last executing test programs:

26m28.116026848s ago: executing program 3 (id=704):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
r0 = socket(0x23, 0x6, 0x1000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, r0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=<r3=>0x0)
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b)
landlock_create_ruleset(&(0x7f0000000440)={0x6621, 0x2}, 0x18, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x5, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000240)={&(0x7f0000000080)=[{0x81, 0x1000, 0x0, 0x0}], 0x1})

26m23.981293126s ago: executing program 3 (id=723):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc4173c3d6f357d027273117b3d0f171ba4ac4703cad036e68907e50e9997cd9c07bd75e6ff", 0x2e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e020b41fb2f8", 0xea}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0fe", 0x9d}, {&(0x7f0000000300)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661e280329d16092058e2f02d853b230704e80cee683918af77403bbbf00203d23592d737fc", 0x5f}, {&(0x7f0000000400)="0f7c77b4806d72cf5f68d99e", 0xc}], 0x5}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958761a4d88", 0x79}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839a", 0x98}, {&(0x7f0000000840)="8d684aa45f4b69499d707f3c8d114132fee1eafdcbbc5a16cb7b2841192b5779f99579e5c788b15b023df831028b9e6b5e9edd619e22626535212de5a998c5b793abdd7336cd8eb19e2fbd9a6ac2ca9c0f138ee10572672999ca4f51c09f9810459bad7e7bc28fc8890224dc01efcc276e62afe52450049cb6a165ce771a64b46f9b283ba8083e05c82291ed3bf4408b57142db3ae3da83206613704b856045dabb7e6e1ccf2a22b6d59b635ba3bc1f37bb759ce245877eba8aa82c0465c8d1bf7057ed0fcbdf5cf8d06bab48b66bcac445bc7e7f5", 0xd5}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000bc0)="fec6c77850", 0x5}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001180)="dc09ad32bdb1c12a58eac5aab96535f58c67fb9fe1895a8f009f613ec01a0a69b2c9a0951e8a3e0493ba11f2544a9ce70a53a57a08710fe5bfb49a171137f27920651aa9e1d2b425764fdc57f5b5ed58ff6ae812f492717424246a5fb27b686152ef0918f4c4d5ceb0e046d8540027647c31f842e857f23b9988fb032980992659e4f5c01e881237aac6830d495bde9bb2ec7c4af4e37f79d5a0fa2cc5585d7c8406c2dc6fd91eb84d38c76978d1865a", 0xb0}, {&(0x7f0000001240)="d61f65ae509c2dfcae0d3583f8d9f25e6edc3bdda76b4d36500d091cb5701353effae563b807c50c4a6ec2f9952c274da950cd667f1066390c0410f1b205b8ac766d619cef4a34bfbb89618a9f14b47f809231bbe681b314a7d1e311", 0x5c}], 0x2}}], 0x4, 0x2090)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000001c0)="153529b08eda7117f7fba64096575aaf02b5f4a605af08949be00e4be027e61174fd50bb48cd44b0b21bca1b21cec9d11e9729fad985a73e2b8b8642128b277831d20c21107e9c5079c356d1bfa3a62b749a3962f3e57f61d796f7e00563a7", 0xffffffffffffff6e, 0x10008095, 0x0, 0x0)

26m23.033773559s ago: executing program 3 (id=726):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfd, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000100)=@un=@file={0x0, './file0\x00'}, 0x80, 0x0}, 0x881)
syz_usb_connect(0x0, 0x57, &(0x7f0000000300)=ANY=[@ANYBLOB="12010102882333404f17318af4390102030109024500013f06400409044207000e0100010a240107000105ff010302070724050107638c0924030500030406810c2402060602"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$netlink(r2, 0x10e, 0xc, 0x0, &(0x7f0000000040))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'hsr0\x00'})
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000180)={'bond0\x00', 0x2})
write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000080)=0x7fffffffffffffff, 0x3462281e, 0x5)
ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0)

26m19.737465774s ago: executing program 3 (id=735):
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, 0x0, 0x0)
read(r2, 0x0, 0x0)
r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
ioctl$FS_IOC_GETVERSION(r8, 0xc040ff0b, &(0x7f0000000180))
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x54, r9, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1c, 0x6a}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffeff}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004001)
syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x20080)
syz_io_uring_setup(0x266a, &(0x7f0000000540)={0x0, 0x8693, 0x40, 0x0, 0x3d3, 0x0, r0}, &(0x7f00000005c0), &(0x7f0000000600)=<r10=>0x0)
syz_io_uring_submit(0x0, r10, &(0x7f0000000640)=@IORING_OP_FALLOCATE={0x11, 0x48, 0x0, @fd=r3, 0x1, 0x0, 0xd, 0x0, 0x1})
ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x85b, 0x0, 0x8}]})

26m16.377631612s ago: executing program 3 (id=747):
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0xfffffff7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x74}}}, &(0x7f0000000280)=0x84)
r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc4, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f0000000280)={'\x00', 0xf, 0x66a, 0x9, 0x0, 0x1, 0x80a4000, 0xd000, '\x00', 0xd5ad})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x161}, &(0x7f0000000340), &(0x7f0000000280))

26m14.949167583s ago: executing program 3 (id=752):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x400e826, 0x100, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r7=>0x0, @dev, @private}, &(0x7f0000000100)=0xc)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x3, 0xf, r7, 0xe}, 0xc)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x8000002)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8)

25m59.705448178s ago: executing program 32 (id=752):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x400e826, 0x100, 0x1, 0x3c3}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={<r7=>0x0, @dev, @private}, &(0x7f0000000100)=0xc)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x3, 0xf, r7, 0xe}, 0xc)
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1414, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}}]}}}, @IFLA_LINK={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x44}, 0x8000002)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f0000000200)=0x8)

10m44.674251185s ago: executing program 2 (id=5495):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
fcntl$setstatus(r1, 0x4, 0x4800)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x20040084)
syz_usb_connect(0x5, 0x61, &(0x7f0000000e00)={{0x12, 0x1, 0x110, 0x22, 0xb, 0x78, 0x8, 0x5ac, 0x216, 0x997e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4f, 0x1, 0xa, 0x8, 0x0, 0x9, [{{0x9, 0x4, 0xd3, 0xe, 0x6, 0x3, 0xa0, 0x2, 0x80, [], [{{0x9, 0x5, 0x8, 0x0, 0x10, 0x2, 0xfa, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x9, 0x81, 0xc4}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x7, 0x7, 0x81}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x3, 0x6, 0x4}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x1, 0x3, 0xbb}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0xde, 0xc5, 0x2}}]}}]}}]}}, &(0x7f00000017c0)={0xa, &(0x7f0000001540)={0xa, 0x6, 0x300, 0x6f, 0xff, 0x6, 0x20, 0x6}, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
openat$pfkey(0xffffffffffffff9c, &(0x7f0000002840), 0x12000, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000003880), 0x4, 0x2)
ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000004e40)={0xff, 0x15, 0x0, 0x28, "4d512c91002a4950676142687108dcd3f82acf5a895bd90fca2bb40bb4fbf29c"})

10m41.903441823s ago: executing program 2 (id=5500):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x600, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x100}, 0x0)

10m41.657112622s ago: executing program 2 (id=5501):
openat$kvm(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0xffffffffcd114f4f, 0x6, 0xffff, 0x3, 0xffeffffa, 0x0, 0x0, 0x10, 0xff}}, 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20042, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x10)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r6, 0x0, 0x0)
syz_usb_control_io$hid(r6, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x24, {[@global=@item_4={0x3, 0x1, 0x8, "efa6b686"}, @global=@item_012={0x2, 0x1, 0xa, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @global=@item_012={0x2, 0x1, 0x5, 'uB'}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}})
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000)
ioctl$EVIOCGKEYCODE_V2(r8, 0x80284504, &(0x7f0000000100)=""/101)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000007, 0x11, r9, 0x0)
syz_kvm_setup_cpu$x86(r9, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)

10m36.251775376s ago: executing program 2 (id=5523):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000100)='./file0\x00', 0x0, 0x4000}, 0x18)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3214, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect(0x6, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r2, 0x40085507, &(0x7f0000000100)=0xb)
r3 = dup(r0)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[])
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
sendfile(r7, r7, &(0x7f0000000000)=0x2eb4, 0x2000007ff)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)
dup(r1)

10m33.17370807s ago: executing program 2 (id=5537):
unshare(0x22020400)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0xa, 0x3, 0x3a)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x101, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r4, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}})
madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0})
setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000140)="869959a53e5801fe42ec73922752e46207c4c420038b2c43820ee4b380a658c2aa1a58216831de1d0d2b268dd7a87b6eecd96bac360d12feeb12d0ae5b23ca119f5c7b3fec35a626cf6653234ff19245ab46d608", 0x54)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000000)=""/15)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r7, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0)
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x2000020, &(0x7f00000011c0)=ANY=[@ANYBLOB='='], 0x0, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$BTRFS_IOC_DEV_INFO(r6, 0xd000941e, 0x0)
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001740)={0x0, 0x7, 0xf, 0x1})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010342008000fbdbdf251c0000000c0001800800030002000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x40006)

10m30.806793756s ago: executing program 2 (id=5548):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
syz_open_pts(r0, 0x141601)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x2185)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0)
close(r1)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

10m29.87342988s ago: executing program 33 (id=5548):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"})
syz_open_pts(r0, 0x141601)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x2185)
r1 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000000)='cpu.pressure\x00', 0x2, 0x0)
close(r1)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

4m58.379987689s ago: executing program 6 (id=6706):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xf, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000000)={0x0, 0x8, 0x200d})
mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)}], 0x1}, 0x0)
r4 = open(&(0x7f0000002280)='./file1\x00', 0x400, 0x10)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f00000023c0)={0x4, 0x0, &(0x7f0000002240)=[0x0, 0x0, 0x0, 0x0]})
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000002480)={0xf000000, 0x1, 0x5f, r4, 0x0, &(0x7f00000022c0)={0x9b090b, 0x5, '\x00', @string=&(0x7f0000002380)=0x3}})
write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50)
read$FUSE(r0, &(0x7f0000004580)={0x2020}, 0x2020)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
dup3(r5, r0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r6, 0x0)
r7 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TCXONC(r7, 0x540a, 0x2)
close(r7)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)

4m57.625826497s ago: executing program 6 (id=6709):
io_setup(0x40, &(0x7f0000000000)=<r0=>0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000000b80)={@val={0x0, 0x86dd}, @val={0x3, 0x0, 0xa, 0x0, 0x8d}, @mpls={[], @ipv6=@tipc_packet={0x8, 0x6, "09c2b4", 0x68, 0x6, 0xff, @empty, @mcast2, {[@fragment={0x2e, 0x0, 0x2c, 0x0, 0x0, 0x3, 0x67}, @srh={0x4, 0x6, 0x4, 0x3, 0x8f, 0x10, 0x1000, [@loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x2, 0x2, 0x4886, 0x0, 0x3, 0x9, 0x0, 0x2, 0x8, 0x0, 0x0, 0x4e23, 0x4e20}, 0x1}, 0x4, 0x4}}}}}}}, 0x9e)
r2 = eventfd(0x8001)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000000083d000000007d519041c2aced693f41cfd6f2c5fb24dbb44e63ea48421791f3e4adfafd5d42442217b79f8af02edd35f4274efe63006136fcedeeda1072e5d8ff5ad6821e88ede6d14c627572dae3e368a434a798884e7def9ed5007ef7e94a33", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000010000000300"/28], 0x50)
r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
r5 = eventfd(0x3)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)={{0x1, 0x1, 0x18, <r6=>0xffffffffffffffff}, './file0\x00'})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10)
setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0)
fcntl$getflags(r8, 0x3)
r9 = inotify_init()
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, <r10=>0xffffffffffffffff, {0x2}}, './file0\x00'})
io_submit(r0, 0x7, &(0x7f0000000a80)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x4, r1, &(0x7f00000002c0)="6e80c1158a31df96d9bb320007e9f246e48cb806ebce39d6e4609a19a6fd300e8642c0358bbf4bb3b2e47904633d91d187ef6fa844a736c1cdca4087a2650d06479dd9ca8b1b7fd93da266ace9cac39470b382e8c404072be84848f4ba2861630f594c1dc1334b9d915a7e85a5febf610af893605b3375dd391a32c1f681ec6eceac803ff8a902bd87a731b0c5abbad02c959438250a42b0b2e4b578452e2f58bbb057b64c6181db286fcbab1e4b0011819edb6456cc60b6f4950a23ee13a6969dfd0cbbcfe608e3849308272a888acaabb6f46145460c9a3cc59f587501425fb38517049d0757e4df3a046f63bc", 0xee, 0x5, 0x0, 0x1, r2}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x1, r3, &(0x7f00000003c0)="16b63f96f3d629d00c60b01044aa1455687e7fa746543a8aa783c55742138010f7e193f9186566b477e82986594e7e2dbdb0a88e7d36193c2dd08d888c2da71a1de7238a07f41cf1d214a0ce3ddb877b7c9bf51f2036217f3fe994680f9ed0f5526d5eef081731e4358928f6dc6ba2440878239fdaa1d214651ace3bed0502ccb99cab5e8cd60c16c98cc9b56fcc71e9da04de58ada8dffd317a7c0167660ee98776bfbc2e6c6e3c9f54439bf41bbf8bf6104f612980e4df379b0ab65d26fdba9b4f4811f2653d1595a9b815f53fa09fe485ea393ef72000368dc7d824bc0a0345bf8c56a8f9449aa15cab871d4f", 0xee, 0x6, 0x0, 0x3}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x8, r4, &(0x7f00000004c0)="74ef81257cd754db7d4add0f84a2f5c6658afc45d18be9ec55231f2dd1bc1b1c486d44520e9c837eb615f85ba908656b4a80c9d1ed4d9c65cf73bbd9a4d669c3d0c371551d8183467acc5dabc8b4ad302b74d7135cae6a212a7796e45b6cbaa5bd77c96ea58c48707f94a412783eab8caafe6a6157185d02a2ab02b2d3f71f7f569e52490d8805639055e8c7de82", 0x8e, 0x6, 0x0, 0x0, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x8, r6, &(0x7f0000000600)="faeb7b9eaba5173a2bcf2f089b4507b42348edd67d52aca2d38ce0ae0326720859ef3c5956bd334c925daf364c4492e7b5f5a2ae89d9b37d123ac108", 0x3c, 0x6b1, 0x0, 0x1}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x3, 0x0, r7, &(0x7f0000000680)="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", 0xfb, 0xfffffffffffffffb, 0x0, 0x3, r8}, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x8, 0xffffffffffffffff, &(0x7f00000007c0)="2b3b93967186e807c95654f6f3c3d9949b10f5faac426e02c060685885934ddab0babdf07e0c402d5c4237ac0d9943207f9f2fbce670550a750f749be65be2824250c9b971f77bda6609ad110b977e5bc951f8f5724157af4f21506c2c0cd572bf10adb4fd6cc43e40a0735734a18a6790214e5d21105c6246a94b1e0b5fda95c02a37f69ea2e9afa2ef32a4dadbcf8786c9106f07b5caa5923376edf3f6e8710d51a644b8f8ce9324d739909d8e21a36eec1605e4f20d0d76d0ddc23560bb180eee6f4f26b2e23dcaab8f", 0xcb, 0x8, 0x0, 0x1}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x7d3, r9, &(0x7f0000000900)="e5004782eef82ad8db822c7559e117a41d3f1c18230a039e82fbe6b2035ec1ab3cfdd45465c5d8a09a486cf2353ff6b27be122f8fd04a9f0fd2b7886c709f254352a05bdfe03e91f0d282467f4fd43374a67cf034748e96e8be123fe8b0e4dad64bef9e388f7dea894ad3411d8da71c9ee9ddcd3f00ccccb2f48b5f994811e5c6873258a7134148f92fc3a392f9489203949e413c7604f2b54b3c02dcd6efa1e58a5acb139b904db577980861e163d50006f940f49e453eb87d85a023c79dfdadee397d297bd53398912b2080e8b", 0xce, 0x4, 0x0, 0x2, r10}])
syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
socket$kcm(0x2, 0x5, 0x84)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
creat(0x0, 0xecf86c37d53049cc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
connect$unix(r11, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r11, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0x4, 0x0, 0x0, 0x0, 0xb201fffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r13 = socket(0x10, 0x3, 0x0)
write(r13, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000100)={0x4, 0x1, 0x2, {0xffffff7f, 0x87, 0x8, 0x1}})

4m56.311460039s ago: executing program 6 (id=6715):
openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="183f0000000000000000000003000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xfe2, &(0x7f0000001840)=""/4066, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)

4m56.13306064s ago: executing program 6 (id=6716):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x4)
r2 = socket$inet(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe)
r7 = io_uring_setup(0x168f, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r6, &(0x7f00000003c0)="17c8f5b850aae6b614a40085b5ed656189bb090007ec4b0d532edb923f861b37ff3a939b30620a183f61d080bcd691761c8c220450db0ac3a16ca8ae4548e0aa40f04e64de79a87c73563a4d3851dcef40930968f26c81b78ede5285373b8285efe53019c1be3f4f5962de490c51425c9152dc8250", 0x75, 0x10008095, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x633, 0x0)

4m52.996055218s ago: executing program 6 (id=6730):
r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000002c0)={0x1, 0x2, 0x1})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x800007, 0x11, r0, 0x2000)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, '\x00', {0x2}, 0xfff6})
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
write$fb(r2, &(0x7f00000000c0), 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0xa0202, 0x0, 0x11}, 0x18)
sendmsg$nl_route(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="44000000100001042abd70000002000000000000", @ANYRES32=r3, @ANYBLOB="8249e900800005001c00378009000100626f6e64000000000c0002800500100006000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x20000c10}, 0x8000)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x2, 0x7, 0x8, 0xe, 0x2, 0x0, 0x70bd28, 0x25dfdbfe}, 0x10}}, 0x8084)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x4b1e214daee7d038, 0x0, {}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x1, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb})

4m52.935449873s ago: executing program 6 (id=6731):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4)
getsockopt$packet_buf(r0, 0x107, 0x15, 0x0, &(0x7f0000001040))
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000500)={0xd, 0x1, 0x3, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
write$tun(r2, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0x4, 0x6, "af7364", 0x238, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x62, 0x4, 0x4, 0x2, 0x9, 0x18, 0xb0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2]}, @routing={0x2b, 0x4, 0x2, 0x9, 0x0, [@mcast2, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x68, 0x1, [], "c135cfbffa9c367cceca4ca17a6713316ba7d1a10cceb676dd61c32e3cd46ec6f998ebf513c9e9ba32679ffd9efbe1e35373f05ec9905d5c1ae11204eb0f5135d9784b6eba829da174348f420caba5f274572f0546c7f922550e6747ee97cb7f651c40e361b874b7"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "0b82bb708060ca0f74a5720031e8515eddb4585a4410e5c69df383e02dc504cb7b20eb783dd6382f6c8ad99bd8f2d9d3b02253e550574fe91634480759"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "df4627fc407b4ddd55636b921590fbac15dd5db0494463f8113091687de14282b082f777e3d71e2d435ef59e1a8a22211a8578d2d5c7e64ff00340b129c9f51a43454c62c8701e004fd331bf14c159cb1c6f1d606e147d15bbcdfd64f05f76"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x7, 0x2, 0x0, 0x0, 0x3, 0x40}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x4e, 0x0, 0x1, 0x1, 0x2, 0x7}, 0x2, {0xb2, 0xfffc, 0x3, 0x9, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "38a025dcfcb95f556af6e40f681631b4d1c70405238151ec3cede2fbc252ec81e468aa1c6d082129f9791c765c0d55f8995a53383eb9731349ccb467559376a1a03ab70a26f2d15ac32f79a8af80c79b12ce726e764f6f47adcd6bb2819ebd95f6de23634258bc2b792f82d88e6e67f2e4e1b1795eac7a9cee582e025263ac7c36c9d40e666c2e0342913ff293f0a8342b60db8b7f33b3b432c96a952d016348"}}}}}, 0x260)

4m52.440771508s ago: executing program 34 (id=6731):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x1000}, 0x4)
getsockopt$packet_buf(r0, 0x107, 0x15, 0x0, &(0x7f0000001040))
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000500)={0xd, 0x1, 0x3, "3bd9d3fe337649c318d3b5710fe89a0d9ec9b50e98bc2e00", 0x32315241})
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0, {0x5}}, './file0\x00'})
write$tun(r2, &(0x7f00000001c0)={@void, @void, @ipv6=@gre_packet={0x4, 0x6, "af7364", 0x238, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@srh={0x62, 0x4, 0x4, 0x2, 0x9, 0x18, 0xb0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2]}, @routing={0x2b, 0x4, 0x2, 0x9, 0x0, [@mcast2, @local]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x68, 0x1, [], "c135cfbffa9c367cceca4ca17a6713316ba7d1a10cceb676dd61c32e3cd46ec6f998ebf513c9e9ba32679ffd9efbe1e35373f05ec9905d5c1ae11204eb0f5135d9784b6eba829da174348f420caba5f274572f0546c7f922550e6747ee97cb7f651c40e361b874b7"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [], "0b82bb708060ca0f74a5720031e8515eddb4585a4410e5c69df383e02dc504cb7b20eb783dd6382f6c8ad99bd8f2d9d3b02253e550574fe91634480759"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "df4627fc407b4ddd55636b921590fbac15dd5db0494463f8113091687de14282b082f777e3d71e2d435ef59e1a8a22211a8578d2d5c7e64ff00340b129c9f51a43454c62c8701e004fd331bf14c159cb1c6f1d606e147d15bbcdfd64f05f76"}, {0x8, 0x88be, 0x3, {{0x2, 0x1, 0x7, 0x2, 0x0, 0x0, 0x3, 0x40}, 0x1, {0x80000001}}}, {0x8, 0x22eb, 0x0, {{0x4, 0x2, 0x4e, 0x0, 0x1, 0x1, 0x2, 0x7}, 0x2, {0xb2, 0xfffc, 0x3, 0x9, 0x1, 0x0, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x1, "38a025dcfcb95f556af6e40f681631b4d1c70405238151ec3cede2fbc252ec81e468aa1c6d082129f9791c765c0d55f8995a53383eb9731349ccb467559376a1a03ab70a26f2d15ac32f79a8af80c79b12ce726e764f6f47adcd6bb2819ebd95f6de23634258bc2b792f82d88e6e67f2e4e1b1795eac7a9cee582e025263ac7c36c9d40e666c2e0342913ff293f0a8342b60db8b7f33b3b432c96a952d016348"}}}}}, 0x260)

4.194772398s ago: executing program 7 (id=8913):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@host})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], 0x1, 0x400})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000200)={@hyper})
close_range(r1, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x3c})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.081903723s ago: executing program 7 (id=8916):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
symlink(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000240)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
open(&(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x480, 0x40)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)

3.896168962s ago: executing program 7 (id=8919):
r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
io_setup(0x81, &(0x7f0000001440)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x800, r1, 0x0, 0x0, 0x0, 0x0, 0x2}])

3.789876146s ago: executing program 7 (id=8925):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_012={0x1, 0x2, 0x5, '\f'}, @global=@item_012={0x1, 0x1, 0x4, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x1, 0x200, 0x7dd})

3.083421495s ago: executing program 1 (id=8943):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
close(r0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0xcbf, 0x8000}, 0x14)

2.955641571s ago: executing program 1 (id=8944):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000440)="8074727ce6", 0x5, 0x8c1, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x8, 0x6, @random="13da5c3e4dff"}, 0x14)

2.913056003s ago: executing program 1 (id=8946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)

2.720301139s ago: executing program 1 (id=8949):
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')
fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[], 0xfcd4, 0x3)

2.686826001s ago: executing program 1 (id=8950):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0)

2.650153652s ago: executing program 1 (id=8951):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_open_dev$I2C(0x0, 0x1, 0x402)
writev(r1, &(0x7f0000004280)=[{&(0x7f0000003840)="689017040e8229d628ac029efe64403776e0104d138acea3c98e5d9c", 0x1c}], 0x1)

2.585878642s ago: executing program 0 (id=8953):
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x400, 0x56, 0x2, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x0, 0xdffffffffffffffb, 0x2000000, 0xfffffffffffffffe}, {0x7, 0x0, 0x104, 0x800000000000000}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x2, @in=@rand_addr=0x64010101, 0x3506, 0x4, 0x0, 0x0, 0x8, 0x0, 0x1ff}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)

2.504464716s ago: executing program 0 (id=8954):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001)
sendmsg$inet6(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)}], 0x1}, 0x80c1)

2.504090566s ago: executing program 0 (id=8955):
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101040, 0x35)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000140)=ANY=[])
syz_fuse_handle_req(r0, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xa008a02, 0xdcf, 0x4005, 0x7, 0x800, 0x0, 0x0, 0x40, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x1, {0x3, 0x6, 0x0, {0x5, 0x7, 0x81, 0x80000001, 0x3, 0x8001, 0x3, 0x35741061, 0x10000, 0x3001, 0x9e7, 0xffffffffffffffff, 0x0, 0x40, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2.488482558s ago: executing program 0 (id=8956):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="400000001000370400000000fcdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000020001280080001006774700014000280050005"], 0x40}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r2, &(0x7f0000000440)="8074727ce6", 0x5, 0x8c1, &(0x7f0000000040)={0x11, 0x86dd, r1, 0x1, 0x8, 0x6, @random="13da5c3e4dff"}, 0x14)

2.440283299s ago: executing program 0 (id=8957):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f0000000200)=[{0x48, 0x4e, 0x0, 0xfdeffffd}, {0x6, 0x5e, 0x7e, 0x8}]})
write$ppp(0xffffffffffffffff, &(0x7f0000000300)="5af9", 0x2)

2.368731695s ago: executing program 0 (id=8958):
syz_open_dev$hidraw(&(0x7f0000000080), 0x80000, 0x418400)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
write$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)

720.88628ms ago: executing program 4 (id=8984):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0)

664.711884ms ago: executing program 7 (id=8986):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
sendmsg$tipc(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x8000)

616.846382ms ago: executing program 4 (id=8988):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0xa002a008})

568.883923ms ago: executing program 7 (id=8989):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r1=>0x0}, &(0x7f00000010c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000300)={r1, @in={{0x2, 0x4e24, @empty}}, [0x9e, 0x8000000000000001, 0x800, 0x8001, 0x9, 0xffffffffffffffff, 0x6, 0x5, 0x8, 0x8, 0x0, 0x3f, 0x9, 0xb, 0x406]}, &(0x7f0000000000)=0xfc)

500.22805ms ago: executing program 4 (id=8991):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4d}]}]}]}}]}, 0xb0}}, 0x0)

311.776151ms ago: executing program 4 (id=8993):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0)
read(r0, 0x0, 0x0)

257.969074ms ago: executing program 4 (id=8995):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)={0x2c, r2, 0x5, 0x1000000, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_IE={0xb, 0x3, '\x00\x00\x00\x00\x00\x00e'}]}]}, 0x2c}}, 0x0)

199.214503ms ago: executing program 4 (id=8997):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @local=@item_012={0x1, 0x2, 0x5, '\f'}, @global=@item_012={0x1, 0x1, 0x4, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000280)={0x1, 0x200, 0x7dd})

148.022364ms ago: executing program 5 (id=8998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="0c0099007f000000200000000400cc001400040069703667"], 0x5c}, 0x1, 0x0, 0x0, 0x20000880}, 0x44024)

133.970418ms ago: executing program 5 (id=8999):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080)
recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
recvmsg$kcm(r0, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
recvmsg(r0, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000002)

104.363219ms ago: executing program 5 (id=9000):
r0 = syz_open_dev$video4linux(&(0x7f0000001600), 0xb9, 0x1)
ioctl$VIDIOC_SUBDEV_G_CROP(r0, 0xc038563b, &(0x7f0000001640)={0x0, 0x0, {0x4, 0x9, 0x4, 0xda}})

28.435443ms ago: executing program 5 (id=9001):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
close(r2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x7c, 0x4)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000080)={0xa002a008})

28.137253ms ago: executing program 5 (id=9002):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000002000010000000000000000000a204000000000070000000014000200fc0200000000000000000000000000011400010020"], 0x44}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)

0s ago: executing program 5 (id=9003):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4d}]}]}]}}]}, 0xac}}, 0x0)

kernel console output (not intermixed with test programs):

w USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1675.403890][T12690] usb 6-1: Product: syz
[ 1675.424779][T12690] usb 6-1: Manufacturer: syz
[ 1675.430296][T12690] usb 6-1: SerialNumber: syz
[ 1675.440699][T12690] usb 6-1: config 0 descriptor??
[ 1675.454819][T32225] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1675.492490][T12690] hub 6-1:0.0: bad descriptor, ignoring hub
[ 1675.506164][T12690] hub 6-1:0.0: probe with driver hub failed with error -5
[ 1675.549295][T12690] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[ 1676.078748][ T5840] Bluetooth: hci0: command 0x0406 tx timeout
[ 1676.458246][T30506] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 1676.627886][T30506] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1676.644269][T30506] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1676.734122][T30506] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1676.995521][T30506] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1677.006608][T30506] usb 5-1: Product: syz
[ 1677.012721][T30506] usb 5-1: Manufacturer: syz
[ 1677.017581][T30506] usb 5-1: SerialNumber: syz
[ 1677.035831][T30506] usb 5-1: config 0 descriptor??
[ 1677.054433][T30506] usb 5-1: selecting invalid altsetting 0
[ 1677.746894][T30506] usb 6-1: USB disconnect, device number 65
[ 1679.479903][   T30] kauditd_printk_skb: 73 callbacks suppressed
[ 1679.479916][   T30] audit: type=1326 audit(1768533692.690:10177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1679.517013][T32313] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1679.541698][T32313] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1679.573633][   T30] audit: type=1326 audit(1768533692.720:10178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1679.619218][   T30] audit: type=1326 audit(1768533692.720:10179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1679.642639][   T30] audit: type=1326 audit(1768533692.720:10180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1679.709589][   T30] audit: type=1326 audit(1768533692.720:10181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1679.758903][   T30] audit: type=1326 audit(1768533692.720:10182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcc41991667 code=0x7ffc0000
[ 1679.823630][   T30] audit: type=1326 audit(1768533692.720:10183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fcc419915dc code=0x7ffc0000
[ 1679.871406][   T30] audit: type=1326 audit(1768533692.730:10184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc41991514 code=0x7ffc0000
[ 1679.924119][   T30] audit: type=1326 audit(1768533692.730:10185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fcc41991514 code=0x7ffc0000
[ 1679.960782][   T30] audit: type=1326 audit(1768533692.730:10186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32311 comm="syz.0.7258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcc4198e3aa code=0x7ffc0000
[ 1680.024053][T19301] usb 5-1: USB disconnect, device number 86
[ 1680.143034][T32317] fuse: Unknown parameter 'rootmo'
[ 1680.391143][T32325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7263'.
[ 1680.400282][    T9] usb 6-1: new low-speed USB device number 66 using dummy_hcd
[ 1680.558508][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1680.577467][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1680.599842][    T9] usb 6-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1680.626239][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.654890][    T9] usb 6-1: config 0 descriptor??
[ 1681.073785][    T9] glorious 0003:258A:0036.008E: unbalanced collection at end of report description
[ 1681.090142][    T9] glorious 0003:258A:0036.008E: probe with driver glorious failed with error -22
[ 1681.279670][    T9] usb 6-1: USB disconnect, device number 66
[ 1681.725504][ T5908] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1681.799990][T32346] netlink: 'syz.1.7270': attribute type 44 has an invalid length.
[ 1681.871254][T32348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7270'.
[ 1681.893422][ T5908] usb 5-1: Using ep0 maxpacket: 32
[ 1681.901715][ T5908] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[ 1681.901723][T32348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7270'.
[ 1681.950067][ T5908] usb 5-1: config 0 has no interface number 0
[ 1681.968272][ T5908] usb 5-1: config 0 interface 85 has no altsetting 0
[ 1682.004921][T32351] fuse: Unknown parameter 'rootmo'
[ 1682.008971][ T5908] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 1682.039117][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1682.067719][ T5908] usb 5-1: Product: syz
[ 1682.082114][ T5908] usb 5-1: Manufacturer: syz
[ 1682.090806][ T5908] usb 5-1: SerialNumber: syz
[ 1682.115240][ T5908] usb 5-1: config 0 descriptor??
[ 1682.135321][ T5908] appletouch 5-1:0.85: Could not find int-in endpoint
[ 1682.149083][ T5908] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[ 1682.159547][ T5908] usbhid 5-1:0.85: couldn't find an input interrupt endpoint
[ 1682.410027][T32368] netlink: 56 bytes leftover after parsing attributes in process `syz.7.7275'.
[ 1682.702204][    T9] usb 5-1: USB disconnect, device number 87
[ 1682.918217][T32375] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1683.462646][T32384] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1683.747483][T32400] FAULT_INJECTION: forcing a failure.
[ 1683.747483][T32400] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1683.827770][T32400] CPU: 0 UID: 0 PID: 32400 Comm: syz.5.7285 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1683.827801][T32400] Tainted: [L]=SOFTLOCKUP
[ 1683.827808][T32400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1683.827820][T32400] Call Trace:
[ 1683.827828][T32400]  <TASK>
[ 1683.827837][T32400]  dump_stack_lvl+0xe8/0x150
[ 1683.827863][T32400]  should_fail_ex+0x414/0x560
[ 1683.827887][T32400]  _copy_from_user+0x2d/0xb0
[ 1683.827910][T32400]  ___sys_sendmsg+0x158/0x2a0
[ 1683.827935][T32400]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1683.827989][T32400]  ? __fget_files+0x2a/0x420
[ 1683.828009][T32400]  ? __fget_files+0x3a0/0x420
[ 1683.828039][T32400]  __x64_sys_sendmsg+0x19b/0x260
[ 1683.828063][T32400]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1683.828093][T32400]  ? __pfx_ksys_write+0x10/0x10
[ 1683.828121][T32400]  do_syscall_64+0xec/0xf80
[ 1683.828141][T32400]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.828157][T32400]  ? trace_irq_disable+0x37/0x100
[ 1683.828179][T32400]  ? clear_bhb_loop+0x60/0xb0
[ 1683.828200][T32400]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.828218][T32400] RIP: 0033:0x7f171318f749
[ 1683.828234][T32400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1683.828251][T32400] RSP: 002b:00007f17140cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1683.828271][T32400] RAX: ffffffffffffffda RBX: 00007f17133e5fa0 RCX: 00007f171318f749
[ 1683.828285][T32400] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1683.828297][T32400] RBP: 00007f17140cf090 R08: 0000000000000000 R09: 0000000000000000
[ 1683.828309][T32400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1683.828319][T32400] R13: 00007f17133e6038 R14: 00007f17133e5fa0 R15: 00007f171350fa28
[ 1683.828348][T32400]  </TASK>
[ 1684.181280][T32404] input input136: cannot allocate more than FF_MAX_EFFECTS effects
[ 1684.319714][T32411] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1684.353931][T32413] Cannot find set identified by id 3 to match
[ 1684.690771][T32419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7289'.
[ 1685.014769][T32422] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7291'.
[ 1685.529918][T32427] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7292'.
[ 1686.174729][T32434] FAULT_INJECTION: forcing a failure.
[ 1686.174729][T32434] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1686.255480][T32434] CPU: 1 UID: 0 PID: 32434 Comm: syz.7.7294 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1686.255511][T32434] Tainted: [L]=SOFTLOCKUP
[ 1686.255519][T32434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1686.255531][T32434] Call Trace:
[ 1686.255539][T32434]  <TASK>
[ 1686.255548][T32434]  dump_stack_lvl+0xe8/0x150
[ 1686.255574][T32434]  should_fail_ex+0x414/0x560
[ 1686.255598][T32434]  copy_fpstate_to_sigframe+0xa70/0xcc0
[ 1686.255627][T32434]  ? copy_fpstate_to_sigframe+0x181/0xcc0
[ 1686.255656][T32434]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 1686.255686][T32434]  ? do_raw_spin_unlock+0x122/0x240
[ 1686.255712][T32434]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1686.255740][T32434]  ? fpu__alloc_mathframe+0xad/0x130
[ 1686.255765][T32434]  get_sigframe+0x58d/0x7d0
[ 1686.255794][T32434]  ? __pfx_get_sigframe+0x10/0x10
[ 1686.255822][T32434]  ? posixtimer_deliver_signal+0x305/0x410
[ 1686.255846][T32434]  x64_setup_rt_frame+0x15b/0xd40
[ 1686.255874][T32434]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1686.255892][T32434]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1686.255912][T32434]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1686.255929][T32434]  ? get_signal+0x1150/0x1340
[ 1686.255954][T32434]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[ 1686.255986][T32434]  arch_do_signal_or_restart+0x3d1/0x7a0
[ 1686.256013][T32434]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1686.256043][T32434]  ? __x64_sys_pread64+0x1f2/0x220
[ 1686.256071][T32434]  exit_to_user_mode_loop+0x87/0x4e0
[ 1686.256090][T32434]  ? rcu_is_watching+0x15/0xb0
[ 1686.256113][T32434]  do_syscall_64+0x2c1/0xf80
[ 1686.256132][T32434]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.256149][T32434]  ? trace_irq_disable+0x37/0x100
[ 1686.256202][T32434]  ? clear_bhb_loop+0x60/0xb0
[ 1686.256224][T32434]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.256240][T32434] RIP: 0033:0x7fefb9f8f747
[ 1686.256256][T32434] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89
[ 1686.256271][T32434] RSP: 002b:00007fefbad8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
[ 1686.256291][T32434] RAX: 0000000000000011 RBX: 00007fefba1e5fa0 RCX: 00007fefb9f8f749
[ 1686.256304][T32434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 1686.256315][T32434] RBP: 00007fefbad8d090 R08: 0000000000000000 R09: 0000000000000000
[ 1686.256334][T32434] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002
[ 1686.256345][T32434] R13: 00007fefba1e6038 R14: 00007fefba1e5fa0 R15: 00007fefba30fa28
[ 1686.256374][T32434]  </TASK>
[ 1687.098154][   T30] kauditd_printk_skb: 31 callbacks suppressed
[ 1687.098167][   T30] audit: type=1326 audit(1768533700.270:10218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1687.199727][   T30] audit: type=1326 audit(1768533700.270:10219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1687.305207][T32451] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1687.320100][T32454] FAULT_INJECTION: forcing a failure.
[ 1687.320100][T32454] name failslab, interval 1, probability 0, space 0, times 0
[ 1687.325525][T12690] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1687.350294][   T30] audit: type=1326 audit(1768533700.270:10220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1687.359939][T32454] CPU: 1 UID: 0 PID: 32454 Comm: syz.7.7301 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1687.359970][T32454] Tainted: [L]=SOFTLOCKUP
[ 1687.359977][T32454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1687.359990][T32454] Call Trace:
[ 1687.359999][T32454]  <TASK>
[ 1687.360007][T32454]  dump_stack_lvl+0xe8/0x150
[ 1687.360035][T32454]  should_fail_ex+0x414/0x560
[ 1687.360060][T32454]  should_failslab+0xa8/0x100
[ 1687.360084][T32454]  __kvmalloc_node_noprof+0x175/0x920
[ 1687.360106][T32454]  ? page_pool_create_percpu+0x2dd/0xb80
[ 1687.360124][T32454]  ? page_pool_create_percpu+0xaf/0xb80
[ 1687.360147][T32454]  page_pool_create_percpu+0x2dd/0xb80
[ 1687.360256][T32454]  __veth_napi_enable_range+0x16c/0x700
[ 1687.360291][T32454]  ? __pfx___veth_napi_enable_range+0x10/0x10
[ 1687.360325][T32454]  ? netif_napi_set_irq_locked+0x1f9/0x730
[ 1687.360349][T32454]  veth_napi_enable_range+0xff/0x200
[ 1687.360390][T32454]  veth_set_channels+0x82f/0xa60
[ 1687.360430][T32454]  ethtool_set_channels+0x4ce/0x560
[ 1687.360454][T32454]  ? __pfx_ethtool_set_channels+0x10/0x10
[ 1687.360486][T32454]  ? bpf_lsm_capable+0x9/0x20
[ 1687.360512][T32454]  ? security_capable+0x7e/0x2e0
[ 1687.360547][T32454]  dev_ethtool+0x184e/0x19c0
[ 1687.360579][T32454]  ? __pfx_dev_ethtool+0x10/0x10
[ 1687.360594][T32454]  ? dev_load+0x21/0x1f0
[ 1687.360628][T32454]  ? dev_load+0x21/0x1f0
[ 1687.360648][T32454]  dev_ioctl+0x392/0x1150
[ 1687.360673][T32454]  sock_do_ioctl+0x22c/0x300
[ 1687.360702][T32454]  ? __pfx_sock_do_ioctl+0x10/0x10
[ 1687.360724][T32454]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1687.360759][T32454]  sock_ioctl+0x576/0x790
[ 1687.360785][T32454]  ? __pfx_sock_ioctl+0x10/0x10
[ 1687.360809][T32454]  ? __fget_files+0x2a/0x420
[ 1687.360831][T32454]  ? __fget_files+0x3a0/0x420
[ 1687.360849][T32454]  ? __fget_files+0x2a/0x420
[ 1687.360873][T32454]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1687.360892][T32454]  ? __pfx_sock_ioctl+0x10/0x10
[ 1687.360919][T32454]  __se_sys_ioctl+0xfc/0x170
[ 1687.360948][T32454]  do_syscall_64+0xec/0xf80
[ 1687.360968][T32454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1687.360985][T32454]  ? trace_irq_disable+0x37/0x100
[ 1687.361018][T32454]  ? clear_bhb_loop+0x60/0xb0
[ 1687.361041][T32454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1687.361058][T32454] RIP: 0033:0x7fefb9f8f749
[ 1687.361077][T32454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1687.361093][T32454] RSP: 002b:00007fefbad8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1687.361113][T32454] RAX: ffffffffffffffda RBX: 00007fefba1e5fa0 RCX: 00007fefb9f8f749
[ 1687.361126][T32454] RDX: 0000200000000140 RSI: 0000000000008946 RDI: 0000000000000004
[ 1687.361139][T32454] RBP: 00007fefbad8d090 R08: 0000000000000000 R09: 0000000000000000
[ 1687.361149][T32454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1687.361158][T32454] R13: 00007fefba1e6038 R14: 00007fefba1e5fa0 R15: 00007fefba30fa28
[ 1687.361183][T32454]  </TASK>
[ 1687.362411][T32454] page_pool_create_percpu() gave up with errno -12
[ 1687.426086][   T30] audit: type=1326 audit(1768533700.270:10221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1687.775448][T12690] usb 5-1: Using ep0 maxpacket: 32
[ 1687.840290][   T30] audit: type=1326 audit(1768533700.270:10222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1687.919153][T12690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1687.941761][T12690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1688.000934][T32464] fuse: Unknown parameter 'rootmo'
[ 1688.047355][   T30] audit: type=1326 audit(1768533700.270:10223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1688.070122][T12690] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1688.091472][T12690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1688.106213][T32462] Cannot find set identified by id 3 to match
[ 1688.138907][T12690] usb 5-1: config 0 descriptor??
[ 1688.147631][   T30] audit: type=1326 audit(1768533700.270:10224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1688.265533][   T30] audit: type=1326 audit(1768533700.270:10225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1688.288621][   T30] audit: type=1326 audit(1768533700.270:10226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1688.312643][   T30] audit: type=1326 audit(1768533700.270:10227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32444 comm="syz.4.7298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1688.593915][T12690] ft260 0003:0403:6030.008F: unknown main item tag 0x7
[ 1688.805657][T32478] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7307'.
[ 1688.849303][T12690] ft260 0003:0403:6030.008F: chip code: 6424 8183
[ 1689.086163][T12690] ft260 0003:0403:6030.008F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[ 1689.307366][T12690] ft260 0003:0403:6030.008F: failed to retrieve status: -32, no wakeup
[ 1689.324658][T12690] ft260 0003:0403:6030.008F: failed to retrieve status: -5
[ 1690.428618][T32526] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1690.497710][T32526] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[ 1690.705549][T19301] usb 6-1: new full-speed USB device number 67 using dummy_hcd
[ 1690.733553][T12690] ft260 0003:0403:6030.008F: failed to reset I2C controller: -71
[ 1690.780414][T12690] usb 5-1: USB disconnect, device number 88
[ 1690.877475][T19301] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1690.888886][T19301] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1690.898930][T19301] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1690.911083][T19301] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1690.919554][T19301] usb 6-1: Product: syz
[ 1690.923855][T19301] usb 6-1: Manufacturer: syz
[ 1690.928869][T19301] usb 6-1: SerialNumber: syz
[ 1690.938156][T19301] usb 6-1: config 0 descriptor??
[ 1690.956187][T19301] usb 6-1: selecting invalid altsetting 0
[ 1691.212210][T32540] 0: reclassify loop, rule prio 0, protocol 700
[ 1691.543417][T32546] input: syz1 as /devices/virtual/input/input137
[ 1691.659292][T32552] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[ 1692.968436][T32566] Cannot find set identified by id 3 to match
[ 1693.128683][T32570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7323'.
[ 1693.592117][   T30] kauditd_printk_skb: 91 callbacks suppressed
[ 1693.592138][   T30] audit: type=1326 audit(1768533706.710:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1693.714672][   T30] audit: type=1326 audit(1768533706.710:10320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1693.841129][   T30] audit: type=1326 audit(1768533706.710:10321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1693.886843][   T30] audit: type=1326 audit(1768533706.710:10322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1693.938416][T32578] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1693.973616][T32582] input: syz1 as /devices/virtual/input/input138
[ 1693.981673][T32578] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[ 1694.094446][   T30] audit: type=1326 audit(1768533706.710:10323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.162489][   T30] audit: type=1326 audit(1768533706.710:10324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.206338][T32578] tipc: Enabled bearer <udp:syz0>, priority 1
[ 1694.221537][   T30] audit: type=1326 audit(1768533706.710:10325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.315484][   T30] audit: type=1326 audit(1768533706.710:10326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.379806][  T980] usb 6-1: USB disconnect, device number 67
[ 1694.446481][   T30] audit: type=1326 audit(1768533706.710:10327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.600106][   T30] audit: type=1326 audit(1768533706.710:10328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32572 comm="syz.1.7324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1694.935438][  T980] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[ 1695.085453][  T980] usb 6-1: device descriptor read/64, error -71
[ 1695.325541][T12690] tipc: Node number set to 11
[ 1695.348417][  T980] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[ 1695.485636][  T980] usb 6-1: device descriptor read/64, error -71
[ 1695.598717][  T980] usb usb6-port1: attempt power cycle
[ 1695.945610][  T980] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[ 1696.047221][  T980] usb 6-1: device descriptor read/8, error -71
[ 1696.295469][  T980] usb 6-1: new high-speed USB device number 71 using dummy_hcd
[ 1696.378815][  T980] usb 6-1: device descriptor read/8, error -71
[ 1696.499607][T32609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7335'.
[ 1696.515856][  T980] usb usb6-port1: unable to enumerate USB device
[ 1696.606002][T32611] netlink: 'syz.4.7335': attribute type 21 has an invalid length.
[ 1696.628735][T32611] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7335'.
[ 1696.687675][T32611] netlink: 'syz.4.7335': attribute type 5 has an invalid length.
[ 1696.745596][T32611] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7335'.
[ 1696.765840][T32619] input: syz1 as /devices/virtual/input/input139
[ 1696.924029][T32627] fuse: Unknown parameter 'rootmo'
[ 1699.542601][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7352'.
[ 1699.575223][T32675] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7353'.
[ 1701.216053][T32698] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7360'.
[ 1701.681572][   T30] kauditd_printk_skb: 104 callbacks suppressed
[ 1701.681589][   T30] audit: type=1326 audit(1768533714.890:10433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1701.815069][   T30] audit: type=1326 audit(1768533714.900:10434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1701.998684][T32707] bond5: Removing last ns target with arp_interval on
[ 1702.093242][   T30] audit: type=1326 audit(1768533714.900:10435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.140953][   T30] audit: type=1326 audit(1768533714.900:10436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.171617][   T30] audit: type=1326 audit(1768533714.900:10437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.319701][   T30] audit: type=1326 audit(1768533714.900:10438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.345520][T19301] usb 6-1: new high-speed USB device number 72 using dummy_hcd
[ 1702.412172][   T30] audit: type=1326 audit(1768533714.900:10439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.494525][   T30] audit: type=1326 audit(1768533714.900:10440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.559385][   T30] audit: type=1326 audit(1768533714.900:10441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.669521][T19301] usb 6-1: Using ep0 maxpacket: 32
[ 1702.711573][T19301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1702.728730][T19301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1702.787161][T19301] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1702.832963][   T30] audit: type=1326 audit(1768533714.970:10442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32702 comm="syz.5.7362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1702.861565][T19301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1702.906447][T19301] usb 6-1: config 0 descriptor??
[ 1703.372551][T19301] ft260 0003:0403:6030.0090: unknown main item tag 0x7
[ 1703.569889][T19301] ft260 0003:0403:6030.0090: chip code: 6424 8183
[ 1703.777216][T19301] ft260 0003:0403:6030.0090: failed to retrieve system status
[ 1703.785798][T19301] ft260 0003:0403:6030.0090: probe with driver ft260 failed with error -5
[ 1704.812635][T32734] netlink: 'syz.0.7368': attribute type 6 has an invalid length.
[ 1704.821018][T32734] netlink: 'syz.0.7368': attribute type 7 has an invalid length.
[ 1704.828864][T32734] netlink: 'syz.0.7368': attribute type 8 has an invalid length.
[ 1704.836630][T32734] netlink: 'syz.0.7368': attribute type 15 has an invalid length.
[ 1705.025446][T30659] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1705.285478][T30659] usb 5-1: Using ep0 maxpacket: 32
[ 1705.295638][T30659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1705.311227][T30659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1705.337686][T30659] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1705.364834][T30659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1705.397233][T30659] usb 5-1: config 0 descriptor??
[ 1705.920553][T30659] ft260 0003:0403:6030.0091: unknown main item tag 0x7
[ 1705.988151][T10735] usb 6-1: USB disconnect, device number 72
[ 1706.122348][T30659] ft260 0003:0403:6030.0091: chip code: 6424 8183
[ 1706.360164][T30659] ft260 0003:0403:6030.0091: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0
[ 1706.580543][T30659] ft260 0003:0403:6030.0091: failed to retrieve status: -32, no wakeup
[ 1706.591769][T30659] ft260 0003:0403:6030.0091: failed to retrieve status: -5
[ 1706.797022][   T30] kauditd_printk_skb: 121 callbacks suppressed
[ 1706.797040][   T30] audit: type=1326 audit(1768533720.000:10564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1706.859868][   T30] audit: type=1326 audit(1768533720.000:10565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1706.908337][   T30] audit: type=1326 audit(1768533720.000:10566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a8598df90 code=0x7ffc0000
[ 1706.970763][   T30] audit: type=1326 audit(1768533720.000:10567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1707.147814][   T30] audit: type=1326 audit(1768533720.010:10568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1707.175532][   T30] audit: type=1326 audit(1768533720.010:10569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1707.202097][   T30] audit: type=1326 audit(1768533720.010:10570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32730 comm="syz.4.7369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a8598f749 code=0x7ffc0000
[ 1708.445633][T32761] loop4: detected capacity change from 0 to 7
[ 1708.463448][T32761] buffer_io_error: 5 callbacks suppressed
[ 1708.463485][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.521619][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.540454][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.561374][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.585014][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.613324][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.640750][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.663500][T32761] ldm_validate_partition_table(): Disk read failed.
[ 1708.694542][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.732158][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.761286][T32761] Buffer I/O error on dev loop4, logical block 0, async page read
[ 1708.778480][T32761] Dev loop4: unable to read RDB block 0
[ 1708.792595][T32761]  loop4: unable to read partition table
[ 1708.814049][T32761] loop4: partition table beyond EOD, truncated
[ 1708.889961][T30659] ft260 0003:0403:6030.0091: failed to reset I2C controller: -71
[ 1708.911139][T32761] loop_reread_partitions: partition scan of loop4 (úùƒå¡™‰ü�¾SêjºÐ	œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5)
[ 1708.936561][T30659] usb 5-1: USB disconnect, device number 89
[ 1710.679801][  T372] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7409'.
[ 1710.791949][  T393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1710.811230][  T393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1710.887420][T12690] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1711.071720][T12690] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1711.091107][T12690] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1711.122657][T12690] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1711.145397][T12690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1711.170795][T12690] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1711.197603][T12690] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1711.217472][T12690] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1711.232025][T12690] usb 5-1: Product: syz
[ 1711.253989][T12690] usb 5-1: Manufacturer: syz
[ 1711.282383][T12690] cdc_wdm 5-1:1.0: skipping garbage
[ 1711.295448][T12690] cdc_wdm 5-1:1.0: skipping garbage
[ 1711.311218][T12690] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1711.323619][T12690] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1711.692032][T12690] usb 5-1: USB disconnect, device number 90
[ 1712.362282][T11342] failed to send hello msg
[ 1712.368330][T11342] failed while handling packet from 1:60042
[ 1712.412638][  T429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7429'.
[ 1712.837273][  T439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1712.855794][  T439] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1713.035755][  T447] [U] ¹
[ 1713.059292][  T450] netlink: 'syz.1.7436': attribute type 32 has an invalid length.
[ 1713.098530][  T450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7436'.
[ 1713.108713][  T450] bond0: option arp_all_targets: invalid value (64)
[ 1716.138029][  T532] syz_tun: entered allmulticast mode
[ 1716.162814][  T531] syz_tun: left allmulticast mode
[ 1716.343904][  T539] syzkaller0: entered promiscuous mode
[ 1716.365468][  T539] syzkaller0: entered allmulticast mode
[ 1717.095448][T12690] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1717.166149][  T572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7486'.
[ 1717.194031][  T574] syzkaller0: entered promiscuous mode
[ 1717.241191][  T574] syzkaller0: entered allmulticast mode
[ 1717.265487][T12690] usb 5-1: Using ep0 maxpacket: 32
[ 1717.274742][T12690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11
[ 1717.295739][T12690] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024
[ 1717.336855][T12690] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1717.363576][T12690] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1717.375056][T12690] usb 5-1: Product: syz
[ 1717.379709][T12690] usb 5-1: Manufacturer: syz
[ 1717.384399][T12690] usb 5-1: SerialNumber: syz
[ 1717.396735][T12690] usb 5-1: config 0 descriptor??
[ 1717.404947][  T559] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1717.480548][T12690] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1717.637213][T26850] usb 5-1: Failed to submit usb control message: -71
[ 1717.645273][T10735] usb 5-1: USB disconnect, device number 91
[ 1717.658095][T26850] usb 5-1: unable to send the bmi data to the device: -71
[ 1717.675442][T26850] usb 5-1: unable to get target info from device
[ 1717.681829][T26850] usb 5-1: could not get target info (-71)
[ 1717.696682][T26850] usb 5-1: could not probe fw (-71)
[ 1718.523263][  T619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7506'.
[ 1718.532584][  T619] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7506'.
[ 1718.550351][  T619] syzkaller0: entered promiscuous mode
[ 1718.565617][  T619] syzkaller0: entered allmulticast mode
[ 1720.386381][  T692] loop7: detected capacity change from 0 to 7
[ 1720.421527][    C0] blk_print_req_error: 5 callbacks suppressed
[ 1720.421547][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.437381][    C0] buffer_io_error: 14 callbacks suppressed
[ 1720.437399][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.455799][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.465485][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.475392][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.484992][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.493962][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.503583][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.513288][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.522934][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.535544][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.545198][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.555298][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.565001][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.584504][  T692] ldm_validate_partition_table(): Disk read failed.
[ 1720.615391][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.625016][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.633589][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.643292][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.654207][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1720.663934][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1720.672403][  T692] Dev loop7: unable to read RDB block 0
[ 1720.679218][  T692]  loop7: unable to read partition table
[ 1720.698269][  T692] loop7: partition table beyond EOD, truncated
[ 1720.729593][  T692] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…Œ{í«Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1721.223336][  T708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1721.276148][  T708] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1721.917765][  T703] tipc: Enabled bearer <udp:syz2>, priority 1
[ 1722.437735][  T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1722.451141][  T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1722.595412][T28288] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1722.755382][T28288] usb 5-1: Using ep0 maxpacket: 32
[ 1722.762537][T28288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1722.774199][T28288] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1723.005395][T28288] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1723.027522][T28288] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[ 1723.060219][T28288] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[ 1723.101448][T28288] usb 5-1: Product: syz
[ 1723.120874][T28288] usb 5-1: Manufacturer: syz
[ 1723.140224][T28288] usb 5-1: SerialNumber: syz
[ 1723.184037][T28288] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input140
[ 1723.229946][T28288] input: failed to attach handler mousedev to device input140, error: -5
[ 1723.396950][T28288] usb 5-1: USB disconnect, device number 92
[ 1723.438583][T28288] appletouch 5-1:1.0: input: appletouch disconnected
[ 1723.638868][T10735] hid-generic 0000:0000:0000.0092: unknown main item tag 0x0
[ 1723.664717][T10735] hid-generic 0000:0000:0000.0092: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1723.910136][  T748] syzkaller0: entered promiscuous mode
[ 1723.937154][  T748] syzkaller0: entered allmulticast mode
[ 1724.605795][T12689] usb 6-1: new high-speed USB device number 73 using dummy_hcd
[ 1724.768027][T12689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1724.791394][T12689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1724.808113][T12689] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1724.838324][T12689] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1724.856290][T12689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.874719][  T789] syzkaller0: entered promiscuous mode
[ 1724.877744][T12689] usb 6-1: config 0 descriptor??
[ 1724.886527][   T30] audit: type=1326 audit(1768533738.100:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=784 comm="syz.7.7568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefb9f8f749 code=0x0
[ 1724.898760][  T789] syzkaller0: entered allmulticast mode
[ 1725.085852][  T794] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10)
[ 1725.092497][  T794] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1725.135608][  T794] vhci_hcd vhci_hcd.0: Device attached
[ 1725.385845][  T724] usb 47-1: new high-speed USB device number 2 using vhci_hcd
[ 1725.394384][T12689] plantronics 0003:047F:FFFF.0093: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[ 1725.621693][T30659] usb 6-1: USB disconnect, device number 73
[ 1725.648712][  T795] vhci_hcd: connection reset by peer
[ 1725.654402][ T4504] vhci_hcd vhci_hcd.7: stop threads
[ 1725.660083][ T4504] vhci_hcd vhci_hcd.7: release socket
[ 1725.725295][ T4504] vhci_hcd vhci_hcd.7: disconnect device
[ 1726.915466][T30659] usb 6-1: new high-speed USB device number 74 using dummy_hcd
[ 1727.065487][T30659] usb 6-1: Using ep0 maxpacket: 32
[ 1727.074623][T30659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1727.092040][T30659] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1727.107608][T30659] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1727.117151][T30659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1727.136620][T30659] usb 6-1: config 0 descriptor??
[ 1727.175625][  T854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.7595'.
[ 1727.565987][T30659] ft260 0003:0403:6030.0094: unknown main item tag 0x7
[ 1727.753338][T30659] ft260 0003:0403:6030.0094: chip code: 6524 8100
[ 1727.954512][T30659] ft260 0003:0403:6030.0094: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[ 1728.157386][T30659] ft260 0003:0403:6030.0094: failed to retrieve status: -32, no wakeup
[ 1728.203399][  T888] loop2: detected capacity change from 0 to 7
[ 1728.228907][  T888] Dev loop2: unable to read RDB block 7
[ 1728.249301][  T888]  loop2: unable to read partition table
[ 1728.288204][  T888] loop2: partition table beyond EOD, truncated
[ 1728.306431][  T888] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1728.439702][T19301] usb 6-1: USB disconnect, device number 74
[ 1728.850129][  T913] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7620'.
[ 1728.852068][  T910] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7609'.
[ 1730.249861][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1730.256270][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1730.605564][  T724] vhci_hcd vhci_hcd.7: vhci_device speed not set
[ 1732.265470][T28288] usb 6-1: new high-speed USB device number 75 using dummy_hcd
[ 1732.416568][T28288] usb 6-1: Using ep0 maxpacket: 32
[ 1732.447431][T28288] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1732.469040][T28288] usb 6-1: config 0 has no interface number 0
[ 1732.496517][T28288] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1732.528221][T28288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1732.555599][T28288] usb 6-1: Product: syz
[ 1732.559893][T28288] usb 6-1: Manufacturer: syz
[ 1732.564500][T28288] usb 6-1: SerialNumber: syz
[ 1732.603453][T28288] usb 6-1: config 0 descriptor??
[ 1732.620738][T28288] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1733.023462][ T1088] binder: BINDER_SET_CONTEXT_MGR already set
[ 1733.032030][ T1088] binder: 1087:1088 ioctl 4018620d 2000000002c0 returned -16
[ 1733.197534][T28288] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1733.236337][T28288] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1733.387331][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1733.387749][T19301] usb 6-1: USB disconnect, device number 75
[ 1733.436531][T19301] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1733.464658][T19301] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1733.494473][T19301] quatech2 6-1:0.51: device disconnected
[ 1734.082562][ T1118] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7696'.
[ 1734.285425][T30659] usb 6-1: new high-speed USB device number 76 using dummy_hcd
[ 1734.445707][T30659] usb 6-1: Using ep0 maxpacket: 8
[ 1734.476180][T30659] usb 6-1: config 0 has no interfaces?
[ 1734.497558][T30659] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[ 1734.519691][T30659] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1734.535387][T30659] usb 6-1: Product: syz
[ 1734.542554][T30659] usb 6-1: Manufacturer: syz
[ 1734.558042][T30659] usb 6-1: SerialNumber: syz
[ 1734.573647][T30659] usb 6-1: config 0 descriptor??
[ 1734.785545][T19301] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1734.791358][T10735] usb 6-1: USB disconnect, device number 76
[ 1734.945467][T19301] usb 5-1: Using ep0 maxpacket: 8
[ 1734.954289][T19301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1734.969436][T19301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1734.985004][T19301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1734.998519][T19301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1735.011809][T19301] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1735.021420][T19301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1735.048014][T19301] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1735.054059][T19301] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1735.062163][T19301] cdc_wdm 5-1:1.0: skipping garbage
[ 1735.067623][T19301] cdc_wdm 5-1:1.0: skipping garbage
[ 1735.074995][T19301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1735.082405][T19301] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1735.234747][ T1150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1735.246571][ T1150] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1735.387528][ T1161] syzkaller0: entered promiscuous mode
[ 1735.393787][ T1161] syzkaller0: entered allmulticast mode
[ 1735.668810][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7724'.
[ 1735.953620][T19301] usb 5-1: USB disconnect, device number 93
[ 1736.132385][T19301] usb 5-1: new low-speed USB device number 94 using dummy_hcd
[ 1736.301942][T19301] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1736.332290][T19301] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1736.355472][T19301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8
[ 1736.372074][T19301] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1736.381801][T19301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1736.394594][ T1156] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1736.416588][T19301] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1736.432971][T19301] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1736.451858][T19301] cdc_wdm 5-1:1.0: skipping garbage
[ 1736.457304][T19301] cdc_wdm 5-1:1.0: skipping garbage
[ 1736.474585][T19301] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1736.482159][T19301] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1736.715790][T19301] usb 5-1: USB disconnect, device number 94
[ 1737.803349][ T1255] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7753'.
[ 1737.835741][ T1255] unsupported nlmsg_type 40
[ 1738.079987][ T1263] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7756'.
[ 1739.001799][ T1298] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7771'.
[ 1739.184758][ T1309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1739.218372][ T1309] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1741.610972][   T30] audit: type=1326 audit(1768533754.820:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1384 comm="syz.0.7807" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x0
[ 1741.658154][ T1389] usb usb8: usbfs: process 1389 (syz.5.7809) did not claim interface 0 before use
[ 1741.766295][ T1396] binder: 1395:1396 ioctl c018620c 200000000240 returned -22
[ 1743.065465][T24812] usb 6-1: new high-speed USB device number 77 using dummy_hcd
[ 1743.235586][T24812] usb 6-1: Using ep0 maxpacket: 8
[ 1743.246101][T24812] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1743.262215][T24812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.291658][T24812] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1743.303281][T24812] pvrusb2: **********
[ 1743.308242][T24812] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1743.318646][T24812] pvrusb2: Important functionality might not be entirely working.
[ 1743.329393][T24812] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1743.354527][T24812] pvrusb2: **********
[ 1743.423107][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1743.436800][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1743.493769][ T2345] pvrusb2: Invalid write control endpoint
[ 1743.515891][T24812] usb 6-1: USB disconnect, device number 77
[ 1743.609013][ T2345] pvrusb2: Invalid write control endpoint
[ 1743.615021][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1743.629740][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1743.641543][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1743.651773][ T2345] pvrusb2: Device being rendered inoperable
[ 1743.660255][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1743.671142][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1743.693179][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1743.699574][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1743.716535][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1744.244342][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1744.253301][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1744.825580][T28288] usb 6-1: new high-speed USB device number 78 using dummy_hcd
[ 1744.995406][T28288] usb 6-1: Using ep0 maxpacket: 8
[ 1745.012439][T28288] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1745.038631][T28288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1745.079281][T28288] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1745.096841][T28288] pvrusb2: **********
[ 1745.100875][T28288] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1745.127885][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1745.136183][T28288] pvrusb2: Important functionality might not be entirely working.
[ 1745.144103][T28288] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1745.155629][T28288] pvrusb2: **********
[ 1745.156965][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1745.170978][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1745.180772][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1745.195550][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1745.282402][ T2345] pvrusb2: Invalid write control endpoint
[ 1745.296971][T28288] usb 6-1: USB disconnect, device number 78
[ 1745.366002][ T2345] pvrusb2: Invalid write control endpoint
[ 1745.373533][ T2345] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1745.382958][ T2345] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1745.394727][ T2345] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1745.407810][ T2345] pvrusb2: Device being rendered inoperable
[ 1745.416562][ T2345] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[ 1745.423962][ T2345] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c)
[ 1745.435157][ T2345] pvrusb2: Attached sub-driver cx25840
[ 1745.444654][ T2345] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1745.463957][ T2345] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1745.569086][ T1497] chnl_net:caif_netlink_parms(): no params data found
[ 1745.604477][T26956] tipc: Resetting bearer <eth:syzkaller0>
[ 1745.623263][T26956] tipc: Disabling bearer <eth:syzkaller0>
[ 1745.667305][ T1497] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1745.674567][ T1497] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1745.687935][ T1497] bridge_slave_0: entered allmulticast mode
[ 1745.695155][ T1497] bridge_slave_0: entered promiscuous mode
[ 1745.703844][ T1497] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1745.711160][ T1497] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1745.720763][ T1497] bridge_slave_1: entered allmulticast mode
[ 1745.728046][ T1497] bridge_slave_1: entered promiscuous mode
[ 1745.792606][ T1497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1745.805033][ T1497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1745.868326][   T30] audit: type=1326 audit(1768533759.080:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1505 comm="syz.5.7858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x0
[ 1745.905129][ T1497] team0: Port device team_slave_0 added
[ 1745.912915][ T1497] team0: Port device team_slave_1 added
[ 1745.963921][ T1497] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1745.971960][ T1497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1745.998044][ T1497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1746.011086][ T1497] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1746.018110][ T1497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1746.044039][ T1497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1746.110274][ T1497] hsr_slave_0: entered promiscuous mode
[ 1746.118903][ T1497] hsr_slave_1: entered promiscuous mode
[ 1746.125156][ T1497] debugfs: 'hsr0' already exists in 'hsr'
[ 1746.131277][ T1497] Cannot create hsr debugfs directory
[ 1746.361506][T11342] veth0_to_bridge: left allmulticast mode
[ 1746.369274][T11342] veth0_to_bridge: left promiscuous mode
[ 1746.375250][T11342] bridge0: port 1(veth0_to_bridge) entered disabled state
[ 1746.785505][T11342] bond1 (unregistering): (slave bridge1): Releasing backup interface
[ 1747.083049][T11342] bond0 (unregistering): (slave lo): Releasing backup interface
[ 1747.091893][T11342] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[ 1747.106564][T11342] bond0 (unregistering): Released all slaves
[ 1747.286606][T28618] Bluetooth: hci4: command tx timeout
[ 1747.330574][T11342] bond1 (unregistering): Released all slaves
[ 1747.370974][T11342] bond2 (unregistering): Released all slaves
[ 1747.406154][T11342] bond3 (unregistering): Released all slaves
[ 1747.425235][T11342] bond4 (unregistering): Released all slaves
[ 1747.451872][T11342] bond5 (unregistering): Released all slaves
[ 1747.747610][T11342] tipc: Disabling bearer <udp:syz2>
[ 1747.770437][T11342] tipc: Disabling bearer <udp:syz0>
[ 1747.790172][T11342] tipc: Left network mode
[ 1747.902798][   T30] audit: type=1326 audit(1768533761.110:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1539 comm="syz.1.7873" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x0
[ 1748.386201][T11342] hsr_slave_0: left promiscuous mode
[ 1748.400965][T11342] hsr_slave_1: left promiscuous mode
[ 1748.806582][  T724] usb 6-1: new high-speed USB device number 79 using dummy_hcd
[ 1748.970229][  T724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1748.987213][  T724] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1749.025410][  T724] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1749.072173][  T724] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1749.092570][  T724] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1749.123458][  T724] usb 6-1: config 0 descriptor??
[ 1749.378768][T28618] Bluetooth: hci4: command tx timeout
[ 1749.567678][  T724] usbhid 6-1:0.0: can't add hid device: -71
[ 1749.573664][  T724] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1749.604309][  T724] usb 6-1: USB disconnect, device number 79
[ 1750.332445][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7882'.
[ 1750.496946][   T30] audit: type=1326 audit(1768533763.710:10575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1583 comm="syz.5.7886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x0
[ 1750.654079][ T1497] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1750.684280][ T1497] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1750.708805][ T1497] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1750.748566][ T1497] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1751.077401][T11342] IPVS: stop unused estimator thread 0...
[ 1751.150316][ T1497] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1751.207592][ T1497] 8021q: adding VLAN 0 to HW filter on device team0
[ 1751.233743][T28743] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1751.240979][T28743] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1751.278126][T28743] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1751.285374][T28743] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1751.445699][T28618] Bluetooth: hci4: command tx timeout
[ 1751.526948][ T1497] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1751.660765][ T1497] veth0_vlan: entered promiscuous mode
[ 1751.683657][ T1497] veth1_vlan: entered promiscuous mode
[ 1751.733117][ T1497] veth0_macvtap: entered promiscuous mode
[ 1751.749484][ T1497] veth1_macvtap: entered promiscuous mode
[ 1751.784092][ T1497] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1751.812161][ T1497] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1751.838419][ T6132] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1751.848049][ T6132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1751.859048][ T6132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1751.883781][ T6132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1752.024152][ T5997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1752.046652][ T5997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1752.117595][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1752.136296][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1752.247744][ T1630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1752.278687][ T1630] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1752.338014][   T30] audit: type=1326 audit(1768533765.550:10576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1633 comm="syz.4.7899" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7f8f749 code=0x0
[ 1753.525532][T28618] Bluetooth: hci4: command tx timeout
[ 1753.754422][ T1680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7919'.
[ 1754.234324][ T1692] syzkaller0: entered promiscuous mode
[ 1754.250011][ T1692] syzkaller0: entered allmulticast mode
[ 1755.796551][T28288] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1755.948741][T28288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1755.960238][T28288] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1755.994586][T28288] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1756.005789][T28288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1756.027094][T28288] usb 5-1: config 0 descriptor??
[ 1757.582385][T28288] usb 6-1: new high-speed USB device number 80 using dummy_hcd
[ 1757.739716][T28288] usb 6-1: Using ep0 maxpacket: 8
[ 1757.757868][T28288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1757.794429][T28288] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=37.a3
[ 1757.803800][T28288] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1757.811907][T28288] usb 6-1: Product: syz
[ 1757.816171][T28288] usb 6-1: Manufacturer: syz
[ 1757.820790][T28288] usb 6-1: SerialNumber: syz
[ 1757.836527][T28288] usb 6-1: config 0 descriptor??
[ 1758.067431][T28288] usb 6-1: USB disconnect, device number 80
[ 1758.821000][   T30] audit: type=1326 audit(1768533772.030:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.845708][   T30] audit: type=1326 audit(1768533772.060:10578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.870780][   T30] audit: type=1326 audit(1768533772.060:10579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.896274][   T30] audit: type=1326 audit(1768533772.060:10580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.921088][   T30] audit: type=1326 audit(1768533772.080:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.952383][   T30] audit: type=1326 audit(1768533772.080:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1758.979816][   T30] audit: type=1326 audit(1768533772.080:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1759.002859][   T30] audit: type=1326 audit(1768533772.080:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1759.026633][   T30] audit: type=1326 audit(1768533772.080:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1759.051118][   T30] audit: type=1326 audit(1768533772.080:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1760 comm="syz.5.7950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1759.471282][ T1773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7955'.
[ 1760.015600][ T1776] netlink: 132 bytes leftover after parsing attributes in process `syz.7.7956'.
[ 1760.031357][T10735] usb 5-1: USB disconnect, device number 95
[ 1760.492836][ T1803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1760.512156][ T1803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1760.632114][ T1805] syzkaller0: entered promiscuous mode
[ 1760.639090][ T1805] syzkaller0: entered allmulticast mode
[ 1764.795847][T28288] usb 6-1: new high-speed USB device number 81 using dummy_hcd
[ 1764.827490][ T1875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1764.836495][ T1875] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1764.968060][T28288] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1764.980459][T28288] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1764.992004][T28288] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1765.001664][T28288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1765.022439][T28288] usb 6-1: config 0 descriptor??
[ 1765.240885][T12690] usb 6-1: USB disconnect, device number 81
[ 1766.348640][ T1916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8014'.
[ 1766.377598][ T1918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1766.393083][ T1918] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1766.494975][ T1924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 1766.995575][T12690] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1767.140233][T12690] usb 5-1: device descriptor read/64, error -71
[ 1767.405872][T12690] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1767.549521][T12690] usb 5-1: device descriptor read/64, error -71
[ 1767.585016][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8029'.
[ 1767.676246][T12690] usb usb5-port1: attempt power cycle
[ 1768.023474][T12690] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1768.076423][T12690] usb 5-1: device descriptor read/8, error -71
[ 1768.315574][T12690] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1768.357434][T12690] usb 5-1: device descriptor read/8, error -71
[ 1768.454373][ T1971] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8038'.
[ 1768.475892][T12690] usb usb5-port1: unable to enumerate USB device
[ 1768.483020][ T1971] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8038'.
[ 1769.476384][ T1988] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8045'.
[ 1769.556702][T28288] usb 6-1: new high-speed USB device number 82 using dummy_hcd
[ 1769.725773][T28288] usb 6-1: Using ep0 maxpacket: 8
[ 1769.734081][T28288] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1769.749797][T28288] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1769.768622][T28288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1769.780133][T28288] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1769.815406][T28288] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1769.835635][T28288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1769.861346][T28288] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1769.875385][T28288] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1769.885170][T28288] cdc_wdm 6-1:1.0: skipping garbage
[ 1769.891132][T28288] cdc_wdm 6-1:1.0: skipping garbage
[ 1769.907133][T28288] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1769.913076][T28288] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1771.199028][    T9] usb 6-1: USB disconnect, device number 82
[ 1771.290203][   T30] kauditd_printk_skb: 8 callbacks suppressed
[ 1771.290221][   T30] audit: type=1326 audit(1768533784.500:10595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.355986][   T30] audit: type=1326 audit(1768533784.500:10596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.385985][   T30] audit: type=1326 audit(1768533784.500:10597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.435416][   T30] audit: type=1326 audit(1768533784.500:10598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.475401][   T30] audit: type=1326 audit(1768533784.500:10599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.515412][   T30] audit: type=1326 audit(1768533784.500:10600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.549007][   T30] audit: type=1326 audit(1768533784.500:10601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.606031][   T30] audit: type=1326 audit(1768533784.500:10602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.654682][   T30] audit: type=1326 audit(1768533784.500:10603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.713104][   T30] audit: type=1326 audit(1768533784.500:10604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2038 comm="syz.0.8069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1771.777240][ T2048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8072'.
[ 1771.803191][ T2048] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8072'.
[ 1772.463246][ T2069] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8079'.
[ 1772.493909][ T2069] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8079'.
[ 1773.005851][T10735] usb 6-1: new high-speed USB device number 83 using dummy_hcd
[ 1773.155440][T10735] usb 6-1: Using ep0 maxpacket: 8
[ 1773.162358][T10735] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1773.172868][T10735] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1773.182978][T10735] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1773.194339][T10735] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1773.205876][T10735] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1773.214905][T10735] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1773.233954][T10735] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1773.245397][T10735] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1773.253070][T10735] cdc_wdm 6-1:1.0: skipping garbage
[ 1773.278739][T10735] cdc_wdm 6-1:1.0: skipping garbage
[ 1773.295823][T10735] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1773.303114][T10735] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1774.323844][T12690] usb 6-1: USB disconnect, device number 83
[ 1774.330858][ T2079] cdc_wdm 6-1:1.0: Error autopm - -16
[ 1774.576936][ T2120] fuse: Invalid uid '000000000000000000000000000000000000000000000000000000000000003'
[ 1775.215432][T12690] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1775.355520][T12690] usb 5-1: device descriptor read/64, error -71
[ 1775.616665][T12690] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1775.758251][T12690] usb 5-1: device descriptor read/64, error -71
[ 1775.879573][T12690] usb usb5-port1: attempt power cycle
[ 1776.066534][ T2189] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8129'.
[ 1776.087733][ T2189] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8129'.
[ 1776.255483][T12690] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1776.306280][T12690] usb 5-1: device descriptor read/8, error -71
[ 1776.545484][T12690] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1776.576217][T12690] usb 5-1: device descriptor read/8, error -71
[ 1776.695766][T12690] usb usb5-port1: unable to enumerate USB device
[ 1778.498655][ T2224] netlink: 'syz.5.8145': attribute type 3 has an invalid length.
[ 1778.588153][ T2226] syzkaller0: entered promiscuous mode
[ 1778.602209][ T2226] syzkaller0: entered allmulticast mode
[ 1778.646801][ T2226] TC_ACT_REPEAT abuse ?
[ 1779.504475][ T2246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8154'.
[ 1779.604539][ T2249] macvtap0: entered promiscuous mode
[ 1779.628638][ T2249] macvtap0: left promiscuous mode
[ 1779.916098][ T2259] could not allocate digest TFM handle crct10dif
[ 1780.491241][ T2284] bridge1: entered promiscuous mode
[ 1780.534945][ T2284] bridge1: entered allmulticast mode
[ 1781.225394][T19301] usb 6-1: new full-speed USB device number 84 using dummy_hcd
[ 1781.348486][ T2316] [U] ¹ÉMÙ­ÕÁQ&’Ù Kœ4
[ 1781.395370][T19301] usb 6-1: device descriptor read/64, error -71
[ 1781.635638][T19301] usb 6-1: new full-speed USB device number 85 using dummy_hcd
[ 1781.775667][T19301] usb 6-1: device descriptor read/64, error -71
[ 1781.895717][T19301] usb usb6-port1: attempt power cycle
[ 1782.120349][   T30] kauditd_printk_skb: 45 callbacks suppressed
[ 1782.120367][   T30] audit: type=1326 audit(1768533795.320:10650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.223183][   T30] audit: type=1326 audit(1768533795.360:10651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.255457][T19301] usb 6-1: new full-speed USB device number 86 using dummy_hcd
[ 1782.294004][T19301] usb 6-1: device descriptor read/8, error -71
[ 1782.334412][   T30] audit: type=1326 audit(1768533795.360:10652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.391317][   T30] audit: type=1326 audit(1768533795.360:10653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.429975][ T2346] netlink: 'syz.4.8195': attribute type 12 has an invalid length.
[ 1782.451743][   T30] audit: type=1326 audit(1768533795.360:10654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.499646][   T30] audit: type=1326 audit(1768533795.360:10655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.545411][T19301] usb 6-1: new full-speed USB device number 87 using dummy_hcd
[ 1782.563209][   T30] audit: type=1326 audit(1768533795.360:10656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.601382][T19301] usb 6-1: device descriptor read/8, error -71
[ 1782.619289][   T30] audit: type=1326 audit(1768533795.360:10657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.685432][   T30] audit: type=1326 audit(1768533795.360:10658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1782.729613][T19301] usb usb6-port1: unable to enumerate USB device
[ 1782.740020][   T30] audit: type=1326 audit(1768533795.370:10659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2332 comm="syz.7.8191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fefb9f8f749 code=0x7ffc0000
[ 1783.581526][T19301] usb 5-1: new high-speed USB device number 104 using dummy_hcd
[ 1783.749480][T19301] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1783.764333][T19301] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1783.784312][T19301] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1783.803989][T19301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1783.834087][T19301] usb 5-1: config 0 descriptor??
[ 1784.064569][T30659] usb 5-1: USB disconnect, device number 104
[ 1784.341929][ T2403] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8218'.
[ 1784.453254][ T2406] syzkaller0: entered promiscuous mode
[ 1784.458900][ T2406] syzkaller0: entered allmulticast mode
[ 1784.891859][ T2425] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1785.085400][    T9] usb 6-1: new full-speed USB device number 88 using dummy_hcd
[ 1785.225451][    T9] usb 6-1: device descriptor read/64, error -71
[ 1785.465452][    T9] usb 6-1: new full-speed USB device number 89 using dummy_hcd
[ 1785.567843][ T2442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1785.578591][ T2442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1785.615473][    T9] usb 6-1: device descriptor read/64, error -71
[ 1785.697152][ T2447] syzkaller0: entered promiscuous mode
[ 1785.702631][ T2447] syzkaller0: entered allmulticast mode
[ 1785.727492][    T9] usb usb6-port1: attempt power cycle
[ 1785.923634][ T2456] fuse: Unknown parameter 'group_i00000000000000000000'
[ 1786.077159][    T9] usb 6-1: new full-speed USB device number 90 using dummy_hcd
[ 1786.106009][    T9] usb 6-1: device descriptor read/8, error -71
[ 1786.555453][    T9] usb 6-1: new full-speed USB device number 91 using dummy_hcd
[ 1786.577962][    T9] usb 6-1: device descriptor read/8, error -71
[ 1786.688027][    T9] usb usb6-port1: unable to enumerate USB device
[ 1787.131889][ T2474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8245'.
[ 1787.225943][ T2479] syzkaller0: entered promiscuous mode
[ 1787.264474][ T2479] syzkaller0: entered allmulticast mode
[ 1787.348208][ T2488] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1787.413394][ T2490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1787.446697][ T2495] bridge0: port 3(syz_tun) entered blocking state
[ 1787.456849][ T2490] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1787.463656][ T2495] bridge0: port 3(syz_tun) entered disabled state
[ 1787.479520][ T2495] syz_tun: entered allmulticast mode
[ 1787.489534][ T2495] syz_tun: entered promiscuous mode
[ 1787.497629][ T2495] bridge0: port 3(syz_tun) entered blocking state
[ 1787.504532][ T2495] bridge0: port 3(syz_tun) entered forwarding state
[ 1787.516915][ T2497] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8253'.
[ 1787.831032][ T2521] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1788.215630][T19301] usb 6-1: new high-speed USB device number 92 using dummy_hcd
[ 1788.385452][T19301] usb 6-1: Using ep0 maxpacket: 8
[ 1788.455139][T19301] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1788.480569][T19301] usb 6-1: unable to read config index 0 descriptor/start: -71
[ 1788.513216][ T2567] fuse: Unknown parameter 'group_id00000000000000000000'
[ 1788.525478][T19301] usb 6-1: can't read configurations, error -71
[ 1788.700707][ T2577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1788.736749][ T2577] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1788.862176][   T30] kauditd_printk_skb: 9 callbacks suppressed
[ 1788.862194][   T30] audit: type=1326 audit(1768533802.070:10669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1788.925010][   T30] audit: type=1326 audit(1768533802.110:10670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.010656][   T30] audit: type=1326 audit(1768533802.110:10671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.047108][ T2601] fuse: Bad value for 'user_id'
[ 1789.055435][ T2601] fuse: Bad value for 'user_id'
[ 1789.111416][   T30] audit: type=1326 audit(1768533802.110:10672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.134123][   T30] audit: type=1326 audit(1768533802.110:10673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.191924][   T30] audit: type=1326 audit(1768533802.110:10674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.240427][   T30] audit: type=1326 audit(1768533802.110:10675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2592 comm="syz.1.8285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83678f749 code=0x7ffc0000
[ 1789.475401][    T9] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1789.599042][ T2623] pimreg: entered allmulticast mode
[ 1789.623236][ T2623] pimreg: left allmulticast mode
[ 1789.675396][    T9] usb 5-1: Using ep0 maxpacket: 8
[ 1789.689865][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1789.705399][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1789.717323][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[ 1789.729070][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[ 1789.742686][    T9] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1789.753209][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1789.812029][    T9] hub 5-1:1.0: bad descriptor, ignoring hub
[ 1789.825401][    T9] hub 5-1:1.0: probe with driver hub failed with error -5
[ 1789.847638][    T9] cdc_wdm 5-1:1.0: skipping garbage
[ 1789.858133][    T9] cdc_wdm 5-1:1.0: skipping garbage
[ 1789.872480][    T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1789.881619][    T9] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1790.330262][    T9] usb 5-1: USB disconnect, device number 105
[ 1790.473816][ T2641] netlink: 'syz.7.8299': attribute type 2 has an invalid length.
[ 1790.482329][ T2641] netlink: 'syz.7.8299': attribute type 9 has an invalid length.
[ 1791.266839][   T30] audit: type=1326 audit(1768533804.480:10676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2675 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1791.290703][   T30] audit: type=1326 audit(1768533804.500:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2675 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1791.315016][   T30] audit: type=1326 audit(1768533804.500:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2675 comm="syz.5.8312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171318f749 code=0x7ffc0000
[ 1791.687928][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1791.694344][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1791.806583][ T2688] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8316'.
[ 1792.535422][    T9] usb 6-1: new high-speed USB device number 94 using dummy_hcd
[ 1792.538536][ T2720] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8327'.
[ 1792.698733][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1792.711210][    T9] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1792.721227][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1792.732769][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1792.754170][    T9] usb 6-1: config 0 descriptor??
[ 1793.007520][T12690] usb 6-1: USB disconnect, device number 94
[ 1793.230343][ T2761] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8340'.
[ 1793.303479][ T2767] syzkaller0: entered promiscuous mode
[ 1793.313286][ T2767] syzkaller0: entered allmulticast mode
[ 1793.352583][ T2767] tipc: Started in network mode
[ 1793.360001][ T2767] tipc: Node identity f212da51a6b2, cluster identity 4711
[ 1793.368035][ T2767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1793.378617][ T2763] tipc: Resetting bearer <eth:syzkaller0>
[ 1793.402220][ T2763] tipc: Disabling bearer <eth:syzkaller0>
[ 1793.780132][ T2788] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8351'.
[ 1794.747074][ T2820] pimreg: entered allmulticast mode
[ 1794.764743][ T2820] pimreg: left allmulticast mode
[ 1795.169744][ T2833] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8364'.
[ 1795.613066][ T2861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8373'.
[ 1795.723763][ T2868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8376'.
[ 1795.827335][ T2874] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8377'.
[ 1795.870170][   T30] kauditd_printk_skb: 16 callbacks suppressed
[ 1795.870185][   T30] audit: type=1326 audit(1768533809.080:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2876 comm="syz.0.8379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcc4198f749 code=0x0
[ 1796.179243][   T30] audit: type=1326 audit(1768533809.390:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2885 comm="syz.4.8381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7f8f749 code=0x7ffc0000
[ 1796.254396][ T2890] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8383'.
[ 1796.259294][   T30] audit: type=1326 audit(1768533809.420:10697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2885 comm="syz.4.8381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f3ac7f8f749 code=0x7ffc0000
[ 1796.310985][   T30] audit: type=1326 audit(1768533809.420:10698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2885 comm="syz.4.8381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7f8f749 code=0x7ffc0000
[ 1796.344178][   T30] audit: type=1326 audit(1768533809.420:10699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2885 comm="syz.4.8381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7f8f749 code=0x7ffc0000
[ 1796.478461][ T2900] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8388'.
[ 1796.558797][ T2904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8390'.
[ 1796.663086][ T2908] netlink: 'syz.7.8392': attribute type 11 has an invalid length.
[ 1796.888236][ T2916] bond2: entered promiscuous mode
[ 1796.897859][ T2916] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1796.914764][ T2920] bridge2: entered promiscuous mode
[ 1796.922113][ T2920] bond2: (slave bridge2): Enslaving as an active interface with an up link
[ 1797.777651][    T9] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1797.947508][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1797.958067][    T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1797.967683][    T9] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[ 1797.977449][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1798.100420][    T9] usb 5-1: config 0 descriptor??
[ 1798.941431][ T2979] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1799.070085][   T30] audit: type=1326 audit(1768533812.280:10700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2984 comm="syz.0.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1799.125663][   T30] audit: type=1326 audit(1768533812.310:10701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2984 comm="syz.0.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1799.172625][   T30] audit: type=1326 audit(1768533812.310:10703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2984 comm="syz.0.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1799.198266][   T30] audit: type=1326 audit(1768533812.310:10704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2984 comm="syz.0.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1799.221638][   T30] audit: type=1326 audit(1768533812.310:10705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2984 comm="syz.0.8427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1799.341195][ T3001] netlink: 'syz.0.8432': attribute type 11 has an invalid length.
[ 1800.199652][ T3015] __nla_validate_parse: 2 callbacks suppressed
[ 1800.199668][ T3015] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8438'.
[ 1800.417731][ T3028] syzkaller0: entered promiscuous mode
[ 1800.423966][ T3028] syzkaller0: entered allmulticast mode
[ 1800.543915][T30659] usb 5-1: USB disconnect, device number 106
[ 1801.008570][ T3054] fuse: Bad value for 'rootmode'
[ 1801.088949][ T3058] syzkaller0: entered promiscuous mode
[ 1801.094453][ T3058] syzkaller0: entered allmulticast mode
[ 1801.569151][   T30] kauditd_printk_skb: 3 callbacks suppressed
[ 1801.569170][   T30] audit: type=1804 audit(1768533814.770:10708): pid=3064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.8460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=171856 res=1 errno=0
[ 1801.636458][   T30] audit: type=1804 audit(1768533814.830:10709): pid=3067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.8460" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=171856 res=1 errno=0
[ 1801.762842][   T30] audit: type=1326 audit(1768533814.970:10710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3072 comm="syz.0.8464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x0
[ 1803.305431][T12690] usb 6-1: new high-speed USB device number 95 using dummy_hcd
[ 1803.465486][T12690] usb 6-1: Using ep0 maxpacket: 32
[ 1803.475620][T12690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1803.501108][T12690] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1803.531571][T12690] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1803.571960][T12690] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1803.584637][T12690] usb 6-1: config 0 descriptor??
[ 1804.007717][T12690] ft260 0003:0403:6030.0095: unknown main item tag 0x7
[ 1804.217623][T12690] ft260 0003:0403:6030.0095: chip code: 0000 0000
[ 1804.427936][T12690] ft260 0003:0403:6030.0095: failed to retrieve system status
[ 1804.439934][ T3112] fuse: Bad value for 'rootmode'
[ 1804.442557][T12690] ft260 0003:0403:6030.0095: probe with driver ft260 failed with error -32
[ 1806.017398][T12690] usb 6-1: USB disconnect, device number 95
[ 1806.282040][ T3167] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8501'.
[ 1806.665418][T30659] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1806.838116][T30659] usb 5-1: Using ep0 maxpacket: 32
[ 1806.859811][T30659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1806.894782][T30659] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1806.995079][ T3196] fuse: Bad value for 'fd'
[ 1807.152173][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8513'.
[ 1807.270076][T30659] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1807.279247][T30659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1807.289781][T30659] usb 5-1: config 0 descriptor??
[ 1807.570929][ T3210] fuse: Unknown parameter 'use00000000000000000000'
[ 1807.710921][T30659] usbhid 5-1:0.0: can't add hid device: -32
[ 1807.722682][T30659] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[ 1807.744163][T30659] usb 5-1: USB disconnect, device number 107
[ 1807.794169][ T3221] fuse: Bad value for 'fd'
[ 1808.119534][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1808.128566][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1808.167137][T12690] usb 6-1: new high-speed USB device number 96 using dummy_hcd
[ 1808.252658][ T3236] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1808.355481][T12690] usb 6-1: Using ep0 maxpacket: 32
[ 1808.363347][T12690] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[ 1808.371986][T12690] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[ 1808.383351][T12690] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[ 1808.394840][T12690] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[ 1808.408254][T12690] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1808.416876][T12690] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[ 1808.427102][T12690] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[ 1808.435839][T12690] usb 6-1: Product: syz
[ 1808.440055][T12690] usb 6-1: Manufacturer: syz
[ 1808.444656][T12690] usb 6-1: SerialNumber: syz
[ 1808.452904][T12690] usb 6-1: config 0 descriptor??
[ 1808.466275][T12690] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[ 1808.477784][T12690] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[ 1808.691141][T12690] usb 6-1: USB disconnect, device number 96
[ 1808.716514][T12690] ldusb 6-1:0.0: LD USB Device #0 now disconnected
[ 1808.985530][T30659] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1809.099158][ T3260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1809.108858][ T3260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1809.135634][T30659] usb 5-1: Using ep0 maxpacket: 8
[ 1809.143454][T30659] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[ 1809.151933][T30659] usb 5-1: config 0 has no interface number 0
[ 1809.158229][T30659] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1809.169292][T30659] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1809.178426][T30659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1809.188365][T30659] usb 5-1: config 0 descriptor??
[ 1809.199659][T30659] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1809.909104][   T30] audit: type=1326 audit(1768533823.120:10711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1809.934046][   T30] audit: type=1326 audit(1768533823.120:10712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1809.957065][   T30] audit: type=1326 audit(1768533823.120:10713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1809.979815][   T30] audit: type=1326 audit(1768533823.150:10714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.007240][   T30] audit: type=1326 audit(1768533823.150:10715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.071228][   T30] audit: type=1326 audit(1768533823.150:10716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.099264][   T30] audit: type=1326 audit(1768533823.150:10717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.139722][   T30] audit: type=1326 audit(1768533823.150:10718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.164814][   T30] audit: type=1326 audit(1768533823.150:10719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.215397][   T30] audit: type=1326 audit(1768533823.150:10720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3284 comm="syz.0.8551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fcc4198f749 code=0x7ffc0000
[ 1810.449069][T12690] usb 5-1: USB disconnect, device number 108
[ 1810.649158][ T3303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8559'.
[ 1810.785926][ T3311] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8563'.
[ 1811.735446][T19301] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1811.779668][ T3347] netlink: 'syz.0.8578': attribute type 11 has an invalid length.
[ 1811.885402][T19301] usb 5-1: Using ep0 maxpacket: 8
[ 1811.892358][T19301] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config
[ 1811.903185][T19301] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[ 1811.913910][T19301] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1811.935351][T19301] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1812.229964][ T3358] input input142: cannot allocate more than FF_MAX_EFFECTS effects
[ 1812.959611][ T3373] syzkaller0: entered promiscuous mode
[ 1812.972749][ T3373] syzkaller0: entered allmulticast mode
[ 1813.038297][ T3373] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1813.056882][ T3372] tipc: Resetting bearer <eth:syzkaller0>
[ 1813.122348][ T3372] tipc: Disabling bearer <eth:syzkaller0>
[ 1813.627586][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1813.639259][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1813.649830][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1813.658251][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1813.665982][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1814.005953][  T980] usb 6-1: new high-speed USB device number 97 using dummy_hcd
[ 1814.070279][ T3406] syzkaller0: entered promiscuous mode
[ 1814.095424][ T3406] syzkaller0: entered allmulticast mode
[ 1814.149918][ T3392] chnl_net:caif_netlink_parms(): no params data found
[ 1814.178658][  T980] usb 6-1: Using ep0 maxpacket: 8
[ 1814.186718][  T980] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1814.197948][  T980] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1814.207281][  T980] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1814.223513][  T980] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[ 1814.233392][ T3406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1814.240189][  T980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1814.253022][ T3415] syzkaller0: entered promiscuous mode
[ 1814.258966][ T3415] syzkaller0: entered allmulticast mode
[ 1814.273252][  T980] hub 6-1:1.0: bad descriptor, ignoring hub
[ 1814.292579][ T3405] tipc: Resetting bearer <eth:syzkaller0>
[ 1814.298381][  T980] hub 6-1:1.0: probe with driver hub failed with error -5
[ 1814.298887][  T980] cdc_wdm 6-1:1.0: skipping garbage
[ 1814.311557][  T980] cdc_wdm 6-1:1.0: skipping garbage
[ 1814.317534][  T980] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[ 1814.340715][ T3405] tipc: Disabling bearer <eth:syzkaller0>
[ 1814.412082][T19301] usb 1-1: USB disconnect, device number 75
[ 1814.529663][ T3392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1814.567739][T24812] usb 5-1: USB disconnect, device number 109
[ 1814.575444][T19301] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1814.591528][ T3392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1814.604231][ T3392] bridge_slave_0: entered allmulticast mode
[ 1814.612324][ T3392] bridge_slave_0: entered promiscuous mode
[ 1814.647878][ T3392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1814.664311][ T3392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1814.681998][ T3392] bridge_slave_1: entered allmulticast mode
[ 1814.702242][ T3392] bridge_slave_1: entered promiscuous mode
[ 1814.817280][T12690] usb 6-1: USB disconnect, device number 97
[ 1814.894252][T28743] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1814.921011][ T3392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1814.956473][ T3392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1815.005057][ T3437] syzkaller0: entered promiscuous mode
[ 1815.021091][ T3437] syzkaller0: entered allmulticast mode
[ 1815.052437][T28743] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1815.094422][ T3392] team0: Port device team_slave_0 added
[ 1815.100673][ T3441] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1815.109774][ T3392] team0: Port device team_slave_1 added
[ 1815.151858][ T3443] syzkaller0: entered promiscuous mode
[ 1815.158803][ T3443] syzkaller0: entered allmulticast mode
[ 1815.166443][ T3436] tipc: Resetting bearer <eth:syzkaller0>
[ 1815.196707][ T3436] tipc: Disabling bearer <eth:syzkaller0>
[ 1815.767651][T28618] Bluetooth: hci5: command tx timeout
[ 1817.671458][T28743] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1817.685025][ T3392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1817.692318][ T3392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1817.719663][ T3392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1817.746344][ T3392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1817.756211][ T3392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1817.784182][ T3392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1817.829844][   T30] kauditd_printk_skb: 37 callbacks suppressed
[ 1817.829861][   T30] audit: type=1326 audit(1768533831.040:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3455 comm="syz.4.8618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3ac7f8f749 code=0x0
[ 1817.875597][T28618] Bluetooth: hci5: command tx timeout
[ 1817.895002][T28743] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1818.001631][ T3392] hsr_slave_0: entered promiscuous mode
[ 1818.016304][ T3392] hsr_slave_1: entered promiscuous mode
[ 1818.022756][ T3392] debugfs: 'hsr0' already exists in 'hsr'
[ 1818.028803][ T3392] Cannot create hsr debugfs directory
[ 1818.226878][ T3467] syzkaller0: entered promiscuous mode
[ 1818.234497][ T3467] syzkaller0: entered allmulticast mode
[ 1818.270163][ T3467] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1818.283154][ T3466] tipc: Resetting bearer <eth:syzkaller0>
[ 1818.311495][ T3466] tipc: Disabling bearer <eth:syzkaller0>
[ 1818.354052][T28743] bridge_slave_1: left allmulticast mode
[ 1818.361275][T28743] bridge_slave_1: left promiscuous mode
[ 1818.368822][T28743] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1818.379501][T28743] bridge_slave_0: left allmulticast mode
[ 1818.385346][T28743] bridge_slave_0: left promiscuous mode
[ 1818.392505][T28743] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1819.015139][T28743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1819.027950][T28743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1819.038601][T28743] bond0 (unregistering): Released all slaves
[ 1819.058048][T28743] bond1 (unregistering): Released all slaves
[ 1819.072501][T28743] bond2 (unregistering): Released all slaves
[ 1819.089740][T28743] bond3 (unregistering): Released all slaves
[ 1819.104429][T28743] bond4 (unregistering): Released all slaves
[ 1819.282634][T28743] tipc: Disabling bearer <udp:syz0>
[ 1819.309630][T28743] tipc: Disabling bearer <eth:vcan0>
[ 1819.332044][T28743] tipc: Left network mode
[ 1819.430903][ T3495] fuse: Unknown parameter '0x0000000000000004'
[ 1819.656325][ T3501] syzkaller0: entered promiscuous mode
[ 1819.731013][ T3501] syzkaller0: entered allmulticast mode
[ 1819.817844][ T3501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1819.876476][ T3500] tipc: Resetting bearer <eth:syzkaller0>
[ 1819.912327][ T3500] tipc: Disabling bearer <eth:syzkaller0>
[ 1819.926521][T28618] Bluetooth: hci5: command tx timeout
[ 1820.015135][T28743] hsr_slave_0: left promiscuous mode
[ 1820.036051][T28743] hsr_slave_1: left promiscuous mode
[ 1820.050261][T28743] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1820.058092][T28743] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1820.081286][T28743] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1820.105662][T28743] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1820.134144][T28743] veth1_macvtap: left promiscuous mode
[ 1820.142815][T28743] veth0_macvtap: left promiscuous mode
[ 1820.165799][T28743] veth1_vlan: left promiscuous mode
[ 1820.171122][T28743] veth0_vlan: left promiscuous mode
[ 1821.036424][ T3527] fuse: Unknown parameter '0x0000000000000004'
[ 1821.176856][T28743] team0 (unregistering): Port device team_slave_1 removed
[ 1821.271828][T28743] team0 (unregistering): Port device team_slave_0 removed
[ 1821.917930][ T3542] syzkaller0: entered promiscuous mode
[ 1821.938198][ T3542] syzkaller0: entered allmulticast mode
[ 1821.975465][ T3392] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1822.001768][ T3392] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1822.017292][T28618] Bluetooth: hci5: command tx timeout
[ 1822.083091][ T3392] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1822.117830][ T3542] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1822.677992][ T3392] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1822.840225][ T3540] tipc: Resetting bearer <eth:syzkaller0>
[ 1822.929701][ T3540] tipc: Disabling bearer <eth:syzkaller0>
[ 1822.979557][T28743] IPVS: stop unused estimator thread 0...
[ 1823.307960][ T3392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1823.368498][ T3392] 8021q: adding VLAN 0 to HW filter on device team0
[ 1823.413672][T28743] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1823.420900][T28743] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1823.482477][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1823.489703][ T6039] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1823.611133][ T3392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1823.749613][ T3392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1823.858821][ T3392] veth0_vlan: entered promiscuous mode
[ 1823.898191][ T3392] veth1_vlan: entered promiscuous mode
[ 1823.938493][ T3588] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8670'.
[ 1824.004376][ T3392] veth0_macvtap: entered promiscuous mode
[ 1824.036908][ T3392] veth1_macvtap: entered promiscuous mode
[ 1824.101720][ T3392] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1824.162387][ T3392] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1824.252336][ T6039] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1824.309533][ T6039] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1824.359360][ T6039] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1824.379743][ T6039] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1824.664435][T11342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.692687][T11342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1824.815816][ T3902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.904003][ T3902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1825.582741][ T3619] syzkaller0: entered promiscuous mode
[ 1825.598702][ T3619] syzkaller0: entered allmulticast mode
[ 1825.635458][ T3619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1825.653035][ T3617] tipc: Resetting bearer <eth:syzkaller0>
[ 1825.733860][ T3617] tipc: Disabling bearer <eth:syzkaller0>
[ 1825.955825][T12690] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1826.185482][T12690] usb 5-1: Using ep0 maxpacket: 32
[ 1826.193181][T12690] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[ 1826.212596][T12690] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1826.237542][T12690] usb 5-1: config 0 descriptor??
[ 1826.494917][T12690] dvb-usb: found a 'Elgato EyeTV DTT' in warm state.
[ 1826.536736][T12690] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1826.572189][T12690] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT)
[ 1826.580873][T12690] usb 5-1: media controller created
[ 1826.604910][T12690] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1826.734459][T12690] DVB: Unable to find symbol dib7000p_attach()
[ 1826.751662][T12690] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT'
[ 1826.877355][T12690] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1826.891058][T12690] Registered IR keymap rc-empty
[ 1826.896844][T12690] dvb-usb: could not initialize remote control.
[ 1826.903488][T12690] dvb-usb: Elgato EyeTV DTT successfully initialized and connected.
[ 1826.918079][T12690] usb 5-1: USB disconnect, device number 110
[ 1826.967487][T12690] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected.
[ 1827.015524][    T9] usb 6-1: new high-speed USB device number 98 using dummy_hcd
[ 1827.040698][T28618] Bluetooth: hci3: Malformed MSFT vendor event: 0x02
[ 1827.178086][    T9] usb 6-1: Using ep0 maxpacket: 16
[ 1827.184955][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1827.200192][    T9] usb 6-1: config 0 has no interfaces?
[ 1827.208811][    T9] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[ 1827.220676][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1827.229165][    T9] usb 6-1: Product: syz
[ 1827.233533][    T9] usb 6-1: Manufacturer: syz
[ 1827.245547][    T9] usb 6-1: SerialNumber: syz
[ 1827.261152][    T9] usb 6-1: config 0 descriptor??
[ 1827.500877][T29608] usb 6-1: USB disconnect, device number 98
[ 1828.210895][ T3719] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8724'.
[ 1828.633096][ T3744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8736'.
[ 1829.375899][    T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[ 1829.535775][ T3767] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8747'.
[ 1829.545414][    T9] usb 1-1: Using ep0 maxpacket: 32
[ 1829.559190][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1829.571540][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1829.605890][    T9] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1829.615039][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1829.636011][    T9] usb 1-1: config 0 descriptor??
[ 1829.888634][ T3788] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8757'.
[ 1829.963352][ T3792] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8759'.
[ 1830.052046][ T3798] syzkaller0: entered promiscuous mode
[ 1830.058066][ T3798] syzkaller0: entered allmulticast mode
[ 1830.066923][    T9] usbhid 1-1:0.0: can't add hid device: -32
[ 1830.073104][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[ 1830.098419][ T3798] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1830.109389][ T3798] tipc: Resetting bearer <eth:syzkaller0>
[ 1830.128204][ T3797] tipc: Resetting bearer <eth:syzkaller0>
[ 1830.162788][ T3797] tipc: Disabling bearer <eth:syzkaller0>
[ 1830.905444][T28288] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1831.012966][ T3830] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8776'.
[ 1831.097300][T28288] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1831.102469][ T3832] netlink: 'syz.7.8777': attribute type 2 has an invalid length.
[ 1831.114891][T28288] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1831.116361][ T3832] netlink: 84 bytes leftover after parsing attributes in process `syz.7.8777'.
[ 1831.132868][T28288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1831.179242][T28288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1831.213220][T28288] usb 5-1: config 0 descriptor??
[ 1831.242316][T28288] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1831.795382][T28288] usb 6-1: new high-speed USB device number 99 using dummy_hcd
[ 1831.965364][T28288] usb 6-1: Using ep0 maxpacket: 8
[ 1831.972323][T28288] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1831.984441][T28288] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1831.993838][T28288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1832.003724][T28288] usb 6-1: config 0 descriptor??
[ 1832.127858][T29608] usb 1-1: USB disconnect, device number 76
[ 1832.244756][T28288] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1832.621664][ T3878] netlink: 32 bytes leftover after parsing attributes in process `syz.7.8796'.
[ 1832.714360][T19301] usb 6-1: USB disconnect, device number 99
[ 1833.405518][T19301] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[ 1833.452821][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8807'.
[ 1833.489420][ T3907] pim6reg1: entered promiscuous mode
[ 1833.494905][ T3907] pim6reg1: entered allmulticast mode
[ 1833.577848][T19301] usb 1-1: Using ep0 maxpacket: 8
[ 1833.603858][T19301] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1833.614689][T19301] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 1833.627371][T19301] usb 1-1: can't read configurations, error -71
[ 1833.687923][T28288] usb 5-1: USB disconnect, device number 111
[ 1833.886910][ T3930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8820'.
[ 1834.305396][    T9] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[ 1834.438598][ T3949] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8829'.
[ 1834.463800][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1834.477589][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1834.488599][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1834.500015][    T9] usb 5-1: config 0 descriptor??
[ 1834.517940][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1834.547620][ T3953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8831'.
[ 1837.090385][T28288] usb 5-1: USB disconnect, device number 112
[ 1837.875385][T28288] usb 6-1: new high-speed USB device number 100 using dummy_hcd
[ 1838.037737][T28288] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1838.052281][T28288] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1838.061900][T28288] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1838.076217][T28288] usb 6-1: config 0 descriptor??
[ 1838.089519][T28288] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 1838.474166][ T4085] xt_bpf: check failed: parse error
[ 1838.835756][T28288] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[ 1839.005379][T28288] usb 1-1: Using ep0 maxpacket: 8
[ 1839.012690][T28288] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1
[ 1839.022238][T28288] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1839.031439][T28288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1839.565996][ T4096] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8893'.
[ 1840.199948][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8904'.
[ 1840.658444][T19301] usb 6-1: USB disconnect, device number 100
[ 1840.775635][ T4143] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8915'.
[ 1840.789310][   T30] audit: type=1804 audit(1768533854.000:10759): pid=4144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.8916" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=177298 res=1 errno=0
[ 1841.013281][ T4157] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1841.043085][ T4157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8921'.
[ 1841.266522][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8931'.
[ 1841.633729][  T980] usb 1-1: USB disconnect, device number 79
[ 1841.827328][ T4202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8944'.
[ 1841.968929][ T4206] syzkaller0: entered promiscuous mode
[ 1841.974591][ T4206] syzkaller0: entered allmulticast mode
[ 1841.991772][ T4206] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1842.002350][ T4205] tipc: Resetting bearer <eth:syzkaller0>
[ 1842.024833][ T4205] tipc: Disabling bearer <eth:syzkaller0>
[ 1842.329618][ T4228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8956'.
[ 1842.498707][ T4234] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1842.521918][ T4233] tipc: Disabling bearer <eth:syzkaller0>
[ 1842.636989][T29608] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[ 1842.775379][T29608] usb 1-1: device descriptor read/64, error -71
[ 1842.914051][ T4250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8967'.
[ 1842.949474][ T4252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8968'.
[ 1843.025455][T29608] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[ 1843.033416][ T4256] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1843.054605][ T4255] tipc: Disabling bearer <eth:syzkaller0>
[ 1843.168488][T29608] usb 1-1: device descriptor read/64, error -71
[ 1843.276928][T29608] usb usb1-port1: attempt power cycle
[ 1843.615500][T29608] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[ 1843.636169][T29608] usb 1-1: device descriptor read/8, error -71
[ 1843.875693][T29608] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[ 1843.900516][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8979'.
[ 1843.916564][T29608] usb 1-1: device descriptor read/8, error -71
[ 1843.973720][ T4281] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1844.003215][ T4280] tipc: Disabling bearer <eth:syzkaller0>
[ 1844.025680][T29608] usb usb1-port1: unable to enumerate USB device
[ 1844.630111][ T4316] __nla_validate_parse: 3 callbacks suppressed
[ 1844.630130][ T4316] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8998'.
[ 1844.916138][T12690] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[ 1874.535608][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 1874.541922][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 1949.855239][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[ 1949.862225][    C0] rcu: 	1-...!: (1 ticks this GP) idle=42b4/1/0x4000000000000000 softirq=265275/265275 fqs=8
[ 1949.873881][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P3378/1:b..l P4318/1:b..l P5190/1:b..l
[ 1949.884100][    C0] rcu: 	(detected by 0, t=10504 jiffies, g=243101, q=441 ncpus=2)
[ 1949.891907][    C0] Sending NMI from CPU 0 to CPUs 1:
[ 1949.891944][    C1] NMI backtrace for cpu 1
[ 1949.891965][    C1] CPU: 1 UID: 0 PID: 5183 Comm: syslogd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1949.892006][    C1] Tainted: [L]=SOFTLOCKUP
[ 1949.892018][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1949.892037][    C1] RIP: 0010:check_preemption_disabled+0x21/0xe0
[ 1949.892064][    C1] Code: 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 57 14 26 07 65 8b 0d 4c 14 26 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f <5d> c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea 65 4c 8b 3c 25
[ 1949.892078][    C1] RSP: 0018:ffffc90000a08c28 EFLAGS: 00000002
[ 1949.892092][    C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000010001
[ 1949.892103][    C1] RDX: ffff888032a3bd00 RSI: ffffffff8d97791e RDI: ffffffff8bc08760
[ 1949.892115][    C1] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004
[ 1949.892125][    C1] R10: dffffc0000000000 R11: fffff5200014117c R12: 0000000000000046
[ 1949.892136][    C1] R13: ffff888032a3bd00 R14: ffff88803290a2c0 R15: 0000000000000002
[ 1949.892148][    C1] FS:  00007f3e70447c80(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000
[ 1949.892161][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1949.892172][    C1] CR2: 00007f17140cef98 CR3: 0000000030c3c000 CR4: 00000000003526f0
[ 1949.892187][    C1] Call Trace:
[ 1949.892197][    C1]  <IRQ>
[ 1949.892205][    C1]  lock_is_held_type+0xe0/0x150
[ 1949.892223][    C1]  advance_sched+0xe7/0xc90
[ 1949.892248][    C1]  ? do_raw_spin_unlock+0x122/0x240
[ 1949.892267][    C1]  ? __pfx_advance_sched+0x10/0x10
[ 1949.892286][    C1]  __hrtimer_run_queues+0x51c/0xc30
[ 1949.892312][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[ 1949.892328][    C1]  ? read_tsc+0x9/0x20
[ 1949.892350][    C1]  hrtimer_interrupt+0x45b/0xaa0
[ 1949.892376][    C1]  __sysvec_apic_timer_interrupt+0x102/0x3e0
[ 1949.892394][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[ 1949.892411][    C1]  </IRQ>
[ 1949.892417][    C1]  <TASK>
[ 1949.892423][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 1949.892439][    C1] RIP: 0010:lock_acquire+0x222/0x340
[ 1949.892454][    C1] Code: ff ff ff e8 70 20 bc 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 5a 4f e2 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 3f ff be 09 cc 48 8d 3d 97 85 e7
[ 1949.892466][    C1] RSP: 0018:ffffc900030c74a0 EFLAGS: 00000286
[ 1949.892479][    C1] RAX: 702adb765466b500 RBX: 0000000000000000 RCX: 0000000000000046
[ 1949.892490][    C1] RDX: 0000000087c094d9 RSI: ffffffff8d97791e RDI: ffffffff8bc08760
[ 1949.892501][    C1] RBP: ffffffff81ab6c1d R08: ffffffff81ab6c1d R09: ffffffff8df41aa0
[ 1949.892512][    C1] R10: ffffc900030c75b8 R11: ffffffff81acf4d0 R12: 0000000000000002
[ 1949.892524][    C1] R13: ffffffff8df41aa0 R14: 0000000000000000 R15: 0000000000000246
[ 1949.892535][    C1]  ? is_module_text_address+0x1d/0x1e0
[ 1949.892549][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1949.892569][    C1]  ? is_module_text_address+0x1d/0x1e0
[ 1949.892586][    C1]  ? is_module_text_address+0x1d/0x1e0
[ 1949.892600][    C1]  is_module_text_address+0x39/0x1e0
[ 1949.892613][    C1]  ? is_module_text_address+0x1d/0x1e0
[ 1949.892634][    C1]  kernel_text_address+0x94/0xe0
[ 1949.892654][    C1]  __kernel_text_address+0xd/0x40
[ 1949.892672][    C1]  unwind_get_return_address+0x4d/0x90
[ 1949.892689][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1949.892709][    C1]  arch_stack_walk+0xfc/0x150
[ 1949.892730][    C1]  stack_trace_save+0x9c/0xe0
[ 1949.892749][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[ 1949.892767][    C1]  ? kasan_save_track+0x4f/0x80
[ 1949.892783][    C1]  ? kfree+0x1c0/0x660
[ 1949.892800][    C1]  ? skb_release_data+0x62d/0x7c0
[ 1949.892817][    C1]  ? consume_skb+0x9e/0xf0
[ 1949.892833][    C1]  ? __unix_dgram_recvmsg+0x9f9/0xd60
[ 1949.892848][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[ 1949.892862][    C1]  kasan_save_track+0x3e/0x80
[ 1949.892877][    C1]  ? kasan_save_track+0x3e/0x80
[ 1949.892891][    C1]  ? kasan_save_free_info+0x46/0x50
[ 1949.892909][    C1]  ? __kasan_slab_free+0x5c/0x80
[ 1949.892924][    C1]  ? kmem_cache_free+0x197/0x620
[ 1949.892937][    C1]  ? __unix_dgram_recvmsg+0x9f9/0xd60
[ 1949.892951][    C1]  ? sock_recvmsg+0x22c/0x270
[ 1949.892964][    C1]  ? sock_read_iter+0x231/0x2f0
[ 1949.892982][    C1]  ? vfs_read+0x55a/0xa30
[ 1949.892995][    C1]  ? ksys_read+0x145/0x250
[ 1949.893008][    C1]  ? do_syscall_64+0xec/0xf80
[ 1949.893023][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1949.893055][    C1]  kasan_save_free_info+0x46/0x50
[ 1949.893073][    C1]  __kasan_slab_free+0x5c/0x80
[ 1949.893089][    C1]  kmem_cache_free+0x197/0x620
[ 1949.893104][    C1]  ? __unix_dgram_recvmsg+0x9f9/0xd60
[ 1949.893120][    C1]  __unix_dgram_recvmsg+0x9f9/0xd60
[ 1949.893139][    C1]  ? __pfx___unix_dgram_recvmsg+0x10/0x10
[ 1949.893159][    C1]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[ 1949.893173][    C1]  ? unix_dgram_recvmsg+0xb1/0xd0
[ 1949.893189][    C1]  ? __pfx_unix_dgram_recvmsg+0x10/0x10
[ 1949.893205][    C1]  sock_recvmsg+0x22c/0x270
[ 1949.893221][    C1]  sock_read_iter+0x231/0x2f0
[ 1949.893241][    C1]  ? __pfx_sock_read_iter+0x10/0x10
[ 1949.893264][    C1]  ? bpf_lsm_file_permission+0x9/0x20
[ 1949.893279][    C1]  ? security_file_permission+0x75/0x290
[ 1949.893299][    C1]  vfs_read+0x55a/0xa30
[ 1949.893315][    C1]  ? __pfx_vfs_read+0x10/0x10
[ 1949.893329][    C1]  ? sched_clock_cpu+0x74/0x430
[ 1949.893346][    C1]  ? seqcount_lockdep_reader_access+0xd4/0x100
[ 1949.893366][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1949.893384][    C1]  ksys_read+0x145/0x250
[ 1949.893399][    C1]  ? __pfx_ksys_read+0x10/0x10
[ 1949.893417][    C1]  do_syscall_64+0xec/0xf80
[ 1949.893433][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1949.893448][    C1]  ? clear_bhb_loop+0x60/0xb0
[ 1949.893464][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1949.893479][    C1] RIP: 0033:0x7f3e70597407
[ 1949.893494][    C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 1949.893508][    C1] RSP: 002b:00007ffcf05ffeb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000000
[ 1949.893523][    C1] RAX: ffffffffffffffda RBX: 00007f3e70447c80 RCX: 00007f3e70597407
[ 1949.893535][    C1] RDX: 00000000000000ff RSI: 000055d59fa7a950 RDI: 0000000000000000
[ 1949.893546][    C1] RBP: 000055d59fa7a910 R08: 0000000000000000 R09: 0000000000000000
[ 1949.893556][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055d59fa7a9bf
[ 1949.893566][    C1] R13: 0000000000000000 R14: 000055d59fa7a950 R15: 000055d5940ded98
[ 1949.893584][    C1]  </TASK>
[ 1949.893938][    C0] task:klogd           state:R  running task     stack:22952 pid:5190  tgid:5190  ppid:1      task_flags:0x400100 flags:0x00080000
[ 1950.535236][    C0] Call Trace:
[ 1950.538520][    C0]  <TASK>
[ 1950.541456][    C0]  __schedule+0x149b/0x4fd0
[ 1950.545975][    C0]  ? __resched_curr+0x202/0x3e0
[ 1950.550918][    C0]  ? __pfx___resched_curr+0x10/0x10
[ 1950.556129][    C0]  ? __pfx___schedule+0x10/0x10
[ 1950.560991][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1950.566799][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1950.572170][    C0]  preempt_schedule_common+0x83/0xd0
[ 1950.577457][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1950.582661][    C0]  _raw_spin_unlock_irqrestore+0x74/0x80
[ 1950.588293][    C0]  __wake_up_common_lock+0x190/0x1f0
[ 1950.593603][    C0]  sock_def_readable+0x1eb/0x530
[ 1950.598558][    C0]  ? sock_def_readable+0xae/0x530
[ 1950.603598][    C0]  unix_dgram_sendmsg+0xdfb/0x1840
[ 1950.608767][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1950.614361][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1950.619650][    C0]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1950.625196][    C0]  __sock_sendmsg+0x21c/0x270
[ 1950.629883][    C0]  __sys_sendto+0x3bd/0x520
[ 1950.634389][    C0]  ? __pfx___sys_sendto+0x10/0x10
[ 1950.639460][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1950.644257][    C0]  __x64_sys_sendto+0xde/0x100
[ 1950.649033][    C0]  do_syscall_64+0xec/0xf80
[ 1950.653539][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1950.659603][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1950.664283][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1950.670173][    C0] RIP: 0033:0x7f6ddbdc9407
[ 1950.674593][    C0] RSP: 002b:00007ffea7105b70 EFLAGS: 00000202 ORIG_RAX: 000000000000002c
[ 1950.683184][    C0] RAX: ffffffffffffffda RBX: 00007f6ddbc79c80 RCX: 00007f6ddbdc9407
[ 1950.691154][    C0] RDX: 000000000000005f RSI: 00007ffea7105cb0 RDI: 0000000000000003
[ 1950.699123][    C0] RBP: 00007ffea71060e0 R08: 0000000000000000 R09: 0000000000000000
[ 1950.707095][    C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffea71060f8
[ 1950.715064][    C0] R13: 00007ffea7105cb0 R14: 0000000000000044 R15: 00007ffea7105cb0
[ 1950.723051][    C0]  </TASK>
[ 1950.726070][    C0] task:syz.4.8997      state:R  running task     stack:27032 pid:4318  tgid:4317  ppid:1497   task_flags:0x40044c flags:0x00080002
[ 1950.739557][    C0] Call Trace:
[ 1950.742842][    C0]  <TASK>
[ 1950.745771][    C0]  __schedule+0x149b/0x4fd0
[ 1950.750281][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 1950.755216][    C0]  ? irqentry_exit+0x5e8/0x670
[ 1950.759981][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1950.765180][    C0]  ? irqentry_exit+0x5e8/0x670
[ 1950.769950][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1950.774977][    C0]  ? __pfx___schedule+0x10/0x10
[ 1950.779839][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1950.785209][    C0]  preempt_schedule_common+0x83/0xd0
[ 1950.790495][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1950.795697][    C0]  _raw_spin_unlock+0x3f/0x50
[ 1950.800367][    C0]  unmap_page_range+0x38bc/0x4170
[ 1950.805429][    C0]  ? mas_next_slot+0xc20/0xcf0
[ 1950.810207][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[ 1950.815583][    C0]  ? mas_find+0xb0e/0xd30
[ 1950.819909][    C0]  ? unmap_vmas+0x144/0x580
[ 1950.824415][    C0]  unmap_vmas+0x399/0x580
[ 1950.828767][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[ 1950.833642][    C0]  exit_mmap+0x239/0xb10
[ 1950.837890][    C0]  ? uprobe_clear_state+0x20f/0x290
[ 1950.843087][    C0]  ? __pfx_exit_mmap+0x10/0x10
[ 1950.847851][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1950.853507][    C0]  ? __pfx_exit_aio+0x10/0x10
[ 1950.858200][    C0]  ? uprobe_clear_state+0x27c/0x290
[ 1950.863402][    C0]  __mmput+0x118/0x430
[ 1950.867473][    C0]  exit_mm+0x169/0x230
[ 1950.871545][    C0]  do_exit+0x627/0x22f0
[ 1950.875702][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1950.881517][    C0]  ? down_interruptible+0x6d/0xe0
[ 1950.886546][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1950.891155][    C0]  do_group_exit+0x21c/0x2d0
[ 1950.895747][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1950.900943][    C0]  get_signal+0x1285/0x1340
[ 1950.905505][    C0]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1950.911059][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1950.917308][    C0]  ? __fget_files+0x2a/0x420
[ 1950.921925][    C0]  ? __fget_files+0x3a0/0x420
[ 1950.926606][    C0]  exit_to_user_mode_loop+0x87/0x4e0
[ 1950.931892][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1950.936659][    C0]  do_syscall_64+0x2c1/0xf80
[ 1950.941268][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1950.947336][    C0]  ? trace_irq_disable+0x37/0x100
[ 1950.952377][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1950.957055][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1950.962950][    C0] RIP: 0033:0x7f3ac7f8f34b
[ 1950.967363][    C0] RSP: 002b:00007f3ac8f08f10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1950.975864][    C0] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f3ac7f8f34b
[ 1950.983830][    C0] RDX: 00007f3ac8f09fe0 RSI: 0000000080085502 RDI: 0000000000000003
[ 1950.991795][    C0] RBP: 00007f3ac8f09fe0 R08: 0000000000000080 R09: 00007f3ac8f08fd8
[ 1950.999764][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 1951.007731][    C0] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f3ac801f52a
[ 1951.015813][    C0]  </TASK>
[ 1951.018837][    C0] task:syz-executor    state:R  running task     stack:24280 pid:3378  tgid:3378  ppid:5814   task_flags:0x40050c flags:0x00080002
[ 1951.032318][    C0] Call Trace:
[ 1951.035608][    C0]  <TASK>
[ 1951.038541][    C0]  __schedule+0x149b/0x4fd0
[ 1951.043047][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 1951.048029][    C0]  ? irqentry_exit+0x5e8/0x670
[ 1951.052805][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1951.058004][    C0]  ? irqentry_exit+0x5e8/0x670
[ 1951.062774][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1951.067804][    C0]  ? __pfx___schedule+0x10/0x10
[ 1951.072928][    C0]  ? preempt_schedule_thunk+0x16/0x30
[ 1951.078316][    C0]  preempt_schedule_common+0x83/0xd0
[ 1951.083600][    C0]  preempt_schedule_thunk+0x16/0x30
[ 1951.088802][    C0]  _raw_spin_unlock+0x3f/0x50
[ 1951.093564][    C0]  unmap_page_range+0x38bc/0x4170
[ 1951.098623][    C0]  ? mas_next_slot+0xc20/0xcf0
[ 1951.103395][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[ 1951.108778][    C0]  ? mas_find+0xb0e/0xd30
[ 1951.113122][    C0]  ? unmap_vmas+0x144/0x580
[ 1951.117628][    C0]  unmap_vmas+0x399/0x580
[ 1951.122055][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[ 1951.127104][    C0]  exit_mmap+0x239/0xb10
[ 1951.131363][    C0]  ? uprobe_clear_state+0x20f/0x290
[ 1951.136566][    C0]  ? __pfx_exit_mmap+0x10/0x10
[ 1951.141329][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1951.146980][    C0]  ? __pfx_exit_aio+0x10/0x10
[ 1951.151671][    C0]  ? uprobe_clear_state+0x27c/0x290
[ 1951.156892][    C0]  __mmput+0x118/0x430
[ 1951.160966][    C0]  exit_mm+0x169/0x230
[ 1951.165044][    C0]  do_exit+0x627/0x22f0
[ 1951.169209][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1951.173817][    C0]  do_group_exit+0x21c/0x2d0
[ 1951.178409][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1951.183618][    C0]  get_signal+0x1285/0x1340
[ 1951.188141][    C0]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1951.193689][    C0]  ? __pfx___x64_sys_wait4+0x10/0x10
[ 1951.198978][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1951.205158][    C0]  exit_to_user_mode_loop+0x87/0x4e0
[ 1951.210444][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1951.215212][    C0]  do_syscall_64+0x2c1/0xf80
[ 1951.219816][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.225877][    C0]  ? trace_irq_disable+0x37/0x100
[ 1951.230899][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1951.235595][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.241484][    C0] RIP: 0033:0x7f5444f85897
[ 1951.245895][    C0] RSP: 002b:00007fff772cdc40 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[ 1951.254306][    C0] RAX: fffffffffffffe00 RBX: 0000000000000d40 RCX: 00007f5444f85897
[ 1951.262275][    C0] RDX: 0000000040000000 RSI: 00007fff772cdc7c RDI: 00000000ffffffff
[ 1951.270252][    C0] RBP: 00007fff772cdc7c R08: 0000000000000000 R09: 0000000000000000
[ 1951.278243][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000008
[ 1951.286226][    C0] R13: 0000000000000003 R14: 00007fff772cdf68 R15: 0000000000000000
[ 1951.294255][    C0]  </TASK>
[ 1951.297283][    C0] rcu: rcu_preempt kthread starved for 7539 jiffies! g243101 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[ 1951.308479][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[ 1951.318451][    C0] rcu: RCU grace-period kthread stack dump:
[ 1951.324331][    C0] task:rcu_preempt     state:R  running task     stack:27480 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[ 1951.337814][    C0] Call Trace:
[ 1951.341095][    C0]  <TASK>
[ 1951.344024][    C0]  __schedule+0x149b/0x4fd0
[ 1951.348615][    C0]  ? __lock_acquire+0x6b6/0x2cf0
[ 1951.353553][    C0]  ? do_raw_spin_lock+0x121/0x290
[ 1951.358668][    C0]  ? irqentry_exit+0x5e8/0x670
[ 1951.363439][    C0]  ? __pfx___schedule+0x10/0x10
[ 1951.368296][    C0]  ? schedule+0x91/0x360
[ 1951.372538][    C0]  schedule+0x165/0x360
[ 1951.376696][    C0]  schedule_timeout+0x12b/0x270
[ 1951.381557][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[ 1951.386930][    C0]  ? __pfx_process_timeout+0x10/0x10
[ 1951.392222][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1951.398027][    C0]  ? prepare_to_swait_event+0x341/0x380
[ 1951.403580][    C0]  rcu_gp_fqs_loop+0x301/0x1540
[ 1951.408456][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[ 1951.414614][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[ 1951.419896][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[ 1951.425099][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1951.430909][    C0]  rcu_gp_kthread+0x99/0x390
[ 1951.435498][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1951.440700][    C0]  ? __kthread_parkme+0x7b/0x200
[ 1951.445639][    C0]  ? __kthread_parkme+0x1a1/0x200
[ 1951.450664][    C0]  kthread+0x711/0x8a0
[ 1951.454738][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[ 1951.459937][    C0]  ? __pfx_kthread+0x10/0x10
[ 1951.464545][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1951.469756][    C0]  ? __pfx_kthread+0x10/0x10
[ 1951.474353][    C0]  ret_from_fork+0x510/0xa50
[ 1951.478948][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1951.484057][    C0]  ? __switch_to+0xc9e/0x1480
[ 1951.488742][    C0]  ? __pfx_kthread+0x10/0x10
[ 1951.493336][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1951.498123][    C0]  </TASK>
[ 1951.501157][    C0] rcu: Stack dump where RCU GP kthread last ran:
[ 1951.507481][    C0] CPU: 0 UID: 0 PID: 4232 Comm: syz.0.8958 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1951.518325][    C0] Tainted: [L]=SOFTLOCKUP
[ 1951.522642][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 1951.532688][    C0] RIP: 0010:smp_call_function_many_cond+0xcc5/0x1260
[ 1951.539376][    C0] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 d4 97 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 7f 93 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 63 93
[ 1951.558983][    C0] RSP: 0018:ffffc900038575e0 EFLAGS: 00000293
[ 1951.565052][    C0] RAX: ffffffff81b5654d RBX: 1ffff110170e8129 RCX: ffff88802ef93d00
[ 1951.573023][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[ 1951.580988][    C0] RBP: ffffc90003857720 R08: ffffffff8f823177 R09: 1ffffffff1f0462e
[ 1951.588961][    C0] R10: dffffc0000000000 R11: fffffbfff1f0462f R12: ffff8880b8740948
[ 1951.596927][    C0] R13: dffffc0000000000 R14: ffff8880b863bb00 R15: 0000000000000001
[ 1951.604895][    C0] FS:  0000000000000000(0000) GS:ffff888125e1c000(0000) knlGS:0000000000000000
[ 1951.613820][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1951.620397][    C0] CR2: 00007fa8369b6ad8 CR3: 000000000dd3a000 CR4: 00000000003526f0
[ 1951.628368][    C0] Call Trace:
[ 1951.631645][    C0]  <TASK>
[ 1951.634578][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1951.639789][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[ 1951.646125][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1951.650900][    C0]  ? __pfx_flush_tlb_func+0x10/0x10
[ 1951.656108][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[ 1951.661239][    C0]  flush_tlb_mm_range+0x60a/0x1170
[ 1951.666362][    C0]  tlb_flush_mmu+0x1a7/0x680
[ 1951.670952][    C0]  ? __pfx_down_write+0x10/0x10
[ 1951.675805][    C0]  tlb_finish_mmu+0xc3/0x1d0
[ 1951.680402][    C0]  exit_mmap+0x439/0xb10
[ 1951.684650][    C0]  ? uprobe_clear_state+0x20f/0x290
[ 1951.689850][    C0]  ? __pfx_exit_mmap+0x10/0x10
[ 1951.694612][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x730
[ 1951.700256][    C0]  ? __pfx_exit_aio+0x10/0x10
[ 1951.704945][    C0]  ? uprobe_clear_state+0x27c/0x290
[ 1951.710180][    C0]  __mmput+0x118/0x430
[ 1951.714269][    C0]  exit_mm+0x169/0x230
[ 1951.718429][    C0]  do_exit+0x627/0x22f0
[ 1951.722589][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1951.728390][    C0]  ? down_interruptible+0x6d/0xe0
[ 1951.733414][    C0]  ? __pfx_do_exit+0x10/0x10
[ 1951.738018][    C0]  do_group_exit+0x21c/0x2d0
[ 1951.742609][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1951.747811][    C0]  get_signal+0x1285/0x1340
[ 1951.752417][    C0]  arch_do_signal_or_restart+0x9a/0x7a0
[ 1951.757971][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 1951.764223][    C0]  ? __fget_files+0x2a/0x420
[ 1951.768817][    C0]  ? __fget_files+0x3a0/0x420
[ 1951.773500][    C0]  exit_to_user_mode_loop+0x87/0x4e0
[ 1951.778784][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1951.783552][    C0]  do_syscall_64+0x2c1/0xf80
[ 1951.788142][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.794207][    C0]  ? trace_irq_disable+0x37/0x100
[ 1951.799229][    C0]  ? clear_bhb_loop+0x60/0xb0
[ 1951.803908][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1951.809797][    C0] RIP: 0033:0x7f5444f8f34b
[ 1951.814209][    C0] Code: Unable to access opcode bytes at 0x7f5444f8f321.
[ 1951.821218][    C0] RSP: 002b:00007f5445ecdf10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1951.829629][    C0] RAX: fffffffffffffffc RBX: 0000000000000003 RCX: 00007f5444f8f34b
[ 1951.837594][    C0] RDX: 00007f5445ecefe0 RSI: 0000000080085502 RDI: 0000000000000003
[ 1951.845558][    C0] RBP: 00007f5445ecefe0 R08: 0000000000000080 R09: 00007f5445ecdfd8
[ 1951.853532][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502
[ 1951.861495][    C0] R13: 0000000800000000 R14: 0000000000000008 R15: 00007f544501f52a
[ 1951.869480][    C0]  </TASK>