1, 0x1}, {}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x4}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2, 0x1}, {0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x5}, {0xa10dbe1d55ffbda1, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {}, {}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x1}, {0x2, 0xb75e169e6f77a21b}, {0x2, 0x1}, {0x2, 0x1}, {0xc38ad17e7657db15, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x1}, {0x5, 0x2}, {0x5}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x3}, {}, {0x5}], 0x1}}]}, {0x9, 0x6, "2fcdfb7fd6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xb1}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_CHAIN={0x8, 0xb, 0x2}]}, 0xf14}}, 0x800)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)
r6 = socket$inet(0xa, 0x801, 0x84)
listen(r6, 0x80000001)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000680)=0xec9e, 0x4)
dup3(r0, r0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8405, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x40)

3.853927689s ago: executing program 0 (id=1137):
socket$kcm(0xa, 0x3, 0x87)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x49, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4805}, 0x4080000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000780)='blkio.bfq.io_merged\x00', 0x26e1, 0x0)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000040), 0xffffffff80000001, 0x1680a2)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/rcu_normal', 0x82802, 0x8)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, 0x0, 0x0)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000240)={'tunl0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x4, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @empty, {[@rr={0x7, 0x3, 0xfe}]}}}}})
syz_fuse_handle_req(r4, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="60010000000000000e000000000000000300000000000000020000000000000006000000000000000700000000000000883c000009000000040000000000000001000080000000000400000000000000010000000000000003000000000000002e010000000000000700000007000000faffffff00c0000000000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000000800000000000000ffffffffffdfffff01040000000000000b00000008000000262b252a21eb285e2d40000000000000060000000000000002000000000000000100000000000000ffffffffffffffff0c0000000800000005000000000000000400000000000000030000000000000000000000000000002800000000000000ff07000000000000c2000000e10c0000070000000020000003000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0600001361000000009d2792138c026f87ffffff07000000000000000b00000007000000262b252a21eb285e2d40000000000000"], 0x0, 0x0, 0x0})
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000300)='.\x00', &(0x7f0000000340), 0x2040002, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB="e1aec83e8bf0c6f6643d", @ANYRESDEC=r6, @ANYBLOB=',allow_other,blksize=0x0000000000000a00,max_read=0x0000000000000002,max_read=0x0000000000000001,default_permissions,default_permissions,smackfsfloor=\x00,seclabel,\x00'])
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r3, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf900000080149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d665f985881a350000ddffffff00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237601a8ca5b07dce141802c4dacf162e43ac6126c370ec00000000a04100", [0xffffffff7ffffce8, 0xa]}})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0x71, 0x0, 0x9, 0x19, 0x0, "585633671ffbca2496d5728d0f8f2bfcb2c20f83c6f1fa74940c64d4abfa391b832442b953fc573f4446b09d04892c8343a864c88ace846789292b47ee7a6d8e", "c50f751886fb50e007d5d016c44110f534af43cc07fac51bee22e72e86c01b4928d69bdefd07854c13920811fd7002dc8aada05a7c0bda02f7ff87fdc11bc4ec", "ee221bd6914010cf945a86f1069be93a8dc7d78055821a5718fd6b88965c471e", [0x3, 0x6]})
syz_open_dev$vbi(0x0, 0x3, 0x2)
r8 = syz_open_dev$cec(&(0x7f0000000540), 0x0, 0x600)
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r9, 0x7a7, &(0x7f00000000c0)=0xb0000)
syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x27d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0xaf, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x4, 0xf4, 0x1, {0x22, 0xa17}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa8, 0x8, 0x2}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1, 0x6, 0xc0, 0x20, 0x5}, 0x93, &(0x7f0000000600)={0x5, 0xf, 0x93, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0xbc, 0xd, 0x7, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0xff, 0x4, 0x401}, @generic={0x79, 0x10, 0x3, "2417785a51d038507532fc1f8782f05220da20ff8df59b23df75740945c205a66b8bc5fa184815b652a05b5738bfd02012e112fee49ff653770681ac5edd5eb28889d7a0256e33efd0140f031effebe0aa957b8dafa80ec99e87dd1c651d312c6da2c934d9a44377b0b849a112853e20db698ffe347d"}]}, 0x1, [{0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x416}}]})
ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r9, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006})
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r9, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40})
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000580)={'Wc9\t', 0xff, 0x6, 0x3, 0x0, 0x0, "09000000e3ff00", "dfffffff", "04000100", "798a202d", ["c21c00dcff00ffdfffffffff", "ffff190008a215016c4a2371", "dc1e00", "38a70ed483c99b9f1600d333"]})
socket$nl_netfilter(0x10, 0x3, 0xc)

3.853070854s ago: executing program 2 (id=1127):
capset(0x0, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = fanotify_init(0x200, 0x48801)
fanotify_mark(r4, 0x1, 0x1001, 0xffffffffffffffff, 0x0)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48)
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x4)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x8, 0xffffffff})
sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d49380371400a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000)
recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x10000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540))
ioctl$KVM_RUN(r7, 0xae80, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
socket$nl_netfilter(0x10, 0x3, 0xc)

3.852794267s ago: executing program 3 (id=1128):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x3, 0x0, 0x2, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000003000/0x4000)=nil, 0x4000, 0xc)
madvise(&(0x7f0000002000/0x3000)=nil, 0x3000, 0xd)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xe400000000000000, 0x5000, 0xfffffffffffffffd})
ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000200)={0xd200000000000000, 0x41000, 0x7})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
listen(0xffffffffffffffff, 0x732)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0)
write$binfmt_script(r5, &(0x7f0000000200), 0xfffffd9d)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8)
r6 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r6, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4})
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0xd8, 0x73, 0xff, 0x1, 0x80, 0x9, 0x7f, 0x5, 0x8, 0x5, 0x1, 0x5, 0xf, 0x67}, 0xe)
ioctl$DVB_DEMUX_DMX_START(r6, 0x6f29)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000c113a3202a11010011d80102030109022400010000c0080904530002058d9d00", @ANYBLOB='j'], 0x0)

3.026472977s ago: executing program 1 (id=1129):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0)
sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000940)={0x27c, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x44}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_NODE={0x1d8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xf8, 0x3, "18b2fbb6027e0131524730cb618d3f611f222d25963574a696230781f59f18ee0fb6cf64fabd2febf85e62d0df34f31f59981bcbe1a73f98b9e71f904e27f9599ac3cd91259b60e14afba3149c0a54ef045cd65b21a19c5e7e86423c08aabebe43ab6bc79cac2d9d73f540c097830b383cf71b276ce62d454a454eb44e1a4d35b66075726afbd2e302c3236bdfa45f9969b7382e63192e812dd769a10ad4a9b4d9b8dabb833e556b6caad0276e148a522d3e4e99ce7f7934a9ea298293452b3eb871e929047bb92ff114bd46a5c57b7edaa19534dde4f74c0177db7f49c9df70385aa649472288f6836b26edfaabca920ffb35a8"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xd8, 0x3, "9f9011c122307f85bae0642dd0c8ddb6456f29738e2425caad3fa650430c919453217c4a94491fa290c4f869bc3f13170ac79e8af17e172b1e223e70ff4415535e0a65f55e22a08b0777c41879088741c0ecc6c1f6ed636adf90908f7fc66c942c28b393becfa9703b7a63556b52b028158e09f6c12f6e5ba69f290949a902242ad86b5c8d1d19c94c5635cd31c77e209cb02f8514cff0559c830f36fb13052f652f55b3a1dbc41516a012b53e372e5415b068ecd3dcee601bfbf0cc21902e3b18cb4312d35460d8903d0d32569d5e9fc3851a76"}]}]}, 0x27c}}, 0x40000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000004209d2515a693185aee7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
syz_io_uring_setup(0x328d, &(0x7f0000001340)={0x0, 0xdece, 0x40, 0x1, 0x223}, &(0x7f0000000080), &(0x7f0000000680), &(0x7f0000000240))
syz_ublk_setup_io_uring(0x3574, &(0x7f0000000340)={0x0, 0xfffffffc, 0x40000, 0x1, 0x1e4}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001300))
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32)
sigaltstack(0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendfile(r4, r4, 0x0, 0x20000005)
openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000001, 0x401d132, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x218, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
sendto$inet(r6, &(0x7f0000000200)="00112233", 0x4, 0x0, &(0x7f0000000280)={0x2, 0x1234, @local}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)

2.904611679s ago: executing program 0 (id=1130):
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x8, 0x7ffd}, 0x48)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, 0x0, 0x0, 0x84000, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x89901)
mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r3, r3, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
io_uring_setup(0x705b, &(0x7f00000004c0)={0x0, 0xe58f, 0x8000, 0x2, 0x1db})
r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
write$binfmt_script(r5, 0x0, 0x0)
close(r5)

1.833539969s ago: executing program 4 (id=1132):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)
ioctl$UI_DEV_DESTROY(r0, 0x5502)

1.772171619s ago: executing program 1 (id=1133):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe)
connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840))
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$uac2(r1, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)={0x5, 0xf, 0x16, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0xc, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x9f, 0x4}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x2, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1})
syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, 0x0, 0x0, &(0x7f0000000240))
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0)
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x47, {0x47, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x40, 0x18, 0x61, "16c081fb9a30b046119bfe8a5f905d48ec2c3745a00bebb3ba8b59e71045d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be780aa15541d82afd002123694427a6c843f37d8"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0})

1.671933953s ago: executing program 2 (id=1134):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)={0x14, r1, 0x309, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x110)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00000d2000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000e7b000/0x4000)=nil, &(0x7f00001a5000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000300))
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r3 = inotify_init1(0x0)
inotify_add_watch(r3, &(0x7f0000000000)='./file1\x00', 0x15)
write$binfmt_elf64(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="7f454c4601040000000000020000000003003e00eb43258f4ef5a9f7345affffff940200000200000040000000000000000000000000004000000000002d8f38000100feff0200030003000000970f000008000000000000000d000000000000000200000000000000090000000000000001000000000000d11dfa62a66e317cc7aa7cd9b36ba253474feb8282813c58981c2f7e1eb9d426b0097261b0fb2c6eb250062e9263cdc7d57eca0ff3f07fb9243b4aa3662f820f861c7d1fa790d67272ba917bbead5f6fae75abe49031f771a5a29996d07d07866dd60e7b56ef33a7a54f8ee845e708b09ac09cec35dd00"], 0x78)
close(r2)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r4, &(0x7f0000000200), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000140), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r4, 0x0, 0x0)
r5 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r5, 0x6145, 0x7721, 0x17, 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x7}, 0x2)
getdents(r2, &(0x7f0000000240)=""/185, 0xb9)

1.582585875s ago: executing program 4 (id=1135):
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r0 = socket(0x2, 0x80805, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
msgctl$MSG_STAT(0x0, 0xb, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
accept4(r1, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x80, 0x1c0000)
stat(&(0x7f0000003c00)='./file0\x00', &(0x7f0000003c40)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000002a80)={0x50, 0x0, 0xfffffffffffffca6, {0x7, 0x2d, 0x2, 0x4500b820, 0x3, 0x1462, 0x0, 0x9, 0x0, 0x0, 0x56, 0x2}}, &(0x7f0000002b00)={0x18, 0x0, 0x0, {0x80000001}}, 0x0, &(0x7f0000002b80)={0x18, 0x0, 0x0, {0x4}}, &(0x7f0000002bc0)={0x18, 0xfffffffffffffffe, 0x6, {0x9}}, &(0x7f0000002c00)={0x28, 0xfffffffffffffff5, 0x3, {{0x5, 0x1000, 0x2}}}, &(0x7f0000002c40)={0x60, 0xfffffffffffffffe, 0x800, {{0x383, 0x4, 0x7ff, 0xc6, 0x7fff, 0x5, 0x1, 0x6}}}, &(0x7f0000002cc0)={0x18, 0xfffffffffffffffe, 0x5, {0x7f}}, &(0x7f0000002d00)={0x11, 0x0, 0x0, {'.'}}, &(0x7f0000002d40)={0x20, 0xffffffffffffffda, 0x7, {0x0, 0x2}}, &(0x7f0000002d80)={0x78, 0x0, 0x8, {0x3ff, 0x35d3, 0x0, {0x2, 0x5, 0x6, 0x4, 0x8, 0x7f, 0x66, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x0, 0x2, 0x400}}}, &(0x7f0000002e00)={0x90, 0xfffffffffffffffe, 0x800, {0x5, 0x0, 0xfffffffffffffff8, 0x401, 0x7f, 0x7, {0x2, 0x0, 0x7, 0x8, 0xf2, 0x7, 0x1d1, 0xfffffff8, 0x7, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x9c}}}, &(0x7f0000000500)={0x198, 0xfffffffffffffff5, 0x8, [{0x5, 0x3, 0x0, 0x6ba1}, {0x5, 0x3bd5, 0xe, 0x80000000, '/dev/swradio#\x00'}, {0x6, 0xffffffffffff7fff, 0x7, 0x7, 'target '}, {0x6, 0x100, 0x7, 0x26bd, 'target '}, {0x4, 0x10000, 0x1, 0xc, 'c'}, {0x0, 0x7, 0x9, 0x9, '/dev/kvm\x00'}, {0x0, 0x1, 0x1, 0x5, '\x00'}, {0x3, 0x1, 0x60, 0x200, '\xcb\xa7\x88\vbp\xbbn\xa0\xd3\xeb|\x14\xcc\xbe\xc6\x14\xcc\xb1\x12?\xc8\xff6\xae\xfdL\xa9#\xa4\x04-\x1f\xaegC\xa9\xf9\xc2\xfeg\xfffr\x1du\x7f\xab\xfd\xabx@\xae@L\x9d\x80=\xc5\x8eA\xf8RCd\x9d\xf8\xca\xfc\xc3]\xd6At\xd9q\xaayu\x106\x8f]\xe5\xa6Ko\x8a\xe3\x9b\xe2\nZ\xb5Fm'}, {0x5, 0x10000, 0x9, 0x0, '/dev/kvm\x00'}]}, &(0x7f0000003480)=ANY=[@ANYBLOB="60060000000000000002000000000000060000000000000001000000000000000002000000000000ff7f000000000000f6ffffff0500000001000000000000007f000000000000000000c000000000000200000000000000002000000000000000000000000000000200000040000000ea0000000060000000100000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0600000000800000000000000400000000000000060000000000000002000000aaa00000232f0000000000000600000000000000030000000000000004000000000000000600000000000000ffffffff020000000500000000000000040000000000000001f8ffffffffffff4380d615000000000400000000000000080000000000000001010000080000000100010000100000ff7f0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="0700000004000000000000000100000000000000b60000000000000001000000070000003a000000000000000400000000000000010000000000000000040000000000000600000000000000010000000d0000000600000000000000d4080000000000000700000000000000000000000000000006000000000000000100000000000080f005000000040000feffffff7e9046e405000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000027020000000000000000000000000000040d00000000000004000000ff0700002f6465762f7667615f617262697465720000000000000000050000000000000000000000000000000000000000000000fdffffffffffffff8100000000000000010000000000000007000000000000000500000000000000000000000000000002000000000000000c00000000002100030000000200000007ffffff00b0000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="060000000104000000000000050000000000000005000000000000000700000000000000746172676574200005000000000000000200000000000000060000000000000005000000000000000c00000005000000000000000000000000000001000000000500000000000000040000000000000036000000000000000300000000000000000400007e8b00000200000000c0000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000c000000000000000500000000000000070000000000000001000000370000002e00000000000000000000000000000001000000000000000300000000000000020000000000000007000000000000000400000000000000ffff0000000000000000008000000000010000000000000008000000000000000500000000000000c100000000800000090000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="08000000080000000000000005000000000000000900000000000000030000000f0000007b2b2f000000000006000000000000000300000000000000f8ffffffffffffff0500000000000000000000000101000001000000000000000100000000000000040000000000000009000000000000000800000000000000ff0100000000000007000000040000004ff600000010000008000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="fd51000000080000000000000100000000000000e165ffffffffffff0d000000710600007d2f5b2bf15b2d2e253a212d2e0000000600000000000000010000000000000002000000000000000100000000000000170300000e00000002000000000000000000000000000000cb0000000000000046f20000000000000f000000000000000100000000000000060000000000ffff0400000000100000feffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000002000000000000000600000000000000080000000000000007000000feffffff242c247b795e210000000000000000000000000000000000bb0000000000000053ca000000000000010000000900000000000000000000000900000000000000ff010000000000000100000000000000100000000000000009000000000000007f00000001000000010000000040000000000080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="090000000500000000000000000000000000000005000000000000000000000005000000"], &(0x7f0000003b00)={0xa0, 0x0, 0x7, {{0x0, 0x1, 0x100000000, 0x3, 0x9, 0x1000, {0x0, 0x1, 0x3, 0x1, 0x4, 0x0, 0x2, 0x1, 0x9, 0x8000, 0x1, 0xee01, 0x0, 0x4, 0xc}}}}, &(0x7f0000003bc0)={0x20, 0xffffffffffffffda, 0x6, {0x3, 0x0, 0x4, 0x4}}, &(0x7f0000003cc0)={0x130, 0x0, 0x3, {0x9, 0x8, 0x0, '\x00', {0x7ff, 0x6, 0x6, 0x5, 0xffffffffffffffff, r3, 0x2000, '\x00', 0xd5dc, 0x4f, 0x1, 0xfffffffffffffffb, {0x1, 0x1000}, {0xa, 0x80}, {0x1000, 0x9}, {0x7fffffffffffffff, 0x1}, 0x1, 0xe, 0x100, 0x1}}}})
syz_open_dev$dri(0x0, 0xd21, 0x4000)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2)
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x4, 0x10, 0x2}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
msgsnd(0x0, 0x0, 0xe3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
sendmmsg$inet(r0, &(0x7f0000004100)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x6401011f}, 0x10, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)="89a5e7e2d5061ecbb22e42e6a1fa46c8761ede6d75a773dee8fea83182086096500c7183f8a09e2e116c5f4f7e4b9db73dc2e363432d2e50880571a92d7ee970a4b7276af9ead063b9c4dc9f72bb26fa060146354e2c49b09fafda6fe52c1af66c52ff3a96c1dc04b6ebcdb40853bbf356829c3b4a7ba5050ef7411716e157908fd1de7f6c37f6b55ca720561be02cb3942eb1b1528bfd9803aac17a5067c9faf11be77571807315e6341eddc8cc7286439df5668a4a1db696dd7657ec8190c8b2c538f46c4fb192c8234a8f1c9d259de517f0b27128d1a39a79f6d2e607e192cfaf9629b67362c820d35dadadc6517ccbb34331390e", 0xf6}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000004c0)="a05b", 0x2}], 0x1}}], 0x2, 0x48000)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000340)=@assoc_value, 0x0)

1.167390947s ago: executing program 0 (id=1136):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
r0 = syz_ublk_setup_io_uring(0x1acf, &(0x7f0000002d00)={0x0, 0xfec0, 0x1000, 0x2, 0x234}, &(0x7f0000002d80), &(0x7f0000002dc0), &(0x7f0000002e00))
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000003480)={0xffffffff, 0x0, 0x0, 0x0}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000040)=ANY=[@ANYRES32=0x41424344], 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', 0x0})
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100, 0xfffe, 0x0, 0xd}, 'syz1\x00', 0x2c})
ioctl$UI_DEV_CREATE(r2, 0x5501)
r3 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)
r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101100)
r5 = socket(0x2, 0x805, 0x0)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x6, 0x7, 0x4, 0x1f4, 0x20, 0xfffffff9, 0x7}, 0x9c)
read(r4, 0x0, 0x0)
ioctl$UI_DEV_DESTROY(r2, 0x5502)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x4)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
syz_80211_inject_frame(&(0x7f0000000140), &(0x7f0000000200)=ANY=[@ANYBLOB="5000000008021100000008020000000008"], 0x42)

505.315192ms ago: executing program 3 (id=1138):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x39, 0x1a, r0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xf0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_GET_XSAVE2(0xffffffffffffffff, 0x9000aecf, &(0x7f00004fa000/0x3000)=nil)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x5, 0xfffffe0000000001, 0xfa11, 0xc}, 0x0)
unshare(0x8040480)
mmap(&(0x7f00005e9000/0x2000)=nil, 0x2000, 0x1000004, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
fsopen(&(0x7f00000004c0)='ocfs2\x00', 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r5)
sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, 0x0, 0x4000004)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r6, 0xc058534f, &(0x7f0000000300)={{0xf}, 0x1, 0x2, 0x2, {0x6}})

185.075986ms ago: executing program 2 (id=1139):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb58dd8d5e5aa", 0xd9}, {&(0x7f0000000640)="18f2539a86f4267acf60e40dadcc211bb186706861b663e404ae5430d948a3deeb5982fbb1551c83edaad587e700949a9d32f5e7ab7cf7f52b86771efac9c04f3e30497f94e49127658062a15683e89b0aceb57d125d3b4ea3d1ad05f4e14c85034917bea1f128a1f6f3f33e7fd479c0c7124b558f472800bd87b2b9bb1221098d2ed2f09ae6829354166d4aaa99ece4c00d202c", 0x94}], 0x2}}], 0x1, 0x4000000)
syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000abe92710b1134200fe76010203010902240001040000000904090202c918020009050402100000fa000905840240"], 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
close(0x3)
socket$kcm(0x29, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000008cdc722a3aae200c0400208018000a8014000700fcf7d701e086d2f3dd750100000000000000000000000000000800028004000180"], 0x4c}}, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x5, "d52c2000000102000300ecffffff0100"})
r4 = syz_open_pts(r2, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0x6)
ioctl$TCFLSH(r4, 0x540b, 0x2)
syz_emit_ethernet(0x0, 0x0, 0x0)
r5 = syz_open_dev$sndpcmc(0x0, 0x3, 0x100)
ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5})
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0)
eventfd2(0xe5c, 0x80000)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

0s ago: executing program 4 (id=1140):
r0 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/191, 0xbf}], 0x1, 0x55, 0xfffffffc)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000b40)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_disconnect(r0)
syz_usb_control_io(r1, 0x0, 0x0)
sync()
sync()
sync()
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000240)=0x4038, 0x4)
bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r4, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50)
setsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="01"], 0x40)
unshare(0x22020600)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200048c1}, 0x2000009c)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mremap(&(0x7f00000d5000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000ffd000/0x2000)=nil)
getsockopt$inet_mptcp_buf(r6, 0x11c, 0x2, &(0x7f0000000040)=""/170, &(0x7f0000000140)=0xaa)
ioctl$KVM_GET_NR_MMU_PAGES(r5, 0xae45, 0xe43)
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5})

kernel console output (not intermixed with test programs):

b 2-1: new high-speed USB device number 24 using dummy_hcd
[  310.998989][ T6754] usb 2-1: Using ep0 maxpacket: 8
[  310.999648][ T6754] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  311.015391][ T6754] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  311.015426][ T6754] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  311.015473][ T6754] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  311.015486][ T6754] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  311.015499][ T6754] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  311.015511][ T6754] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  311.015536][ T6754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.308406][ T6754] usb 2-1: GET_CAPABILITIES returned 0
[  311.308436][ T6754] usbtmc 2-1:16.0: can't read capabilities
[  311.619033][ T8680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'.
[  311.698900][    C1] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71
[  311.713442][ T8685] usbtmc 2-1:16.0: Unable to send data, error -71
[  311.873355][ T6754] usb 2-1: USB disconnect, device number 24
[  311.962609][ T8692] 8021q: adding VLAN 0 to HW filter on device bond0
[  311.987607][ T8692] 8021q: adding VLAN 0 to HW filter on device batadv0
[  312.128538][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.142717][ T8692] batman_adv: batadv0: Interface activated: batadv_slave_1
[  312.172045][ T8692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  312.172073][ T8692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  312.205363][ T8692] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  312.208896][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.208959][ T6524] bridge0: port 1(bridge_slave_0) entered forwarding state
[  312.210276][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.210336][ T6524] bridge0: port 2(bridge_slave_1) entered forwarding state
[  313.843045][ T8713] bridge_slave_0: left allmulticast mode
[  313.843073][ T8713] bridge_slave_0: left promiscuous mode
[  313.843307][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.904381][ T8713] bridge_slave_1: left allmulticast mode
[  313.905506][ T8713] bridge_slave_1: left promiscuous mode
[  313.907698][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.974525][ T8713] bond0: (slave bond_slave_0): Releasing backup interface
[  314.025831][ T8713] bond0: (slave bond_slave_1): Releasing backup interface
[  314.072381][ T8713] team0: Port device team_slave_0 removed
[  314.111554][ T8713] team0: Port device team_slave_1 removed
[  314.183767][ T8713] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.284429][ T8713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  315.693370][ T8726] netlink: 20 bytes leftover after parsing attributes in process `syz.1.643'.
[  316.350737][ T5685] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  316.540636][ T5685] usb 4-1: Using ep0 maxpacket: 32
[  316.543057][ T5685] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=b5.f6
[  316.545333][ T5685] usb 4-1: config 0 has an invalid interface number: 61 but max is 1
[  316.545351][ T5685] usb 4-1: config 0 has no interface number 1
[  316.551950][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  316.551975][ T5685] usb 4-1: Product: syz
[  316.551989][ T5685] usb 4-1: Manufacturer: syz
[  316.552002][ T5685] usb 4-1: SerialNumber: syz
[  316.582029][ T5685] usb 4-1: config 0 descriptor??
[  316.691323][ T5685] viperboard 4-1:0.61: version 0.00 found at bus 004 address 036
[  316.899005][ T5685] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  316.899027][ T5685] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  316.996769][ T5685] viperboard 4-1:0.0: version 0.00 found at bus 004 address 036
[  317.096679][ T5685] viperboard-i2c viperboard-i2c.5.auto: error -EIO: failure setting i2c_bus_freq to 100
[  317.096727][ T5685] viperboard-i2c viperboard-i2c.5.auto: probe with driver viperboard-i2c failed with error -5
[  317.164897][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  317.164945][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  317.485172][   T25] usb 4-1: USB disconnect, device number 36
[  317.571044][ T6580] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  317.605018][ T8746] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  317.720755][ T6580] usb 5-1: Using ep0 maxpacket: 8
[  317.728936][ T6580] usb 5-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[  317.749108][ T6580] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  317.749136][ T6580] usb 5-1: Product: syz
[  317.749151][ T6580] usb 5-1: Manufacturer: syz
[  317.749163][ T6580] usb 5-1: SerialNumber: syz
[  318.031722][ T6580] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  318.164908][ T6580] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  318.203127][ T6580] usb 5-1: USB disconnect, device number 29
[  318.320348][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  318.839893][ T8770] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  319.533004][ T8778] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  320.282242][ T5685] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  320.478848][ T5685] usb 5-1: unable to get BOS descriptor or descriptor too short
[  320.478881][ T5685] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97
[  320.505817][ T5685] usb 5-1: config 2 has an invalid interface number: 8 but max is 0
[  320.505835][ T5685] usb 5-1: config 2 has no interface number 0
[  320.505851][ T5685] usb 5-1: config 2 interface 8 has no altsetting 0
[  320.551854][ T5685] usb 5-1: string descriptor 0 read error: -22
[  320.551930][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.584829][ T5685] usbtest 5-1:2.8: Linux user mode ISO test driver
[  320.584845][ T5685] usbtest 5-1:2.8: low-speed {control} tests (+alt)
[  320.813407][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  320.816089][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  320.900773][ T5685] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  321.083012][ T5685] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  321.084383][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  321.084408][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 28777, setting to 64
[  321.084440][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.089870][ T5685] usb 4-1: config 0 descriptor??
[  321.464672][ T5685] ath6kl: Failed to submit usb control message: -71
[  321.465019][ T5685] ath6kl: unable to send the bmi data to the device: -71
[  321.465043][ T5685] ath6kl: Unable to send get target info: -71
[  321.496214][ T5685] ath6kl: Failed to init ath6kl core: -71
[  321.497495][ T5685] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71
[  321.539719][ T5685] usb 4-1: USB disconnect, device number 37
[  322.070906][ T5685] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  322.152084][ T6754] usb 5-1: USB disconnect, device number 30
[  322.221162][ T5685] usb 1-1: Using ep0 maxpacket: 8
[  322.226258][ T5685] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  322.253514][ T5685] usb 1-1: config 0 has an invalid interface number: 186 but max is 0
[  322.253544][ T5685] usb 1-1: config 0 has no interface number 0
[  322.253568][ T5685] usb 1-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  322.253580][ T5685] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  322.253594][ T5685] usb 1-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  322.253607][ T5685] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  322.253620][ T5685] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  322.282288][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.282315][ T5685] usb 1-1: Product: syz
[  322.282329][ T5685] usb 1-1: Manufacturer: syz
[  322.282348][ T5685] usb 1-1: SerialNumber: syz
[  322.383459][ T5685] usb 1-1: config 0 descriptor??
[  322.670809][ T5685] iowarrior 1-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  322.698294][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'.
[  322.720748][ T6754] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  322.724644][ T8811] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  322.892157][ T6754] usb 4-1: Using ep0 maxpacket: 8
[  322.894418][ T6754] usb 4-1: unable to get BOS descriptor or descriptor too short
[  322.894450][ T6754] usb 4-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  322.895284][ T6754] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 64
[  322.897235][ T6754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.897250][ T6754] usb 4-1: Product: syz
[  322.897257][ T6754] usb 4-1: Manufacturer: syz
[  322.897265][ T6754] usb 4-1: SerialNumber: syz
[  323.125205][ T6754] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  323.125257][ T6754] usb 4-1: MIDIStreaming interface descriptor not found
[  323.379598][ T6754] usb 4-1: USB disconnect, device number 38
[  323.570130][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.737227][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.738104][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.954724][ T8823] bridge_slave_0: left allmulticast mode
[  323.954755][ T8823] bridge_slave_0: left promiscuous mode
[  323.954961][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.025201][ T8823] bridge_slave_1: left allmulticast mode
[  324.025229][ T8823] bridge_slave_1: left promiscuous mode
[  324.025616][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.088559][ T8823] bond0: (slave bond_slave_0): Releasing backup interface
[  324.172284][ T8823] bond0: (slave bond_slave_1): Releasing backup interface
[  324.371684][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.387835][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_0
[  324.414721][ T8823] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.435442][ T8823] batman_adv: batadv0: Removing interface: batadv_slave_1
[  324.505302][ T8823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  324.679134][ T8829] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  324.998975][ T8835] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  325.343235][ T5686] usb 1-1: USB disconnect, device number 27
[  325.644176][ T8842] blktrace: Concurrent blktraces are not allowed on nullb0
[  325.649239][ T8842] netlink: 'syz.0.667': attribute type 4 has an invalid length.
[  325.696490][ T8842] netlink: 'syz.0.667': attribute type 4 has an invalid length.
[  325.722896][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'.
[  326.130146][ T8854] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  326.269843][   T30] audit: type=1326 audit(1791270467.951:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.300884][ T5686] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  326.302170][   T30] audit: type=1326 audit(1791270467.991:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.303462][   T30] audit: type=1326 audit(1791270467.991:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.307444][   T30] audit: type=1326 audit(1791270467.991:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.371838][   T30] audit: type=1326 audit(1791270467.991:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.372123][   T30] audit: type=1326 audit(1791270468.061:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.383197][   T30] audit: type=1326 audit(1791270468.061:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.434815][   T30] audit: type=1326 audit(1791270468.121:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.439755][   T30] audit: type=1326 audit(1791270468.121:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.447490][   T30] audit: type=1326 audit(1791270468.121:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8853 comm="syz.3.670" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdb0279e199 code=0x7ffc0000
[  326.553862][ T5686] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  326.578104][ T5686] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  326.578130][ T5686] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  326.578141][ T5686] usb 5-1: config 0 has no interface number 0
[  326.578162][ T5686] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  326.606106][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.606133][ T5686] usb 5-1: Product: syz
[  326.606148][ T5686] usb 5-1: Manufacturer: syz
[  326.606162][ T5686] usb 5-1: SerialNumber: syz
[  326.653518][ T5686] usb 5-1: config 0 descriptor??
[  326.681461][ T5686] redrat3 5-1:0.83: Couldn't find all endpoints
[  327.350772][ T8865] netlink: 164 bytes leftover after parsing attributes in process `syz.2.671'.
[  328.588990][ T8880] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  329.136752][ T8889] blktrace: Concurrent blktraces are not allowed on nullb0
[  329.159974][ T8889] netlink: 'syz.2.679': attribute type 4 has an invalid length.
[  329.173338][ T5685] usb 5-1: USB disconnect, device number 31
[  329.223321][ T8889] netlink: 'syz.2.679': attribute type 4 has an invalid length.
[  329.246183][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'.
[  329.360981][ T5686] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  329.522504][ T5686] usb 2-1: Using ep0 maxpacket: 8
[  329.523441][ T5686] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5
[  329.548794][ T5686] usb 2-1: config 0 has an invalid interface number: 186 but max is 0
[  329.548812][ T5686] usb 2-1: config 0 has no interface number 0
[  329.548838][ T5686] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  329.548850][ T5686] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8
[  329.548865][ T5686] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A
[  329.548893][ T5686] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  329.548908][ T5686] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  329.635550][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.635572][ T5686] usb 2-1: Product: syz
[  329.635580][ T5686] usb 2-1: Manufacturer: syz
[  329.635588][ T5686] usb 2-1: SerialNumber: syz
[  329.648311][ T5686] usb 2-1: config 0 descriptor??
[  329.727803][ T8895] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  330.032217][ T5686] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0
[  330.558695][ T8902] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000)
[  331.250834][ T5686] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  331.379678][ T8916] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  331.417453][ T5686] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.419421][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  331.419453][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  331.419474][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.419501][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.465496][ T5686] usb 5-1: config 0 descriptor??
[  331.581830][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.585246][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  331.619252][ T8920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  331.623879][ T8920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  332.107234][ T5686] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  332.443581][ T8909] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.509597][ T8909] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.543897][ T6571] usb 2-1: USB disconnect, device number 25
[  332.773665][ T8909] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  332.853801][ T5686] usb 5-1: USB disconnect, device number 32
[  333.187947][ T8933] ALSA: mixer_oss: invalid OSS volume ''
[  333.471179][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.520965][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.523261][ T8940] loop4: detected capacity change from 0 to 2640
[  333.525613][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525655][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525684][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525714][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525742][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525787][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525827][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525856][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525871][ T8940] ldm_validate_partition_table(): Disk read failed.
[  333.525898][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525926][ T8940] Buffer I/O error on dev loop4, logical block 0, async page read
[  333.525971][ T8940] Dev loop4: unable to read RDB block 0
[  333.590950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  333.690055][ T8940]  loop4: unable to read partition table
[  333.690187][ T8940] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  333.900451][ T8943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.693'.
[  334.157741][ T8948] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  334.366126][ T8952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.366377][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  334.481816][ T8954] syzkaller0: entered promiscuous mode
[  334.481838][ T8954] syzkaller0: entered allmulticast mode
[  334.974050][ T8959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[  335.200207][ T8966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.697'.
[  335.200232][ T8966] netlink: 1932 bytes leftover after parsing attributes in process `syz.2.697'.
[  335.200247][ T8966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.697'.
[  335.930864][ T5722] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  336.093188][ T5722] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  336.117682][ T5722] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  336.117711][ T5722] usb 1-1: Product: syz
[  336.117719][ T5722] usb 1-1: SerialNumber: syz
[  336.148471][ T5722] usb 1-1: config 0 descriptor??
[  336.460570][ T8976] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[  336.556387][ T5722] usb 1-1: USB disconnect, device number 28
[  336.622042][ T8993] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  336.625397][ T8993] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.834352][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  336.847778][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  337.811103][ T5686] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  337.872313][ T5722] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  337.976073][ T5686] usb 1-1: Using ep0 maxpacket: 16
[  338.054465][ T5722] usb 4-1: Using ep0 maxpacket: 8
[  338.068613][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short
[  338.068685][ T5722] usb 4-1: New USB device found, idVendor=0499, idProduct=89a4, bcdDevice=4f.cd
[  338.092831][ T5722] usb 4-1: config 2 has an invalid interface number: 232 but max is 0
[  338.092859][ T5722] usb 4-1: config 2 has no interface number 0
[  338.092943][ T5722] usb 4-1: config 2 interface 232 altsetting 128 endpoint 0x5 has invalid maxpacket 3917, setting to 1024
[  338.092969][ T5722] usb 4-1: config 2 interface 232 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1024
[  338.092993][ T5722] usb 4-1: config 2 interface 232 has no altsetting 0
[  338.101466][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  338.101493][ T5722] usb 4-1: Product: syz
[  338.101507][ T5722] usb 4-1: Manufacturer: syz
[  338.101521][ T5722] usb 4-1: SerialNumber: syz
[  338.186315][ T9007] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  338.438794][ T9007] xt_hashlimit: max too large, truncated to 1048576
[  338.830137][ T5722] usb 4-1: USB disconnect, device number 39
[  338.850606][ T9023] blktrace: Concurrent blktraces are not allowed on nullb0
[  338.859552][ T9023] netlink: 'syz.1.712': attribute type 4 has an invalid length.
[  338.936751][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.232/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  339.001126][ T9023] netlink: 'syz.1.712': attribute type 4 has an invalid length.
[  339.192500][ T9013] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.581102][ T5686] usb 1-1: unable to get BOS descriptor or descriptor too short
[  339.581153][ T5686] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  339.581974][ T5686] usb 1-1: unable to read config index 0 descriptor/start: -71
[  339.581995][ T5686] usb 1-1: can't read configurations, error -71
[  339.964361][ T5672] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  340.240760][ T5686] usb 1-1: new full-speed USB device number 30 using dummy_hcd
[  340.401706][ T5686] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  340.408782][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  340.408817][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 28777, setting to 64
[  340.408859][ T5686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.446223][ T5686] usb 1-1: config 0 descriptor??
[  340.918773][ T9049] bond3: entered promiscuous mode
[  340.929145][ T9049] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.130540][ T5686] ath6kl: Failed to submit usb control message: -71
[  341.130572][ T5686] ath6kl: unable to send the bmi data to the device: -71
[  341.130580][ T5686] ath6kl: Unable to send get target info: -71
[  341.153472][ T5686] ath6kl: Failed to init ath6kl core: -71
[  341.154687][ T5686] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  341.162239][ T5686] usb 1-1: USB disconnect, device number 30
[  341.583896][ T9060] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  341.870868][ T9069] netlink: 36 bytes leftover after parsing attributes in process `syz.1.723'.
[  341.918849][ T9069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  342.025393][ T9073] fuse: Bad value for 'fd'
[  342.136324][ T9069] loop8: detected capacity change from 0 to 7
[  342.227644][ T9069] Dev loop8: unable to read RDB block 7
[  342.227692][ T9069]  loop8: unable to read partition table
[  342.247274][ T9069] loop8: partition table beyond EOD, truncated
[  342.247314][ T9069] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  343.520577][ T9092] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  343.570902][ T6755] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  343.720975][ T6755] usb 5-1: Using ep0 maxpacket: 32
[  343.721872][ T6755] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  343.726186][ T6755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  343.726211][ T6755] usb 5-1: Product: syz
[  343.726225][ T6755] usb 5-1: Manufacturer: syz
[  343.726239][ T6755] usb 5-1: SerialNumber: syz
[  343.753342][ T6755] usb 5-1: config 0 descriptor??
[  343.764201][ T6755] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  344.007608][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.731'.
[  344.240383][ T9100] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  345.669282][ T9116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  346.177027][ T9129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.078131][ T9141] loop6: detected capacity change from 0 to 524288000
[  347.087681][ T9141] net_ratelimit: 5 callbacks suppressed
[  347.087785][ T9141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.088043][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  347.180785][ T9141] loop6: detected capacity change from 524288000 to 1
[  347.185542][ T9141] Dev loop6: unable to read RDB block 1
[  347.185573][ T9141]  loop6: unable to read partition table
[  347.185702][ T9141] loop6: partition table beyond EOD, truncated
[  347.185714][ T9141] loop_reread_partitions: partition scan of loop6 (�u0v��	) failed (rc=-5)
[  347.218585][ T6755] gspca_stk1135: reg_w 0x353 err -71
[  347.219637][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219649][ T6755] gspca_stk1135: Sensor write failed
[  347.219675][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219685][ T6755] gspca_stk1135: Sensor write failed
[  347.219709][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219718][ T6755] gspca_stk1135: Sensor read failed
[  347.219742][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219751][ T6755] gspca_stk1135: Sensor read failed
[  347.219757][ T6755] gspca_stk1135: Detected sensor type unknown (0x0)
[  347.219790][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219800][ T6755] gspca_stk1135: Sensor read failed
[  347.219824][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219833][ T6755] gspca_stk1135: Sensor read failed
[  347.219856][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219865][ T6755] gspca_stk1135: Sensor write failed
[  347.219891][ T6755] gspca_stk1135: serial bus timeout: status=0x00
[  347.219900][ T6755] gspca_stk1135: Sensor write failed
[  347.223934][ T6755] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71
[  347.237306][ T6755] usb 5-1: USB disconnect, device number 33
[  347.862173][ T9153] netlink: 44 bytes leftover after parsing attributes in process `syz.4.745'.
[  347.864710][ T9153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  347.960000][   T30] kauditd_printk_skb: 27 callbacks suppressed
[  347.960014][   T30] audit: type=1326 audit(1791270489.641:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  347.966260][   T30] audit: type=1326 audit(1791270489.651:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  347.966308][   T30] audit: type=1326 audit(1791270489.651:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.046249][   T30] audit: type=1326 audit(1791270489.691:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.047765][   T30] audit: type=1326 audit(1791270489.741:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.049697][   T30] audit: type=1326 audit(1791270489.741:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.127698][   T30] audit: type=1326 audit(1791270489.811:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.157353][   T30] audit: type=1326 audit(1791270489.811:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.179050][   T30] audit: type=1326 audit(1791270489.851:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.185515][   T30] audit: type=1326 audit(1791270489.851:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9148 comm="syz.2.743" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9e159e199 code=0x7ffc0000
[  348.550779][ T6755] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  348.715396][ T6755] usb 5-1: Using ep0 maxpacket: 32
[  348.715944][ T6755] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  348.717430][ T6755] usb 5-1: config 0 has an invalid interface number: 131 but max is 0
[  348.717453][ T6755] usb 5-1: config 0 has no interface number 0
[  348.717490][ T6755] usb 5-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  348.717526][ T6755] usb 5-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  348.717550][ T6755] usb 5-1: config 0 interface 131 has no altsetting 0
[  348.722932][ T6755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.722960][ T6755] usb 5-1: Product: syz
[  348.722975][ T6755] usb 5-1: Manufacturer: syz
[  348.722988][ T6755] usb 5-1: SerialNumber: syz
[  348.752449][ T6755] usb 5-1: config 0 descriptor??
[  350.330009][ T9175] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  350.964077][ T6755] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  350.964897][ T6755] gspca_topro: reg_w err -71
[  350.984501][ T9153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.001396][ T6755] gspca_topro: Sensor soi763a
[  351.028674][ T6755] usb 5-1: USB disconnect, device number 34
[  351.920889][ T6571] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  352.070744][ T6571] usb 2-1: Using ep0 maxpacket: 16
[  352.071329][ T6571] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  352.072246][ T6571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.072272][ T6571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.078517][ T6571] usb 2-1: config 0 descriptor??
[  352.520150][ T6571] mcp2221 0003:04D8:00DD.000A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[  352.938144][ T6571] usb 2-1: USB disconnect, device number 27
[  353.298840][ T9222] fuse: Bad value for 'fd'
[  353.586355][ T9233] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  354.066239][ T9247] netlink: 44 bytes leftover after parsing attributes in process `syz.1.765'.
[  354.118506][ T9247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  354.176280][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.176777][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.205694][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.208499][ T6755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.229447][ T6755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.229621][ T6755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.229750][ T6755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.294687][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.295738][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.326500][ T9246] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.620796][ T5722] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  354.652950][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  354.652968][   T30] audit: type=1800 audit(1791270496.341:1520): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.768" name="/" dev="fuse" ino=1 res=0 errno=0
[  354.780900][ T5722] usb 2-1: Using ep0 maxpacket: 32
[  354.781605][ T5722] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  354.782897][ T5722] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  354.782922][ T5722] usb 2-1: config 0 has no interface number 0
[  354.782943][ T5722] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  354.782962][ T5722] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  354.782976][ T5722] usb 2-1: config 0 interface 131 has no altsetting 0
[  354.805109][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.805139][ T5722] usb 2-1: Product: syz
[  354.805156][ T5722] usb 2-1: Manufacturer: syz
[  354.805170][ T5722] usb 2-1: SerialNumber: syz
[  354.835202][ T5722] usb 2-1: config 0 descriptor??
[  354.891806][ T9273] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  355.952072][ T5686] usb 1-1: new full-speed USB device number 31 using dummy_hcd
[  356.114919][ T5686] usb 1-1: not running at top speed; connect to a high speed hub
[  356.114957][ T5686] usb 1-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.40
[  356.117002][ T5686] usb 1-1: config 1 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  356.117023][ T5686] usb 1-1: config 1 interface 0 has no altsetting 0
[  356.120545][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.120572][ T5686] usb 1-1: Product: syz
[  356.120620][ T5686] usb 1-1: Manufacturer: syz
[  356.120629][ T5686] usb 1-1: SerialNumber: syz
[  356.209450][ T9298] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'.
[  356.549777][ T9298] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  356.602306][ T5686] usbhid 1-1:1.0: can't add hid device: -71
[  356.602399][ T5686] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  356.615760][ T5686] usb 1-1: USB disconnect, device number 31
[  356.697160][ T9297] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  357.004781][ T5722] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  357.005096][ T5722] gspca_topro: reg_w err -71
[  357.020592][ T9252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  357.041958][ T5722] gspca_topro: Sensor soi763a
[  357.046517][ T5722] usb 2-1: USB disconnect, device number 28
[  357.879843][ T9320] blktrace: Concurrent blktraces are not allowed on nullb0
[  357.890754][ T9320] netlink: 'syz.4.781': attribute type 4 has an invalid length.
[  357.986899][ T9320] netlink: 'syz.4.781': attribute type 4 has an invalid length.
[  358.267879][ T9316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.638100][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.017643][ T9330] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.501752][ T9346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.787'.
[  359.505458][ T9346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  359.673122][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.673364][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.480807][ T5672] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  360.635969][ T5672] usb 5-1: Using ep0 maxpacket: 8
[  360.638670][ T5672] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  360.640578][ T5672] usb 5-1: config 1 has an invalid descriptor of length 173, skipping remainder of the config
[  360.640606][ T5672] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  360.640626][ T5672] usb 5-1: config 1 has no interface number 0
[  360.640779][ T5672] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xBC, changing to 0x8C
[  360.640795][ T5672] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 93, changing to 7
[  360.640809][ T5672] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x8C has invalid maxpacket 9440, setting to 1024
[  360.706522][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.706540][ T5672] usb 5-1: Product: syz
[  360.706548][ T5672] usb 5-1: Manufacturer: syz
[  360.706555][ T5672] usb 5-1: SerialNumber: syz
[  361.414538][ T5722] usb 5-1: USB disconnect, device number 35
[  362.174540][ T9373] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  362.466564][ T9350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.578358][ T9381] blktrace: Concurrent blktraces are not allowed on nullb0
[  362.580301][ T9381] netlink: 'syz.2.793': attribute type 4 has an invalid length.
[  362.615451][ T9381] netlink: 'syz.2.793': attribute type 4 has an invalid length.
[  362.871008][    C1] net_ratelimit: 5 callbacks suppressed
[  362.871029][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.960868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.380989][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.923197][ T9394] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  363.992738][ T9395] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  364.174428][ T9405] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  365.023839][ T9413] input: syz1 as /devices/virtual/input/input48
[  365.042668][ T9413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.042899][ T9413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.066759][ T9415] sock: sock_timestamping_bind_phc: sock not bind to device
[  365.078822][ T9415] netlink: 56 bytes leftover after parsing attributes in process `syz.4.803'.
[  365.150865][ T9417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.804'.
[  365.154839][ T9417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.177963][ T9418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.211171][ T5686] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  365.363055][ T5686] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  365.389209][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.389236][ T5686] usb 1-1: Product: syz
[  365.389244][ T5686] usb 1-1: Manufacturer: syz
[  365.389252][ T5686] usb 1-1: SerialNumber: syz
[  365.399984][ T5686] usb 1-1: config 0 descriptor??
[  365.532813][ T5722] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  365.596019][ T9415] ip6tnl1: entered allmulticast mode
[  365.602307][ T6519] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.602583][ T6519] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.632730][ T5686] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 032
[  365.635202][ T6755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.682492][ T6755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.682593][ T5722] usb 2-1: Using ep0 maxpacket: 32
[  365.684709][ T5722] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  365.685818][ T5722] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  365.685842][ T5722] usb 2-1: config 0 has no interface number 0
[  365.685869][ T5722] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  365.685903][ T5722] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  365.685930][ T5722] usb 2-1: config 0 interface 131 has no altsetting 0
[  365.691973][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  365.691997][ T5722] usb 2-1: Product: syz
[  365.692011][ T5722] usb 2-1: Manufacturer: syz
[  365.692025][ T5722] usb 2-1: SerialNumber: syz
[  365.716318][ T5722] usb 2-1: config 0 descriptor??
[  365.823795][ T9427] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  365.860926][ T6755] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.901156][ T5686] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  365.930452][ T9430] blktrace: Concurrent blktraces are not allowed on nullb0
[  365.932451][ T9430] netlink: 'syz.2.806': attribute type 4 has an invalid length.
[  365.964022][ T9430] netlink: 'syz.2.806': attribute type 4 has an invalid length.
[  365.983042][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.806'.
[  366.064641][ T5686] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  366.066432][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.070202][ T5686] usb 5-1: config 0 descriptor??
[  366.282718][ T5686] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  366.569318][ T5686] [drm:udl_init] *ERROR* Selecting channel failed
[  366.652129][ T5686] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  366.652158][ T5686] [drm] Initialized udl on minor 1
[  366.703843][ T5686] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  366.734080][ T5686] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  366.765443][ T5686] usb 5-1: USB disconnect, device number 36
[  366.874909][ T9440] input: syz0 as /devices/virtual/input/input49
[  366.922858][ T9440] input: syz0 as /devices/virtual/input/input50
[  367.230982][ T9448] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  367.299448][ T5686] usb 1-1: USB disconnect, device number 32
[  368.039260][ T9451] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  368.186431][ T9459] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  368.229692][ T5722] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  368.230946][ T5722] gspca_topro: reg_w err -71
[  368.238176][ T9421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  368.260788][ T5722] gspca_topro: Sensor soi763a
[  368.319841][ T5722] usb 2-1: USB disconnect, device number 29
[  368.870759][ T5722] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  369.021611][ T5722] usb 1-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  369.026889][ T5722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.026917][ T5722] usb 1-1: Product: syz
[  369.026931][ T5722] usb 1-1: Manufacturer: syz
[  369.026944][ T5722] usb 1-1: SerialNumber: syz
[  369.072406][ T5722] usb 1-1: config 0 descriptor??
[  369.093794][ T5722] usb 1-1: selecting invalid altsetting 1
[  369.093809][ T5722] technisat-usb2: could not set alternate setting to 0
[  369.096456][ T9477] blktrace: Concurrent blktraces are not allowed on nullb0
[  369.096973][ T9477] netlink: 'syz.3.817': attribute type 4 has an invalid length.
[  369.143875][ T9477] netlink: 'syz.3.817': attribute type 4 has an invalid length.
[  369.172980][ T9477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'.
[  369.289553][ T5722] technisat-usb2: firmware version: 0.0
[  369.289581][ T5722] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  369.426381][ T9487] netlink: 164 bytes leftover after parsing attributes in process `syz.4.819'.
[  369.622498][ T5722] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  369.674196][ T5722] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19)
[  369.692004][ T5722] usb 1-1: USB disconnect, device number 33
[  369.692925][ T9480] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  369.890873][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  371.114396][ T9505] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.760812][ T5722] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  371.914341][ T5722] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  371.916559][ T5722] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  371.916592][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.918446][ T5722] usb 4-1: config 0 descriptor??
[  371.967755][ T5722] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  372.072661][ T9521] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  372.094544][ T9530] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  372.219238][ T9499] netlink: 'syz.3.824': attribute type 7 has an invalid length.
[  372.219253][ T9499] netlink: 4 bytes leftover after parsing attributes in process `syz.3.824'.
[  372.219287][ T9499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'.
[  372.312606][ T5672] usb 4-1: USB disconnect, device number 40
[  372.447057][ T9538] misc userio: The device must be registered before sending interrupts
[  372.592092][ T9538] sg_write: data in/out 278492/136 bytes for SCSI command 0x0-- guessing data in;
[  372.592092][ T9538]    program syz.2.831 not setting count and/or reply_len properly
[  373.542173][ T9548] netlink: 'syz.4.833': attribute type 13 has an invalid length.
[  373.999951][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'.
[  374.024200][ T9557] ip6tnl1: entered allmulticast mode
[  374.070585][ T9546] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  374.119045][ T9557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.836'.
[  374.389145][ T9556] ovs-dp0: entered promiscuous mode
[  375.203489][ T9575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.839'.
[  375.336660][ T9575] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  376.961395][ T6571] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  377.125122][ T6571] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  377.126170][ T6571] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.126200][ T6571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.159458][ T6571] usb 4-1: config 0 descriptor??
[  377.172270][ T6571] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  377.421500][ T9598] SET target dimension over the limit!
[  377.427899][ T9598] netlink: 9 bytes leftover after parsing attributes in process `syz.0.845'.
[  377.455688][ T9580] netlink: 'syz.3.842': attribute type 7 has an invalid length.
[  377.455703][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'.
[  377.455724][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.842'.
[  377.477414][ T9586] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  377.493032][ T9598] 0�: renamed from hsr0
[  377.649235][ T5722] usb 4-1: USB disconnect, device number 41
[  377.804511][ T9598] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  377.804543][ T9598] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.806553][ T9598] 0�: entered allmulticast mode
[  377.842610][ T9598] hsr_slave_0: entered allmulticast mode
[  377.842636][ T9598] hsr_slave_1: entered allmulticast mode
[  377.898804][ T9598] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  378.089706][ T9600] bond1: Unable to set down delay as MII monitoring is disabled
[  378.108659][ T9600] bond1 (unregistering): Released all slaves
[  378.602305][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  378.602356][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  378.610838][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  378.705741][ T9607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  378.705839][ T9608] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  379.826850][ T6571] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  379.970786][ T6571] usb 1-1: Using ep0 maxpacket: 32
[  379.971455][ T6571] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  379.972396][ T6571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  380.023590][ T6571] usb 1-1: config 0 descriptor??
[  380.039176][ T6571] gspca_main: sq930x-2.14.0 probing 041e:403c
[  380.731465][ T6571] gspca_sq930x: reg_w 0305 fd00 failed -71
[  380.731526][ T6571] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[  380.738184][ T6571] usb 1-1: USB disconnect, device number 34
[  380.956245][ T9640] pimreg: entered allmulticast mode
[  381.257107][ T9650] bond1: option all_slaves_active: invalid value (9)
[  381.332083][ T9650] bond1 (unregistering): Released all slaves
[  382.965388][ T9665] team0: Port device xfrm0 removed
[  382.966172][ T9665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  383.050160][ T9665] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  383.661311][ T9664] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  384.278506][ T9686] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  384.753446][ T9696] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5628] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[9696]
[  385.583553][ T9709] netlink: 260 bytes leftover after parsing attributes in process `syz.3.868'.
[  385.763288][ T9710] syzkaller1: entered promiscuous mode
[  385.763313][ T9710] syzkaller1: entered allmulticast mode
[  385.862609][ T9711] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  387.107241][ T9718] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  387.171125][ T5672] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  387.343893][ T5672] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  387.345843][ T5672] usb 1-1: config 0 has an invalid interface number: 83 but max is 0
[  387.345869][ T5672] usb 1-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  387.345897][ T5672] usb 1-1: config 0 has no interface number 0
[  387.347432][ T5672] usb 1-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  387.416561][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.416579][ T5672] usb 1-1: Product: syz
[  387.416587][ T5672] usb 1-1: Manufacturer: syz
[  387.416595][ T5672] usb 1-1: SerialNumber: syz
[  387.444608][ T5672] usb 1-1: config 0 descriptor??
[  387.467140][ T5672] redrat3 1-1:0.83: Couldn't find all endpoints
[  388.145788][ T9736] ALSA: mixer_oss: invalid OSS volume '*'
[  388.406675][ T9741] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  388.479879][ T9745] input: syz1 as /devices/virtual/input/input53
[  388.591244][ T5722] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  388.752063][ T5722] usb 2-1: Using ep0 maxpacket: 8
[  388.752753][ T5722] usb 2-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40
[  388.757242][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.757263][ T5722] usb 2-1: Product: syz
[  388.757277][ T5722] usb 2-1: Manufacturer: syz
[  388.757292][ T5722] usb 2-1: SerialNumber: syz
[  388.842606][ T5722] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  389.255783][ T5722] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  390.143518][ T5722] usb 2-1: USB disconnect, device number 30
[  390.205764][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  390.295453][ T5686] usb 1-1: USB disconnect, device number 35
[  390.453337][ T9759] loop5: detected capacity change from 0 to 7
[  390.475378][ T9759] Dev loop5: unable to read RDB block 7
[  390.475619][ T9759]  loop5: AHDI p2 p4
[  390.476143][ T9759] loop5: partition table partially beyond EOD, truncated
[  390.503195][ T9759] loop5: p4 start 254 is beyond EOD, truncated
[  390.599562][ T9766] input: syz1 as /devices/virtual/input/input54
[  390.630331][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  390.630755][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  390.800018][ T9770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  390.831868][ T9772] team0: Port device xfrm0 added
[  390.857627][ T9770] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  391.242261][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'.
[  391.901088][ T9793] blktrace: Concurrent blktraces are not allowed on nullb0
[  391.903598][ T9793] netlink: 'syz.4.889': attribute type 4 has an invalid length.
[  392.014153][ T9793] netlink: 'syz.4.889': attribute type 4 has an invalid length.
[  392.035921][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'.
[  392.483437][ T9795] netlink: 'syz.4.890': attribute type 11 has an invalid length.
[  393.161437][ T5686] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  393.321930][ T5686] usb 2-1: Using ep0 maxpacket: 32
[  393.322506][ T5686] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  393.323479][ T5686] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[  393.323494][ T5686] usb 2-1: config 0 has no interface number 0
[  393.323517][ T5686] usb 2-1: config 0 interface 12 has no altsetting 0
[  393.325876][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.325891][ T5686] usb 2-1: Product: syz
[  393.325899][ T5686] usb 2-1: Manufacturer: syz
[  393.325906][ T5686] usb 2-1: SerialNumber: syz
[  393.353086][ T5686] usb 2-1: config 0 descriptor??
[  394.510067][ T9818] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  394.524725][ T9818] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  394.702650][ T9826] input: syz1 as /devices/virtual/input/input55
[  394.960812][ T6571] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  395.023705][ T5686] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  395.023824][ T5686] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71
[  395.023863][ T5686] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  395.023948][ T5686] f81534 2-1:0.12: probe with driver f81534 failed with error -71
[  395.038237][ T5686] usb 2-1: USB disconnect, device number 31
[  395.150893][ T6571] usb 5-1: Using ep0 maxpacket: 16
[  395.154184][ T6571] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  395.156366][ T9835] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.901'.
[  395.202298][ T6571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.202317][ T6571] usb 5-1: Product: syz
[  395.202326][ T6571] usb 5-1: Manufacturer: syz
[  395.202333][ T6571] usb 5-1: SerialNumber: syz
[  395.234638][ T6571] usb 5-1: config 0 descriptor??
[  395.240974][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  395.637890][ T6571] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  395.662260][ T6571] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  395.666224][ T6571] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  395.668350][ T6571] usb 5-1: media controller created
[  395.731502][ T6571] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  395.760469][ T9843] program syz.0.902 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  396.322447][ T9826] dtv5100: wlen = 0, aborting.
[  396.322415][ T6571] zl10353_read_register: readreg error (reg=127, ret==0)
[  396.322576][ T6571] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  396.322625][ T6571] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  396.400174][ T6571] usb 5-1: USB disconnect, device number 37
[  396.625527][ T6571] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  397.433234][ T9850] warning: `syz.2.904' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  398.062581][ T9867] team0: Port device xfrm0 removed
[  398.063568][ T9867] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  398.140923][ T9870] team0: Port device xfrm0 added
[  398.142755][ T9867] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  398.345588][ T9855] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  398.414574][ T9878] ip_tables: iptables: counters copy to user failed while replacing table
[  398.464571][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.464849][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.465305][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.479508][ T9872] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  398.718333][ T9880] team0: Port device xfrm0 removed
[  398.718970][ T9880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  398.743194][ T9881] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  399.170857][ T6571] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  399.332189][ T6571] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[  399.333185][ T6571] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  399.333212][ T6571] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  399.374046][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.374075][ T6571] usb 4-1: Product: syz
[  399.374088][ T6571] usb 4-1: Manufacturer: syz
[  399.374102][ T6571] usb 4-1: SerialNumber: syz
[  399.620068][ T6571] usb 4-1: Limiting number of CPorts to U8_MAX
[  399.710777][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  399.823088][    C1] usb 4-1: short aprc response received
[  399.981071][ T5685] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  400.106847][ T9885] syzkaller0: entered promiscuous mode
[  400.106864][ T9885] syzkaller0: entered allmulticast mode
[  400.133907][ T5685] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  400.135255][ T5685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.135345][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.139687][ T5685] usb 1-1: config 0 descriptor??
[  400.170441][ T5685] pwc: Askey VC010 type 2 USB webcam detected.
[  400.241319][ T6571] usb 4-1: failed to set cport flags for port 0
[  400.241375][ T6571] greybus greybus1: 0/0:0: failed to enable host cport: -110
[  400.300508][ T6571] es2_ap_driver 4-1:1.0: probe with driver es2_ap_driver failed with error -110
[  400.528154][ T5686] usb 4-1: USB disconnect, device number 42
[  400.560411][ T5685] pwc: recv_control_msg error -32 req 02 val 2b00
[  400.568893][ T5685] pwc: recv_control_msg error -32 req 02 val 2700
[  400.596504][ T5685] pwc: recv_control_msg error -32 req 02 val 2c00
[  400.597602][ T5685] pwc: recv_control_msg error -32 req 04 val 1000
[  400.632665][ T5685] pwc: recv_control_msg error -32 req 04 val 1300
[  400.633197][ T5685] pwc: recv_control_msg error -32 req 04 val 1400
[  400.637480][ T5685] pwc: recv_control_msg error -32 req 02 val 2000
[  400.649048][ T5685] pwc: recv_control_msg error -32 req 02 val 2100
[  400.777104][ T9854] syz.4.906 (9854): drop_caches: 2
[  400.798813][ T9900] netlink: 164 bytes leftover after parsing attributes in process `syz.1.917'.
[  400.891959][ T5685] pwc: recv_control_msg error -71 req 02 val 2500
[  400.893521][ T5685] pwc: recv_control_msg error -71 req 02 val 2400
[  400.897956][ T5685] pwc: recv_control_msg error -71 req 02 val 2600
[  400.907439][ T5685] pwc: recv_control_msg error -71 req 02 val 2900
[  400.909513][ T5685] pwc: recv_control_msg error -71 req 02 val 2800
[  400.926010][ T5685] pwc: recv_control_msg error -71 req 04 val 1100
[  400.950068][ T5685] pwc: recv_control_msg error -71 req 04 val 1200
[  401.012082][ T5685] pwc: Registered as video103.
[  401.027526][ T5685] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input56
[  401.170952][ T5685] usb 1-1: USB disconnect, device number 36
[  401.644871][ T9912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.662771][ T9913] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  401.665926][ T9912] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.700810][ T9913] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  401.841053][ T5722] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  401.992264][ T5722] usb 4-1: Using ep0 maxpacket: 8
[  401.994403][ T5722] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40
[  402.021453][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.021480][ T5722] usb 4-1: Product: syz
[  402.021495][ T5722] usb 4-1: Manufacturer: syz
[  402.021509][ T5722] usb 4-1: SerialNumber: syz
[  402.094790][ T9918] program syz.0.922 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  402.309517][ T5722] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  402.421041][ T5685] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  402.454108][ T5722] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  402.495885][ T5722] usb 4-1: USB disconnect, device number 43
[  402.544234][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  402.572219][ T5685] usb 1-1: Using ep0 maxpacket: 16
[  402.574822][ T5685] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  402.577411][ T5685] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.577446][ T5685] usb 1-1: config 0 interface 0 has no altsetting 0
[  402.577478][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.586260][ T5685] usb 1-1: config 0 descriptor??
[  402.672515][ T9921] bridge0: entered allmulticast mode
[  402.787601][ T9924] ip_tables: iptables: counters copy to user failed while replacing table
[  403.040937][ T5686] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  403.112444][ T5685] nzxt-smart2 0003:1E71:2009.000B: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0
[  403.206099][ T5686] usb 2-1: Using ep0 maxpacket: 32
[  403.209667][ T5685] nzxt-smart2 0003:1E71:2009.000B: init_device failed: -38
[  403.216228][ T5686] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40
[  403.217476][ T5686] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.217521][ T5686] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  403.226521][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.226539][ T5686] usb 2-1: Product: syz
[  403.226548][ T5686] usb 2-1: Manufacturer: syz
[  403.226556][ T5686] usb 2-1: SerialNumber: syz
[  403.268730][ T5685] nzxt-smart2 0003:1E71:2009.000B: probe with driver nzxt-smart2 failed with error -38
[  403.396485][ T5685] usb 1-1: USB disconnect, device number 37
[  403.618399][ T5686] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  403.618477][ T5686] usb 2-1: MIDIStreaming interface descriptor not found
[  403.707586][ T9935] input: syz1 as /devices/virtual/input/input57
[  403.838393][ T5686] usb 2-1: USB disconnect, device number 32
[  403.977994][ T5919] udevd[5919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.062034][ T5685] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  404.200931][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.201028][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.201349][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.201538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.210908][ T5685] usb 5-1: Using ep0 maxpacket: 16
[  404.211608][ T5685] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  404.224895][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.224921][ T5685] usb 5-1: Product: syz
[  404.224935][ T5685] usb 5-1: Manufacturer: syz
[  404.224949][ T5685] usb 5-1: SerialNumber: syz
[  404.232185][ T5685] usb 5-1: config 0 descriptor??
[  404.390863][ T5686] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  404.526192][   T30] audit: type=1326 audit(1791270546.211:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.530408][   T30] audit: type=1326 audit(1791270546.211:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.540862][ T5686] usb 1-1: Using ep0 maxpacket: 8
[  404.557333][ T5686] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  404.571300][   T30] audit: type=1326 audit(1791270546.241:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.571903][   T30] audit: type=1326 audit(1791270546.261:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.576555][   T30] audit: type=1326 audit(1791270546.261:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.576603][   T30] audit: type=1326 audit(1791270546.261:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.576639][   T30] audit: type=1326 audit(1791270546.261:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.576697][   T30] audit: type=1326 audit(1791270546.261:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.576738][   T30] audit: type=1326 audit(1791270546.261:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.578138][   T30] audit: type=1326 audit(1791270546.261:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9940 comm="syz.1.928" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8061b9e199 code=0x7ffc0000
[  404.584215][ T5686] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  404.584241][ T5686] usb 1-1: Product: syz
[  404.584277][ T5686] usb 1-1: Manufacturer: syz
[  404.584291][ T5686] usb 1-1: SerialNumber: syz
[  404.594245][ T5686] usb 1-1: config 0 descriptor??
[  404.614347][ T5686] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  404.730393][ T5685] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  404.759327][ T5685] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  404.768374][ T5685] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  404.768429][ T5685] usb 5-1: media controller created
[  404.899711][ T5685] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  404.936030][ T9935] dtv5100: wlen = 0, aborting.
[  404.994378][ T5685] zl10353_read_register: readreg error (reg=127, ret==0)
[  404.994431][ T5685] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  404.994440][ T5685] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  405.005015][ T5685] usb 5-1: USB disconnect, device number 38
[  405.099977][ T9939] netlink: 232 bytes leftover after parsing attributes in process `syz.0.927'.
[  405.126053][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.0.927'.
[  405.128350][ T5685] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  405.379159][ T5686] gspca_zc3xx: reg_w_i err -71
[  405.379243][ T5686] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  405.390948][ T5686] usb 1-1: USB disconnect, device number 38
[  405.862867][ T9957] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  405.912066][ T9957] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  406.216592][ T9959] bond_slave_1: entered promiscuous mode
[  406.216615][ T9959] bond_slave_1: entered allmulticast mode
[  406.488416][ T9955] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  406.660811][ T6571] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  406.691610][ T5672] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  406.832315][ T6571] usb 4-1: Using ep0 maxpacket: 8
[  406.851753][ T5672] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00
[  406.852672][ T5672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.885905][ T6571] usb 4-1: unable to get BOS descriptor or descriptor too short
[  406.885955][ T6571] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40
[  406.889866][ T6571] usb 4-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config
[  406.889892][ T6571] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  406.935949][ T6571] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  406.935968][ T6571] usb 4-1: Manufacturer: syz
[  407.286014][ T6571] usb 4-1: 0:1 : does not exist
[  407.327841][ T5672] wacom 0003:056A:033B.000C: Unknown device_type for 'HID 056a:033b'. Assuming pen.
[  407.359730][ T5672] wacom 0003:056A:033B.000C: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.0-1/input0
[  407.382312][ T5672] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/0003:056A:033B.000C/input/input58
[  407.456153][ T6571] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71
[  407.474676][ T6571] usb 4-1: USB disconnect, device number 44
[  407.591190][ T5672] usb 1-1: USB disconnect, device number 39
[  407.645102][ T9991] SET target dimension over the limit!
[  407.668737][ T5920] udevd[5920]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  407.767435][ T9981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  407.817569][ T9990] fido_id[9990]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  408.198026][ T9991] bond4: Unable to set down delay as MII monitoring is disabled
[  408.375717][ T9991] bond4 (unregistering): Released all slaves
[  408.501126][ T9996] input: syz1 as /devices/virtual/input/input61
[  408.771029][ T6585] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  408.931266][ T6585] usb 1-1: Using ep0 maxpacket: 16
[  408.932597][ T6585] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  408.935607][ T6585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.935623][ T6585] usb 1-1: Product: syz
[  408.935631][ T6585] usb 1-1: Manufacturer: syz
[  408.935639][ T6585] usb 1-1: SerialNumber: syz
[  408.937678][ T6585] usb 1-1: config 0 descriptor??
[  409.350349][ T6585] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  409.391685][ T6585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  409.406153][ T6585] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  409.406189][ T6585] usb 1-1: media controller created
[  409.447277][ T6585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  409.560634][T10006] nvme_fabrics: unknown parameter or missing value '#!  	����1���R��?��&n��%������~���[6=
p͊yz\U�j@5N�f�W�rs�)�q��' in ctrl creation request
[  409.676789][ T9997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  409.749790][T10008] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  409.917841][T10006] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.918097][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.919512][T10006] nvme nvme0: failed to connect socket: -111
[  409.921848][T10008] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  410.001024][ T6585] zl10353_read_register: readreg error (reg=127, ret==0)
[  410.001081][ T6585] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  410.001094][ T6585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  410.001131][ T9996] dtv5100: wlen = 0, aborting.
[  410.005045][ T6585] usb 1-1: USB disconnect, device number 40
[  410.188756][ T6585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  413.229444][T10062] SET target dimension over the limit!
[  413.432518][T10062] bond2: Unable to set down delay as MII monitoring is disabled
[  413.556068][T10062] bond2 (unregistering): Released all slaves
[  415.178219][T10091] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  415.288615][T10095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.962'.
[  415.310380][T10095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  415.701477][ T5685] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  415.850881][ T5685] usb 1-1: Using ep0 maxpacket: 32
[  415.852300][ T5685] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  415.854595][ T5685] usb 1-1: config 0 has an invalid interface number: 131 but max is 0
[  415.854611][ T5685] usb 1-1: config 0 has no interface number 0
[  415.854626][ T5685] usb 1-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  415.854646][ T5685] usb 1-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  415.855088][ T5685] usb 1-1: config 0 interface 131 has no altsetting 0
[  415.859378][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.859393][ T5685] usb 1-1: Product: syz
[  415.859401][ T5685] usb 1-1: Manufacturer: syz
[  415.859409][ T5685] usb 1-1: SerialNumber: syz
[  415.872014][ T5685] usb 1-1: config 0 descriptor??
[  416.059906][T10100] binder: 10099:10100 ioctl 80049367 200000000040 returned -22
[  416.077201][T10100] overlayfs: missing 'lowerdir'
[  416.210944][ T6755] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  416.360903][ T6755] usb 4-1: Using ep0 maxpacket: 32
[  416.361662][ T6755] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  416.363323][ T6755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  416.363347][ T6755] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  416.363390][ T6755] usb 4-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30
[  416.363480][ T6755] usb 4-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  416.363518][ T6755] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  416.363539][ T6755] usb 4-1: config 1 interface 1 has no altsetting 0
[  416.383177][ T6755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.383203][ T6755] usb 4-1: Product: syz
[  416.383217][ T6755] usb 4-1: Manufacturer: syz
[  416.383230][ T6755] usb 4-1: SerialNumber: syz
[  416.675421][ T6755] usb 4-1: selecting invalid altsetting 0
[  416.800787][ T5722] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  416.810467][T10116] input: syz1 as /devices/virtual/input/input62
[  416.862239][ T6755] usb 4-1: 1:1: cannot get freq (v2/v3): err -32
[  416.952505][ T5722] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  416.953961][ T5722] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  416.953987][ T5722] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  416.954003][ T5722] usb 5-1: config 0 has no interface number 0
[  416.954045][ T5722] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  416.960376][ T5722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.960422][ T5722] usb 5-1: Product: syz
[  416.960430][ T5722] usb 5-1: Manufacturer: syz
[  416.960438][ T5722] usb 5-1: SerialNumber: syz
[  416.980075][ T5722] usb 5-1: config 0 descriptor??
[  416.999676][ T5722] redrat3 5-1:0.83: Couldn't find all endpoints
[  417.084284][ T5703] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  417.230991][ T5703] usb 2-1: Using ep0 maxpacket: 16
[  417.235776][ T5703] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  417.276347][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.276366][ T5703] usb 2-1: Product: syz
[  417.276391][ T5703] usb 2-1: Manufacturer: syz
[  417.276399][ T5703] usb 2-1: SerialNumber: syz
[  417.295901][ T5703] usb 2-1: config 0 descriptor??
[  417.349818][ T6755] usb 4-1: USB disconnect, device number 45
[  417.717578][ T5703] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  417.731755][ T5703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  417.733131][ T5703] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  417.733177][ T5703] usb 2-1: media controller created
[  417.766591][ T5703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  418.075185][T10123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.315057][ T5685] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  418.317547][ T5685] gspca_topro: reg_w err -71
[  418.320907][T10095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.340941][ T5685] gspca_topro: Sensor soi763a
[  418.344152][ T5703] zl10353_read_register: readreg error (reg=127, ret==0)
[  418.344208][ T5703] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  418.344221][ T5703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  418.349847][T10116] dtv5100: wlen = 0, aborting.
[  418.424437][ T5703] usb 2-1: USB disconnect, device number 33
[  418.443303][ T5685] usb 1-1: USB disconnect, device number 41
[  418.560960][ T5703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  419.311141][ T5685] usb 2-1: new full-speed USB device number 34 using dummy_hcd
[  419.357409][T10138] program syz.2.972 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  419.400564][ T5672] usb 5-1: USB disconnect, device number 39
[  419.474008][ T5685] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  419.480172][ T5685] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  419.480208][ T5685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  419.480223][ T5685] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  419.480241][ T5685] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  419.480261][ T5685] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  419.480272][ T5685] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  419.482985][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.483021][ T5685] usb 2-1: Product: syz
[  419.483035][ T5685] usb 2-1: Manufacturer: syz
[  419.483049][ T5685] usb 2-1: SerialNumber: syz
[  419.522739][T10134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  419.975697][T10155] binder: 10154:10155 ioctl 4018620d 0 returned -22
[  420.020955][ T5672] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  420.182744][ T5672] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00
[  420.187930][ T5672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  420.216401][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0
[  420.216422][ T5672] usb 5-1: Product: syz
[  420.216430][ T5672] usb 5-1: Manufacturer: syz
[  420.272551][ T5672] usb 5-1: selecting invalid altsetting 1
[  420.307384][ T5672] dvb_ttusb_budget: ttusb_init_controller: error
[  420.307404][ T5672] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  420.508189][ T5685] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  420.508231][ T5685] cdc_ncm 2-1:1.0: bind() failure
[  420.529577][ T5672] DVB: Unable to find symbol cx22700_attach()
[  420.536304][ T5685] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  420.536351][ T5685] cdc_ncm 2-1:1.1: bind() failure
[  420.564837][ T5685] usb 2-1: USB disconnect, device number 34
[  420.715338][ T5672] DVB: Unable to find symbol tda10046_attach()
[  420.715350][ T5672] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  420.782656][T10150] dvb_ttusb_budget: failed urb submission (0: err = -2)!
[  420.818545][ T5685] usb 5-1: USB disconnect, device number 40
[  421.199527][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.3.978'.
[  421.235408][T10166] netlink: 44 bytes leftover after parsing attributes in process `syz.2.980'.
[  421.270134][T10166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  421.496259][T10169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  421.515979][T10169] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  421.767868][T10177] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  421.803515][T10177] tipc: Enabling of bearer <eth:team0> rejected, failed to enable media
[  421.901403][ T5686] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  422.051654][ T5686] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00
[  422.053801][ T5686] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 47434, setting to 1024
[  422.053822][ T5686] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024
[  422.059366][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  422.059388][ T5686] usb 1-1: Product: syz
[  422.059395][ T5686] usb 1-1: Manufacturer: syz
[  422.059403][ T5686] usb 1-1: SerialNumber: syz
[  422.115708][T10175] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  422.336196][ T5686] usblp 1-1:1.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900
[  422.789935][T10181] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  422.811808][ T5686] usb 1-1: USB disconnect, device number 42
[  422.814358][ T5686] usblp0: removed
[  423.540784][ T6585] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  423.702683][ T6585] usb 2-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00
[  423.706568][ T6585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.767554][ T6585] usb-storage 2-1:32.0: USB Mass Storage device detected
[  423.785057][ T6585] usb-storage 2-1:32.0: Quirks match for vid 057b pid 0000: 1
[  424.041824][T10203] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  424.102111][ T6585] usb 2-1: USB disconnect, device number 35
[  424.349811][T10169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  424.558799][T10206] binder: 10205:10206 ioctl 4018620d 0 returned -22
[  424.572433][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.630935][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.790928][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.653607][T10207] [U] 
[  425.852341][T10237] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  425.871047][T10237] team0: Port device xfrm0 added
[  425.887702][T10237] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  426.474702][T10225] syz.2.990 (10225): drop_caches: 2
[  426.612646][T10247] input: syz1 as /devices/virtual/input/input65
[  426.891221][ T5686] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  427.040847][ T5686] usb 2-1: Using ep0 maxpacket: 16
[  427.041553][ T5686] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  427.066440][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  427.066458][ T5686] usb 2-1: Product: syz
[  427.066466][ T5686] usb 2-1: Manufacturer: syz
[  427.066474][ T5686] usb 2-1: SerialNumber: syz
[  427.073736][ T5686] usb 2-1: config 0 descriptor??
[  427.108131][T10251] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  427.260336][T10254] netlink: 44 bytes leftover after parsing attributes in process `syz.2.998'.
[  427.282641][T10254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  427.469315][T10255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  427.469636][T10255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.498599][ T5686] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  427.522995][ T5686] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  427.524221][ T5686] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  427.524254][ T5686] usb 2-1: media controller created
[  427.574464][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  427.741139][T10252] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  428.093288][T10265] binder: 10264:10265 ioctl 4018620d 0 returned -22
[  428.141191][ T5686] zl10353_read_register: readreg error (reg=127, ret==0)
[  428.141240][ T5686] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  428.141248][ T5686] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  428.144389][T10247] dtv5100: wlen = 0, aborting.
[  428.185233][ T5686] usb 2-1: USB disconnect, device number 36
[  428.399680][ T5686] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  428.491029][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  428.491048][   T30] audit: type=1326 audit(1791270570.171:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.493355][   T30] audit: type=1326 audit(1791270570.181:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.494867][   T30] audit: type=1326 audit(1791270570.181:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.499777][   T30] audit: type=1326 audit(1791270570.181:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.499835][   T30] audit: type=1326 audit(1791270570.181:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.503246][   T30] audit: type=1326 audit(1791270570.191:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.506552][   T30] audit: type=1326 audit(1791270570.191:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.532562][   T30] audit: type=1326 audit(1791270570.191:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.536464][   T30] audit: type=1326 audit(1791270570.221:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  428.538967][   T30] audit: type=1326 audit(1791270570.221:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.0.1002" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b9e199 code=0x7ffc0000
[  429.801518][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  430.266877][T10257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  430.361128][ T6585] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  430.510907][ T6585] usb 5-1: Using ep0 maxpacket: 16
[  430.572526][ T6585] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  430.591257][ T5685] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  430.595365][ T6585] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32
[  430.595395][ T6585] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  430.595423][ T6585] usb 5-1: config 1 interface 0 has no altsetting 0
[  430.672979][ T6585] usb 5-1: string descriptor 0 read error: -22
[  430.673113][ T6585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.687891][T10289] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  430.704132][ T5686] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  430.786422][T10291] blktrace: Concurrent blktraces are not allowed on nullb0
[  430.878797][ T5686] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  430.907086][ T5686] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  430.907110][ T5686] usb 4-1: Product: syz
[  430.907140][ T5686] usb 4-1: SerialNumber: syz
[  430.923935][ T5686] usb 4-1: config 0 descriptor??
[  431.227507][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  431.243984][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  431.290530][ T5686] usb 4-1: USB disconnect, device number 46
[  431.369376][T10307] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  432.234632][T10315] bridge_slave_1: left promiscuous mode
[  432.464593][T10313] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  432.867765][ T6585] usb 5-1: USB disconnect, device number 41
[  433.431372][T10324] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1014'.
[  433.619611][T10324] syzkaller1: entered promiscuous mode
[  433.619735][T10324] syzkaller1: entered allmulticast mode
[  433.843743][T10320] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  434.644529][T10342] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  435.100455][T10339] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  436.297395][T10361] netlink: 'syz.2.1022': attribute type 1 has an invalid length.
[  436.389385][T10361] erspan1: entered allmulticast mode
[  436.500316][T10366] bridge0: entered allmulticast mode
[  436.745365][T10369] ip_tables: iptables: counters copy to user failed while replacing table
[  436.923338][T10372] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  436.923562][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  437.890160][T10385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[  437.890196][T10385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1027'.
[  440.052713][ T1309] ieee802154 phy0 wpan0: encryption failed: -22
[  440.052777][ T1309] ieee802154 phy1 wpan1: encryption failed: -22
[  440.101258][T10410] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  441.857751][T10431] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  441.894303][T10431] bond1 (unregistering): Released all slaves
[  441.900370][T10440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  442.651029][T10449] xt_CONNSECMARK: invalid mode: 0
[  442.867427][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1042'.
[  442.910464][T10447] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  442.910533][T10447] block device autoloading is deprecated and will be removed.
[  443.337830][T10472] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  443.521107][ T6585] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  444.347555][T10476] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  445.690847][ T6755] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  445.844087][ T6755] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  445.867984][ T6755] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  445.868005][ T6755] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  445.868016][ T6755] usb 5-1: config 0 has no interface number 0
[  445.868038][ T6755] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  445.921557][ T6755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.921574][ T6755] usb 5-1: Product: syz
[  445.921583][ T6755] usb 5-1: Manufacturer: syz
[  445.921591][ T6755] usb 5-1: SerialNumber: syz
[  445.929369][ T6755] usb 5-1: config 0 descriptor??
[  445.972529][ T6755] redrat3 5-1:0.83: Couldn't find all endpoints
[  446.665458][T10504] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  446.721668][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'.
[  446.722461][T10499] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  446.728750][T10504] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  447.270890][ T6585] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  447.421487][ T6585] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  447.425200][ T6585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.425223][ T6585] usb 4-1: Product: syz
[  447.425231][ T6585] usb 4-1: Manufacturer: syz
[  447.425239][ T6585] usb 4-1: SerialNumber: syz
[  448.309748][ T5686] usb 5-1: USB disconnect, device number 43
[  448.500868][ T6585] rtl8150 4-1:1.0: couldn't reset the device
[  448.501115][ T6585] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5
[  449.524441][T10530] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  449.790748][ T5686] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  449.943141][ T5686] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  449.948384][ T5686] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  449.948434][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  449.948454][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  449.948468][ T5686] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  449.948482][ T5686] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  450.026739][ T5686] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.026757][ T5686] usb 1-1: Product: syz
[  450.026765][ T5686] usb 1-1: Manufacturer: syz
[  450.026773][ T5686] usb 1-1: SerialNumber: syz
[  450.059464][ T5686] usb 1-1: config 0 descriptor??
[  450.079887][T10530] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  450.101823][ T5686] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints
[  450.105254][ T6571] usb 4-1: USB disconnect, device number 47
[  450.811682][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  450.880123][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  450.900778][ T5686] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  451.061955][ T5686] usb 5-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  451.084232][ T5686] usb 5-1: config 0 has an invalid interface number: 83 but max is 0
[  451.084261][ T5686] usb 5-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  451.084280][ T5686] usb 5-1: config 0 has no interface number 0
[  451.084314][ T5686] usb 5-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  451.152956][ T5686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  451.152973][ T5686] usb 5-1: Product: syz
[  451.152981][ T5686] usb 5-1: Manufacturer: syz
[  451.152989][ T5686] usb 5-1: SerialNumber: syz
[  451.188926][ T5686] usb 5-1: config 0 descriptor??
[  451.217551][ T5686] redrat3 5-1:0.83: Couldn't find all endpoints
[  451.405426][T10537] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  452.189094][T10554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  452.209330][T10554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1065'.
[  452.210154][T10554] tipc: Enabling of bearer <eth:team0> rejected, already enabled
[  452.315616][T10558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  452.317037][T10558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.613996][ T6571] usb 1-1: USB disconnect, device number 44
[  453.041867][T10566] pimreg: entered allmulticast mode
[  453.149175][T10575] SET target dimension over the limit!
[  453.164744][T10575] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1070'.
[  453.258522][T10560] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  453.276653][T10560] bond1 (unregistering): Released all slaves
[  453.387343][T10575] 0�: renamed from hsr0
[  453.426634][T10575] 0�: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  453.426665][T10575] 0�: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  453.428779][T10575] 0�: entered allmulticast mode
[  453.428803][T10575] hsr_slave_0: entered allmulticast mode
[  453.428820][T10575] hsr_slave_1: entered allmulticast mode
[  453.470552][T10575] A link change request failed with some changes committed already. Interface 
c0� may have been left with an inconsistent configuration, please check.
[  453.647158][T10568] bond2: option all_slaves_active: invalid value (9)
[  453.667429][T10568] bond2 (unregistering): Released all slaves
[  453.939154][ T5672] usb 5-1: USB disconnect, device number 44
[  454.020875][ T5685] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  454.093654][T10577] bond1: Unable to set down delay as MII monitoring is disabled
[  454.111577][T10577] bond1 (unregistering): Released all slaves
[  454.170834][ T5685] usb 4-1: Using ep0 maxpacket: 8
[  454.670864][ T5672] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  454.826691][ T5672] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  454.848457][ T5672] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  454.848485][ T5672] usb 2-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  454.848504][ T5672] usb 2-1: config 0 has no interface number 0
[  454.848530][ T5672] usb 2-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  454.909263][ T5672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  454.909293][ T5672] usb 2-1: Product: syz
[  454.909305][ T5672] usb 2-1: Manufacturer: syz
[  454.909318][ T5672] usb 2-1: SerialNumber: syz
[  454.938132][ T5672] usb 2-1: config 0 descriptor??
[  454.968647][ T5672] redrat3 2-1:0.83: Couldn't find all endpoints
[  455.371142][T10591] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  456.182317][T10603] ovs-dp0: entered promiscuous mode
[  456.218269][T10601] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  456.343227][T10608] misc userio: The device must be registered before sending interrupts
[  457.741268][ T5686] usb 2-1: USB disconnect, device number 37
[  457.906001][ T5685] usb 4-1: unable to get BOS descriptor or descriptor too short
[  457.906054][ T5685] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40
[  457.908352][ T5685] usb 4-1: unable to read config index 0 descriptor/start: -71
[  457.908400][ T5685] usb 4-1: can't read configurations, error -71
[  458.208769][T10617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.209232][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.483717][T10632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  458.484446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  459.004624][T10629] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  459.190858][ T6571] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  459.341558][ T6571] usb 5-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00
[  459.344164][ T6571] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  459.371464][ T6571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.371481][ T6571] usb 5-1: Product: syz
[  459.371489][ T6571] usb 5-1: Manufacturer: syz
[  459.371496][ T6571] usb 5-1: SerialNumber: syz
[  459.470109][ T6571] gspca_main: mr97310a-2.14.0 probing 08ca:0110
[  459.478363][T10640] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  459.801130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!!
[  459.922450][T10645] bridge4: entered promiscuous mode
[  459.922592][T10645] bridge4: entered allmulticast mode
[  460.131653][T10654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'.
[  460.648622][T10660] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1090'.
[  460.904115][T10661] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  461.030622][T10635] tipc: Resetting bearer <eth:syzkaller0>
[  461.042568][ T6571] gspca_mr97310a: reg read [21] error -110
[  461.042699][ T6571] mr97310a 5-1:1.0: probe with driver mr97310a failed with error -110
[  461.118085][T10635] tipc: Disabling bearer <eth:syzkaller0>
[  461.183074][ T6755] usb 5-1: USB disconnect, device number 45
[  461.971015][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  462.002987][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  462.360172][T10676] qrtr: Invalid version 11
[  462.570167][T10685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'.
[  463.918957][T10694] misc userio: Invalid payload size
[  464.750823][ T1790] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  464.750964][ T5686] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  464.903172][ T5686] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  464.918394][ T5686] usb 2-1: config 0 has an invalid interface number: 83 but max is 0
[  464.918422][ T5686] usb 2-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  464.918441][ T5686] usb 2-1: config 0 has no interface number 0
[  464.918486][ T5686] usb 2-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  464.933027][ T1790] usb 5-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  464.944841][ T1790] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  464.944890][ T1790] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  464.994052][ T1790] usb 5-1: config 0 descriptor??
[  465.012180][ T1790] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  465.032424][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  465.032447][ T5686] usb 2-1: Product: syz
[  465.032455][ T5686] usb 2-1: Manufacturer: syz
[  465.032463][ T5686] usb 2-1: SerialNumber: syz
[  465.039743][ T5686] usb 2-1: config 0 descriptor??
[  465.127624][ T5686] redrat3 2-1:0.83: Couldn't find all endpoints
[  465.270282][T10692] netlink: 'syz.4.1096': attribute type 7 has an invalid length.
[  465.270299][T10692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1096'.
[  465.270317][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'.
[  465.311278][ T6755] usb 5-1: USB disconnect, device number 46
[  465.359314][T10705] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.529523][T10715] x_tables: ip_tables: icmp match: only valid for protocol 1
[  465.540282][T10715] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  466.369591][T10720] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  466.670132][T10725] capability: warning: `syz.3.1103' uses 32-bit capabilities (legacy support in use)
[  466.696946][T10725] program syz.3.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  467.410822][T10728] syzkaller1: entered promiscuous mode
[  467.410845][T10728] syzkaller1: entered allmulticast mode
[  467.557009][T10728] netlink: 'syz.2.1104': attribute type 12 has an invalid length.
[  467.820826][ T5686] usb 2-1: USB disconnect, device number 38
[  468.270870][ T5686] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  468.424631][ T5686] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  468.427948][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  468.427968][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  468.427981][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  468.427994][ T5686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  468.432415][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  468.432442][ T5686] usb 2-1: Product: syz
[  468.432456][ T5686] usb 2-1: Manufacturer: syz
[  468.432471][ T5686] usb 2-1: SerialNumber: syz
[  468.458244][ T5686] usb 2-1: config 0 descriptor??
[  468.692610][ T5686] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  468.747680][T10740] input: syz1 as /devices/virtual/input/input70
[  468.896622][T10732] usb 2-1: Couldn't submit interrupt_out_urb -90
[  468.984233][T10738] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  469.012182][ T5686] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  469.160804][ T5686] usb 4-1: Using ep0 maxpacket: 16
[  469.161493][ T5686] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  469.183904][ T5686] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.183931][ T5686] usb 4-1: Product: syz
[  469.183945][ T5686] usb 4-1: Manufacturer: syz
[  469.183958][ T5686] usb 4-1: SerialNumber: syz
[  469.190965][ T5686] usb 4-1: config 0 descriptor??
[  469.601076][ T5686] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71
[  469.602694][ T5686] usb 4-1: USB disconnect, device number 50
[  469.879652][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.886030][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.201087][ T6571] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  471.043791][ T6585] usb 2-1: USB disconnect, device number 39
[  471.550871][ T6585] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  471.713365][ T6585] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  471.718445][ T6585] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  471.718480][ T6585] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.741738][ T6585] usb 2-1: config 0 descriptor??
[  471.771389][ T6585] pwc: Askey VC010 type 2 USB webcam detected.
[  472.018737][T10766] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  472.071025][ T5672] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  472.174733][ T6585] pwc: recv_control_msg error -32 req 02 val 2b00
[  472.191941][ T6585] pwc: recv_control_msg error -32 req 02 val 2700
[  472.195506][ T6585] pwc: recv_control_msg error -32 req 02 val 2c00
[  472.225451][ T5672] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00
[  472.226982][ T5672] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.227053][ T5672] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.230230][ T6585] pwc: recv_control_msg error -32 req 04 val 1000
[  472.237208][ T6585] pwc: recv_control_msg error -32 req 04 val 1300
[  472.259348][ T6585] pwc: recv_control_msg error -32 req 04 val 1400
[  472.278128][ T5672] usb 4-1: config 0 descriptor??
[  472.278619][ T6585] pwc: recv_control_msg error -32 req 02 val 2000
[  472.297198][ T5672] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  472.368086][ T6585] pwc: recv_control_msg error -32 req 02 val 2100
[  472.370018][ T6585] pwc: recv_control_msg error -32 req 04 val 1500
[  472.384931][ T6585] pwc: recv_control_msg error -32 req 02 val 2500
[  472.394261][ T6585] pwc: recv_control_msg error -32 req 02 val 2400
[  472.406343][ T6585] pwc: recv_control_msg error -32 req 02 val 2600
[  472.408411][ T6585] pwc: recv_control_msg error -32 req 02 val 2900
[  472.568706][T10759] netlink: 'syz.3.1113': attribute type 7 has an invalid length.
[  472.568743][T10759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'.
[  472.568782][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1113'.
[  472.612241][ T6585] pwc: recv_control_msg error -71 req 04 val 1100
[  472.615085][ T6585] pwc: recv_control_msg error -71 req 04 val 1200
[  472.619183][ T6585] pwc: Registered as video103.
[  472.620551][ T6585] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input71
[  472.657999][ T5672] usb 4-1: USB disconnect, device number 51
[  472.666238][ T6585] usb 2-1: USB disconnect, device number 40
[  473.345870][T10785] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  474.134394][T10783] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  474.187451][T10788] netlink: 'syz.3.1119': attribute type 29 has an invalid length.
[  474.810421][T10801] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  475.203632][T10813] netlink: 'syz.2.1124': attribute type 11 has an invalid length.
[  475.510018][T10809] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  475.520850][ T6571] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  475.728851][ T6571] usb 5-1: unable to get BOS descriptor or descriptor too short
[  475.728884][ T6571] usb 5-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice= 0.40
[  475.729629][ T6571] usb 5-1: unable to read config index 0 descriptor/start: -71
[  475.729651][ T6571] usb 5-1: can't read configurations, error -71
[  475.976606][T10821] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  476.393632][T10828] loop9: detected capacity change from 0 to 7
[  476.403621][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.403691][    C1] buffer_io_error: 336 callbacks suppressed
[  476.403785][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.434016][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.434062][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.434450][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.434491][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.434690][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.434730][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.435195][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.435248][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.435661][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.435710][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.435855][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.435907][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.436045][T10828] ldm_validate_partition_table(): Disk read failed.
[  476.436167][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.436217][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.436469][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.436518][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.436845][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  476.436897][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  476.437612][T10828] Dev loop9: unable to read RDB block 0
[  476.624703][T10828]  loop9: unable to read partition table
[  476.624824][T10828] loop9: partition table beyond EOD, truncated
[  476.624844][T10828] loop_reread_partitions: partition scan of loop9 (��) failed (rc=-5)
[  477.061142][ T5672] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[  477.230891][ T5672] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11
[  477.262807][ T5672] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  477.262829][ T5672] usb 4-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config
[  477.262839][ T5672] usb 4-1: config 0 has no interface number 0
[  477.262861][ T5672] usb 4-1: config 0 interface 83 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  477.331319][ T5672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.331339][ T5672] usb 4-1: Product: syz
[  477.331348][ T5672] usb 4-1: Manufacturer: syz
[  477.331356][ T5672] usb 4-1: SerialNumber: syz
[  477.334584][ T5672] usb 4-1: config 0 descriptor??
[  477.376338][ T5672] redrat3 4-1:0.83: Couldn't find all endpoints
[  477.535742][T10845] ip_tables: iptables: counters copy to user failed while replacing table
[  478.638631][T10855] misc userio: Invalid payload size
[  478.800789][ T6755] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  478.825869][T10859] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  478.951012][ T6755] usb 2-1: Using ep0 maxpacket: 16
[  478.952007][ T6755] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  478.954365][ T6755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  478.960067][ T6755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.960093][ T6755] usb 2-1: Product: syz
[  478.960107][ T6755] usb 2-1: Manufacturer: syz
[  478.960120][ T6755] usb 2-1: SerialNumber: syz
[  479.012586][ T6755] usb 2-1: config 0 descriptor??
[  479.044269][ T6755] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  479.044307][ T6755] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  479.112050][T10862] input: syz1 as /devices/virtual/input/input76
[  479.450875][ T6585] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  479.605020][ T6569] usb 4-1: USB disconnect, device number 52
[  479.612009][ T6585] usb 1-1: Using ep0 maxpacket: 16
[  479.623539][ T6585] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  479.656773][ T6755] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  479.656773][ T6585] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  479.656796][ T6585] usb 1-1: Product: syz
[  479.656810][ T6585] usb 1-1: Manufacturer: syz
[  479.656824][ T6585] usb 1-1: SerialNumber: syz
[  479.684532][ T6585] usb 1-1: config 0 descriptor??
[  480.101558][ T6585] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  480.143042][ T6585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  480.145908][ T6585] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  480.145959][ T6585] usb 1-1: media controller created
[  480.180209][ T6755] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  480.180232][ T6755] em28xx 2-1:0.0: board has no eeprom
[  480.184582][ T6585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  480.219755][T10869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.219948][T10869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.220096][T10869] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.248341][T10868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.248542][T10868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.268491][T10868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  480.269976][T10868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  480.295468][T10868] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.399482][T10873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  480.470983][ T5672] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  480.540850][ T6755] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  480.540886][ T6755] em28xx 2-1:0.0: dvb set to bulk mode.
[  480.543764][ T5685] em28xx 2-1:0.0: Binding DVB extension
[  480.640893][ T5672] usb 5-1: Using ep0 maxpacket: 16
[  480.643828][ T5672] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  480.645049][ T5672] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  480.645068][ T5672] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  480.652913][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  480.652939][ T5672] usb 5-1: Product: syz
[  480.652952][ T5672] usb 5-1: Manufacturer: syz
[  480.652966][ T5672] usb 5-1: SerialNumber: syz
[  480.668750][ T5672] usb 5-1: config 0 descriptor??
[  480.718709][ T5672] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  480.718731][ T5672] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  480.763227][ T6585] zl10353_read_register: readreg error (reg=127, ret==0)
[  480.763297][ T6585] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  480.763311][ T6585] dvb-usb: AME DTV-5100 USB2.0 DVB-T succes
** replaying previous printk message **
[  480.763311][ T6585] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  480.791049][T10851] ------------[ cut here ]------------
[  480.791066][T10851] usb 1-1: BOGUS control dir, pipe 80002e80 doesn't match bRequestType c0
[  480.791088][T10851] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#1: syz.1.1133/10851
[  480.829501][T10851] Modules linked in:
[  480.833805][T10851] CPU: 1 UID: 0 PID: 10851 Comm: syz.1.1133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  480.845238][T10851] Tainted: [L]=SOFTLOCKUP
[  480.849602][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  480.859745][T10851] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  480.865611][T10851] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  480.885479][T10851] RSP: 0018:ffffc900052e7958 EFLAGS: 00010246
[  480.892200][T10851] RAX: 0000000000000000 RBX: ffff888056769e00 RCX: 0000000080002e80
[  480.900251][T10851] RDX: ffff888074beb980 RSI: ffffffff8cc53540 RDI: ffffffff90881c10
[  480.908314][T10851] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  480.916395][T10851] R10: ffffc900052e7a40 R11: fffff52000a5cf54 R12: 1ffff11004ac0000
[  480.924696][T10851] R13: ffff888025600000 R14: ffff888074beb980 R15: 0000000080002e80
[  480.932983][T10851] FS:  00007f805fdf66c0(0000) GS:ffff888124dc6000(0000) knlGS:0000000000000000
[  480.942061][T10851] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  480.948674][T10851] CR2: 00002000001fa030 CR3: 0000000079b18000 CR4: 00000000003526f0
[  480.956738][T10851] Call Trace:
[  480.960131][T10851]  <TASK>
[  480.963299][T10851]  usb_start_wait_urb+0x13f/0x5b0
[  480.968523][T10851]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  480.974231][T10851]  usb_control_msg+0x234/0x3e0
[  480.979073][T10851]  dtv5100_i2c_msg+0x231/0x2f0
[  480.984210][T10851]  dtv5100_i2c_xfer+0x1a5/0x610
[  480.989115][T10851]  __i2c_transfer+0x7bf/0x1fe0
[  480.994077][T10851]  ? rt_mutex_lock_nested+0x167/0x1c0
[  480.999623][T10851]  ? i2c_transfer+0xc7/0x2d0
[  481.004478][T10851]  i2c_transfer+0x1cb/0x2d0
[  481.009035][T10851]  i2cdev_ioctl_rdwr+0x460/0x740
[  481.014244][T10851]  i2cdev_ioctl+0x6a5/0x880
[  481.018797][T10851]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  481.023895][T10851]  ? __fget_files+0x3a2/0x420
[  481.028682][T10851]  ? __fget_files+0x2a/0x420
[  481.033332][T10851]  ? bpf_lsm_file_ioctl+0x9/0x20
[  481.038353][T10851]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  481.043548][T10851]  __se_sys_ioctl+0xfc/0x170
[  481.048203][T10851]  do_syscall_64+0x166/0x520
[  481.053216][T10851]  ? trace_irq_disable+0x3b/0x140
[  481.058304][T10851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.064531][T10851]  ? clear_bhb_loop+0x70/0xc0
[  481.069266][T10851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.075253][T10851] RIP: 0033:0x7f8061b9e199
[  481.079731][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.099481][T10851] RSP: 002b:00007f805fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  481.109960][T10851] RAX: ffffffffffffffda RBX: 00007f8061e25fa0 RCX: 00007f8061b9e199
[  481.118030][T10851] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 000000000000000a
[  481.126109][T10851] RBP: 00007f8061c358e0 R08: 0000000000000000 R09: 0000000000000000
[  481.134208][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.142290][T10851] R13: 00007f8061e26038 R14: 00007f8061e25fa0 R15: 00007f8061f4fa48
[  481.150351][T10851]  </TASK>
[  481.153475][T10851] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  481.160782][T10851] CPU: 1 UID: 0 PID: 10851 Comm: syz.1.1133 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  481.171743][T10851] Tainted: [L]=SOFTLOCKUP
[  481.176078][T10851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  481.186156][T10851] Call Trace:
[  481.189455][T10851]  <TASK>
[  481.192413][T10851]  vpanic+0x56d/0xa60
[  481.196488][T10851]  ? __pfx__printk+0x10/0x10
[  481.201190][T10851]  ? __pfx_vpanic+0x10/0x10
[  481.205721][T10851]  ? is_bpf_text_address+0x292/0x2b0
[  481.211123][T10851]  ? is_bpf_text_address+0x26/0x2b0
[  481.216448][T10851]  panic+0xc5/0xd0
[  481.220205][T10851]  ? __pfx_panic+0x10/0x10
[  481.224666][T10851]  __warn+0x315/0x4c0
[  481.228663][T10851]  ? usb_submit_urb+0x1057/0x18b0
[  481.233713][T10851]  ? usb_submit_urb+0x1057/0x18b0
[  481.238742][T10851]  __report_bug+0x276/0x570
[  481.243415][T10851]  ? usb_submit_urb+0x1057/0x18b0
[  481.248490][T10851]  ? __pfx___report_bug+0x10/0x10
[  481.253568][T10851]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  481.259408][T10851]  ? kasan_save_track+0x4f/0x80
[  481.264314][T10851]  report_bug_entry+0x19b/0x290
[  481.269180][T10851]  ? usb_submit_urb+0x1100/0x18b0
[  481.274212][T10851]  ? usb_submit_urb+0x1105/0x18b0
[  481.279241][T10851]  handle_bug+0xce/0x200
[  481.283495][T10851]  exc_invalid_op+0x1a/0x50
[  481.288006][T10851]  asm_exc_invalid_op+0x1a/0x20
[  481.292884][T10851] RIP: 0010:usb_submit_urb+0x1100/0x18b0
[  481.298524][T10851] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89
[  481.318136][T10851] RSP: 0018:ffffc900052e7958 EFLAGS: 00010246
[  481.324395][T10851] RAX: 0000000000000000 RBX: ffff888056769e00 RCX: 0000000080002e80
[  481.332416][T10851] RDX: ffff888074beb980 RSI: ffffffff8cc53540 RDI: ffffffff90881c10
[  481.340405][T10851] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000
[  481.348373][T10851] R10: ffffc900052e7a40 R11: fffff52000a5cf54 R12: 1ffff11004ac0000
[  481.356353][T10851] R13: ffff888025600000 R14: ffff888074beb980 R15: 0000000080002e80
[  481.364347][T10851]  ? usb_submit_urb+0x1091/0x18b0
[  481.369390][T10851]  usb_start_wait_urb+0x13f/0x5b0
[  481.374436][T10851]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  481.380013][T10851]  usb_control_msg+0x234/0x3e0
[  481.384780][T10851]  dtv5100_i2c_msg+0x231/0x2f0
[  481.389551][T10851]  dtv5100_i2c_xfer+0x1a5/0x610
[  481.394493][T10851]  __i2c_transfer+0x7bf/0x1fe0
[  481.399257][T10851]  ? rt_mutex_lock_nested+0x167/0x1c0
[  481.404626][T10851]  ? i2c_transfer+0xc7/0x2d0
[  481.409217][T10851]  i2c_transfer+0x1cb/0x2d0
[  481.413733][T10851]  i2cdev_ioctl_rdwr+0x460/0x740
[  481.418694][T10851]  i2cdev_ioctl+0x6a5/0x880
[  481.423203][T10851]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  481.428245][T10851]  ? __fget_files+0x3a2/0x420
[  481.432936][T10851]  ? __fget_files+0x2a/0x420
[  481.437539][T10851]  ? bpf_lsm_file_ioctl+0x9/0x20
[  481.442469][T10851]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  481.447493][T10851]  __se_sys_ioctl+0xfc/0x170
[  481.452083][T10851]  do_syscall_64+0x166/0x520
[  481.456687][T10851]  ? trace_irq_disable+0x3b/0x140
[  481.461714][T10851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.467873][T10851]  ? clear_bhb_loop+0x70/0xc0
[  481.472568][T10851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.478455][T10851] RIP: 0033:0x7f8061b9e199
[  481.482869][T10851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  481.502488][T10851] RSP: 002b:00007f805fdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  481.511223][T10851] RAX: ffffffffffffffda RBX: 00007f8061e25fa0 RCX: 00007f8061b9e199
[  481.519190][T10851] RDX: 0000200000000140 RSI: 0000000000000707 RDI: 000000000000000a
[  481.527162][T10851] RBP: 00007f8061c358e0 R08: 0000000000000000 R09: 0000000000000000
[  481.535149][T10851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  481.543120][T10851] R13: 00007f8061e26038 R14: 00007f8061e25fa0 R15: 00007f8061f4fa48
[  481.551114][T10851]  </TASK>
[  481.554433][T10851] Kernel Offset: disabled
[  481.558762][T10851] Rebooting in 86400 seconds..