last executing test programs:

7m7.639987867s ago: executing program 32 (id=24):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
r3 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$sock(r3, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f00000000c0)="0f", 0x1}], 0x1}}], 0x1, 0x0)
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000140)=""/79, 0x4f}], 0x1}}], 0x1, 0x0, 0x0)
shutdown(r4, 0x2)
userfaultfd(0x180801)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv6_newnexthop={0x18, 0x68, 0x2, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x3, 0x0, 0x21}}, 0x18}}, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0)

7m4.328020974s ago: executing program 33 (id=50):
bind$inet(0xffffffffffffffff, &(0x7f0000002100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003740)="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", 0x5c1}], 0x1}}], 0x2, 0x240080a0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12)

7m0.090230419s ago: executing program 34 (id=83):
r0 = socket$kcm(0xa, 0x2, 0x0)
writev(r0, &(0x7f0000001f00)=[{&(0x7f0000000180)="ba1520f1e4eb9945d87e3d2be8b9971eafef175ec1e3ca90e5f43a6489815d79cb2bce2c7a9a6ee9aed815ddb78b86d01d8dd912a6f48f1f4803af1698d036212aa018aa2f04a31e6f", 0x49}, {&(0x7f00000002c0)="9ba87723fe00d03d2b34aaa0e3a6cf3ad39b767a8cb68fc1634d6c10983efed9e68833a4be5cb249e6f679a048f42e0297fee9a755f6c863412d77f9490f599b25fc9bbf2d15e823a8dc4235a33e4377d42e0e8de2b770543c9c80ae03fc5b4a51ee413141a0779b82aefef414300ac01191", 0x72}, {&(0x7f0000000380)="cff3b91930c615d23ef98018ab762b96bbe80350001e85713ebb12f403db8068eda700df2cc1aedc8d6718646f14769c185eac3a21fed34f7dbaef49742018154f85c5cc4bebd640edbd5386514439ad61ec9339d2dc18307cb3ac8b8dc2d38f929f45e88ebf12ca1ca95046a65238767e2f34ebb4cbd50ba98741c9c495d9faf1a87d21bdcb3f4e26aabc0eee1ef776d340f76ab19200928246f3838797c7bb86e667725b2dc794f1bf37b5d3e30a2f588462917fd13daa7374fe205e1f740dc6f230ae7e7797c14cc68f96a2e2da68e1709370487588013c17446c", 0xdc}, {&(0x7f0000000e00)="1c55bb026b65322d8b9c8679b64de97ee4d71b587083b2703ae422d8c326196b202b35a5d09c97cf1b410891f0fd4aaff273cb702771a28d27a665802422c6e873b09dce6eb81adf8b00b9b5193c85b031b5f3a63dfb03dbe38bf4bb948cbcda66e4630f101396f866443779bc7ce0b7df574dbd58e644fc5079f8e041a220a39059547ccc15e49987f7432e40988dc9190cc59d1cab2b76dced0c7148c79e7362a5b236951929235123669fb4eb6f64d22ee003e210181976a7dd7ab929a1f5e39ae559ab8616cb5cadc0b649f16a8b6384ff5ea49e41323ba75c89c93143928cf970c5689ce53b345d950f68f86ef130ae4d12de0c00e0e501be1131785f16443c1b7ffee20a2c9f61d3de77334779c7ab171f50d875cb6b89766c01e9f1a8da9620014fea23fa6568e7bad7accd6f61e98f77d24896e1de75dc2e8d8bbd78c5da96734c6aa745cc6b1e3aae33afa89fe404da6bee671edbe74a0ba45b6ec651a95175553bef180ced4b054de1ab8788b4ce4bdf03cdaf292d5a09b8b5fdf9625583e47840e994fc6efe6a1ffcb415a66cd9bc697416c3c549a61fbca8b0f2392d8262b57a576598dac05cee02b7e8e783bec8861adff56f3cfaa78d713ff6b517688d64cea451eb53c00df76dd62c83a56d75ec4bcbff591bbf8ad2f242b032b5bc76dcd3d32de7067d673250730d5622d26ab6111907f8ff9ce43612b47cdf4fa5c4e51f036a9177015193776ce39ddc04d706e44a7c88cc2967cf376afd4cabb64677d43a064a3dc720df76e81106f90b2ec7411bd279dc00a9069e3c631144c4f85842db062954fddd6aa5cf295519a3cfdc95633aded647da079b44cbfe5ae76f3f9e1cf2bb626000588ed9529d6c01c2f907ac29fd2ec60f2c664dcbb2bd599fe877d2e9f031be4a070265ef6c2ec6aa561acd113b62ee238ce5e428c5443b47758454a2c37ffebf5c4158e2a82cd3bf5db9563bf18d9655e8abdd1ecd4a93cedb1c13463aa6b6b6246e291e4d03d4c074a8cbf4cae43301af18116785d7213a8bd0e453f79c4a002360bc5bbcf753d921084aaf1bf378c62fd1c3d5b209596884df356b2a5f9f51cfa57787abc05288d4fd3879126ff2bb7a356d4f7d8335b05d1dafa62a488372593ac2cd814c095ae5b90676aea7c790512309740a77bf73caad7d4f300fec68a1748f6c125f56a3045922c107e8652e56cabb13667199a1b1e7c2029bb1b5be0d4f150b7715793748b469887c31cf62ea4a36b3e9be6d50ac1d021192e4e89ebbf9d5aeb542342be77e58b15ecd604cd5c47b2aca03a21215fd5f9a7c599c9d563c8e840dc91ea636dda330890e8ba31aca08a98bfaa229fa4dd163293d93e337933265d29c9672d2a9cc3c7394af6e6c21678c74d1e74d005d3dc863c94f52fe642db8d35e948bafa193aa9c9dbc07a8d3", 0x3fe}, {0x0}], 0x5)

6m51.438099312s ago: executing program 35 (id=134):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "b130f285b79edef8950d4d64c2014ba1a3"}, 0x1c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
renameat2(r0, 0x0, r0, 0x0, 0x5)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

6m40.416887953s ago: executing program 36 (id=182):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x10, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x5, 0x2, 0x13, 0x2}, {0x5, 0x5, 0x0, 0x9}], 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = socket$key(0xf, 0x3, 0x2)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x100)
sendmsg$key(r1, &(0x7f00000007c0)={0x400000000000000, 0x0, 0x0}, 0x20004808)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000080)=0x4, 0x4)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x76)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r7 = userfaultfd(0x1)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000004c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3})
ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}})
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf)

6m39.728878916s ago: executing program 37 (id=186):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
chdir(0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

6m38.257148251s ago: executing program 38 (id=194):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff)
iopl(0x3)
pipe2(&(0x7f00000002c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
r4 = memfd_create(&(0x7f0000000440)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz\x03\x00\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92 \x00*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\f\xc9\xc5H\x0f;\xd3\xe2\at\x9bJ\xe6\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xee\xdc\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)\xdeA\x1ed\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\xf6\xb8\xebN\xe2\x18\x04[\xabW}\xb1\xffo\xae~=\x9dd\x9f\x92\xd2[\xb8\xb6\x1a\x02c\xa1\xd1H\xb7@\x06\x96s\xef\xee\x92\xfaC\x15+\x84%h1O\xe2\xb8\xd3\x19R\x00\f\n\x1cpEn\xad\xa7IRf\xc65\x15<}\xb8\x05\xe4\xb7\x9e\xf3\xda\xdavzB\xf8qj\x9e\xe4\xbd\x05\xcfx\xb5\x12\t\xe0\xf2\'f\xf4+\xb3\xdeA6\x10O\xdd\x9c\xf7B', 0x7)
ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffffe, 0x4, 0x4000})
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10)
r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x77, 0x101a01)
ioctl$USBDEVFS_FREE_STREAMS(r6, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200230318000aff6000000002000020d3"])
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f0000001440))
sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0xb0, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x68}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xb}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010101}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc040}, 0x0)

6m34.286087579s ago: executing program 39 (id=204):
mkdir(&(0x7f0000000000)='./file0\x00', 0x56)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000840)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0x5, 0x20, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "b4d512d6"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x7, 0xa, 0xfd}, {0x6, 0x24, 0x1a, 0x2, 0x1}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x3, [0x8001]}, @acm={0x4, 0x24, 0x2, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x9, 0xae}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x0, 0x6e}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0x10, 0xfa}}}}}}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x200, 0x6, 0x9, 0xfa, 0x40, 0x8}, 0x11d, &(0x7f0000000900)={0x5, 0xf, 0x11d, 0x5, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x2, 0x0, 0x200, 0x5}, @ptm_cap={0x3}, @generic={0xde, 0x10, 0xa, "5eecba9b1fe5823d540958c9dd50b3ad701a53ea13e3224069dbff410bb701fb5c4421ea5eb5ac2c6b03caf666ed20d6a72caa2e9cda0c253a387f0610af104b1f28aa62609365f09818ba3a2331f533cf2b5c6f5c235ba31f0083d4600cced0b5bbb26b85ff5ada57ce9f8e0d35cd277840839cad5916aaaebbc4d7930617a8394c156b7e1bdb1885028deb6f279f8d7cefaf0352b723b90d3ffc753e717143eff6383e8c94be47a6c15973dc886a3073f91b82ea7399d3b37a61e5536d5028d33119586f9c8391841fe53dd68ccc6e3b7f045dbd65c11e433559"}, @ssp_cap={0x18, 0x10, 0xa, 0xc, 0x3, 0x1, 0xf00, 0x800, [0x3f00, 0xfffff0, 0x3fcf]}, @ssp_cap={0x14, 0x10, 0xa, 0x3, 0x2, 0x3, 0x1100, 0x8, [0xff3f00, 0xff0000]}]}, 0x8, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2009}}, {0x6, &(0x7f0000000d00)=ANY=[@ANYBLOB="06033c124549a5f168427c7dcc3ef0134ec4f5f16bceebbc739bf757a82bda4779373bf75c0c71b14b2c685269e13d830f7e4a2ace3ec498866d79d66cb793903f496d7ef619db0d"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2803}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x404}}, {0xffffffffffffffa5, &(0x7f0000000a40)=@string={0xbe, 0x3, "4198d60c2ad5867c224dfa4003e03c4e3599f10f93851c5798cec6672b07dee2a713f5a374ad99026ffa4a6d53a60bb151b08792e09d06264211a9a59e44dc39dc5b3ce87a0e7f613f6449fd62a645a2a99e2588e7a47a22d3515a2c17a25965734206685b45cd181b676961f9e240454558ed8b0adcbeeeca4a9997919ef5eb67189f9d7c2cf0dff47dfa7671ee750dd1d4235a5ece12f035fbcd05e12276e027742ea400b065aaee68d2186f8668f1313c0d0470de8ba6794a4aa2"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x831}}, {0x72, &(0x7f0000000b80)=@string={0x72, 0x3, "22720956447bcbbf624838a87c68c1d2aa463e7656611625dbc0463b6690e793b3ff147e46b5901c9e12f9932c9c0a924874083bcae49cdee6c1fe13d14f4b4e57aa431cedc5410ff4ccec694224a26cae0ed82841bf2b48128b2c07a919e58fd6693e750d038dbb2ee8bd34642d1999"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x404}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000005c0)=""/217, 0xd9, <r1=>0x0, &(0x7f0000000740)=""/254, 0xfe}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000007b1110000000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0xa)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246)
r5 = dup2(r3, r2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$MRT_ASSERT(r5, 0x0, 0xcf, &(0x7f0000000cc0), 0x4)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
fsetxattr$security_capability(r9, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x18, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000003c0)=r9, 0x4)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r10 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r10, 0x81044804, &(0x7f0000000300)={0x1, "c2"})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000180000004d0000000000000085000800"/32], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64)
syz_usb_control_io(r0, &(0x7f0000002580)={0x2c, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="0003020100000203"], 0x0, 0x0, 0x0}, 0x0)

6m31.724408694s ago: executing program 40 (id=212):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
syz_usb_connect(0x0, 0x57, 0x0, 0x0)

6m21.774802184s ago: executing program 41 (id=219):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
unshare(0x40020000)

6m10.401325447s ago: executing program 42 (id=294):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', <r2=>0x0, 0x0, 0x8, 0x39, 0x10001, 0x41, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x8000, 0x8, 0x4, 0x2}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'syztnl0\x00', r2, 0x4, 0x5, 0x3, 0xfffffffe, 0x20, @dev={0xfe, 0x80, '\x00', 0x2a}, @local, 0x80, 0x0, 0x3, 0x80000001}})

6m4.700386451s ago: executing program 43 (id=336):
syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x7)

6m2.776421232s ago: executing program 44 (id=341):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
listen(r0, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1)

5m58.849478119s ago: executing program 45 (id=362):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0)
io_setup(0x3, &(0x7f0000000140)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000a40)=[&(0x7f0000000840)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000180)={{}, 'syz0\x00'})
ioctl$UI_DEV_CREATE(r2, 0x5501)
ioctl$UI_DEV_DESTROY(r2, 0x5502)

5m56.122401321s ago: executing program 46 (id=369):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8)

5m44.587142585s ago: executing program 47 (id=379):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x4c800}, 0x0)

5m27.305553077s ago: executing program 48 (id=469):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000000)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

5m20.762049142s ago: executing program 49 (id=503):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000280)={0x0, 0x7ff, 0xfffffff8, 0x2, 0xff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x9, 0x5})
unshare(0x2c020400)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414aa08000700e0000001"], 0x48}}, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xc1000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20000400)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r8, &(0x7f0000000100)={0xa, 0x0, 0x8000006, @mcast2, 0xffffffef}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r10, @ANYBLOB="10005a800c000380050002001e0000000a0018000303030303030000"], 0x38}}, 0x40054)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r5, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x484}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000540)={0xc})
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_PEER_REMOVE(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x140, r11, 0x800, 0x70bd28, 0xfe8f, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40000002}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6238bfc4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8deb}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40084}, 0x404c091)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r12, 0xf81, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x2a6, 0x9}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
ioctl$EVIOCRMFF(r2, 0x41015500, 0x0)

5m15.179116534s ago: executing program 0 (id=532):
pipe(0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0)

5m14.991708967s ago: executing program 50 (id=532):
pipe(0x0)
close(0xffffffffffffffff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0)

4m52.377566444s ago: executing program 9 (id=667):
socket(0x11, 0x800000003, 0x0)
syz_open_dev$usbmon(0x0, 0x3, 0x180)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0105b08, &(0x7f0000000040))

4m51.138942721s ago: executing program 8 (id=673):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000002000000380000000000000000191bda000020000100006b5e0200000000000003"], 0x69)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x80, 0xfdc, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}})

4m50.958806548s ago: executing program 8 (id=675):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

4m50.823258232s ago: executing program 8 (id=676):
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x12a, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @mcast2, 0xf}, r5}}, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fsopen(&(0x7f0000000040)='bdev\x00', 0x0)
syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f38caa7080066b8000000000f23c80f21f866350400b0000f23f866b9920200000f32ba420066b80300000066ef660f2896070026670fae69a8ba2000b0c3eeb800008ed00f090fc7a8d200", 0x4c}], 0x1, 0x28, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000003c0)="c4c15d5945ebc744240004e0c574c7442402634b0000c7442406000000000f011424c4c1335f682a66b81c010f00d0b9fb0a0000b8ace00000ba000000000f300f20d835200000000f22d80f01c866ba4200ed36650f798cbd00000000c4c1fd1028", 0x62}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r6, 0xae9a)
syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x0, 0x0)
io_uring_setup(0x43b4, &(0x7f0000000440)={0x0, 0xdc3e, 0x0, 0x0, 0x11})

4m50.609493068s ago: executing program 8 (id=678):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="8678", 0x2}, {0x0}], 0x2)
dup3(r2, r0, 0x0)

4m49.603460562s ago: executing program 8 (id=683):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[])

4m49.171442407s ago: executing program 9 (id=687):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)

4m49.171164521s ago: executing program 8 (id=688):
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x12a, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @mcast2, 0xf}, r5}}, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fsopen(&(0x7f0000000040)='bdev\x00', 0x0)
syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f38caa7080066b8000000000f23c80f21f866350400b0000f23f866b9920200000f32ba420066b80300000066ef660f2896070026670fae69a8ba2000b0c3eeb800008ed00f090fc7a8d200", 0x4c}], 0x1, 0x28, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000003c0)="c4c15d5945ebc744240004e0c574c7442402634b0000c7442406000000000f011424c4c1335f682a66b81c010f00d0b9fb0a0000b8ace00000ba000000000f300f20d835200000000f22d80f01c866ba4200ed36650f798cbd00000000c4c1fd1028", 0x62}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r6, 0xae9a)
syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x0, 0x0)
io_uring_setup(0x43b4, &(0x7f0000000440)={0x0, 0xdc3e, 0x0, 0x0, 0x11})

4m48.752492199s ago: executing program 51 (id=688):
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffcb2, &(0x7f0000000800)=0x9)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102384, 0x18ff0}], 0x1, 0x0, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
read$FUSE(r1, 0x0, 0x0)
openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x6, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x12a, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @remote, 0x4}, {0xa, 0x0, 0x0, @mcast2, 0xf}, r5}}, 0x48)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
fsopen(&(0x7f0000000040)='bdev\x00', 0x0)
syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f0000000340)="0f38caa7080066b8000000000f23c80f21f866350400b0000f23f866b9920200000f32ba420066b80300000066ef660f2896070026670fae69a8ba2000b0c3eeb800008ed00f090fc7a8d200", 0x4c}], 0x1, 0x28, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000003c0)="c4c15d5945ebc744240004e0c574c7442402634b0000c7442406000000000f011424c4c1335f682a66b81c010f00d0b9fb0a0000b8ace00000ba000000000f300f20d835200000000f22d80f01c866ba4200ed36650f798cbd00000000c4c1fd1028", 0x62}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r6, 0xae9a)
syz_emit_vhci(&(0x7f0000000500)=ANY=[], 0x7)
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/sockstat\x00')
preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000100)=""/68, 0x44}], 0x1, 0x0, 0x0)
io_uring_setup(0x43b4, &(0x7f0000000440)={0x0, 0xdc3e, 0x0, 0x0, 0x11})

4m48.737272484s ago: executing program 9 (id=691):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001bc0)={'wlan1\x00', <r1=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c00)={0x1c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0)

4m48.556148826s ago: executing program 9 (id=693):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="8678", 0x2}, {0x0}], 0x2)
dup3(r2, r0, 0x0)

4m47.547396933s ago: executing program 9 (id=697):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6)

4m46.687437763s ago: executing program 9 (id=701):
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)

4m46.388083847s ago: executing program 52 (id=701):
write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)

3m56.155356531s ago: executing program 7 (id=955):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0)
syz_open_dev$media(&(0x7f0000006680), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)

3m54.68631597s ago: executing program 7 (id=961):
unshare(0x2c020400)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r1=>0x0, 0x5}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xa2fe, @rand_addr=' \x01\x00', 0x2}]}, &(0x7f0000000180)=0x10)

3m54.499576528s ago: executing program 7 (id=964):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0)
syz_open_dev$media(&(0x7f0000006680), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)

3m53.035683252s ago: executing program 7 (id=973):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x3000000, r1, {0x8}}, 0x18)

3m52.069799874s ago: executing program 7 (id=981):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r4 = dup(r2)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)

3m51.731087334s ago: executing program 7 (id=986):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r3 = dup(0xffffffffffffffff)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0)
syz_open_dev$media(&(0x7f0000006680), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)

3m51.479851911s ago: executing program 53 (id=986):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x3, 0x9}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$userio(0xffffffffffffff9c, 0x0, 0xa2602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000100))
syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r3 = dup(0xffffffffffffffff)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
syz_open_dev$media(&(0x7f0000000180), 0x80000000d, 0x0)
syz_open_dev$media(&(0x7f0000006680), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600)={0x9, 0x3, 0x0, 0x80000001, 0x0, 0x1, 0x2}, 0x0, &(0x7f0000000680)={0xfff, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0)
io_uring_enter(r0, 0x20003d16, 0x80000, 0x0, 0x0, 0x0)

2m42.595571115s ago: executing program 1 (id=1418):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xcf, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, 0x0, 0x0)
r2 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xd, 0x0, 0x0)
r3 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
connect$inet6(r5, &(0x7f0000000380)={0xa, 0x4e31, 0x4, @empty, 0x3}, 0x1c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0xb6ff000000000000}, 0x0)

2m42.354017074s ago: executing program 1 (id=1420):
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0x0, 0x3, 0xffffffff}}, 0x50)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m42.142874177s ago: executing program 1 (id=1422):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x20, 0x7, 0x75, {0x75, 0x9, "0591392c724ca23cac88124784bfc4b40fbd7a61575eb4faac582ec448f34ddae2356710c4a2b7da91cb8821a1f041577f20a70f7cde66d4c16c71592289950fbb4403385f50f20991d9921eede0d26c44ad4824bdfbd1cd604dcd6e76a271706fd9af9d2d1306333154a325e50a76675c9db6"}}, &(0x7f0000000100)={0x0, 0x3, 0x52, @string={0x52, 0x3, "776fde7c46a91890e3c4487806e1aa7d8ba7803abb26089f9e214a588c5779d624f806ce263835342cb78f8d2ec7fa181067b370c0b58d786512b305d77f86a3293193b462b0ba95b956bd362a237fdb"}}, &(0x7f0000000180)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x2, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x0, 0x5}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x94, 0x0, 0x6, 0x2, "e35ca756", "b038432c"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x4, 0x0, 0x8, 0x6, 0x8, 0x2e42}}}, &(0x7f0000000740)={0x84, &(0x7f0000000280)={0x40, 0x30, 0xd1, "7e76436395cb345f5e7da4a995cb955194c5e6aa1794ebc5d11ce9502be73c7fc9bc8c2215c3e289a48d4bbdcf757a3a78cd1e22f979a9d0005e17abdc6c6a428b78b3a00aaab7c16a633770b142831c1058c5ae2dd3f12f931e7b4eb8fd170eb63b6c2f782449c380228200d847d92bbcd7da80074f694929d761622d971d2074c7cd06c27e67baeb26094641bd407c3e9ca62b0dcc83ba6ac9d515e9f3e9f2e9a6d6aaa44c404550de93f03a546f238d0d760a140aefd486f1eeecec73577ec8b32e001846aa54cd0c6ef6a1b54194f9"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000480)={0x40, 0x7, 0x2, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000500)={0x40, 0xb, 0x2, "b445"}, &(0x7f0000000540)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000580)={0x40, 0x13, 0x6}, &(0x7f00000005c0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000600)={0x40, 0x19, 0x2, "a56e"}, &(0x7f0000000640)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xe}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x90}}) (async)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f00000087a8ff"], 0x0}, 0x0)

2m38.943725608s ago: executing program 1 (id=1440):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0x0, r1, {0x8}}, 0x50)

2m37.937877799s ago: executing program 1 (id=1445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0x7, &(0x7f0000000040)={@in, 0x0, 0x0, 0x0, 0x0, "f55f817bc06c88f47480ab5a58b45baf660401c8bc69351dac1f1747678b1958be4f737c06ed8b91cfcb18062bc5832e880319bf07279cd8bb654dd3911a359dbee08f634402630b53fa8ce128836865"}, 0xd8)
getsockopt$inet6_tcp_int(r3, 0x6, 0x7, 0x0, &(0x7f0000000080))
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'rose0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x180800)
r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r7, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000040)='./control\x00', 0x5000410)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')
getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, &(0x7f0000005780)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f00000057c0)=0x2c)
bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000005400), 0x8100, 0x0)
listen(r2, 0x0)
connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000003f80)=ANY=[@ANYBLOB="4800000010001000000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="10000000000000001c0012800b00010062726964676500000c00028038000500010000000a000100aaaaaaaaaabb000030fa607c1a6233c2f4343825bfc8696b348dcafb0ee1615979aa1b0e789bf75152938a5fd6da8bf3a38aed057430a0ef6aa72d065fd064c830ecfbb3eabd069c547d31"], 0x48}}, 0x4810)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000180)={0xff, 0x24, 0x9, 0x0, 0x19, "a7d96c8185ea2acb421059f74689937cad1ba3"})
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1d, 0x2, 0x2)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0xffffffffffffffca, 0x0}, 0x0)

2m37.686508638s ago: executing program 1 (id=1447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (fail_nth: 2)

2m37.334326434s ago: executing program 54 (id=1447):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) (fail_nth: 2)

2m14.511833512s ago: executing program 6 (id=1558):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x0, 0x0, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3)
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
r2 = socket(0x9, 0x80000, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800c0001006d6163766c616e002c0002801c0005"], 0x5c}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x3d, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfd4}})
rt_sigsuspend(0x0, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x5, 0xe4, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a00067af4190009050f102000050801060c8b631b7507250102020700090501", @ANYRES32], 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)

2m12.091363903s ago: executing program 6 (id=1571):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4000810)
ioctl$KVM_RUN(r3, 0xae80, 0x500)

2m11.583832041s ago: executing program 6 (id=1573):
creat(&(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000010000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
writev(r2, &(0x7f0000000340)=[{&(0x7f0000000240)="8678", 0x2}, {0x0}], 0x2)
dup3(r2, r0, 0x0)

2m11.37475762s ago: executing program 6 (id=1574):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0xfff}]}}}]}, 0x3c}}, 0x0) (fail_nth: 4)

2m10.622715003s ago: executing program 6 (id=1578):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', 0x89901)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x955, 0x7214, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "db19ff47"}]}}, 0x0}, 0x0)

2m8.687218638s ago: executing program 6 (id=1591):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa0000ae488120f10401106319010203010902120001000000000904fa000049ab6b00"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x8}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000002ba60000010000000600000024c72038", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000f00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ce0c1d8664adddbe6e8abc1370b8d5c0c86df5d9601e5629c21ea844f68c081b500f83dda16a612b59879df620a0c5"], 0x50)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x20}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount_setattr(0xffffffffffffffff, 0x0, 0x1900, &(0x7f0000001880)={0x10001b, 0xfa, 0x0, {r6}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x8927, &(0x7f0000000000)={'syztnl0\x00', 0x0})
r7 = socket$kcm(0xa, 0x1, 0x106)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x1000)
sendmsg$kcm(r7, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xff7ffffc}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000080)="240000001e006c0200009d100000000000050009000d000000e055245e000000c94b17", 0x23)
accept4$tipc(r0, 0x0, 0x0, 0x80000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x406c00, 0x0)

1m53.598018677s ago: executing program 55 (id=1591):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa0000ae488120f10401106319010203010902120001000000000904fa000049ab6b00"], 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
fcntl$setown(r3, 0x8, 0xffffffffffffffff)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x8}}, './file0\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e0000002ba60000010000000600000024c72038", @ANYRES32, @ANYBLOB="7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000020000000f00000000000000", @ANYRES32=r5, @ANYBLOB="00000000ce0c1d8664adddbe6e8abc1370b8d5c0c86df5d9601e5629c21ea844f68c081b500f83dda16a612b59879df620a0c5"], 0x50)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x20}, {0x28}, {0xb1, 0x0, 0x0, 0x1ff}, {0x6}]})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mount_setattr(0xffffffffffffffff, 0x0, 0x1900, &(0x7f0000001880)={0x10001b, 0xfa, 0x0, {r6}}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x8927, &(0x7f0000000000)={'syztnl0\x00', 0x0})
r7 = socket$kcm(0xa, 0x1, 0x106)
syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x1000)
sendmsg$kcm(r7, &(0x7f0000000d80)={&(0x7f0000000640)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x10001}, 0x80, 0x0}, 0x20000800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r8}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0xff7ffffc}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000080)="240000001e006c0200009d100000000000050009000d000000e055245e000000c94b17", 0x23)
accept4$tipc(r0, 0x0, 0x0, 0x80000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x406c00, 0x0)

1m47.64693675s ago: executing program 4 (id=1675):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000010009040000014b34ef0009056d"], 0x0)

1m46.161551892s ago: executing program 4 (id=1680):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005d958d08af0bf500c2df01020301090212000100000000090400e1"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000780)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$igmp6(0xa, 0x3, 0x2)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0)
r4 = syz_io_uring_setup(0x1ff, &(0x7f0000000240), &(0x7f00000000c0)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)
setitimer(0x0, &(0x7f0000000040)={{0x0, 0xfffffffffffffffe}}, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)

1m45.591859571s ago: executing program 5 (id=1683):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0xc0c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000028c00008c02"])

1m45.28511923s ago: executing program 5 (id=1684):
r0 = syz_usb_connect(0x3, 0x786, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0xf9, 0x8c, 0xdf, 0x8, 0x8fd, 0xa, 0x28a9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x774, 0x3, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x31, 0x1, 0x7, 0x8f, 0xe1, 0xb5, 0x8, [], [{{0x9, 0x5, 0xf, 0x4, 0x400, 0x3, 0x29, 0x4}}, {{0x9, 0x5, 0xc15af081860d4e4f, 0x0, 0x10, 0x40, 0xa, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xf2, 0x4}, @generic={0x18, 0x30, "eef00e0f434122e4043454509b503757bd7998ab7e5e"}]}}, {{0x9, 0x5, 0x4, 0x17, 0x400, 0xf9, 0x2, 0x8, [@generic={0x3c, 0x3, "c95f41c5f461f7354f0e57c3fba57cf73f48b89867360fa28772d27d60f059e0677e58bdd25c23554bda08cf0db27f1c859518329f32766dbcfc"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xfd, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6df9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x200, 0xe0, 0x5, 0x0, [@generic={0x6c, 0x7, "991bb04c5a29e1e31519768441563cf16b27cb3e24bd59aa521ebf430dbd1b4b6bd05a373eb27cc1edfaef235146c3bceea3b85806e53c4488d00240015e0b302c860fffe46135c7dc0a6e6211541685caa59af63f86587ba808a5d195d67f0dffb47e17e9c7cf41f9db"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x64e}]}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0x8, 0x8, [@generic={0x8d, 0x9, "9dd32e87b3f8cf7d2a0194ea8b8b56ae6178852116f62706465c9e8bcf588549cfed1417e7e6ebc75758c80b91db32a119914dca1052ce6d92e634b199a6e822eeefbaeb2df8efcced4c27f3fb415eceb8bb159bbe1a257193f14cc73be80d45d3264ad3a4004e1d31d954215bc782a646aff76d43df62cc9437316258290968fb8f67cc5d366abbb5f93f"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x10, 0x7, 0x2, 0x3, [@generic={0xe5, 0xd, "757afc8417260fbdc90174bd735d0a6e3b3f285647d7c60aec3c6b0c5fbfa89172acbaf34d4b0c1506d9d5df853afd1de8a979e59403704487c9f72cee5cea3601d21b0b6075d9665a762f9aaa44df6cc2949cde0bb8530a706a43248468830ef5561ebb62fc8c4bab87a1d3bd0171a318669de3e8ef3cead2984f9acfa59e63803150ba98dd45d7128d63e206a0106073c8ead4298b63cb2a01abaed4103ff184f5c93e6dc9f88af8e0780b52826559922db8cc8bb494d8ebfb81830b8d9dcd2f216b95423821bc7daf5e88bc77afcd978c6e834601a361ce5be682b2ec9ead3e57cc"}, @generic={0x68, 0x11, "9ba10f887e1ac6f470324dc5c67fdcfb907560e304718de6e0e93ef2ae5a92c84470127e5cdccd01959fc77369e7aae48ad7e9e24bc47730937e1316ebc845e7bd2a1e03b54f8ef826c4a8824bc7839bc3d9745e4f64ac6568894d5c7629c30d7ffdf19deb95"}]}}]}}, {{0x9, 0x4, 0xdd, 0x1, 0x4, 0xe5, 0xb9, 0x87, 0x20, [@uac_control={{0xa, 0x24, 0x1, 0x0, 0xa}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x1ff, 0x4, 0x2, 0x8, 0x6, 0xae}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0xf8, "ec147bef"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x3, "10d5"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0xfff2, 0x3, "8240a8ca2e"}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xe, "bb2951f1"}]}], [{{0x9, 0x5, 0x9, 0x8, 0x20, 0x8f, 0x81, 0x4, [@generic={0x33, 0x21, "7779c2094b3a75cedf2c23e5df732233019db76abaca01cee4242e2604f6015546495f06e10f6dabf18e4ec9e06dd164b9"}, @generic={0x22, 0x22, "1a6ea12d3dbf3c4db069af87e22fe92f603e4ab09bcffbd544abd4bcacc6a069"}]}}, {{0x9, 0x5, 0x0, 0x3, 0x400, 0x59, 0xff, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x1}]}}, {{0x9, 0x5, 0x9, 0x8, 0x400, 0x3, 0x5, 0x1, [@generic={0x67, 0xc, "1eadd26d7e0e989e756f0318c82e6195074a7d56f0e5f508929f5813785ff6b45f4b9c89a8d8222e1e65e78421dceafd9b5576054e2295b177452060c120d37f62285a1b1f8f5640581416f128f08f460d306c72cd91cb6692e2bb49e8f903122fcc296561"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x2f3fe83a064cd5bc, 0x7, 0x68, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1}]}}]}}, {{0x9, 0x4, 0xa5, 0x2, 0x5, 0x1a, 0x41, 0x7b, 0x80, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x6, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0xd, 0x910}]}}, {{0x9, 0x5, 0xe, 0xc, 0x40, 0xf, 0x63, 0x3, [@generic={0xae, 0x30, "4195b1acf10d889d23c7f4d9857883d5cd5fb25b3e625c733e077d8d918b30366cefe6822b0804348cb40baa92976c403194f8bdc311f0f40e3a95951af74f159cad9fdaa8361003990bb10bfe32c7232f3383ef3bb76bafc3a84e25a26c5d5977ce28218b677ed160f6d3710c940fdfd727e3af94c7ed4620714a55af6bc7179954605f1d8a2ee586711a398ca09253c858ace25470691e788bda1fe3f5545ee2c913e533093aa54369256b"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x10, 0x3, 0x52, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x4}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x0, 0x50, 0x3, [@generic={0x75, 0x5, "02f2d8dadc71a43cc3728222dc76740f9128ec5283a7f5d582e6e8166bd100844e77e1e0e6f9958a49529b0c2adeaf0e9454988712cd2a2a7aadaa609ba2c79b423b1a01d5ea16cd35ed2d70ae0b510cea7731dee826c72917f28354a30e2ccfd96641058e4475209446022d7e2df631507ba7"}, @generic={0xe5, 0x31, "bd006e1e34131b06947f1287032d10f854c01aab842c8983ebe66f18b323afbfb2a28d94117b8500b052f409811a3554e841e1b5c6f9a1dd4c44f8e0bcb1464f3b5f5b1d6d50e776cebde43ab08baf00e3c153824db1350b666c70efb88da492745b8b00860c87c1bf6b6f1de34816408141a2314c8c070fc7f3a1d0e842e7e9da75f60ac444fa2f5d91e820b31ba98d2bd513e71dfcc4908a020339621c9dd4052134298d759dcf22b064272a017fd5602a6449fc43998a6a453a2e4b5f31ec5f196ed9fd7a4d2ce73450de08113b2f9b373f873568e5b19d019858ce7bec02bab244"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x3ff, 0x99, 0x2, 0x0, [@generic={0xe9, 0x22, "f43fee9566dbf7240cfba2b9a81c1e255f0ef06eba852c63998785f12123b25577e2e1d611844d32f1af74fb422f238693ae5f0f09d7516020aeac3bcc52c846552f13863ecd0117d5bdee2f2f905ff677187c16b3e26b3c64f1ecdd8b29442d36e63cb337e3da7df1e038f6493dc73d6b9f630ab516809542b40a5cc63b6b3dce09f8499dc828cc6a27b8d94c9fd21c60cbc57efdf88f1635b51f5a132f803bc2e624f088b1eb877d3204d5e5101196f9b9f38d461c48d890b2c038d1f7f488a49f647bf2564290fc4218e3d87285e02796c0938a8a2840c08d0ea6d51c41fe0fdf3127544f26"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x7}]}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000002c0)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1m45.054941028s ago: executing program 0 (id=1641):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66", 0x42, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

1m44.899409301s ago: executing program 2 (id=1685):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
socket$inet6(0xa, 0x804, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$kcm(0x10, 0x2, 0x10)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1])

1m44.612132904s ago: executing program 2 (id=1686):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000202505a8a440000102030109021b00010100000009040000010701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b40)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x20, 0x0, 0x1}})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = syz_io_uring_setup(0x4ea1, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), 0x0)
syz_io_uring_setup(0x5176, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r3, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1})
io_uring_enter(r2, 0x1d2d, 0x0, 0x0, 0x0, 0x0)

1m44.155576287s ago: executing program 0 (id=1687):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x101)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)
close(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m43.491249156s ago: executing program 3 (id=1688):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x13, 0x4})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000200008902"])

1m43.361758814s ago: executing program 3 (id=1689):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000040)={@hyper})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000240)={&(0x7f0000000740)={{@hyper, 0x8001}, {@local, 0x7f}, 0x400, "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"}, 0x418})
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0)
signalfd4(r1, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800)
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x6, &(0x7f0000000080)=[{0x7, 0x8, 0x9, 0x6}, {0x9, 0xd, 0x7}, {0x2, 0x0, 0x78, 0x4}, {0x538, 0x5, 0x8, 0x6}, {0x7, 0x3, 0x5, 0x2}, {0x3708, 0xa, 0xf7, 0x6}]})

1m43.223931537s ago: executing program 4 (id=1690):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x2, 0x1, 0xae, 0x5, 0x4, 0x7, 0xd9, 0x0, 0x0, [0x8, 0x7, 0x8001, 0x2, 0x8, 0x80000001, 0xe3, 0x7]}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
r2 = eventfd(0x75)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
dup3(r4, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r3, 0x0)

1m43.210022136s ago: executing program 0 (id=1691):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20)
connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0xffffffff, @local, 0x8, 0x404}, 0x20)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300)=0x2000)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000440))
syz_io_uring_setup(0x26d0, &(0x7f0000000080)={0x0, 0xbcd8, 0x40, 0x0, 0x23}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140))
syz_io_uring_setup(0x16c0, &(0x7f0000000180)={0x0, 0x9f19, 0x200, 0x1, 0x6}, &(0x7f0000000200), &(0x7f0000000240)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x41, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r4}})

1m43.193590161s ago: executing program 5 (id=1692):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x8)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4041, &(0x7f0000000000)=0xfc9)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x2, 0x3, 0x0, "a9a2ddfa424de97bf5c9f6ff4857c050370808c9a30356571573574cec269bb1", 0x34324948})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x9f09, 0x4, 0x32315559, 0x0, 0x101, 0x5, 0xb0120376a8bf9ad7, 0xffff, 0x0, 0x3, 0x0, 0x3}})
r3 = syz_open_dev$media(&(0x7f0000000000), 0xc06, 0x420080)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x30}, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000001c0)={0x80000000, &(0x7f0000000100), &(0x7f0000000140)})
ioctl$MEDIA_IOC_ENUM_LINKS(r3, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)})
ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000004c0)={0x80000000, &(0x7f0000000400), &(0x7f0000000440)})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a118001500060014c3ff0000120800030043000040a80019000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f6d7f3ef48286112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaac99eddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb06000000588a6364", 0xd8}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x99, 0xba, 0x20, 0x50d, 0x121, 0x659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdf, 0xb9, 0xaf}}]}}]}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000009c0)="19d25f2094fafa149733bd30ed004b714e8ff57fcf6106f62fd4cdffc0c654a6fce4a5d1e17b3a4d9f0e3099b6fa26df5607f58ec0b34d73dcc66b0c61d74a53a1", 0x41}, {&(0x7f00000008c0)="213adae314975d7156e6adc9211c0348d91f668e4be5c4c6e41a15574590ac9ffc0592d090bf6094ea5677984dcfe871b270ce293f29634e96cc8f67ceebb601b4d8efe8bf04ec16f85dd3e51eb42701a84bbeb0064d348f22a4bf66f80b36154c5fab37735a5b0d906f5569caaf4cd5ba80bdcfa8cd822d44d168eb65d7a384060307e5353987cb59f242cc4aafaf7c7860db4a50c2c52fff793639dda543bd5f", 0xa1}], 0x2}}], 0x1, 0x0)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0xd00f935e928e83a1, 0x0)
r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000500)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})

1m42.987342741s ago: executing program 0 (id=1693):
r0 = socket(0x2, 0x80805, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="2080004086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r2, 0x107, 0x9, 0x0, &(0x7f0000000400))
syz_usb_control_io(r1, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io(r1, 0x0, 0x0) (async)
sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)='`', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x10}}], 0x2, 0x0)

1m42.865740356s ago: executing program 2 (id=1694):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0)
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000140)={0xa4a, 0x4e3bf1d1, 0x2, 0x11, 0x8000, 0x81, "4f1b50acd047e59fcef5394a909a25bb", 0x4, 0x0, 0x6, 0x0, 0x6, 0x3, 0x4})

1m42.67331112s ago: executing program 2 (id=1695):
open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b, 0x0, 0x0, 0x3, 0xffffffff}}, 0x50)
creat(&(0x7f0000000000)='./file0\x00', 0x40)
creat(0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m42.434317631s ago: executing program 3 (id=1696):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a40)=[{{&(0x7f0000000080)={0xa, 0x4005, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, 0x0}}], 0x1, 0xc0c0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000200009202"])

1m42.331407182s ago: executing program 2 (id=1697):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x104)

1m42.120150455s ago: executing program 2 (id=1698):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x30, 0xf00}}], 0x2, 0x24008000)

1m42.109956168s ago: executing program 3 (id=1699):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0)

1m41.786450677s ago: executing program 56 (id=1698):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000000180)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x30, 0xf00}}], 0x2, 0x24008000)

1m41.77832796s ago: executing program 3 (id=1701):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000240), 0x0, 0x0)
r1 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r1, 0x0, 0x0)
listen(r1, 0x101)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
accept4(r1, 0x0, 0x0, 0x0)
close(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

1m41.546213027s ago: executing program 4 (id=1702):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4003}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@ipv6_getaddr={0x2c, 0x16, 0x3c2be10bca706f15, 0x0, 0x25dfdbff, {0x2}, [@IFA_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x2c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) (async)
syz_emit_ethernet(0x3a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@nop]}}}}}}}, 0x0)

1m41.455392894s ago: executing program 5 (id=1703):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec", 0x41, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='hybla\x00', 0x6)

1m41.295437216s ago: executing program 4 (id=1704):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x404000, 0x8)
fadvise64(r0, 0x3, 0x5, 0x4)
utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000010c0)={&(0x7f00000000c0)=""/4096, 0x0, 0x1000, 0x7fff, 0x2}, 0x20)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001100)={'dvmrp0\x00', <r1=>0x0})
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000001180)={&(0x7f0000001140)=""/57, 0x10000, 0x0, 0x4, 0x3}, 0x20)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000f, 0x10, r0, 0x13eff000)
r2 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f00000011c0)={0x2c, 0x10, r1, 0x19, r2}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000001200)={r1, 0x1, 0x6, @random="3d36943e83a8"}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000001700)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000016c0)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x38, 0xe, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x384, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x19c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'vlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'dvmrp1\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'geneve1\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x101}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x24cd}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x58d}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xd4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x434}}, 0x8000)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_netdev_private(r4, 0x89fc, &(0x7f0000001740)="3038e0e1f7bed04bb5671e79751538955f71256bd8100842aef11098d8e5242ed6e5851485fe18d67c937e3ca27e375a675c7cb0163a42dd86fc9ace5ae39793")
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = getpgid(0xffffffffffffffff)
sched_setaffinity(r5, 0x8, &(0x7f0000001780)=0x7)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f00000017c0)={0x9, 0x1, 0xfffffffc, 0x1, 0x17, "a6fb980a33b6fc2be4ec350eae80589e66e3a3"})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000001900)={&(0x7f0000001800)=""/230, 0x20000, 0x1000, 0x1, 0x2}, 0x20)
ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000001940)={0x80000001, 0x5})
syz_open_procfs(r5, &(0x7f0000001980)='mountstats\x00')
r7 = socket$xdp(0x2c, 0x3, 0x0)
recvfrom(r3, &(0x7f00000019c0)=""/181, 0xb5, 0x1, &(0x7f0000001a80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80)
ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001b00)=0x98c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001b40)={'vlan0\x00', 0x2})
r8 = openat$random(0xffffffffffffff9c, &(0x7f0000001b80), 0x703480, 0x0)
ioctl$RNDADDTOENTCNT(r8, 0x40045201, &(0x7f0000001bc0))
r9 = fcntl$dupfd(r7, 0x0, r3)
setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r9, 0x84, 0x71, &(0x7f0000001c80)={0x0, 0x4}, 0x8)

1m41.109875863s ago: executing program 0 (id=1705):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_virt_wifi\x00', &(0x7f0000000380)=@ethtool_link_settings={0x4c, 0x2, 0x1, 0xae, 0x5, 0x4, 0x7, 0xd9, 0x0, 0x0, [0x8, 0x7, 0x8001, 0x2, 0x8, 0x80000001, 0xe3, 0x7]}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600))
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = syz_usb_connect(0x3, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x6d, 0xf5, 0x71, 0x8, 0x4e2, 0x1424, 0xc7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x2, 0x96, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xcc, 0x7, 0x0, 0x2, 0x59, 0x61, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x890, 0x0, 0x7, 0x8}, {0x6, 0x24, 0x1a, 0x5, 0x11}}]}}, {{0x9, 0x4, 0x1, 0xff, 0x0, 0x6e, 0xb8, 0xc1}}]}}]}}, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
r3 = eventfd(0x75)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000480)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000600)=""/81})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000900))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r3})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = dup3(r6, r5, 0x0)
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000840)=[@acquire], 0x0, 0x0, 0x0})
write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b)

1m40.82640151s ago: executing program 3 (id=1706):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
userfaultfd(0x80001) (async)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
gettid()
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r1=>0x0})
process_vm_writev(r1, 0x0, 0x5f, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/36, 0x1c}], 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) (async)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

1m40.431788941s ago: executing program 5 (id=1707):
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
socket$vsock_stream(0x28, 0x1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffc0000}]})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = dup(r2)
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000380)={@local, @empty}, 0x8) (async)
setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000380)={@local, @empty}, 0x8)
eventfd2(0x6, 0x1)
syz_emit_ethernet(0x4a, &(0x7f000001f8c0)=ANY=[@ANYBLOB="aaaa456c14f3ffffffffffff8864"], 0x0)
inotify_init1(0x80000)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000010800620000000000004c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006000000"], 0x30}, 0x1, 0xffffa888}, 0xfffe) (async)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000010800620000000000004c00", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000500100006000000"], 0x30}, 0x1, 0xffffa888}, 0xfffe)

1m40.019367681s ago: executing program 4 (id=1708):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x104)

1m39.991584909s ago: executing program 5 (id=1709):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (fail_nth: 20)

0s ago: executing program 57 (id=1708):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, 0x0, 0x104)

kernel console output (not intermixed with test programs):

6.320543][ T5966] usb usb6-port1: unable to enumerate USB device
[  346.335185][ T5889] usb 5-1: Using ep0 maxpacket: 16
[  346.345319][ T5845] usb 7-1: Using ep0 maxpacket: 8
[  346.350583][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  346.352021][ T5845] usb 7-1: config 150 has an invalid interface number: 204 but max is 1
[  346.362281][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  346.375979][ T5845] usb 7-1: config 150 has no interface number 0
[  346.380864][ T5889] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  346.400083][ T5845] usb 7-1: config 150 interface 204 has no altsetting 0
[  346.400275][ T5889] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  346.408252][ T5845] usb 7-1: config 150 interface 1 has no altsetting 0
[  346.426655][ T5845] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  346.430997][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  346.440870][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.454532][ T5845] usb 7-1: Product: syz
[  346.456545][ T5889] usb 5-1: config 0 descriptor??
[  346.467445][T13128] hsr_slave_0: entered promiscuous mode
[  346.473587][ T5845] usb 7-1: Manufacturer: syz
[  346.478798][T13128] hsr_slave_1: entered promiscuous mode
[  346.482438][ T5845] usb 7-1: SerialNumber: syz
[  346.489449][T13128] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  346.497247][T13128] Cannot create hsr debugfs directory
[  346.716184][ T5845] xr_serial 7-1:150.204: xr_serial converter detected
[  346.738094][ T5845] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  346.744752][ T5845] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  346.769545][ T5845] usb 7-1: USB disconnect, device number 24
[  346.784322][ T5845] xr_serial 7-1:150.204: device disconnected
[  346.800903][ T5834] udevd[5834]: setting mode of /dev/bus/usb/007/024 to 020664 failed: No such file or directory
[  346.824718][ T5834] udevd[5834]: setting owner of /dev/bus/usb/007/024 to uid=0, gid=0 failed: No such file or directory
[  346.900316][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  346.913924][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  346.922367][ T5889] usbhid 5-1:0.0: can't add hid device: -71
[  346.928983][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  346.956078][ T5889] usb 5-1: USB disconnect, device number 39
[  347.217920][T13128] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  347.232006][T13128] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  347.241490][T13128] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  347.253695][T13128] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  347.274974][ T5845] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  347.367260][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1473'.
[  347.378163][T13235] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1473'.
[  347.391462][T13235] erspan0: entered promiscuous mode
[  347.398777][T13235] erspan0: left promiscuous mode
[  347.424316][T13128] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.433067][ T5845] usb 4-1: Using ep0 maxpacket: 8
[  347.445304][ T5845] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  347.464084][ T5845] usb 4-1: config 150 has no interface number 0
[  347.490417][ T5845] usb 4-1: config 150 interface 204 has no altsetting 0
[  347.490828][T13128] 8021q: adding VLAN 0 to HW filter on device team0
[  347.515763][ T5845] usb 4-1: config 150 interface 1 has no altsetting 0
[  347.531504][ T5845] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  347.551818][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.570957][T13237] fuse: Unknown parameter '0x0000000000000004'
[  347.580238][T10217] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.587452][T10217] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.596572][ T5845] usb 4-1: Product: syz
[  347.600773][ T5845] usb 4-1: Manufacturer: syz
[  347.618243][ T5845] usb 4-1: SerialNumber: syz
[  347.626545][T10217] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.633698][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.840076][ T5845] xr_serial 4-1:150.204: xr_serial converter detected
[  347.858683][T13128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.903962][T13128] veth0_vlan: entered promiscuous mode
[  347.910784][ T5890] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  347.925056][ T5848] Bluetooth: hci2: command tx timeout
[  347.993034][T13128] veth1_vlan: entered promiscuous mode
[  348.087832][ T5890] usb 5-1: Using ep0 maxpacket: 32
[  348.127603][ T5890] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  348.164496][T13128] veth0_macvtap: entered promiscuous mode
[  348.176895][ T5966] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  348.193446][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.222329][T13128] veth1_macvtap: entered promiscuous mode
[  348.293893][ T5890] usb 5-1: config 0 descriptor??
[  348.348671][ T5890] gspca_main: sunplus-2.14.0 probing 041e:400b
[  348.390731][ T5966] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  348.443063][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.477193][ T5966] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.481327][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.502788][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.513788][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.528715][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.542980][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.562295][T13128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.579820][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.589955][ T5966] usb 6-1: Product: syz
[  348.593237][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.594558][ T5966] usb 6-1: Manufacturer: syz
[  348.608355][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.630486][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.645391][T13128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.661535][T13128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.673136][T13128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.705072][ T5966] usb 6-1: SerialNumber: syz
[  348.710762][T13128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.733571][T13128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.739476][ T5966] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  348.752798][T13128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.771616][T13128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.795527][T13250] hsr0: VLAN not yet supported
[  348.882969][  T970] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  349.037584][ T6321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.073020][ T6321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.117686][ T5845] xr_serial ttyUSB0: Failed to set reg 0x0c: -71
[  349.124682][ T5845] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  349.170385][ T5845] usb 4-1: USB disconnect, device number 27
[  349.185214][ T5890] gspca_sunplus: reg_w_riv err -71
[  349.190484][ T5890] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  349.198966][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.219337][ T5845] xr_serial 4-1:150.204: device disconnected
[  349.235824][ T5890] usb 5-1: USB disconnect, device number 40
[  349.283062][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.399187][T13247] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  349.560940][ T5890] usb 6-1: USB disconnect, device number 40
[  349.864274][T13268] netlink: zone id is out of range
[  349.926864][  T970] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  349.934216][  T970] ath9k_htc: Failed to initialize the device
[  349.949101][ T5890] usb 6-1: ath9k_htc: USB layer deinitialized
[  350.005789][ T5848] Bluetooth: hci2: command tx timeout
[  350.135356][ T5845] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  350.275000][ T5891] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  350.295323][ T5845] usb 5-1: Using ep0 maxpacket: 32
[  350.303292][ T5845] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  350.320740][T13283] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1485'.
[  350.345605][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.381285][ T5845] usb 5-1: config 0 descriptor??
[  350.412921][ T5845] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  350.425842][ T5891] usb 4-1: Using ep0 maxpacket: 8
[  350.451253][ T5891] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  350.475183][ T5891] usb 4-1: config 150 has no interface number 0
[  350.501493][ T5891] usb 4-1: config 150 interface 204 has no altsetting 0
[  350.535343][ T5891] usb 4-1: config 150 interface 1 has no altsetting 0
[  350.558167][ T5891] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  350.573107][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.584030][ T5891] usb 4-1: Product: syz
[  350.594434][ T5891] usb 4-1: Manufacturer: syz
[  350.604085][ T5891] usb 4-1: SerialNumber: syz
[  350.853466][ T5891] xr_serial 4-1:150.204: xr_serial converter detected
[  350.880067][T13299] FAULT_INJECTION: forcing a failure.
[  350.880067][T13299] name failslab, interval 1, probability 0, space 0, times 0
[  350.905601][T13299] CPU: 0 UID: 0 PID: 13299 Comm: syz.2.1487 Not tainted 6.12.0-rc6-syzkaller #0
[  350.914690][T13299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  350.924803][T13299] Call Trace:
[  350.928110][T13299]  <TASK>
[  350.931067][T13299]  dump_stack_lvl+0x241/0x360
[  350.935784][T13299]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.941015][T13299]  ? __pfx__printk+0x10/0x10
[  350.945643][T13299]  should_fail_ex+0x3b0/0x4e0
[  350.950342][T13299]  ? dst_alloc+0x12b/0x190
[  350.954774][T13299]  should_failslab+0xac/0x100
[  350.959473][T13299]  ? dst_alloc+0x12b/0x190
[  350.963910][T13299]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  350.969311][T13299]  ? __pfx_ip6_dst_gc+0x10/0x10
[  350.974195][T13299]  dst_alloc+0x12b/0x190
[  350.978466][T13299]  ip6_create_rt_rcu+0x2b8/0x5e0
[  350.983427][T13299]  ? __pfx_ip6_create_rt_rcu+0x10/0x10
[  350.988915][T13299]  ip6_pol_route_lookup+0xefd/0x1120
[  350.994220][T13299]  ? mark_lock+0x9a/0x360
[  350.998584][T13299]  ? ip6_pol_route_lookup+0x10b/0x1120
[  351.004064][T13299]  ? __pfx_ip6_pol_route_lookup+0x10/0x10
[  351.009825][T13299]  ? validate_chain+0x11e/0x5920
[  351.014791][T13299]  fib6_rule_lookup+0x692/0x790
[  351.019673][T13299]  ? __pfx_ip6_pol_route_lookup+0x10/0x10
[  351.025418][T13299]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  351.030826][T13299]  ? __lock_acquire+0x1384/0x2050
[  351.035885][T13299]  ? rt6_lookup+0xd3/0x220
[  351.040329][T13299]  rt6_lookup+0x144/0x220
[  351.044685][T13299]  ? __pfx_rt6_lookup+0x10/0x10
[  351.049567][T13299]  ? __pfx___might_resched+0x10/0x10
[  351.054878][T13299]  ip6_mc_find_dev_rtnl+0x9e/0x1e0
[  351.060018][T13299]  ip6_mc_source+0x140/0x10e0
[  351.064715][T13299]  ? __ipv6_sock_mc_join+0x59a/0x7e0
[  351.070039][T13299]  do_ipv6_mcast_group_source+0x4bc/0x5d0
[  351.075790][T13299]  ? __pfx_do_ipv6_mcast_group_source+0x10/0x10
[  351.082053][T13299]  ? mark_lock+0x9a/0x360
[  351.086407][T13299]  ? __lock_acquire+0x1384/0x2050
[  351.091733][T13299]  ? mark_lock+0x9a/0x360
[  351.096197][T13299]  ? do_ipv6_setsockopt+0xbf3/0x3630
[  351.101504][T13299]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  351.107259][T13299]  do_ipv6_setsockopt+0x150b/0x3630
[  351.112493][T13299]  ? __pfx_do_ipv6_setsockopt+0x10/0x10
[  351.118080][T13299]  ? __pfx___might_resched+0x10/0x10
[  351.123456][T13299]  ? __lock_acquire+0x1384/0x2050
[  351.128520][T13299]  ? aa_sk_perm+0x96d/0xab0
[  351.133050][T13299]  ? __pfx_aa_sk_perm+0x10/0x10
[  351.137923][T13299]  ? __pfx_lock_acquire+0x10/0x10
[  351.142983][T13299]  ipv6_setsockopt+0x5d/0x170
[  351.147682][T13299]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  351.153618][T13299]  do_sock_setsockopt+0x3af/0x720
[  351.158679][T13299]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  351.164250][T13299]  ? __fget_files+0x29/0x470
[  351.168870][T13299]  ? __fget_files+0x3f3/0x470
[  351.173593][T13299]  ? __fget_files+0x29/0x470
[  351.178221][T13299]  __sys_setsockopt+0x1a2/0x250
[  351.183107][T13299]  __x64_sys_setsockopt+0xb5/0xd0
[  351.188163][T13299]  do_syscall_64+0xf3/0x230
[  351.192695][T13299]  ? clear_bhb_loop+0x35/0x90
[  351.197400][T13299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.203320][T13299] RIP: 0033:0x7f1af597e719
[  351.207756][T13299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.227392][T13299] RSP: 002b:00007f1af66bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  351.235838][T13299] RAX: ffffffffffffffda RBX: 00007f1af5b35f80 RCX: 00007f1af597e719
[  351.243837][T13299] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000004
[  351.251830][T13299] RBP: 00007f1af66bc090 R08: 0000000000000108 R09: 0000000000000000
[  351.259821][T13299] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001
[  351.267815][T13299] R13: 0000000000000000 R14: 00007f1af5b35f80 R15: 00007f1af5c5fa28
[  351.275836][T13299]  </TASK>
[  351.387248][ T5891] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  351.393734][ T5891] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  351.470994][T13308] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1489'.
[  351.492659][ T5891] usb 4-1: USB disconnect, device number 28
[  351.501669][ T5891] xr_serial 4-1:150.204: device disconnected
[  351.724988][ T5889] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  351.790634][T13317] FAULT_INJECTION: forcing a failure.
[  351.790634][T13317] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  351.804691][ T5845] gspca_vc032x: reg_w err -71
[  351.809516][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  351.818780][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  351.824116][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  351.830258][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  351.836726][T13317] CPU: 0 UID: 0 PID: 13317 Comm: syz.5.1491 Not tainted 6.12.0-rc6-syzkaller #0
[  351.845791][T13317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  351.855873][T13317] Call Trace:
[  351.859170][T13317]  <TASK>
[  351.862115][T13317]  dump_stack_lvl+0x241/0x360
[  351.866826][T13317]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.872058][T13317]  ? __pfx__printk+0x10/0x10
[  351.876690][T13317]  should_fail_ex+0x3b0/0x4e0
[  351.881396][T13317]  prepare_alloc_pages+0x1da/0x5b0
[  351.886546][T13317]  __alloc_pages_noprof+0x16f/0x710
[  351.891773][T13317]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  351.897541][T13317]  alloc_pages_mpol_noprof+0x3e8/0x680
[  351.903037][T13317]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  351.909041][T13317]  vma_alloc_folio_noprof+0x12e/0x230
[  351.914420][T13317]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  351.920340][T13317]  folio_prealloc+0x31/0x170
[  351.924948][T13317]  handle_pte_fault+0x24dd/0x6820
[  351.930072][T13317]  ? mark_lock+0x9a/0x360
[  351.934418][T13317]  ? mark_lock+0x9a/0x360
[  351.938757][T13317]  ? __pfx_handle_pte_fault+0x10/0x10
[  351.944131][T13317]  ? __lock_acquire+0x1384/0x2050
[  351.949183][T13317]  ? __pfx_lock_acquire+0x10/0x10
[  351.954235][T13317]  ? do_raw_spin_lock+0x14f/0x370
[  351.959282][T13317]  handle_mm_fault+0x1106/0x1bb0
[  351.964255][T13317]  ? __pfx_handle_mm_fault+0x10/0x10
[  351.969551][T13317]  ? follow_page_pte+0x9cc/0x2010
[  351.974583][T13317]  ? __pfx_find_vma+0x10/0x10
[  351.979270][T13317]  ? vma_is_secretmem+0xd/0x50
[  351.984032][T13317]  ? check_vma_flags+0x52b/0x5a0
[  351.988995][T13317]  __get_user_pages+0x1c82/0x49e0
[  351.994080][T13317]  ? __pfx___get_user_pages+0x10/0x10
[  351.999473][T13317]  ? __pfx_down_read_killable+0x10/0x10
[  352.005038][T13317]  ? is_valid_gup_args+0x124/0x200
[  352.010156][T13317]  get_user_pages_unlocked+0x2a8/0x9d0
[  352.015632][T13317]  ? __pfx_get_user_pages_unlocked+0x10/0x10
[  352.021791][T13317]  hva_to_pfn+0x29b/0x10d0
[  352.026210][T13317]  ? xas_start+0x3cc/0x7b0
[  352.030636][T13317]  ? xas_load+0x58d/0x5c0
[  352.034961][T13317]  ? __pfx_hva_to_pfn+0x10/0x10
[  352.039815][T13317]  ? xa_load+0x2dd/0x350
[  352.044056][T13317]  ? xa_load+0x147/0x350
[  352.048302][T13317]  ? __pfx_xa_load+0x10/0x10
[  352.052905][T13317]  ? __gfn_to_pfn_memslot+0x1a4/0x360
[  352.058292][T13317]  kvm_faultin_pfn+0x74a/0x1cc0
[  352.063154][T13317]  ? __pfx_kvm_faultin_pfn+0x10/0x10
[  352.068440][T13317]  ? rcu_qs+0xf1/0x190
[  352.072508][T13317]  ? __pfx_rcu_qs+0x10/0x10
[  352.077022][T13317]  ? __pfx_fast_page_fault+0x10/0x10
[  352.082314][T13317]  ? __kvm_mmu_topup_memory_cache+0x37e/0x6b0
[  352.088385][T13317]  kvm_tdp_page_fault+0x21a/0x320
[  352.093416][T13317]  kvm_mmu_do_page_fault+0x589/0xca0
[  352.098717][T13317]  ? __pfx_kvm_mmu_do_page_fault+0x10/0x10
[  352.104653][T13317]  kvm_mmu_page_fault+0x2db/0xb20
[  352.109722][T13317]  ? __pfx_kvm_mmu_page_fault+0x10/0x10
[  352.115284][T13317]  ? rcu_is_watching+0x15/0xb0
[  352.120057][T13317]  ? handle_ept_violation+0x27d/0x570
[  352.125434][T13317]  ? vmx_handle_exit+0x1073/0x1c00
[  352.130574][T13317]  ? __pfx_handle_ept_violation+0x10/0x10
[  352.136300][T13317]  vmx_handle_exit+0x107c/0x1c00
[  352.141254][T13317]  vcpu_run+0x6e4f/0x8930
[  352.145598][T13317]  ? vcpu_run+0x5ca6/0x8930
[  352.150158][T13317]  ? __pfx_vcpu_run+0x10/0x10
[  352.154843][T13317]  ? __local_bh_enable_ip+0x168/0x200
[  352.160222][T13317]  ? lockdep_hardirqs_on+0x99/0x150
[  352.165422][T13317]  ? __pfx_lock_acquire+0x10/0x10
[  352.170447][T13317]  ? fpu_swap_kvm_fpstate+0x82/0x460
[  352.175732][T13317]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  352.181452][T13317]  ? xfd_validate_state+0x6e/0x150
[  352.186566][T13317]  ? rcu_is_watching+0x15/0xb0
[  352.191332][T13317]  ? rcu_is_watching+0x15/0xb0
[  352.196096][T13317]  kvm_arch_vcpu_ioctl_run+0xa73/0x19d0
[  352.201659][T13317]  ? kvm_arch_vcpu_ioctl_run+0x1c9/0x19d0
[  352.207377][T13317]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  352.213357][T13317]  ? __mutex_trylock_common+0x183/0x2e0
[  352.218902][T13317]  ? __pfx___might_resched+0x10/0x10
[  352.224364][T13317]  ? __pfx___mutex_trylock_common+0x10/0x10
[  352.230259][T13317]  ? rcu_is_watching+0x15/0xb0
[  352.235022][T13317]  ? trace_contention_end+0x3c/0x120
[  352.240590][T13317]  ? __mutex_lock+0x2ef/0xd70
[  352.245303][T13317]  ? kfree+0x1a0/0x440
[  352.249392][T13317]  ? tomoyo_path_number_perm+0x68d/0x880
[  352.255037][T13317]  ? kvm_vcpu_ioctl+0x1da/0xea0
[  352.259897][T13317]  ? __pfx___mutex_lock+0x10/0x10
[  352.264931][T13317]  ? tomoyo_path_number_perm+0x208/0x880
[  352.270563][T13317]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  352.276551][T13317]  kvm_vcpu_ioctl+0x91a/0xea0
[  352.281237][T13317]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  352.286450][T13317]  ? __fget_files+0x29/0x470
[  352.291038][T13317]  ? __fget_files+0x3f3/0x470
[  352.295718][T13317]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  352.300919][T13317]  __se_sys_ioctl+0xf9/0x170
[  352.305514][T13317]  do_syscall_64+0xf3/0x230
[  352.310015][T13317]  ? clear_bhb_loop+0x35/0x90
[  352.314690][T13317]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.320577][T13317] RIP: 0033:0x7f371c37e719
[  352.324988][T13317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  352.344594][T13317] RSP: 002b:00007f371d1b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.353020][T13317] RAX: ffffffffffffffda RBX: 00007f371c535f80 RCX: 00007f371c37e719
[  352.360997][T13317] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  352.368976][T13317] RBP: 00007f371d1b5090 R08: 0000000000000000 R09: 0000000000000000
[  352.376947][T13317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.384916][T13317] R13: 0000000000000000 R14: 00007f371c535f80 R15: 00007f371c65fa28
[  352.392898][T13317]  </TASK>
[  352.397389][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.402742][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.404961][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  352.408671][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.418604][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.419555][ T5889] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  352.423892][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.423907][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.423919][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.423931][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.433526][ T5889] usb 3-1: config 0 has no interface number 0
[  352.437587][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.448818][ T5889] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  352.448854][ T5889] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  352.464928][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.505722][ T5889] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  352.521268][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.526676][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.531987][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.536366][ T5889] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  352.538506][ T5845] gspca_vc032x: I2c Bus Busy Wait 00
[  352.548285][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  352.552001][ T5845] gspca_vc032x: Unknown sensor...
[  352.565403][ T5845] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  352.599129][ T5845] usb 5-1: USB disconnect, device number 41
[  352.632075][ T5889] usb 3-1: Product: syz
[  352.636379][ T5889] usb 3-1: SerialNumber: syz
[  352.659611][ T5889] usb 3-1: config 0 descriptor??
[  352.725373][T13305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  352.766584][ T5889] cm109 3-1:0.8: invalid payload size 1024, expected 4
[  352.775167][ T5889] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input37
[  352.903550][T13252] syz.6.1480 (13252): drop_caches: 1
[  353.106440][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  353.202529][T13338] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1497'.
[  353.276099][T13342] fuse: Bad value for 'fd'
[  353.315516][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  353.315570][ T5892] usb 3-1: USB disconnect, device number 12
[  353.322496][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  353.348323][ T5892] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  353.386995][T13345] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1500'.
[  353.402349][T13345] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  353.415085][T13345] erspan1: entered promiscuous mode
[  353.420327][T13345] erspan1: entered allmulticast mode
[  353.465181][   T47] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  353.553203][   T29] audit: type=1326 audit(1730749566.433:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.581827][   T29] audit: type=1326 audit(1730749566.433:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.606009][   T29] audit: type=1326 audit(1730749566.433:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.635034][   T47] usb 5-1: Using ep0 maxpacket: 8
[  353.641924][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.642572][   T29] audit: type=1326 audit(1730749566.433:8139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.657083][   T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.714274][   T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  353.724111][   T29] audit: type=1326 audit(1730749566.433:8140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.726607][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.746458][    C1] vkms_vblank_simulate: vblank timer overrun
[  353.763993][   T47] usb 5-1: config 0 descriptor??
[  353.805002][ T5891] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  353.812843][ T5892] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  353.836688][   T29] audit: type=1326 audit(1730749566.433:8141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.870133][   T29] audit: type=1326 audit(1730749566.433:8142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.894661][   T29] audit: type=1326 audit(1730749566.433:8143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.919595][   T29] audit: type=1326 audit(1730749566.433:8144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.942738][   T29] audit: type=1326 audit(1730749566.443:8145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13350 comm="syz.5.1501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  353.984932][ T5891] usb 6-1: Using ep0 maxpacket: 16
[  353.990212][ T5892] usb 3-1: Using ep0 maxpacket: 16
[  353.997874][ T5892] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  354.006121][ T5891] usb 6-1: config 0 has no interfaces?
[  354.012246][ T5892] usb 3-1: config 0 has no interface number 0
[  354.021355][ T5892] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  354.040867][ T5891] usb 6-1: New USB device found, idVendor=07c9, idProduct=b100, bcdDevice=79.c0
[  354.056415][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.064570][ T5891] usb 6-1: Product: syz
[  354.069014][ T5892] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  354.075169][ T5889] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  354.080251][ T5891] usb 6-1: Manufacturer: syz
[  354.080274][ T5891] usb 6-1: SerialNumber: syz
[  354.081232][ T5892] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  354.090384][T11938] usb 7-1: new high-speed USB device number 25 using dummy_hcd
[  354.094692][ T5891] usb 6-1: config 0 descriptor??
[  354.137098][ T5892] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  354.155283][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  354.165973][ T5892] usb 3-1: Product: syz
[  354.170281][ T5892] usb 3-1: SerialNumber: syz
[  354.175629][   T47] logitech 0003:046D:C20E.0012: rdesc size test failed for formula gp
[  354.187604][ T5892] usb 3-1: config 0 descriptor??
[  354.193404][T13305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  354.207993][   T47] logitech 0003:046D:C20E.0012: collection stack underflow
[  354.217183][   T47] logitech 0003:046D:C20E.0012: item 0 4 0 12 parsing failed
[  354.227479][ T5892] cm109 3-1:0.8: invalid payload size 1024, expected 4
[  354.230236][   T47] logitech 0003:046D:C20E.0012: parse failed
[  354.242158][   T47] logitech 0003:046D:C20E.0012: probe with driver logitech failed with error -22
[  354.246632][ T5892] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input38
[  354.284999][ T5889] usb 4-1: Using ep0 maxpacket: 8
[  354.291771][T11938] usb 7-1: Using ep0 maxpacket: 16
[  354.300940][ T5889] usb 4-1: config 150 has an invalid interface number: 204 but max is 1
[  354.321822][T11938] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  354.340427][ T5889] usb 4-1: config 150 has no interface number 0
[  354.347389][ T5889] usb 4-1: config 150 interface 204 has no altsetting 0
[  354.354373][ T5889] usb 4-1: config 150 interface 1 has no altsetting 0
[  354.372558][T11938] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  354.384132][ T5889] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  354.404697][T11938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.413237][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  354.425280][   T47] usb 5-1: USB disconnect, device number 42
[  354.433988][T11938] usb 7-1: Product: syz
[  354.443565][T11938] usb 7-1: Manufacturer: syz
[  354.451282][ T5889] usb 4-1: Product: syz
[  354.458663][T11938] usb 7-1: SerialNumber: syz
[  354.465718][ T5889] usb 4-1: Manufacturer: syz
[  354.480392][T11938] usb 7-1: config 0 descriptor??
[  354.490821][ T5889] usb 4-1: SerialNumber: syz
[  354.527337][T11938] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  354.546775][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  354.720595][ T5889] xr_serial 4-1:150.204: xr_serial converter detected
[  354.753811][T13363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  354.755707][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  354.765549][T13363] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  354.804605][   T25] usb 7-1: USB disconnect, device number 25
[  354.806860][ T6321] usb 7-1: Failed to submit usb control message: -71
[  354.835113][ T6321] usb 7-1: unable to send the bmi data to the device: -71
[  354.851607][ T6321] usb 7-1: unable to get target info from device
[  354.859984][ T6321] usb 7-1: could not get target info (-71)
[  354.871259][ T6321] usb 7-1: could not probe fw (-71)
[  354.945496][ T5889] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  354.965455][ T5889] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  354.990726][ T5889] usb 4-1: USB disconnect, device number 29
[  354.998608][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  355.018855][ T5889] xr_serial 4-1:150.204: device disconnected
[  355.209068][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  355.237478][T13395] usb usb8: usbfs: process 13395 (syz.4.1505) did not claim interface 0 before use
[  355.256946][T13395] netlink: 8192 bytes leftover after parsing attributes in process `syz.4.1505'.
[  355.360720][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  355.391850][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'.
[  355.415321][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  355.427886][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'.
[  355.441682][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  355.487660][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  355.705713][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  355.848566][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'.
[  355.907137][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  355.974139][T13416] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1509'.
[  356.050323][T13418] fuse: Bad value for 'fd'
[  356.108439][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  356.309961][T13305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.328237][T13305] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.346707][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  356.522408][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  356.530048][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  356.538357][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  356.545748][  T970] usb 3-1: USB disconnect, device number 13
[  356.554827][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  356.561818][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  356.602961][ T5891] usb 6-1: USB disconnect, device number 41
[  356.634695][  T970] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  356.859202][T13442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1516'.
[  357.040781][T13453] input: syz0 as /devices/virtual/input/input39
[  357.157296][ T5889] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  357.231244][T13463] FAULT_INJECTION: forcing a failure.
[  357.231244][T13463] name failslab, interval 1, probability 0, space 0, times 0
[  357.249324][T13463] CPU: 0 UID: 0 PID: 13463 Comm: syz.3.1520 Not tainted 6.12.0-rc6-syzkaller #0
[  357.258494][T13463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  357.268585][T13463] Call Trace:
[  357.271889][T13463]  <TASK>
[  357.274847][T13463]  dump_stack_lvl+0x241/0x360
[  357.279558][T13463]  ? __pfx_dump_stack_lvl+0x10/0x10
[  357.284787][T13463]  ? __pfx__printk+0x10/0x10
[  357.289424][T13463]  ? __kmalloc_cache_noprof+0x44/0x2c0
[  357.294914][T13463]  ? __pfx___might_resched+0x10/0x10
[  357.300238][T13463]  should_fail_ex+0x3b0/0x4e0
[  357.304927][T13463]  should_failslab+0xac/0x100
[  357.309630][T13463]  ? ovs_ct_limit_cmd_set+0x2f9/0xaf0
[  357.315024][T13463]  __kmalloc_cache_noprof+0x6c/0x2c0
[  357.320428][T13463]  ovs_ct_limit_cmd_set+0x2f9/0xaf0
[  357.325645][T13463]  genl_rcv_msg+0xb14/0xec0
[  357.330145][T13463]  ? mark_lock+0x9a/0x360
[  357.334484][T13463]  ? __pfx_genl_rcv_msg+0x10/0x10
[  357.339547][T13463]  ? __pfx_lock_acquire+0x10/0x10
[  357.344587][T13463]  ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10
[  357.350306][T13463]  ? __pfx___might_resched+0x10/0x10
[  357.355615][T13463]  netlink_rcv_skb+0x1e3/0x430
[  357.360413][T13463]  ? __pfx_genl_rcv_msg+0x10/0x10
[  357.363433][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.365472][T13463]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  357.365510][T13463]  ? __netlink_deliver_tap+0x77e/0x7c0
[  357.365543][T13463]  genl_rcv+0x28/0x40
[  357.385017][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  357.386365][T13463]  netlink_unicast+0x7f6/0x990
[  357.386401][T13463]  ? __pfx_netlink_unicast+0x10/0x10
[  357.390479][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.399366][T13463]  ? __virt_addr_valid+0x183/0x530
[  357.399399][T13463]  ? __check_object_size+0x48e/0x900
[  357.399429][T13463]  netlink_sendmsg+0x8e4/0xcb0
[  357.399462][T13463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.399486][T13463]  ? aa_sock_msg_perm+0x91/0x160
[  357.442799][T13463]  ? __pfx_netlink_sendmsg+0x10/0x10
[  357.448089][T13463]  __sock_sendmsg+0x221/0x270
[  357.452773][T13463]  ____sys_sendmsg+0x52a/0x7e0
[  357.456424][ T5889] usb 3-1: config 0 descriptor??
[  357.457533][T13463]  ? __pfx_____sys_sendmsg+0x10/0x10
[  357.467769][T13463]  __sys_sendmsg+0x292/0x380
[  357.472387][T13463]  ? __pfx___sys_sendmsg+0x10/0x10
[  357.477537][T13463]  ? __pfx_vfs_write+0x10/0x10
[  357.478130][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  357.482322][T13463]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  357.494837][T13463]  ? do_syscall_64+0x100/0x230
[  357.499627][T13463]  ? do_syscall_64+0xb6/0x230
[  357.504327][T13463]  do_syscall_64+0xf3/0x230
[  357.508845][T13463]  ? clear_bhb_loop+0x35/0x90
[  357.513549][T13463]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  357.519464][T13463] RIP: 0033:0x7fb713d7e719
[  357.523894][T13463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  357.543505][T13463] RSP: 002b:00007fb714c42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  357.551929][T13463] RAX: ffffffffffffffda RBX: 00007fb713f35f80 RCX: 00007fb713d7e719
[  357.559932][T13463] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003
[  357.567930][T13463] RBP: 00007fb714c42090 R08: 0000000000000000 R09: 0000000000000000
[  357.575920][T13463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  357.583909][T13463] R13: 0000000000000000 R14: 00007fb713f35f80 R15: 00007fb71405fa28
[  357.591923][T13463]  </TASK>
[  357.595079][    C0] vkms_vblank_simulate: vblank timer overrun
[  357.737733][ T5889] pwc: send_video_command error -71
[  357.742992][ T5889] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  357.803409][ T5889] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  357.810639][T13472] fuse: Bad value for 'fd'
[  357.868952][ T5889] usb 3-1: USB disconnect, device number 14
[  358.265162][   T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  358.274419][ T5889] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  358.459044][   T47] usb 5-1: Using ep0 maxpacket: 32
[  358.480494][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.540204][ T5889] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  358.554897][   T47] usb 5-1: config 0 has an invalid interface number: 68 but max is 0
[  358.563112][   T47] usb 5-1: config 0 has no interface number 0
[  358.578712][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.590699][   T47] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  358.603333][   T29] kauditd_printk_skb: 32 callbacks suppressed
[  358.603351][   T29] audit: type=1326 audit(1730749571.483:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.6.1532" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba7757e719 code=0x0
[  358.634591][ T5889] usb 3-1: config 0 descriptor??
[  358.642132][   T47] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0xF has invalid maxpacket 512, setting to 64
[  358.657203][ T5889] pwc: Askey VC010 type 2 USB webcam detected.
[  358.674573][   T47] usb 5-1: config 0 interface 68 altsetting 128 endpoint 0xC has invalid maxpacket 1023, setting to 64
[  358.715099][   T47] usb 5-1: config 0 interface 68 has no altsetting 0
[  358.747047][   T47] usb 5-1: New USB device found, idVendor=0711, idProduct=0901, bcdDevice=a8.06
[  358.764932][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.793370][   T47] usb 5-1: Product: syz
[  358.803460][   T47] usb 5-1: Manufacturer: syz
[  358.823822][   T47] usb 5-1: SerialNumber: syz
[  358.848611][   T47] usb 5-1: config 0 descriptor??
[  359.067060][ T5889] pwc: recv_control_msg error -32 req 02 val 2b00
[  359.078840][ T5889] pwc: recv_control_msg error -32 req 02 val 2700
[  359.087236][ T5889] pwc: recv_control_msg error -32 req 02 val 2c00
[  359.097229][ T5889] pwc: recv_control_msg error -32 req 04 val 1000
[  359.120409][ T5889] pwc: recv_control_msg error -32 req 04 val 1300
[  359.139203][ T5889] pwc: recv_control_msg error -32 req 04 val 1400
[  359.147432][ T5889] pwc: recv_control_msg error -32 req 02 val 2000
[  359.154710][ T5889] pwc: recv_control_msg error -32 req 02 val 2100
[  359.163511][ T5889] pwc: recv_control_msg error -32 req 04 val 1500
[  359.171201][ T5889] pwc: recv_control_msg error -32 req 02 val 2500
[  359.179304][ T5889] pwc: recv_control_msg error -32 req 02 val 2400
[  359.187489][ T5889] pwc: recv_control_msg error -32 req 02 val 2600
[  359.211930][ T5889] pwc: recv_control_msg error -71 req 02 val 2900
[  359.238497][ T5889] pwc: recv_control_msg error -71 req 02 val 2800
[  359.245969][ T5889] pwc: recv_control_msg error -71 req 04 val 1100
[  359.253006][ T5889] pwc: recv_control_msg error -71 req 04 val 1200
[  359.284072][ T5889] pwc: Registered as video103.
[  359.302740][ T5889] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40
[  359.355341][ T5889] usb 3-1: USB disconnect, device number 15
[  359.687698][T13556] netlink: 'syz.5.1535': attribute type 12 has an invalid length.
[  359.710523][T13556] netlink: 197276 bytes leftover after parsing attributes in process `syz.5.1535'.
[  360.072604][T13563] fuse: Invalid rootmode
[  360.375908][   T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  360.485633][ T5889] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  360.555003][   T25] usb 4-1: Using ep0 maxpacket: 16
[  360.563713][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.595398][   T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[  360.621922][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7
[  360.645651][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[  360.670042][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  360.683130][ T5889] usb 6-1: Using ep0 maxpacket: 32
[  360.703267][ T5889] usb 6-1: config 0 has an invalid interface number: 124 but max is 0
[  360.712138][ T5889] usb 6-1: config 0 has no interface number 0
[  360.712782][   T25] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  360.735156][ T5889] usb 6-1: config 0 interface 124 altsetting 0 has an endpoint descriptor with address 0x1A, changing to 0xA
[  360.755307][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.763636][   T25] usb 4-1: Product: syz
[  360.768747][   T25] usb 4-1: Manufacturer: syz
[  360.776045][ T5889] usb 6-1: New USB device found, idVendor=0bfd, idProduct=001c, bcdDevice=8c.e8
[  360.787277][   T47] sisusb 5-1:0.68: Invalid USB2VGA device
[  360.793057][   T47] sisusb 5-1:0.68: probe with driver sisusb failed with error -22
[  360.811871][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.820356][   T25] usb 4-1: SerialNumber: syz
[  360.830097][ T5889] usb 6-1: Product: syz
[  360.848839][   T47] usb 5-1: USB disconnect, device number 43
[  360.855614][   T25] usb 4-1: config 0 descriptor??
[  360.875240][ T5889] usb 6-1: Manufacturer: syz
[  360.879891][ T5889] usb 6-1: SerialNumber: syz
[  360.894308][   T25] xbox_remote_probe: endpoint_in message size==0?
[  360.930731][ T5889] usb 6-1: config 0 descriptor??
[  360.949490][ T5889] kvaser_usb 6-1:0.124: error -ENODEV: Cannot get usb endpoint(s)
[  361.094138][T13606] xt_NFQUEUE: number of total queues is 0
[  361.156763][   T47] usb 6-1: USB disconnect, device number 42
[  361.383361][   T29] audit: type=1326 audit(1730749574.263:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13617 comm="syz.2.1544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x0
[  361.555142][ T5889] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  361.654941][   T47] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  361.740703][ T5889] usb 7-1: unable to get BOS descriptor or descriptor too short
[  361.761027][ T5889] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.775536][ T5889] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  361.784939][ T5889] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  361.805278][ T5889] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  361.814578][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.823811][ T5889] usb 7-1: Product: syz
[  361.831386][ T5889] usb 7-1: Manufacturer: syz
[  361.836610][   T47] usb 5-1: config 0 has an invalid interface number: 27 but max is 0
[  361.852348][ T5889] usb 7-1: SerialNumber: syz
[  361.857235][   T47] usb 5-1: config 0 has no interface number 0
[  361.870060][   T47] usb 5-1: config 0 interface 27 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  361.884353][   T47] usb 5-1: config 0 interface 27 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  361.897365][   T47] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  361.911406][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.924889][   T47] usb 5-1: config 0 descriptor??
[  361.994995][  T970] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  362.105712][ T5889] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  362.112683][ T5889] cdc_ncm 7-1:1.0: bind() failure
[  362.149241][ T5889] usb 7-1: USB disconnect, device number 26
[  362.154932][  T970] usb 6-1: Using ep0 maxpacket: 32
[  362.175819][  T970] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  362.209513][  T970] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  362.293995][  T970] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  362.304261][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.319775][  T970] usb 6-1: Product: syz
[  362.323985][  T970] usb 6-1: Manufacturer: syz
[  362.329372][  T970] usb 6-1: SerialNumber: syz
[  362.402491][   T47] uclogic 0003:256C:006D.0013: interface is invalid, ignoring
[  362.423755][T13665] fuse: Invalid rootmode
[  362.588893][  T970] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  362.642426][   T29] audit: type=1326 audit(1730749575.523:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  362.697787][   T29] audit: type=1326 audit(1730749575.523:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  362.747671][   T29] audit: type=1326 audit(1730749575.523:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  362.837711][   T29] audit: type=1326 audit(1730749575.523:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  362.875925][ T5891] usb 6-1: USB disconnect, device number 43
[  362.913274][   T29] audit: type=1326 audit(1730749575.523:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  362.936556][ T5891] usblp0: removed
[  362.954753][T13686] FAULT_INJECTION: forcing a failure.
[  362.954753][T13686] name failslab, interval 1, probability 0, space 0, times 0
[  362.994752][T13686] CPU: 0 UID: 0 PID: 13686 Comm: syz.2.1553 Not tainted 6.12.0-rc6-syzkaller #0
[  363.003842][T13686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  363.013927][T13686] Call Trace:
[  363.017233][T13686]  <TASK>
[  363.020194][T13686]  dump_stack_lvl+0x241/0x360
[  363.024920][T13686]  ? __pfx_dump_stack_lvl+0x10/0x10
[  363.030161][T13686]  ? __pfx__printk+0x10/0x10
[  363.034791][T13686]  ? fs_reclaim_acquire+0x93/0x130
[  363.039930][T13686]  ? __pfx___might_resched+0x10/0x10
[  363.045243][T13686]  ? dynamic_dname+0x141/0x1b0
[  363.050043][T13686]  should_fail_ex+0x3b0/0x4e0
[  363.054751][T13686]  ? tomoyo_encode+0x26f/0x540
[  363.059980][T13686]  should_failslab+0xac/0x100
[  363.064700][T13686]  ? tomoyo_encode+0x26f/0x540
[  363.069504][T13686]  __kmalloc_noprof+0xd8/0x400
[  363.074314][T13686]  tomoyo_encode+0x26f/0x540
[  363.078949][T13686]  ? __pfx_anon_inodefs_dname+0x10/0x10
[  363.084526][T13686]  tomoyo_realpath_from_path+0x59e/0x5e0
[  363.090212][T13686]  tomoyo_path_number_perm+0x23a/0x880
[  363.095714][T13686]  ? tomoyo_path_number_perm+0x208/0x880
[  363.101380][T13686]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  363.107438][T13686]  ? __fget_files+0x29/0x470
[  363.112067][T13686]  ? __fget_files+0x3f3/0x470
[  363.116799][T13686]  security_file_ioctl+0xc6/0x2a0
[  363.121861][T13686]  __se_sys_ioctl+0x47/0x170
[  363.126509][T13686]  do_syscall_64+0xf3/0x230
[  363.131067][T13686]  ? clear_bhb_loop+0x35/0x90
[  363.135787][T13686]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.141717][T13686] RIP: 0033:0x7f1af597e719
[  363.146157][T13686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.165802][T13686] RSP: 002b:00007f1af66bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  363.174262][T13686] RAX: ffffffffffffffda RBX: 00007f1af5b35f80 RCX: 00007f1af597e719
[  363.182265][T13686] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  363.190266][T13686] RBP: 00007f1af66bc090 R08: 0000000000000000 R09: 0000000000000000
[  363.195264][   T29] audit: type=1326 audit(1730749575.523:8185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  363.198246][T13686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.198264][T13686] R13: 0000000000000000 R14: 00007f1af5b35f80 R15: 00007f1af5c5fa28
[  363.198292][T13686]  </TASK>
[  363.273384][   T47] usb 4-1: USB disconnect, device number 30
[  363.312417][   T29] audit: type=1326 audit(1730749575.553:8186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  363.335293][T13686] ERROR: Out of memory at tomoyo_realpath_from_path.
[  363.340834][   T29] audit: type=1326 audit(1730749575.563:8187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13672 comm="syz.2.1551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  363.715329][   T47] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  363.929518][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  363.980959][   T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  363.996835][   T47] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  364.015320][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.029767][   T47] usb 4-1: Product: syz
[  364.033975][   T47] usb 4-1: Manufacturer: syz
[  364.053528][   T47] usb 4-1: SerialNumber: syz
[  364.072624][   T47] usb 4-1: config 0 descriptor??
[  364.087640][   T47] iguanair 4-1:0.0: probe with driver iguanair failed with error -12
[  364.585573][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.594169][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.731171][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.760027][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.814680][T13737] fuse: Invalid rootmode
[  364.814689][T13700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.829247][T13700] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.845185][   T47] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  364.867161][   T25] usb 4-1: USB disconnect, device number 31
[  364.911493][ T5889] usb 5-1: USB disconnect, device number 44
[  365.031479][   T47] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[  365.045116][   T29] kauditd_printk_skb: 16 callbacks suppressed
[  365.045133][   T29] audit: type=1326 audit(1730749577.913:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.083620][   T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  365.121177][   T47] usb 7-1: config 0 has no interface number 0
[  365.133256][   T47] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  365.139691][   T29] audit: type=1326 audit(1730749577.913:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.150160][   T47] usb 7-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  365.210090][   T47] usb 7-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  365.229055][   T29] audit: type=1326 audit(1730749577.913:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.232448][   T47] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  365.263521][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.281927][   T47] usb 7-1: config 0 descriptor??
[  365.294190][T13723] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22
[  365.309100][   T29] audit: type=1326 audit(1730749577.913:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.338370][   T29] audit: type=1326 audit(1730749577.913:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.362014][   T29] audit: type=1326 audit(1730749577.913:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.384498][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.391650][   T29] audit: type=1326 audit(1730749577.913:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.414115][    C1] vkms_vblank_simulate: vblank timer overrun
[  365.421134][   T47] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  365.445184][   T29] audit: type=1326 audit(1730749577.913:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1af597d0b0 code=0x7ffc0000
[  365.469013][   T29] audit: type=1326 audit(1730749577.913:8212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  365.493777][   T29] audit: type=1326 audit(1730749577.913:8213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13740 comm="syz.2.1561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1af597e31b code=0x7ffc0000
[  365.539280][T10219] usb 7-1: Failed to submit usb control message: -71
[  365.539582][   T47] usb 7-1: USB disconnect, device number 27
[  365.547743][T10219] usb 7-1: unable to send the bmi data to the device: -71
[  365.572030][T10219] usb 7-1: unable to get target info from device
[  365.582555][T10219] usb 7-1: could not get target info (-71)
[  365.590040][T10219] usb 7-1: could not probe fw (-71)
[  365.965212][T11938] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  366.125170][T11938] usb 3-1: Using ep0 maxpacket: 32
[  366.143151][T11938] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  366.184922][T11938] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  366.230845][T11938] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  366.259246][T11938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.277139][T11938] usb 3-1: Product: syz
[  366.281573][T11938] usb 3-1: Manufacturer: syz
[  366.287035][T11938] usb 3-1: SerialNumber: syz
[  366.392485][T13804] FAULT_INJECTION: forcing a failure.
[  366.392485][T13804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  366.406012][T13804] CPU: 0 UID: 0 PID: 13804 Comm: syz.4.1570 Not tainted 6.12.0-rc6-syzkaller #0
[  366.415090][T13804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  366.425174][T13804] Call Trace:
[  366.428479][T13804]  <TASK>
[  366.431430][T13804]  dump_stack_lvl+0x241/0x360
[  366.436228][T13804]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.441457][T13804]  ? __pfx__printk+0x10/0x10
[  366.446073][T13804]  ? __pfx_lock_release+0x10/0x10
[  366.451151][T13804]  should_fail_ex+0x3b0/0x4e0
[  366.455856][T13804]  _copy_from_user+0x2f/0xc0
[  366.460480][T13804]  copy_msghdr_from_user+0xae/0x680
[  366.465714][T13804]  ? __lock_acquire+0x1384/0x2050
[  366.470862][T13804]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  366.476717][T13804]  do_recvmmsg+0x3f9/0xad0
[  366.481179][T13804]  ? __pfx_do_recvmmsg+0x10/0x10
[  366.486162][T13804]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  366.492101][T13804]  ? ksys_write+0x229/0x2b0
[  366.496626][T13804]  ? __pfx_lock_release+0x10/0x10
[  366.501686][T13804]  ? vfs_write+0x730/0xd30
[  366.506137][T13804]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  366.512153][T13804]  __x64_sys_recvmmsg+0x199/0x250
[  366.515501][T11938] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  366.517193][T13804]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  366.517228][T13804]  ? do_syscall_64+0x100/0x230
[  366.538302][T13804]  ? do_syscall_64+0xb6/0x230
[  366.543010][T13804]  do_syscall_64+0xf3/0x230
[  366.547537][T13804]  ? clear_bhb_loop+0x35/0x90
[  366.552246][T13804]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.558170][T13804] RIP: 0033:0x7fb097f7e719
[  366.562608][T13804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.565032][   T47] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  366.582245][T13804] RSP: 002b:00007fb098cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  366.582282][T13804] RAX: ffffffffffffffda RBX: 00007fb098135f80 RCX: 00007fb097f7e719
[  366.582295][T13804] RDX: 0000000000000001 RSI: 0000000020003c40 RDI: 0000000000000006
[  366.582307][T13804] RBP: 00007fb098cc9090 R08: 0000000000000000 R09: 0000000000000000
[  366.582321][T13804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.582333][T13804] R13: 0000000000000000 R14: 00007fb098135f80 R15: 00007fb09825fa28
[  366.582360][T13804]  </TASK>
[  366.737617][   T25] usb 3-1: USB disconnect, device number 16
[  366.744706][   T25] usblp0: removed
[  366.832297][   T47] usb 6-1: Using ep0 maxpacket: 8
[  366.847382][   T47] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  366.855706][   T47] usb 6-1: config 0 has no interface number 0
[  366.862856][   T47] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  366.900907][   T47] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  366.911245][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.921237][   T47] usb 6-1: config 0 descriptor??
[  366.929035][   T47] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  366.985280][T13822] fuse: Bad value for 'rootmode'
[  367.151674][T13830] FAULT_INJECTION: forcing a failure.
[  367.151674][T13830] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  367.174962][T13830] CPU: 1 UID: 0 PID: 13830 Comm: syz.6.1574 Not tainted 6.12.0-rc6-syzkaller #0
[  367.184044][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  367.194121][T13830] Call Trace:
[  367.197573][T13830]  <TASK>
[  367.200524][T13830]  dump_stack_lvl+0x241/0x360
[  367.205229][T13830]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.210444][T13830]  ? __pfx__printk+0x10/0x10
[  367.215067][T13830]  ? __pfx_lock_release+0x10/0x10
[  367.220109][T13830]  should_fail_ex+0x3b0/0x4e0
[  367.224869][T13830]  _copy_from_iter+0x21f/0x1e70
[  367.229758][T13830]  ? __virt_addr_valid+0x183/0x530
[  367.234900][T13830]  ? __pfx_lock_release+0x10/0x10
[  367.239976][T13830]  ? __alloc_skb+0x28f/0x440
[  367.244584][T13830]  ? __pfx__copy_from_iter+0x10/0x10
[  367.249892][T13830]  ? __virt_addr_valid+0x183/0x530
[  367.255028][T13830]  ? __virt_addr_valid+0x183/0x530
[  367.260167][T13830]  ? __virt_addr_valid+0x45f/0x530
[  367.265280][T13830]  ? __check_object_size+0x48e/0x900
[  367.270563][T13830]  netlink_sendmsg+0x73d/0xcb0
[  367.275329][T13830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.280646][T13830]  ? aa_sock_msg_perm+0x91/0x160
[  367.285608][T13830]  ? __pfx_netlink_sendmsg+0x10/0x10
[  367.290923][T13830]  __sock_sendmsg+0x221/0x270
[  367.295627][T13830]  ____sys_sendmsg+0x52a/0x7e0
[  367.300411][T13830]  ? __pfx_____sys_sendmsg+0x10/0x10
[  367.305718][T13830]  __sys_sendmsg+0x292/0x380
[  367.310321][T13830]  ? __pfx___sys_sendmsg+0x10/0x10
[  367.315473][T13830]  ? __pfx_vfs_write+0x10/0x10
[  367.320307][T13830]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  367.326671][T13830]  ? do_syscall_64+0x100/0x230
[  367.331449][T13830]  ? do_syscall_64+0xb6/0x230
[  367.336206][T13830]  do_syscall_64+0xf3/0x230
[  367.340740][T13830]  ? clear_bhb_loop+0x35/0x90
[  367.345444][T13830]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.351355][T13830] RIP: 0033:0x7fba7757e719
[  367.355774][T13830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.375394][T13830] RSP: 002b:00007fba759f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  367.383826][T13830] RAX: ffffffffffffffda RBX: 00007fba77735f80 RCX: 00007fba7757e719
[  367.391811][T13830] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[  367.399807][T13830] RBP: 00007fba759f6090 R08: 0000000000000000 R09: 0000000000000000
[  367.407950][T13830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.415920][T13830] R13: 0000000000000000 R14: 00007fba77735f80 R15: 00007fba7785fa28
[  367.423900][T13830]  </TASK>
[  367.426987][    C1] vkms_vblank_simulate: vblank timer overrun
[  368.136832][  T970] usb 6-1: USB disconnect, device number 44
[  368.146380][  T970] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected
[  368.205153][   T47] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  368.365092][   T47] usb 7-1: Using ep0 maxpacket: 16
[  368.377187][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.392784][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.404764][   T47] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  368.418541][   T47] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[  368.429610][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.442433][   T47] usb 7-1: config 0 descriptor??
[  368.455634][   T25] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  368.615074][   T25] usb 5-1: Using ep0 maxpacket: 8
[  368.631703][   T25] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  368.643373][   T25] usb 5-1: config 150 has no interface number 0
[  368.654557][   T25] usb 5-1: config 150 interface 204 has no altsetting 0
[  368.669400][   T25] usb 5-1: config 150 interface 1 has no altsetting 0
[  368.683304][   T25] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  368.702044][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.711282][   T25] usb 5-1: Product: syz
[  368.717453][   T25] usb 5-1: Manufacturer: syz
[  368.722387][   T25] usb 5-1: SerialNumber: syz
[  368.879151][   T47] input: HID 0955:7214 Haptics as /devices/virtual/input/input42
[  368.911320][   T47] shield 0003:0955:7214.0014: Registered Thunderstrike controller
[  368.929041][   T47] shield 0003:0955:7214.0014: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0
[  368.982774][T13899] fuse: Bad value for 'rootmode'
[  368.995869][   T25] xr_serial 5-1:150.204: xr_serial converter detected
[  369.003971][   T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  369.024927][   T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  369.067401][   T25] usb 5-1: USB disconnect, device number 45
[  369.085169][   T25] xr_serial 5-1:150.204: device disconnected
[  369.103416][ T5889] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  369.118842][ T5889] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  369.141206][ T5887] usb 7-1: USB disconnect, device number 28
[  369.161679][ T5889] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  369.183681][ T5889] shield 0003:0955:7214.0014: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  369.429531][T13915] pim6reg: entered allmulticast mode
[  369.437072][T13915] pim6reg: left allmulticast mode
[  369.496191][T13921] netlink: 'syz.5.1588': attribute type 10 has an invalid length.
[  369.520552][ T5848] Bluetooth: hci3: SCO packet for unknown connection handle 0
[  369.769482][  T970] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[  369.884984][ T5887] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  369.945993][T13937] netlink: 'syz.2.1592': attribute type 2 has an invalid length.
[  369.975428][  T970] usb 6-1: Using ep0 maxpacket: 32
[  369.992501][  T970] usb 6-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  370.015730][  T970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.038901][  T970] usb 6-1: Product: syz
[  370.046680][  T970] usb 6-1: Manufacturer: syz
[  370.057008][  T970] usb 6-1: SerialNumber: syz
[  370.060749][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  370.076835][  T970] usb 6-1: config 0 descriptor??
[  370.088576][ T5887] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  370.115448][ T5887] usb 5-1: config 150 has no interface number 0
[  370.144895][ T5887] usb 5-1: config 150 interface 204 has no altsetting 0
[  370.152259][ T5887] usb 5-1: config 150 interface 1 has no altsetting 0
[  370.776514][T13964] fuse: Bad value for 'rootmode'
[  370.890424][ T5848] Bluetooth: hci3: ACL packet for unknown connection handle 200
[  371.401763][  T970] (unnamed net_device) (uninitialized): Assigned a random MAC address: 76:0a:61:c8:11:01
[  371.468371][   T29] kauditd_printk_skb: 36 callbacks suppressed
[  371.468390][   T29] audit: type=1326 audit(1730749584.343:8250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  371.518940][  T970] rtl8150 6-1:0.0: eth21: rtl8150 is detected
[  371.552698][  T970] usb 6-1: USB disconnect, device number 45
[  371.589427][   T29] audit: type=1326 audit(1730749584.383:8251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  371.694100][   T29] audit: type=1326 audit(1730749584.383:8252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  371.810611][   T29] audit: type=1326 audit(1730749584.383:8253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  371.960739][   T29] audit: type=1326 audit(1730749584.383:8254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  372.070243][   T29] audit: type=1326 audit(1730749584.393:8255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  372.174243][   T29] audit: type=1326 audit(1730749584.393:8256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  372.272215][   T29] audit: type=1326 audit(1730749584.393:8257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13975 comm="syz.2.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x7ffc0000
[  372.635041][ T5891] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[  372.825026][ T5891] usb 6-1: Using ep0 maxpacket: 8
[  372.844734][ T5891] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  372.888900][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.920820][ T5892] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  372.939778][ T5891] usb 6-1: Product: syz
[  372.959339][ T5891] usb 6-1: Manufacturer: syz
[  372.984223][ T5891] usb 6-1: SerialNumber: syz
[  373.041718][ T5891] usb 6-1: config 0 descriptor??
[  373.116417][ T5892] usb 4-1: Using ep0 maxpacket: 32
[  373.129449][ T5892] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  373.151581][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  373.194648][ T5892] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  373.213234][ T5892] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  373.244303][ T5892] usb 4-1: Product: syz
[  373.262878][ T5891] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  373.282601][ T5892] usb 4-1: Manufacturer: syz
[  373.301794][ T5892] usb 4-1: SerialNumber: syz
[  373.374342][ T5892] usb 4-1: config 0 descriptor??
[  373.406583][ T5892] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  373.466008][ T5891] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  373.486937][ T5892] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  373.847409][ T5892] usb 4-1: USB disconnect, device number 32
[  373.853553][    C0] ldusb 4-1:0.0: usb_submit_urb failed (-19)
[  373.903191][ T5892] ldusb 4-1:0.0: LD USB Device #0 now disconnected
[  375.015845][T14036] loop7: detected capacity change from 0 to 16384
[  375.135126][ T5892] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  375.156875][T14036] I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0
[  375.170102][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.209299][ T5891] usb 6-1: USB disconnect, device number 46
[  375.224303][T14036] Buffer I/O error on dev loop7, logical block 16, lost async page write
[  375.234067][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.271152][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.279814][T14036] Buffer I/O error on dev loop7, logical block 17, lost async page write
[  375.297371][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.318154][T14036] Buffer I/O error on dev loop7, logical block 18, lost async page write
[  375.337528][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.355157][ T5892] usb 4-1: Using ep0 maxpacket: 8
[  375.363306][T14036] Buffer I/O error on dev loop7, logical block 19, lost async page write
[  375.377781][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.399122][ T5892] usb 4-1: New USB device found, idVendor=2001, idProduct=3c1a, bcdDevice=62.2f
[  375.420269][T14036] Buffer I/O error on dev loop7, logical block 20, lost async page write
[  375.432145][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.444530][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.463922][T14036] Buffer I/O error on dev loop7, logical block 21, lost async page write
[  375.484402][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.494507][ T5892] usb 4-1: Product: syz
[  375.502854][ T5892] usb 4-1: Manufacturer: syz
[  375.509305][T14036] Buffer I/O error on dev loop7, logical block 22, lost async page write
[  375.525282][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.532889][ T5892] usb 4-1: SerialNumber: syz
[  375.559763][ T5892] usb 4-1: config 0 descriptor??
[  375.575326][T14036] Buffer I/O error on dev loop7, logical block 23, lost async page write
[  375.583874][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.608317][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.624711][T14036] Buffer I/O error on dev loop7, logical block 24, lost async page write
[  375.652426][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.661022][T14036] Buffer I/O error on dev loop7, logical block 25, lost async page write
[  375.689438][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.717899][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.768331][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.802792][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.818989][  T970] usb 4-1: USB disconnect, device number 33
[  375.853919][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.895208][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.926000][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.953891][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  375.979428][T14047] binder: 14046:14047 ioctl c0306201 0 returned -14
[  375.987725][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.021867][T14047] binder: 14046:14047 ioctl 4018620d 0 returned -22
[  376.032256][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.060868][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.079134][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.103140][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.134502][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.165044][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.199470][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.235189][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.267317][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.303254][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.341971][ T5845] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  376.407075][ T5845] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v80000.00 Device [syz0] on syz0
[  376.456823][ T5892] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  376.670666][ T5892] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1
[  376.708288][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.765292][ T5892] usb 4-1: Product: syz
[  376.790136][ T5892] usb 4-1: Manufacturer: syz
[  376.794793][ T5892] usb 4-1: SerialNumber: syz
[  376.845463][ T5845] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  376.856730][ T5892] usb 4-1: config 0 descriptor??
[  377.015631][ T5845] usb 6-1: Using ep0 maxpacket: 16
[  377.041993][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.065024][  T970] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  377.076498][ T5892] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22
[  377.101034][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.134698][ T5845] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  377.155183][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.199267][ T5845] usb 6-1: config 0 descriptor??
[  377.231224][ T5845] usb 6-1: Found UVC 0.00 device <unnamed> (10c4:ea90)
[  377.257817][  T970] usb 3-1: Using ep0 maxpacket: 8
[  377.263129][ T5845] usb 6-1: No valid video chain found.
[  377.284239][  T970] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  377.329755][  T970] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  377.359293][  T970] usb 3-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00
[  377.389281][  T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.434639][  T970] usb 3-1: config 0 descriptor??
[  377.492952][  T970] usb 6-1: USB disconnect, device number 47
[  378.373041][ T5845] usb 4-1: USB disconnect, device number 34
[  378.594649][ T5887] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  378.604984][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.613018][ T5887] usb 5-1: Product: syz
[  378.629797][ T5887] usb 5-1: can't set config #150, error -71
[  378.646191][ T5887] usb 5-1: USB disconnect, device number 46
[  378.736682][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1615'.
[  378.746563][T14099] netlink: 'syz.3.1615': attribute type 2 has an invalid length.
[  378.807798][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.814408][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  378.967893][ T5887] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  379.004982][ T5845] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[  379.125265][ T5887] usb 5-1: Using ep0 maxpacket: 8
[  379.132142][ T5887] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  379.141005][ T5887] usb 5-1: config 150 has no interface number 0
[  379.151228][ T5887] usb 5-1: config 150 interface 204 has no altsetting 0
[  379.167593][ T5887] usb 5-1: config 150 interface 1 has no altsetting 0
[  379.168190][ T5845] usb 6-1: Using ep0 maxpacket: 32
[  379.187652][ T5887] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  379.201272][ T5845] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=82.28
[  379.201585][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.220300][ T5887] usb 5-1: Product: syz
[  379.224628][ T5887] usb 5-1: Manufacturer: syz
[  379.226922][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.238404][ T5887] usb 5-1: SerialNumber: syz
[  379.254088][ T5845] usb 6-1: Product: syz
[  379.278318][ T5845] usb 6-1: Manufacturer: syz
[  379.282987][ T5845] usb 6-1: SerialNumber: syz
[  379.311181][ T5845] usb 6-1: config 0 descriptor??
[  379.461017][ T5887] xr_serial 5-1:150.204: xr_serial converter detected
[  379.540471][T14103] netlink: 388 bytes leftover after parsing attributes in process `syz.5.1616'.
[  379.577831][ T5845] usb 6-1: USB disconnect, device number 48
[  379.828725][ T5845] usb 3-1: USB disconnect, device number 17
[  379.982539][   T29] audit: type=1326 audit(1730749592.863:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14136 comm="syz.2.1619" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1af597e719 code=0x0
[  380.972888][ T5887] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  380.996891][ T5887] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  381.032170][ T5887] usb 5-1: USB disconnect, device number 47
[  381.066952][ T5887] xr_serial 5-1:150.204: device disconnected
[  381.357467][   T25] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  381.393929][T14184] netlink: 'syz.3.1626': attribute type 10 has an invalid length.
[  381.429162][T14184] geneve0: entered promiscuous mode
[  381.453345][T14184] bond0: (slave geneve0): Enslaving as an active interface with an up link
[  381.497894][T14184] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1626'.
[  381.531079][T14184] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  381.545898][   T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD
[  381.560545][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  381.569632][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.585868][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.614318][   T25] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  381.627013][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.629927][   T29] audit: type=1326 audit(1730749594.513:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  381.656807][   T25] usb 3-1: Product: syz
[  381.657555][    C0] vkms_vblank_simulate: vblank timer overrun
[  381.661669][   T25] usb 3-1: Manufacturer: syz
[  381.725305][   T25] usb 3-1: SerialNumber: syz
[  381.754003][   T25] usb 3-1: config 0 descriptor??
[  381.764126][   T29] audit: type=1326 audit(1730749594.573:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  381.777887][   T25] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 020d
[  381.805213][ T5845] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  381.830142][T14195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1629'.
[  381.862961][   T29] audit: type=1326 audit(1730749594.573:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  381.893821][T14195] netem: incorrect gi model size
[  381.921108][T14195] netem: change failed
[  381.941602][T14195] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1629'.
[  381.950910][ T5845] usb 6-1: device descriptor read/64, error -71
[  381.975335][   T29] audit: type=1326 audit(1730749594.573:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.027497][   T25] usb 3-1: USB disconnect, device number 18
[  382.085372][   T29] audit: type=1326 audit(1730749594.573:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.087899][T14203] Invalid logical block size (21061)
[  382.108393][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.194956][ T5845] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[  382.205293][   T29] audit: type=1326 audit(1730749594.573:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.227751][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.279853][   T29] audit: type=1326 audit(1730749594.573:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.325090][ T5845] usb 6-1: device descriptor read/64, error -71
[  382.337405][   T29] audit: type=1326 audit(1730749594.573:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.359777][    C0] vkms_vblank_simulate: vblank timer overrun
[  382.381269][   T29] audit: type=1326 audit(1730749594.573:8267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14188 comm="syz.5.1627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  382.475272][ T5845] usb usb6-port1: attempt power cycle
[  382.546642][   T25] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  382.547183][  T970] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  382.717751][  T970] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  382.729013][  T970] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  382.735084][   T25] usb 5-1: Using ep0 maxpacket: 32
[  382.759057][  T970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  382.779926][  T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.794575][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  382.814573][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  382.832518][  T970] usbtmc 4-1:16.0: bulk endpoints not found
[  382.838923][ T5845] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[  382.845064][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  382.865526][ T5845] usb 6-1: device descriptor read/8, error -71
[  382.879226][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.919921][   T25] hub 5-1:4.0: USB hub found
[  382.980760][T14229] deleting an unspecified loop device is not supported.
[  383.105499][ T5845] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[  383.115359][   T25] hub 5-1:4.0: 2 ports detected
[  383.139361][ T5845] usb 6-1: device descriptor read/8, error -71
[  383.154010][T14234] vlan2: entered allmulticast mode
[  383.167603][T14234] bond0: entered allmulticast mode
[  383.184582][T14234] bond_slave_0: entered allmulticast mode
[  383.192108][T14234] bond_slave_1: entered allmulticast mode
[  383.222191][T14234] bridge0: port 3(vlan2) entered blocking state
[  383.247245][T14234] bridge0: port 3(vlan2) entered disabled state
[  383.264265][ T5845] usb usb6-port1: unable to enumerate USB device
[  383.279992][T14234] vlan2: entered promiscuous mode
[  383.291650][T14234] bond0: entered promiscuous mode
[  383.301584][T14234] bond_slave_0: entered promiscuous mode
[  383.312008][T14234] bond_slave_1: entered promiscuous mode
[  383.321685][T14234] bridge0: port 3(vlan2) entered blocking state
[  383.324751][   T25] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  383.329026][T14234] bridge0: port 3(vlan2) entered forwarding state
[  383.338691][   T25] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  383.427403][   T25] usb 5-1: USB disconnect, device number 48
[  383.715425][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  384.394641][ T5889] usb 3-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=b5.55
[  384.403893][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.418061][ T5889] usb 3-1: Product: syz
[  384.438288][ T5889] usb 3-1: Manufacturer: syz
[  384.443354][ T5889] usb 3-1: SerialNumber: syz
[  384.459808][ T5889] usb 3-1: config 0 descriptor??
[  384.498263][ T5889] gspca_main: sonixb-2.14.0 probing 0c45:608c
[  384.593082][T14279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1638'.
[  384.615002][T14279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1638'.
[  384.761022][T14286] Invalid logical block size (16640)
[  384.774073][ T5889] sonixb 3-1:0.0: Error writing register 01: -71
[  384.781369][ T5889] sonixb 3-1:0.0: probe with driver sonixb failed with error -71
[  384.798036][ T5889] usb 3-1: USB disconnect, device number 19
[  385.255833][   T25] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[  385.264947][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  385.347070][ T5887] usb 4-1: USB disconnect, device number 35
[  385.357593][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  385.370288][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  385.379050][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  385.396606][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  385.408770][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  385.421375][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  385.429354][ T5889] usb 3-1: Using ep0 maxpacket: 8
[  385.434592][   T25] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  385.445642][   T25] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  385.455367][   T25] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  385.470545][ T5889] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  385.479266][ T5889] usb 3-1: config 150 has no interface number 0
[  385.485637][ T5889] usb 3-1: config 150 interface 204 has no altsetting 0
[  385.492623][ T5889] usb 3-1: config 150 interface 1 has no altsetting 0
[  385.503549][   T25] usb 6-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5
[  385.513154][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.522503][ T5889] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  385.532796][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.541564][ T5889] usb 3-1: Product: syz
[  385.546766][ T5889] usb 3-1: Manufacturer: syz
[  385.551807][   T25] usb 6-1: Product: syz
[  385.556334][ T5889] usb 3-1: SerialNumber: syz
[  385.561975][   T25] usb 6-1: Manufacturer: syz
[  385.568207][   T25] usb 6-1: SerialNumber: syz
[  385.576153][   T25] usb 6-1: config 0 descriptor??
[  385.660155][T13889] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.782380][T13889] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.804274][ T5889] xr_serial 3-1:150.204: xr_serial converter detected
[  385.819170][   T25] usb 6-1: USB disconnect, device number 53
[  385.850884][ T5889] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  385.869971][ T5889] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  385.900292][ T5889] usb 3-1: USB disconnect, device number 20
[  385.939836][ T5889] xr_serial 3-1:150.204: device disconnected
[  385.956511][T13889] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.191195][T13889] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.343173][T14316] chnl_net:caif_netlink_parms(): no params data found
[  386.794170][T13889] bridge_slave_1: left allmulticast mode
[  386.800142][T13889] bridge_slave_1: left promiscuous mode
[  386.806082][ T5892] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  386.814066][T13889] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.846213][T13889] bridge_slave_0: left allmulticast mode
[  386.873150][T13889] bridge_slave_0: left promiscuous mode
[  386.881035][T13889] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.969695][   T25] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  386.987054][ T5892] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  386.999609][ T5892] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  387.010592][ T5892] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  387.020163][ T5892] usb 4-1: config 1 has no interface number 0
[  387.032784][ T5892] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  387.055872][ T5892] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  387.072832][ T5892] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  387.082361][ T5892] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.090495][ T5892] usb 4-1: Product: syz
[  387.094941][ T5892] usb 4-1: Manufacturer: syz
[  387.099597][ T5892] usb 4-1: SerialNumber: syz
[  387.116209][T11938] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  387.139427][   T25] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  387.150952][   T25] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  387.168416][   T25] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  387.178277][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.190896][   T25] usbtmc 3-1:16.0: bulk endpoints not found
[  387.297010][T11938] usb 6-1: config 5 has an invalid interface number: 177 but max is 1
[  387.309246][T11938] usb 6-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  387.319937][T11938] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 2
[  387.329208][T11938] usb 6-1: config 5 has no interface number 0
[  387.338756][T11938] usb 6-1: config 5 interface 177 altsetting 127 endpoint 0x3 has invalid maxpacket 53072, setting to 64
[  387.352306][T11938] usb 6-1: config 5 interface 177 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 16
[  387.380145][T11938] usb 6-1: config 5 interface 177 has no altsetting 0
[  387.390026][T11938] usb 6-1: New USB device found, idVendor=100d, idProduct=9032, bcdDevice=69.30
[  387.414093][T11938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.423694][T13889] team0: Port device bridge1 removed
[  387.431705][T11938] usb 6-1: Product: ⟊찭㽣覡捕颇웭┿벮䳾蜻쥷멻抈뉥䅃ﯛ률缃秲鎎澎믦Ā⛛▧ꓨ荃ᯔ쎣五纃ᘂ銞裰荼灾跤精፶翾꺞෭弨ᣤ﷌즮瞋ߎ킶玍멄뤴⼳ଷ︹ꭲ륇ꗜ煽넠骞危
[  387.454972][T11938] usb 6-1: Manufacturer: Ђ
[  387.459503][T11938] usb 6-1: SerialNumber: syz
[  387.528376][ T5851] Bluetooth: hci4: command tx timeout
[  387.600813][T13889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  387.614053][T13889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  387.628716][T13889] bond0 (unregistering): Released all slaves
[  387.640229][T14316] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.650859][T14316] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.662138][T14316] bridge_slave_0: entered allmulticast mode
[  387.672697][T14316] bridge_slave_0: entered promiscuous mode
[  387.693285][T14316] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.705046][T11938] usb 6-1: USB disconnect, device number 54
[  387.732704][T14316] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.744621][T14316] bridge_slave_1: entered allmulticast mode
[  387.752765][T14316] bridge_slave_1: entered promiscuous mode
[  387.771256][T14376] veth0_vlan: left promiscuous mode
[  387.780056][T14376] veth0_vlan: entered promiscuous mode
[  387.800999][T13889] tipc: Disabling bearer <udp:syz2>
[  387.825147][T13889] tipc: Left network mode
[  387.959531][T14316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  387.998700][T14316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  388.035653][ T5845] usb 4-1: USB disconnect, device number 36
[  388.178626][T14316] team0: Port device team_slave_0 added
[  388.190208][T14316] team0: Port device team_slave_1 added
[  388.239545][T13889] hsr_slave_0: left promiscuous mode
[  388.253295][T13889] hsr_slave_1: left promiscuous mode
[  388.300856][T13889] veth1_macvtap: left promiscuous mode
[  388.312469][T13889] veth0_macvtap: left promiscuous mode
[  388.321160][T13889] veth1_vlan: left promiscuous mode
[  388.327092][T13889] veth0_vlan: left promiscuous mode
[  388.405281][ T5891] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  388.594939][ T5891] usb 5-1: Using ep0 maxpacket: 8
[  388.610165][ T5891] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  388.639765][ T5891] usb 5-1: config 150 has no interface number 0
[  388.646753][ T5891] usb 5-1: config 150 interface 204 has no altsetting 0
[  388.668384][ T5891] usb 5-1: config 150 interface 1 has no altsetting 0
[  388.689487][ T5891] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  388.703893][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  388.712491][ T5891] usb 5-1: Product: syz
[  388.717567][ T5891] usb 5-1: Manufacturer: syz
[  388.722296][ T5891] usb 5-1: SerialNumber: syz
[  388.958048][ T5891] xr_serial 5-1:150.204: xr_serial converter detected
[  388.983087][ T5891] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  388.993861][ T5891] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  389.037795][ T5891] usb 5-1: USB disconnect, device number 49
[  389.058999][ T5891] xr_serial 5-1:150.204: device disconnected
[  389.087934][T14421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1667'.
[  389.236023][T14426] xt_policy: neither incoming nor outgoing policy selected
[  389.307565][T13889] team0 (unregistering): Port device team_slave_1 removed
[  389.358961][T13889] team0 (unregistering): Port device team_slave_0 removed
[  389.560484][T14428] FAULT_INJECTION: forcing a failure.
[  389.560484][T14428] name failslab, interval 1, probability 0, space 0, times 0
[  389.574356][T14428] CPU: 0 UID: 0 PID: 14428 Comm: syz.4.1668 Not tainted 6.12.0-rc6-syzkaller #0
[  389.583395][T14428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  389.593460][T14428] Call Trace:
[  389.596744][T14428]  <TASK>
[  389.599872][T14428]  dump_stack_lvl+0x241/0x360
[  389.604601][T14428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  389.609821][T14428]  ? __pfx__printk+0x10/0x10
[  389.614477][T14428]  ? ref_tracker_alloc+0x332/0x490
[  389.619599][T14428]  should_fail_ex+0x3b0/0x4e0
[  389.624292][T14428]  ? skb_clone+0x20c/0x390
[  389.625114][ T5851] Bluetooth: hci4: command tx timeout
[  389.628700][T14428]  should_failslab+0xac/0x100
[  389.628732][T14428]  ? skb_clone+0x20c/0x390
[  389.628756][T14428]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  389.648549][T14428]  skb_clone+0x20c/0x390
[  389.652798][T14428]  __netlink_deliver_tap+0x3cc/0x7c0
[  389.658089][T14428]  ? netlink_deliver_tap+0x2e/0x1b0
[  389.663281][T14428]  netlink_deliver_tap+0x19d/0x1b0
[  389.668391][T14428]  netlink_unicast+0x7c4/0x990
[  389.673155][T14428]  ? __pfx_netlink_unicast+0x10/0x10
[  389.678437][T14428]  ? __virt_addr_valid+0x183/0x530
[  389.683545][T14428]  ? __check_object_size+0x48e/0x900
[  389.688842][T14428]  netlink_sendmsg+0x8e4/0xcb0
[  389.693645][T14428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.698943][T14428]  ? aa_sock_msg_perm+0x91/0x160
[  389.703916][T14428]  ? __pfx_netlink_sendmsg+0x10/0x10
[  389.709240][T14428]  __sock_sendmsg+0x221/0x270
[  389.713941][T14428]  ____sys_sendmsg+0x52a/0x7e0
[  389.718723][T14428]  ? __pfx_____sys_sendmsg+0x10/0x10
[  389.724036][T14428]  __sys_sendmsg+0x292/0x380
[  389.728638][T14428]  ? __pfx___sys_sendmsg+0x10/0x10
[  389.733756][T14428]  ? __pfx_vfs_write+0x10/0x10
[  389.738551][T14428]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  389.744923][T14428]  ? do_syscall_64+0x100/0x230
[  389.749782][T14428]  ? do_syscall_64+0xb6/0x230
[  389.754468][T14428]  do_syscall_64+0xf3/0x230
[  389.759002][T14428]  ? clear_bhb_loop+0x35/0x90
[  389.763799][T14428]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  389.769705][T14428] RIP: 0033:0x7fb097f7e719
[  389.774140][T14428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  389.794187][T14428] RSP: 002b:00007fb098cc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  389.802603][T14428] RAX: ffffffffffffffda RBX: 00007fb098135f80 RCX: 00007fb097f7e719
[  389.810577][T14428] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003
[  389.818548][T14428] RBP: 00007fb098cc9090 R08: 0000000000000000 R09: 0000000000000000
[  389.826534][T14428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  389.834529][T14428] R13: 0000000000000000 R14: 00007fb098135f80 R15: 00007fb09825fa28
[  389.842527][T14428]  </TASK>
[  389.845666][    C0] vkms_vblank_simulate: vblank timer overrun
[  389.884202][T11938] usb 3-1: USB disconnect, device number 21
[  390.107220][T14434] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1670'.
[  390.289243][T14316] batman_adv: batadv0: Adding interface: batadv_slave_0
[  390.296889][T14316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.326984][T14316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  390.343421][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1663'.
[  390.359014][T14412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1663'.
[  390.372182][T14412] erspan0: entered promiscuous mode
[  390.379133][T14412] erspan0: left promiscuous mode
[  390.395740][T14316] batman_adv: batadv0: Adding interface: batadv_slave_1
[  390.402758][T14316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  390.439212][T11937] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  390.485342][T14316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  390.526912][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1671'.
[  390.603981][T14316] hsr_slave_0: entered promiscuous mode
[  390.615877][T14316] hsr_slave_1: entered promiscuous mode
[  390.622433][T14316] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  390.630550][T11937] usb 6-1: Using ep0 maxpacket: 16
[  390.636396][T14316] Cannot create hsr debugfs directory
[  390.648287][T11937] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  390.674897][T11937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.701087][T11937] usb 6-1: Product: syz
[  390.713256][T11937] usb 6-1: Manufacturer: syz
[  390.718938][T11937] usb 6-1: SerialNumber: syz
[  390.749690][T11937] usb 6-1: config 0 descriptor??
[  390.772088][T11937] visor 6-1:0.0: Sony Clie 3.5 converter detected
[  391.116278][T11938] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  391.183055][T11937] usb 6-1: clie_3_5_startup: get interface number failed: -71
[  391.200406][T11937] visor 6-1:0.0: probe with driver visor failed with error -71
[  391.214029][T11937] usb 6-1: USB disconnect, device number 55
[  391.234952][   T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  391.331125][T11938] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6D, changing to 0xD
[  391.354005][T11938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  391.383348][T11938] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  391.402726][T11938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.414865][T11938] usb 5-1: Product: syz
[  391.419091][T11938] usb 5-1: Manufacturer: syz
[  391.434524][T11938] usb 5-1: SerialNumber: syz
[  391.439496][   T25] usb 3-1: Using ep0 maxpacket: 8
[  391.450432][   T25] usb 3-1: config 150 has an invalid interface number: 204 but max is 1
[  391.464708][T11938] usb 5-1: config 0 descriptor??
[  391.473036][   T25] usb 3-1: config 150 has no interface number 0
[  391.486592][T11938] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 020d
[  391.497881][   T25] usb 3-1: config 150 interface 204 has no altsetting 0
[  391.512066][   T25] usb 3-1: config 150 interface 1 has no altsetting 0
[  391.524560][   T25] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  391.542948][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.551452][   T25] usb 3-1: Product: syz
[  391.561229][   T25] usb 3-1: Manufacturer: syz
[  391.567853][   T25] usb 3-1: SerialNumber: syz
[  391.695058][ T5851] Bluetooth: hci4: command tx timeout
[  391.710272][T11938] usb 5-1: USB disconnect, device number 50
[  391.787007][   T25] xr_serial 3-1:150.204: xr_serial converter detected
[  391.811967][   T25] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  391.835579][   T25] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  391.864543][   T25] usb 3-1: USB disconnect, device number 22
[  391.874289][T14316] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  391.882262][   T25] xr_serial 3-1:150.204: device disconnected
[  391.904424][T14316] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  391.935568][T14316] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  391.949136][T14316] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  392.081141][T14316] 8021q: adding VLAN 0 to HW filter on device bond0
[  392.127205][T14316] 8021q: adding VLAN 0 to HW filter on device team0
[  392.149714][T10221] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.156950][T10221] bridge0: port 1(bridge_slave_0) entered forwarding state
[  392.170962][ T5889] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  392.177576][T10221] bridge0: port 2(bridge_slave_1) entered blocking state
[  392.185762][T10221] bridge0: port 2(bridge_slave_1) entered forwarding state
[  392.329262][T14316] 8021q: adding VLAN 0 to HW filter on device batadv0
[  392.349262][ T5889] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  392.383446][ T5889] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  392.439850][ T5889] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  392.466894][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.486257][T14316] veth0_vlan: entered promiscuous mode
[  392.520097][ T5889] usbtmc 4-1:16.0: bulk endpoints not found
[  392.528672][T14316] veth1_vlan: entered promiscuous mode
[  392.585065][   T25] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  392.631289][T14316] veth0_macvtap: entered promiscuous mode
[  392.654556][T14316] veth1_macvtap: entered promiscuous mode
[  392.682329][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.699103][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.722250][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.741829][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.754997][   T25] usb 5-1: Using ep0 maxpacket: 8
[  392.761650][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.787709][   T25] usb 5-1: config 0 interface 0 has no altsetting 0
[  392.812606][   T25] usb 5-1: New USB device found, idVendor=0baf, idProduct=00f5, bcdDevice=df.c2
[  392.823028][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.833923][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.843530][   T25] usb 5-1: Product: syz
[  392.848041][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  392.861527][   T25] usb 5-1: Manufacturer: syz
[  392.866369][   T25] usb 5-1: SerialNumber: syz
[  392.871218][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.883381][   T25] usb 5-1: config 0 descriptor??
[  392.898913][T14316] batman_adv: batadv0: Interface activated: batadv_slave_0
[  392.914258][   T25] usb 5-1: [ueagle-atm] ADSL device founded vid (0XBAF) pid (0XF5) Rev (0XDFC2): Eagle I
[  392.961764][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  392.977835][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  392.988255][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.001091][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.011343][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.022793][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.041322][T14316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  393.052263][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  393.064306][T14316] batman_adv: batadv0: Interface activated: batadv_slave_1
[  393.088807][T14316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  393.101142][   T25] usb 5-1: reset high-speed USB device number 51 using dummy_hcd
[  393.128256][T14316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  393.141228][T14316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  393.155773][T14316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  393.264381][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.280715][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.317879][T10221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  393.332326][T10221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  393.426061][ T5891] usb 6-1: new high-speed USB device number 56 using dummy_hcd
[  393.585572][ T5891] usb 6-1: Using ep0 maxpacket: 8
[  393.592747][ T5891] usb 6-1: config 150 has an invalid interface number: 49 but max is 2
[  393.611910][ T5891] usb 6-1: config 150 has an invalid interface number: 221 but max is 2
[  393.623391][ T5891] usb 6-1: config 150 contains an unexpected descriptor of type 0x2, skipping
[  393.653137][ T5891] usb 6-1: config 150 has an invalid descriptor of length 189, skipping remainder of the config
[  393.683650][ T5891] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  393.705248][ T5891] usb 6-1: config 150 has no interface number 0
[  393.711778][ T5891] usb 6-1: config 150 has no interface number 1
[  393.727195][ T5891] usb 6-1: config 150 interface 49 altsetting 1 endpoint 0xF has invalid maxpacket 1024, setting to 64
[  393.742734][ T5891] usb 6-1: config 150 interface 49 altsetting 1 has an endpoint descriptor with address 0x4F, changing to 0xF
[  393.755096][   T25] usb 5-1: device descriptor read/64, error -71
[  393.760634][ T5891] usb 6-1: config 150 interface 49 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  393.773520][ T5891] usb 6-1: config 150 interface 49 altsetting 1 endpoint 0x4 has an invalid bInterval 249, changing to 11
[  393.776149][ T5851] Bluetooth: hci4: command tx timeout
[  393.821327][ T5891] usb 6-1: config 150 interface 49 altsetting 1 has a duplicate endpoint with address 0x4, skipping
[  393.870225][ T5891] usb 6-1: config 150 interface 49 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64
[  393.895123][ T5891] usb 6-1: config 150 interface 49 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  393.908504][ T5891] usb 6-1: config 150 interface 221 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  393.924505][ T5891] usb 6-1: config 150 interface 49 has no altsetting 0
[  393.937828][ T5891] usb 6-1: config 150 interface 221 has no altsetting 0
[  393.951814][ T5891] usb 6-1: New USB device found, idVendor=08fd, idProduct=000a, bcdDevice=28.a9
[  393.966768][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.994563][ T5891] usb 6-1: Product: syz
[  394.001002][ T5891] usb 6-1: Manufacturer: syz
[  394.007864][ T5891] usb 6-1: SerialNumber: syz
[  394.022564][T14520] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  394.035471][   T25] usb 5-1: reset high-speed USB device number 51 using dummy_hcd
[  394.115185][   T47] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  394.285092][   T47] usb 3-1: Using ep0 maxpacket: 32
[  394.286707][ T5891] cp210x 6-1:150.49: cp210x converter detected
[  394.297648][   T47] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  394.323403][   T47] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  394.357192][   T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  394.367535][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.375915][   T47] usb 3-1: Product: syz
[  394.380348][   T47] usb 3-1: Manufacturer: syz
[  394.385531][   T47] usb 3-1: SerialNumber: syz
[  394.482489][ T5891] cp210x 6-1:150.49: failed to get vendor val 0x370b size 1: -32
[  394.499614][ T5891] cp210x 6-1:150.49: querying part number failed
[  394.508069][ T5891] usb 6-1: cp210x converter now attached to ttyUSB0
[  394.533368][ T5891] cp210x 6-1:150.221: cp210x converter detected
[  394.550499][ T5891] cp210x 6-1:150.221: failed to get vendor val 0x370b size 1: -71
[  394.565019][ T5891] cp210x 6-1:150.221: querying part number failed
[  394.583365][ T5891] usb 6-1: cp210x converter now attached to ttyUSB1
[  394.599967][ T5891] usb 6-1: USB disconnect, device number 56
[  394.641915][   T25] usb 5-1: [UEAGLE-ATM] interface 1 not found
[  394.652219][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  394.661776][   T25] ueagle-atm 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  394.704171][ T5891] cp210x 6-1:150.49: device disconnected
[  394.710784][   T47] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  394.722729][   T25] usb 5-1: USB disconnect, device number 51
[  394.744725][ T5891] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1
[  394.775353][ T5891] cp210x 6-1:150.221: device disconnected
[  394.879443][  T970] usb 4-1: USB disconnect, device number 37
[  395.004706][   T25] usb 3-1: USB disconnect, device number 23
[  395.027657][   T25] usblp0: removed
[  395.342344][T14601] C: renamed from team_slave_0
[  395.362165][T14601] netlink: 'syz.5.1692': attribute type 1 has an invalid length.
[  395.379656][T14601] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  395.581576][  T970] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  395.664967][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  395.666305][   T25] usb 6-1: new high-speed USB device number 57 using dummy_hcd
[  395.755030][  T970] usb 5-1: Using ep0 maxpacket: 8
[  395.776816][  T970] usb 5-1: config 150 has an invalid interface number: 204 but max is 1
[  395.803117][  T970] usb 5-1: config 150 has no interface number 0
[  395.815022][ T5891] usb 1-1: Using ep0 maxpacket: 32
[  395.833699][  T970] usb 5-1: config 150 interface 204 has no altsetting 0
[  395.841704][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.846529][   T25] usb 6-1: Using ep0 maxpacket: 32
[  395.877872][   T25] usb 6-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice= 6.59
[  395.885609][  T970] usb 5-1: config 150 interface 1 has no altsetting 0
[  395.890487][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.894655][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.919968][   T25] usb 6-1: Product: syz
[  395.924671][   T25] usb 6-1: Manufacturer: syz
[  395.927766][  T970] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  395.932788][   T25] usb 6-1: SerialNumber: syz
[  395.943710][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  395.954275][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.969876][  T970] usb 5-1: Product: syz
[  395.974087][  T970] usb 5-1: Manufacturer: syz
[  395.978295][   T25] usb 6-1: config 0 descriptor??
[  395.984325][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.011397][  T970] usb 5-1: SerialNumber: syz
[  396.017308][ T5891] usb 1-1: config 0 descriptor??
[  396.037427][ T5891] hub 1-1:0.0: USB hub found
[  396.239931][ T5891] hub 1-1:0.0: 1 port detected
[  396.268143][  T970] xr_serial 5-1:150.204: xr_serial converter detected
[  396.283395][  T970] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  396.290552][  T970] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  396.335188][   T25] pegasus 6-1:0.0: probe with driver pegasus failed with error -71
[  396.336788][  T970] usb 5-1: USB disconnect, device number 52
[  396.380826][   T25] usb 6-1: USB disconnect, device number 57
[  396.393937][  T970] xr_serial 5-1:150.204: device disconnected
[  396.519063][   T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.547910][T14640] veth0_to_batadv: entered promiscuous mode
[  396.700975][ T5891] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  396.710418][ T5891] usb 1-1: USB disconnect, device number 3
[  396.760973][   T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.863950][   T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.953935][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  396.974393][T14650] netlink: 'syz.4.1702': attribute type 1 has an invalid length.
[  396.982553][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  397.007084][   T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.012132][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  397.115544][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  397.126521][ T5848] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  397.134368][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  397.708031][T11937] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  397.901929][   T35] vlan2: left promiscuous mode
[  397.924757][   T35] bond0: left promiscuous mode
[  397.930708][T11937] usb 1-1: Using ep0 maxpacket: 8
[  397.954872][T11937] usb 1-1: config 150 has an invalid interface number: 204 but max is 1
[  397.964520][   T35] bond_slave_0: left promiscuous mode
[  398.004113][   T35] bond_slave_1: left promiscuous mode
[  398.010541][T11937] usb 1-1: config 150 has no interface number 0
[  398.029231][   T35] bridge0: port 3(vlan2) entered disabled state
[  398.051865][T11937] usb 1-1: config 150 interface 204 has no altsetting 0
[  398.072808][T11937] usb 1-1: config 150 interface 1 has no altsetting 0
[  398.110606][T11937] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  398.122655][   T35] bridge_slave_1: left allmulticast mode
[  398.150288][T11937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.161112][   T35] bridge_slave_1: left promiscuous mode
[  398.193066][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.213273][T11937] usb 1-1: Product: syz
[  398.239779][T11937] usb 1-1: Manufacturer: syz
[  398.286101][T11937] usb 1-1: SerialNumber: syz
[  398.292517][   T29] kauditd_printk_skb: 7 callbacks suppressed
[  398.292534][   T29] audit: type=1326 audit(1730749611.093:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  398.353375][   T35] bridge_slave_0: left allmulticast mode
[  398.408180][   T35] bridge_slave_0: left promiscuous mode
[  398.414085][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.772802][   T29] audit: type=1326 audit(1730749611.093:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  398.840504][   T29] audit: type=1326 audit(1730749611.103:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  398.904773][   T29] audit: type=1326 audit(1730749611.103:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.002536][   T29] audit: type=1326 audit(1730749611.103:8279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.065371][   T29] audit: type=1326 audit(1730749611.103:8280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.121476][   T29] audit: type=1326 audit(1730749611.113:8281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.200453][   T29] audit: type=1326 audit(1730749611.113:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.271444][   T29] audit: type=1326 audit(1730749611.113:8283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  399.334050][   T29] audit: type=1326 audit(1730749611.113:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14670 comm="syz.5.1707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f371c37e719 code=0x7ffc0000
[  401.687165][ T5848] Bluetooth: hci2: command tx timeout
[  404.228247][ T5848] Bluetooth: hci2: command tx timeout
[  407.222892][ T5851] Bluetooth: hci2: command tx timeout
[  408.894842][    C0] sched: DL replenish lagged too much
[  414.802627][T11937] xr_serial 1-1:150.204: xr_serial converter detected
[  415.650337][T11937] xr_serial ttyUSB0: Failed to set reg 0x60: -32
[  415.719506][T11937] xr_serial ttyUSB0: probe with driver xr_serial failed with error -32
[  415.980474][ T5851] Bluetooth: hci2: command tx timeout
[  453.449438][T11937] usb 1-1: USB disconnect, device number 4
[  453.623448][T11937] xr_serial 1-1:150.204: device disconnected
[  480.327885][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  480.342523][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  506.681937][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  506.700283][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  542.446869][ T5836] Bluetooth: hci2: command 0x0406 tx timeout
[  542.453028][ T5836] Bluetooth: hci4: command 0x0406 tx timeout
[  559.358879][   T30] INFO: task kworker/1:0:25 blocked for more than 152 seconds.
[  562.715124][   T30]       Not tainted 6.12.0-rc6-syzkaller #0
[  562.721074][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  562.927135][   T30] task:kworker/1:0     state:D stack:20064 pid:25    tgid:25    ppid:2      flags:0x00004000
[  563.154870][   T30] Workqueue: events switchdev_deferred_process_work
[  563.255015][   T30] Call Trace:
[  563.258356][   T30]  <TASK>
[  563.261318][   T30]  __schedule+0x184f/0x4c30
[  563.474919][   T30]  ? try_to_wake_up+0x98b/0x14b0
[  563.479942][   T30]  ? schedule+0x90/0x320
[  563.484227][   T30]  ? __pfx___schedule+0x10/0x10
[  563.744953][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  563.751010][   T30]  ? __pfx_lock_release+0x10/0x10
[  563.845260][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.851606][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.894875][   T30]  ? kick_pool+0x45c/0x620
[  563.899374][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  563.984939][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  563.990224][   T30]  ? schedule+0x90/0x320
[  563.994508][   T30]  schedule+0x14b/0x320
[  564.134926][   T30]  schedule_preempt_disabled+0x13/0x30
[  564.140459][   T30]  __mutex_lock+0x6a7/0xd70
[  564.215063][   T30]  ? __mutex_lock+0x52a/0xd70
[  564.219816][   T30]  ? switchdev_deferred_process_work+0xe/0x20
[  564.350827][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  564.417903][   T30]  ? process_scheduled_works+0x976/0x1850
[  564.423696][   T30]  switchdev_deferred_process_work+0xe/0x20
[  564.545098][   T30]  process_scheduled_works+0xa63/0x1850
[  564.550748][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  564.654906][   T30]  ? assign_work+0x364/0x3d0
[  564.659584][   T30]  worker_thread+0x870/0xd30
[  564.664228][   T30]  ? __kthread_parkme+0x169/0x1d0
[  564.774880][   T30]  ? __pfx_worker_thread+0x10/0x10
[  564.780071][   T30]  kthread+0x2f0/0x390
[  564.784176][   T30]  ? __pfx_worker_thread+0x10/0x10
[  564.935386][   T30]  ? __pfx_kthread+0x10/0x10
[  564.940062][   T30]  ret_from_fork+0x4b/0x80
[  564.944516][   T30]  ? __pfx_kthread+0x10/0x10
[  565.054917][   T30]  ret_from_fork_asm+0x1a/0x30
[  565.059775][   T30]  </TASK>
[  565.134914][   T30] INFO: task kworker/u8:4:62 blocked for more than 157 seconds.
[  565.142622][   T30]       Not tainted 6.12.0-rc6-syzkaller #0
[  565.254868][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  565.263601][   T30] task:kworker/u8:4    state:D stack:19992 pid:62    tgid:62    ppid:2      flags:0x00004000
[  565.454896][   T30] Workqueue: events_unbound linkwatch_event
[  565.460870][   T30] Call Trace:
[  565.464175][   T30]  <TASK>
[  565.934928][   T30]  __schedule+0x184f/0x4c30
[  565.939543][   T30]  ? __pfx___schedule+0x10/0x10
[  565.944433][   T30]  ? __pfx_lock_release+0x10/0x10
[  566.054873][   T30]  ? __mutex_trylock_common+0x92/0x2e0
[  566.060431][   T30]  ? kthread_data+0x52/0xd0
[  566.174907][   T30]  ? schedule+0x90/0x320
[  566.179229][   T30]  ? wq_worker_sleeping+0x66/0x240
[  566.184393][   T30]  ? schedule+0x90/0x320
[  566.364870][   T30]  schedule+0x14b/0x320
[  566.369104][   T30]  schedule_preempt_disabled+0x13/0x30
[  566.374598][   T30]  __mutex_lock+0x6a7/0xd70
[  566.554876][   T30]  ? __mutex_lock+0x52a/0xd70
[  566.559626][   T30]  ? linkwatch_event+0xe/0x60
[  566.685023][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  566.690136][   T30]  ? process_scheduled_works+0x976/0x1850
[  566.824892][   T30]  linkwatch_event+0xe/0x60
[  566.829466][   T30]  process_scheduled_works+0xa63/0x1850
[  566.954906][   T30]  ? __pfx_process_scheduled_works+0x10/0x10
[  566.960983][   T30]  ? assign_work+0x364/0x3d0
[  567.094882][   T30]  worker_thread+0x870/0xd30
[  567.099570][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  567.234914][   T30]  ? __kthread_parkme+0x169/0x1d0
[  567.240029][   T30]  ? __pfx_worker_thread+0x10/0x10
[  567.374871][   T30]  kthread+0x2f0/0x390
[  567.379013][   T30]  ? __pfx_worker_thread+0x10/0x10
[  567.504894][   T30]  ? __pfx_kthread+0x10/0x10
[  567.509554][   T30]  ret_from_fork+0x4b/0x80
[  567.514003][   T30]  ? __pfx_kthread+0x10/0x10
[  567.774954][   T30]  ret_from_fork_asm+0x1a/0x30
[  567.779807][   T30]  </TASK>
[  567.854933][   T30] INFO: task dhcpcd:5505 blocked for more than 160 seconds.
[  567.862278][   T30]       Not tainted 6.12.0-rc6-syzkaller #0
[  567.964930][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  567.973664][   T30] task:dhcpcd          state:D stack:22808 pid:5505  tgid:5505  ppid:1      flags:0x00000002
[  568.174955][   T30] Call Trace:
[  568.178301][   T30]  <TASK>
[  568.181262][   T30]  __schedule+0x184f/0x4c30