last executing test programs:

4m15.665891585s ago: executing program 4 (id=313):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
r1 = socket$inet6(0x10, 0x2, 0x4)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000100030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0)

4m13.349089904s ago: executing program 4 (id=317):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x10)

4m13.184892485s ago: executing program 4 (id=320):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x88}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="80000400000000003c0012800b00010067656e65766500002c00028008000b40000000070400060005000900010000"], 0x5c}}, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
pivot_root(&(0x7f0000001200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x9c}}, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x333}, &(0x7f0000000000)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0})
io_uring_enter(r5, 0x47ba, 0xc3c, 0x0, 0x0, 0x0)

4m11.613060633s ago: executing program 4 (id=325):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000180)=@ethtool_cmd={0x29, 0x6, 0x9, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8]}})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82})
r5 = socket(0x1, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x91aef8a0c7c113eb, 0x0)

4m9.823009337s ago: executing program 4 (id=327):
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async, rerun: 64)
write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async)
r0 = openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000400)=0x1) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x1, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffffffffffb6) (async)
ioctl$TCXONC(0xffffffffffffffff, 0x5608, 0x3) (async)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x260, 0x260, 0xe8, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) (async)
lseek(r1, 0x0, 0x3) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
mount(&(0x7f0000000240), 0x0, &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='f2fs\x00', 0x8, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$lock(r6, 0x6, &(0x7f0000002000)={0x1})
fcntl$lock(r6, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x40000000, 0x3})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000220e0000000000000000000000000600000d000000000000000000000000000000000000004b3e9b11b88ab9e9cb33c5c9000000000000000000000000000000000000000000000000000000000000000000000000000000000c20000000010000070000000804000000000000002f49f13401000000000000000000000902000000000097c0e6471bbbfbfbd485955dc5e7d9"], 0x0, 0x96, 0x0, 0x2}, 0x28) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000b0000b98c71b1621f1c0eae7141abdd00000004000000000000"], 0x0, 0x26}, 0x20) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1, 0xfe}}, './file0\x00'})

4m8.844824712s ago: executing program 4 (id=331):
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

3m53.502424739s ago: executing program 32 (id=331):
socket(0x40000000015, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x70bd29, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @empty}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x44}, 0x1, 0xd}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
pread64(r2, &(0x7f0000000100)=""/78, 0x4e, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)

10.961936335s ago: executing program 1 (id=913):
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xee00, &(0x7f0000000040)='./file0\x00')
lsetxattr$security_ima(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "5ae2caabcffb34fa79521752a9887367"}, 0x11, 0x2)
syz_open_dev$dri(&(0x7f0000000140), 0x6, 0x8800)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r0, &(0x7f00000001c0)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000240)=0x80)
ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000280)={{r0}, "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"})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001280)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f00000012c0)={0x6, 0x8, 0x0, 0x8, 0x2, 0x0, [{0x2, 0xffffffff80000000, 0x101, '\x00', 0x604}, {0x2c49612e, 0x200, 0x1, '\x00', 0x1}]})
clock_gettime(0x0, &(0x7f0000001380)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f00000014c0)=@multiplanar_userptr={0xbac8, 0x0, 0x4, 0x400, 0x1, {r3, r4/1000+60000}, {0x3, 0xc, 0x7, 0x80, 0x2, 0x1, "707bad2c"}, 0x4, 0x2, {&(0x7f0000001440)=[{0xd, 0x7fffffff, {&(0x7f00000013c0)}, 0xfffffff8}, {0x4a, 0x2b1, {&(0x7f0000001400)}}]}, 0x10, 0x0, <r5=>r2})
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000001540)=0x9, 0x4)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000001580))
ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000015c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001640)={&(0x7f0000001600)='rpcgss_import_ctx\x00', r2, 0x0, 0x8000}, 0x18)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x8c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8005880}, 0x4040800)
syz_open_dev$sg(&(0x7f0000001800), 0x1800000000, 0x400500)
r6 = socket(0x9, 0x6, 0x4)
r7 = pidfd_getfd(r2, r1, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000001840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x44f, 0xb605, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x70, 0x1, [{{0x9, 0x4, 0x0, 0xc, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xd3e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xfd, 0x3, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x40, 0x9c, 0xf}}]}}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001880)={0xa, 0x6, 0x200, 0x81, 0x6, 0x0, 0xff, 0x73}, 0x69, &(0x7f00000018c0)={0x5, 0xf, 0x69, 0x5, [@ssp_cap={0x18, 0x10, 0xa, 0x1, 0x3, 0x87, 0xf00, 0xff, [0xf, 0x0, 0xc0c0]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x4, 0x9, 0x7}, @ssp_cap={0x14, 0x10, 0xa, 0x10, 0x2, 0x7, 0xf, 0x4, [0x0, 0x1fe3f3f]}, @generic={0x2b, 0x10, 0x2, "5a73c81445c572628170694d64cbd2d6225d20ffcd14cd9bc79a3b9ee41150767dd870fde109ca63"}]}, 0x5, [{0x29, &(0x7f0000001940)=@string={0x29, 0x3, "19bffdb4149f0cff57b0f2b6fd85d121e37e6c81b14f2bcd95290cac642b965009a963c967e251"}}, {0x25, &(0x7f0000001980)=@string={0x25, 0x3, "486b725c022aca068f21f0642b6e34233f61285a59d14bf2ea0168399d1c092a4cc573"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x200a}}, {0xd1, &(0x7f0000001a40)=@string={0xd1, 0x3, "5bc934310f23fa72cba30cb96b9ad47c4b840a45fc2e445a8bc19466fb782194c8a1f4f63142b61f99a237a8e1dbd78c0625b944c23db2a14ee7d0851fb6e8e616033a3ce7e239c05f6a6f6ea75a03fc259ab3c98f2b6179034debdd178abb3d14d918fd8c1bc71a19d6f4f3a806dc6cce005a480ccaaf325ddfa5aaf00eaa110675550866022a458ebb47069f0be46e3b9bc4415f613b318dd969b2ee70da9e5bb5a2cd8fe5d13d11795ae4e15433af35f7304913695c9b2b7c1edc29794b38791d9aaf4c7df74a041c47f424b688"}}]})
r8 = getpgid(0x0)
timer_create(0x3, &(0x7f0000001bc0)={0x0, 0x0, 0x4, @tid=r8}, &(0x7f0000001c00))
ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522)
setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000001c40), 0x4)
r9 = accept4$netrom(r2, 0x0, &(0x7f0000001c80), 0x800)
ioctl$sock_netrom_SIOCDELRT(r9, 0x890c, &(0x7f0000001cc0)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x563, 'syz0\x00', @bcast, 0x3, 0x4, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001d40))
ppoll(&(0x7f0000001d80)=[{r2, 0x4440}, {r7, 0x4}, {r6, 0x7440}, {r6, 0x44}, {r6, 0xc0}], 0x5, &(0x7f0000001dc0), &(0x7f0000001e00)={[0x6]}, 0x8)
ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000001e40))
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

7.693172s ago: executing program 1 (id=927):
syz_emit_ethernet(0x423, &(0x7f0000000200)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x3e5, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, [{0x19, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x3, 0x1, "000002050000000026000400"}, {0xe, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x2a, "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"}, {0x26, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483be298a561000034f5671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9f1a45b75018dff16e70bbf39c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0)
socket$kcm(0x2a, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xff)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x7)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6)

6.788561518s ago: executing program 3 (id=929):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r3, 0x3)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x6, 0x59455247, 0x3, @discrete={0x401}})
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4)
bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x8090)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010", 0x5}], 0x1}, 0x0)
sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0)

6.63512556s ago: executing program 3 (id=932):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket(0x10, 0x80003, 0x0)
write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85)
r4 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl0\x00', <r5=>0x0, 0x29, 0x8b, 0x5, 0xffffffff, 0x10, @loopback, @local, 0x80, 0x47, 0x401, 0x3}})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xd}, r5}, 0x14)
close(r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f00000001c0)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010040000000000000000100000000000000adc9752d1d879759620cf205c8f9288190bde91f8bd79812d95f0132d5f21710f07b5bd8f68ba28a385e63e6286d4f4f871495447bbc46812b210122227427b5a9bbea8838cf34297693fbdc17a95a98431acd429aa994ebcceda932ba628cec6497184f53387df595dfeb2e4e8d9825e9a987391bcebb5a2aa18790567d017b3433476fbc911108d4ffc399b54b7a754ffb1d9846dbdb74", @ANYRES32=r10, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c656400000000000000000000000000050003000600000004001c0008000600", @ANYRES32=r7, @ANYBLOB], 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0)
write$qrtrtun(r0, &(0x7f0000000400)="9e81a190", 0x4)
mount$tmpfs(0x2010, 0x0, 0x0, 0x1000040, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x3], 0x0, 0x0, 0x1}}, 0x3c)

6.309154236s ago: executing program 3 (id=934):
getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0)
r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$smackfs_netlabel(r0, 0x0, 0x0)
read$alg(0xffffffffffffffff, 0x0, 0x0)
write$smackfs_netlabel(r0, &(0x7f0000000580)=@l2={{0x7, 0x2e, 0x6, 0x2e, 0x4, 0x2e, 0x6}, 0x2f, 0x0, 0x20, '['}, 0x6c)
write$smackfs_netlabel(r0, &(0x7f0000000600)=ANY=[@ANYBLOB='00000000-00000007801.00000000000000000017.00000000000000000002.00000000000000000007./00000000000000001174 n@m'], 0xd2)

5.589271205s ago: executing program 5 (id=935):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xb0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@socket3={{0x28, 'socket\x00', 0x2}}, @common=@unspec=@cluster={{0x30}, {0x4, 0x4, 0x183e, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x4ca, 0xb, [0x10, 0x2a, 0x36, 0xe, 0x7, 0xf, 0xb, 0x22, 0x39, 0x12, 0x17, 0x36, 0x6, 0xe, 0xa, 0x10], 0x0, 0xb, 0x681}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x4, 0x4, 0x4, 0x1, 0x4, 0x7], 0x0, 0x2}}}, @common=@ttl={{0x28}, {0x0, 0x40}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000540), &(0x7f0000000580)={'U+', 0x7}, 0x16, 0x3)
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000005c0), 0x212601, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000600)={0x7, <r3=>r0, 0x1})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0xa010, r3, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000440))
r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1)
ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x20000002, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}})
ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000c68000/0x3000)=nil, 0x7fffffff, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0xe4})
getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400))
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x9, 0x55, &(0x7f0000000480)="4950753f911b23f06374e67cb72fd15ca4fdfb2cdc292a825e19ee9d7dcffe3750036e85368ea1381695f30f403301bd553a9aba15b3d85d498b194de6508bf9ad3db3e472ab8e0190c431df389c33f51ef760c920")

5.521256806s ago: executing program 1 (id=936):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x3, 0x0, 0x31}}}}}}}, 0x0)

5.445096638s ago: executing program 3 (id=937):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3b, 0x6b, 0xc0, 0x40, 0xb95, 0x772b, 0xa24c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x81, 0x38, 0x7f}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000280)={0x20, 0x0, 0x2, "f6c2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001280)={0x10, &(0x7f00000011c0)=ANY=[@ANYBLOB=' \t\t'], 0x0, 0x0}) (async)
r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc70a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xfa, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0xa, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0) (async)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0xb, 0x5, {0x5, 0x3, "821f00"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000cc0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x40, 0xb, 0x2, "0a1d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.309052945s ago: executing program 1 (id=938):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000280)=""/31, 0x1f}], 0x2, &(0x7f0000001640)=""/4096, 0x1000}, 0x2}], 0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

5.25108926s ago: executing program 0 (id=939):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) (async, rerun: 64)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) (async)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, 0x0, 0x0, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async, rerun: 32)
r3 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') (rerun: 32)
read$FUSE(r3, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0xfffffc7a)
unshare(0x400) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (async)
write$binfmt_misc(r3, &(0x7f0000002040)="12680a205668a9b763d6931a3872ef00f6c16a7c18b5d96344eaedf10cbeab7e70c874f9bbd672d530e00d38ba62998f89f7f2f4219bb91027a62c086a7a2adadd6b475c43da69c272ccc918d0b5c856e19b18955449f5cf8be7945614926923a28a91ea52b05b179b88736ddb60e321c48cbfc319", 0x75) (async, rerun: 32)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async, rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
read$FUSE(r2, 0x0, 0x0) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x2) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async)
recvmmsg(r0, &(0x7f0000002e40)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x27}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/177, 0xb1}, {&(0x7f0000000840)=""/235, 0xeb}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x6}, 0x80000000}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a40)=""/144, 0x90}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000000600)=""/57, 0x39}, {&(0x7f0000003fc0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x5, 0x40000000, 0x0)

4.965920988s ago: executing program 2 (id=940):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000040)=0x1, 0x4)
sendto$inet6(r0, 0x0, 0xfc00, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)

4.092960996s ago: executing program 0 (id=941):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000180)='./file1\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff})
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), &(0x7f0000000440)="edb4cd646c0100818d85b149dc5321168124566c4f85e5341f7ae26c7d3492da644d902c9160bbc0703862218acfe79d78a4a03ec5eaa607740c22674fb4edb221c2ac0122deeeb372e75e88b2db1006c968e1115b401e6612c53a4e28444e1a8c20d170f28141f97e527048efd952705634bd5298d88c75f403bbd55ee8cc09ed01f0b08d5311d8dccb8a9bd2aa48cbd27910", 0x93, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340))
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mkdir(0x0, 0xe8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2061, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x4e1f, @loopback}, {0x304, @random='nP\x00'}, 0xa, {0x2, 0x4e21, @empty}})
ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r3}, 0x18)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

4.092390085s ago: executing program 2 (id=942):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020)

3.922805868s ago: executing program 1 (id=943):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000bdf7130870278d15404ca957b13d09021200010000000009040000002ac59800", @ANYRES8, @ANYRES32, @ANYRESDEC, @ANYRES64], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="001306000000fc19d00500f6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r2, 0x4b3a, 0x1)
ioctl$TCXONC(r2, 0x4b3a, 0x2)
prlimit64(0x0, 0xa, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x1, 0x432200)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/kcm\x00')
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r5, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {0xc}, {}, @result}], 0x1c)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
mknodat$loop(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
faccessat(0xffffffffffffffff, 0x0, 0x1a0)
r6 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x80000005, 0x2, 0x803, 0x264}, &(0x7f0000000240)=<r7=>0x0, &(0x7f0000000200)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000004c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x45, 0x2000, @fd=r5, 0x536, &(0x7f0000000740)=[{&(0x7f0000000100)=""/209, 0xd1}, {0x0}], 0x2, 0x10})
io_uring_enter(r6, 0x6e2, 0xd52f, 0x1, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

3.749486971s ago: executing program 5 (id=944):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = syz_io_uring_setup(0x422d, 0x0, &(0x7f0000000240), &(0x7f0000000180)=<r2=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_io_uring_setup(0x33c5, &(0x7f00000003c0), &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184d, 0x0, 0x42, 0x0, 0x0)

3.434478621s ago: executing program 2 (id=945):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x8, 0x1, 0x2, "3a7107ca5de21f000000f373000000e0ff00", 0x56595559})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x7f, 0x0, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x10, 0x4, 0x80}})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x1, 0x0, 0x80, {0x29}, [@ETHTOOL_A_LINKMODES_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

3.246530994s ago: executing program 0 (id=946):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
fsopen(&(0x7f0000000000)='smb3\x00', 0x1)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x8000) (async)
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}], 0x20}, 0x8000)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x4, 0x400000)
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x3ff, 0x1, 0x1, 0x7ff, 0x6, 0x7f}, {0x0, 0x6, 0x9, 0x3, 0x3, 0x6}], ['\x00', '\x00', '\x00', '\x00']})
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x5, 0x4)
sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="b2945996bdb28b63686da55c752828525b8c8001d8118f4b4dc57c2047584f22286a53083e8f643260876a7ce20ff40d29c26f4d85c2c12312bf9e38665b28297dca2294f37e340b21a59d8b05b5363e4053d5147abbae9f9a692a6af47c5b350d76bf925cfa107a4bf41cd4b5e592971d8393645198c4603ff199c5b72d0dc701dd64fe3c2cc32287942eb2b201f36459f99990751c797afcca5e208ff9d6bc65efbf446ffe6836d2028c19ec752c5f164f3c57970f054ce75bff17ac6b1f57a13e888d1a7db9770f208166d3cf5c9a609467c642cfb5cd94e59c383e1c", 0xde}, {&(0x7f0000000280)="99c47975428d85b92a2efb9323", 0xd}, {&(0x7f00000002c0)="e5e465c751e90db6413c742ad8c689f05ba23bff2a62bebc5cc78e954d4c2b4c0d4b1febc0eedb43b35a843cd07d203a3c17ee79a488975acad4789858ce4d7d9d74b65b5a43fef078c0ef67830712ea64", 0x51}, {&(0x7f00000003c0)="7989306f479c9ebf8413ff1bdb8119fb92df29881e663c0d5ebdfa2147418e48293ea3a951bce3358a38b1f0db1d1eb35695855570b80da53366bc9a8dd51c4fe3dbd3ae7c5c9d3eb448336d8baa66276eccb13eae05d91e25a9b97e54994599c1a04363a45d8bf3a4e3ba3227be33aea45704b8549c1a7beb9a5828ce4b054bc7f5206c77727802589345226aef78f38a1394e781db9de10f415c700062904ac4ee65fe2f7211ede3be1590b339faf4138d78febae575f671f4972a8cb81e1f24e2", 0xc2}, {&(0x7f00000004c0)="6a7f5729a4fec205678294a9f6787d7089271e11fa7cccf91c196052f04eeafd44c58751f12d7a98d0b8c3cbcbc507dbb5fa6cbde69429b0ffff29cf35620b60e3afa7c3f18bb9", 0x47}, {&(0x7f0000000540)="98893edcaebb64615d2962c59375723ecb87f648972e7adb6536b11886a2481aa0d7758c682571043c84ac611b43e35cad1888f50cc0ec9b1d9940907e09da5bde1106ee924cb4c3f967ddc6fe90209ee45b79ed56dc390a8e5564ea0d5368130048", 0x62}, {&(0x7f0000000a00)="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", 0x31a}], 0x7}, 0x4000) (async)
sendmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="b2945996bdb28b63686da55c752828525b8c8001d8118f4b4dc57c2047584f22286a53083e8f643260876a7ce20ff40d29c26f4d85c2c12312bf9e38665b28297dca2294f37e340b21a59d8b05b5363e4053d5147abbae9f9a692a6af47c5b350d76bf925cfa107a4bf41cd4b5e592971d8393645198c4603ff199c5b72d0dc701dd64fe3c2cc32287942eb2b201f36459f99990751c797afcca5e208ff9d6bc65efbf446ffe6836d2028c19ec752c5f164f3c57970f054ce75bff17ac6b1f57a13e888d1a7db9770f208166d3cf5c9a609467c642cfb5cd94e59c383e1c", 0xde}, {&(0x7f0000000280)="99c47975428d85b92a2efb9323", 0xd}, {&(0x7f00000002c0)="e5e465c751e90db6413c742ad8c689f05ba23bff2a62bebc5cc78e954d4c2b4c0d4b1febc0eedb43b35a843cd07d203a3c17ee79a488975acad4789858ce4d7d9d74b65b5a43fef078c0ef67830712ea64", 0x51}, {&(0x7f00000003c0)="7989306f479c9ebf8413ff1bdb8119fb92df29881e663c0d5ebdfa2147418e48293ea3a951bce3358a38b1f0db1d1eb35695855570b80da53366bc9a8dd51c4fe3dbd3ae7c5c9d3eb448336d8baa66276eccb13eae05d91e25a9b97e54994599c1a04363a45d8bf3a4e3ba3227be33aea45704b8549c1a7beb9a5828ce4b054bc7f5206c77727802589345226aef78f38a1394e781db9de10f415c700062904ac4ee65fe2f7211ede3be1590b339faf4138d78febae575f671f4972a8cb81e1f24e2", 0xc2}, {&(0x7f00000004c0)="6a7f5729a4fec205678294a9f6787d7089271e11fa7cccf91c196052f04eeafd44c58751f12d7a98d0b8c3cbcbc507dbb5fa6cbde69429b0ffff29cf35620b60e3afa7c3f18bb9", 0x47}, {&(0x7f0000000540)="98893edcaebb64615d2962c59375723ecb87f648972e7adb6536b11886a2481aa0d7758c682571043c84ac611b43e35cad1888f50cc0ec9b1d9940907e09da5bde1106ee924cb4c3f967ddc6fe90209ee45b79ed56dc390a8e5564ea0d5368130048", 0x62}, {&(0x7f0000000a00)="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", 0x31a}], 0x7}, 0x4000)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
madvise(&(0x7f0000004000/0x2000)=nil, 0x2000, 0xb)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x4001) (async)
sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c00228034000080080003000000000008000500000000000800020000000000080003000000000008000200000000000800040000000000440000800800040000000000080007000000000008000600000000000800050000000000080001000000000008000200000000000800030000000000080007"], 0xc0}}, 0x4001)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000600)={&(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x3, 0x100800, 0x0, <r5=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4, 0x0, 0x0, 0x3b03}, {0x6, 0x1}]}) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xfffefffe}, {0x4, 0x0, 0x0, 0x3b03}, {0x6, 0x1}]})
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f0000000940)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r6, 0x0, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000044)
sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x7e}}}}}, 0xfffffd69}, 0x1, 0x0, 0x0, 0x800}, 0x2000c054)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000180), 0xfefc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r7, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f000000a000/0x2000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000008000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0}, 0x68)
r8 = creat(&(0x7f0000000100)='./file0\x00', 0x100)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r8})
ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x81}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x7}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x7}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x2}, {0x6, 0x0, 0x5, 0x7}, {0x85, 0x0, 0x0, 0xaa}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002a000100000005002500000000000c002000060000000000000005002d00000000000c002e0001000000010000000c002e000100000001000000060009"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4) (async)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002a000100000005002500000000000c002000060000000000000005002d00000000000c002e0001000000010000000c002e000100000001000000060009"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4)

3.246113466s ago: executing program 3 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
r1 = socket$packet(0x11, 0x2, 0x300)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x86)
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a02000000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r1], 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c900"], 0x16)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x20, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c0001800600060065580000d1000280cb001480080007"], 0xf8}, 0x1, 0x0, 0x0, 0x4008811}, 0xc000)
accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x2000c084}, 0x8c080)
syz_pidfd_open(0x0, 0x0)

3.230241079s ago: executing program 2 (id=948):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x7b00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

2.440588878s ago: executing program 5 (id=949):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d080207000000810000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44050}, 0x1000)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
setrlimit(0x4, &(0x7f0000000240)={0x80000000, 0x8})
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x3c, &(0x7f00000011c0)}, 0x10)
write$binfmt_misc(r5, &(0x7f0000000100), 0x6)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000ef7b3e69400012800c0001006d6163766c616e003000028008000300030000000800010010000000100005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000500", @ANYRES64=r3], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8000006)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2c741, 0x0)

2.377039308s ago: executing program 2 (id=950):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff)
clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0)
timer_create(0x2, 0x0, &(0x7f0000000500)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
timer_settime(r5, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0)
close(r4)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000000c0))
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x200)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r6, 0xc0a85320, &(0x7f0000000480)={{0x80}, 'port0\x00', 0xffffffff, 0x160051, 0xffd, 0x4, 0x40002, 0xfffffff8, 0x7, 0x0, 0x3, 0x3})
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e20, 0x2, @remote, 0x8}}, 0x0, 0x0, 0x26, 0x0, "3e9376e159ee06cac261915f0dc748c450e8e35fd3d0dd46dcfb22e4a333536db96ffa4749af6a82280111ba0357baf76905885e9e6ccbcd5bc41058f19f82d84d955dc24baafb97dac174cad2a0d07e"}, 0xd8)
execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

2.376552524s ago: executing program 0 (id=951):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, 0x0, 0x8000)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
r6 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x38)
rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="06000000b0c189123f3d41232f91e009fefb13dc2b9c8ea8ab95ff2da222529164ff8d352053970241f7a2a1361c896f7073610a6b80c297ddee68806ff9e2a6a8f1cc00150e0f0196e18583118eb6c5b84154c6635da4887f9e0f25ca2efd57fded4d8385c39a80da13e427f67ffb03b575067ae280f9a486cca74aaaf08beb2dbff0ac", @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r10, @ANYBLOB="0800a000d608000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r11, 0x0)
ftruncate(r7, 0x3292e291)
ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, 0x0)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100053", @ANYBLOB="597049408c9dba6bfee56c71206d98272cca1f36e07bc3082374c06b8d13e2a6259c23960df9cf706833e4a4cf668aa2bd6eaeb7fc43dfa8083456b31df455b833eba85325abda7fd490c187526399626fd8b5fc339da9e7e9fd58ffacd9954407bacf5b3e3c9c564a8446672fe06e77d367d47316de64527d69a8a3b1c62bddec687f77c396e3795600"/152], 0x104}, 0x1, 0x0, 0x0, 0x200408c2}, 0x0)

1.466603156s ago: executing program 0 (id=952):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x138, 0x20240}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8001}, 0x40040c4)

1.370279418s ago: executing program 5 (id=953):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r6, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000280)=""/31, 0x1f}], 0x2, &(0x7f0000001640)=""/4096, 0x1000}, 0x2}], 0x1, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)

1.000817205s ago: executing program 0 (id=954):
creat(&(0x7f0000001380)='./file0\x00', 0x4)
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
r1 = socket(0x10, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r2, @ANYRES32=r0, @ANYRES64=r1], 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f00000022c0), 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc0286405, &(0x7f0000000180)={0x10000, 0x4, {<r6=>0x0}, {0xffffffffffffffff}, 0x5, 0x6})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r6, r3, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x2000}})
read$FUSE(r9, &(0x7f0000000200)={0x2020, 0x0, <r10=>0x0}, 0x2092)
syz_fuse_handle_req(r9, &(0x7f0000002580)="5536182daefa2fc6ee10a1b2d4e27cff3c3e628d4656f7b27979e371b15b420c01ae674ddb8fff7b2bc41e7c5927065cd32f2ff7908ef7dd74cdc82f3799ab12edbbfd0b8f6d2194d7f72aec3a136e25c7bf733436bf6cbfc94431ad053a2ec4ccac5aaada8a41ac38c0e1849e599dce84e431ac501db105b4484146b338c0ae9124877ccb8273c7fbb32603251e2d66c71398a7a715bcbe5c9d87e41af55f837e2931c4c1b6b7bbc30dfedfe6e61a39e28f66bbe56496745fbe03f6035183257edac4b0fe3087e7f3e79c2152a07341f3ae9ec68e78875b6e12b5a2a1abbcca4d7963be818a7a31290cad5a025ccd05b609c7ac49ea85d49f354c1e76091a917966665e77471005a46a195b290c01bb7ddf4709e94543471d87a0a5047d3631b00862e1e9a00c60b83371cc16ba087463122a892a1b21786fe3d450c7ba97799d88126f09a698a421242e9c67c981ebc576f57ba3df22e0071db74fa22e97b0fbe589894931a4c4e0eda8bb9533c4ce503fba218d0ae43ab4b4d0c705e04442d093ca5299ae8499c6db904bda6c68105bc2a1cd8e16067215476e573745d1e99daa73400567a9978dd7bffb21429479ace30c95afdfaebd7faf74343cd58e14ce6d2fada5a1c665049eeaa717ee681666c8b63c6d54e66df86144f85d80dcaa3ae7a13b58d5f2b607029efbbf8593afc75e0ce0a875a5fbedecb425a22624a0bb8e2fd06212a1fdafb92430d309f8f68504484fb1246f3d7b0893d3dc9d0b6c8d7476b6aea871eb4f32c283e22435fccb221484409cc28a6609dd869b99547fc81b2e517809a5b77783f9fc11b5fe584b9f64c0fec35d3db21ae30d0b8b88d722dea4a376d2a610f0a9d08b311e2ed3ef5d72d0e040e41d3dc45e5a17d740c67db88d95b18c8610fed3302aef0c3c1871ff8a5ae1908bf9668f0bc8e5867f56cc59cd303bafabde6a4034a96ba66b98a910dfaaff712673dcbf84c5354f066126068de620f08be67e6034138dd9a312f9ff197fca56a77bad46e59edfd79dfa3aee4582bfe01ce2201f6569178be7a4bdd28e495114944e538ee7b8f11e0812d9f822cd9760316809eccb9b0bbc5f0630224a1534f88600bbb2af2882562e76d149b44780380b62241829e5734fdfff1a2b3a052f3504dffe04d4632e9fef82762fe1950fbaceeb961464dfe2699f0a898fc8783cfdde45ecc3a16f052c4777beb1fddb080fc802a8cc760d1a0d4606b669e78ee9ba1ac398914ed5096850dedc513e5c71eca19d51af9075151f4ca3d8a841b7b1d205f5f3d223f7e48685daa0836f93017935ad1d942c7392667145ccc1d4700f5d8fb2fc218fd6d70357667d339a28dba3360761857b19f9f91e56a0e0281af1042a409a4e2839f3d21b73a5c352b22e4ff06e563e92c00b48e7f8bcdbbbd398c65331298f779dafe875854e301394b0faac2126138908fa8598b4f5e58ed1ac451eb0187e20077099d12d745fcff0b7fb5e8b9fa65ac617ea6c953e8786229b67a604c46810876650f919e6bc6792db22ec0be29cff94e9c24eb6e1830f890bb4b6bcd74b39060506095b99b95f2a8addfb8dfe11f47479fd23cc7c0701ae00774c430b3b9f52ab2579d47a2c2095365aa569f55a1431f93e651c01f0d67ff9337708a72e352c0e699f14bf07f9b9c056897c78edcf34ade3dfd17a04446d565fb6e7c701a237fe1a3d932371654a43b56e7f5ccdadc0f506d746c3f0047b69c0c174cbbfe092f139c09c0e2e76d9a777142813cb78174630ea8d73301e3343b94856fe610777468a9fb4518a0cf68243a4bd715e38e3431a811f962edb1306d76d89e0aad9be5800e7bebb82ccaec2382c9c114c91aee013acca2d8ddf99465e760bd185453a9eb4e5a78383094603b749c6242ad227124ef4b7ec7506b8a76f714099c954f0b2f2d427af0451a7ea3d1dbfa8a3e644c3640d397de3ce942311deb73fad3a76cba773f416314e81e70bda715b342113a18a249300b43250cb3b3aa46ecabe42d0e8c1dc4be286e539c71f0d1c0b0e1795ae7428a3887f36b79e9c76401a5dd460f45b9d8277e04c7c1e615fb33d0fbc444421f3fd0bff4e045d790610aaa2b62945e4b398024c75680b5e12235c35f5b23ddd99454fe527acad6d08fb37c35d9ecc0a8b10e2c31fac786666eb2ad499ddb7d06c7526fb1c5412f6a0df003410e69b81fe523057b6b73cdecf0e5bc4d3b87757889fe49dbdb3ec79c7eb3a868480fc87528e80400de837cccd4a6345508386ada1833f57a20c56e973569bc7821088d343e80009b7b35390975323d24e764aa6c90d3dd5fdec08ed363dc9ab57de949282994cd3858f829c7e5e9a745261383db27c9c53e9e98e109fda6cbb88649ba40b5067470d73b7471d406e5ea8041f9fa25f5b6c919aef84f7595511141e9f090ee103b20a13b22c9a88348ed6d284c0d7a58326e0c4c9626d9a5390bae2be199b201ea136a9aac76e6125db9bf58f61e6a46f8145a9df1305415989435f51529da03f09a67e3629e6f6cb6b70407d9d848f554f1a7e63602e678e62d3b41b4bf4ddda713ed2c291536d8cc12a16bde144ef56acc17778b1aa8eeeeeb60c781365b615be4435c7158d926351cdb46b89fa82acb384c7318dcb2e51db8bdb223aff2c8f36d9e6b1135ad18f7e0b9d91a76972c3140f8e21dc71422de12a4f5d08624bdaeb983619a5ff82cf788c6b8a5fbf0f78e61ae4058d6e03a3d5130646dfc13686e356a1325434caac94ced659529181561fee7ce4f7e1e7945f119ad8474ea6b00257ceb7af2d9b3f9ad5782cd986f1b097d61bf26a6c48c3ab597e4678d609f3050eec9f3bbea1bc67314407521950526e6d71e34e35392067ac84b66badc82a54bb0dc8ed2f1050711ef2d47af5252075c0441aad6900539fcc649c1b1ffc70a1cc39e0c2136c764ba718d50f4800dc29769c4bc9a2fd0f43eb6ffb717a473ccb14ccd58bd506c4e4a0f4ea1158b59b3d6bf1a2d010c456c1f099bff69add46cc60fd2d9779f603ebb943ab8eb02627ac8aebdd52f25b069f64a61e90fa9ac979cb4c6cf0ebcd070099a1a6e6a747e8989e84afe090390953f988f2dcee405086ce51b1d2d8d249f45899b4e862008d28efad8aa5abd0912fa456aa9d3a918a0dd3420d7c4b04b9e3d65c41a1548b7caeef5fbcededf64697786a0bae73d2c5352658b871c806bd150c91bbf8f4735dddee9cfd3e152b5d44cbcce912a2809760e225b9018fa498c86ccb2359cb0834bcefab92c0468522648fbefbe25cf8d82b897371b5369e8f2972502574c0a3235066969c4d5d67fc312d6631702f66a113d22063ba2ac7d9ab387ad1e115e9c98275f3e0dacd2e8f0843f24687b297bf42bca11b89c6db2fc7026d364486ef2d614bc45d5cff0758d69fd48ea06b8a97667e4d7d30bf7f1c30b62287637f50468bf144fd177fdabcbd0d12b50c9cbd052dcd66993c72f48bd6086412ed5f9af3d44dffdf7c012aadd5cf7bd3b314f236660fa1c0e4773a4e9ccc36fd130ffda59a9bf41f7fbf79e5e3333365a3ed2e7714e50805bc70bc6fd20203cacbbeecb8e01a2ce626756cdbd01c53717c2e7b56b47e21f13209c2bf2b1b251e7a93f8a085dcc61d9ae82303a962441372ff7c0b8b8ba75bbf5b861ff7ddbc9781d40c90ae467bdeddfdf949e9a8b8c9fb7db3a9323d05d15bef19ce2e7634b84ac082d50e84b66f99f34b2f852fefe67faa403e848f3de110eb1d9faefa176c3cacd20c7f87d74e858a1a7bfc2c9e895541f691f99a2b8771c8755300ee74e3d6a048b30d02ca16202ecfc207a0b29302aabc1c5b57c7d0d31d43be5cb1f7230dc238fb701e7037aa00c9b57c6fc85baccaa56754d27b975872051566187b0983d93b9ec052edf3b33f7ddab343eac6f7aed97771e708e40a4cc6797f85d91a0debd5c6169895e895f67a10685af5e0b80b0e728731cbffbff8be603469d03bd47dbca4456108c79c029af16482c5c2590c1e0673c7e943699ea107d906a3e667fe7b2afaeb489548b6a11d9862e86a0b549a42b607ffeda6e3ba0f567b63b0be6edb9098cf3a44e6864c5e99fa5f475acb57e2b7343eb7fe3e8c139b515348b188defd2d3021fd27950d822f6df5f9c93584fd95f3f88c85231943ed4d511249f96447f7903779e4d8c4a680661fe5133d415b862e668441e8077bfb827293a9eb733e914f37a19e01ad4b014ef87ed5a5817ab8123af9fd863090b8e9a50ce29cf706b2182fd79660cbdbb53ba71b750e71a21d0ed01db3335cad91d5cb4d4648f46468b6e51f63e4088386913ae6b6cbf103947c32d25a8a825118cd6ce23f53ffe3c087114700e9a5932faf3d844fc6b323b3e722ed3ed75037bd9a7fd9d256b2b9a168e66802e284853a0d6b47d39675900f02f005050425731f9c2cb329f70d7a5ce2ee256212bf8b2ba9ece0df39c58f0fbac06c4da946787abf19dadb536bddbf7e51d89f22413575e064c6482d936a89d48be159aeb5055feb0577ced6c5334411d1d58a7e6d02eca6164d90fda39685fd619269fea7f21db51f6aa6961250e03c9e00788c178dabeb68f13dea29f8cdcf30478dbca15c4519bb342ba8b201019061bf8317022dbc5673fb4ed92ef1a1dea0a1a00cb3cbca291f7ebcbec27ea5e824f04b82f5644d4368cdf8026550bc2f86b83da6a265357eb548a9eec6622204b3dcd22440fec0e12819ade4ba53b53b1e6ab906fe0cacabb9c15e8b657475a0dad62dbcb1037aa8617787abce24a0aa4cf1b5c85c030a14277832a95d8b29a4ea86fb80148ece147ce4bf386995ac28e1ad1e2072f3f4fce5c05d9bdd0af118815d6ee89aabfa3f8173e6fa59dfa4a8c1ba7641291b3c18c6ccc4c3588d56d169d397facb4e67485610cc68197b3a43fe78b9458dc47e5057d5bc6b8e3b65bf414818b65d41ed7cfd7a35fe79c9851ef39c3e059fb3dffe331a791ce75728efcd58dd9b3ed1c93b128469afa648f4f91de6e39d5bef7a0e69bdf5b2202682d857847a64b33432ea0f33bbfd1948ad0b6c66d853fef1e6c0d712b86c40f79ff4d125baebf2a4b32dfc8bed2a697f745cfeb16303b4f8e866ee0bb6a5eb6c6ce513b5cb84e2b44854c72ed0cf2e838245be8d098a6943d845f5a8c07c1036da86cab0d5be4ce29545fade4323acf2085b7645107dd12d5b3af7bb37be1b291cbd6fe297c4b4a2a23280358711be91f21305c035bf1f57467a1853c999b3fb478b11c49cfac66429a76099633a54689047d66fd8bd6eebea94fc8007d9e2765e2969608a78d0b96d6b30360e81fb9df5262c8ff15f2fd7000756d8cda1db3847d6f793bf803b159344c57b480c87702cb3d1260692a19ebdceb2e05a2fe2eb5ac5cfa76551a04795915bfaba9849a623e46ac1832157d0ea5255b5cacd4efa844b0ce5f2f0e1a9dc4fb115fce2640ec6d03c5fe15b4837bd6e6127349f2b6b0fd61c82c96531714f5b623ce4e4978c4a0c86b3c17f50acdd67d283ec934ed36ba7360a10ffeeb7864113eeaa25cccc66613e0757782381614b8da3cd0a85cef7bc384969517c920e8454a5a0f112d1653b2828e895d0614e5bf4dec0ec863432cce9337ce7c29affa7f29fff97bd54a6947cc68df8fed17850209242c1c67d0d7aced2efec4b3c006678bcb8716e8e9e40d78781fd6cc5b5522b8ed2ec8cecb677849b778c0a2a17817a3dd2278080e109906dd4e99b772d5911893fa09ade4296876921d1e009e714df7e4973ab1d2e593d88ecf2151e97ec66176549d3af66652c8377e162454ce7cc8ab34397d31978e84aea92a3c0a8106a2a31e33a8dfe942819fa1f2c1272d0f3cbd7dae820642cbc00202455ab7fb81857ef050a1965a291001874b38397ed9a8e8106dcfcdfd80d0f5d0ef0d5775e53cc5aeb1d6bc13886f8f3491cd6af5dd77ace3689fa2bf56e9b4d1e4964f8fd8f0a4a8b5d7fb678f0f3adcb4a19b5168ac5aeee6f087af15af3bde52a9be0f550b21b10ce98da70445284d9db9416732e63b6efb3ced984c0df50c11aa677f822af7ad39b8b4c0d236e4b36a00ff73587b39f917d7effbb37b95a96e350a430d544d68623c80bf2cd2d689b4dc41e8ef374c393092a2619055f268fbdcb9de494e6582be90a4798bac801bcac8389c823759860e7c9d692f41ee2a6b9624da3c09a2c8e7cdeaa100ba8ca25a737046d8bb237b9546641cfbb2eac9bbee9e125b14dfabac642e634d32151c06ceb3ddbb3d3f038ab2efdd063152270449ed5eca2655cd0016147ebbd00003eb8cd25297350afbffae43cfd9867543b81da4510850b1afaa199d0477837017e9098bf5b3973efe218a88b3d2bb172fe77278088997758fdc1dbb0b1fb6af2ab9db1ddf3e3fbd8e8dd35f918779ccba75b3cdfa317fc6e3cbeaa8b11ce2a30cc53292bcb9dc2a18ca400c674360c041c97ee6aec1448a025c6b04ae9efb3a01d31e3f897cfd5dc94dac95c88b95a26676cc6153e203535891116a5f4ebf54c71cbbe3215a04c57c7ba874a1e203bc66d8161d5b556f661244d9d405a2e6baaedd0d0e4c7e093c2ac0e5ee83b7ddf91669dd59016f7cb53d19896fcc838dc008da4a5fdc0a4fac1a6d7f49b24bcc01467df04d8a3f3181cc4e811942a53daf784b59186a17756a8f3a41ad93035a893a4ff60dd8f54a533e94cf87864169287804df3aa38dc5ce6021a06c58d48985c562a0f51d8b32879f9fb7d4a1d3d442626810f151b161b7e35f9a0b3bec05979e381140f31c03ee6f5549e6e7f116be5e87e0a9ab71ee632f837e9a0f9ad1b4979304c26bad6e84eff0b5b79b667e3d74e354d04f5b2c237102e41a1a4dcac99cbb911d9484aebe6ab2cb539a1db3e3302fb833a44a2d725e858ea9a65d43bb7661842b655c51a1ff25207956e8c6c71667c79975d69f688dfa34c59771488028e3d7500ba0cb71ae5751a51b568e67bdf2abb63838aba5e5cfbbeaf02285f6cbe58428a92a6fc25abb01f8d55ecbd7cc0ea69cdfb188b79048dbea488493681b0e70234463ca3e425d24e2ae4d800ce3adb04ce69428b5f884f8dc83392c22e456a2e195b86d717ac45003a99ae9a59c94167eb04aba3612528f94dad3360b46bc456fbb78072eb7f96418c71bec09831b0a63e83816ffde0d9909c06e765a666c2c41b20c339e0d39107311830ae9ad912f0a85f2ec5ca66a79798a568dae14f76b6d59e6c0bc0f9ebdff29c0fce58367c9705bd4323d3c3e125cdb13da6e58f3fdb2751401014e393e3fc688f04080a90430e531767a7c4f3187ccb7b90880955e766aba6091c4e8fed36482bb5a63372350dd08fe84bf5afd1a30a0f8f4de7a640fa84b9c0447073a0b39bf875d0377c8a572adefec3e033fb3dad91b22bfe22c01f23f27ab0c6a1ce19d2f4f4235281cbca15dafe50f383ba89a8c46a666b106c1ac534955df71f4c560010934fd3eb68eebd55487defa1e024f75ac30139cd190bde1dc8684936bc23a1882ae469fc4af8730d29658f996f71c219526497918e359228b55849d952f4b2996fe5f45a6cfdf87da93bfada579479b18d05c4e964c85b88a7bfc6e4f2b5d6e98e00635e8bd2ebb9eb40b99a9e9db2f688b2d94b8cc8c5fb2a1928624fa5df1c228e6499d992453772084bcd33dda984d97e3857b6fee43c6666b3206ccfe3af52debea4ee060c6edd194b90309213f5c4805f454c7e57bc759377aae9727e484391486be0849c5cdfa99c5a0d0687d6afdce97a32e01d45fef015e7c869ca190219a778b91d881a7b595313fb462e5bf78260c78285d6ccf5e4c50ed56ff28e3f49912773f0a58093f259b5cf4e7f607c51a81576fa95b97bf32d0e2e3511b5d784eba29a15246a97ccf608db456cd70adacc6c31913416f24f38dec3544ac2e88c409b5ff7771d873ea8d7a1868775c8b5502273c784cf945680fb14f143140b56462cd46874ffeacde7bf329fe8369df9c4b95a42535ea56ad6fa260f5c738eb9627f890f4a34f80bf3b8fe568d44c3895029b5f9557f17469a53fe4c0d581eb29029ff162ca906cd0e4bb81138be91a254752bf849232ed7042a82cda1e14dfbfdf74a09c17a9039749c789ab0242ed2d0249231c4ad70c23c805676968bdeb96c2d8886f784ecc3e42e6493e45aa20b6e8ede65c49136c9e9414a4371e3012bf596d55315be17ea9396b1df7f82db27f0d121f8aa66c40365fa686a46f430b4cd336da0d9937d5c26284bdcc6c4e0d5a6acc1be089e1a5d6ec422ad3961fb5c5c9836466c3366e6d3f2686b19b529549cacb6252b0d7a7f5df42ea2961ac59ba0b911311ccc4d83f8611f0c4b071544236037b2863d673303a4e3d428131b07f60eb2cd507dc43503456ce829aed8254bf0b51b38008d42e445acb0effc2ab7e4bc26ad76ffba1220f2e878fe9b5de39bf4f25a9ed468cdb100008ffac6bef401df4817b23463e771a3c834c32993274689c01004eb94b89bc44257b7d2b3936caab6d86937b5bb8f705d00fb6f091711222b6dc25eeaa0e350fe484337396162c86bf7d3a1ab82591ad35d393664617041142c0f8b528e947c092f28c3142493d056bd548910615e7300f041f5d01a2f00138ae5d7849244ef9215f5c9dd874e60ca4ad883f86e71690a510831e35c24de1e0d1261172bf4a8625af958febb7b109c5ca5bfffd4342c43ad02136c6eb117b4a6ea98c07a91279731c1228b01e6be755c1c1d095d3cdfe950ac32eee77327a0e7e342ccfc13c69ab6ab113b18c1abe72d39c03e351986cb3326b8b17ada5884aa7d0a553b0d35e32b8c09f1a4106f5d675a88a1508de4a0e9c598c082ae5b229b75579e39e297b225a852e3f6a7d0990a45fdf68771991acf9b7a5c04bc21a40c57817d500e8ebc6b5919219a4110395817c92bf9eb9c623606d4d98ed68dc0b51a0278b0addce8753f86316158bb4bd6a7a0c4c72b0d17b9545695e54826021a6ac44b4de1b4ea977b20af3c47b8860b0ed29a68c1a883777097d54b162cc58edc0f4de1afbbad7c340a5cd9f2f93133cb2a4babc2a688e2ddd580ef8d9d0846c269c265ce9d978aa233c73aa11eb78d3a67f4e7a3dd035ef5a1f832ada87c7dfa377b77215f8c23b1a78e4a7faa6d0c1a4a28a0ef7b32b36bd566d8c478d0133ab43f9c2a4829624eec535234eb89a177ca8d4e9d2d422f33a24d15044822e4a4c1bca5f470b8c8fde09fb69160297218398da27f4e80dbd480782ee75cecd20ad23fdbcc1d4a0acbc63241c1e2cf1a0b12949e42f707ba06b6fdbd8f336bd72d7f96ddf9ec2b5cfcc4c8da6e1ea573e97eeaea537511ac9fd2ae78eb18cb50c13b595f8b6d65ce8c08e9028fffff6b512080dbbd3fb5e5068538c05f73254969f9727db9bff0c6aeaaf83713812499308792a7fc8318e6b2996bcd1b072641be1eb8e028cbd6b0a5f1fa13bfe35b5cd0d2ca21d9cf8ed97f724ef73ab5a99d65befa38d636f2f827d229479377f25501f3a6ece12cb095549503b2299db7806d32751d4851d62b0c6a91e2e961d475d33a8874c96df52c75bb5a0569e892743937451f75345e0351bfa334d37aa43f01ad1ff984dec164faebc713de31470db5e536a0681a042ced0f9839d9ce89259349075961985171c27c410c99458d4c25614ea1d4252293c4f85b0d2ded9ac560cfd024c199d5f0f4bd47763690ba1bca88b8cc81059bb9fe82c955488523114db8c2caf8a63c0049e90ca524330b57edcf718f6a7aab0efe282079d198cc3c1294f35d1a1bf5f69a8838cfc5d4363f9ca9383f83e4f9576de3fac48866ddcde282e5e4ee3f852a063bd6423ac1fdc6201b1facd6c36609fa2faf96afc1c0b76fff27bce059ad6390fd1e3f735806ce654ed555a78ea8e59fb16ff5ac5ad183aab9de37c3d033b3018d591e7ff1a896de969f561260f797603df5fc232076ccdc2e1fe9fc789253a54af151dd50f89e777c2541591101720c893647bd4b3e6257de85251c9bcd700154e85db2a9e2c4d9d2e531a18bfaa05d16ce75f823e60416b3afebce16555536120d5f554fd13e861d74c4947a62d2d09473d8d75f03d354572b371b02e16f3976b1b0b235582ee38d938fe843b107c77c2acd88f34e1669816eb3867134b1c5fce5afad3c70f9bca972ed494577f2ba6362a6ee6b4720bd86938bb49490982a1b5ce6dd54b79f093ce27051530e1233f03d6641392d4fe7a1f7dcec8ba86d8f32f00f0ad50a29b1e17de07bd0205c0d893532c198f23656f7f5d178c0745b7e0b7e8afdd29c8fa1639a06039980d9a5fba11801db4e7868a9b77925a03a770aae3430b1ccbddb8bd766f51fef71ba25cf9184c9cfa6f9921d69066d09a656080f3c5fe475ccab94cdfccd76f3c7dada9236d1be861eb5fe6247ae9f97b7705bb71c375e8b98203c5bd224202c1aa714da47e0daf98fd3eca617f9a255df5dbe98a7520a1e6db9b88af893521f2ecf7fd2b08a7f3c5aeb77ebe6f52739b473840889c41315407477b82242d9a805f9aa200a129c4701d1c88ccd34871f356caf02da9937a88612a9755315914f4e8e1bf471a46c00650457cc06db168e5457fb3f9662994d901a1f58306156979aa795afacc1a7d6111cbea53e97fb71c7bbe44558fb06f8d78ee08e3678b5d218e13f79cf06f1da9f7e128647884589c487147b3edbdaffa16f9388568d3c8caa34a6b944e4f171842cdbb293474fcd5201b7440e05ddcf9e0b476773119516ef45077705e8bab5f877657205bf9eaaa7c86734b1b6c3661dfd4b9eb8590f962e17ad51b44058d558744e5b44cf9db280bff1062b2431d298064f11e7700ba4c8ece6f4df659d4880c4983db0152f1f903023672f6234620134bd5d1d888022da128a527d82e8fa1a562827a4f1592efe3b0bb78060626e8688ef3d5162afe9f1060123dbb1f93b7bdb6ad4ad6e1772bf8705cca424d9c42e4992eb5bef1ec7961bd4260d1e55e863fa9c8e0cb6d28b495fa37b5f59fd18cfcec6319288dd7363821e47ec46664e1994157319eb0d466b42fd9b5fac5ba979a9baf4f699dc539bf77852e18014074f88108b654219e4f9396696c94eb9fb9b360e59920f187029608bed76d09dd006f4033d384cd109726d51850202ba564599dbff7808591f834cc4084db29111de86a70217defa490e39c6e281650d15b1e44bb55164be0f6da58e838bf5f4d7cc2a23b818557ab1fad0fb2253c4da6af41591940b2608f6fa6bc25939ede95317ff96050bbc1f389235caa78adc0d801a56b2fb4cc41e73d5131552985b5af241722e0637f3b88e46b09ea875e5cf66f534666368ff8e46413e5ab557236134afa63478e18328d33b1a235deb2034955cdbb2bfd0e55fd885f380ae8efca1feea985a946519a712df1384f9e024efec61c30a6989aa3b5bd486366f3fccadc0add175c1cf0d2730ab97370eb47bcda4226ee140edbcd9b38b8ee913587125cb185adb4df18e80df2b0ea6e3e87dc8755fe6823ab5ee1feaebb1e6208cf3dd5ad5581f2388be92", 0x2000, &(0x7f0000004dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r9, &(0x7f00000046c0)={0x50, 0x0, r10, {0x7, 0x9, 0x0, 0x403a1810, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
write$FUSE_INIT(r8, &(0x7f00000002c0)={0x50, 0xfffffffffffffff5, r10, {0x7, 0x2b, 0x3, 0x20000000, 0x1, 0x0, 0x9, 0x5, 0x0, 0x0, 0x10, 0xf36}}, 0x50)
pread64(r8, &(0x7f0000000200)=""/166, 0xa6, 0x8)

999.990218ms ago: executing program 2 (id=955):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xe099, 0x0, 0x1, 0xb5}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffff9, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, 0x0)
setgroups(0x0, 0x0)
read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020)

205.082918ms ago: executing program 5 (id=956):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000040)={0x0, 0x1, 0x7, 0x3, 0xecff, 0x0, 0x0})

158.378639ms ago: executing program 3 (id=957):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x532d, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x0, 0x37c}, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000480)='ns\x00')
getdents64(r4, &(0x7f00000000c0)=""/41, 0x29)
r5 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801)
fcntl$setstatus(r5, 0x4, 0x42400)
write$evdev(r5, &(0x7f00000000c0)=[{{}, 0x0, 0x1, 0x3}], 0x5b)
syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc38, 0x10d, 0x5, "ece538e8b62831eafcd9056be7c8a4f36891e0bd363476ba635f8d61e20221d10831df051097c214cf0e5f4345fa2c1eff6b0f8eedd3687f41fdd27b53aabf690ef80b8953b86b7943136212b1ec5c95809bc5d24c84f1ea4c6a1ff8b0dfc20e9b15115ddad4e233132bb07ee1577ae158a9ec4de6171ac0a7542ea221a3d97d80e7bed34fde3c64661a751d33a6d102ec5e611cee97f445ff21d4d3b360a17a83b7594ad811751ceb59ea8b5cde9525ac5679cf2e35907c0abbb85a25c776a98af56eff37c6627d00c51fd572f6113013d16a54d005b0f833f3c9cde6b897312b7ddc1b063781f822e06890c08ad3025e80b4a550a680e58053a8c33d2e1858f971a40788f6b287baa082a334140c0091f5f2d232ecbc86218a477e468e5be1b48d7787071b5c891cc3efde21a3b0337adeaa6a41ce8fd6edf1b0a47ca0cd6d785cc2c1c3803dde4d9749a10e21d489531efca60760b4ff2061dd7800c4f23c3d1e2bcd694fcc87261a2fdfee6baaa701c7083e9675a75b8d530f09f72d8d3fed4ed848ba18d11635893b52c84a6f0fdc9711b63cba52c9e33ac701261d5459b6ff53be036549b6d0e617d125a6a758370d0671f5f956918db7c4d0afb4f7369bad2a1cf0b7bcf130464bb031b092392a72e8234c1cc1d41190dad660bd1d9283d7d4c7f7410c83f6cfbd25b438097f3e5fd4a23e56c1995179797f03c6dfc5e8be4515d9c72ef9ecbb7cd80d4e71d2ac2f31396081eb9fee4b5d633aee32775a004f7aee9f33d81f9e469a1bef0a995ca8d50c2d853bfb1ebaf301d0c649b74827ae650b6a3bec85e2e9fd45e33bdd8c29cb0692d78a73700daf8eaff8efc06f8c07b3ce384ab1d925cdc440a4b85ace1edb6202df092fe6b37c11e10f3cb3d9e0cc19d55989766aec965403244c8dabfcdcc51c2297131307048ffc88b47d07e821656fa73395dd464d79ee82b3d4f47bd29f42f44f9521efdec7b0e8b5436d496ae046d72d69bc3d35a62829954fdf87fa10330a7864465ee86c540b2e1320e8453701898027ef86ad0d7c31c009f0e5f4c35eeb870ba4caa3708656b38c3797aaadb4b372acf23c05d55d98eb8c1c628e744a6a4439b5a515a2a083f8fbc71a2e6800c3ffec640d21d05a4b1f4548c5541f809e9766cce96b2c53b220361638c4dc43af7d5edb874bb48ca3c8a837fdccff0c8b50bc402da6262c5e3b344f313153fd455e4414f2b0e4a2bcf881b5615e399f8bbe6c3c20a314539b856de845a6e37e5f6925f3d5929eb59243b792834b0de7643077681b9113f5d192c4e96ebea0465901e5aa5da812b0d112089c048e29c523a753f7babe4e3de0bff0f220493bef0e7b76b051cecc325a8fb60a76880155ed33bbbccb472dd3b568829eb7cfb4280521adee82b1b1b7c31b0baa329f81f254526461b787d32bd18a760944a3f728a8a257f2bb9bc9172daeeb9a3d099fa60a440063b70cb48a54cf8739467f7e2b075b74800056475332bd226daf3e7a85c198107c3fe4818e78dda31d1d8c4c618c218e368a0e20655c325f95ebdb03320448cfd754064e7a6b69b1677d12a5c63b853d77bd06b4759e30e764806b91d5e9e54c907255ead2d433538105dc4dd9d364de0a82bbbe035d34e215be51d468b95a87e0e6d76264ff4a8bde40e956782351b5595118d6f630ae1eeeb5755177d0cd71f259eb580ba0918194a3b75d6110d58079c57ffef2f53a8d0fcd824c1bf83e612a2c63b0dc6f0e6997d7905d5adf649da853204a522043147f7b7debd7c01835b4f311ad3a6c4122f4cc970e2926ea30aaaf307555dea57ef2dbe3e5ec783dc447d1834cb1cc711c34051d5077d373013e995d34dd20a4ae0f3356b388a46ca2d3686daa528246dd0ab3e7400406e88797294d61b24e81ce8812e0eb38e898c658dafa957618e969f73f988fb6a5b13b0bdd2a63e666f88513f5f15d0f0a743be28c5fa6386d9af70292e96b54d4d5495ab142b036f11a7c18d6245ceb713a30c875af0e7124934b1bda9a9484e617360e2b9b63052da78188ab3ff5e2c8df92e3ff7845343165fd501f097296d614e163a33d8e15032147e2f3dd57e8207c11a11cd9d39a786223d2b6b000ab841e3237bcca18431f26a0ece2e478c28b56ccb93966151be4e52d823d1bc345d9a5c2925d06c27e4c74dd2783f55d32d07ae2eb68fe6d5614cf979e3c16d3f467efee15169eb5a641837b93bc06733eab8e30cd85c731ea46a24266dfe87fb8a9515b25841a246e6d8df10faa34da94576a4a3e1ffc78323cc58b122c0a0993da408b82f4a311c2250483a701df3e99fba515f31791b5b8b6ee31cb92731d656b7ff43b38d3b2d9f59008a7400d6f2dece551883f32d0281395379aa42285e90dff71bad695156ba4842936f6ddcd99cdb5ef8a147a15cf6ede0eff9b5106306806574fe9b3ede36418c97ebbb1de5b7b23a453b98e10634956a34cbf40b62b4cff86935ddbdd31cf5b78e1248b19ba060cff190f1f2f178dab05e0d6395d9b1440b01ed10f5c46c903d3e2f78e9393124a981c7db5126210ce0981dfe0566d0751f3a76b66f06390a1df65218832cb33c91a1a78c67b24b4aa1a52231a6152a2483684eecf19522d5a22bde3cac03fd1de054e36325490af9081bda7b85e007e8714fa6f945257d8bbb766f612f682d19f885d054055de33423889c45157120dfde3ae504c6fd55c65fd652245fbc1d20e535da9e326341fd39bbb8f81117516747c7bd6a0e41faae21d4a7b905a6e82d4584bb56c0c2e540e7c69ce8594724b08c1ccb578617cc7f4f203f1f96011a5a3e9e4ae90ec5b7d5c1b5c682706b331c57e56966ac4017dc56e7a701c2c27657dc7fc436c4c02c51a76537bb90fffd13c1a2bb473245cbf0f34b020cc1b267ba624b09616448eabc753f3eb69256aa7f4ae3c590cca158457b1fd5e37c977ea19f30f813e0169c6b37496162134b6ea6501d6e5910a9b4b5597fd379bdceda96f016fea03ebfe375bdd60d9a61099e593706255f8b1a1048db705b304eb2f7b61737df8ddea67277059f37dc9065e71bfb49efbbbe79661afd5f58f388f02a03dcb69758237b6789fcbdc4ea2fea4132d33d777cd5193c210e345f06a1568e061b39b774ed321e435f44a54842435af0d574ceec62e3132d8b57d490d1e8f1860fbd95e6a30176af9c085760e5ecc9199df22b76069e1ec85035c69d754f399824ebd886693d897b55f139cf6053a27d6389e9158d7f187ee506c304953dcb5c0c72fa5c942933bcd0ed00127fc842cd2f50d6483faa9a775450ea4cac5a18d4c4868ca696f136c28a4703d1562167671ad50ea5e70d0c43f95992130db3ac2e97e10f614a8974650366d369437f12e598dd37f474ab5010b3dd4ef6c3a23e37db0ee18675bc16f0e0e96e50a72f3816e08dee4e9407b0906d57a7caf9539288bda2d6577e09c417c01f910f18a324bd7c1b9388fd464109a5cafa70ee2cf83197c6a0acc5e012343ce8afe4e6a94f0f55b2230c9a6acdc9b9cea5c4a06f6d4376a5d8c43a562736b617acfa01f2b8dfc0f4c25cd3f8d7c675ee2cb72d030dbe4f78805dd9589b4874093dd7b4c6b6715fd245e6d853dbbb4ffdaa4f665870f7f22ed0a9d862cff03581ff2c4bc9ee5768c7ca806460a882dd0ffc96238a22715b6a49d50df7705c2d1ad35ab7df6660ba3ded28f6bedd9dba2158c6a3cc7943d6df0bc376135ea3b9211523130ad77dd1532841a7067a77b01573952bab397520a23eac4d5f67c54ff293e14d7e21792b909fae37de019200b6dcdaf815d0c747d891de553072f7d9dec9cb0657f9f2962c0be6f122bf1d8793995ecde34a14d46acbd238d0cc0edfa3556b7a7c763f37bd162bb6d638eda49818fe97ee6f5637254ff1b31cd1c358f19b362a978b689d5661873da06124960f1b25fa2c069586584ce5c83b72c4844ad85c917e35e0fbc6f565771579997cd31fdf3e42dcc1ab17573328e6a73affe545fc82c149566cb11b439cfb804b581a12c1054d4fee14feae7d91db10348b3470e282fc93c07376e050731cbfc091e3b858a9e1679b4c92b44656802a239ef3f0b91a5649eccdbff499328e9243ba7c25aa50de56d3e0dbafcc6aeab35b64b027e36d6e7868d5f6ea7e46d7d6bc263a3f304b5642e60fa847369f6ea08bd9049822fc6f7cebac468e88db61846c417be1c78ea28691e3a58d46607597c2746b0cdcdde0c8d2f21c6f407d88f17fec2eaa290db8b4513e29439be7ddd719d712e8b01dcff54fe42563e40973ad4f1b00bc9489cd10390b63adef8101b82144370e23d92ee972b129e14a3c1945288f7ebbb67999afcda79c63bb458949b6821cb7f68"}, {0x10, 0x118, 0x6}], 0xc48}, 0x0, 0xe3d08660d3cd4684})
fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000140), &(0x7f0000000280)={0x0, 0xfb, 0x35, 0x4, 0x10, "5fc0da4fe9d3c141d9b01ef11725506a", "13b1d0fec95bbf4a9166a6c9d9157aee039030e47badd36fb9f569cf411abc33"}, 0x35, 0x3)
io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r6, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0xffffffffffffffd4, 0x3, 0x200a}}}, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x443}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r6, &(0x7f00000004c0)={0x2c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000370000000700384dd123533e92acf05a0be467fa21d5d31958de3d45400f97aef481ba6a5d0"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r6, &(0x7f0000001080)={0x14, &(0x7f00000002c0)={0x0, 0x22, 0xaa, {0xaa, 0x23, "93f3eb08cf9500f4a967f930953cc08e8c36c617665dbf1687c1e99b926f3559bbe62d22c631da5960d30416e7a9b8266335f9ed8c3b501fa3061b18a39b03c6c0e0f658afc48c2e1cd15552211d09e427a19305e986f8f5fa2951770f4542cb0275ec9d8112a2def3c4d31aa3ca8434f5f1a7b854ed9643341dd8bf18fb043e553ad885a48a4706416fd6078efeb0290e4c77fc4138eb6f612a30e5b44df513ca46ffb7e0dd002c"}}, &(0x7f0000001040)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001300)={0x44, &(0x7f00000010c0)={0x20, 0xe, 0x52, "be9c05e33fc4fcef82093ca673f300602d946d9aef1f9f607223283b8ae6b8d97fcd349ee33017735f74722a6523e33aff5a321d491fd480fbe81a031b1b437fd4e3a7ce45bd7d34ce32fb5e39b1d678efc4"}, &(0x7f0000001140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001180)={0x0, 0x8, 0x1, 0x3}, &(0x7f00000011c0)={0x20, 0x80, 0x1c, {0x93, 0xd9, 0x5, 0x1ff, 0xff00, 0x6, 0x6, 0x1, 0x100, 0xfffa, 0x971, 0x5}}, &(0x7f0000001200)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000001240)={0x20, 0x83, 0x2}, &(0x7f0000001280)={0x20, 0x87, 0x2, 0xfff}, &(0x7f00000012c0)={0x20, 0x89, 0x2}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0xea, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x3a, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)

84.454292ms ago: executing program 1 (id=958):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='fscache_invalidate\x00', r3, 0x0, 0x1}, 0x18)
mq_notify(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x30, 0x1, @tid=r0})
read$qrtrtun(0xffffffffffffffff, &(0x7f00000004c0)=""/57, 0x39)
fsopen(0x0, 0x1)
openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001180)="985b66cb6ad1834e7846cdfaa04bcb508a2dc657cc73a832f7b734eb3ce6edbd13a641e6d90fc93d7c6a599510944bf535f32dfc8de2a684ced1800d6b12da0076d1261969b7bb76cd429794f70e9a944dd5b80763ff5e8175d27d0e260ae4d4d20aa894903c70aa8b607c0d0c9914d017ead9f3af88e1a7d662a9facab0f53ab33401071cc297b5385a023f58c7366c6fb0c7888633dec84dcc98a1f1869f7d9ace48b34071382f6c55e144dd61dab575c974928edc65cfc3eaf0b0c0119fcefcd8d3b6609c3db56cc21ba31eabf5f83082cc67adfe7440343eb57a046b33d4618ec19f061a673c5397c934a6ab010fcbe4a008906bbb2f95f05a83a613c9f77893a547e2a8083697f738d696f622c34b325b39ae4de96438c5410376c1d28620267dc785068ae4c29ae53ec6097439d7e6ec64727151c8f2c8e58ca830a638eb8f97f30382bbc905f7a7735e454f9b7aa9c5b077c03b1fb90cc36ed85ac760633e6fc6e68a641b56c5bb4b533a3931d0a5d59003648bbeac5611eb570a1ac1d3b5e5e4180971c002c6e48c66204a7e35fca64e304e9921128ca3a7d16aa61519caf48facac71ced71849e82d4593ee608ef2c04b77bae4ddee7dc2adb22427b1f2fd3cb385d984fbba50d8601dfc793591690293475220205ea65880118d28297b3e004d974fd7fad10136d5ddbc0d3469835ce368116f567ba79c890612454ffe8e869b08db1efe58972b6e388bd00a2dbefa56e06dc3a6e5593d2d7c8fb85c04dcd018c8a876077d952513bbada0fe2b636598071e978b5a32b50dfdfcf0bad8c1533219a5a12ef3a610a2176c7c282d52653eb855431c59cde0634525e7f7e1743081fb0fb465860764baa4ab518e2a953c398ebc5bd38bb1f83240f84cd8128baf9fcca2082906eb227fa2ff4fb401b273c7bf8e409283d34f9e4120c1505c151005ebc46664aa219ab66bfff4ead1d2588e0b2ee7a154276ff3121966f9092383fcbc214544", 0x2c9)
r7 = socket$netlink(0x10, 0x3, 0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGETCMAP(r8, 0x4604, &(0x7f00000001c0)={0x2, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000001280), &(0x7f0000001200), 0x0})
writev(r7, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc)

0s ago: executing program 5 (id=959):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000280))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xd449, 0x10100, 0x2}, 0x0, &(0x7f0000000180)=<r2=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
syz_io_uring_setup(0x33c5, &(0x7f00000003c0), &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r1, 0x184d, 0x0, 0x42, 0x0, 0x0)

kernel console output (not intermixed with test programs):

sb 1-1: Manufacturer: syz
[  170.924972][    T9] usb 1-1: SerialNumber: syz
[  171.134346][   T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  171.145122][    T9] usb 1-1: config 0 descriptor??
[  171.150610][   T43] usb 4-1: config 0 has no interface number 0
[  171.172992][   T43] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  171.333880][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.921237][   T43] usb 4-1: config 0 descriptor??
[  171.926127][    T9] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  171.933984][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  171.966239][   T43] usb 4-1: can't set config #0, error -71
[  171.997406][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  172.008174][   T43] usb 4-1: USB disconnect, device number 10
[  172.035614][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  172.043419][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  172.135610][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  172.143505][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  172.213604][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  172.270505][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  172.305885][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  172.355125][ T6629] tmpfs: Bad value for 'mpol'
[  172.364313][ T6629] xt_hashlimit: max too large, truncated to 1048576
[  173.196902][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  173.204753][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  173.217737][ T6635] xt_connbytes: Forcing CT accounting to be enabled
[  173.225129][    T9] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  173.236510][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  173.252366][ T6635] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  173.255694][ T6632] netlink: 104 bytes leftover after parsing attributes in process `syz.2.166'.
[  174.106002][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  174.439390][   T24] usb 1-1: USB disconnect, device number 13
[  174.662237][   T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  174.682424][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  174.712015][ T5930] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  174.717191][ T6650] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  174.726952][   T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  174.772869][ T5930] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  174.799828][   T24] keyspan 1-1:0.0: device disconnected
[  174.809198][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.867453][ T5930] usb 2-1: Product: syz
[  174.925362][ T5930] usb 2-1: Manufacturer: syz
[  174.930054][ T5930] usb 2-1: SerialNumber: syz
[  175.017282][ T5930] usb 2-1: config 0 descriptor??
[  175.032783][ T6644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  175.057882][ T6644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  175.502547][ T6644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  175.596909][ T6644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  175.805393][    T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  175.842329][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  175.842350][   T30] audit: type=1326 audit(1755043422.895:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  175.925610][   T30] audit: type=1326 audit(1755043422.895:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  175.952264][   T30] audit: type=1326 audit(1755043422.895:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  175.975506][    T9] usb 3-1: device descriptor read/64, error -71
[  176.143873][ T5977] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  176.215594][    T9] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  176.679612][ T5930] Error reading MAC address
[  176.690072][ T5930] usb 2-1: USB disconnect, device number 7
[  176.700465][   T30] audit: type=1326 audit(1755043422.895:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.765370][   T30] audit: type=1326 audit(1755043422.895:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.807665][   T30] audit: type=1326 audit(1755043422.895:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.834785][   T30] audit: type=1326 audit(1755043422.895:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.888306][   T30] audit: type=1326 audit(1755043422.895:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.915477][ T5977] usb 1-1: Using ep0 maxpacket: 16
[  176.921617][    T9] usb 3-1: device descriptor read/64, error -71
[  176.936324][   T30] audit: type=1326 audit(1755043422.895:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  176.963856][ T6673] netlink: 104 bytes leftover after parsing attributes in process `syz.4.176'.
[  176.972195][   T30] audit: type=1326 audit(1755043422.895:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6643 comm="syz.1.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451a38ebe9 code=0x7ffc0000
[  177.003380][ T5977] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6
[  177.013157][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  177.027894][ T5977] usb 1-1: Product: syz
[  177.032334][ T5977] usb 1-1: Manufacturer: syz
[  177.046367][    T9] usb usb3-port1: attempt power cycle
[  177.052535][ T5977] usb 1-1: SerialNumber: syz
[  177.080321][ T5977] usb 1-1: config 0 descriptor??
[  177.405496][    T9] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  177.450062][    T9] usb 3-1: device descriptor read/8, error -71
[  177.695945][    T9] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  177.743137][ T5977] usb 1-1: USB disconnect, device number 14
[  177.906460][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'.
[  177.992803][    T9] usb 3-1: device descriptor read/8, error -71
[  178.135584][    T9] usb usb3-port1: unable to enumerate USB device
[  179.323693][ T6697] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  179.337347][ T6697] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  179.399344][ T6697] FAULT_INJECTION: forcing a failure.
[  179.399344][ T6697] name failslab, interval 1, probability 0, space 0, times 0
[  179.412548][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.0.184 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  179.412577][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  179.412590][ T6697] Call Trace:
[  179.412601][ T6697]  <TASK>
[  179.412612][ T6697]  dump_stack_lvl+0x189/0x250
[  179.412739][ T6697]  ? __pfx____ratelimit+0x10/0x10
[  179.412856][ T6697]  ? __pfx_dump_stack_lvl+0x10/0x10
[  179.412881][ T6697]  ? __pfx__printk+0x10/0x10
[  179.412922][ T6697]  ? __pfx___might_resched+0x10/0x10
[  179.412972][ T6697]  should_fail_ex+0x414/0x560
[  179.413063][ T6697]  should_failslab+0xa8/0x100
[  179.413144][ T6697]  __kmalloc_noprof+0xcb/0x4f0
[  179.413193][ T6697]  ? kfree+0x4d/0x440
[  179.413251][ T6697]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  179.413351][ T6697]  tomoyo_realpath_from_path+0xe3/0x5d0
[  179.413397][ T6697]  tomoyo_check_open_permission+0x1c1/0x3b0
[  179.413424][ T6697]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  179.413448][ T6697]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  179.413534][ T6697]  ? tomoyo_file_open+0x166/0x220
[  179.413569][ T6697]  security_file_open+0xb1/0x270
[  179.413640][ T6697]  do_dentry_open+0x35e/0x1970
[  179.413716][ T6697]  vfs_open+0x3b/0x340
[  179.413746][ T6697]  dentry_open+0x61/0xa0
[  179.413773][ T6697]  ovl_dir_read+0x85/0x5f0
[  179.413860][ T6697]  ? do_syscall_64+0xfa/0x3b0
[  179.413901][ T6697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.413946][ T6697]  ? __pfx_ovl_dir_read+0x10/0x10
[  179.413968][ T6697]  ? ovl_path_upper+0x105/0x170
[  179.413991][ T6697]  ? ovl_path_next+0x23c/0x470
[  179.414048][ T6697]  ovl_dir_read_merged+0x19d/0x360
[  179.414077][ T6697]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  179.414105][ T6697]  ? __pfx_ovl_fill_merge+0x10/0x10
[  179.414141][ T6697]  ? __kasan_kmalloc+0x93/0xb0
[  179.414184][ T6697]  ? ovl_iterate+0xcf6/0x1f40
[  179.414214][ T6697]  ovl_iterate+0xdbd/0x1f40
[  179.414237][ T6697]  ? check_noncircular+0xe0/0x160
[  179.414279][ T6697]  ? rcu_is_watching+0x15/0xb0
[  179.414320][ T6697]  ? trace_irq_disable+0x37/0x110
[  179.414398][ T6697]  ? __pfx_ovl_iterate+0x10/0x10
[  179.414430][ T6697]  ? irqentry_exit+0x74/0x90
[  179.414497][ T6697]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.414532][ T6697]  ? wrap_directory_iterator+0x5a/0xe0
[  179.414623][ T6697]  ? __pfx_hlock_conflict+0x10/0x10
[  179.414656][ T6697]  ? lock_acquire+0x175/0x360
[  179.414701][ T6697]  ? down_write+0x162/0x1f0
[  179.414748][ T6697]  ? __pfx_down_write+0x10/0x10
[  179.414784][ T6697]  ? __pfx_ovl_iterate+0x10/0x10
[  179.414812][ T6697]  wrap_directory_iterator+0x96/0xe0
[  179.414850][ T6697]  iterate_dir+0x5af/0x770
[  179.414891][ T6697]  ovl_dir_read+0x146/0x5f0
[  179.414916][ T6697]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.414948][ T6697]  ? __pfx_ovl_dir_read+0x10/0x10
[  179.414974][ T6697]  ? ovl_dir_read_merged+0x1aa/0x360
[  179.414999][ T6697]  ? ovl_path_next+0x23c/0x470
[  179.415037][ T6697]  ovl_dir_read_merged+0x286/0x360
[  179.415066][ T6697]  ? __pfx_ovl_dir_read_merged+0x10/0x10
[  179.415094][ T6697]  ? __pfx_ovl_fill_merge+0x10/0x10
[  179.415133][ T6697]  ? __kasan_kmalloc+0x93/0xb0
[  179.415157][ T6697]  ? ovl_iterate+0xcf6/0x1f40
[  179.415188][ T6697]  ovl_iterate+0xdbd/0x1f40
[  179.415211][ T6697]  ? check_noncircular+0xe0/0x160
[  179.415252][ T6697]  ? rcu_is_watching+0x15/0xb0
[  179.415274][ T6697]  ? trace_irq_disable+0x37/0x110
[  179.415304][ T6697]  ? __pfx_ovl_iterate+0x10/0x10
[  179.415335][ T6697]  ? irqentry_exit+0x74/0x90
[  179.415357][ T6697]  ? lockdep_hardirqs_on+0x9c/0x150
[  179.415386][ T6697]  ? wrap_directory_iterator+0x5a/0xe0
[  179.415417][ T6697]  ? __pfx_hlock_conflict+0x10/0x10
[  179.415449][ T6697]  ? lock_acquire+0x175/0x360
[  179.415488][ T6697]  ? down_write+0x162/0x1f0
[  179.415522][ T6697]  ? __pfx_down_write+0x10/0x10
[  179.415557][ T6697]  ? __pfx_ovl_iterate+0x10/0x10
[  179.415586][ T6697]  wrap_directory_iterator+0x96/0xe0
[  179.415623][ T6697]  iterate_dir+0x5af/0x770
[  179.415664][ T6697]  __se_sys_getdents+0xe4/0x250
[  179.415698][ T6697]  ? irqentry_exit+0x74/0x90
[  179.415721][ T6697]  ? __pfx___se_sys_getdents+0x10/0x10
[  179.415753][ T6697]  ? __pfx_filldir+0x10/0x10
[  179.415794][ T6697]  do_syscall_64+0xfa/0x3b0
[  179.415820][ T6697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.415841][ T6697]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  179.415862][ T6697]  ? clear_bhb_loop+0x60/0xb0
[  179.415889][ T6697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  179.415910][ T6697] RIP: 0033:0x7f5448f8ebe9
[  179.415936][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.415955][ T6697] RSP: 002b:00007f5449dc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  179.415986][ T6697] RAX: ffffffffffffffda RBX: 00007f54491b6180 RCX: 00007f5448f8ebe9
[  179.416002][ T6697] RDX: 0000000020002078 RSI: 0000200000001fc0 RDI: 0000000000000007
[  179.416016][ T6697] RBP: 00007f5449dc8090 R08: 0000000000000000 R09: 0000000000000000
[  179.416029][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  179.416042][ T6697] R13: 00007f54491b6218 R14: 00007f54491b6180 R15: 00007ffd3a2dfcb8
[  179.416078][ T6697]  </TASK>
[  179.915567][ T6697] ERROR: Out of memory at tomoyo_realpath_from_path.
[  181.409273][ T6701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.186'.
[  181.430620][   T30] kauditd_printk_skb: 157 callbacks suppressed
[  181.430637][   T30] audit: type=1326 audit(1755043428.475:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.067404][   T30] audit: type=1326 audit(1755043428.545:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.113016][   T30] audit: type=1326 audit(1755043428.545:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.136412][   T30] audit: type=1326 audit(1755043428.545:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.340154][ T6713] fuse: Unknown parameter 'fe-0x0000000000000004'
[  182.444215][   T30] audit: type=1326 audit(1755043428.545:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.723572][   T30] audit: type=1326 audit(1755043428.545:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  182.982044][   T30] audit: type=1326 audit(1755043428.545:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  183.009585][   T30] audit: type=1326 audit(1755043428.545:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  183.083090][   T30] audit: type=1326 audit(1755043428.545:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  183.207513][ T6722] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  183.885500][   T30] audit: type=1326 audit(1755043428.545:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6709 comm="syz.4.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f79c398ebe9 code=0x7ffc0000
[  184.020890][ T6724] mmap: syz.2.192 (6724) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  186.445433][ T5930] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  186.605748][ T5930] usb 3-1: device descriptor read/64, error -71
[  186.934434][ T5930] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  187.639744][ T5930] usb 3-1: device descriptor read/64, error -71
[  188.344867][ T5930] usb usb3-port1: attempt power cycle
[  191.827164][ T6795] netlink: 'syz.3.213': attribute type 8 has an invalid length.
[  193.525529][    T9] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  193.911814][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  193.932517][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.962249][    T9] usb 2-1: config 0 descriptor??
[  193.976172][    T9] cp210x 2-1:0.0: cp210x converter detected
[  195.115067][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  195.115086][   T30] audit: type=1326 audit(1755043442.165:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.207762][   T30] audit: type=1326 audit(1755043442.165:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.264774][   T30] audit: type=1326 audit(1755043442.165:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.287085][    T9] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71
[  195.311870][    T9] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  195.331334][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  195.339615][   T30] audit: type=1326 audit(1755043442.165:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.367927][ T6834] netlink: 'syz.4.217': attribute type 10 has an invalid length.
[  195.394930][    T9] usb 2-1: USB disconnect, device number 8
[  195.414362][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  195.497809][    T9] cp210x 2-1:0.0: device disconnected
[  195.507268][   T30] audit: type=1326 audit(1755043442.175:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.598252][ T6834] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  195.659772][   T30] audit: type=1326 audit(1755043442.175:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.683660][   T30] audit: type=1326 audit(1755043442.175:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.735343][   T30] audit: type=1326 audit(1755043442.175:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.775856][   T30] audit: type=1326 audit(1755043442.175:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.819405][   T30] audit: type=1326 audit(1755043442.175:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6830 comm="syz.2.223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  195.956624][ T5977] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  196.070045][ T6844] netlink: 'syz.4.226': attribute type 10 has an invalid length.
[  196.087653][ T6844] netlink: 60 bytes leftover after parsing attributes in process `syz.4.226'.
[  196.155549][ T5977] usb 1-1: Using ep0 maxpacket: 32
[  196.162933][ T5977] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  196.179066][ T5977] usb 1-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config
[  196.189901][ T5977] usb 1-1: config 0 has no interface number 0
[  196.196139][ T5977] usb 1-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.209451][ T5977] usb 1-1: config 0 interface 89 has no altsetting 0
[  196.221849][ T5977] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  196.241478][ T5977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.259982][ T5977] usb 1-1: Product: syz
[  196.274564][ T5977] usb 1-1: Manufacturer: syz
[  196.284722][ T5977] usb 1-1: SerialNumber: syz
[  196.298075][ T5977] usb 1-1: config 0 descriptor??
[  198.336260][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.237'.
[  198.615563][   T43] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  198.675053][ T6901] Invalid ELF header magic: != ELF
[  198.730750][ T5930] usb 1-1: USB disconnect, device number 15
[  198.778211][ T5977] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  198.801000][   T43] usb 2-1: Using ep0 maxpacket: 8
[  198.835730][   T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  198.875351][   T43] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  198.895334][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.936324][   T43] usb 2-1: config 0 descriptor??
[  198.965496][ T5977] usb 5-1: Using ep0 maxpacket: 16
[  198.966249][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.2.245'.
[  198.985981][ T5977] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  199.013617][   T43] gspca_main: vc032x-2.14.0 probing 046d:0892
[  199.019162][ T5977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.046804][ T5977] usb 5-1: Product: syz
[  199.051359][ T5977] usb 5-1: Manufacturer: syz
[  199.056057][ T5977] usb 5-1: SerialNumber: syz
[  199.070133][ T5977] usb 5-1: config 0 descriptor??
[  199.209256][   T43] gspca_vc032x: reg_w err -71
[  199.214992][   T43] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  199.250488][ T6914] netlink: 14212 bytes leftover after parsing attributes in process `syz.2.247'.
[  199.278515][   T43] usb 2-1: USB disconnect, device number 9
[  199.320226][ T6914] trusted_key: syz.2.247 sent an empty control message without MSG_MORE.
[  199.612883][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  199.622878][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  199.632821][ T6899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.241'.
[  199.724086][ T5977] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  199.737941][ T5930] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  199.753240][ T5977] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  199.769535][ T5977] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  199.781772][ T5977] usb 5-1: media controller created
[  199.853469][ T5977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  200.597120][ T5977] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  200.605621][ T5977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  200.675424][ T5930] usb 3-1: Using ep0 maxpacket: 32
[  200.683016][ T5930] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  200.702238][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.812852][ T5977] usb 5-1: USB disconnect, device number 7
[  200.857004][ T5930] usb 3-1: config 0 descriptor??
[  200.869634][ T5930] gspca_main: sq930x-2.14.0 probing 041e:403c
[  200.981578][ T5977] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  201.518078][ T6943] netlink: 'syz.3.254': attribute type 10 has an invalid length.
[  201.532479][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  201.542490][ T6943] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  201.804501][ T6947] netlink: 16 bytes leftover after parsing attributes in process `syz.4.256'.
[  202.685458][ T5930] gspca_sq930x: reg_w 0105 bc00 failed -71
[  202.728885][ T5930] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  202.759682][ T5930] usb 3-1: USB disconnect, device number 12
[  202.766032][   T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  202.925439][   T43] usb 4-1: device descriptor read/64, error -71
[  203.275359][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  203.332880][ T6966] syz.1.260: attempt to access beyond end of device
[  203.332880][ T6966] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  203.346295][ T6966] FAT-fs (loop3): unable to read boot sector
[  204.039628][   T43] usb 4-1: device descriptor read/64, error -71
[  204.276840][   T43] usb usb4-port1: attempt power cycle
[  204.635483][   T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  204.667715][   T43] usb 4-1: device descriptor read/8, error -71
[  204.901869][ T6987] 9pnet: p9_errstr2errno: server reported unknown error �@í΂Í(0x0000000000000005
[  204.913977][   T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  205.095826][ T6990] netlink: 48 bytes leftover after parsing attributes in process `syz.1.268'.
[  205.239671][   T43] usb 4-1: device descriptor read/8, error -71
[  205.418786][   T43] usb usb4-port1: unable to enumerate USB device
[  205.785589][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  205.962878][    T9] usb 1-1: device descriptor read/64, error -71
[  206.318302][    T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  206.669371][    T9] usb 1-1: device descriptor read/64, error -71
[  206.681019][ T5908] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  206.806802][    T9] usb usb1-port1: attempt power cycle
[  206.907341][ T5908] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  206.959746][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.983218][ T5908] usb 5-1: Product: syz
[  207.028068][ T5908] usb 5-1: Manufacturer: syz
[  207.032819][ T5908] usb 5-1: SerialNumber: syz
[  207.166310][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  207.326942][ T5908] usb 5-1: config 0 descriptor??
[  207.391542][    T9] usb 1-1: device descriptor read/8, error -71
[  208.661112][ T5908] usb 5-1: Firmware version (0.0) predates our first public release.
[  208.725744][ T5908] usb 5-1: Please update to version 0.2 or newer
[  209.265062][ T5908] usb 5-1: USB disconnect, device number 8
[  211.737864][ T7054] netlink: 96 bytes leftover after parsing attributes in process `syz.2.288'.
[  213.906070][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.292'.
[  215.318955][ T7086] x_tables: ip6_tables: dccp match: only valid for protocol 33
[  216.676668][ T7104] IPv6: NLM_F_CREATE should be specified when creating new route
[  218.514869][   T30] kauditd_printk_skb: 59 callbacks suppressed
[  218.514890][   T30] audit: type=1800 audit(1755043465.565:546): pid=7119 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.307" name="bus" dev="overlay" ino=324 res=0 errno=0
[  219.909974][   T30] audit: type=1326 audit(1755043466.965:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5448f8ebe9 code=0x7ffc0000
[  220.577215][   T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  220.585834][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  220.725538][   T24] usb 1-1: device descriptor read/64, error -32
[  220.759699][   T30] audit: type=1326 audit(1755043466.965:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5448f8ebe9 code=0x7ffc0000
[  220.867113][   T30] audit: type=1326 audit(1755043466.985:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f5448f8ebe9 code=0x7ffc0000
[  220.893224][   T30] audit: type=1326 audit(1755043466.985:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5448f8ebe9 code=0x7ffc0000
[  220.945411][   T30] audit: type=1326 audit(1755043466.985:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5448f8d550 code=0x7ffc0000
[  221.008301][   T30] audit: type=1326 audit(1755043466.985:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5448f8e7eb code=0x7ffc0000
[  221.047447][   T30] audit: type=1326 audit(1755043466.985:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5448f8e7eb code=0x7ffc0000
[  221.055461][   T24] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  221.073861][   T30] audit: type=1326 audit(1755043467.695:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5448f8e7eb code=0x7ffc0000
[  221.110630][    T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  221.113831][   T30] audit: type=1326 audit(1755043467.695:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7134 comm="syz.0.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5448f8e7eb code=0x7ffc0000
[  221.268910][    T9] usb 4-1: Using ep0 maxpacket: 16
[  221.277279][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  221.277550][   T24] usb 1-1: Using ep0 maxpacket: 32
[  221.288911][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  221.592636][   T24] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  221.605958][   T24] usb 1-1: config 0 has no interface number 0
[  221.612645][   T24] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  221.624786][   T24] usb 1-1: config 0 interface 85 has no altsetting 0
[  221.669409][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  221.678737][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.687849][   T24] usb 1-1: Product: syz
[  221.692210][   T24] usb 1-1: Manufacturer: syz
[  221.701594][   T24] usb 1-1: SerialNumber: syz
[  221.876871][   T24] usb 1-1: config 0 descriptor??
[  221.881948][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  221.983357][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  222.216876][    C0] raw-gadget.1 gadget.3: ignoring, device is not running
[  222.255455][    T9] usb 4-1: string descriptor 0 read error: -71
[  222.261809][    T9] usb 4-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97
[  222.314354][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.343022][   T24] appletouch 1-1:0.85: Failed to read mode from device.
[  222.595371][   T24] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[  222.657782][ T5848] Bluetooth: hci1: command 0x0406 tx timeout
[  222.663878][ T5848] Bluetooth: hci4: command 0x0406 tx timeout
[  222.673276][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  222.679729][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  222.705680][   T24] usb 1-1: USB disconnect, device number 21
[  222.716479][    T9] usb 4-1: config 0 descriptor??
[  222.758379][    T9] usb 4-1: can't set config #0, error -71
[  222.833932][    T9] usb 4-1: USB disconnect, device number 15
[  223.444226][ T7177] veth0_to_team: entered promiscuous mode
[  223.450157][ T7177] veth0_to_team: entered allmulticast mode
[  224.968748][ T7183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.326'.
[  225.584239][ T7200] bond0: entered promiscuous mode
[  225.605681][ T7200] bond_slave_0: entered promiscuous mode
[  225.643601][ T7200] bond_slave_1: entered promiscuous mode
[  226.345399][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  226.535416][    T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  226.557446][    T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  226.611232][    T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  226.651102][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.853760][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803584e800: rx timeout, send abort
[  226.989599][ T7205] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  227.003264][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  227.363105][    C1] vcan0: j1939_tp_rxtimer: 0xffff88803584e800: abort rx timeout. Force session deactivation
[  230.119205][ T7232] syz.0.337: attempt to access beyond end of device
[  230.119205][ T7232] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  230.132502][ T7232] FAT-fs (loop1): unable to read boot sector
[  232.505940][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  232.513788][   T30] audit: type=1800 audit(1755043479.555:586): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.343" name="bus" dev="overlay" ino=373 res=0 errno=0
[  239.345780][   T30] audit: type=1804 audit(1755043482.735:587): pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.343" name="/newroot/65/bus/file0" dev="overlay" ino=374 res=1 errno=0
[  242.865424][   T30] audit: type=1326 audit(1755043489.245:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  243.085844][   T30] audit: type=1326 audit(1755043489.255:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  243.119716][   T30] audit: type=1326 audit(1755043489.255:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  243.395644][   T30] audit: type=1326 audit(1755043489.255:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  243.498037][ T7281] binder: 7280:7281 unknown command 0
[  243.632294][ T7281] binder: 7280:7281 ioctl c0306201 200000000080 returned -22
[  244.105955][   T30] audit: type=1326 audit(1755043489.255:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.212700][   T30] audit: type=1326 audit(1755043489.255:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.332289][   T30] audit: type=1326 audit(1755043489.255:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.418831][   T30] audit: type=1326 audit(1755043489.255:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.508730][ T7291] 9pnet_fd: Insufficient options for proto=fd
[  244.521918][   T30] audit: type=1326 audit(1755043489.255:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.668611][   T30] audit: type=1326 audit(1755043489.255:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  244.906444][   T30] audit: type=1326 audit(1755043489.255:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7270 comm="syz.3.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  245.785812][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  246.308145][ T5921] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  246.641748][ T5921] usb 4-1: device descriptor read/64, error -71
[  246.688830][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'.
[  247.296658][ T5921] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  247.398372][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  247.425345][    T9] usb 1-1: no configurations
[  247.431432][    T9] usb 1-1: can't read configurations, error -22
[  247.503268][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  247.513009][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  247.523710][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  247.590399][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  247.599346][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  247.654479][ T5921] usb 4-1: device descriptor read/64, error -71
[  247.871444][ T5921] usb usb4-port1: attempt power cycle
[  248.291871][ T5921] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  248.346430][ T5921] usb 4-1: device descriptor read/8, error -71
[  248.646363][ T5921] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  248.688569][ T5921] usb 4-1: device descriptor read/8, error -71
[  248.765733][ T5930] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  249.255829][ T5921] usb usb4-port1: unable to enumerate USB device
[  249.407642][ T7328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'.
[  249.458048][ T5930] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  249.479700][ T5930] usb 1-1: config 0 interface 0 has no altsetting 0
[  249.507816][ T5930] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  249.517165][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.526178][ T5930] usb 1-1: Product: syz
[  249.530770][ T5930] usb 1-1: Manufacturer: syz
[  249.535579][ T5930] usb 1-1: SerialNumber: syz
[  249.570995][ T5930] usb 1-1: config 0 descriptor??
[  249.583268][ T5930] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  249.613649][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  249.688836][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  249.695382][ T5156] Bluetooth: hci5: command tx timeout
[  250.116559][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  250.731752][ T7340] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  250.753591][ T7340] cramfs: wrong magic
[  250.871581][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  250.898455][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  250.917170][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  251.370018][ T5930] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  251.464805][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  251.549770][ T7343] netlink: 52 bytes leftover after parsing attributes in process `syz.2.368'.
[  251.685684][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  251.693410][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  251.709190][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  251.717912][ T5930] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  251.765915][ T5930] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  251.784210][ T5156] Bluetooth: hci5: command tx timeout
[  251.824934][ T7344] netlink: 52 bytes leftover after parsing attributes in process `syz.2.368'.
[  251.852201][ T7314] chnl_net:caif_netlink_parms(): no params data found
[  251.864178][ T5930] usb 1-1: USB disconnect, device number 24
[  252.093846][ T5930] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  252.596948][ T5930] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  252.689556][ T5930] keyspan 1-1:0.0: device disconnected
[  253.865476][ T5156] Bluetooth: hci5: command tx timeout
[  254.051373][ T7361] netlink: 'syz.2.373': attribute type 3 has an invalid length.
[  255.773798][ T7314] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.824253][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.854067][ T7314] bridge_slave_0: entered allmulticast mode
[  255.900671][ T7314] bridge_slave_0: entered promiscuous mode
[  255.926236][ T5156] Bluetooth: hci5: command tx timeout
[  256.409786][ T7389] comedi comedi0: comedi_config --init_data is deprecated
[  257.313962][   T36] Bluetooth: Error in BCSP hdr checksum
[  257.343029][ T7314] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.356016][   T10] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  257.373538][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state
[  257.400625][ T7314] bridge_slave_1: entered allmulticast mode
[  257.409454][ T5977] usb 5-1: USB disconnect, device number 9
[  257.416714][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  257.467220][ T7314] bridge_slave_1: entered promiscuous mode
[  257.527877][   T10] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  257.536622][   T10] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config
[  257.547375][   T49] Bluetooth: Error in BCSP hdr checksum
[  257.552627][   T10] usb 1-1: config 179 has no interface number 0
[  257.562963][   T10] usb 1-1: config 179 interface 65 altsetting 12 has an invalid descriptor for endpoint zero, skipping
[  257.583681][   T10] usb 1-1: config 179 interface 65 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  257.602869][    T9] usb 2-1: Using ep0 maxpacket: 8
[  257.613125][   T10] usb 1-1: config 179 interface 65 has no altsetting 0
[  257.625304][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  257.636051][    T9] usb 2-1: config index 0 descriptor too short (expected 16420, got 36)
[  257.644664][    T9] usb 2-1: config 7 has an invalid interface number: 6 but max is 0
[  257.656407][    T9] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  257.670520][   T10] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  257.690427][    T9] usb 2-1: config 7 has no interface number 0
[  257.697217][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.706128][    T9] usb 2-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  257.720640][    T9] usb 2-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  257.734974][    T9] usb 2-1: config 7 interface 6 has no altsetting 0
[  257.769229][ T7314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  257.786718][    T9] usb 2-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e
[  257.799373][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.809072][   T49] Bluetooth: Error in BCSP hdr checksum
[  257.810387][    T9] usb 2-1: Product: syz
[  257.827817][    T9] usb 2-1: Manufacturer: syz
[  257.832923][    T9] usb 2-1: SerialNumber: syz
[  258.104975][   T13] Bluetooth: Error in BCSP hdr checksum
[  258.132698][   T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.517973][   T13] Bluetooth: Error in BCSP hdr checksum
[  258.565681][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  258.566098][ T5851] Bluetooth: hci4: command 0x1003 tx timeout
[  258.584261][ T7388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  258.603485][ T7388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  258.605679][ T7314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  258.754146][   T10] usb 1-1: USB disconnect, device number 25
[  258.779289][ T1166] Bluetooth: Error in BCSP hdr checksum
[  258.988754][   T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  259.038949][ T6022] Bluetooth: Error in BCSP hdr checksum
[  259.308838][   T49] Bluetooth: Error in BCSP hdr checksum
[  259.557153][ T1166] Bluetooth: Error in BCSP hdr checksum
[  259.733468][ T7314] team0: Port device team_slave_0 added
[  259.804151][ T7314] team0: Port device team_slave_1 added
[  259.816133][ T1097] Bluetooth: Error in BCSP hdr checksum
[  259.950464][    T9] option 2-1:7.6: GSM modem (1-port) converter detected
[  259.969326][   T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.036588][    T9] usb 2-1: USB disconnect, device number 10
[  260.091432][    T9] option 2-1:7.6: device disconnected
[  260.196570][   T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.414751][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_0
[  260.430640][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  260.462784][ T7314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  260.892499][ T7314] batman_adv: batadv0: Adding interface: batadv_slave_1
[  260.904752][ T7314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  261.048446][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  261.409589][ T7314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  261.420186][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  262.621073][ T7314] hsr_slave_0: entered promiscuous mode
[  262.684978][ T7314] hsr_slave_1: entered promiscuous mode
[  262.739251][ T7314] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  262.815477][ T7314] Cannot create hsr debugfs directory
[  263.223936][   T36] bridge_slave_1: left allmulticast mode
[  263.234032][   T36] bridge_slave_1: left promiscuous mode
[  263.377666][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.474407][   T36] bridge_slave_0: left allmulticast mode
[  263.489289][   T36] bridge_slave_0: left promiscuous mode
[  263.503662][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.915689][ T7438] syz.2.390: attempt to access beyond end of device
[  263.915689][ T7438] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  263.928875][ T7438] FAT-fs (loop5): unable to read boot sector
[  264.896049][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.940228][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.115907][    T9] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  265.831997][ T7460] overlay: Bad value for 'workdir'
[  266.057559][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  266.210703][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.226219][ T5930] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  266.230318][    T9] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  266.253014][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.274786][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  266.287141][    T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  266.305583][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.306260][   T36] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  266.322421][    T9] usb 3-1: Product: syz
[  266.337203][    T9] usb 3-1: Manufacturer: syz
[  266.355618][    T9] usb 3-1: SerialNumber: syz
[  266.370083][   T36] bond0 (unregistering): Released all slaves
[  266.383458][    T9] usb 3-1: config 0 descriptor??
[  266.408843][ T5930] usb 1-1: config 0 has an invalid interface number: 217 but max is 0
[  266.424885][    T9] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  266.446142][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  266.455332][ T5930] usb 1-1: config 0 has no interface number 0
[  266.475909][ T5930] usb 1-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4
[  266.506025][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  266.513787][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.513817][ T5930] usb 1-1: Product: syz
[  266.513835][ T5930] usb 1-1: Manufacturer: syz
[  266.545166][ T5930] usb 1-1: SerialNumber: syz
[  266.562368][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  266.596522][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  266.638601][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  266.665473][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  266.705976][    T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  266.740010][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  266.783213][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  266.835123][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  266.851719][ T5930] usb 1-1: config 0 descriptor??
[  266.882598][ T5930] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[  267.708852][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  267.729291][    T9] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  267.805032][    T9] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  267.963953][ T5930] gspca_sn9c20x: Write register 1001 failed -71
[  268.029183][ T5930] gspca_sn9c20x: Device initialization failed
[  268.043377][ T7472] netlink: 'syz.3.395': attribute type 10 has an invalid length.
[  268.051285][ T5930] gspca_sn9c20x 1-1:0.217: probe with driver gspca_sn9c20x failed with error -71
[  268.102168][ T5930] usb 1-1: USB disconnect, device number 26
[  268.197120][ T7472] hsr0: entered promiscuous mode
[  268.242110][ T7472] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  268.262499][ T7472] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  268.282550][ T7472] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  269.079294][   T36] hsr_slave_0: left promiscuous mode
[  269.096584][    T9] usb 3-1: USB disconnect, device number 14
[  269.126082][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  269.158573][   T36] hsr_slave_1: left promiscuous mode
[  269.174434][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  269.303708][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.305768][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  269.414672][ T7484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  269.600987][    T9] keyspan 3-1:0.0: device disconnected
[  269.629691][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  270.000191][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  270.144593][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  270.591939][   T36] veth1_macvtap: left promiscuous mode
[  270.602122][   T36] veth0_macvtap: left promiscuous mode
[  270.610301][   T36] veth1_vlan: left promiscuous mode
[  275.363277][   T36] team0 (unregistering): Port device team_slave_1 removed
[  275.399281][ T5930] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  275.442238][   T36] team0 (unregistering): Port device team_slave_0 removed
[  275.556186][ T5930] usb 2-1: Using ep0 maxpacket: 8
[  275.563350][ T5930] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  275.580666][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.591658][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  275.606844][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  275.620349][   T43] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  275.628061][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.645985][ T5930] usb 2-1: Product: syz
[  275.650936][ T5930] usb 2-1: Manufacturer: syz
[  275.656123][ T5930] usb 2-1: SerialNumber: syz
[  275.801461][   T43] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  275.813076][   T43] usb 1-1: config 0 interface 0 has no altsetting 0
[  275.824434][   T43] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3
[  275.835492][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.843628][   T43] usb 1-1: Product: syz
[  275.849969][   T43] usb 1-1: Manufacturer: syz
[  275.854661][   T43] usb 1-1: SerialNumber: syz
[  275.917922][   T43] usb 1-1: config 0 descriptor??
[  276.033145][   T43] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  276.043354][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  276.111649][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  276.123026][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  276.132832][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  276.143871][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  276.161091][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  277.134481][   T43] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  277.273474][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  277.373906][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  277.400391][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  277.428506][ T5930] usb 2-1: 0:2 : does not exist
[  277.437344][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  277.465565][   T43] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  277.494499][   T43] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  277.506003][ T5930] usb 2-1: USB disconnect, device number 11
[  278.849131][ T7314] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  278.958783][ T5921] usb 1-1: USB disconnect, device number 27
[  279.264048][ T5921] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  279.293800][ T7314] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  279.566414][ T5921] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  279.796769][ T5921] keyspan 1-1:0.0: device disconnected
[  279.801460][ T7314] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  280.027623][ T7314] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  280.322200][ T7553] netlink: 76 bytes leftover after parsing attributes in process `syz.2.413'.
[  281.679374][ T7579] syz.2.416: attempt to access beyond end of device
[  281.679374][ T7579] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  281.693097][ T7579] FAT-fs (loop5): unable to read boot sector
[  283.193359][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0
[  283.467043][ T7314] 8021q: adding VLAN 0 to HW filter on device team0
[  283.510934][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state
[  283.518213][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state
[  283.598206][ T7576] sctp: failed to load transform for md5: -2
[  283.784137][ T1084] bridge0: port 2(bridge_slave_1) entered blocking state
[  283.791461][ T1084] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.761606][ T7314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  287.451262][ T7627] syz.1.424: attempt to access beyond end of device
[  287.451262][ T7627] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  287.464996][ T7627] FAT-fs (loop3): unable to read boot sector
[  288.539118][ T7314] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.437958][ T7669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'.
[  291.037276][ T7314] veth0_vlan: entered promiscuous mode
[  291.113227][ T7314] veth1_vlan: entered promiscuous mode
[  291.290240][ T7659] bond0: entered promiscuous mode
[  291.328671][ T7659] bond_slave_0: entered promiscuous mode
[  291.360109][ T7659] bond_slave_1: entered promiscuous mode
[  291.415265][ T7314] veth0_macvtap: entered promiscuous mode
[  291.467303][ T7314] veth1_macvtap: entered promiscuous mode
[  291.578367][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_0
[  291.653757][ T7314] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.690475][ T7314] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.752693][ T7314] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.776921][ T7314] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.788478][ T7314] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  294.833750][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.888672][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.924120][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.950019][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  296.108454][   T30] audit: type=1326 audit(1755043542.139:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7686 comm="syz.2.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7fc00000
[  296.207745][ T7717] team_slave_0: entered allmulticast mode
[  296.268339][ T7717] team_slave_0: entered promiscuous mode
[  297.545431][ T7747] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  298.371509][ T7752] netlink: 60 bytes leftover after parsing attributes in process `syz.5.445'.
[  298.381495][ T7752] unsupported nlmsg_type 40
[  298.387490][ T7752] netlink: 'syz.5.445': attribute type 11 has an invalid length.
[  298.395381][ T7752] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.445'.
[  298.532898][ T7731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.896760][ T7753] sctp: [Deprecated]: syz.1.448 (pid 7753) Use of int in maxseg socket option.
[  298.896760][ T7753] Use struct sctp_assoc_value instead
[  300.424707][ T7763] can0: slcan on ttyS3.
[  301.208713][ T7763] can0 (unregistered): slcan off ttyS3.
[  301.642487][ T7781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  301.655019][ T7782] netlink: 68 bytes leftover after parsing attributes in process `syz.1.452'.
[  302.573844][ T7800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.695433][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[  303.701860][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  304.032776][ T7822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'.
[  304.043315][ T7822] veth0_to_bridge: entered promiscuous mode
[  304.055852][ T7822] netlink: 56 bytes leftover after parsing attributes in process `syz.1.462'.
[  304.065084][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'.
[  304.079344][ T7821] veth0_to_bridge: left promiscuous mode
[  304.497333][ T7835] syz.1.466: attempt to access beyond end of device
[  304.497333][ T7835] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0
[  304.526330][ T7835] EXT4-fs (loop1): unable to read superblock
[  305.909989][ T7860] netlink: 'syz.2.468': attribute type 32 has an invalid length.
[  306.590289][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.470'.
[  306.684856][ T7863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'.
[  307.565894][ T7879] syz.0.473: attempt to access beyond end of device
[  307.565894][ T7879] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  307.579086][ T7879] FAT-fs (loop1): unable to read boot sector
[  308.406171][ T7887] Driver unsupported XDP return value 0 on prog  (id 159) dev N/A, expect packet loss!
[  309.409360][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'.
[  309.711791][ T7907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.480'.
[  312.959202][ T7953] syz.1.488: attempt to access beyond end of device
[  312.959202][ T7953] loop3: rw=0, sector=0, nr_sectors = 1 limit=0
[  313.665512][ T7953] FAT-fs (loop3): unable to read boot sector
[  313.806309][ T7963] bond_slave_1: entered promiscuous mode
[  313.926217][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.494'.
[  313.986807][ T7968] veth0_to_bridge: entered promiscuous mode
[  314.187590][ T7959] veth0_to_bridge: left promiscuous mode
[  314.223605][ T7959] bond_slave_1: left promiscuous mode
[  315.927420][ T7972] sctp: [Deprecated]: syz.3.496 (pid 7972) Use of int in max_burst socket option deprecated.
[  315.927420][ T7972] Use struct sctp_assoc_value instead
[  316.332721][ T7980] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  317.459470][    C0] wlan0: beacon TX faster than countdown (channel/color switch) completion
[  318.444945][   T30] audit: type=1326 audit(1755043564.489:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7999 comm="syz.3.504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x0
[  318.465929][ T8001] openvswitch: netlink: Message has 4 unknown bytes.
[  318.583156][ T8004] kvm: pic: non byte write
[  318.640234][ T8004] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  319.092863][ T8015] process 'syz.5.506' launched './file1' with NULL argv: empty string added
[  320.553053][ T8028] bond_slave_1: entered promiscuous mode
[  320.576161][ T8028] veth0_to_bridge: entered promiscuous mode
[  320.800186][ T8027] veth0_to_bridge: left promiscuous mode
[  320.820473][ T8027] bond_slave_1: left promiscuous mode
[  321.157037][ T5930] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  322.048992][ T5930] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  322.093091][ T5930] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  322.148857][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  322.196458][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.379432][ T8033] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  322.443796][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  322.499699][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  322.507791][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  322.660986][ T5930] usb 4-1: USB disconnect, device number 21
[  323.514117][ T8072] netlink: 15 bytes leftover after parsing attributes in process `syz.2.521'.
[  323.566856][ T8068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  323.580506][ T8068] 9pnet: Unknown protocol version 9p
[  323.857609][ T5930] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  323.924447][ T8077] bond_slave_1: entered promiscuous mode
[  323.960915][ T8077] veth0_to_bridge: entered promiscuous mode
[  323.971864][ T8076] veth0_to_bridge: left promiscuous mode
[  323.978531][ T8076] bond_slave_1: left promiscuous mode
[  324.198663][   T30] audit: type=1326 audit(1755043570.249:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  324.380350][ T5930] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  324.486803][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.572859][   T30] audit: type=1326 audit(1755043570.249:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  324.626350][ T5930] usb 1-1: Product: syz
[  324.649228][ T5930] usb 1-1: Manufacturer: syz
[  324.678692][ T5930] usb 1-1: SerialNumber: syz
[  324.736323][ T5930] usb 1-1: config 0 descriptor??
[  324.747568][   T30] audit: type=1326 audit(1755043570.249:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.369515][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  325.386663][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  325.410256][   T30] audit: type=1326 audit(1755043570.249:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.434096][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.519'.
[  325.525962][   T30] audit: type=1326 audit(1755043570.249:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.603046][   T30] audit: type=1326 audit(1755043570.249:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.630421][   T30] audit: type=1326 audit(1755043570.249:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.702253][   T30] audit: type=1326 audit(1755043570.249:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.749494][ T8100] warning: `syz.1.527' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  325.808635][   T30] audit: type=1326 audit(1755043570.249:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.885546][ T8092] 9pnet: Could not find request transport: †+æ½
[  325.885546][ T8092] 5c�K#V‹±vÁËßB)fd
[  325.895297][   T30] audit: type=1326 audit(1755043570.249:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8078 comm="syz.2.523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  325.995672][ T8089] binder: 8088:8089 ioctl c0306201 200000001a80 returned -14
[  326.181950][ T8109] x_tables: duplicate underflow at hook 1
[  326.574589][ T8115] syz.3.532: attempt to access beyond end of device
[  326.574589][ T8115] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  326.587892][ T8115] FAT-fs (loop7): unable to read boot sector
[  327.470342][ T5930] usb 1-1: f81604_read: reg: 200f failed: -EPROTO
[  327.504249][ T5930] usb 1-1: USB disconnect, device number 28
[  327.644559][ T5930] usb 1-1: f81604_read: reg: 100f failed: -ENODEV
[  327.759694][ T5930] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  327.833264][ T8126] bond_slave_1: entered promiscuous mode
[  327.856530][ T8126] veth0_to_bridge: entered promiscuous mode
[  327.878891][ T8125] veth0_to_bridge: left promiscuous mode
[  327.881983][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.538'.
[  327.911807][ T8125] bond_slave_1: left promiscuous mode
[  328.065617][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  328.179768][ T8136] syz.2.539: attempt to access beyond end of device
[  328.179768][ T8136] nbd2: rw=0, sector=6, nr_sectors = 2 limit=0
[  328.414073][ T5839] Bluetooth: hci5: command tx timeout
[  328.421743][   T10] usb 6-1: Using ep0 maxpacket: 16
[  328.440470][ T8136] ADFS-fs (nbd2): error: unable to read block 3, try 0
[  328.446168][   T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  329.522497][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.546331][   T10] usb 6-1: Product: syz
[  329.556661][   T10] usb 6-1: Manufacturer: syz
[  329.561360][   T10] usb 6-1: SerialNumber: syz
[  329.576846][ T8145] ªªªªªª: renamed from lo (while UP)
[  329.591616][   T10] usb 6-1: config 0 descriptor??
[  331.091380][ T8134] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  331.097963][ T8134] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  331.311926][ T8134] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  331.318007][ T8134] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  331.416650][ T8134] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  331.422850][ T8134] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  331.625897][ T8134] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  331.631927][ T8134] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  331.773306][ T8134] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  331.951131][ T5839] Bluetooth: hci1: command 0x0406 tx timeout
[  333.629399][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[  333.646460][ T5156] Bluetooth: hci3: command 0x0406 tx timeout
[  333.729136][ T5839] Bluetooth: hci5: command 0x0405 tx timeout
[  333.791351][    T9] usb 6-1: USB disconnect, device number 2
[  334.286653][ T5156] Bluetooth: hci1: command 0x0406 tx timeout
[  334.525978][ T8166] syz.2.546 (8166) used greatest stack depth: 16808 bytes left
[  334.605314][  T977] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  334.758574][  T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  335.035991][  T977] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  335.051077][  T977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  335.068732][  T977] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  335.095787][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.150611][ T8179] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'.
[  335.474451][    T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  335.494066][  T977] usb 4-1: Product: syz
[  335.498393][  T977] usb 4-1: Manufacturer: syz
[  335.503142][  T977] usb 4-1: SerialNumber: syz
[  335.511193][  T977] usb 4-1: config 0 descriptor??
[  335.517204][ T8169] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  335.527200][  T977] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22
[  335.636148][    T9] usb 6-1: Using ep0 maxpacket: 32
[  335.656668][    T9] usb 6-1: config 0 interface 0 altsetting 17 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.685402][    T9] usb 6-1: config 0 interface 0 altsetting 17 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  335.685653][ T5156] Bluetooth: hci3: command 0x0406 tx timeout
[  335.707848][ T5156] Bluetooth: hci2: command 0x0406 tx timeout
[  335.746622][    T9] usb 6-1: config 0 interface 0 has no altsetting 0
[  335.753375][    T9] usb 6-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00
[  335.765639][ T5156] Bluetooth: hci5: command 0x0405 tx timeout
[  335.817856][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.877115][    T9] usb 6-1: config 0 descriptor??
[  336.472361][    T9] asus 0003:048D:CE50.0003: item fetching failed at offset 2/5
[  336.491573][    T9] asus 0003:048D:CE50.0003: Asus hid parse failed: -22
[  336.503013][    T9] asus 0003:048D:CE50.0003: probe with driver asus failed with error -22
[  336.534327][   T30] kauditd_printk_skb: 26 callbacks suppressed
[  336.534345][   T30] audit: type=1326 audit(1755043582.569:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  336.674594][ T8173] netlink: 28 bytes leftover after parsing attributes in process `syz.5.549'.
[  336.747490][    T9] usb 6-1: USB disconnect, device number 3
[  337.855217][ T5156] Bluetooth: hci5: command 0x0405 tx timeout
[  338.793373][   T30] audit: type=1326 audit(1755043582.579:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  338.841032][   T30] audit: type=1326 audit(1755043582.579:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  338.894018][   T30] audit: type=1326 audit(1755043582.579:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  338.921325][   T30] audit: type=1326 audit(1755043582.579:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  338.976257][   T30] audit: type=1326 audit(1755043582.579:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  339.029326][  T977] usb 4-1: USB disconnect, device number 22
[  339.061558][   T30] audit: type=1326 audit(1755043582.579:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  339.165544][   T30] audit: type=1326 audit(1755043582.579:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  339.309285][ T8195] netlink: 36 bytes leftover after parsing attributes in process `syz.5.554'.
[  339.329343][   T30] audit: type=1326 audit(1755043582.589:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  339.364125][   T30] audit: type=1326 audit(1755043582.589:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8168 comm="syz.3.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243298ebe9 code=0x7ffc0000
[  339.667762][  T977] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  340.576554][  T977] usb 4-1: Using ep0 maxpacket: 8
[  340.631115][  T977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.761470][  T977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  340.866753][  T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  340.943921][  T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26480, setting to 1024
[  340.975513][  T977] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  341.154338][  T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.168356][ T8200] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  341.327679][  T977] hub 4-1:1.0: bad descriptor, ignoring hub
[  341.352800][  T977] hub 4-1:1.0: probe with driver hub failed with error -5
[  341.502662][  T977] cdc_wdm 4-1:1.0: skipping garbage
[  341.510241][ T8200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.515854][  T977] cdc_wdm 4-1:1.0: skipping garbage
[  341.541823][ T8200] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.552134][  T977] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device
[  341.580982][  T977] cdc_wdm 4-1:1.0: Unknown control protocol
[  341.677525][  T977] usb 4-1: USB disconnect, device number 23
[  343.136909][ T5839] Bluetooth: hci5: command 0x0405 tx timeout
[  344.573080][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'.
[  345.035475][   T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  346.477119][   T43] usb 2-1: config 0 has no interfaces?
[  346.500779][   T43] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  346.561110][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.945488][   T43] usb 2-1: Product: syz
[  346.954209][   T43] usb 2-1: Manufacturer: syz
[  346.975418][   T43] usb 2-1: SerialNumber: syz
[  346.985694][   T43] usb 2-1: config 0 descriptor??
[  347.179260][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'.
[  347.319404][ T8272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'.
[  347.350177][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.577'.
[  347.402821][ T8276] bond_slave_1: entered promiscuous mode
[  347.503681][ T8273] bond_slave_1: left promiscuous mode
[  347.765534][ T5977] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  347.905683][ T5977] usb 1-1: device descriptor read/64, error -71
[  348.355355][ T5977] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  348.615443][ T5977] usb 1-1: device descriptor read/64, error -71
[  349.175938][ T5977] usb usb1-port1: attempt power cycle
[  349.555285][ T5977] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  349.607536][ T5977] usb 1-1: device descriptor read/8, error -71
[  349.696156][ T8296] input: syz0 as /devices/virtual/input/input8
[  349.890384][ T5977] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  349.956350][ T5977] usb 1-1: device descriptor read/8, error -71
[  350.002277][    T9] usb 2-1: USB disconnect, device number 12
[  350.079794][ T5977] usb usb1-port1: unable to enumerate USB device
[  350.400505][ T5977] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  350.625996][ T5977] usb 6-1: Using ep0 maxpacket: 16
[  350.827369][ T5977] usb 6-1: config 0 has an invalid interface number: 126 but max is 0
[  350.859088][ T5977] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  350.870382][ T5977] usb 6-1: config 0 has no interface number 0
[  350.876871][ T5977] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  350.889345][ T5977] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  350.995888][ T5977] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  351.065306][ T5977] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 65456, setting to 64
[  351.111826][ T5977] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  351.287880][ T5977] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  351.438177][ T5977] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.469954][ T5977] usb 6-1: config 0 descriptor??
[  351.505837][ T8307] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  351.702864][ T5977] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  351.798187][ T8332] overlayfs: failed to clone lowerpath
[  352.524574][ T6580] udevd[6580]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  352.643405][ T5977] usb 6-1: USB disconnect, device number 4
[  354.184775][ T8351] mmap: syz.0.597 (8351): VmData 37597184 exceed data ulimit 1. Update limits or use boot option ignore_rlimit_data.
[  354.256719][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.596'.
[  354.861526][ T8358] netlink: 108 bytes leftover after parsing attributes in process `syz.1.598'.
[  355.205475][ T5930] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  355.365474][ T5930] usb 2-1: device descriptor read/64, error -71
[  355.445972][ T5977] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  355.480698][ T8364] zonefs (nullb0) ERROR: Not a zoned block device
[  356.582303][ T5930] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  356.733791][ T5930] usb 2-1: device descriptor read/64, error -71
[  356.734613][ T5977] usb 1-1: device descriptor read/64, error -71
[  357.015731][ T5977] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  357.144474][ T5930] usb usb2-port1: attempt power cycle
[  357.292171][ T8368] bond_slave_1: entered promiscuous mode
[  357.309077][ T8368] veth0_to_bridge: entered promiscuous mode
[  357.325734][ T8367] veth0_to_bridge: left promiscuous mode
[  357.333019][ T8367] bond_slave_1: left promiscuous mode
[  358.275413][ T5977] usb 1-1: device descriptor read/64, error -71
[  358.405323][ T5930] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  358.526130][ T5977] usb usb1-port1: attempt power cycle
[  358.621969][   T30] kauditd_printk_skb: 57 callbacks suppressed
[  358.621989][   T30] audit: type=1326 audit(1755043604.669:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.2.604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x0
[  358.853450][ T5930] usb 2-1: device not accepting address 15, error -71
[  359.511891][ T5977] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  359.692153][ T8383] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  359.703836][ T8383] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  359.713287][ T8383] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  359.845558][ T5977] usb 1-1: device not accepting address 35, error -71
[  360.372786][ T8377] affs: No valid root block on device nullb0
[  361.036654][ T8414] netlink: 'syz.0.616': attribute type 1 has an invalid length.
[  361.159248][    T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  361.571739][ T8421] veth0_to_bridge: entered promiscuous mode
[  361.582350][ T8419] veth0_to_bridge: left promiscuous mode
[  361.655794][ T5977] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  361.837768][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.889453][ T5977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.899647][ T5977] usb 4-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00
[  361.911317][ T5977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.928203][ T5977] usb 4-1: config 0 descriptor??
[  362.357666][ T5977] wacom 0003:056A:00F4.0004: unbalanced collection at end of report description
[  362.405116][ T5977] wacom 0003:056A:00F4.0004: parse failed
[  362.645578][ T5977] wacom 0003:056A:00F4.0004: probe with driver wacom failed with error -22
[  362.655352][   T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  362.768498][ T8435] syz.2.621: attempt to access beyond end of device
[  362.768498][ T8435] loop5: rw=0, sector=0, nr_sectors = 1 limit=0
[  362.781941][ T8435] FAT-fs (loop5): unable to read boot sector
[  363.415480][   T24] usb 1-1: Using ep0 maxpacket: 16
[  363.442947][ T5930] usb 4-1: USB disconnect, device number 24
[  363.459292][   T24] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  363.502958][   T24] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  363.526539][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.550831][   T24] usb 1-1: Product: syz
[  363.565671][   T24] usb 1-1: Manufacturer: syz
[  363.582813][   T24] usb 1-1: SerialNumber: syz
[  363.607341][   T24] usb 1-1: config 0 descriptor??
[  363.733041][   T24] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  363.749606][   T24] usb 1-1: Detected FT232R
[  364.233042][ T8440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  364.934631][   T24] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  364.965640][   T24] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  364.990812][   T24] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71
[  365.033887][   T24] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  365.110132][   T24] usb 1-1: USB disconnect, device number 37
[  365.343612][   T24] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  365.497654][   T24] ftdi_sio 1-1:0.0: device disconnected
[  365.895866][   T30] audit: type=1400 audit(1755043611.909:705): lsm=SMACK fn=smack_inode_permission action=denied subject="w" object="_" requested=wx pid=8446 comm="syz.1.625" name="123" dev="tmpfs" ino=683
[  366.051796][ T8453] netlink: 'syz.5.627': attribute type 1 has an invalid length.
[  366.059745][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.5.627'.
[  366.346497][ T8454] Invalid option length (14406) for dns_resolver key
[  369.316325][ T5921] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  369.705441][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  369.749842][ T5921] usb 1-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=d9.10
[  369.774353][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.815085][ T5921] usb 1-1: Product: syz
[  369.877749][ T5921] usb 1-1: Manufacturer: syz
[  369.882432][ T5921] usb 1-1: SerialNumber: syz
[  370.646467][ T5921] usb 1-1: config 0 descriptor??
[  370.671376][ T5921] usbsevseg 1-1:0.0: USB 7 Segment device now attached
[  370.883703][ T5921] usb 1-1: USB disconnect, device number 38
[  370.890941][ T5921] usbsevseg 1-1:0.0: USB 7 Segment now disconnected
[  371.003498][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'.
[  372.377651][ T8523] netlink: 64 bytes leftover after parsing attributes in process `syz.5.642'.
[  373.015838][ T8519] team0: Port device team_slave_0 removed
[  374.079661][ T8529] sp0: Synchronizing with TNC
[  374.868321][ T8552] netlink: 104 bytes leftover after parsing attributes in process `syz.5.656'.
[  375.275272][ T5921] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  375.545450][ T5921] usb 2-1: Using ep0 maxpacket: 8
[  375.568581][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.5.657'.
[  376.498793][ T5921] usb 2-1: unable to read config index 0 descriptor/start: -71
[  376.534264][ T5921] usb 2-1: can't read configurations, error -71
[  376.775284][   T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  376.896036][ T8564] bridge1: entered promiscuous mode
[  376.901392][ T8564] bridge1: entered allmulticast mode
[  377.565603][   T24] usb 6-1: Using ep0 maxpacket: 8
[  377.572844][   T24] usb 6-1: config 0 has an invalid interface number: 150 but max is 0
[  377.676545][   T24] usb 6-1: config 0 has an invalid interface number: 112 but max is 0
[  377.685924][   T24] usb 6-1: config 0 has an invalid interface number: 3 but max is 0
[  377.694272][   T24] usb 6-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  377.703342][   T24] usb 6-1: config 0 has no interface number 0
[  377.714754][   T24] usb 6-1: config 0 has no interface number 1
[  377.721580][   T24] usb 6-1: config 0 has no interface number 2
[  377.727925][   T24] usb 6-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  377.741059][   T24] usb 6-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30
[  377.752426][   T24] usb 6-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104
[  377.766188][   T24] usb 6-1: config 0 interface 150 has no altsetting 0
[  377.774016][   T24] usb 6-1: config 0 interface 112 has no altsetting 0
[  377.781402][   T24] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  377.802575][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.976870][   T24] usb 6-1: config 0 descriptor??
[  378.947658][ T8574] netlink: 'syz.5.658': attribute type 10 has an invalid length.
[  378.958855][ T8574] hsr0: entered promiscuous mode
[  378.978304][ T8574] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  378.989745][ T8574] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  379.034678][ T8574] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  379.770481][   T24] usb 6-1: string descriptor 0 read error: -71
[  379.912758][   T24] usb 6-1: USB disconnect, device number 6
[  380.841747][ T8588] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  382.137198][ T8599] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'.
[  384.156783][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  384.163270][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  384.325747][   T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  385.404781][   T24] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  385.414787][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.428603][   T24] usb 1-1: Product: syz
[  385.445757][   T24] usb 1-1: Manufacturer: syz
[  385.450843][   T24] usb 1-1: SerialNumber: syz
[  385.459212][   T24] usb 1-1: config 0 descriptor??
[  385.680335][ T8618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  385.692705][ T8618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.772633][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[  386.779174][ T5851] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  388.038760][   T24] usb-storage 1-1:0.0: USB Mass Storage device detected
[  388.152116][ T8655] bond_slave_1: entered promiscuous mode
[  388.172337][   T30] audit: type=1804 audit(1755043634.199:706): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.682" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=19070 res=1 errno=0
[  388.285649][ T8658] veth0_to_bridge: entered promiscuous mode
[  388.298632][ T8654] veth0_to_bridge: left promiscuous mode
[  388.305656][ T8654] bond_slave_1: left promiscuous mode
[  390.985440][   T24] usb 1-1: USB disconnect, device number 39
[  391.854946][ T8673] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  391.934123][ T8674] syz.5.689: attempt to access beyond end of device
[  391.934123][ T8674] loop11: rw=0, sector=0, nr_sectors = 1 limit=0
[  391.947666][ T8674] FAT-fs (loop11): unable to read boot sector
[  393.925424][ T5851] Bluetooth: hci0: command tx timeout
[  396.387725][ T5908] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  396.892776][ T5908] usb 6-1: Using ep0 maxpacket: 8
[  396.960466][ T5908] usb 6-1: config 64 has an invalid interface number: 203 but max is 0
[  396.980949][ T8698] netlink: 20 bytes leftover after parsing attributes in process `syz.0.695'.
[  396.990056][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'.
[  397.012569][ T5908] usb 6-1: config 64 has no interface number 0
[  397.109035][ T5908] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=54.91
[  397.133186][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.250018][ T5908] usb 6-1: can't set config #64, error -71
[  397.362959][ T5908] usb 6-1: USB disconnect, device number 7
[  400.327200][ T8735] netlink: 'syz.0.703': attribute type 27 has an invalid length.
[  401.476224][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.710'.
[  401.507226][ T8754] netlink: 28 bytes leftover after parsing attributes in process `syz.5.710'.
[  401.556229][   T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  401.715225][   T24] usb 4-1: Using ep0 maxpacket: 8
[  401.738699][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  401.782773][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  401.800842][ T6021] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  401.850070][   T24] usb 4-1: Product: syz
[  401.854320][   T24] usb 4-1: Manufacturer: syz
[  401.896550][   T24] usb 4-1: SerialNumber: syz
[  401.924119][   T24] usb 4-1: config 0 descriptor??
[  402.019930][ T6021] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  402.277819][ T6021] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  402.291375][   T24] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  402.500588][ T6021] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  402.571677][ T6021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.620758][ T8756] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  402.691438][ T6021] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  402.877443][ T5922] usb 1-1: USB disconnect, device number 40
[  403.352816][ T8756] xt_CT: No such helper "snmp"
[  403.926571][   T24] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  404.331135][ T5922] usb 4-1: USB disconnect, device number 25
[  404.417080][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  404.585396][   T24] usb 2-1: Using ep0 maxpacket: 8
[  404.606829][   T24] usb 2-1: config 64 has an invalid interface number: 203 but max is 0
[  404.637543][   T24] usb 2-1: config 64 has no interface number 0
[  404.677350][   T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=54.91
[  404.725676][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.094281][   T24] imon 2-1:64.203: unable to register, err -19
[  405.379666][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.396325][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.559372][ T5901] IPVS: starting estimator thread 0...
[  405.665719][ T8804] IPVS: using max 24 ests per chain, 57600 per kthread
[  406.595786][ T5901] usb 2-1: USB disconnect, device number 19
[  406.809962][ T8812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.727'.
[  406.960228][ T8819] vlan2: entered allmulticast mode
[  407.002218][ T8819] bridge0: entered allmulticast mode
[  407.033459][ T8819] bridge3: port 1(vlan2) entered blocking state
[  407.044819][ T8822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.730'.
[  407.071401][ T8822] netlink: 'syz.5.730': attribute type 7 has an invalid length.
[  407.115399][ T8819] bridge3: port 1(vlan2) entered disabled state
[  407.121878][ T8822] netlink: 'syz.5.730': attribute type 8 has an invalid length.
[  407.142481][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.5.730'.
[  407.151547][ T8819] vlan2: entered promiscuous mode
[  407.173666][ T8819] bridge0: entered promiscuous mode
[  407.226873][ T8812] gretap1: entered promiscuous mode
[  407.232427][ T8812] bridge3: port 2(gretap1) entered blocking state
[  407.284557][ T8812] bridge3: port 2(gretap1) entered disabled state
[  407.300865][ T8812] gretap1: entered allmulticast mode
[  407.313434][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.733'.
[  407.350686][ T8822] team0: entered promiscuous mode
[  407.369092][ T8822] team_slave_1: entered promiscuous mode
[  407.392730][ T8822] bond0: entered promiscuous mode
[  407.407483][ T8822] bond_slave_0: entered promiscuous mode
[  407.430673][ T8822] bond_slave_1: entered promiscuous mode
[  407.491964][ T8822] team0: left promiscuous mode
[  407.505958][ T8822] team_slave_1: left promiscuous mode
[  407.515885][ T8822] bond0: left promiscuous mode
[  407.531110][ T8822] bond_slave_0: left promiscuous mode
[  407.557307][ T8822] bond_slave_1: left promiscuous mode
[  407.757110][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.764867][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.792321][ T8836] bond0: left promiscuous mode
[  407.801081][ T8836] bond_slave_0: left promiscuous mode
[  407.809439][ T8836] bond_slave_1: left promiscuous mode
[  407.902189][ T8836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  409.629083][ T8870] syz.5.745: attempt to access beyond end of device
[  409.629083][ T8870] loop11: rw=0, sector=0, nr_sectors = 1 limit=0
[  409.642887][ T8870] FAT-fs (loop11): unable to read boot sector
[  410.297121][   T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  410.619246][   T24] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  410.666250][   T24] usb 4-1: config 0 has no interface number 0
[  410.670069][ T8879] netlink: 72 bytes leftover after parsing attributes in process `syz.5.749'.
[  410.700207][   T24] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  411.000528][   T24] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  411.041752][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  411.063018][ T8879] syz.5.749: attempt to access beyond end of device
[  411.063018][ T8879] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  411.073406][   T24] usb 4-1: config 0 descriptor??
[  411.096399][ T8879] syz.5.749: attempt to access beyond end of device
[  411.096399][ T8879] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  411.114088][ T8879] Mount JFS Failure: -5
[  411.152812][   T24] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input9
[  411.366359][ T5839] Bluetooth: hci4: command 0x1003 tx timeout
[  411.426392][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  412.772330][ T5901] usb 4-1: USB disconnect, device number 26
[  413.006014][ T8900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.755'.
[  413.076196][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.755'.
[  415.434203][ T6021] IPVS: starting estimator thread 0...
[  415.535616][ T8923] IPVS: using max 35 ests per chain, 84000 per kthread
[  417.685730][ T8944] netlink: 72 bytes leftover after parsing attributes in process `syz.2.765'.
[  419.111919][ T8960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.771'.
[  419.141019][ T8960] erspan0: entered promiscuous mode
[  419.159572][ T8960] macvtap1: entered promiscuous mode
[  419.165993][ T8960] macvtap1: entered allmulticast mode
[  419.171635][ T8960] erspan0: entered allmulticast mode
[  419.188762][ T8967] netlink: 172 bytes leftover after parsing attributes in process `syz.1.773'.
[  419.216193][ T8967] netlink: 172 bytes leftover after parsing attributes in process `syz.1.773'.
[  419.233036][ T8960] erspan0: left allmulticast mode
[  419.251521][ T8960] erspan0: left promiscuous mode
[  419.872393][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  421.623398][ T5901] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  422.799144][ T5901] usb 2-1: device descriptor read/all, error -71
[  424.046800][ T8992] netlink: 72 bytes leftover after parsing attributes in process `syz.0.778'.
[  425.025297][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'.
[  425.912454][ T9016] netlink: 76 bytes leftover after parsing attributes in process `syz.2.788'.
[  425.976221][ T9016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'.
[  425.988909][ T9021] netlink: 36 bytes leftover after parsing attributes in process `syz.2.788'.
[  426.024994][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.788'.
[  426.059612][ T9021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.788'.
[  426.257293][ T5901] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  426.317427][    T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  426.604461][ T5901] usb 4-1: Using ep0 maxpacket: 16
[  426.679619][ T5901] usb 4-1: too many endpoints for config 0 interface 0 altsetting 229: 247, using maximum allowed: 30
[  426.691375][ T5901] usb 4-1: config 0 interface 0 altsetting 229 has 0 endpoint descriptors, different from the interface descriptor's value: 247
[  426.827793][ T5901] usb 4-1: config 0 interface 0 has no altsetting 0
[  426.839694][    T9] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  426.849184][ T5901] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=59.31
[  426.858336][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.879871][    T9] usb 6-1: Product: syz
[  426.884366][    T9] usb 6-1: Manufacturer: syz
[  426.889692][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.907929][    T9] usb 6-1: SerialNumber: syz
[  426.914582][ T5901] usb 4-1: Product: syz
[  426.955535][ T5901] usb 4-1: Manufacturer: syz
[  426.960298][ T5901] usb 4-1: SerialNumber: syz
[  426.977314][    T9] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  427.134972][ T5901] usb 4-1: config 0 descriptor??
[  427.159828][ T5922] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  427.667459][   T43] usb 6-1: USB disconnect, device number 8
[  428.005459][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  428.005476][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[  428.184718][   T24] usb 4-1: USB disconnect, device number 27
[  428.245485][ T5922] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  428.252837][ T5922] ath9k_htc: Failed to initialize the device
[  428.288252][   T43] usb 6-1: ath9k_htc: USB layer deinitialized
[  428.705443][ T6021] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  429.606783][ T9061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'.
[  429.772176][ T9070] veth0_to_bridge: entered promiscuous mode
[  429.782039][ T9069] veth0_to_bridge: left promiscuous mode
[  430.436532][ T9084] syz_tun: entered allmulticast mode
[  430.586931][   T30] audit: type=1326 audit(1755043676.559:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  430.857181][   T30] audit: type=1326 audit(1755043676.559:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  430.887930][   T30] audit: type=1326 audit(1755043676.559:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  430.910046][   T30] audit: type=1326 audit(1755043676.569:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  430.932706][   T30] audit: type=1326 audit(1755043676.579:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  430.954743][   T30] audit: type=1326 audit(1755043676.579:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d9b78d69f code=0x7ffc0000
[  430.976780][   T30] audit: type=1326 audit(1755043676.589:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  431.076172][ T9079] syz_tun: left allmulticast mode
[  431.092976][   T30] audit: type=1326 audit(1755043676.599:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  431.128462][   T30] audit: type=1326 audit(1755043676.599:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d9b78d69f code=0x7ffc0000
[  431.165231][   T30] audit: type=1326 audit(1755043676.609:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9079 comm="syz.2.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9b78ebe9 code=0x7ffc0000
[  434.917238][ T5156] Bluetooth: hci4: sending frame failed (-49)
[  434.924344][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -49
[  434.994643][ T9117] ªªªªªª: renamed from lo (while UP)
[  435.094701][ T9119] netlink: 'syz.3.820': attribute type 12 has an invalid length.
[  435.126055][ T5922] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  435.567654][ T5922] usb 1-1: device descriptor read/64, error -71
[  435.655657][ T9129] netlink: 8 bytes leftover after parsing attributes in process `syz.5.822'.
[  435.816049][ T5922] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  435.955251][ T5922] usb 1-1: device descriptor read/64, error -71
[  436.066122][ T5922] usb usb1-port1: attempt power cycle
[  436.225396][ T5901] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  436.496283][ T5922] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  436.573036][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  437.195495][ T5922] usb 1-1: device descriptor read/8, error -71
[  437.295401][ T5901] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  437.527652][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  437.663282][ T5922] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  437.693520][ T5901] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  437.714220][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.722987][ T5901] usb 4-1: Product: syz
[  437.727473][ T5922] usb 1-1: device descriptor read/8, error -71
[  437.740953][ T5901] usb 4-1: Manufacturer: syz
[  437.788026][ T5901] usb 4-1: SerialNumber: syz
[  437.808433][ T5901] usb 4-1: config 0 descriptor??
[  437.826532][ T9134] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  437.835453][ T5901] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22
[  437.855433][ T5922] usb usb1-port1: unable to enumerate USB device
[  437.958181][ T9155] Cannot find del_set index 0 as target
[  438.355298][ T5922] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  439.077663][ T5922] usb 2-1: unable to get BOS descriptor or descriptor too short
[  439.089403][ T5922] usb 2-1: not running at top speed; connect to a high speed hub
[  439.120274][ T5922] usb 2-1: config 1 interface 0 has no altsetting 0
[  439.147909][ T5922] usb 2-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  439.158994][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  439.171296][ T5922] usb 2-1: Product: syz
[  439.175794][ T5922] usb 2-1: Manufacturer: syz
[  439.180629][ T5922] usb 2-1: SerialNumber: syz
[  439.471385][ T5901] usb 4-1: USB disconnect, device number 28
[  439.568398][ T5922] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input10
[  439.602507][ T5191] bcm5974 2-1:1.0: could not read from device
[  439.619673][ T9179] delete_channel: no stack
[  439.630178][ T9179] delete_channel: no stack
[  439.648095][ T5191] bcm5974 2-1:1.0: could not read from device
[  439.661212][ T5922] usb 2-1: USB disconnect, device number 22
[  439.678788][ T5191] bcm5974 2-1:1.0: could not read from device
[  439.907761][ T6021] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  440.002065][ T9187] Smack: duplicate mount options
[  440.159949][ T6021] usb 1-1: config 252 has an invalid interface number: 191 but max is 0
[  440.169114][ T6021] usb 1-1: config 252 has no interface number 0
[  440.182347][ T6021] usb 1-1: New USB device found, idVendor=054c, idProduct=0069, bcdDevice=6d.6f
[  440.191589][ T6021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.199892][ T6021] usb 1-1: Product: syz
[  440.204155][ T6021] usb 1-1: Manufacturer: syz
[  440.208915][ T6021] usb 1-1: SerialNumber: syz
[  440.219265][ T6021] usb-storage 1-1:252.191: USB Mass Storage device detected
[  440.231702][ T6021] usb-storage 1-1:252.191: Quirks match for vid 054c pid 0069: 1
[  440.378326][ T9193] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  440.390513][ T9193] overlayfs: missing 'lowerdir'
[  440.403107][ T9193] 9pnet_fd: Insufficient options for proto=fd
[  440.472646][ T5922] usb 1-1: USB disconnect, device number 46
[  441.225599][ T9200] netlink: 116 bytes leftover after parsing attributes in process `syz.0.846'.
[  441.409230][ T9203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.847'.
[  442.282357][ T9209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.849'.
[  442.309087][ T9213] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  442.325834][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  442.331671][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[  443.005421][ T9224] futex_wake_op: syz.2.853 tries to shift op by 32; fix this program
[  443.315420][ T5921] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  443.455567][ T5901] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  443.485216][ T5921] usb 6-1: Using ep0 maxpacket: 8
[  443.492606][ T5921] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  443.515442][ T5921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  443.535201][ T5921] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  443.545228][ T5921] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  443.558301][ T5921] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  443.567876][ T5921] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.615854][ T5901] usb 1-1: Using ep0 maxpacket: 8
[  443.702827][ T5901] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  443.796102][ T5922] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  443.804052][ T5901] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  443.838642][ T5901] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  443.857534][ T9240] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  443.915185][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.919803][ T5921] usb 6-1: GET_CAPABILITIES returned 0
[  443.972971][ T5921] usbtmc 6-1:16.0: can't read capabilities
[  444.085881][ T5922] usb 2-1: Using ep0 maxpacket: 8
[  444.306784][ T5922] usb 2-1: config 0 has no interfaces?
[  444.362988][ T5901] hub 1-1:1.0: bad descriptor, ignoring hub
[  444.378093][ T5922] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  444.394314][ T5901] hub 1-1:1.0: probe with driver hub failed with error -5
[  444.410354][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.439972][ T5922] usb 2-1: config 0 descriptor??
[  444.741346][ T9239] binder: BINDER_SET_CONTEXT_MGR already set
[  444.748069][ T9239] binder: 9238:9239 ioctl 4018620d 200000000040 returned -16
[  444.767081][ T5901] usb 1-1: reset high-speed USB device number 47 using dummy_hcd
[  444.772264][ T5921] usb 2-1: USB disconnect, device number 23
[  445.279228][ T9252] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.855'.
[  445.370943][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  445.382645][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  445.575777][ T5922] usb 1-1: USB disconnect, device number 47
[  445.594789][ T9256] netlink: 88 bytes leftover after parsing attributes in process `syz.1.861'.
[  446.884231][   T24] usb 6-1: USB disconnect, device number 9
[  447.495235][   T24] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  447.706514][ T9281] new mount options do not match the existing superblock, will be ignored
[  447.770553][ T9282] Smack: duplicate mount options
[  448.778415][ T5156] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  448.786245][ T5839] Bluetooth: hci4: command 0x1003 tx timeout
[  451.578188][ T9300] netlink: 36 bytes leftover after parsing attributes in process `syz.5.875'.
[  452.302753][ T9320] input: syz0 as /devices/virtual/input/input11
[  453.054225][ T9316] 9pnet: Could not find request transport: fdrfä
o=0xffffffffffffffff
[  455.032535][ T9348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.885'.
[  456.142055][ T9353] Bluetooth: MGMT ver 1.23
[  457.005618][ T5921] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  457.165267][ T5921] usb 1-1: Using ep0 maxpacket: 8
[  457.185067][ T5921] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  457.196070][ T5921] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  457.486617][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  457.672020][ T5921] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  457.695324][ T5921] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  457.818843][ T5921] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  457.853099][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  458.129885][ T5921] usb 1-1: GET_CAPABILITIES returned 0
[  458.146423][ T5921] usbtmc 1-1:16.0: can't read capabilities
[  458.255364][ T5839] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  458.367220][ T5921] usb 1-1: USB disconnect, device number 48
[  458.766049][ T9391] netlink: 'syz.5.898': attribute type 4 has an invalid length.
[  458.781188][ T9392] FAULT_INJECTION: forcing a failure.
[  458.781188][ T9392] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  458.795023][ T9392] CPU: 1 UID: 0 PID: 9392 Comm: syz.1.896 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  458.795044][ T9392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  458.795057][ T9392] Call Trace:
[  458.795070][ T9392]  <TASK>
[  458.795079][ T9392]  dump_stack_lvl+0x189/0x250
[  458.795112][ T9392]  ? __pfx____ratelimit+0x10/0x10
[  458.795138][ T9392]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.795163][ T9392]  ? __pfx__printk+0x10/0x10
[  458.795192][ T9392]  ? __might_fault+0xb0/0x130
[  458.795269][ T9392]  should_fail_ex+0x414/0x560
[  458.795292][ T9392]  _copy_from_user+0x2d/0xb0
[  458.795361][ T9392]  __sys_bpf+0x1ed/0x860
[  458.795420][ T9392]  ? __pfx___sys_bpf+0x10/0x10
[  458.795453][ T9392]  ? ksys_write+0x22a/0x250
[  458.795488][ T9392]  ? __pfx_ksys_write+0x10/0x10
[  458.795500][ T9392]  ? rcu_is_watching+0x15/0xb0
[  458.795524][ T9392]  __x64_sys_bpf+0x7c/0x90
[  458.795545][ T9392]  do_syscall_64+0xfa/0x3b0
[  458.795563][ T9392]  ? lockdep_hardirqs_on+0x9c/0x150
[  458.795581][ T9392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.795598][ T9392]  ? clear_bhb_loop+0x60/0xb0
[  458.795616][ T9392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.795631][ T9392] RIP: 0033:0x7f451a38ebe9
[  458.795645][ T9392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.795731][ T9392] RSP: 002b:00007f451b1dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  458.795754][ T9392] RAX: ffffffffffffffda RBX: 00007f451a5b6090 RCX: 00007f451a38ebe9
[  458.795767][ T9392] RDX: 0000000000000048 RSI: 0000200000000840 RDI: 0000000000000000
[  458.795777][ T9392] RBP: 00007f451b1dd090 R08: 0000000000000000 R09: 0000000000000000
[  458.795787][ T9392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.795796][ T9392] R13: 00007f451a5b6128 R14: 00007f451a5b6090 R15: 00007ffdf179b868
[  458.795823][ T9392]  </TASK>
[  459.089639][ T9394] netlink: 'syz.5.898': attribute type 4 has an invalid length.
[  459.849398][ T9408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'.
[  461.527102][ T5156] Bluetooth: hci4: command 0x1003 tx timeout
[  461.534938][ T5839] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  461.675275][ T6021] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  461.690813][ T9417] netlink: 'syz.5.905': attribute type 1 has an invalid length.
[  461.773641][ T9417] netlink: 224 bytes leftover after parsing attributes in process `syz.5.905'.
[  461.829713][ T6021] usb 4-1: config index 0 descriptor too short (expected 6427, got 27)
[  461.852185][ T6021] usb 4-1: config 0 has an invalid interface number: 21 but max is 0
[  461.875511][ T6021] usb 4-1: config 0 has no interface number 0
[  461.895180][ T6021] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  461.925118][ T6021] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  462.024401][ T6021] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  462.307274][ T6021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  462.485482][ T6021] usb 4-1: config 0 descriptor??
[  463.065375][ T9430] netlink: 72 bytes leftover after parsing attributes in process `syz.0.909'.
[  463.111381][ T9430] evm: overlay not supported
[  463.166143][ T6021] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input12
[  463.285537][ T6021] input: failed to attach handler kbd to device input12, error: -5
[  463.291293][ T9432] netlink: 36 bytes leftover after parsing attributes in process `syz.5.910'.
[  463.555898][    T9] usb 4-1: USB disconnect, device number 29
[  464.165426][ T9450] netlink: 72 bytes leftover after parsing attributes in process `syz.5.914'.
[  464.219793][ T9450] syz.5.914: attempt to access beyond end of device
[  464.219793][ T9450] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0
[  464.238925][ T9450] syz.5.914: attempt to access beyond end of device
[  464.238925][ T9450] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0
[  464.254050][ T9450] Mount JFS Failure: -5
[  464.490993][ T5901] usb 2-1: new low-speed USB device number 24 using dummy_hcd
[  464.862146][ T5901] usb 2-1: Invalid ep0 maxpacket: 32
[  465.015924][ T5901] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[  465.036368][ T9462] RDS: rds_bind could not find a transport for ::9d:0:0:0:1, load rds_tcp or rds_rdma?
[  465.077348][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.5.920'.
[  465.185571][ T5901] usb 2-1: Invalid ep0 maxpacket: 32
[  465.192773][ T5901] usb usb2-port1: attempt power cycle
[  465.375288][   T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  465.527818][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  465.539938][   T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  465.550981][   T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  465.555735][ T5901] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  465.569990][   T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  465.581090][   T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  465.598794][   T43] usb 6-1: config 0 descriptor??
[  465.617967][ T5901] usb 2-1: Invalid ep0 maxpacket: 32
[  465.699976][ T9473] netlink: 'syz.3.924': attribute type 2 has an invalid length.
[  465.708770][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.924'.
[  465.775867][ T5901] usb 2-1: new low-speed USB device number 27 using dummy_hcd
[  465.809707][ T5901] usb 2-1: Invalid ep0 maxpacket: 32
[  465.825008][ T5901] usb usb2-port1: unable to enumerate USB device
[  466.054866][   T43] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  466.869985][ T9484] netlink: 72 bytes leftover after parsing attributes in process `syz.3.926'.
[  466.896576][ T9484] syz.3.926: attempt to access beyond end of device
[  466.896576][ T9484] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  466.911155][ T9484] syz.3.926: attempt to access beyond end of device
[  466.911155][ T9484] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0
[  466.924521][ T9484] Mount JFS Failure: -5
[  467.612123][ T9490] overlayfs: failed to clone upperpath
[  467.775470][ T9497] netlink: 72 bytes leftover after parsing attributes in process `syz.3.932'.
[  468.615457][ T6021] usb 6-1: USB disconnect, device number 11
[  469.325363][ T6021] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  469.601337][ T6021] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  469.660082][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.718526][ T6021] usb 4-1: Product: syz
[  469.742002][ T6021] usb 4-1: Manufacturer: syz
[  469.760224][ T6021] usb 4-1: SerialNumber: syz
[  469.785481][ T6021] usb 4-1: config 0 descriptor??
[  470.102160][ T9531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  470.123880][ T9531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  470.404606][ T9535] mkiss: ax0: crc mode is auto.
[  470.426470][ T6021] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  470.439296][ T6021] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  470.450802][ T6021] asix 4-1:0.0: probe with driver asix failed with error -71
[  470.462799][ T6021] usb 4-1: USB disconnect, device number 30
[  470.835239][   T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  471.105358][   T43] usb 2-1: too many configurations: 61, using maximum allowed: 8
[  471.168987][   T43] usb 2-1: New USB device found, idVendor=2770, idProduct=158d, bcdDevice=4c.40
[  471.194440][   T43] usb 2-1: New USB device strings: Mfr=169, Product=87, SerialNumber=177
[  471.245489][   T43] usb 2-1: Product: syz
[  471.257116][   T43] usb 2-1: Manufacturer: syz
[  471.316140][   T43] usb 2-1: SerialNumber: syz
[  471.349862][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  471.349882][   T30] audit: type=1326 audit(1755043717.399:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.0.946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5448f8ebe9 code=0x0
[  471.430586][   T30] audit: type=1326 audit(1755043717.399:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9550 comm="syz.0.946" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5448f8ebe9 code=0x0
[  471.431730][   T43] usb 2-1: config 0 descriptor??
[  471.451542][    C0] vkms_vblank_simulate: vblank timer overrun
[  471.832385][    T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  471.964904][ T9559] netlink: 132 bytes leftover after parsing attributes in process `syz.5.949'.
[  472.025521][    T9] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  472.070564][    T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  472.100498][ T9560] team_slave_1: entered promiscuous mode
[  472.114878][ T9560] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  472.207537][    T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  472.256188][ T9560] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  472.336435][    T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  472.411716][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  472.490689][    T9] usb 4-1: SerialNumber: syz
[  472.912931][ T9549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  472.934909][    T9] usb 4-1: cannot find UAC_HEADER
[  473.011602][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  473.040108][    T9] usb 4-1: USB disconnect, device number 31
[  473.063336][ T9575] bridge_slave_1: left allmulticast mode
[  473.075679][ T9575] bridge_slave_1: left promiscuous mode
[  473.084279][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.101392][ T9575] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  474.230387][   T10] usb 2-1: USB disconnect, device number 28
[  474.385535][ T9591] 
[  474.387947][ T9591] =====================================================
[  474.394881][ T9591] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  474.402607][ T9591] 6.16.0-syzkaller #0 Not tainted
[  474.407896][ T9591] -----------------------------------------------------
[  474.414828][ T9591] syz.3.957/9591 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  474.422383][ T9591] ffff888034b580c0 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[  474.425180][ T5921] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  474.431127][ T9591] 
[  474.431127][ T9591] and this task is already holding:
[  474.431138][ T9591] ffff88802d8ee028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  474.456199][ T9591] which would create a new lock dependency:
[  474.462124][ T9591]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[  474.470434][ T9591] 
[  474.470434][ T9591] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  474.479963][ T9591]  (&dev->event_lock#2){..-.}-{3:3}
[  474.479999][ T9591] 
[  474.479999][ T9591] ... which became SOFTIRQ-irq-safe at:
[  474.492926][ T9591]   lock_acquire+0x120/0x360
[  474.497525][ T9591]   _raw_spin_lock_irqsave+0xa7/0xf0
[  474.502828][ T9591]   input_inject_event+0xab/0x320
[  474.507959][ T9591]   led_trigger_event+0x138/0x210
[  474.513045][ T9591]   kbd_bh+0x1c6/0x2e0
[  474.517157][ T9591]   tasklet_action_common+0x369/0x580
[  474.522563][ T9591]   handle_softirqs+0x283/0x870
[  474.527413][ T9591]   __irq_exit_rcu+0xca/0x1f0
[  474.532091][ T9591]   irq_exit_rcu+0x9/0x30
[  474.536418][ T9591]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  474.542144][ T9591]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  474.548225][ T9591]   lock_is_held_type+0x137/0x190
[  474.553287][ T9591]   __might_resched+0xa6/0x610
[  474.558117][ T9591]   console_conditional_schedule+0x2a/0x40
[  474.563941][ T9591]   fbcon_redraw+0x261/0x420
[  474.568695][ T9591]   fbcon_scroll+0x38b/0x820
[  474.573299][ T9591]   con_scroll+0x781/0xa10
[  474.577726][ T9591]   csi_ECMA+0x2193/0x6990
[  474.582183][ T9591]   do_con_write+0x4169/0x5200
[  474.586954][ T9591]   con_write+0x24/0x40
[  474.591132][ T9591]   n_tty_write+0xd35/0x11d0
[  474.596097][ T9591]   file_tty_write+0x500/0x990
[  474.600903][ T9591]   vfs_write+0x54b/0xa90
[  474.605248][ T9591]   ksys_write+0x145/0x250
[  474.609675][ T9591]   do_syscall_64+0xfa/0x3b0
[  474.614264][ T9591]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  474.620242][ T9591] 
[  474.620242][ T9591] to a SOFTIRQ-irq-unsafe lock:
[  474.627256][ T9591]  (tasklist_lock){.+.+}-{3:3}
[  474.627283][ T9591] 
[  474.627283][ T9591] ... which became SOFTIRQ-irq-unsafe at:
[  474.639933][ T9591] ...
[  474.639940][ T9591]   lock_acquire+0x120/0x360
[  474.647131][ T9591]   _raw_read_lock+0x36/0x50
[  474.651723][ T9591]   __do_wait+0xde/0x740
[  474.655994][ T9591]   do_wait+0x1f8/0x520
[  474.660157][ T9591]   kernel_wait+0xab/0x170
[  474.664577][ T9591]   call_usermodehelper_exec_work+0xbe/0x230
[  474.670566][ T9591]   process_scheduled_works+0xade/0x17b0
[  474.676192][ T9591]   worker_thread+0x8a0/0xda0
[  474.680885][ T9591]   kthread+0x70e/0x8a0
[  474.685040][ T9591]   ret_from_fork+0x3fc/0x770
[  474.689719][ T9591]   ret_from_fork_asm+0x1a/0x30
[  474.694589][ T9591] 
[  474.694589][ T9591] other info that might help us debug this:
[  474.694589][ T9591] 
[  474.704814][ T9591] Chain exists of:
[  474.704814][ T9591]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[  474.704814][ T9591] 
[  474.718385][ T9591]  Possible interrupt unsafe locking scenario:
[  474.718385][ T9591] 
[  474.726708][ T9591]        CPU0                    CPU1
[  474.732070][ T9591]        ----                    ----
[  474.737450][ T9591]   lock(tasklist_lock);
[  474.741703][ T9591]                                local_irq_disable();
[  474.748459][ T9591]                                lock(&dev->event_lock#2);
[  474.755671][ T9591]                                lock(&client->buffer_lock);
[  474.763045][ T9591]   <Interrupt>
[  474.766500][ T9591]     lock(&dev->event_lock#2);
[  474.771362][ T9591] 
[  474.771362][ T9591]  *** DEADLOCK ***
[  474.771362][ T9591] 
[  474.779855][ T9591] 7 locks held by syz.3.957/9591:
[  474.784960][ T9591]  #0: ffff888146734118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[  474.794199][ T9591]  #1: ffff88801dfde230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320
[  474.804417][ T9591]  #2: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320
[  474.814098][ T9591]  #3: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[  474.823683][ T9591]  #4: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[  474.833195][ T9591]  #5: ffff88802d8ee028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[  474.843383][ T9591]  #6: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[  474.852798][ T9591] 
[  474.852798][ T9591] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  474.863207][ T9591]  -> (&dev->event_lock#2){..-.}-{3:3} {
[  474.868889][ T9591]     IN-SOFTIRQ-W at:
[  474.872956][ T9591]                       lock_acquire+0x120/0x360
[  474.879334][ T9591]                       _raw_spin_lock_irqsave+0xa7/0xf0
[  474.886475][ T9591]                       input_inject_event+0xab/0x320
[  474.893267][ T9591]                       led_trigger_event+0x138/0x210
[  474.900091][ T9591]                       kbd_bh+0x1c6/0x2e0
[  474.905904][ T9591]                       tasklet_action_common+0x369/0x580
[  474.913121][ T9591]                       handle_softirqs+0x283/0x870
[  474.919711][ T9591]                       __irq_exit_rcu+0xca/0x1f0
[  474.926132][ T9591]                       irq_exit_rcu+0x9/0x30
[  474.932201][ T9591]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[  474.939656][ T9591]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  474.947482][ T9591]                       lock_is_held_type+0x137/0x190
[  474.954343][ T9591]                       __might_resched+0xa6/0x610
[  474.960891][ T9591]                       console_conditional_schedule+0x2a/0x40
[  474.968444][ T9591]                       fbcon_redraw+0x261/0x420
[  474.974780][ T9591]                       fbcon_scroll+0x38b/0x820
[  474.981119][ T9591]                       con_scroll+0x781/0xa10
[  474.987472][ T9591]                       csi_ECMA+0x2193/0x6990
[  474.993654][ T9591]                       do_con_write+0x4169/0x5200
[  475.000167][ T9591]                       con_write+0x24/0x40
[  475.006089][ T9591]                       n_tty_write+0xd35/0x11d0
[  475.012458][ T9591]                       file_tty_write+0x500/0x990
[  475.018976][ T9591]                       vfs_write+0x54b/0xa90
[  475.025049][ T9591]                       ksys_write+0x145/0x250
[  475.031212][ T9591]                       do_syscall_64+0xfa/0x3b0
[  475.037547][ T9591]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.045293][ T9591]     INITIAL USE at:
[  475.049279][ T9591]                      lock_acquire+0x120/0x360
[  475.055525][ T9591]                      _raw_spin_lock_irqsave+0xa7/0xf0
[  475.062504][ T9591]                      input_inject_event+0xab/0x320
[  475.069211][ T9591]                      kbd_led_trigger_activate+0xbc/0x100
[  475.076420][ T9591]                      led_trigger_set+0x52d/0x950
[  475.082927][ T9591]                      led_trigger_set_default+0x260/0x2a0
[  475.090133][ T9591]                      led_classdev_register_ext+0x73d/0x930
[  475.097599][ T9591]                      input_leds_connect+0x517/0x790
[  475.104387][ T9591]                      input_register_device+0xceb/0x10b0
[  475.111512][ T9591]                      atkbd_connect+0x70e/0x9c0
[  475.117838][ T9591]                      serio_driver_probe+0x82/0xa0
[  475.124504][ T9591]                      really_probe+0x26a/0x9a0
[  475.130805][ T9591]                      __driver_probe_device+0x18c/0x2f0
[  475.137873][ T9591]                      driver_probe_device+0x4f/0x430
[  475.144669][ T9591]                      __driver_attach+0x452/0x700
[  475.151275][ T9591]                      bus_for_each_dev+0x230/0x2b0
[  475.157883][ T9591]                      serio_handle_event+0x1a2/0x860
[  475.164665][ T9591]                      process_scheduled_works+0xade/0x17b0
[  475.171968][ T9591]                      worker_thread+0x8a0/0xda0
[  475.178296][ T9591]                      kthread+0x70e/0x8a0
[  475.184111][ T9591]                      ret_from_fork+0x3fc/0x770
[  475.190444][ T9591]                      ret_from_fork_asm+0x1a/0x30
[  475.196953][ T9591]   }
[  475.199534][ T9591]   ... key      at: [<ffffffff99dfdb60>] input_allocate_device.__key.5+0x0/0x20
[  475.208774][ T9591] -> (&client->buffer_lock){....}-{3:3} {
[  475.214514][ T9591]    INITIAL USE at:
[  475.218409][ T9591]                    lock_acquire+0x120/0x360
[  475.224473][ T9591]                    _raw_spin_lock+0x2e/0x40
[  475.230548][ T9591]                    evdev_handle_get_val+0x70/0x9f0
[  475.237259][ T9591]                    evdev_ioctl_handler+0x1202/0x1f10
[  475.244114][ T9591]                    __se_sys_ioctl+0xfc/0x170
[  475.250293][ T9591]                    do_syscall_64+0xfa/0x3b0
[  475.256362][ T9591]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.263827][ T9591]  }
[  475.266330][ T9591]  ... key      at: [<ffffffff99dfde00>] evdev_open.__key.25+0x0/0x20
[  475.274510][ T9591]  ... acquired at:
[  475.278308][ T9591]    lock_acquire+0x120/0x360
[  475.283084][ T9591]    _raw_spin_lock+0x2e/0x40
[  475.287793][ T9591]    evdev_handle_get_val+0x70/0x9f0
[  475.293076][ T9591]    evdev_ioctl_handler+0x1202/0x1f10
[  475.298546][ T9591]    __se_sys_ioctl+0xfc/0x170
[  475.303322][ T9591]    do_syscall_64+0xfa/0x3b0
[  475.308001][ T9591]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.314066][ T9591] 
[  475.316386][ T9591] 
[  475.316386][ T9591] the dependencies between the lock to be acquired
[  475.316395][ T9591]  and SOFTIRQ-irq-unsafe lock:
[  475.329956][ T9591]   -> (tasklist_lock){.+.+}-{3:3} {
[  475.335265][ T9591]      HARDIRQ-ON-R at:
[  475.339420][ T9591]                         lock_acquire+0x120/0x360
[  475.345918][ T9591]                         _raw_read_lock+0x36/0x50
[  475.352418][ T9591]                         __do_wait+0xde/0x740
[  475.358594][ T9591]                         do_wait+0x1f8/0x520
[  475.364673][ T9591]                         kernel_wait+0xab/0x170
[  475.371011][ T9591]                         call_usermodehelper_exec_work+0xbe/0x230
[  475.378906][ T9591]                         process_scheduled_works+0xade/0x17b0
[  475.386453][ T9591]                         worker_thread+0x8a0/0xda0
[  475.393051][ T9591]                         kthread+0x70e/0x8a0
[  475.399145][ T9591]                         ret_from_fork+0x3fc/0x770
[  475.405735][ T9591]                         ret_from_fork_asm+0x1a/0x30
[  475.412515][ T9591]      SOFTIRQ-ON-R at:
[  475.416666][ T9591]                         lock_acquire+0x120/0x360
[  475.423164][ T9591]                         _raw_read_lock+0x36/0x50
[  475.429665][ T9591]                         __do_wait+0xde/0x740
[  475.435838][ T9591]                         do_wait+0x1f8/0x520
[  475.441917][ T9591]                         kernel_wait+0xab/0x170
[  475.448251][ T9591]                         call_usermodehelper_exec_work+0xbe/0x230
[  475.456147][ T9591]                         process_scheduled_works+0xade/0x17b0
[  475.463704][ T9591]                         worker_thread+0x8a0/0xda0
[  475.470338][ T9591]                         kthread+0x70e/0x8a0
[  475.476413][ T9591]                         ret_from_fork+0x3fc/0x770
[  475.483002][ T9591]                         ret_from_fork_asm+0x1a/0x30
[  475.489772][ T9591]      INITIAL USE at:
[  475.494016][ T9591]                        lock_acquire+0x120/0x360
[  475.500450][ T9591]                        _raw_write_lock_irq+0xa2/0xf0
[  475.507316][ T9591]                        copy_process+0x21d5/0x3b80
[  475.513906][ T9591]                        kernel_clone+0x224/0x7f0
[  475.520337][ T9591]                        user_mode_thread+0xdd/0x140
[  475.527067][ T9591]                        rest_init+0x23/0x300
[  475.533145][ T9591]                        start_kernel+0x47d/0x500
[  475.539644][ T9591]                        x86_64_start_reservations+0x24/0x30
[  475.547035][ T9591]                        x86_64_start_kernel+0x143/0x1c0
[  475.554070][ T9591]                        common_startup_64+0x13e/0x147
[  475.560945][ T9591]      INITIAL READ USE at:
[  475.565459][ T9591]                             lock_acquire+0x120/0x360
[  475.572337][ T9591]                             _raw_read_lock+0x36/0x50
[  475.579205][ T9591]                             __do_wait+0xde/0x740
[  475.585717][ T9591]                             do_wait+0x1f8/0x520
[  475.592135][ T9591]                             kernel_wait+0xab/0x170
[  475.598818][ T9591]                             call_usermodehelper_exec_work+0xbe/0x230
[  475.607079][ T9591]                             process_scheduled_works+0xade/0x17b0
[  475.614969][ T9591]                             worker_thread+0x8a0/0xda0
[  475.621937][ T9591]                             kthread+0x70e/0x8a0
[  475.628356][ T9591]                             ret_from_fork+0x3fc/0x770
[  475.635293][ T9591]                             ret_from_fork_asm+0x1a/0x30
[  475.642406][ T9591]    }
[  475.645099][ T9591]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[  475.653087][ T9591]    ... acquired at:
[  475.657064][ T9591]    lock_acquire+0x120/0x360
[  475.661740][ T9591]    _raw_read_lock+0x36/0x50
[  475.666414][ T9591]    send_sigurg+0x12b/0x420
[  475.671033][ T9591]    sk_send_sigurg+0x6c/0x2e0
[  475.675856][ T9591]    tcp_check_urg+0x200/0x760
[  475.680647][ T9591]    tcp_urg+0x164/0x3f0
[  475.684888][ T9591]    tcp_rcv_established+0xf9d/0x1de0
[  475.690260][ T9591]    tcp_v4_do_rcv+0xa23/0xce0
[  475.695074][ T9591]    __release_sock+0x21c/0x350
[  475.699923][ T9591]    release_sock+0x5f/0x1f0
[  475.704534][ T9591]    tcp_sendmsg+0x39/0x50
[  475.708967][ T9591]    __sock_sendmsg+0x19c/0x270
[  475.713836][ T9591]    __sys_sendto+0x3bd/0x520
[  475.718530][ T9591]    __x64_sys_sendto+0xde/0x100
[  475.723472][ T9591]    do_syscall_64+0xfa/0x3b0
[  475.728153][ T9591]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.734481][ T9591] 
[  475.736803][ T9591]  -> (&f_owner->lock){....}-{3:3} {
[  475.742156][ T9591]     INITIAL USE at:
[  475.746152][ T9591]                      lock_acquire+0x120/0x360
[  475.752397][ T9591]                      _raw_write_lock_irq+0xa2/0xf0
[  475.759084][ T9591]                      __f_setown+0x67/0x370
[  475.765070][ T9591]                      f_setown+0x23a/0x300
[  475.770971][ T9591]                      sock_ioctl+0x5c5/0x790
[  475.777062][ T9591]                      __se_sys_ioctl+0xfc/0x170
[  475.783406][ T9591]                      do_syscall_64+0xfa/0x3b0
[  475.789655][ T9591]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.797292][ T9591]     INITIAL READ USE at:
[  475.801707][ T9591]                           lock_acquire+0x120/0x360
[  475.808400][ T9591]                           _raw_read_lock_irqsave+0xaf/0x100
[  475.815855][ T9591]                           send_sigurg+0x55/0x420
[  475.822357][ T9591]                           sk_send_sigurg+0x6c/0x2e0
[  475.829120][ T9591]                           tcp_check_urg+0x200/0x760
[  475.835886][ T9591]                           tcp_urg+0x164/0x3f0
[  475.842128][ T9591]                           tcp_rcv_established+0xf9d/0x1de0
[  475.849506][ T9591]                           tcp_v4_do_rcv+0xa23/0xce0
[  475.856271][ T9591]                           __release_sock+0x21c/0x350
[  475.863121][ T9591]                           release_sock+0x5f/0x1f0
[  475.869712][ T9591]                           tcp_sendmsg+0x39/0x50
[  475.876138][ T9591]                           __sock_sendmsg+0x19c/0x270
[  475.883006][ T9591]                           __sys_sendto+0x3bd/0x520
[  475.889698][ T9591]                           __x64_sys_sendto+0xde/0x100
[  475.896655][ T9591]                           do_syscall_64+0xfa/0x3b0
[  475.903350][ T9591]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  475.911456][ T9591]   }
[  475.914064][ T9591]   ... key      at: [<ffffffff99aeef60>] file_f_owner_allocate.__key+0x0/0x20
[  475.923081][ T9591]   ... acquired at:
[  475.926974][ T9591]    lock_acquire+0x120/0x360
[  475.931656][ T9591]    _raw_read_lock_irqsave+0xaf/0x100
[  475.937172][ T9591]    send_sigio+0x38/0x370
[  475.941617][ T9591]    kill_fasync+0x24d/0x4d0
[  475.946230][ T9591]    sock_wake_async+0x137/0x160
[  475.951174][ T9591]    sock_def_readable+0x3bb/0x550
[  475.956309][ T9591]    tcp_urg+0x2e3/0x3f0
[  475.960571][ T9591]    tcp_rcv_established+0xf9d/0x1de0
[  475.965968][ T9591]    tcp_v4_do_rcv+0xa23/0xce0
[  475.970788][ T9591]    __release_sock+0x21c/0x350
[  475.975692][ T9591]    release_sock+0x5f/0x1f0
[  475.980309][ T9591]    tcp_sendmsg+0x39/0x50
[  475.984753][ T9591]    __sock_sendmsg+0x19c/0x270
[  475.989657][ T9591]    __sys_sendto+0x3bd/0x520
[  475.994350][ T9591]    __x64_sys_sendto+0xde/0x100
[  475.999304][ T9591]    do_syscall_64+0xfa/0x3b0
[  476.004005][ T9591]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.010088][ T9591] 
[  476.012669][ T9591] -> (&new->fa_lock){....}-{3:3} {
[  476.017816][ T9591]    INITIAL USE at:
[  476.021715][ T9591]                    lock_acquire+0x120/0x360
[  476.027791][ T9591]                    _raw_write_lock_irq+0xa2/0xf0
[  476.034316][ T9591]                    fasync_remove_entry+0xf1/0x1c0
[  476.040915][ T9591]                    sock_fasync+0x85/0xf0
[  476.046741][ T9591]                    __fput+0x8a2/0xa70
[  476.052330][ T9591]                    task_work_run+0x1d1/0x260
[  476.058613][ T9591]                    exit_to_user_mode_loop+0xec/0x110
[  476.065485][ T9591]                    do_syscall_64+0x2bd/0x3b0
[  476.071664][ T9591]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.079140][ T9591]    INITIAL READ USE at:
[  476.083472][ T9591]                         lock_acquire+0x120/0x360
[  476.089982][ T9591]                         _raw_read_lock_irqsave+0xaf/0x100
[  476.097293][ T9591]                         kill_fasync+0x199/0x4d0
[  476.103737][ T9591]                         sock_wake_async+0x137/0x160
[  476.110524][ T9591]                         sk_send_sigurg+0x1f1/0x2e0
[  476.117206][ T9591]                         tcp_check_urg+0x200/0x760
[  476.123813][ T9591]                         tcp_urg+0x164/0x3f0
[  476.129898][ T9591]                         tcp_rcv_established+0xf9d/0x1de0
[  476.137220][ T9591]                         tcp_v4_do_rcv+0xa23/0xce0
[  476.143817][ T9591]                         __release_sock+0x21c/0x350
[  476.150499][ T9591]                         release_sock+0x5f/0x1f0
[  476.156938][ T9591]                         tcp_sendmsg+0x39/0x50
[  476.163197][ T9591]                         __sock_sendmsg+0x19c/0x270
[  476.169889][ T9591]                         __sys_sendto+0x3bd/0x520
[  476.176417][ T9591]                         __x64_sys_sendto+0xde/0x100
[  476.183193][ T9591]                         do_syscall_64+0xfa/0x3b0
[  476.189718][ T9591]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.197623][ T9591]  }
[  476.200125][ T9591]  ... key      at: [<ffffffff99aeef80>] fasync_insert_entry.__key+0x0/0x20
[  476.208825][ T9591]  ... acquired at:
[  476.212633][ T9591]    lock_acquire+0x120/0x360
[  476.217311][ T9591]    _raw_read_lock_irqsave+0xaf/0x100
[  476.222955][ T9591]    kill_fasync+0x199/0x4d0
[  476.227557][ T9591]    evdev_pass_values+0x627/0xbd0
[  476.232668][ T9591]    evdev_events+0x1e6/0x340
[  476.237357][ T9591]    input_pass_values+0x285/0x890
[  476.242590][ T9591]    input_event_dispose+0x330/0x6b0
[  476.247881][ T9591]    input_inject_event+0x1fe/0x320
[  476.253089][ T9591]    evdev_write+0x2fc/0x480
[  476.257675][ T9591]    vfs_write+0x27e/0xa90
[  476.262092][ T9591]    ksys_write+0x145/0x250
[  476.266596][ T9591]    do_syscall_64+0xfa/0x3b0
[  476.271278][ T9591]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.277347][ T9591] 
[  476.279667][ T9591] 
[  476.279667][ T9591] stack backtrace:
[  476.285564][ T9591] CPU: 0 UID: 0 PID: 9591 Comm: syz.3.957 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  476.285585][ T9591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  476.285596][ T9591] Call Trace:
[  476.285602][ T9591]  <TASK>
[  476.285610][ T9591]  dump_stack_lvl+0x189/0x250
[  476.285632][ T9591]  ? __pfx_dump_stack_lvl+0x10/0x10
[  476.285650][ T9591]  ? __pfx__printk+0x10/0x10
[  476.285674][ T9591]  validate_chain+0x1f05/0x2140
[  476.285703][ T9591]  __lock_acquire+0xab9/0xd20
[  476.285720][ T9591]  ? kill_fasync+0x199/0x4d0
[  476.285741][ T9591]  lock_acquire+0x120/0x360
[  476.285755][ T9591]  ? kill_fasync+0x199/0x4d0
[  476.285783][ T9591]  _raw_read_lock_irqsave+0xaf/0x100
[  476.285799][ T9591]  ? kill_fasync+0x199/0x4d0
[  476.285820][ T9591]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[  476.285834][ T9591]  ? do_raw_spin_lock+0x121/0x290
[  476.285858][ T9591]  kill_fasync+0x199/0x4d0
[  476.285878][ T9591]  ? kill_fasync+0x53/0x4d0
[  476.285900][ T9591]  evdev_pass_values+0x627/0xbd0
[  476.285924][ T9591]  ? evdev_pass_values+0x5b1/0xbd0
[  476.285941][ T9591]  evdev_events+0x1e6/0x340
[  476.285966][ T9591]  ? evdev_events+0x79/0x340
[  476.285990][ T9591]  ? input_pass_values+0x8d/0x890
[  476.286013][ T9591]  input_pass_values+0x285/0x890
[  476.286040][ T9591]  ? input_handle_event+0x70c/0xf30
[  476.286060][ T9591]  input_event_dispose+0x330/0x6b0
[  476.286082][ T9591]  input_inject_event+0x1fe/0x320
[  476.286102][ T9591]  ? input_inject_event+0xbc/0x320
[  476.286123][ T9591]  evdev_write+0x2fc/0x480
[  476.286140][ T9591]  ? __pfx_evdev_write+0x10/0x10
[  476.286154][ T9591]  ? bpf_lsm_file_permission+0x9/0x20
[  476.286239][ T9591]  ? security_file_permission+0x75/0x290
[  476.286260][ T9591]  ? rw_verify_area+0x258/0x650
[  476.286284][ T9591]  ? __pfx_evdev_write+0x10/0x10
[  476.286298][ T9591]  vfs_write+0x27e/0xa90
[  476.286315][ T9591]  ? __pfx_vfs_write+0x10/0x10
[  476.286329][ T9591]  ? __fget_files+0x2a/0x420
[  476.286364][ T9591]  ? __fget_files+0x2a/0x420
[  476.286380][ T9591]  ? __fget_files+0x3a0/0x420
[  476.286396][ T9591]  ? __fget_files+0x2a/0x420
[  476.286417][ T9591]  ksys_write+0x145/0x250
[  476.286432][ T9591]  ? __pfx_ksys_write+0x10/0x10
[  476.286445][ T9591]  ? rcu_is_watching+0x15/0xb0
[  476.286464][ T9591]  ? do_syscall_64+0xbe/0x3b0
[  476.286484][ T9591]  do_syscall_64+0xfa/0x3b0
[  476.286501][ T9591]  ? lockdep_hardirqs_on+0x9c/0x150
[  476.286517][ T9591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.286532][ T9591]  ? clear_bhb_loop+0x60/0xb0
[  476.286550][ T9591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  476.286565][ T9591] RIP: 0033:0x7f243298ebe9
[  476.286580][ T9591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  476.286594][ T9591] RSP: 002b:00007f24337ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  476.286611][ T9591] RAX: ffffffffffffffda RBX: 00007f2432bb5fa0 RCX: 00007f243298ebe9
[  476.286623][ T9591] RDX: 000000000000005b RSI: 00002000000000c0 RDI: 0000000000000006
[  476.286633][ T9591] RBP: 00007f2432a11e19 R08: 0000000000000000 R09: 0000000000000000
[  476.286643][ T9591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  476.286652][ T9591] R13: 00007f2432bb6038 R14: 00007f2432bb5fa0 R15: 00007ffd31269338
[  476.286670][ T9591]  </TASK>
[  476.608605][    C0] vkms_vblank_simulate: vblank timer overrun
[  476.625158][ T5839] Bluetooth: hci2: command 0x0406 tx timeout
[  477.145298][ T5921] usb 1-1: Using ep0 maxpacket: 16
[  477.157682][ T5921] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  477.169701][ T5921] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  477.181679][ T5921] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  477.205632][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.215341][ T5921] usb 1-1: Product: syz
[  477.219603][ T5921] usb 1-1: Manufacturer: syz
[  477.224280][ T5921] usb 1-1: SerialNumber: syz
[  477.246844][ T5921] usb 1-1: can't set config #1, error -71
[  477.253998][ T5921] usb 1-1: USB disconnect, device number 49
[  477.260251][ T6021] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  477.428088][ T6021] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  477.438542][ T6021] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  477.447052][ T6021] usb 4-1: Product: syz
[  477.451366][ T6021] usb 4-1: Manufacturer: syz
[  477.456204][ T6021] usb 4-1: SerialNumber: syz
[  477.462002][ T6021] usb 4-1: config 0 descriptor??
[  477.669625][ T6021] usb 4-1: ignoring: probably an ADSL modem
[  478.079913][ T6021] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  479.335965][   T10] usb 4-1: USB disconnect, device number 32