last executing test programs:

29m34.6360378s ago: executing program 0 (id=457):
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba3500000080ff00000700ff020000000000000000000000000001"], 0xfdef)

29m34.016166957s ago: executing program 0 (id=460):
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r3)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001900)={'wg2\x00', <r5=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="240003"], 0x10e0}}, 0x0)

29m33.627876167s ago: executing program 0 (id=464):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x50b041, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async)
r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3b, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x6}, 0x0) (async)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x3b, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x6}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0))
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x105081, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1b) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1b)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0) (async)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d})
r9 = fsopen(&(0x7f0000000100)='hpfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000180)='gid', &(0x7f0000000440)='\x05\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81F\xa9sz{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x8d\x84\'\xa3\xf1', 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x275a, 0x0)
write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[@ANYRESOCT, @ANYRESHEX=r7, @ANYRESOCT=r1, @ANYRES16=r8, @ANYRES64=r4, @ANYBLOB="bc974183ff4bca4dc8653752130ccedbf6cd794d0402c73c2dfe886d706d8bf98d25f63274cd121821a746efde97650e604710", @ANYRESOCT=r0], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
openat$kvm(0x0, &(0x7f0000000040), 0x10000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00')
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
lseek(r1, 0x7, 0x0) (async)
lseek(r1, 0x7, 0x0)

29m31.77416502s ago: executing program 0 (id=472):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001800dd8dfeffffff0000000002201000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0xa044}, 0x4010)

29m30.882020676s ago: executing program 0 (id=475):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x50, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x50}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b00f5ffffff00000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

29m30.611163478s ago: executing program 0 (id=477):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000070a010100000000000000000a0000045900074039299c2e8db97dbf5a6edaadb9bd9609d4bd5a8969913f53c30b5501bae4be8e9aa5190d18ac4ea2e1d144742c7239a280acc38ead74d5c4bb89fee434ce2e5a624af673c048d644764f185977201626b525c91c25000000090002007379cb860000000045000740bc434a41ba0137ab2a9290a4bd13d4f3c517207dfeb21c0d9ead71a333637769069ad8d6746d2e2846ebfcf678d6e29c37f861ce09a95baea2ec3f45a1c2b801f5000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20008015}, 0x20004000)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbdf32aadbfef320eed000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6cd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0xc844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200000, 0x0, 0x40000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r1, {0x0, 0xee00}}, './file0\x00'})
recvfrom$l2tp(r5, &(0x7f0000000540)=""/187, 0xbb, 0x20, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a8000000004"], 0x2c}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x3, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x4)

29m29.87374175s ago: executing program 32 (id=477):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="c4000000070a010100000000000000000a0000045900074039299c2e8db97dbf5a6edaadb9bd9609d4bd5a8969913f53c30b5501bae4be8e9aa5190d18ac4ea2e1d144742c7239a280acc38ead74d5c4bb89fee434ce2e5a624af673c048d644764f185977201626b525c91c25000000090002007379cb860000000045000740bc434a41ba0137ab2a9290a4bd13d4f3c517207dfeb21c0d9ead71a333637769069ad8d6746d2e2846ebfcf678d6e29c37f861ce09a95baea2ec3f45a1c2b801f5000000"], 0xc4}, 0x1, 0x0, 0x0, 0x20008015}, 0x20004000)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbdf32aadbfef320eed000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4040000)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6cd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0xc844, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x200000, 0x0, 0x40000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r1, {0x0, 0xee00}}, './file0\x00'})
recvfrom$l2tp(r5, &(0x7f0000000540)=""/187, 0xbb, 0x20, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06464ce, &(0x7f00000000c0)={0x0, 0x800, 0x8, 0xfffffffb, 0x1, [], [0x40000000, 0xd386, 0x401, 0xfff], [0x8, 0x5], [0xffffffffffff7fff, 0x200000000003, 0x5, 0x9]})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a8000000004"], 0x2c}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x3, {0x2, 0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0x1c}}, 0x4)

27m35.168158369s ago: executing program 4 (id=1142):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/power/pm_freeze_timeout', 0x169a82, 0x80)
sendfile(r1, r1, 0x0, 0xb)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0)

27m34.996537254s ago: executing program 4 (id=1143):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110a4000000000abc000800000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

27m34.869770586s ago: executing program 4 (id=1146):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0)
r1 = syz_open_dev$vim2m(&(0x7f0000001580), 0x403, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2d, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x32344d59})
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'})
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640))

27m34.67186553s ago: executing program 4 (id=1148):
r0 = socket(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0)
r1 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$printer(r1, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r1]}, 0x0)
r2 = socket(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4000002}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000100)=0x1, 0x4)
syz_emit_ethernet(0xf3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000934d"], 0x50)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="bb89e44b070000002cbd7000fddbdf2505001a76511414bb000000000000000000040000ff0100000000f6ffffff0000000000011500000483ff55af9db6f4b9fc9bc3ae9fabc84f63b687427b1fc7e4f57ff790248b3da351c1dd940e2208a824b7539893fc0a4f1706551c7a682aae42a1c831368490b3c2400792a82fd53c16019ba64da5557843bf6a058f2db4856fab287b5d3f8db2a3c3b2df35b2f2785f1204282f39295c99dc1f2f636edb5e8778bc9dc65d1891ef6de5a0eaaedb4a52a3d382f2dd6a28edb89d7a93893de8eed7bab9"], 0x38}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0xc09, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r5, &(0x7f0000000000)="93", 0xf5)

27m33.020004258s ago: executing program 4 (id=1168):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000210000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a140000001100010000000000000000000000000a4f19e0d624a651e87c68161d31917d8951a77a67d2e96740fbbb0fa626f3eef5830af681c61920b2691b3db330c9667dbe7cc1f9c206f7babf83c933886e4058da8e88182f77ad0d44d660602e04b0529c4a6644d8d046f7e283a78bd8b9107f0481b723ca4ef0806a090fc61a83a29f255a984728441eedea9a1eb71e47de00292d"], 0x64}}, 0x0)

27m31.72607126s ago: executing program 4 (id=1173):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28041, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
poll(&(0x7f0000000c40)=[{r2, 0x1020}], 0x1, 0x4)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x8000000000000000)
socket$nl_generic(0x10, 0x3, 0x10)

27m16.366160383s ago: executing program 33 (id=1173):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28041, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
poll(&(0x7f0000000c40)=[{r2, 0x1020}], 0x1, 0x4)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r1, 0x3312, 0x8000000000000000)
socket$nl_generic(0x10, 0x3, 0x10)

21m26.152007767s ago: executing program 2 (id=3204):
socket$nl_route(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

21m26.009102856s ago: executing program 2 (id=3206):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c8f6055b5010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="00000003000010"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
syz_usb_control_io$cdc_ecm(r3, 0xfffffffffffffffd, 0x0) (rerun: 32)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async, rerun: 64)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@deltclass={0x2c, 0x29, 0x420, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x10, 0xfff1}, {0x5, 0xe}, {0x9, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x40010) (rerun: 64)

21m24.43198509s ago: executing program 2 (id=3219):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r1 = dup(r0)
openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
close(r4)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(0xffffffffffffffff, 0xc01864b0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x6, 0x2, 0x2, 0x0, 0xc6})
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5d300987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6c090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000001000)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000002e000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4)
sendmsg$inet(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4)

21m23.253890591s ago: executing program 2 (id=3221):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4b}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r3, 0x5415, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801)
move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24)
r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x5, "d1"}, @main=@item_012={0x1, 0x0, 0x9, 'b'}, @main=@item_012={0x2, 0x0, 0xa, "4a82"}, @main=@item_012={0x1, 0x0, 0xc, '-'}, @local=@item_012={0x2, 0x2, 0x8, "80e9"}]}}, 0x0}, 0x0)
r7 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r7, 0xd01c4813, &(0x7f00000000c0)={0xffffffff, 0x200, 0x3, 0x0, 0x5, 0xfff})

21m20.02817066s ago: executing program 2 (id=3247):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}, 0xfe}, 0x20008040)

21m19.735297219s ago: executing program 2 (id=3250):
socket$nl_route(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

21m19.119664113s ago: executing program 34 (id=3250):
socket$nl_route(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff00080002", @ANYRES16=r0, @ANYRES32=r2], 0x44}}, 0x0)

13.057352562s ago: executing program 7 (id=9483):
syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0)
r1 = syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r2, 0x0)
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
write$P9_RSTATu(r0, 0x0, 0x0)
socket(0x10, 0x803, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b000100000000090400", @ANYRES16], 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRES16], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x40cc5}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00')
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0)

9.75968104s ago: executing program 7 (id=9493):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x80000001, 0xfffffffffffffffd, 0x1000, 0x9, 0x5}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2080, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1)
ioctl$KVM_HYPERV_EVENTFD(r3, 0x4048aec9, &(0x7f0000000080)={0x3, 0xffffffffffffffff, 0x3})
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)
syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
lsetxattr$security_capability(&(0x7f00000001c0)='./file3\x00', &(0x7f0000000280), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x4}, {0x4, 0x5}], 0xee01}, 0x18, 0x1)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r5, 0x0)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x6, 0x4})
sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)

9.035544528s ago: executing program 5 (id=9497):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r2}, &(0x7f0000000200)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x612a, 0x17e, 0x0, 0x0, 0x0)
r6 = fanotify_init(0x200, 0x101000)
readv(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/136, 0x88}], 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x8, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x98}, 0x40000)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_channels={0x3c, 0x3, 0x0, 0xb3, 0x8, 0x7, 0x2, 0xffffff4f, 0x91}})

7.860014511s ago: executing program 5 (id=9500):
r0 = socket$rds(0x15, 0x5, 0x0)
signalfd(r0, &(0x7f0000000240)={[0x9]}, 0x8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x24040001)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10)
sendmsg$inet_sctp(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)="87", 0x1}], 0x1, &(0x7f0000000340)=[@sndrcv={0x30, 0x84, 0x1, {0x2, 0x40, 0x41, 0x6, 0x2, 0x2, 0x3, 0x7fffffff}}], 0x30}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB=' '], 0x38}}, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x7, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0xc, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0xc0e4, 0x1, 0x86, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1462, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0x1, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1fb, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x7, 0x7, 0x5, 0xb, 0x101, 0x2, 0x4, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x4, 0xe, 0x3]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x0, 0x1})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.629313586s ago: executing program 7 (id=9504):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000004c0)=[@rdmsr={0x32, 0x18, {0x9dd}}, @wr_drn={0x6e, 0x20, {0x6, 0x2}}, @wrmsr={0x1e, 0x20, {0x9af, 0xffffffffffff4a16}}, @cpuid={0x14, 0x18, {0x386d, 0x6}}, @code={0xa, 0x54, {"8f4878c1b5e2000000ccf6c9092e660f0119362645d0c80f20c035010000000f22c0440f20c03508000000440f22c0f367470f21c1660f3acf4150002e440f01cb0f08"}}, @cpuid={0x14, 0x18, {0x0, 0x7f}}, @cpuid={0x14, 0x18, {0x9, 0x2}}, @wr_drn={0x6e, 0x20, {0x0, 0x7}}, @wr_crn={0x46, 0x20, {0x3}}, @wr_crn={0x46, 0x20, {0x4, 0x5}}], 0x154})
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x2, 0x180, 0x100000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x6, 0x100, 0x101], 0xffff1001, 0x120182})
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x0, 0x4, 0x0, 0xd9e})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
socket$inet6(0xa, 0x1, 0x84)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.588452642s ago: executing program 3 (id=9505):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000140)={@private2, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1008, 0x3c80, 0x85, 0x400, 0x3, 0x60})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0)
syz_open_dev$media(0x0, 0x80000006, 0xd01840)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r6 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000000c0)={0x0, 'team0\x00', {0x2}, 0x401})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$inet6(0xa, 0x3, 0x9)

6.967448357s ago: executing program 5 (id=9507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'pimreg1\x00'})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)={0xc80, 0x2000, 0x30, 0x30, 0x5, 0x0, 0x4, 0x1, {0x4, 0x5}, {0x0, 0x2, 0x1}, {0x4, 0x3}, {0x6, 0x351}, 0x7712e6aaee3c336d, 0x1, 0x8, 0x1, 0x1, 0x0, 0x3, 0x7, 0x7, 0xde, 0x1ec3, 0xb, 0x38, 0x4, 0x2, 0x6})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r2, 0x10, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8020}, 0x20004040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000340)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r4, &(0x7f0000002380)={0x10, 0x0, r5}, 0x10)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000023c0)={<r10=>0x0, 0x4, 0xfffb}, &(0x7f0000002400)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r9, 0x84, 0x18, &(0x7f0000002440)={r10, 0x7fff}, &(0x7f0000002480)=0x8)
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000024c0), 0x20000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002500)={{0x1, 0x1, 0x18, <r11=>r1, {r6, r7}}, './file0\x00'})
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000002540)={0xc, <r12=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r11, 0x3ba0, &(0x7f0000002580)={0x48, 0x1, r12, 0x0, 0x4, 0x2})
sendmsg$NL80211_CMD_JOIN_OCB(r11, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x4c, r2, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x138}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040000)
write$usbip_server(r11, &(0x7f0000002740)=@ret_submit={{0x3, 0x64e216a1, 0x0, 0x1, 0xa492}, 0xff, 0x7b, 0x5, 0x107, 0x7, 0x0, "5cb7defc285f593d811eeeeef963f24c8c2be6ee74b626fed627abacb742e7878100265739a03b277648851bb34f8c626873a152b9c00ee2f752af03df8557809b5387f08d397467510925a02a7e43a4df986f5a8114dadb318ba25354d5d0d33dc03b16d739d6541747979672521cf5aa0cec50c79a88c1b1f8fa", [{0x0, 0x1, 0xf, 0x6}, {0x4, 0x24f4, 0x6ff, 0x9}, {0x8, 0x5, 0x3, 0x6}, {0x80000001, 0x2, 0x5e6, 0x8}, {0x4, 0xea5, 0x0, 0x7}, {0x4, 0x0, 0xfffffffc, 0x7}, {0x3, 0xb25, 0xc2a, 0x7}, {0x4, 0xd94, 0x4, 0xff}, {0x4, 0x3, 0x7, 0x1}, {0x7, 0x4, 0x1ff, 0x7}, {0x10000, 0x4, 0x2, 0x1}, {0x9, 0x7, 0x0, 0x7}, {0x8, 0x5, 0x3, 0x101}, {0x6, 0x1, 0xd08, 0x1}, {0x0, 0x3ff, 0x5, 0x6}, {0x1, 0x0, 0x1, 0x3}, {0x5, 0xfffffffd, 0x5, 0x7f}, {0x4, 0x7ff, 0x9, 0x1000}, {0x0, 0x6ea, 0x6, 0xf8ea}, {0x0, 0x8818, 0x2, 0x4}, {0x1, 0xfffffff7, 0x8, 0x3ff}, {0x401, 0x7ff, 0x7fff, 0x2}, {0x1000, 0x0, 0x3, 0x3}, {0x2c, 0xe9dc, 0x9, 0x1000}, {0x5, 0x5, 0x0, 0x70d}, {0x4cbbaac2, 0x8, 0x1, 0xc}, {0xef99, 0x5, 0x7ca6, 0x2}, {0xc, 0x2, 0x80000000, 0x4}, {0x80000001, 0x6, 0x9, 0x5}, {0xc9f, 0xe, 0x6, 0x7fff}, {0x800, 0x2, 0x3, 0xfffffffa}, {0x3c, 0x3, 0x2, 0x5}, {0x28, 0xe, 0x1, 0x7f}, {0x7759, 0xdd, 0xd, 0xbc}, {0x80000000, 0x4c1f, 0x80000000, 0xb}, {0x1, 0x8001, 0x777, 0xffffffff}, {0x830, 0x3ff, 0x49, 0x5}, {0x40, 0x1ff, 0xc19a, 0x4}, {0xfffffff2, 0xffffffff, 0x2, 0x3}, {0x6, 0x5, 0x9, 0x2}, {0xc7c4, 0xfffffff7, 0x120000}, {0x2, 0x100, 0x4, 0x1000}, {0x80000001, 0xffff, 0x6, 0xfffffff8}, {0xc31, 0x2, 0x8, 0x3}, {0xfffffe01, 0x4, 0x3, 0x3}, {0xe6c7, 0x7fff, 0x1d0c000, 0x2000200}, {0x6, 0x7, 0x800, 0x3b4b}, {0x8, 0xc2, 0x10001, 0x8001}, {0x8cb2, 0xa9, 0x1, 0x10}, {0x6, 0x1, 0x5b7b, 0x8}, {0x1ff, 0x3, 0xe0, 0x3}, {0x7fffffff, 0x3, 0x10000, 0x101}, {0x8, 0x7, 0xeb3, 0x7}, {0x6, 0x1, 0x0, 0x1}, {0x7ff, 0x1, 0x8, 0x9}, {0x5, 0x800, 0x6, 0x8001}, {0x5, 0x4, 0x1, 0x8}, {0xffff, 0x3, 0x71, 0x3}, {0x9, 0x1, 0x6, 0x3}, {0x1, 0x7fffffff, 0x6, 0x7}, {0x8, 0x4, 0xa, 0xe10}, {0x4, 0xd, 0x8, 0x5}, {0x5c0, 0x1, 0x2, 0xc}, {0x50, 0x7fff, 0x749b37e8, 0x9}, {0x1039, 0x8, 0x0, 0x10}, {0x30000, 0x7b8, 0x1}, {0x2, 0xb, 0x0, 0x9}, {0x6, 0x4, 0xfffffffa, 0xfff}, {0x8, 0x1, 0x1, 0x8}, {0x7, 0x4, 0x9, 0xc679}, {0xfffffff9, 0x3ff, 0x800, 0x3}, {0x0, 0x7fffffff, 0x2, 0x4}, {0x0, 0x0, 0x800, 0x9}, {0x6, 0xe5, 0xe5, 0x32d}, {0x0, 0x9, 0x2, 0x1}, {0x4, 0x6, 0x2aac, 0x1000}, {0x2, 0x0, 0x9, 0x1000}, {0x6, 0x0, 0x6, 0x7}, {0x8001, 0x5, 0xdf, 0x1ff}, {0x8, 0xa, 0x7f, 0x7}, {0x5, 0x3, 0xf32, 0xadc}, {0x2, 0xffffffff, 0x0, 0x40}, {0x6, 0x8, 0x7}, {0x4, 0x0, 0x2f, 0x400}, {0x4, 0xa, 0x9, 0x7}, {0x7, 0x6e9d, 0x1, 0x5}, {0x9, 0xfffffffb, 0x6000, 0x2}, {0x0, 0x8, 0xffff, 0xbe16}, {0x544, 0x4, 0x2, 0x3304}, {0x7ff, 0x7, 0x10001, 0x1}, {0x81, 0x0, 0xf2, 0x100}, {0x8, 0x4, 0x9f, 0xfffffff8}, {0x9, 0x7ff, 0x4, 0x5}, {0x1, 0x5b4a0000, 0x8, 0x3}, {0x80000001, 0x31, 0x5, 0x3}, {0x8, 0x7, 0x80, 0x4}, {0x7, 0x7, 0x5, 0x10001}, {0x7, 0xa5, 0xffff, 0x1}, {0x8, 0x1, 0x8, 0x3}, {0x7, 0xa2a3c961, 0x3, 0x2}, {0x3, 0x746, 0x56, 0xe3}, {0x7ff, 0x0, 0x9, 0x6}, {0x7, 0x5, 0x9, 0x5}, {0xe47, 0xa, 0xb82, 0x101}, {0x8, 0xffffffff, 0x0, 0x7}, {0x3, 0xf, 0x4, 0x4}, {0xfffff4c3, 0x80000000, 0x101, 0x94}, {0x8, 0x0, 0x80b, 0x3e}, {0x5, 0x8, 0x4, 0x6}, {0x80000001, 0x49d7, 0x1, 0x1}, {0xfffffff2, 0x0, 0x30b7, 0x8000}, {0xffffffc0, 0x400, 0x200, 0x6}, {0x7, 0x10000, 0x2, 0x7fff}, {0x3, 0xe3, 0x3, 0x7}, {0x1000, 0x6, 0x4, 0x3}, {0x7, 0x4, 0x1, 0x3}, {0x7cf0, 0x75, 0xefc, 0xffff}, {0x6, 0xfffffffd, 0x6, 0x5}, {0x3f2, 0x8, 0x10000, 0x8}, {0x6, 0x30, 0x7, 0x1}, {0xd, 0x2, 0x7, 0xffff}, {0x80000000, 0x7749, 0x4}, {0x80000000, 0x40, 0x15, 0x9}, {0x1, 0x9, 0x4edd, 0x7ff}, {0x0, 0x5, 0xe23, 0x5}, {0x0, 0x3, 0x1, 0xe63}, {0x8, 0x10001, 0x3ff, 0x1000}, {0x7, 0x2, 0xfffffff7, 0xf}, {0x3a, 0x49, 0x779, 0x3}, {0x1, 0x95, 0xff, 0x2}, {0x10, 0x7f, 0x5, 0x8}, {0x9, 0x6, 0x3, 0x8}, {0x200, 0x7, 0x38000, 0x21b}, {0x1, 0x6, 0x7, 0x2}, {0x3, 0x0, 0xffff, 0x37d}, {0x2, 0x101, 0x401, 0x1}, {0x7ff, 0x1, 0x8, 0x8}, {0x400, 0x8, 0xfffffffe}, {0x9, 0x205, 0x9, 0x6}, {0x81, 0x5, 0x4, 0x8}, {0x0, 0x0, 0x3}, {0x0, 0x8, 0x2adfe68f, 0x9}, {0x0, 0x2, 0x6, 0xb}, {0x4, 0x3, 0x8, 0x80000000}, {0x5, 0x1, 0x5, 0x2}, {0xd1, 0x7, 0x4, 0x2cb}, {0xb, 0x7, 0x9, 0x6}, {0x7, 0x0, 0x3e, 0xcee}, {0x7, 0x8, 0x7, 0xe1}, {0xa, 0x9, 0x9}, {0xe87, 0x4, 0x2, 0x6}, {0x101, 0xb, 0x89, 0x5f}, {0x6, 0x241d, 0x8, 0x8}, {0x5, 0x7ff, 0x5, 0x6}, {0x7, 0x9, 0xa7, 0x8923}, {0x5, 0x8001, 0x0, 0x8}, {0xfffffff9, 0x8, 0xffffff01, 0x1}, {0xd1, 0x1, 0x9}, {0x9, 0xffffffff, 0x1, 0x2}, {0x1, 0xfffffffa, 0x1, 0x3}, {0x7ff, 0x2, 0x436, 0x7b}, {0xa05, 0x0, 0x2, 0xfffffff9}, {0xc24, 0xa2f, 0x2, 0xa}, {0x3, 0xa3, 0x401, 0x40}, {0xffff, 0x8, 0x531a, 0x80}, {0x7, 0x4, 0xd2fe, 0x3}, {0x3, 0x3, 0x5, 0x8}, {0x7, 0x7, 0x361, 0x3d}, {0x4, 0xdf32, 0x0, 0xb3}, {0x6, 0x8, 0x8000, 0x8}, {0x0, 0x5, 0x9, 0x3}, {0x4, 0xc, 0xc4, 0x6}, {0x8, 0xdb1, 0x3ff, 0x9}, {0x6, 0x44, 0xc, 0x1}, {0x19, 0x0, 0x7, 0x7}, {0x4, 0x1000, 0x2, 0x3}, {0x8, 0x5, 0x6, 0x9}, {0x0, 0x7, 0x0, 0x3}, {0x901, 0xd076, 0x6, 0x3}, {0x6, 0x8, 0x0, 0x9}, {0xfff, 0xffff1522, 0xb16, 0x1}, {0x400, 0x10, 0x64, 0x8}, {0x769, 0xac, 0x7, 0x6}, {0x7ff, 0x8, 0x2, 0x8}, {0xf771, 0xb60e, 0x120, 0x7}, {0x7, 0x8, 0x5, 0x6}, {0x10000, 0xfffffff3, 0x9, 0xfb}, {0x6, 0x80000001, 0x0, 0xc}, {0x1, 0x7, 0x4, 0x100000}, {0x4, 0x1, 0x200, 0x2}, {0x1, 0x6, 0x6, 0x7}, {0x8, 0xaed, 0x300000, 0xfffffeff}, {0x7, 0x5, 0xc, 0x6}, {0x6efd, 0x3, 0x64f, 0x6}, {0x8, 0x1, 0x4, 0xd50}, {0x5, 0x3, 0x5, 0x3}, {0x5, 0x2, 0x5, 0xfff}, {0x2, 0x0, 0x5267, 0x6}, {0x80000001, 0x8f11, 0x0, 0x9}, {0x80000000, 0x4d, 0x8, 0x3}, {0x6, 0x37, 0xb, 0x4}, {0x96, 0x7, 0x6c, 0xebbb}, {0x8, 0x3, 0x75b, 0x8}, {0x5, 0x6, 0x401, 0x8}, {0xec, 0x7, 0x0, 0x7ee}, {0xa2b, 0x0, 0x9, 0xffffffff}, {0x3, 0x1, 0x5, 0x7}, {0x9, 0xd9, 0x7, 0x4897}, {0x7f, 0xfffffeff, 0x5}, {0x1, 0x6, 0xa9, 0x7}, {0xfffffffa, 0xe, 0x2, 0x8001}, {0x3, 0x10001, 0x7, 0x9}, {0x1ff, 0x1, 0xf6f, 0xfffffff9}, {0xffffffff, 0x4, 0x5, 0x3}, {0x6, 0x3, 0x7fffffff}, {0x5, 0xb98, 0x8, 0xc}, {0x5, 0x1, 0x62b, 0x6}, {0x5, 0x2, 0x6, 0x6}, {0x320, 0x0, 0x9, 0x2}, {0x6000000, 0x10001, 0x6, 0x8}, {0x5, 0x6, 0x8, 0x101}, {0xea5, 0xd8fc, 0x200, 0x80000000}, {0x7, 0x0, 0x74c3, 0x1000}, {0x4, 0x1, 0x1, 0x3d}, {0x3, 0x2, 0x3491, 0x1}, {0x101, 0x0, 0xfffffffe, 0x80000001}, {0xb3800000, 0x80000001, 0x30000000, 0x4}, {0xc, 0x8, 0x1, 0xe}, {0x0, 0x80000000, 0x9, 0x2}, {0xfffffffc, 0x8000, 0xb1, 0xc}, {0x7, 0x1c, 0xd, 0x10001}, {0x6, 0x10001, 0x4, 0x4}, {0x101000, 0x9409, 0x4, 0x2}, {0xb5e8, 0x3b0ef819, 0x8, 0x9}, {0x6, 0x5, 0x9, 0x6}, {0x1, 0x4b0, 0x9, 0x2}, {0x7af, 0x9, 0xd, 0x9}, {0x40, 0x7, 0x5, 0x7695}, {0x9, 0x0, 0xfffffff7, 0x60000000}, {0x4, 0x0, 0x1, 0x2}, {0x2, 0x100, 0x0, 0xec}, {0x30000, 0x2d, 0x4, 0x800}, {0xff, 0xba9, 0x8001, 0x3}, {0x6bdd, 0x100, 0x7ff, 0x2}, {0x2, 0x7, 0x1, 0x530}, {0x0, 0x7fffffff, 0x0, 0x7}, {0x8, 0x6, 0x9, 0xff}, {0x7, 0x4, 0x0, 0xff}, {0x6, 0x9, 0x1ff, 0x8}, {0x5, 0x2, 0x9f, 0x81}, {0xc, 0x0, 0x8000, 0x75d2}, {0x7, 0x80, 0x5, 0x9}, {0x6, 0x8000, 0x9, 0x6}, {0x1, 0x5, 0x1, 0x4}, {0x9, 0x8, 0x1, 0x51}, {0x9, 0x8000, 0x4, 0x800}, {0x46, 0x4, 0xcd3, 0x54a240e4}, {0x7, 0x0, 0xd, 0x6}, {0x0, 0x2, 0x800, 0x102}, {0x5, 0x90c, 0xe, 0x5c}, {0xfffffffd, 0x1, 0x7, 0x4}, {0xe, 0x10000, 0xfffffff9, 0x2400000}, {0x800, 0x1, 0x4, 0x6}]}, 0x111b)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$FUSE_LK(r4, &(0x7f0000003880)={0x28, 0x0, r5, {{0xffffffff7fffffff, 0x8, 0x0, r8}}}, 0x28)
write$FUSE_NOTIFY_INVAL_INODE(r11, &(0x7f00000038c0)={0x28, 0x2, 0x0, {0x6, 0x580000000, 0xfffffffffffffff9}}, 0x28)
ioctl$PTP_CLOCK_GETCAPS(r11, 0x80503d01, &(0x7f0000003900))
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000003980)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x292, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0xc0, 0x7, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x3, 0x1, 0x2, 0x3, {0x9, 0x21, 0x8, 0xcb, 0x1, {0x22, 0xc17}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x3, 0x6}}}}}]}}]}}, &(0x7f0000003e00)={0xa, &(0x7f00000039c0)={0xa, 0x6, 0x310, 0x9, 0x6, 0x6, 0xff, 0x2f}, 0xf, &(0x7f0000003a00)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x8, 0xee, 0x6}]}, 0x6, [{0xe2, &(0x7f0000003a40)=@string={0xe2, 0x3, "19ae47a834660d69a589b7ac3638bb79fca14d03b47f288696387e159eb1d3bea1b114f38e21eb67373921534e20a2c5e9e320cfbee08fe70f13ed2eaf6548abd895e8beca775458b73dc21a16d6c9bf4130d3db2eaf68d1289c6bc163066a6d45d7425b618b8ec75c380d7fbab22d8d232b6a2666eee5db4b743630156c12103858ca1bd2ab408199190ab7429e94827f4878c54aaa09c930f0e43ec41e798154f07268272ef1b7b7073f5f3c616bb3f2ec4ed1dde346c3bc43cf8ce442ad462909464f17258be9c29964d477df40f0bf9b352c78e3d37f8e4585947ea647db"}}, {0x73, &(0x7f0000003b40)=@string={0x73, 0x3, "5d4a4b36ec9d7da0770a3dbc1524ad1028bc4e035e4378c2bf29b261b148172b5fb282ac6d7c45e831b94f24552840b343121bfa12316584725c911badae98438366286531ef843b2ea84a6a1bc93f6c2fb9570e2e161317fd31896b2dbe6f1f86a2ea4427f1113468a3a0b8c0948ece5d"}}, {0xaa, &(0x7f0000003bc0)=@string={0xaa, 0x3, "f4c0c224409f4c61b43f633b24d11bab6157bee3389b404e815b90b5e36cdceb2b13057f1cbf69a9ff79ebe2693b875b06648ceb98c239b8e4e7182182cd0b10165321b2b8a366dc5c882519a82c92cf64867115b4d76418774cfca75c03830e12ffe7cbac1903cf7f443e85785215e1f48a71194979303573a9d569660543c56c311b0ae958f4ff2c6747144906ac50cfc59c8d9fc30c2b7056c9d30c6244d02eb8a730bbaa2233"}}, {0x49, &(0x7f0000003c80)=@string={0x49, 0x3, "8774f314e4a513cf9028948862f50e5555cc2b7d927f120418cf12c562307f0b6b2f91e14413c1584ad596765d3d65b6b038e38979b5e2b96b5144da3b874eec43f81d381ccbe8"}}, {0xf, &(0x7f0000003d00)=@string={0xf, 0x3, "20349706b0a3ffd4bf2961bc4f"}}, {0xa2, &(0x7f0000003d40)=@string={0xa2, 0x3, "c7825455d2f92d7b3c21e2ec4f153467e9d25c4f314a122a7d84e9b033dda346f7ec1d8d2f394cb5ca6800df3967e008d2f27c28b50b6bad37c42eaaf7835c3c70d9bf8f2526ed1de0f4e876410b0cf1f642459753336bf0df5a8b1ac07a03dbc403941103c9c52c75efd88329356e291ad0ec8845f6609d8151a1444c071fea57037f10fb070bc69d8932d1ba4ad67110443aebea15ed3e1ee28f3674539f48"}}]})
r13 = accept4$inet6(r9, &(0x7f0000003e80)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000003ec0)=0x1c, 0x80000)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r13, 0xf502, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003f00))
syz_genetlink_get_family_id$ipvs(&(0x7f0000003f40), r11)
write$FUSE_POLL(r4, &(0x7f0000003f80)={0x18, 0x0, r5, {0x9}}, 0x18)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r0, &(0x7f00000040c0)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000004080)={&(0x7f0000004040)={0x38, r2, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x3f}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x21}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1448}]}, 0x38}}, 0x24000044)

5.796912869s ago: executing program 7 (id=9509):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7"], &(0x7f0000000180)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)

5.761591577s ago: executing program 3 (id=9510):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x1, 0x8aa000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
connect$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x3}, 0xfe}, 0x18)
syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0], 0x48)
syz_genetlink_get_family_id$l2tp(0x0, r3)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r5, 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/mcfilter6\x00')
lseek(r6, 0x80, 0x1)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xf, &(0x7f0000000380))
io_setup(0x7, &(0x7f0000000780))
write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0), 0xf)
syslog(0x3, &(0x7f0000000200)=""/90, 0x5a)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000100)={0x800, 0x8})

5.590878542s ago: executing program 7 (id=9511):
r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117})
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000640)=[{0x0}], 0x178)
r1 = socket$kcm(0x29, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x119, 0x487, 0x0, &(0x7f0000000480)=0xfffffffffffffe7e)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x8, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @mcast2, 0xfffffffb}}, 0x5c)
setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000140), 0x0)
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00')
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x13}, 0x19)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40000}, 0x1c)
r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
write$char_usb(r5, &(0x7f0000001300)="92", 0x2)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r7, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r8, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}]}, 0x34}}, 0x4010)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94)
r10 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x25b9, 0x100, 0x3, 0x215}, &(0x7f0000000040), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_FILES(r10, 0x1e, &(0x7f0000000000)=[r0], 0x1)

4.035341076s ago: executing program 1 (id=9516):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000f40)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000d40), 0x280502, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8000}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000eed92f9ee6f2e9130000000000000000ffffffffffffffff00000000000000001f00000000000000fefeffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff050000000800030004"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000e80)={0x0, &(0x7f0000000d80)="dfa6ad4c3b9be12acbf33adb9f1b20cb256a1bdbfbbd9b412f6e4a69c772333106216d4029cbb5b582afe18345632fe1e83de8b6af51688510f82f271d723c34b46bb08663f6aa514a9050b9bc8400a0b8ade9b74cd9add6052157cf01e559e32b17076ef565623745ba24ab40da6f72dd43ec284dc8027168ebfc29a124dd05147dd48fdf03b6b6816a44c65309e0e8341de7e3339d582ab30b6cfc7f5cdda37030b44ff5c8d7466a87c9a2bd4e426cc34e3dc45b0ff89c00e5d5ec020b6ee3babd3e5296484ad68b42fe2f573109afe79867", 0xd3})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40}, 0x10}, 0x94)
io_setup(0x8, &(0x7f0000000000))
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@generic={0x80})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0xa0}, 0x0)

3.906307812s ago: executing program 5 (id=9518):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{}, 0x0, &(0x7f0000000880)}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000009bb9000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000050000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000000001000000000084010500ac1414bb000000000000000000000000000000003300000000000000640101000000000000000000000000000000000000000000000000000000000040000000fe8000000000000000000000000000bb000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414430000000000000000000000000000000033"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)

3.708041982s ago: executing program 5 (id=9519):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="051c010000000000010002240001000000080904006d410300020009f3b943ca012205000905810320020100075868b4f76c9e"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder0\x00')
bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x4f)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f0000000340)={0x18, r4, 0xffffffffffffffff, 0x1c})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000100)=0xffff0000)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x0, 0x0, 0x0, 0x0}, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, <r6=>0x0}, &(0x7f00000001c0)=0xc)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, r6, &(0x7f0000000200)={0x7, 0x6, 0x0, 0x7f, 0x7, 0xbbcf, 0x6, 0xba, 0xff})

3.319969837s ago: executing program 6 (id=9523):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0)

3.203699138s ago: executing program 6 (id=9524):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe}, {0x7d}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x20000000, 0x1}, 0x0)

3.111384387s ago: executing program 6 (id=9525):
creat(&(0x7f0000000000)='./file0\x00', 0x1b9)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d61637365630000140002800500090000000000050008000000000008000500", @ANYRES32=r0], 0x4c}, 0x1, 0x5b140000}, 0x0)

2.84392697s ago: executing program 6 (id=9526):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
removexattr(0x0, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @loopback, 0x5}, r6}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10)
fsopen(&(0x7f0000000000)='ufs\x00', 0x1)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x1}, {&(0x7f0000000700)}], 0x2}}], 0x2, 0x40)

2.617717701s ago: executing program 1 (id=9527):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x5, 0x0, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0xb4}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000180)="99804490e8aeea07", 0x8}, {0x0, 0x300}], 0x2)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000))
r2 = open(&(0x7f0000000040)='./file1/../file0\x00', 0xa440, 0x34)
ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0x3, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x2, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x1403fe, 0x9, 0x0, 0xfd, 0x0, 0x0, 0xb3, 0xfe, 0x3, 0x7a, 0x80, 0xf6, 0xb82e}], 0x5})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
getpid()
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={<r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000080)={r4, 0x1, 0x6})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r5, 0x1, r3, 0x5})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r5, 0x0, 0x5})
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r0}, './file1/../file0\x00'})
syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x8000)
write$apparmor_exec(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="737461636b2080"], 0x7)
sendmsg(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000880)="5093c35e0d23c588597053657a194662132a20327d5d17531d7bea1caebe0f5129eeb55c608ed2fdf4f775a36eb811a26fc5ca667e581e0dc08458a45eefc3343ed5605e3d217755cca4595f3589341f01f30fef14fa3f6a18d65fe8658a3b9be409aabcd2f18431dee5d5695a0e589fc230d46073127d398a00887f7ba727efbe5e51f7db4da3fed31613e63b17452339ceacfc4423069a7f8f927cc36f9dc0adfb7f12104ab4bc7422eaf9afae052b589f9d582ebb1137754fcf5ae5a592f4d39649e9fa212036cd8f19880e966a919f69ead81a2034479aa155e1c212c9a2e053e1e8038503094a12c1ec68045d61394f6f62ad4346bdd305c3823cba10fed85f9bce8667bdedd8f0442053444aea5e029778adb74180bdf0d18225334c3930c0f48f247b41bc9f14d9da4b8c9137e30fe5f37d288457b9a66be180aa90b7305257ec300fa0a3f99af8ad7e33a1fed9331e9d2326823660924f13e6f042929abf17c4de0148f4004bb31289cb56d525f6b72f805872ab95c6621a0cac41c6591ccaff71c00ca404ce15ce311b6678aaeb5d2171eac9819f04894fe6a33e481283098f5459775c86dbd2154f45d98ad73fdc3ae100e4705a57c3307480b39f2f4bff0facbbe4e64a9d954855852a5837c0cd723a80be2ff74507426b47c836a8f89ee5b9c8f88d90a5a52464973877a2cc4d6a92472a489a90187173a1e5a96630c69f3de120fae2008e3df1db2454f50a69dc30833759275bf90f7fa9a63e39e64bdd0a26a33c093d65e5c47e6d597f7671bffd8bc8d39a80e06a409f94f25e30207f402d56370621c3a1ef4b622b59c8fee9aad3cb1d439d3c678c95a0f2929d912cc1e8aedba7b3f8c92d2c5255bdbaf19522f5556670eb6862d0991c7fc4db5318be535566a30b6ad0d21e4fb08c2483485890cdcd295d7373bef450a44e0b499a43e8409526f964bed81bc3403c21721d8994c39033e6c3379f8ae0bd9382fbaf2c6532c2562fc01e3ecc1f75cf03ac732229f56fe6d31c10f07d75e9b789b8a8c0de7f91450a2b4259b06a010554f5e308c063771c222169940258e57321de5db546049e6a848ac72079cc3e480488f45a4e199649b25a74e284d0f7ea3ef463fd50b905e840e407a6e93a46a824bf66fe3f6d3ddd5f1e27f78e204ead605e7445019512e55c6d486f9d00ce41ce93cec386ea2a3dcaa3005cff4a3b8bf597845067c1a40d88be8fabd77ffef42a153fe302696ccc78361dfd79668315b24a161063b2f57a49c6b3ee61d0ff8fa9ced04142aa0f0d0fecea7a63d57f03e310b358f833c767210bf2a760f32ad86ca86dc1c51fa028750c4aaf1aae5dff53e6501fd289c4dbe6f84c03f66006b34bb17c079e11c788b849cdca809379929a031e332fcefa3dfca14d2c56f620d415ab29938a601f96cf5912e698f87d850ee4493c7f1de953ee3771ae6d8d30244f5cc05e99b75ef52eb5fe47d319fc8a481335af3f346333dffab0f90ddd08b8b8b12ee3bc7fb14af0824f4f6e20e33f4609782ef6ccfde2828483bf3005c21bfacbf0bb6f492fa3fecde1ea554667fe086dd0b0e380cd2acb0795dc80543f46f4d1c70888c1e80007973e395216b9e540072065863e73a9", 0x489}], 0x1}, 0x2400c042)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

2.541350693s ago: executing program 7 (id=9528):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_usb_connect(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac290000000109"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={<r2=>0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0xfb7}}}, &(0x7f0000000240)=0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xc}, &(0x7f0000000400)=0x8)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x4000, 0x8, 0x31f})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
syz_emit_ethernet(0x76, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6000000000403a00fe8000000000000000000000000000bbff020000000000000000000000000001020090780000000166c1665dfffb000100000000000000000000000000000001ff02000000000000000000000000000133000046"], 0x0)
openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
epoll_create1(0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
eventfd2(0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000000)=<r5=>0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000440))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r6=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x8)

1.73251345s ago: executing program 6 (id=9529):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000)
fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002480), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x7}}]}})
read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, <r3=>0x0, <r4=>0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x29, 0x1, 0x20b61000, 0x0, 0x0, 0x0, 0xfffffff9}}, 0x50)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x34, r7, 0x701, 0x0, 0x25dfdbfc, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x24000040)
syz_fuse_handle_req(r2, &(0x7f00000088c0)="761d830cb682c898eff0bd8cf89f15f4a12940213fdafa0f39ad239dbbe11851c2c7cd20f42c8d001b2cb0a97c0138f8bfeb1a5c117e02b3fbc1cba97a7d02e2d84a1018dab174d3ef91a5d9dc46dabb244d9115c89eff75d2da2e2f7578a4920d9dbe0cbd7c553e52bd778fefcdd2ee42a7e04889538a980f8f4293e8c1009a536db29275381f3b27aad6eb446e127671226111b5d8ef39caa7d016b1602e34eac24bc60a483c8c1a76f9489c9f6ebe2205f966871ee207c097c8d340683b187270a7422ee117f5e75dd70da830ef93c28fd4aa1f7a36d9a017557fc3463a728fd27a36d7923c975777245ac7a9df6e965cbd0c46629372a7631864a9da8cab08301b2a30e8deeac591fa9ba0389e1817a326d5842e1978dc1463f78badbb207551e2e4cdcfa668b3b7bbc9a8b209c673c9b20625cb996b87f313d59271e92df97b9b6b0a80da04d7b70fc8e3669b7a94610f75a69956e37a61342c7bc0bed83b1b961a4bbd8ac0e9ee959e275deff57b196abf2c103088561312a16ce7c5df67777a2ad9b2ecbb1d97af5d0988998e0a444c08f96b80a1ec27c1ea529be76a5836ae15d07b27893e357b1a170e025533f79946407d0fd5ef0e7af0ef5190a459d05b15d749805ac0461f65d6eaba156f9785b993b0ced640bec4fa11cebf4bb5488ce85304b23041373c77357ed0b637264dd251c081d2c575e46b4fd71af12d42335a4eac44222e5ba245e05dca8a16068f6330bd553850dd8a1af9ba69b4541959a25ea91b4662a596f6a4f8560c6aa7173897e0c6ada50d423bb8765b8ba19eb9936fb92edb685bbfe694f1648d88f1f9ef7d8ec7cecf4d9c5db05c9a1298176dc6f76f3145d438ee2dcb91b460027b3cd5f446ccc36e0d8b507f40afb1bc483a5febb9114bb406bd8fa2a5e084ca81d38ba9db65e87de94129db0c6b72d81a5c26ba6d3f703292009e302d560cb7e94c76b4cff0fa646d64f093bca010f2f10357c396bb6192669e6abec240d34b3a18e46961e290e902da0726d6850d832129fbf2b2ebf58116a909692344316d175a42c0433e7cd7124deed863b2bb7882ec571b8d4d9c48bfbd800abd963cf627a8bb7831b304baf62fe2ae1c753cfbbd48bd4548b23d9628eb334be84e2c4328c4791c9582bc5eb825593ddf6ae6dfe4deefcad4781d25ca680ae597e4f2e75eabfff5022bd53e80c069c1219d6dbea31c2ad85c788d5fcae83d964e74b2b5beedf2f411e70e5a37307ada87b129b1e45f09a59bae807b2ad634028906237a6f4f602b8525983ec8db4f018cd3d90066eddd0b83e03d9f8cb12590768700d3e89003c01051bad266be7c5eef0691274e0398333e90dae8f90b8b4d82b11b2a5db02f68f31f1274a4070b5183a1a74ac564f196561dff289860e490bf649051cf2a22677253d81c4300fca4518e9c681c2d2abde8cc7db1532c65fcdab8e6b212c92dd42a623caac3afadd29b61ef0c513c8004f98b744ad95b05cd6832e5d38177dc6e131ef2fb5b22fd010b330474d010177dcfc5c4f39b2f5ad80d95a20c2cb62fb04ca63d930935b7e1ff8912341bb8f9ac3a255a31e0c6a1c68bacb3734d074de72d94c96be9e4e2f80002c8cb0f604c9b10574ab4f12ed47231941cd1c91cf7e96b49548ebe668faa5e14a8c13302be1959618df4feaf704065195bcbf9566b6bd351af8b3bea61812a881f1841ae8873f15625f2c0948a0e134f080d6424f8df0002ffe8744a8accfd346e6464bc9be9793fd3183234aab031076c291e500ecdfc3e9be869c23bf0fb323dabaef6e490a6e3866a1de1312afa5d4686b492e1f9aee230ea1643c0219debaad7b66a8cc3908bf5a3492d6d70126eac292536a6e2e789747725e181dc5276b506fc7c698e59089f09a5648b21463ca11bce12d05abc4b9dd6408a07bd8bc90e25f984d2bdfee8effd51894075783c803addd7312a603fe05060c374bd3cc8a871bc0b4c959a6a2af1571d30ca462c46f08f887de11eccb603d94b6bb4dd177301afb9e7cb62896e1ef7c84c278f50fc066c33f8c1452fa00eb5677091ddd2d8fee7232ec7e461b079737980b0f5dc3edd0533a3995a00b05d223a6e12c03c01ed6d6dc9938d817e29bfa84d13d220aeddb3c4e7200e127e9cf4813537830b08d217fc5c91ad3add289a8f52b278fc05263bb1b6f5e161b5ec299a4020308c85958a4dc6208989ca2af5a29143d3b8150887e6d27fe2a20099ab547ef012bab8728e16cdfc00e7b20dd709714141e3c784301fe3dce23225e30aa208ddb0e3a4bd48f8d0b8273afdf003a687e276717b20ee2659fc1f3a93b3acff5bdbd76748d2765ddc2bb6d48abaac6590ddef219b29e998795fb48d668614551f3cfe4aa11600a6064ca6e2bf5233332378497f249fb8df6a3472a01c7853aeaa4bb0a28518bf66e033e79f6081d5562dfb3e91462605340b5b5caecc9a5e567181b3bea74e3e51cfb3f1a5b4a28bf7aca0a6dc0eca0a655735dde2103c8f4e53ab287be2e2e072de41829c077c4b65c29a51dfd60128836830e35dc51912fb107d3b971447d5c324a84b07537581b4a9536f399ae9b9822cc72388713e74806e8e77411d79c422cf4cbeb6bb32cd5605b0f87ee4d7c29de4c93a9bd01ccf13fa6d737e8e767b15af8abf689c43c43ccc033af76959502af27e9b58241433c3c824cd2148328b7beae98814dedce0196f6e4984916e081c3fc3b42b4baf9b2e41e353a42898a65227d36854970cea9f766578a0657028d101c39843b900dc3af1af4157a41d238a9c681c629d6d019324238831dc62eff0904072c7f0c0444a136ac3e602023152caa5c6879f23b88f20b7adf9ae37d7bc33ed80a7a88eedf6ab8ab719debd84f231babe4c000705db75e3fc25814f16d833237022aabce3bbf6a06d29ddbd25574a4d9194d7389393ac065979751a7a795c7fa8fc6476afefc66990702707578216ba49a1b230e7c19441af251ed03dac43de5e3c52b0b4038d89bb0051fcd31f2e920318c36aab22c5726979a5ca27310a90eb7555c6de045cfd8fc08cf4a6174b7c0865821ab6c5079bdde229cf185dfacd8c89ae89315f0a812802f62084d5193faa673823b80c6f83c61b2958b78a2f09058e37a1aef37c27491d5dae69f88a29fd9633bca6631d6720bd7893437c86bca3af15496c5d6efb8ad10353c0cb1b4715fd819c26d427028b5f10eb9aabb17e332d0db378d7cb1f024f0fafdede09d9cf40f9dbc1106ef509dcb9969dee26a45adbc453b6b0272685813d41b5f60c1ac3d1a3801211b73431b34fe3f231b3a6fb5d2f368f04145fc401c8b36c492c4e255d9eef6e5c906d469e3b326cafb7f49c59de427f3b6dbcbc9108fe421cedc57a66b99d15769dde6891027a7f3c4f12f0c831d666bc9f000a7dc07b8d4cd955983fead67a8757cc3729a94577d3de6e0479a4f69b24547eddfa5ceef2e7aab98348bc7ce0370f02000ddab8bd699f53db7a830837b279e3025591a46d6714ef72a2d2fbdd7bf6b71eb276aed95b77258122aa67806f88ea8969ef030e2e660fd1818cf663dccbb87f1c3f0b70008ed07261ac1dcb68b87ba7b3f8b63ec27e1ad2ca3af753ef3c43bf67bf3880dfa1a11c8940d616b2bfb04daef9dd2039564306f749c5e7dad3b05761e42c3246367fe2b392e7ca267b7a1b33b58135bcd67a2d9a81e7c5afbcc25873399f709f37adf5ceeb8be519e64887245cbf249e6976409c60e31ef41e69e13ee01ed7763f5ee825229c590c170b08464f28d2c989e1a6c701c46912c3f97a7f973bf4eacc8151fcb59ac641f0e83c5e3101c88e8d2710b7aa8cb72f6503a3fccb999a36c609f6d6f8707f6dc0ca025209aed8ecfba36b9ee52e2afc25e35da71fb9d577f80064c768b0003a788577aba71dc524d7808b033d602d870b66cdb339086109fbf2987f0bbe556d5ef4bb753dc4e1893f3937aa8465293beb7e96d00caf416dcc84a80a6ce8ebd01785611c1628310b099f375045e73a341ae06ec5423d59a7f5f9f21c40b52356d65e815ab5a4f74d8d4b7c6350b8bcf12907da2b1f502ce73b0aa73b4efabe91cebe116822177d797806edefaaac9c540ff02440baf9ae4b42c45104f01794461ba3ea1e7f9514e491032f8ba535ad104148be572a41598570843fd6fe90c97e7187fb433303852138f2dff0eb24f756ae378678919eb180822981eef929c724ec2295abfb0eb588fc406faf740ee71d4b285c05cd89ea27feeb6c9d744beacafd2f601d23ad06afcd903f4e9ee3375806afaf21f01ef0a493dcf92ff9d8858105e86029a12cef0bc37f3b54fcebf5646f5f02952efb2d80dd1bb3bab3bc18a31eedd327757a17565d3e267a054a63e1883638d7cbef83a8308ac2e2b7c657c21fa4495ec9506bc0b6c67b7f12a392ee0e557ac06625a5851effac29801c21746dd0bbd2e25d13ab020ed4e133a1eafbd58d26d1a1a3f71f1a958f2ec5c15f5c055c9f1d1ddb33048e48bb9acad7f167f67305ce4bb1dc4a6373b7c1726f5b298a5c7c74d960fe30ff9e1fc0bdc3408640cafb34e2a3a2bcce2ec0ca7bd13edd9f365ce338b63c1bf6c3c6e1d2171ee58dce6075cad284f5e7e466914bcd1afe28546fab2d9f537309a5b36e62de5dadc378aef8591797d3311f8cf5e965242840430ee123b9ac7dcca493a4bcb108eb85a9e52cc33b62b515b95634c57b58b52f72b10b4306e7282349b999e9deb93d867b95f2e14bf20f56c1068e2b0684dc67ffe1dff590145b28bb8dff42e44e6228ec5783662a5a67b34f46863e6711f0e3cacbb88447aee4be56aa318eaa570df303a1c88223cbdf2faa1840ca1e72018136aa3cf9d2ae00be52e5d51600f57a3c7421e15b778229fe8165fc50ed2dc7c577ceba7342ff6996dfd7087a2f61843064889bc505473a3aa7d96dbb7c550f4552331e4b601c1bc3bc1e6a7717264dcec37617dde6017edf48c8b6f9675d3a8978ecdf0bdeb716f9166f0bc7f9de5b47e7ab99ed8624c3f8487bb1fe2b5cce35bfbce2fcde38d0c5100f7819e0bcd360c7bb9f80d4392fa74d938ccd83d6f40d1a55e03a79c45ff68468ca42ac99a4de8c777f952d2ee6138fe62ee4d4a8b76ce799b8a0e7fac09f9610a472635f8b8b1721d1fee535a83722eb87d8c866544b8916f8af56361de6eea4427233cc804fe55ff9b3b2c88bff72115deda64d75fbc72b1742997a291d55251e8b2efffa37ba0e762c7d7bde8a81359d9c6dc2141f86d3eb31c63739f0790178a0e3dc3c1d403834df18c81e68430957249ca3cf55ec376af9d8b049490e890d0fa5782a9d6b23d4c1428037b053eae32bd6732ba96de194f210eb8fc79be3928deace54ad8e473791e7281a89b0d8e27b232269b8c35c85f9ecb72362170839753fb29d9930f39e869e9b07ff85da8a4a57be5b09bcaaf355bcf030f26d2f66a4ec6864c26e901fb3bf6fab435c16b4985cabc2f84d37a51ee8a1378cc7fd480c41826c2f1bdff2cf37ba2bdf2c8cf909968b9fce9af8448aaa63014dcac7a739e1b3ebfe30b6d934120c4bd63d2269becbe9fcf201f1a3009bdaecd4b90cfb3ba7e4d4f190ba0c6235a8d0ea23e451250f0a66fa189a030641d8a49a18807881ebcfeb0176093a158b2deb8837003fe0b1d4bf06e8f9bd7c8efd8775137497027ba997d2f7b4b98ec5b7e0f4614f532b81a6f96048a81da770423e8a952901e32051b0a0cb4e3c0c743ae9112d973480bab294cb7b49bb7a9051bffa60b85311dda853ce405f228a4126f1cb3c84c3b5ca4ef7efcc4e3effa3ba5ec31df051a270a48c1e80d387da573bcf78ba2428cd0126f2dcaf4d9bfd6ad568c2b368ddae77b8f2aaa4e6252c43ac997f0878fc746910b72becfedcd108087f3beea5a5dac569ec678a3a7819c4da0b4fe057952a0fd5c1065411f152f97103d03f0764165870c8886a8186d02f82ee7cbbe8f0cfe45e51bc8b495af35cf54867fbc856b4849a967d1bea98e93cea10c785a05940e83f1b75176fb9914ca914d92c7a7273ac3224a466e1ad6f451afdf98670623e50f1a45efe0ef75208eed5351a80da812a7cdeb46ebed49a224fcdc0bf32c66ea635703673b6800244ad2a6312a538185cf6cfd504b029d442aeba0203b8dcefb5acfd3f05ab59fa3b8a6f00544993682df4ec6213a010817fda6ab2ae011b28169c4ef9ff14c598c5e7026b5c4db1139c55d38024e7de8326855f189a96e400d1e070b60629e011e3670eb08841ed3c2606a9e81f8a847b6d0f08051679effd982173a8127e903509f4cc797f46fb819373982f9673c4b0c1a4b460e6f4a0c1c21a6815c00f9f6e72670fb57a03f53251518e6d9c7e1991ae88d574f3f5d2ed40246930766075434c3e37db8e2cd93af4d43e4b2bf0a4cb9d977f51fc96383d5da825259509e2484a31efb70682ac092324e335180a702cfad9d9f81a6ca5ea8c9176f74f71c51673c6e9e64037b4b13e9236e740adcc0c302f3661635185e9ec1cfdb7cec12db7d1c923cd779bba58994c7ff4f3be3a1eb21c7fd150a774150f2754340b304781c4be6500dbafe53c79c63c1a473c213ad2aff8300391cd6cc530214fc9df616fd4e67fc0d1eea8c2a824aeb11628b42138d4324b354cf7b88b1df675375e8a2735ccd325f5671b5fa22440f37b9958e770d96d869da814fda78550477d32712f862a6668c8c4a2177ab4c50dfce53ce31a0be6172e77785e43097d7a6b7850219a2ec3c31999cf98572c8bf36bef79391d588d17322357e810b5da925c1c439d3ca167bf5960ad91ad25318fa61bda11cb38adaa9ff651916874e16e7f72fecd224341d4c171202a85220f91e1e75a0100838e6f869a789df159074d56fa3e18b5450963dbd5c5321c10c063997b3172d2cfc3aa3edada0b493eab7d02ea10420c87519a522a299f91eddcc3f2e0ca6ad0917e2533a11d8c71eafdafd1c83f65e8fc120ad53ba92a6395052600f3b3a31e8fe88278aedd5d6fa664b35d6f23f0aba7d58694c9b524ac7780091648df0a029f7e8127108f31fbf11d400841321ece7344cad44ebbb0537b06742f5bb698b4e64201feadc473f7eb6bcb37dcf71f4a29bc6f591bb39e64ecf19c05eff3bd31a233d93d089667b9cad49d71fb25822eead10d5e2ea4eb5ca8e4710621cd0541f1014eb3fa226fac163af19f468a4c78daee28ae9429a3e3f6e17dec9804ad55f7b734ca935e604eee5385f1572ba73f375e1c9c5fd46c712fa4333efbc5dcb0349605f9141322da4136566c7bc47ba4c186c92cebe4fd2f2c74c38873170b1ce6806c06f815b63008e42b34b7f63d31ba77bf5de8535c1ea8d13e5d9dd46f951e5e765c5a259547604cd4e72eaa856d415c601e330677aaee9a5871978dd50c2b79252e09dec44c01ab8b3a5ec9a3c867a05a310c4d09f8380b657c297c04cec6a3475ba1bb81e075cbd05390cb8a7f33a614efa66f6d98a69c81f4ecfd2ff47d74f1bb50d33ebc5b6229fa8f17288904c828415968398cf9bd5037cae2965c9b716eb5732c4c71acf061a47850542fa859ca1255129c24712437d7db2aa5585ff21c9f26f36cac60704df53cba9edb19bbd1ce992cb58cdae1be756b9049ffcd4f913ff348e5214cc201508198027d18f3f066a7a5c0470cd0dd72468d8fb4526c26c07e7c4c72119bf3358740394e5dba42dd27229ad93f99c6138fb9f6c1bf29fe5ad58545b526f528389cb689b59e813a4b218c41a607c3e64f18a07d5430ec9a3af83e50b5566c9d4382da9a5d5ec6cb5058a870b228c49d6c05c99935478dd3fc4f98bff4f5e8dc2dbb8f6401e0d1798204cc1e16e69bccc30734e91968b61ec2cd04df14fd59f9f018dda9d7c90409ba707580b53c647971da9919c80886ef39d18a642aa939c69269e9b009a06545bd702380c877211fbd5a11043a72aa5777d7c90a878f3d5b13cffb74cf15cf4b3852c558589efd753ce8f9ec410ef3f8da6501e57f617853b99aeebf33d1daaec0e4dfa48d06bec8221d86daf37e66a7ea881651d782fe7024fc93066aa27a1bbae9215f42548e878c3a349631069284d53b8771892cc58b1d3e37f82e1fdcc55d2f42f7745a5a3424fd7866be4ca37b4e5f446782dc5e30621494453fdbfa19861ef66e7d2919f5105b8df680decbcdc3650ed9789754f9556243fa53ad07eabc4fabb667c634457a012b248260572ed4a89a137e63bb83fa6e8ca22b76c8d451c844afceaf55ca917eeeead551ef32129935c18161c89fd83a7d62816962b7fb86db839c350fb5f00e6eb777ade8c0e678f204f5934875b088e59037e08699fee74462b02410314811ffeff244068b9c0c9181b3bbc7f705541183f109373551429e8ddf3db2b01e9c304a5aa43f9021ec3150507e6762407372b5834d4979fcfd253ac3fbb9d54c4ea1eb665cbf1942ad55cec0b2a183c447d910afecd7611e02f1144b6beb3bf6ae8837c67db01bb9a6146344375baab5bcfff67fb23c0a22f41f8b7453b9d076f0a44897ac01ba98026a687f181d4f7c5195db543b20a8f4e600e719125d67890e5904ba7dab61c0419460dd5def6ce2308be0c3049aa24f60e9401b42490b9c9aebe1d2171102cd9019f9053a4c994d6b184b499b1c3f8bba0ae7ea46ff34a4a1d4b3a90e3c5e079445cf7984123d717f72709849266bc5b39608eb915f0b7ce572fff8eefe486702c6595f091e014a26bad6b9f64dc1fb118c47be183438d29e6dd98b77f97006dca7c8371903441a074d3aeac0e9fd00446cf9c7729e25bc5277ac272da5c050c607adc90057cda447c3710036a8f76b0706ae6cbd28de6cbd331a1ea2e5b1c61fe77176c4bea5d5e46dbb08a12c7100984aa26a02ff7ec83c96f375e65927933846f70e72c4decc0af60eeb11c7bca3ba62adbd0d9fa989b1e7c6e2e7c0f6e47c578914de9d7ba6c107882396420990023809ba3791136a5a97492c677fe90194c86c1c7972ac1f30df2bbccd319721c4fe96231e2f5df4da62992a1469e0a59a94827f3e3f5497e79c2860b0f9f8aeb24bac96adca8c3f9ca4f5d0ef77fa135fc6156ba6145a7a08879d75c0c35011acb19408b5d4af7f38109028a8285f5a31d30da886b70d734f01ef43ee2ff5f7e25f43fe47cff35388bec4e7d381d075f249628d10e74eada1e2af8caec7a3a89528b7d1da329fdfa337b5b507c14503fd89b96a33b52d327d41242456d836f464adc7ae2874dc41052fc86048314d5d31e89b20d16440f13af11a40be5f5524b8730af2c847102c6ef65d6baa2a0a6af98823605e9164f162c196b3b948def8d590a3f4ff19942a2ef8cd06d4b2fbafa4667c4116e146cf6a5116fb6971a2de211f3dc0d64ae99cc37877d7bd87c99a8c2d7dae406dacae89b6b6d44abd5dc6a581ad94dda6c962f0eb56a50c12b93a4312280a8519acbcca7d67fa6b92c75bfda0e257b5b1b0f566ea5ab487c390e02aa5b6cf544f211b98835a2b44e8b41a6418be54a7bb5cae4702aafe7f4d36893cb1d8c810844073c6f8560e0e3e46830cfb34f3ed1c633420a0da9d8bf62ea56fee88c1f0db7cc5997af1ab02c8bc568f4447d19f6c87cca057cd9c1dc6de139b2de4e0b26d8ee38e4019884a453292ca2ab00dbef7219269e61947e57faf1b2c653c0a4995ec58efdff79314a1961170a7f4e0883dfd21257de039986a0ffee0470667b3a5ef7997ea016e3245b293fa46d07f4095a982665dc6fc549104db25182eaf84b417f393d163889e7a2b83fd3aea8b4eeaf75d9550989e9541a1d91e2f968c32584c8a6a790fede715a2bc734dcd5f9b9883075314a9cf7954935b2469bd5cca61d0e0d491a627e51ee555dfc1c9d5ffb143fc7d31ad6e95258d4eaee798fd94fb52434a6f635bf778fce8d4e94885939cc3dc18bcc845850951a64a2267da0747966cbbbd169b60db08da5704f63d95a05ab4d629a29ad36223ed2a9decce89acdfd7cd8f9abbcb12bec072df2b2cafa6c017a25328ed091abb25db2cb8c0f40da5c3751872c70e89274444e337173de974908fa494fe5459a5939b29122895b66f7b6349a13611cf5e74aba8f62fdb8fe6f5a8604b499f7fa3e47c9566a2e48187e474809e845baab6bd4e2f0bf6f794e086e9f03d0eb3a9e4250b209a491cb2db591f2b0351e7733a776ac12396a5c7827b82377fe4a0e3c54722f08ee441e168ee586a0f13401c33b57a612993a6b3fe93594c6964afaeb971825c700943ab60cdb23306f82bf2ec32d05b7c75a35d5e432fa1146f6db1b33ffbfcf3cd9f40598e5a80b633d84c654e462d791d8bb83cfc5615729d5ef1bc33800dd34b8cb7bbf3383055e782877c8806e8f29389e55a27da788e1a08029cfb724ba73cb0ef1a860ff861372b509ec8200f20a5dc5841c5644fb5febe3d2e9733cca528f2b9af0e0b814f97c711b035d7e3fbb1951d8210d330e6bffdf0e2faa19088a89c6a737435c2e8958fd1126e0f2ca325990514f0ca8ec784040bc6e2238b3a548ce3ecd065e08451b049bb55cd000023861ad400d7ff659bbcf6721bbe7128d73b95411a6684a6b12a5277c08df26fcf79eb64ce4b1f6664a445f758cea910ae48bda79165bcd408dedb32b6ab6de7bff43a09f51d4ad29b3acdcc0a6266e8afcdf0e8c8bc3f8ffc85106d278dc95c8f652347ada2034f30886ba78ab80389447f5c99118efd3d58bc43469bf44ae3d3fdd0b33824e69fea0d0fd62b709ee5868fdc29a5963dd4869305eb70e4bad13bd974cc3243d83ee7407cf6e8ea88ea28ec72c4fc827aeb15dac717869b290a3ac94d6e8538ae1b23f9ebffdad3c4b1855d74f450a06eebb1d2bbb154d9cdbc384f5c8116c85daff1af4bf6ed9bc7ed98323ec98a083d56d60d2b500ac65ba2773d01747c74fadfd9ab55dd567fdf2996d9f696374a7835776a1b6b1dc3b4a00467218ae97bb1cd4631ce37f356f494545101cfd84feaa4c20f5a024687d99f074229439182a3cb87b1c3003dd646b60472d0942821209cb90f744436cb86fd8d76506b6a003b232fdf4b5790171cad9d70cd11a017b217904cbc2122ece2972ff87df0f25df761ec0775b5c9f86553267f5d9d666c2bdfcbddf942a687ec1489e3ee1f5846abad42384745e66dd888717b320326b2f90c1633a6cb3d1564a575e0296f1b12f4184a0696fa98946f7497f28440a6b68e959dab767406c2c5583b6ab79bcec82e89f4b36eb624a081096d286ae3910f2a94da414d1317fdbb6cc9f073032ddabe3c15133cc383d76b839531ed107ffdc492a7ea5b8bb4397b90beb45c066968303833674c150cae4b5d3c6edb96bfac63465d18433c4620f91a2d5a66f19a67176ea8ced53d25d1c22d2beb2ff9a97207f47bd16c18cd3ed7693d1e46d16b2786bc59b0818f03a8f35d3823b86bd1eea6ec4e81570be58287eb2789d59c5dbf7e16bbd54414efcbfc90e0ed9f0f55af31ff40c7392c6136e02448608852bab13ec71998aa03a40c6f9ce279cbb7db97d5a7", 0x2000, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xf, {0x7, 0x7, 0x0, {0x0, 0x9, 0x3, 0x8, 0x0, 0x5, 0x3, 0x8, 0x9, 0xc000, 0xa91, r4, r5, 0x972}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000980)={{}, {}, [], {}, [{0x8, 0x6}]}, 0x2c, 0x0)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145)
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0xe4}}, 0x0)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x65, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x1, 0x5, 0x0, 0x65, 0x174, 0xd, 0x73, 0x6, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x20000000, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@local, 0x1, 0x3c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0)

1.57569889s ago: executing program 1 (id=9530):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = io_uring_setup(0x6ddd, &(0x7f00000002c0)={0x0, 0x8635, 0x40, 0x1, 0x2})
io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0xd, &(0x7f0000000140)={0x7fffffff, 0x0, 0x0, 0x0}, 0x20)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r3, 0x3ba0, &(0x7f00000003c0)={0x48})
read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0xfffffd75)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)={0x2b, 0x3, 0x0, {0x1, 0xa, 0x0, '/dev/dsp1\x00'}}, 0x2b)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)

1.524656041s ago: executing program 3 (id=9531):
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010800000000084)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1, 0x0, 0x0, 0xdc05}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040)

1.19396579s ago: executing program 3 (id=9532):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b"], &(0x7f0000000180)='GPL\x00'}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)

987.905183ms ago: executing program 3 (id=9533):
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0x2024, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0x5}, 0x1c)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0a00010000000000005a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x4000000)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x5, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000001fe00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

920.370529ms ago: executing program 3 (id=9534):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
io_submit(0x0, 0x0, &(0x7f0000002900))
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x4, 0x60d7, 0x36aa0000000000})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfffffffffffffe8b)
r3 = openat$procfs(0xffffff9c, &(0x7f00000001c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000380)={0x3, 0x4, 0x3})
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c2acb6010203010902120001000000000904000000efa7bd00"], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000400)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r5, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000001800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000000000000038, &(0x7f0000000440)=ANY=[@ANYBLOB="81901c0000000000950000050000100061c87c618270963813ef83d9e862cd53031702f895961bf7f771538ff5faefaf0999639dea3471de6e8e0a13f20bcab6f4f41184a4ca9ac42bc7c6197acee735ec9213ac2f8eeb4c3804de12644ddfc21f59755948c50c68da7353dfbdd483d6d1892cee5a8c07bc917552c5a1132a68fd3d395ce7d16ffa8d69e34deda191899b77ed2f9d73f7ea4975cad5eeccee135979dc5b2e910b2968ecf4e746bcf348e2987945dea9c5d82d"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109021b00010200100309041f0201e937f300090582020002000000"], 0x0)

570.767732ms ago: executing program 5 (id=9535):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000003c0))
r1 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPKT(r1, 0x40045431, &(0x7f00000001c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x6, 0x3, 0x100}, 0x50)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@allocspi={0xf8, 0x12, 0x1, 0xfffffffc, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private2, 0x0, 0x33}, @in=@empty, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x8880)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x9, 0x0, r2, 0x100}, 0x50)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x280, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000180)={0x20000000, 0x5, 0x2})
r6 = fcntl$dupfd(r4, 0x0, r3)
ioctl$LOOP_SET_FD(r6, 0x4c00, r3)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r7}, &(0x7f0000000880), &(0x7f00000008c0)=r2}, 0x20)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003ac9bcc20d118af1ebb5a0102030109022400010700800b0904"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})

415.952884ms ago: executing program 1 (id=9536):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2000000000000000}, {0x7d}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, {{@in6=@remote, 0x0, 0x3c}, 0x2, @in6=@dev}, {{@in6=@mcast2, 0x0, 0x6c}, 0x0, @in=@multicast1, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x6c}, 0x20, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0)

265.820434ms ago: executing program 6 (id=9537):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000f40)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000d40), 0x280502, 0x0)
r2 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x8000}}, {{0xa, 0x0, 0x2, @remote}}}, 0x108)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="f000000010000100feffffff00010000fe880000000000000000000000000001fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000eed92f9ee6f2e9130000000000000000ffffffffffffffff00000000000000001f00000000000000fefeffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01"], 0x7c}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002400010325bd7000fcffffff050000000800030004"], 0x1c}, 0x1, 0x0, 0x0, 0x448d3}, 0x0)
ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(0xffffffffffffffff, 0x80184151, &(0x7f0000000e80)={0x0, &(0x7f0000000d80)="dfa6ad4c3b9be12acbf33adb9f1b20cb256a1bdbfbbd9b412f6e4a69c772333106216d4029cbb5b582afe18345632fe1e83de8b6af51688510f82f271d723c34b46bb08663f6aa514a9050b9bc8400a0b8ade9b74cd9add6052157cf01e559e32b17076ef565623745ba24ab40da6f72dd43ec284dc8027168ebfc29a124dd05147dd48fdf03b6b6816a44c65309e0e8341de7e3339d582ab30b6cfc7f5cdda37030b44ff5c8d7466a87c9a2bd4e426cc34e3dc45b0ff89c00e5d5ec020b6ee3babd3e5296484ad68b42fe2f573109afe79867", 0xd3})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000003bfa30000000000000703000000feffff620af0fff8ffffff71a4f0ff0000000015040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffdb03000040000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x40}, 0x10}, 0x94)
io_setup(0x8, &(0x7f0000000000))
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x10000})
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@generic={0x80})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0xa0}, 0x0)

187.427573ms ago: executing program 1 (id=9538):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac0000000000000000000000000000001300", "90be8b1c55f96400", [0x800]}})

0s ago: executing program 1 (id=9539):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
removexattr(0x0, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x80086601, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r6=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x4, @loopback, 0x5}, r6}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10)
fsopen(&(0x7f0000000000)='ufs\x00', 0x1)
r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_int(r9, &(0x7f0000000040)=0x900, 0x12)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)='f', 0x1}, {&(0x7f0000000700)}], 0x2}}], 0x2, 0x40)

kernel console output (not intermixed with test programs):

] usb 2-1: config 8 interface 118 altsetting 8 endpoint 0xB has invalid maxpacket 1023, setting to 64
[ 1862.151377][ T6654] em28xx 4-1:0.89: V4L2 device video103 deregistered
[ 1862.200188][ T6654] em28xx 4-1:0.89: Registering snapshot button...
[ 1862.214027][T15176] usb 2-1: config 8 interface 118 has no altsetting 0
[ 1862.224647][ T6654] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input151
[ 1862.246385][T15176] usb 2-1: New USB device found, idVendor=041e, idProduct=403a, bcdDevice=47.c1
[ 1862.263620][T15176] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1862.280760][T15176] usb 2-1: Product: syz
[ 1862.285508][ T6654] em28xx 4-1:0.89: Remote control support is not available for this card.
[ 1862.305844][T24492] em28xx 4-1:0.89: Closing input extension
[ 1862.311804][T24492] em28xx 4-1:0.89: Deregistering snapshot button
[ 1862.321680][T15176] usb 2-1: Manufacturer: І
[ 1862.327151][T15176] usb 2-1: SerialNumber: syz
[ 1862.389491][T24492] em28xx 4-1:0.89: Freeing device
[ 1862.537165][ T4186] netlink: 'syz.3.9160': attribute type 1 has an invalid length.
[ 1862.537192][ T4186] netlink: 'syz.3.9160': attribute type 2 has an invalid length.
[ 1862.631252][ T4177] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1862.705208][ T5936] usb 6-1: USB disconnect, device number 103
[ 1862.791008][ T4165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9154'.
[ 1863.477660][T24488] usb 6-1: new full-speed USB device number 104 using dummy_hcd
[ 1863.672965][T24488] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1863.693350][T24488] usb 6-1: not running at top speed; connect to a high speed hub
[ 1863.710483][T24488] usb 6-1: config 3 has an invalid interface number: 106 but max is 0
[ 1863.729411][T24488] usb 6-1: config 3 has no interface number 0
[ 1863.744150][T24488] usb 6-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[ 1863.774370][T24488] usb 6-1: config 3 interface 106 has no altsetting 0
[ 1863.799288][T24488] usb 6-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[ 1863.819393][T24488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1863.834804][T24488] usb 6-1: Product: syz
[ 1863.840626][T24488] usb 6-1: Manufacturer: syz
[ 1863.850623][   T30] audit: type=1326 audit(1759741891.109:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4191 comm="syz.3.9162" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb92598eec9 code=0x0
[ 1863.873044][T24488] usb 6-1: SerialNumber: syz
[ 1863.881901][ T4198] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[ 1864.541977][T15176] gspca_main: gspca_zc3xx-2.14.0 probing 041e:403a
[ 1864.589174][T15176] gspca_zc3xx: reg_w_i err -71
[ 1864.816884][ T4226] loop5: detected capacity change from 0 to 7
[ 1864.824859][ T4226]  loop5:
[ 1864.832737][ T4226] loop5: partition table partially beyond EOD, truncated
[ 1865.193956][T15176] gspca_zc3xx: Unknown sensor - set to TAS5130C
[ 1865.200382][T15176] gspca_zc3xx 2-1:8.118: probe with driver gspca_zc3xx failed with error -71
[ 1865.219618][T15176] usb 2-1: USB disconnect, device number 8
[ 1865.523976][T15176] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1865.654059][T15176] usb 2-1: device descriptor read/64, error -71
[ 1865.842982][T24488] kobil_sct 6-1:3.106: KOBIL USB smart card terminal converter detected
[ 1865.871131][T24488] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[ 1865.904070][T15176] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1865.925530][T24488] usb 6-1: USB disconnect, device number 104
[ 1865.967965][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9171'.
[ 1865.979124][T24488] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[ 1866.001609][T24488] kobil_sct 6-1:3.106: device disconnected
[ 1866.084033][T15176] usb 2-1: device descriptor read/64, error -71
[ 1866.194769][T15176] usb usb2-port1: attempt power cycle
[ 1866.304008][T24488] usb 6-1: new high-speed USB device number 105 using dummy_hcd
[ 1866.453965][T24488] usb 6-1: Using ep0 maxpacket: 16
[ 1866.461319][T24488] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1866.472204][T24488] usb 6-1: config 3 has an invalid interface number: 216 but max is 0
[ 1866.480578][T24488] usb 6-1: config 3 has no interface number 0
[ 1866.487711][T24488] usb 6-1: config 3 interface 216 has no altsetting 0
[ 1866.497800][T24488] usb 6-1: New USB device found, idVendor=05ac, idProduct=0249, bcdDevice=de.a6
[ 1866.507001][T24488] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1866.515440][T24488] usb 6-1: Product: syz
[ 1866.519623][T24488] usb 6-1: Manufacturer: syz
[ 1866.524317][T24488] usb 6-1: SerialNumber: syz
[ 1866.534359][T15176] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1866.554796][T15176] usb 2-1: device descriptor read/8, error -71
[ 1866.733247][ T4235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1866.742272][ T4235] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1866.752193][ T4236] netlink: 19 bytes leftover after parsing attributes in process `syz.5.9171'.
[ 1866.771984][T24488] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.216/input/input152
[ 1866.788765][ T5198] bcm5974 6-1:3.216: could not read from device
[ 1866.795347][T15176] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1866.805095][ T5198] bcm5974 6-1:3.216: could not read from device
[ 1866.811900][T24488] usb 6-1: USB disconnect, device number 105
[ 1866.814201][ T5198] bcm5974 6-1:3.216: could not read from device
[ 1866.827182][T15176] usb 2-1: device descriptor read/8, error -71
[ 1866.934472][T15176] usb usb2-port1: unable to enumerate USB device
[ 1867.324708][T15176] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1867.499471][T15176] usb 4-1: config 0 has no interfaces?
[ 1867.511822][T15176] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1867.523460][T15176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1867.531720][T15176] usb 4-1: Product: syz
[ 1867.536927][T15176] usb 4-1: Manufacturer: syz
[ 1867.542374][T15176] usb 4-1: SerialNumber: syz
[ 1867.549911][T15176] usb 4-1: config 0 descriptor??
[ 1867.776401][ T4246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9175'.
[ 1867.868319][ T4259] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9178'.
[ 1867.907649][T24488] usb 4-1: USB disconnect, device number 123
[ 1868.441986][ T4267] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1869.615114][ T4292] loop5: detected capacity change from 0 to 7
[ 1869.622659][ T4292]  loop5:
[ 1869.628238][ T4292] loop5: partition table partially beyond EOD, truncated
[ 1870.070205][T24492] usb 6-1: new high-speed USB device number 106 using dummy_hcd
[ 1870.150869][ T4316] FAULT_INJECTION: forcing a failure.
[ 1870.150869][ T4316] name failslab, interval 1, probability 0, space 0, times 0
[ 1870.164424][ T4316] CPU: 1 UID: 0 PID: 4316 Comm: syz.6.9195 Not tainted syzkaller #0 PREEMPT(full) 
[ 1870.164452][ T4316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1870.164466][ T4316] Call Trace:
[ 1870.164475][ T4316]  <TASK>
[ 1870.164484][ T4316]  dump_stack_lvl+0x189/0x250
[ 1870.164522][ T4316]  ? __pfx____ratelimit+0x10/0x10
[ 1870.164554][ T4316]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1870.164579][ T4316]  ? __pfx__printk+0x10/0x10
[ 1870.164610][ T4316]  ? __lock_acquire+0xab9/0xd20
[ 1870.164636][ T4316]  should_fail_ex+0x414/0x560
[ 1870.164665][ T4316]  should_failslab+0xa8/0x100
[ 1870.164697][ T4316]  kmem_cache_alloc_noprof+0x74/0x6e0
[ 1870.164724][ T4316]  ? sctp_get_port_local+0x6d3/0x1680
[ 1870.164757][ T4316]  sctp_get_port_local+0x6d3/0x1680
[ 1870.164799][ T4316]  ? __pfx_sctp_get_port_local+0x10/0x10
[ 1870.164841][ T4316]  ? sctp_bind_addr_match+0x28b/0x2b0
[ 1870.164870][ T4316]  sctp_do_bind+0x4ea/0x940
[ 1870.164911][ T4316]  sctp_connect_new_asoc+0x25c/0x690
[ 1870.164942][ T4316]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1870.164967][ T4316]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1870.164995][ T4316]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1870.165015][ T4316]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1870.165039][ T4316]  sctp_sendmsg+0x155c/0x2810
[ 1870.165079][ T4316]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1870.165110][ T4316]  ? aa_sk_perm+0x81e/0x950
[ 1870.165133][ T4316]  ? __lock_acquire+0xab9/0xd20
[ 1870.165156][ T4316]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1870.165182][ T4316]  ? sock_rps_record_flow+0x19/0x410
[ 1870.165205][ T4316]  ? inet_sendmsg+0x2f4/0x370
[ 1870.165228][ T4316]  __sock_sendmsg+0x19c/0x270
[ 1870.165262][ T4316]  ____sys_sendmsg+0x52d/0x830
[ 1870.165292][ T4316]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1870.165325][ T4316]  ? import_iovec+0x74/0xa0
[ 1870.165349][ T4316]  ___sys_sendmsg+0x21f/0x2a0
[ 1870.165376][ T4316]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1870.165439][ T4316]  ? __fget_files+0x2a/0x420
[ 1870.165467][ T4316]  ? __fget_files+0x3a0/0x420
[ 1870.165519][ T4316]  __sys_sendmmsg+0x227/0x430
[ 1870.165549][ T4316]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1870.165572][ T4316]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1870.165620][ T4316]  ? ksys_write+0x22a/0x250
[ 1870.165648][ T4316]  ? __pfx_ksys_write+0x10/0x10
[ 1870.165670][ T4316]  ? rcu_is_watching+0x15/0xb0
[ 1870.165700][ T4316]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1870.165727][ T4316]  do_syscall_64+0xfa/0x3b0
[ 1870.165746][ T4316]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1870.165765][ T4316]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1870.165786][ T4316]  ? clear_bhb_loop+0x60/0xb0
[ 1870.165810][ T4316]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1870.165830][ T4316] RIP: 0033:0x7fd51718eec9
[ 1870.165848][ T4316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1870.165866][ T4316] RSP: 002b:00007fd518114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1870.165888][ T4316] RAX: ffffffffffffffda RBX: 00007fd5173e5fa0 RCX: 00007fd51718eec9
[ 1870.165903][ T4316] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1870.165917][ T4316] RBP: 00007fd518114090 R08: 0000000000000000 R09: 0000000000000000
[ 1870.165930][ T4316] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001
[ 1870.165943][ T4316] R13: 00007fd5173e6038 R14: 00007fd5173e5fa0 R15: 00007fd51750fa28
[ 1870.165973][ T4316]  </TASK>
[ 1870.501486][ T6654] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[ 1870.579369][T24492] usb 6-1: config 0 has no interfaces?
[ 1870.595019][T24492] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1870.615318][T24492] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1870.633311][T24492] usb 6-1: Product: syz
[ 1870.645764][   T30] audit: type=1326 audit(1759741897.909:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1870.674581][T24492] usb 6-1: Manufacturer: syz
[ 1870.684836][T24492] usb 6-1: SerialNumber: syz
[ 1870.697880][ T6654] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1870.707983][ T6654] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4
[ 1870.791449][T24492] usb 6-1: config 0 descriptor??
[ 1870.835778][ T6654] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1870.861683][   T30] audit: type=1326 audit(1759741897.909:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1870.983717][ T6654] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1871.001844][ T6654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1871.010090][   T30] audit: type=1326 audit(1759741897.939:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.032971][ T6654] usb 2-1: Product: syz
[ 1871.037222][ T6654] usb 2-1: Manufacturer: syz
[ 1871.042704][ T6654] usb 2-1: SerialNumber: syz
[ 1871.049698][   T30] audit: type=1326 audit(1759741897.939:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.088841][ T4301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9191'.
[ 1871.107750][   T30] audit: type=1326 audit(1759741897.939:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.134270][   T30] audit: type=1326 audit(1759741897.969:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.161606][T24492] usb 6-1: USB disconnect, device number 106
[ 1871.174822][   T30] audit: type=1326 audit(1759741897.969:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.205837][   T30] audit: type=1326 audit(1759741897.969:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.235100][   T30] audit: type=1326 audit(1759741897.979:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.261300][   T30] audit: type=1326 audit(1759741897.979:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4318 comm="syz.6.9196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51718eec9 code=0x7ffc0000
[ 1871.302563][ T6654] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1871.310645][ T6654] usb 2-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[ 1871.320480][ T6654] usb 2-1: found format II with max.bitrate = 128, frame size=0
[ 1871.338364][ T6654] usb 2-1: 2:1: All rates were zero
[ 1871.387409][ T6654] usb 2-1: USB disconnect, device number 13
[ 1871.435822][ T2613] udevd[2613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1871.715659][ T4329] loop6: detected capacity change from 0 to 7
[ 1871.722634][ T4329] Dev loop6: unable to read RDB block 7
[ 1871.729124][ T4329]  loop6: unable to read partition table
[ 1871.735133][ T4329] loop6: partition table beyond EOD, truncated
[ 1871.741414][ T4329] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1872.019549][T24492] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1872.184025][T24492] usb 4-1: device descriptor read/64, error -71
[ 1872.264074][ T7617] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1872.424007][T24492] usb 4-1: new high-speed USB device number 125 using dummy_hcd
[ 1872.424024][ T7617] usb 2-1: Using ep0 maxpacket: 8
[ 1872.428882][ T7617] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1872.450124][ T7617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1872.461146][ T7617] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1872.471272][ T7617] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1872.484476][ T7617] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1872.493528][ T7617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1872.555986][T24492] usb 4-1: device descriptor read/64, error -71
[ 1872.664454][T24492] usb usb4-port1: attempt power cycle
[ 1872.706530][ T7617] usb 2-1: GET_CAPABILITIES returned 0
[ 1872.712179][ T7617] usbtmc 2-1:16.0: can't read capabilities
[ 1872.922500][    C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[ 1872.998336][ T6654] usb 2-1: USB disconnect, device number 14
[ 1873.007055][T24492] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1873.044983][T24492] usb 4-1: device descriptor read/8, error -71
[ 1873.115464][ T4353] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1873.283978][T24492] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1873.314876][T24492] usb 4-1: device descriptor read/8, error -71
[ 1873.374976][ T7617] usb 6-1: new high-speed USB device number 107 using dummy_hcd
[ 1873.434411][T24492] usb usb4-port1: unable to enumerate USB device
[ 1873.526066][ T7617] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1873.547754][ T7617] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1873.558010][ T7617] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1873.568497][ T7617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.614259][T24492] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1874.774043][T24492] usb 2-1: Using ep0 maxpacket: 32
[ 1874.791634][T24492] usb 2-1: config 0 has no interfaces?
[ 1874.805066][T24492] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[ 1874.822437][T24492] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1874.836519][T24492] usb 2-1: config 0 descriptor??
[ 1874.951340][ T4371] loop6: detected capacity change from 0 to 7
[ 1874.965172][ T4371] Dev loop6: unable to read RDB block 7
[ 1874.971838][ T4371]  loop6: unable to read partition table
[ 1874.979815][ T4371] loop6: partition table beyond EOD, truncated
[ 1874.987685][ T4371] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1875.060280][ T4367] 8021q: VLANs not supported on vcan0
[ 1875.166209][ T4378] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1875.204064][T24488] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1875.354005][T24488] usb 4-1: Using ep0 maxpacket: 16
[ 1875.362105][T24488] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[ 1875.370484][T24488] usb 4-1: config 1 has no interface number 0
[ 1875.376742][T24488] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1875.387319][T24488] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1875.397551][T24488] usb 4-1: config 1 interface 105 has no altsetting 0
[ 1875.406998][T24488] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[ 1875.416159][T24488] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1875.424336][T24488] usb 4-1: Product: syz
[ 1875.428517][T24488] usb 4-1: Manufacturer: syz
[ 1875.433107][T24488] usb 4-1: SerialNumber: syz
[ 1875.440939][ T4373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1875.448423][ T4373] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1875.675994][T24488] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71
[ 1875.706797][T24488] usb 4-1: USB disconnect, device number 2
[ 1875.742706][ T4384] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9219'.
[ 1875.982463][T24492] usb 6-1: USB disconnect, device number 107
[ 1876.144232][T24488] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1876.293973][T24488] usb 4-1: Using ep0 maxpacket: 8
[ 1876.303166][T24488] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[ 1876.311959][T24488] usb 4-1: config 0 has no interface number 0
[ 1876.321097][T24488] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1876.332496][T24488] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1876.346074][T24488] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1876.365213][T24488] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1876.381792][T24488] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1876.391744][T24488] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1876.406574][T24488] usb 4-1: config 0 descriptor??
[ 1876.417722][T24488] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1876.725416][ T6654] usb 4-1: USB disconnect, device number 3
[ 1876.759275][ T6654] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[ 1877.105761][ T6654] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 1877.351786][ T7617] usb 2-1: USB disconnect, device number 15
[ 1877.430424][ T4409] loop6: detected capacity change from 0 to 7
[ 1877.437744][ T4409] Dev loop6: unable to read RDB block 7
[ 1877.443598][ T4409]  loop6: unable to read partition table
[ 1877.450183][ T4409] loop6: partition table beyond EOD, truncated
[ 1877.458954][ T4409] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1877.834083][T24488] usb 6-1: new high-speed USB device number 108 using dummy_hcd
[ 1877.854051][ T7617] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1877.884049][ T6654] usb 4-1: device descriptor read/64, error -71
[ 1877.997071][T24488] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1878.007424][T24488] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1878.019100][T24488] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1878.028524][T24488] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1878.036998][T24488] usb 6-1: SerialNumber: syz
[ 1878.042071][ T7617] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1878.053543][ T7617] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1878.067875][ T7617] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[ 1878.078475][ T7617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1878.094416][ T7617] usb 2-1: config 0 descriptor??
[ 1878.124029][ T6654] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1878.310726][ T6654] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1878.320770][ T6654] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[ 1878.337392][ T4419] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1878.356275][ T4411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1878.370737][ T6654] usb 4-1: string descriptor 0 read error: -22
[ 1878.382733][ T4411] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1878.394075][ T6654] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db
[ 1878.419558][ T6654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1878.437040][ T4411] netlink: 92 bytes leftover after parsing attributes in process `syz.1.9229'.
[ 1878.588013][ T6654] usb 4-1: reset high-speed USB device number 5 using dummy_hcd
[ 1878.664109][ T4413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1878.674563][ T4413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1878.687782][ T4413] tipc: Started in network mode
[ 1878.692784][ T4413] tipc: Node identity , cluster identity 4711
[ 1878.702959][ T4413] tipc: Failed to set node id, please configure manually
[ 1878.710514][ T4413] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1879.111963][T24488] usb 6-1: 0:2 : does not exist
[ 1879.142084][ T7617] usb 2-1: USB disconnect, device number 16
[ 1879.277836][T24488] usb 6-1: USB disconnect, device number 108
[ 1879.311980][ T2613] udevd[2613]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1879.343805][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9238'.
[ 1879.436362][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9238'.
[ 1879.551046][ T6654] usb 4-1: USB disconnect, device number 5
[ 1879.634272][T24488] usb 6-1: new high-speed USB device number 109 using dummy_hcd
[ 1879.744165][ T7617] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1879.773969][T24488] usb 6-1: device descriptor read/64, error -71
[ 1879.903956][ T7617] usb 2-1: Using ep0 maxpacket: 16
[ 1879.917597][ T7617] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[ 1879.927342][ T7617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1879.935705][ T7617] usb 2-1: Product: syz
[ 1879.940432][ T7617] usb 2-1: Manufacturer: syz
[ 1879.945177][ T7617] usb 2-1: SerialNumber: syz
[ 1879.956059][ T7617] usb 2-1: config 0 descriptor??
[ 1880.014466][T24488] usb 6-1: new high-speed USB device number 110 using dummy_hcd
[ 1880.144126][T24488] usb 6-1: device descriptor read/64, error -71
[ 1880.247365][ T4446] FAULT_INJECTION: forcing a failure.
[ 1880.247365][ T4446] name failslab, interval 1, probability 0, space 0, times 0
[ 1880.263787][T24488] usb usb6-port1: attempt power cycle
[ 1880.272550][ T4446] CPU: 1 UID: 0 PID: 4446 Comm: syz.6.9240 Not tainted syzkaller #0 PREEMPT(full) 
[ 1880.272578][ T4446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1880.272591][ T4446] Call Trace:
[ 1880.272599][ T4446]  <TASK>
[ 1880.272608][ T4446]  dump_stack_lvl+0x189/0x250
[ 1880.272635][ T4446]  ? __pfx____ratelimit+0x10/0x10
[ 1880.272665][ T4446]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1880.272690][ T4446]  ? __pfx__printk+0x10/0x10
[ 1880.272731][ T4446]  ? __pfx___might_resched+0x10/0x10
[ 1880.272752][ T4446]  ? fs_reclaim_acquire+0x7d/0x100
[ 1880.272787][ T4446]  should_fail_ex+0x414/0x560
[ 1880.272818][ T4446]  should_failslab+0xa8/0x100
[ 1880.272849][ T4446]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1880.272875][ T4446]  ? __genradix_ptr_alloc+0x463/0x4a0
[ 1880.272896][ T4446]  ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1880.272927][ T4446]  sctp_auth_asoc_copy_shkeys+0x14e/0x5a0
[ 1880.272960][ T4446]  sctp_association_new+0x15d3/0x25f0
[ 1880.273002][ T4446]  sctp_connect_new_asoc+0x2c5/0x690
[ 1880.273034][ T4446]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1880.273059][ T4446]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1880.273089][ T4446]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1880.273113][ T4446]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1880.273137][ T4446]  sctp_sendmsg+0x155c/0x2810
[ 1880.273177][ T4446]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1880.273207][ T4446]  ? aa_sk_perm+0x81e/0x950
[ 1880.273230][ T4446]  ? __lock_acquire+0xab9/0xd20
[ 1880.273253][ T4446]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1880.273280][ T4446]  ? sock_rps_record_flow+0x19/0x410
[ 1880.273302][ T4446]  ? inet_sendmsg+0x2f4/0x370
[ 1880.273326][ T4446]  __sock_sendmsg+0x19c/0x270
[ 1880.273358][ T4446]  ____sys_sendmsg+0x52d/0x830
[ 1880.273389][ T4446]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1880.273423][ T4446]  ? import_iovec+0x74/0xa0
[ 1880.273448][ T4446]  ___sys_sendmsg+0x21f/0x2a0
[ 1880.273474][ T4446]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1880.273537][ T4446]  ? __fget_files+0x2a/0x420
[ 1880.273566][ T4446]  ? __fget_files+0x3a0/0x420
[ 1880.273606][ T4446]  __sys_sendmmsg+0x227/0x430
[ 1880.273637][ T4446]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1880.273657][ T4446]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1880.273704][ T4446]  ? ksys_write+0x22a/0x250
[ 1880.273740][ T4446]  ? __pfx_ksys_write+0x10/0x10
[ 1880.273763][ T4446]  ? rcu_is_watching+0x15/0xb0
[ 1880.273794][ T4446]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1880.273821][ T4446]  do_syscall_64+0xfa/0x3b0
[ 1880.273841][ T4446]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1880.273858][ T4446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1880.273877][ T4446]  ? clear_bhb_loop+0x60/0xb0
[ 1880.273900][ T4446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1880.273919][ T4446] RIP: 0033:0x7fd51718eec9
[ 1880.273938][ T4446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1880.273955][ T4446] RSP: 002b:00007fd518114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1880.273977][ T4446] RAX: ffffffffffffffda RBX: 00007fd5173e5fa0 RCX: 00007fd51718eec9
[ 1880.273992][ T4446] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1880.274005][ T4446] RBP: 00007fd518114090 R08: 0000000000000000 R09: 0000000000000000
[ 1880.274018][ T4446] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001
[ 1880.274031][ T4446] R13: 00007fd5173e6038 R14: 00007fd5173e5fa0 R15: 00007fd51750fa28
[ 1880.274062][ T4446]  </TASK>
[ 1880.964005][T24488] usb 6-1: new high-speed USB device number 111 using dummy_hcd
[ 1880.984552][T24488] usb 6-1: device descriptor read/8, error -71
[ 1881.184049][ T7617] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1881.234268][T24488] usb 6-1: new high-speed USB device number 112 using dummy_hcd
[ 1881.271444][T24488] usb 6-1: device descriptor read/8, error -71
[ 1881.334089][ T7617] usb 4-1: Using ep0 maxpacket: 16
[ 1881.386590][ T7617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1881.411743][T24488] usb usb6-port1: unable to enumerate USB device
[ 1881.441802][ T7617] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1881.469714][ T7617] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[ 1881.488832][ T7617] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1881.516212][ T7617] usb 4-1: config 0 descriptor??
[ 1881.993629][ T7617] corsair 0003:1B1C:1B02.003C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0
[ 1882.306658][T15176] usb 2-1: USB disconnect, device number 17
[ 1882.394707][ T4454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1882.419076][ T4454] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1882.535609][T15176] usb 4-1: USB disconnect, device number 6
[ 1882.873278][ T4480] FAULT_INJECTION: forcing a failure.
[ 1882.873278][ T4480] name failslab, interval 1, probability 0, space 0, times 0
[ 1882.888483][ T4480] CPU: 0 UID: 0 PID: 4480 Comm: syz.6.9252 Not tainted syzkaller #0 PREEMPT(full) 
[ 1882.888516][ T4480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1882.888528][ T4480] Call Trace:
[ 1882.888536][ T4480]  <TASK>
[ 1882.888544][ T4480]  dump_stack_lvl+0x189/0x250
[ 1882.888572][ T4480]  ? __pfx____ratelimit+0x10/0x10
[ 1882.888600][ T4480]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1882.888623][ T4480]  ? __pfx__printk+0x10/0x10
[ 1882.888645][ T4480]  ? crng_make_state+0x34c/0x700
[ 1882.888670][ T4480]  ? crng_make_state+0x3fc/0x700
[ 1882.888693][ T4480]  ? crng_make_state+0x13a/0x700
[ 1882.888716][ T4480]  should_fail_ex+0x414/0x560
[ 1882.888745][ T4480]  should_failslab+0xa8/0x100
[ 1882.888774][ T4480]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1882.888799][ T4480]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1882.888819][ T4480]  ? sctp_add_bind_addr+0x8c/0x370
[ 1882.888847][ T4480]  sctp_add_bind_addr+0x8c/0x370
[ 1882.888872][ T4480]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1882.888898][ T4480]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1882.888920][ T4480]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1882.888943][ T4480]  ? sctp_v6_is_any+0x64/0x80
[ 1882.888967][ T4480]  ? sctp_copy_one_addr+0x93/0x360
[ 1882.888989][ T4480]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1882.889011][ T4480]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1882.889041][ T4480]  sctp_connect_new_asoc+0x2e0/0x690
[ 1882.889069][ T4480]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1882.889090][ T4480]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1882.889118][ T4480]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1882.889137][ T4480]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1882.889157][ T4480]  sctp_sendmsg+0x155c/0x2810
[ 1882.889195][ T4480]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1882.889223][ T4480]  ? aa_sk_perm+0x81e/0x950
[ 1882.889244][ T4480]  ? __lock_acquire+0xab9/0xd20
[ 1882.889265][ T4480]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1882.889291][ T4480]  ? sock_rps_record_flow+0x19/0x410
[ 1882.889313][ T4480]  ? inet_sendmsg+0x2f4/0x370
[ 1882.889334][ T4480]  __sock_sendmsg+0x19c/0x270
[ 1882.889366][ T4480]  ____sys_sendmsg+0x52d/0x830
[ 1882.889394][ T4480]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1882.889423][ T4480]  ? import_iovec+0x74/0xa0
[ 1882.889448][ T4480]  ___sys_sendmsg+0x21f/0x2a0
[ 1882.889473][ T4480]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1882.889533][ T4480]  ? __fget_files+0x2a/0x420
[ 1882.889559][ T4480]  ? __fget_files+0x3a0/0x420
[ 1882.889596][ T4480]  __sys_sendmmsg+0x227/0x430
[ 1882.889626][ T4480]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1882.889646][ T4480]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1882.889690][ T4480]  ? ksys_write+0x22a/0x250
[ 1882.889715][ T4480]  ? __pfx_ksys_write+0x10/0x10
[ 1882.889737][ T4480]  ? rcu_is_watching+0x15/0xb0
[ 1882.889766][ T4480]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1882.889790][ T4480]  do_syscall_64+0xfa/0x3b0
[ 1882.889807][ T4480]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1882.889824][ T4480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1882.889842][ T4480]  ? clear_bhb_loop+0x60/0xb0
[ 1882.889865][ T4480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1882.889882][ T4480] RIP: 0033:0x7fd51718eec9
[ 1882.889898][ T4480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1882.889914][ T4480] RSP: 002b:00007fd518114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1882.889934][ T4480] RAX: ffffffffffffffda RBX: 00007fd5173e5fa0 RCX: 00007fd51718eec9
[ 1882.889948][ T4480] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1882.889959][ T4480] RBP: 00007fd518114090 R08: 0000000000000000 R09: 0000000000000000
[ 1882.889969][ T4480] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001
[ 1882.889982][ T4480] R13: 00007fd5173e6038 R14: 00007fd5173e5fa0 R15: 00007fd51750fa28
[ 1882.890010][ T4480]  </TASK>
[ 1883.440479][ T4489] loop2: detected capacity change from 0 to 7
[ 1883.448438][ T4489]  loop2:
[ 1883.451423][ T4489] loop2: partition table partially beyond EOD, truncated
[ 1883.614342][ T4494] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1883.674953][ T4498] tipc: Started in network mode
[ 1883.679843][ T4498] tipc: Node identity caec7465ed6a, cluster identity 4711
[ 1883.688421][ T4498] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1883.699177][ T4498] syzkaller0: entered promiscuous mode
[ 1883.705134][ T4498] syzkaller0: entered allmulticast mode
[ 1883.714284][T15176] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 1883.723999][ T5922] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1883.758201][ T4498] tipc: Resetting bearer <eth:syzkaller0>
[ 1883.767982][ T4497] tipc: Resetting bearer <eth:syzkaller0>
[ 1883.799025][ T4497] tipc: Disabling bearer <eth:syzkaller0>
[ 1883.874187][T15176] usb 4-1: Using ep0 maxpacket: 32
[ 1883.875706][ T5922] usb 2-1: config 0 has no interfaces?
[ 1883.886094][T15176] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[ 1883.887890][ T5922] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1883.903742][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.912608][T15176] usb 4-1: config 0 has no interface number 0
[ 1883.920480][T15176] usb 4-1: config 0 interface 184 has no altsetting 0
[ 1883.920505][ T5922] usb 2-1: Product: syz
[ 1883.920534][ T5922] usb 2-1: Manufacturer: syz
[ 1883.935930][T15176] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1883.945626][T15176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1883.953693][T15176] usb 4-1: Product: syz
[ 1883.953700][ T5922] usb 2-1: SerialNumber: syz
[ 1883.965049][ T5922] usb 2-1: config 0 descriptor??
[ 1883.971391][T15176] usb 4-1: Manufacturer: syz
[ 1883.976226][T15176] usb 4-1: SerialNumber: syz
[ 1883.998422][T15176] usb 4-1: config 0 descriptor??
[ 1884.012236][T15176] smsc75xx v1.0.0
[ 1884.171903][ T4487] FAULT_INJECTION: forcing a failure.
[ 1884.171903][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1884.199570][ T4487] CPU: 1 UID: 0 PID: 4487 Comm: syz.1.9256 Not tainted syzkaller #0 PREEMPT(full) 
[ 1884.199598][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1884.199610][ T4487] Call Trace:
[ 1884.199618][ T4487]  <TASK>
[ 1884.199627][ T4487]  dump_stack_lvl+0x189/0x250
[ 1884.199656][ T4487]  ? __pfx____ratelimit+0x10/0x10
[ 1884.199687][ T4487]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1884.199707][ T4487]  ? __pfx__printk+0x10/0x10
[ 1884.199735][ T4487]  ? __might_fault+0xb0/0x130
[ 1884.199773][ T4487]  should_fail_ex+0x414/0x560
[ 1884.199801][ T4487]  _copy_from_user+0x2d/0xb0
[ 1884.199813][ T4487]  ___sys_sendmsg+0x158/0x2a0
[ 1884.199828][ T4487]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1884.199865][ T4487]  ? __fget_files+0x2a/0x420
[ 1884.199893][ T4487]  ? __fget_files+0x3a0/0x420
[ 1884.199932][ T4487]  __x64_sys_sendmsg+0x19b/0x260
[ 1884.199953][ T4487]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1884.199971][ T4487]  ? __pfx_ksys_write+0x10/0x10
[ 1884.199983][ T4487]  ? rcu_is_watching+0x15/0xb0
[ 1884.199998][ T4487]  ? do_syscall_64+0xbe/0x3b0
[ 1884.200019][ T4487]  do_syscall_64+0xfa/0x3b0
[ 1884.200038][ T4487]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1884.200066][ T4487]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1884.200087][ T4487]  ? clear_bhb_loop+0x60/0xb0
[ 1884.200104][ T4487]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1884.200114][ T4487] RIP: 0033:0x7f95fe98eec9
[ 1884.200125][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1884.200134][ T4487] RSP: 002b:00007f95ff7c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1884.200147][ T4487] RAX: ffffffffffffffda RBX: 00007f95febe5fa0 RCX: 00007f95fe98eec9
[ 1884.200158][ T4487] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[ 1884.200171][ T4487] RBP: 00007f95ff7c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1884.200184][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1884.200196][ T4487] R13: 00007f95febe6038 R14: 00007f95febe5fa0 R15: 00007f95fed0fa28
[ 1884.200228][ T4487]  </TASK>
[ 1884.202107][ T5936] usb 2-1: USB disconnect, device number 18
[ 1884.500019][T15176] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[ 1884.511249][T15176] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[ 1884.523999][T15176] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[ 1884.554743][T15176] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[ 1884.566268][T15176] usb 4-1: USB disconnect, device number 7
[ 1884.736210][ T4511] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1885.869634][ T4524] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9264'.
[ 1885.934895][ T4524] 8021q: VLANs not supported on nlmon0
[ 1886.026219][ T4529] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9265'.
[ 1886.140082][ T4532] FAULT_INJECTION: forcing a failure.
[ 1886.140082][ T4532] name failslab, interval 1, probability 0, space 0, times 0
[ 1886.154149][ T4532] CPU: 0 UID: 0 PID: 4532 Comm: syz.7.9266 Not tainted syzkaller #0 PREEMPT(full) 
[ 1886.154182][ T4532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1886.154195][ T4532] Call Trace:
[ 1886.154202][ T4532]  <TASK>
[ 1886.154210][ T4532]  dump_stack_lvl+0x189/0x250
[ 1886.154239][ T4532]  ? __pfx____ratelimit+0x10/0x10
[ 1886.154271][ T4532]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1886.154295][ T4532]  ? __pfx__printk+0x10/0x10
[ 1886.154338][ T4532]  should_fail_ex+0x414/0x560
[ 1886.154369][ T4532]  should_failslab+0xa8/0x100
[ 1886.154400][ T4532]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1886.154427][ T4532]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[ 1886.154450][ T4532]  ? sctp_add_bind_addr+0x8c/0x370
[ 1886.154480][ T4532]  sctp_add_bind_addr+0x8c/0x370
[ 1886.154507][ T4532]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1886.154535][ T4532]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1886.154556][ T4532]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1886.154581][ T4532]  ? sctp_v6_is_any+0x64/0x80
[ 1886.154606][ T4532]  ? sctp_copy_one_addr+0x93/0x360
[ 1886.154633][ T4532]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1886.154656][ T4532]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1886.154691][ T4532]  sctp_connect_new_asoc+0x2e0/0x690
[ 1886.154723][ T4532]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1886.154748][ T4532]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1886.154778][ T4532]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1886.154798][ T4532]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1886.154821][ T4532]  sctp_sendmsg+0x155c/0x2810
[ 1886.154862][ T4532]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1886.154892][ T4532]  ? aa_sk_perm+0x81e/0x950
[ 1886.154915][ T4532]  ? __lock_acquire+0xab9/0xd20
[ 1886.154938][ T4532]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1886.154965][ T4532]  ? sock_rps_record_flow+0x19/0x410
[ 1886.154988][ T4532]  ? inet_sendmsg+0x2f4/0x370
[ 1886.155012][ T4532]  __sock_sendmsg+0x19c/0x270
[ 1886.155046][ T4532]  ____sys_sendmsg+0x52d/0x830
[ 1886.155077][ T4532]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1886.155112][ T4532]  ? import_iovec+0x74/0xa0
[ 1886.155136][ T4532]  ___sys_sendmsg+0x21f/0x2a0
[ 1886.155163][ T4532]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1886.155232][ T4532]  ? __fget_files+0x2a/0x420
[ 1886.155260][ T4532]  ? __fget_files+0x3a0/0x420
[ 1886.155300][ T4532]  __sys_sendmmsg+0x227/0x430
[ 1886.155331][ T4532]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1886.155352][ T4532]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1886.155407][ T4532]  ? ksys_write+0x22a/0x250
[ 1886.155436][ T4532]  ? __pfx_ksys_write+0x10/0x10
[ 1886.155459][ T4532]  ? rcu_is_watching+0x15/0xb0
[ 1886.155489][ T4532]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1886.155515][ T4532]  do_syscall_64+0xfa/0x3b0
[ 1886.155535][ T4532]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1886.155555][ T4532]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1886.155575][ T4532]  ? clear_bhb_loop+0x60/0xb0
[ 1886.155599][ T4532]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1886.155618][ T4532] RIP: 0033:0x7fdd61f8eec9
[ 1886.155636][ T4532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1886.155654][ T4532] RSP: 002b:00007fdd62e01038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1886.155676][ T4532] RAX: ffffffffffffffda RBX: 00007fdd621e5fa0 RCX: 00007fdd61f8eec9
[ 1886.155692][ T4532] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1886.155705][ T4532] RBP: 00007fdd62e01090 R08: 0000000000000000 R09: 0000000000000000
[ 1886.155718][ T4532] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000001
[ 1886.155731][ T4532] R13: 00007fdd621e6038 R14: 00007fdd621e5fa0 R15: 00007fdd6230fa28
[ 1886.155764][ T4532]  </TASK>
[ 1886.643785][ T4535] loop5: detected capacity change from 0 to 7
[ 1886.692732][ T4535]  loop5:
[ 1886.695968][ T4535] loop5: partition table partially beyond EOD, truncated
[ 1886.938229][ T4539] loop2: detected capacity change from 0 to 7
[ 1886.945077][ T4539]  loop2:
[ 1886.964017][ T4539] loop2: partition table partially beyond EOD, truncated
[ 1887.519203][ T4547] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1887.525822][ T4547] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1887.533377][ T4547] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1887.573129][ T4547] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1887.582038][ T4547] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1887.591600][ T4547] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1887.611877][ T4567] fuse: Bad value for 'fd'
[ 1887.720189][ T4547] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 1887.974325][ T4574] FAULT_INJECTION: forcing a failure.
[ 1887.974325][ T4574] name failslab, interval 1, probability 0, space 0, times 0
[ 1888.015454][ T4574] CPU: 1 UID: 0 PID: 4574 Comm: syz.5.9278 Not tainted syzkaller #0 PREEMPT(full) 
[ 1888.015484][ T4574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1888.015495][ T4574] Call Trace:
[ 1888.015502][ T4574]  <TASK>
[ 1888.015507][ T4574]  dump_stack_lvl+0x189/0x250
[ 1888.015524][ T4574]  ? __pfx____ratelimit+0x10/0x10
[ 1888.015542][ T4574]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1888.015555][ T4574]  ? __pfx__printk+0x10/0x10
[ 1888.015578][ T4574]  should_fail_ex+0x414/0x560
[ 1888.015598][ T4574]  should_failslab+0xa8/0x100
[ 1888.015616][ T4574]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1888.015631][ T4574]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[ 1888.015643][ T4574]  ? sctp_add_bind_addr+0x8c/0x370
[ 1888.015658][ T4574]  sctp_add_bind_addr+0x8c/0x370
[ 1888.015673][ T4574]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1888.015691][ T4574]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1888.015703][ T4574]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1888.015718][ T4574]  ? sctp_v6_is_any+0x64/0x80
[ 1888.015732][ T4574]  ? sctp_copy_one_addr+0x93/0x360
[ 1888.015745][ T4574]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1888.015760][ T4574]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1888.015792][ T4574]  sctp_connect_new_asoc+0x2e0/0x690
[ 1888.015822][ T4574]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1888.015847][ T4574]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1888.015865][ T4574]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1888.015876][ T4574]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1888.015889][ T4574]  sctp_sendmsg+0x155c/0x2810
[ 1888.015910][ T4574]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1888.015926][ T4574]  ? aa_sk_perm+0x81e/0x950
[ 1888.015938][ T4574]  ? __lock_acquire+0xab9/0xd20
[ 1888.015950][ T4574]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1888.015971][ T4574]  ? sock_rps_record_flow+0x19/0x410
[ 1888.015984][ T4574]  ? inet_sendmsg+0x2f4/0x370
[ 1888.015996][ T4574]  __sock_sendmsg+0x19c/0x270
[ 1888.016014][ T4574]  ____sys_sendmsg+0x52d/0x830
[ 1888.016031][ T4574]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1888.016049][ T4574]  ? import_iovec+0x74/0xa0
[ 1888.016062][ T4574]  ___sys_sendmsg+0x21f/0x2a0
[ 1888.016076][ T4574]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1888.016109][ T4574]  ? __fget_files+0x2a/0x420
[ 1888.016124][ T4574]  ? __fget_files+0x3a0/0x420
[ 1888.016145][ T4574]  __sys_sendmmsg+0x227/0x430
[ 1888.016161][ T4574]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1888.016173][ T4574]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1888.016198][ T4574]  ? ksys_write+0x22a/0x250
[ 1888.016214][ T4574]  ? __pfx_ksys_write+0x10/0x10
[ 1888.016226][ T4574]  ? rcu_is_watching+0x15/0xb0
[ 1888.016241][ T4574]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1888.016255][ T4574]  do_syscall_64+0xfa/0x3b0
[ 1888.016266][ T4574]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1888.016275][ T4574]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.016286][ T4574]  ? clear_bhb_loop+0x60/0xb0
[ 1888.016299][ T4574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1888.016309][ T4574] RIP: 0033:0x7f1bce58eec9
[ 1888.016319][ T4574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1888.016329][ T4574] RSP: 002b:00007f1bcf500038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1888.016342][ T4574] RAX: ffffffffffffffda RBX: 00007f1bce7e5fa0 RCX: 00007f1bce58eec9
[ 1888.016349][ T4574] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1888.016356][ T4574] RBP: 00007f1bcf500090 R08: 0000000000000000 R09: 0000000000000000
[ 1888.016363][ T4574] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002
[ 1888.016370][ T4574] R13: 00007f1bce7e6038 R14: 00007f1bce7e5fa0 R15: 00007f1bce90fa28
[ 1888.016386][ T4574]  </TASK>
[ 1888.021419][ T4572] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9277'.
[ 1888.461509][ T4572] 8021q: VLANs not supported on nlmon0
[ 1889.426928][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[ 1889.477867][  T802] bond2 (unregistering): (slave ip6gre1): Releasing backup interface
[ 1889.486213][  T802] ip6gre1 (unregistering): left promiscuous mode
[ 1889.554109][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout
[ 1889.560218][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[ 1889.634046][T24890] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1889.640375][T24890] Bluetooth: hci1: command 0x0c1a tx timeout
[ 1889.910083][ T4600] loop2: detected capacity change from 0 to 7
[ 1889.944224][ T4600] Dev loop2: unable to read RDB block 7
[ 1889.965842][ T4600]  loop2: unable to read partition table
[ 1889.985612][ T4600] loop2: partition table beyond EOD, truncated
[ 1890.012223][ T4600] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1890.753108][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9283'.
[ 1890.780866][ T4614] FAULT_INJECTION: forcing a failure.
[ 1890.780866][ T4614] name failslab, interval 1, probability 0, space 0, times 0
[ 1890.831837][ T4614] CPU: 0 UID: 0 PID: 4614 Comm: syz.6.9290 Not tainted syzkaller #0 PREEMPT(full) 
[ 1890.831854][ T4614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1890.831862][ T4614] Call Trace:
[ 1890.831867][ T4614]  <TASK>
[ 1890.831873][ T4614]  dump_stack_lvl+0x189/0x250
[ 1890.831891][ T4614]  ? __pfx____ratelimit+0x10/0x10
[ 1890.831908][ T4614]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1890.831921][ T4614]  ? __pfx__printk+0x10/0x10
[ 1890.831944][ T4614]  should_fail_ex+0x414/0x560
[ 1890.831961][ T4614]  should_failslab+0xa8/0x100
[ 1890.831984][ T4614]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1890.831998][ T4614]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[ 1890.832018][ T4614]  ? sctp_add_bind_addr+0x8c/0x370
[ 1890.832045][ T4614]  sctp_add_bind_addr+0x8c/0x370
[ 1890.832069][ T4614]  sctp_copy_local_addr_list+0x30b/0x4e0
[ 1890.832094][ T4614]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1890.832117][ T4614]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1890.832142][ T4614]  ? sctp_v6_is_any+0x64/0x80
[ 1890.832168][ T4614]  ? sctp_copy_one_addr+0x93/0x360
[ 1890.832194][ T4614]  sctp_bind_addr_copy+0xb3/0x3c0
[ 1890.832218][ T4614]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[ 1890.832253][ T4614]  sctp_connect_new_asoc+0x2e0/0x690
[ 1890.832286][ T4614]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1890.832311][ T4614]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1890.832341][ T4614]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1890.832362][ T4614]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1890.832385][ T4614]  sctp_sendmsg+0x155c/0x2810
[ 1890.832425][ T4614]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1890.832455][ T4614]  ? aa_sk_perm+0x81e/0x950
[ 1890.832478][ T4614]  ? __lock_acquire+0xab9/0xd20
[ 1890.832508][ T4614]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1890.832535][ T4614]  ? sock_rps_record_flow+0x19/0x410
[ 1890.832558][ T4614]  ? inet_sendmsg+0x2f4/0x370
[ 1890.832582][ T4614]  __sock_sendmsg+0x19c/0x270
[ 1890.832619][ T4614]  ____sys_sendmsg+0x52d/0x830
[ 1890.832650][ T4614]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1890.832684][ T4614]  ? import_iovec+0x74/0xa0
[ 1890.832710][ T4614]  ___sys_sendmsg+0x21f/0x2a0
[ 1890.832736][ T4614]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1890.832799][ T4614]  ? __fget_files+0x2a/0x420
[ 1890.832828][ T4614]  ? __fget_files+0x3a0/0x420
[ 1890.832867][ T4614]  __sys_sendmmsg+0x227/0x430
[ 1890.832898][ T4614]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1890.832919][ T4614]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1890.832968][ T4614]  ? ksys_write+0x22a/0x250
[ 1890.832997][ T4614]  ? __pfx_ksys_write+0x10/0x10
[ 1890.833020][ T4614]  ? rcu_is_watching+0x15/0xb0
[ 1890.833051][ T4614]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1890.833078][ T4614]  do_syscall_64+0xfa/0x3b0
[ 1890.833098][ T4614]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1890.833117][ T4614]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1890.833136][ T4614]  ? clear_bhb_loop+0x60/0xb0
[ 1890.833159][ T4614]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1890.833177][ T4614] RIP: 0033:0x7fd51718eec9
[ 1890.833193][ T4614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1890.833209][ T4614] RSP: 002b:00007fd518114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1890.833227][ T4614] RAX: ffffffffffffffda RBX: 00007fd5173e5fa0 RCX: 00007fd51718eec9
[ 1890.833241][ T4614] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1890.833253][ T4614] RBP: 00007fd518114090 R08: 0000000000000000 R09: 0000000000000000
[ 1890.833265][ T4614] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002
[ 1890.833275][ T4614] R13: 00007fd5173e6038 R14: 00007fd5173e5fa0 R15: 00007fd51750fa28
[ 1890.833304][ T4614]  </TASK>
[ 1891.378444][ T4621] netlink: 'syz.1.9292': attribute type 1 has an invalid length.
[ 1891.431234][  T802] bond1 (unregistering): (slave gretap2): Releasing active interface
[ 1891.634010][T24487] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1891.702307][  T802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1891.712547][  T802] bond_slave_0: left promiscuous mode
[ 1891.718086][ T4593] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1891.727270][  T802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1891.736706][  T802] bond_slave_1: left promiscuous mode
[ 1891.742484][  T802] bond0 (unregistering): Released all slaves
[ 1891.760071][  T802] bond1 (unregistering): Released all slaves
[ 1891.796064][T24487] usb 2-1: Using ep0 maxpacket: 16
[ 1891.807254][T24487] usb 2-1: config index 0 descriptor too short (expected 8228, got 36)
[ 1891.819002][T24487] usb 2-1: config 47 has an invalid descriptor of length 168, skipping remainder of the config
[ 1891.829824][T24487] usb 2-1: config 47 has 0 interfaces, different from the descriptor's value: 3
[ 1891.841968][T24487] usb 2-1: New USB device found, idVendor=1199, idProduct=9015, bcdDevice=99.2d
[ 1891.851411][T24487] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1891.864549][T24487] usb 2-1: Product: syz
[ 1891.869927][T24487] usb 2-1: Manufacturer: syz
[ 1891.874913][T24487] usb 2-1: SerialNumber: syz
[ 1892.031170][  T802] bond2 (unregistering): Released all slaves
[ 1892.090682][T24487] usb 2-1: USB disconnect, device number 19
[ 1892.197296][  T802] tipc: Left network mode
[ 1892.364060][ T5936] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1892.535646][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1892.546779][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1892.557885][ T5936] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[ 1892.571420][ T5936] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00
[ 1892.584129][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1892.616444][ T5936] usb 4-1: config 0 descriptor??
[ 1892.724090][  T802] team0: left promiscuous mode
[ 1892.739814][  T802] team_slave_0: left promiscuous mode
[ 1892.750045][  T802] team_slave_1: left promiscuous mode
[ 1892.804777][  T802] hsr_slave_0: left promiscuous mode
[ 1892.815037][  T802] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1892.861539][  T802] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1893.076529][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.104496][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.123344][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.134291][T24488] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1893.174642][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.214040][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.240845][ T5936] nintendo 0003:057E:2019.003D: unknown main item tag 0x0
[ 1893.304185][T24488] usb 2-1: Using ep0 maxpacket: 16
[ 1893.313461][T24488] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1893.348579][T24488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1893.387333][T24488] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1893.394979][ T5936] nintendo 0003:057E:2019.003D: hidraw0: USB HID v80.00 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0
[ 1893.458834][T24488] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1893.477393][T24488] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1893.521150][T24488] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1893.538164][T24488] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1893.545502][ T5936] nintendo 0003:057E:2019.003D: Failed to get joycon info; ret=-38
[ 1893.567107][T24488] usb 2-1: Manufacturer: syz
[ 1893.574193][ T5936] nintendo 0003:057E:2019.003D: Failed to retrieve controller info; ret=-38
[ 1893.607201][ T5936] nintendo 0003:057E:2019.003D: Failed to initialize controller; ret=-38
[ 1893.648756][T24488] usb 2-1: config 0 descriptor??
[ 1893.651079][ T5936] nintendo 0003:057E:2019.003D: probe - fail = -38
[ 1893.680191][ T5936] nintendo 0003:057E:2019.003D: probe with driver nintendo failed with error -38
[ 1893.797223][ T4593] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1893.986319][T24488] rc_core: IR keymap rc-hauppauge not found
[ 1893.992309][T24488] Registered IR keymap rc-empty
[ 1893.997860][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.044198][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.120686][T24488] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 1894.138927][T24488] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input153
[ 1894.154407][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.174102][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.198785][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.234298][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.269448][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.307753][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.348614][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.384057][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.414142][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.422939][  T802] team0 (unregistering): Port device team_slave_1 removed
[ 1894.439085][T24488] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 1894.447889][ T4659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1894.480605][ T4659] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1894.501054][T24488] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 1894.584944][  T802] team0 (unregistering): Port device team_slave_0 removed
[ 1894.673511][T24488] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1894.687263][ T4662] FAULT_INJECTION: forcing a failure.
[ 1894.687263][ T4662] name failslab, interval 1, probability 0, space 0, times 0
[ 1894.719857][ T4662] CPU: 0 UID: 0 PID: 4662 Comm: syz.6.9303 Not tainted syzkaller #0 PREEMPT(full) 
[ 1894.719886][ T4662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1894.719898][ T4662] Call Trace:
[ 1894.719905][ T4662]  <TASK>
[ 1894.719911][ T4662]  dump_stack_lvl+0x189/0x250
[ 1894.719930][ T4662]  ? __pfx____ratelimit+0x10/0x10
[ 1894.719954][ T4662]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1894.719991][ T4662]  ? __pfx__printk+0x10/0x10
[ 1894.720026][ T4662]  ? __pfx___might_resched+0x10/0x10
[ 1894.720044][ T4662]  ? fs_reclaim_acquire+0x7d/0x100
[ 1894.720062][ T4662]  should_fail_ex+0x414/0x560
[ 1894.720079][ T4662]  should_failslab+0xa8/0x100
[ 1894.720098][ T4662]  __kmalloc_cache_noprof+0x6f/0x6f0
[ 1894.720124][ T4662]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[ 1894.720145][ T4662]  ? sctp_transport_new+0x7e/0x640
[ 1894.720176][ T4662]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[ 1894.720197][ T4662]  sctp_transport_new+0x7e/0x640
[ 1894.720215][ T4662]  sctp_assoc_add_peer+0x260/0x13b0
[ 1894.720239][ T4662]  ? sctp_bind_addr_copy+0x380/0x3c0
[ 1894.720388][ T4662]  sctp_connect_new_asoc+0x30a/0x690
[ 1894.720423][ T4662]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[ 1894.720437][ T4662]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1894.720453][ T4662]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[ 1894.720464][ T4662]  ? security_sctp_bind_connect+0x7e/0x2e0
[ 1894.720477][ T4662]  sctp_sendmsg+0x155c/0x2810
[ 1894.720498][ T4662]  ? __pfx_sctp_sendmsg+0x10/0x10
[ 1894.720517][ T4662]  ? aa_sk_perm+0x81e/0x950
[ 1894.720539][ T4662]  ? __lock_acquire+0xab9/0xd20
[ 1894.720562][ T4662]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1894.720580][ T4662]  ? sock_rps_record_flow+0x19/0x410
[ 1894.720592][ T4662]  ? inet_sendmsg+0x2f4/0x370
[ 1894.720604][ T4662]  __sock_sendmsg+0x19c/0x270
[ 1894.720622][ T4662]  ____sys_sendmsg+0x52d/0x830
[ 1894.720638][ T4662]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1894.720655][ T4662]  ? import_iovec+0x74/0xa0
[ 1894.720670][ T4662]  ___sys_sendmsg+0x21f/0x2a0
[ 1894.720697][ T4662]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1894.720745][ T4662]  ? __fget_files+0x2a/0x420
[ 1894.720760][ T4662]  ? __fget_files+0x3a0/0x420
[ 1894.720781][ T4662]  __sys_sendmmsg+0x227/0x430
[ 1894.720797][ T4662]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1894.720808][ T4662]  ? __mutex_unlock_slowpath+0x1a1/0x740
[ 1894.720855][ T4662]  ? ksys_write+0x22a/0x250
[ 1894.720883][ T4662]  ? __pfx_ksys_write+0x10/0x10
[ 1894.720903][ T4662]  ? rcu_is_watching+0x15/0xb0
[ 1894.720919][ T4662]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1894.720933][ T4662]  do_syscall_64+0xfa/0x3b0
[ 1894.720944][ T4662]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1894.720954][ T4662]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.720965][ T4662]  ? clear_bhb_loop+0x60/0xb0
[ 1894.720987][ T4662]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1894.721004][ T4662] RIP: 0033:0x7fd51718eec9
[ 1894.721021][ T4662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1894.721038][ T4662] RSP: 002b:00007fd518114038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1894.721057][ T4662] RAX: ffffffffffffffda RBX: 00007fd5173e5fa0 RCX: 00007fd51718eec9
[ 1894.721069][ T4662] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000003
[ 1894.721075][ T4662] RBP: 00007fd518114090 R08: 0000000000000000 R09: 0000000000000000
[ 1894.721082][ T4662] R10: 0000000004008040 R11: 0000000000000246 R12: 0000000000000002
[ 1894.721088][ T4662] R13: 00007fd5173e6038 R14: 00007fd5173e5fa0 R15: 00007fd51750fa28
[ 1894.721104][ T4662]  </TASK>
[ 1895.283512][ T5936] usb 4-1: USB disconnect, device number 8
[ 1895.907601][T24488] usb 2-1: USB disconnect, device number 20
[ 1895.943992][ T5936] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1895.943998][ T5922] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 1896.106319][ T5922] usb 6-1: config 0 has no interfaces?
[ 1896.116229][ T5922] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1896.130162][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.155092][ T5922] usb 6-1: Product: syz
[ 1896.159536][ T5922] usb 6-1: Manufacturer: syz
[ 1896.164978][ T5922] usb 6-1: SerialNumber: syz
[ 1896.173450][ T5922] usb 6-1: config 0 descriptor??
[ 1896.174860][ T5936] usb 4-1: Using ep0 maxpacket: 8
[ 1896.201437][ T5936] usb 4-1: config 127 has an invalid interface number: 171 but max is 1
[ 1896.210051][ T5936] usb 4-1: config 127 has no interface number 1
[ 1896.230869][ T5936] usb 4-1: config 127 interface 0 altsetting 10 endpoint 0xA has invalid wMaxPacketSize 0
[ 1896.240949][ T5936] usb 4-1: config 127 interface 171 has no altsetting 0
[ 1896.264744][ T5936] usb 4-1: config 127 interface 0 has no altsetting 0
[ 1896.307640][ T5936] usb 4-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9
[ 1896.316758][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1896.344262][ T5936] usb 4-1: Product: syz
[ 1896.348575][ T5936] usb 4-1: Manufacturer: syz
[ 1896.354430][ T5936] usb 4-1: SerialNumber: syz
[ 1896.381982][ T4675] FAULT_INJECTION: forcing a failure.
[ 1896.381982][ T4675] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1896.408670][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.5.9307 Not tainted syzkaller #0 PREEMPT(full) 
[ 1896.408697][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1896.408709][ T4675] Call Trace:
[ 1896.408717][ T4675]  <TASK>
[ 1896.408726][ T4675]  dump_stack_lvl+0x189/0x250
[ 1896.408754][ T4675]  ? __pfx____ratelimit+0x10/0x10
[ 1896.408782][ T4675]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1896.408803][ T4675]  ? __pfx__printk+0x10/0x10
[ 1896.408828][ T4675]  ? __might_fault+0xb0/0x130
[ 1896.408861][ T4675]  should_fail_ex+0x414/0x560
[ 1896.408888][ T4675]  _copy_from_iter+0x1de/0x1790
[ 1896.408923][ T4675]  ? rcu_is_watching+0x15/0xb0
[ 1896.408946][ T4675]  ? kmalloc_reserve+0xbd/0x290
[ 1896.408967][ T4675]  ? __pfx__copy_from_iter+0x10/0x10
[ 1896.408993][ T4675]  ? __build_skb_around+0x262/0x3f0
[ 1896.409014][ T4675]  ? netlink_sendmsg+0x642/0xb30
[ 1896.409033][ T4675]  ? skb_put+0x11b/0x210
[ 1896.409055][ T4675]  netlink_sendmsg+0x6b2/0xb30
[ 1896.409083][ T4675]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1896.409111][ T4675]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1896.409136][ T4675]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1896.409161][ T4675]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1896.409181][ T4675]  __sock_sendmsg+0x219/0x270
[ 1896.409209][ T4675]  ____sys_sendmsg+0x505/0x830
[ 1896.409236][ T4675]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1896.409266][ T4675]  ? import_iovec+0x74/0xa0
[ 1896.409287][ T4675]  ___sys_sendmsg+0x21f/0x2a0
[ 1896.409310][ T4675]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1896.409363][ T4675]  ? __fget_files+0x2a/0x420
[ 1896.409388][ T4675]  ? __fget_files+0x3a0/0x420
[ 1896.409422][ T4675]  __x64_sys_sendmsg+0x19b/0x260
[ 1896.409445][ T4675]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1896.409475][ T4675]  ? __pfx_ksys_write+0x10/0x10
[ 1896.409495][ T4675]  ? rcu_is_watching+0x15/0xb0
[ 1896.409519][ T4675]  ? do_syscall_64+0xbe/0x3b0
[ 1896.409541][ T4675]  do_syscall_64+0xfa/0x3b0
[ 1896.409558][ T4675]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1896.409575][ T4675]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1896.409592][ T4675]  ? clear_bhb_loop+0x60/0xb0
[ 1896.409613][ T4675]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1896.409630][ T4675] RIP: 0033:0x7f1bce58eec9
[ 1896.409647][ T4675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1896.409663][ T4675] RSP: 002b:00007f1bcf4df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1896.409682][ T4675] RAX: ffffffffffffffda RBX: 00007f1bce7e6090 RCX: 00007f1bce58eec9
[ 1896.409696][ T4675] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[ 1896.409708][ T4675] RBP: 00007f1bcf4df090 R08: 0000000000000000 R09: 0000000000000000
[ 1896.409719][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1896.409729][ T4675] R13: 00007f1bce7e6128 R14: 00007f1bce7e6090 R15: 00007f1bce90fa28
[ 1896.409757][ T4675]  </TASK>
[ 1896.745925][ T5936] xr_serial 4-1:127.171: xr_serial converter detected
[ 1896.767994][ T5936] xr_serial ttyUSB0: Failed to set reg 0x1a: -71
[ 1896.777215][ T5936] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[ 1896.792770][ T4678] kthread_run failed with err -4
[ 1897.006367][T24492] usb 6-1: USB disconnect, device number 113
[ 1897.028439][ T5936] usb 4-1: USB disconnect, device number 9
[ 1897.068878][ T5936] xr_serial 4-1:127.171: device disconnected
[ 1897.520650][ T4697] FAULT_INJECTION: forcing a failure.
[ 1897.520650][ T4697] name failslab, interval 1, probability 0, space 0, times 0
[ 1897.588156][ T4697] CPU: 0 UID: 0 PID: 4697 Comm: syz.1.9314 Not tainted syzkaller #0 PREEMPT(full) 
[ 1897.588181][ T4697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1897.588193][ T4697] Call Trace:
[ 1897.588201][ T4697]  <TASK>
[ 1897.588210][ T4697]  dump_stack_lvl+0x189/0x250
[ 1897.588236][ T4697]  ? __pfx____ratelimit+0x10/0x10
[ 1897.588266][ T4697]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1897.588286][ T4697]  ? __pfx__printk+0x10/0x10
[ 1897.588316][ T4697]  ? __pfx___might_resched+0x10/0x10
[ 1897.588334][ T4697]  ? fs_reclaim_acquire+0x7d/0x100
[ 1897.588364][ T4697]  should_fail_ex+0x414/0x560
[ 1897.588390][ T4697]  should_failslab+0xa8/0x100
[ 1897.588418][ T4697]  __kmalloc_noprof+0xcb/0x7f0
[ 1897.588440][ T4697]  ? tomoyo_encode+0x28b/0x550
[ 1897.588467][ T4697]  tomoyo_encode+0x28b/0x550
[ 1897.588495][ T4697]  tomoyo_realpath_from_path+0x58d/0x5d0
[ 1897.588528][ T4697]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[ 1897.588547][ T4697]  tomoyo_path_number_perm+0x1e8/0x5a0
[ 1897.588569][ T4697]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1897.588586][ T4697]  ? look_up_lock_class+0x74/0x170
[ 1897.588605][ T4697]  ? register_lock_class+0x51/0x320
[ 1897.588654][ T4697]  ? __pfx_from_kgid+0x10/0x10
[ 1897.588678][ T4697]  ? chown_common+0x313/0x5c0
[ 1897.588693][ T4697]  ? down_write_killable+0x178/0x230
[ 1897.588717][ T4697]  ? __pfx_down_write_killable+0x10/0x10
[ 1897.588742][ T4697]  security_path_chown+0x13d/0x360
[ 1897.588769][ T4697]  chown_common+0x3bd/0x5c0
[ 1897.588794][ T4697]  ? __pfx_chown_common+0x10/0x10
[ 1897.588822][ T4697]  ? mnt_get_write_access+0x213/0x280
[ 1897.588850][ T4697]  do_fchownat+0x161/0x270
[ 1897.588869][ T4697]  ? __pfx_do_fchownat+0x10/0x10
[ 1897.588884][ T4697]  ? __pfx_ksys_write+0x10/0x10
[ 1897.588905][ T4697]  ? rcu_is_watching+0x15/0xb0
[ 1897.588932][ T4697]  __x64_sys_lchown+0x85/0xa0
[ 1897.588950][ T4697]  do_syscall_64+0xfa/0x3b0
[ 1897.588967][ T4697]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1897.588989][ T4697]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1897.589007][ T4697]  ? clear_bhb_loop+0x60/0xb0
[ 1897.589029][ T4697]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1897.589045][ T4697] RIP: 0033:0x7f95fe98eec9
[ 1897.589061][ T4697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1897.589076][ T4697] RSP: 002b:00007f95ff7a1038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e
[ 1897.589095][ T4697] RAX: ffffffffffffffda RBX: 00007f95febe6090 RCX: 00007f95fe98eec9
[ 1897.589108][ T4697] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000200000000080
[ 1897.589120][ T4697] RBP: 00007f95ff7a1090 R08: 0000000000000000 R09: 0000000000000000
[ 1897.589131][ T4697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1897.589142][ T4697] R13: 00007f95febe6128 R14: 00007f95febe6090 R15: 00007f95fed0fa28
[ 1897.589171][ T4697]  </TASK>
[ 1897.967688][ T4697] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1898.248409][  T802] IPVS: stop unused estimator thread 0...
[ 1898.384063][T24492] usb 6-1: new high-speed USB device number 114 using dummy_hcd
[ 1898.533971][T24492] usb 6-1: device descriptor read/64, error -71
[ 1898.648564][ T4720] syz.3.9321: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1
[ 1898.682365][ T4720] CPU: 1 UID: 0 PID: 4720 Comm: syz.3.9321 Not tainted syzkaller #0 PREEMPT(full) 
[ 1898.682398][ T4720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1898.682412][ T4720] Call Trace:
[ 1898.682422][ T4720]  <TASK>
[ 1898.682433][ T4720]  dump_stack_lvl+0x189/0x250
[ 1898.682467][ T4720]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1898.682494][ T4720]  ? __pfx__printk+0x10/0x10
[ 1898.682526][ T4720]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1898.682554][ T4720]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1898.682584][ T4720]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1898.682616][ T4720]  warn_alloc+0x214/0x310
[ 1898.682651][ T4720]  ? stack_depot_save_flags+0x40/0x860
[ 1898.682680][ T4720]  ? __pfx_warn_alloc+0x10/0x10
[ 1898.682708][ T4720]  ? kasan_save_track+0x3e/0x80
[ 1898.682731][ T4720]  ? __kasan_kmalloc+0x93/0xb0
[ 1898.682759][ T4720]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1898.682788][ T4720]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1898.682811][ T4720]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1898.682833][ T4720]  ? do_syscall_64+0xfa/0x3b0
[ 1898.682853][ T4720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.682883][ T4720]  __vmalloc_node_range_noprof+0x125/0x12d0
[ 1898.682943][ T4720]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1898.682976][ T4720]  ? __kasan_kmalloc+0x93/0xb0
[ 1898.683012][ T4720]  vmalloc_user_noprof+0xad/0xf0
[ 1898.683040][ T4720]  ? xskq_create+0xbf/0x170
[ 1898.683060][ T4720]  xskq_create+0xbf/0x170
[ 1898.683083][ T4720]  xsk_init_queue+0xb0/0x110
[ 1898.683117][ T4720]  xsk_setsockopt+0x4dc/0x8d0
[ 1898.683150][ T4720]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1898.683180][ T4720]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1898.683209][ T4720]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1898.683239][ T4720]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1898.683258][ T4720]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1898.683290][ T4720]  do_sock_setsockopt+0x17c/0x1b0
[ 1898.683320][ T4720]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1898.683350][ T4720]  do_syscall_64+0xfa/0x3b0
[ 1898.683370][ T4720]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1898.683390][ T4720]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.683410][ T4720]  ? clear_bhb_loop+0x60/0xb0
[ 1898.683435][ T4720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1898.683456][ T4720] RIP: 0033:0x7fb92598eec9
[ 1898.683475][ T4720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1898.683495][ T4720] RSP: 002b:00007fb923bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1898.683519][ T4720] RAX: ffffffffffffffda RBX: 00007fb925be6180 RCX: 00007fb92598eec9
[ 1898.683535][ T4720] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[ 1898.683549][ T4720] RBP: 00007fb925a11f91 R08: 0000000000000052 R09: 0000000000000000
[ 1898.683563][ T4720] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1898.683587][ T4720] R13: 00007fb925be6218 R14: 00007fb925be6180 R15: 00007fb925d0fa28
[ 1898.683627][ T4720]  </TASK>
[ 1898.683637][ T4720] Mem-Info:
[ 1898.884009][T24492] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 1898.890963][ T4720] active_anon:24950 inactive_anon:0 isolated_anon:0
[ 1898.890963][ T4720]  active_file:22195 inactive_file:4588 isolated_file:0
[ 1898.890963][ T4720]  unevictable:768 dirty:71 writeback:0
[ 1898.890963][ T4720]  slab_reclaimable:6856 slab_unreclaimable:105861
[ 1898.890963][ T4720]  mapped:34236 shmem:18391 pagetables:1916
[ 1898.890963][ T4720]  sec_pagetables:0 bounce:0
[ 1898.890963][ T4720]  kernel_misc_reclaimable:0
[ 1898.890963][ T4720]  free:1312131 free_pcp:9149 free_cma:0
[ 1898.891076][ T4720] Node 0 active_anon:99800kB inactive_anon:0kB active_file:88368kB inactive_file:18220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136640kB dirty:268kB writeback:0kB shmem:72028kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13560kB pagetables:7512kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1899.069994][ T4720] Node 1 active_anon:0kB inactive_anon:0kB active_file:412kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:304kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1899.104172][T24492] usb 6-1: device descriptor read/64, error -71
[ 1899.115654][ T4720] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1899.150781][ T4720] lowmem_reserve[]: 0 2505 2506 2506 2506
[ 1899.157513][ T4720] Node 0 DMA32 free:1329816kB boost:0kB min:34320kB low:42900kB high:51480kB reserved_highatomic:0KB free_highatomic:0KB active_anon:100396kB inactive_anon:0kB active_file:88368kB inactive_file:18228kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2565932kB mlocked:0kB bounce:0kB free_pcp:35948kB local_pcp:19140kB free_cma:0kB
[ 1899.192907][ T4720] lowmem_reserve[]: 0 0 0 0 0
[ 1899.199591][ T4720] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1899.230300][ T4720] lowmem_reserve[]: 0 0 0 0 0
[ 1899.238245][ T4720] Node 1 Normal free:3903036kB boost:0kB min:55572kB low:69464kB high:83356kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:412kB inactive_file:132kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[ 1899.275375][T24492] usb usb6-port1: attempt power cycle
[ 1899.291115][ T4720] lowmem_reserve[]: 0 0 0 0 0
[ 1899.303247][ T4713] kthread_run failed with err -4
[ 1899.352100][ T4721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9321'.
[ 1899.403125][ T4720] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[ 1899.424012][ T5922] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1899.506344][ T4720] Node 0 DMA32: 1380*4kB (UM) 1342*8kB (UME) 724*16kB (UME) 511*32kB (UME) 726*64kB (UME) 749*128kB (UME) 420*256kB (UME) 190*512kB (UME) 176*1024kB (UME) 6*2048kB (UME) 182*4096kB (UM) = 1329312kB
[ 1899.556044][ T4720] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[ 1899.609486][ T4720] Node 1 Normal: 225*4kB (UE) 56*8kB (UE) 50*16kB (UME) 237*32kB (UME) 111*64kB (UME) 35*128kB (UME) 13*256kB (UE) 7*512kB (UM) 2*1024kB (UM) 5*2048kB (UME) 943*4096kB (M) = 3903044kB
[ 1899.624006][T24492] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 1899.628187][ T5922] usb 2-1: Using ep0 maxpacket: 16
[ 1899.644202][ T4720] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1899.657057][ T5922] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[ 1899.669708][ T4720] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=2 hugepages_size=2048kB
[ 1899.684174][ T5922] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[ 1899.693830][ T5922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1899.701862][ T5922] usb 2-1: Product: syz
[ 1899.706581][ T5922] usb 2-1: Manufacturer: syz
[ 1899.711165][ T5922] usb 2-1: SerialNumber: syz
[ 1899.717568][ T4720] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[ 1899.734408][ T5922] usb 2-1: config 0 descriptor??
[ 1899.739565][ T4720] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1899.756285][T24492] usb 6-1: device descriptor read/8, error -71
[ 1899.756656][ T5922] hub 2-1:0.0: bad descriptor, ignoring hub
[ 1899.770207][ T4720] 45439 total pagecache pages
[ 1899.779898][ T4720] 0 pages in swap cache
[ 1899.785664][ T4720] Free swap  = 124996kB
[ 1899.796851][ T5922] hub 2-1:0.0: probe with driver hub failed with error -5
[ 1899.804698][ T4720] Total swap = 124996kB
[ 1899.810437][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1899.825118][ T4720] 2097051 pages RAM
[ 1899.829317][ T4720] 0 pages HighMem/MovableOnly
[ 1899.854441][ T4720] 423862 pages reserved
[ 1899.858646][ T4720] 0 pages cma reserved
[ 1900.008099][T24492] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 1900.164811][T24492] usb 6-1: device descriptor read/8, error -71
[ 1900.355270][T24492] usb usb6-port1: unable to enumerate USB device
[ 1901.530374][ T5936] usb 2-1: USB disconnect, device number 21
[ 1901.996558][ T4754] fuse: Bad value for 'user_id'
[ 1902.002562][ T4754] fuse: Bad value for 'user_id'
[ 1902.024795][T15176] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1902.044552][ T5936] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1902.184071][T15176] usb 4-1: Using ep0 maxpacket: 8
[ 1902.190725][T15176] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1902.200319][T15176] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1902.212177][T24492] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 1902.220074][T15176] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1902.231173][ T5936] usb 2-1: config 0 has no interfaces?
[ 1902.238853][T15176] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1902.248219][ T5936] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1902.257327][T15176] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1902.265478][T15176] usb 4-1: Product: 똴쟣㔽撸䧞ӱ᚝퉩鯔딡썜
[ 1902.272463][T15176] usb 4-1: Manufacturer: ࡠ
[ 1902.277344][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1902.285598][ T5936] usb 2-1: Product: syz
[ 1902.289777][ T5936] usb 2-1: Manufacturer: syz
[ 1902.294435][T15176] usb 4-1: SerialNumber: 忇障찒䋵Ṋ䳼ꐥ竽떰壦⼔僯뵼Ӹ譚辛썎勏洣褮䢗圎㡦ଇ孃ɱ䘆쟭⹪둘䛇ᷪ먌摒ឧ⓪惵絊嚧룦拼쩩粘줉鳩㼤◦
[ 1902.313820][ T5936] usb 2-1: SerialNumber: syz
[ 1902.320596][ T5936] usb 2-1: config 0 descriptor??
[ 1902.386170][T24492] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1902.395014][T24492] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1902.405470][T24492] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1902.416306][T24492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 1902.427476][T24492] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 1902.459540][T24492] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1902.471344][T24492] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1902.479700][T24492] usb 6-1: Product: syz
[ 1902.484027][T24492] usb 6-1: Manufacturer: syz
[ 1902.510528][T24492] cdc_wdm 6-1:1.0: skipping garbage
[ 1902.520384][T24492] cdc_wdm 6-1:1.0: skipping garbage
[ 1902.527716][ T4742] FAULT_INJECTION: forcing a failure.
[ 1902.527716][ T4742] name failslab, interval 1, probability 0, space 0, times 0
[ 1902.537756][T24492] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 1902.548128][ T4742] CPU: 1 UID: 0 PID: 4742 Comm: syz.1.9326 Not tainted syzkaller #0 PREEMPT(full) 
[ 1902.548157][ T4742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1902.548170][ T4742] Call Trace:
[ 1902.548179][ T4742]  <TASK>
[ 1902.548197][ T4742]  dump_stack_lvl+0x189/0x250
[ 1902.548226][ T4742]  ? __pfx____ratelimit+0x10/0x10
[ 1902.548257][ T4742]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1902.548281][ T4742]  ? __pfx__printk+0x10/0x10
[ 1902.548312][ T4742]  ? __lock_acquire+0xab9/0xd20
[ 1902.548338][ T4742]  should_fail_ex+0x414/0x560
[ 1902.548364][ T4742]  should_failslab+0xa8/0x100
[ 1902.548402][ T4742]  kmem_cache_alloc_noprof+0x74/0x6e0
[ 1902.548428][ T4742]  ? skb_clone+0x212/0x3a0
[ 1902.548458][ T4742]  skb_clone+0x212/0x3a0
[ 1902.548484][ T4742]  __netlink_deliver_tap+0x404/0x850
[ 1902.548524][ T4742]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1902.548548][ T4742]  netlink_deliver_tap+0x19c/0x1b0
[ 1902.548571][ T4742]  netlink_unicast+0x7fa/0x9e0
[ 1902.548609][ T4742]  ? __pfx_netlink_unicast+0x10/0x10
[ 1902.548640][ T4742]  ? netlink_sendmsg+0x642/0xb30
[ 1902.548658][ T4742]  ? skb_put+0x11b/0x210
[ 1902.548685][ T4742]  netlink_sendmsg+0x805/0xb30
[ 1902.548714][ T4742]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1902.548740][ T4742]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1902.548766][ T4742]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1902.548794][ T4742]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1902.548817][ T4742]  __sock_sendmsg+0x219/0x270
[ 1902.548849][ T4742]  ____sys_sendmsg+0x505/0x830
[ 1902.548877][ T4742]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1902.548909][ T4742]  ? import_iovec+0x74/0xa0
[ 1902.548929][ T4742]  ___sys_sendmsg+0x21f/0x2a0
[ 1902.548955][ T4742]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1902.549015][ T4742]  ? __fget_files+0x2a/0x420
[ 1902.549044][ T4742]  ? __fget_files+0x3a0/0x420
[ 1902.549082][ T4742]  __x64_sys_sendmsg+0x19b/0x260
[ 1902.549108][ T4742]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1902.549142][ T4742]  ? __pfx_ksys_write+0x10/0x10
[ 1902.549164][ T4742]  ? rcu_is_watching+0x15/0xb0
[ 1902.549199][ T4742]  ? do_syscall_64+0xbe/0x3b0
[ 1902.549224][ T4742]  do_syscall_64+0xfa/0x3b0
[ 1902.549242][ T4742]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1902.549260][ T4742]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.549279][ T4742]  ? clear_bhb_loop+0x60/0xb0
[ 1902.549300][ T4742]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1902.549318][ T4742] RIP: 0033:0x7f95fe98eec9
[ 1902.549336][ T4742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1902.549353][ T4742] RSP: 002b:00007f95ff7c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1902.549374][ T4742] RAX: ffffffffffffffda RBX: 00007f95febe5fa0 RCX: 00007f95fe98eec9
[ 1902.549389][ T4742] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003
[ 1902.549401][ T4742] RBP: 00007f95ff7c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1902.549413][ T4742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1902.549425][ T4742] R13: 00007f95febe6038 R14: 00007f95febe5fa0 R15: 00007f95fed0fa28
[ 1902.549456][ T4742]  </TASK>
[ 1902.556578][T24492] cdc_wdm 6-1:1.0: Unknown control protocol
[ 1902.869996][T15176] usb 4-1: 0:2 : does not exist
[ 1902.885245][T15176] usb 4-1: USB disconnect, device number 10
[ 1902.938697][ T2613] udevd[2613]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1903.023329][ T3602] usb 2-1: USB disconnect, device number 22
[ 1904.348928][  T802] hsr_slave_1 (unregistering): left promiscuous mode
[ 1904.409142][ T4783] netlink: 'syz.5.9339': attribute type 30 has an invalid length.
[ 1904.417430][ T4782] netlink: 'syz.5.9339': attribute type 30 has an invalid length.
[ 1904.934573][ T4794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1904.956633][ T4794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1905.682767][ T4813] loop9: detected capacity change from 0 to 7
[ 1905.692020][ T4813] Dev loop9: unable to read RDB block 7
[ 1905.700626][ T4813]  loop9: AHDI p3 p4
[ 1905.704959][ T4813] loop9: partition table partially beyond EOD, truncated
[ 1905.712545][ T4813] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 1905.785174][ T4815] loop6: detected capacity change from 0 to 7
[ 1905.810449][ T4815] Dev loop6: unable to read RDB block 7
[ 1905.817859][ T4815]  loop6: unable to read partition table
[ 1905.824997][ T4815] loop6: partition table beyond EOD, truncated
[ 1905.837686][ T4815] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1905.853041][ T4819] fuse: Unknown parameter 'default_permissions������ '
[ 1906.247333][ T3602] usb 6-1: USB disconnect, device number 118
[ 1908.424945][T24487] usb 6-1: new full-speed USB device number 119 using dummy_hcd
[ 1908.583985][T24487] usb 6-1: device descriptor read/64, error -71
[ 1908.834182][T24487] usb 6-1: new full-speed USB device number 120 using dummy_hcd
[ 1908.974224][T24487] usb 6-1: device descriptor read/64, error -71
[ 1909.094886][T24487] usb usb6-port1: attempt power cycle
[ 1909.443966][T24487] usb 6-1: new full-speed USB device number 121 using dummy_hcd
[ 1909.544938][T24487] usb 6-1: device descriptor read/8, error -71
[ 1909.784336][T24487] usb 6-1: new full-speed USB device number 122 using dummy_hcd
[ 1909.834108][T24487] usb 6-1: device descriptor read/8, error -71
[ 1909.954136][T15176] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1909.963358][T24487] usb usb6-port1: unable to enumerate USB device
[ 1910.124183][T15176] usb 2-1: Using ep0 maxpacket: 8
[ 1910.131246][T15176] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1910.167211][T15176] usb 2-1: config 0 has no interface number 0
[ 1910.211832][T15176] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1910.297466][T15176] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1910.364588][T15176] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1910.419901][T15176] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1910.451033][T15176] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1910.481514][T15176] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1910.517249][T15176] usb 2-1: config 0 descriptor??
[ 1910.543215][T15176] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1910.974077][ T4893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1911.014585][ T4893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1911.260465][ T4895] loop6: detected capacity change from 0 to 7
[ 1911.334208][ T4895] Dev loop6: unable to read RDB block 7
[ 1911.356554][ T4895]  loop6: unable to read partition table
[ 1911.356950][ T4897] loop2: detected capacity change from 0 to 7
[ 1911.363001][ T4895] loop6: partition table beyond EOD, truncated
[ 1911.378553][ T4895] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1911.394605][ T4897] Dev loop2: unable to read RDB block 7
[ 1911.408131][ T4897]  loop2: unable to read partition table
[ 1911.425358][ T4897] loop2: partition table beyond EOD, truncated
[ 1911.456691][ T4897] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1911.872776][ T4915] loop5: detected capacity change from 0 to 7
[ 1911.900219][ T2613]  loop5:
[ 1911.903305][ T2613] loop5: partition table partially beyond EOD, truncated
[ 1911.922372][ T4915]  loop5:
[ 1911.929391][ T4915] loop5: partition table partially beyond EOD, truncated
[ 1912.301330][ T4926] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9386'.
[ 1912.483301][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1912.563977][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1912.722704][ T3602] usb 2-1: USB disconnect, device number 23
[ 1912.808391][ T3602] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1913.510517][ T4942] loop2: detected capacity change from 0 to 7
[ 1913.578798][ T4942] Dev loop2: unable to read RDB block 7
[ 1913.638347][ T4942]  loop2: unable to read partition table
[ 1913.684173][ T4942] loop2: partition table beyond EOD, truncated
[ 1913.722612][ T4942] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1914.443961][ T5922] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 1914.537818][ T4975] netlink: 'syz.1.9396': attribute type 1 has an invalid length.
[ 1914.545935][ T4975] netlink: 'syz.1.9396': attribute type 1 has an invalid length.
[ 1914.570324][ T4975] netlink: 'syz.1.9396': attribute type 1 has an invalid length.
[ 1914.694623][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1914.701458][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1914.723997][ T5922] usb 4-1: Using ep0 maxpacket: 32
[ 1914.731372][ T5922] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1914.741076][ T5922] usb 4-1: config 128 has an invalid interface number: 127 but max is 3
[ 1914.814696][ T5922] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[ 1914.885563][ T4978] netlink: 'syz.7.9397': attribute type 1 has an invalid length.
[ 1914.893755][ T5922] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4
[ 1914.913124][ T4978] netlink: 'syz.7.9397': attribute type 1 has an invalid length.
[ 1914.925964][ T4978] netlink: 'syz.7.9397': attribute type 1 has an invalid length.
[ 1914.939969][ T5922] usb 4-1: config 128 has no interface number 0
[ 1914.965980][ T5922] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024
[ 1915.039240][ T5922] usb 4-1: config 128 interface 127 has no altsetting 0
[ 1915.061228][ T5922] usb 4-1: string descriptor 0 read error: -71
[ 1915.070740][ T5922] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[ 1915.102588][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1915.162189][ T5922] usb 4-1: can't set config #128, error -71
[ 1915.198638][ T5922] usb 4-1: USB disconnect, device number 11
[ 1916.226557][ T4994] fuse: Unknown parameter 'group'
[ 1916.231251][ T4996] loop6: detected capacity change from 0 to 7
[ 1916.249212][ T2613] Dev loop6: unable to read RDB block 7
[ 1916.259312][ T2613]  loop6: unable to read partition table
[ 1916.265764][ T2613] loop6: partition table beyond EOD, truncated
[ 1916.276893][ T4996] Dev loop6: unable to read RDB block 7
[ 1916.282642][ T4996]  loop6: unable to read partition table
[ 1916.289157][ T4996] loop6: partition table beyond EOD, truncated
[ 1916.295589][T24487] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 1916.305795][ T4996] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1916.473554][T24487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1916.490080][T24487] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1916.503162][T24487] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[ 1916.546810][ T5005] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9409'.
[ 1916.561850][T24487] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1916.607054][T24487] usb 4-1: config 0 descriptor??
[ 1916.622592][ T5008] netlink: 24 bytes leftover after parsing attributes in process `syz.7.9409'.
[ 1916.649978][ T5009] netlink: 76 bytes leftover after parsing attributes in process `syz.5.9408'.
[ 1916.862609][T24487] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0
[ 1916.883285][T24487] cm6533_jd 0003:0D8C:0022.003E: unknown main item tag 0x0
[ 1916.899013][T24487] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.003E/input/input154
[ 1916.918455][ T7617] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1916.945503][T24487] cm6533_jd 0003:0D8C:0022.003E: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[ 1916.979767][   T30] kauditd_printk_skb: 4 callbacks suppressed
[ 1916.979784][   T30] audit: type=1326 audit(1759741944.239:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.089974][ T7617] usb 2-1: Using ep0 maxpacket: 16
[ 1917.103411][ T7617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1917.128536][ T7617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1917.144699][   T30] audit: type=1326 audit(1759741944.239:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.168456][   T30] audit: type=1326 audit(1759741944.299:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.191245][ T7617] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 1917.196599][   T30] audit: type=1326 audit(1759741944.299:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.226855][   T30] audit: type=1326 audit(1759741944.299:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.251561][ T7617] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 1917.251563][   T30] audit: type=1326 audit(1759741944.299:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.251614][   T30] audit: type=1326 audit(1759741944.299:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.309561][   T30] audit: type=1326 audit(1759741944.299:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.334519][   T30] audit: type=1326 audit(1759741944.299:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.363985][   T30] audit: type=1326 audit(1759741944.299:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5019 comm="syz.7.9412" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd61f8eec9 code=0x7ffc0000
[ 1917.365171][ T7617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1917.417911][ T7617] usb 2-1: config 0 descriptor??
[ 1917.842920][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.850651][ T7617] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max
[ 1917.860210][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.867662][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.876392][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.883632][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.890932][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.898283][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.905584][ T7617] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0
[ 1917.912828][ T7617] microsoft 0003:045E:07DA.003F: unsupported Resolution Multiplier 0
[ 1918.034120][T24492] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 1918.043051][ T7617] microsoft 0003:045E:07DA.003F: unsupported Resolution Multiplier 0
[ 1918.053616][ T7617] microsoft 0003:045E:07DA.003F: hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[ 1918.075279][ T7617] microsoft 0003:045E:07DA.003F: no inputs found
[ 1918.085315][ T7617] microsoft 0003:045E:07DA.003F: could not initialize ff, continuing anyway
[ 1918.197008][T24492] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[ 1918.205050][T24487] usb 4-1: reset high-speed USB device number 12 using dummy_hcd
[ 1918.216503][T24492] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[ 1918.230145][T24492] usb 6-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00
[ 1918.239366][T24492] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1918.250383][T24492] usb 6-1: config 0 descriptor??
[ 1918.263501][ T3602] usb 2-1: USB disconnect, device number 24
[ 1918.356922][T24487] usb 4-1: device descriptor read/64, error -71
[ 1918.594139][T24487] usb 4-1: reset high-speed USB device number 12 using dummy_hcd
[ 1918.666726][T24492] thrustmaster 0003:044F:B320.0040: item fetching failed at offset 3/7
[ 1918.675798][T24492] thrustmaster 0003:044F:B320.0040: parse failed
[ 1918.682197][T24492] thrustmaster 0003:044F:B320.0040: probe with driver thrustmaster failed with error -22
[ 1918.724126][T24487] usb 4-1: device descriptor read/64, error -71
[ 1918.866490][T24488] usb 6-1: USB disconnect, device number 123
[ 1918.964037][T24487] usb 4-1: reset high-speed USB device number 12 using dummy_hcd
[ 1918.997710][T24487] usb 4-1: device descriptor read/8, error -71
[ 1919.050128][ T5033] loop3: detected capacity change from 0 to 7
[ 1919.056770][T24492] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1919.068067][ T5033]  loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1919.076304][ T5033] loop3: partition table partially beyond EOD, truncated
[ 1919.083956][ T5033] loop3: p1 size 3016769088 extends beyond EOD, truncated
[ 1919.092583][ T5033] loop3: p2 start 669336480 is beyond EOD, truncated
[ 1919.151047][ T2613] udevd[2613]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[ 1919.156714][ T5035] loop6: detected capacity change from 0 to 7
[ 1919.170404][T27328] Dev loop6: unable to read RDB block 7
[ 1919.179703][T27328]  loop6: unable to read partition table
[ 1919.187243][T27328] loop6: partition table beyond EOD, truncated
[ 1919.196093][ T5035] Dev loop6: unable to read RDB block 7
[ 1919.202538][ T5035]  loop6: unable to read partition table
[ 1919.212384][ T5035] loop6: partition table beyond EOD, truncated
[ 1919.219139][ T5035] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1919.234327][T24492] usb 2-1: device descriptor read/64, error -71
[ 1919.484356][T24492] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1919.635019][T24492] usb 2-1: device descriptor read/64, error -71
[ 1919.744048][T24487] usb 4-1: reset high-speed USB device number 12 using dummy_hcd
[ 1919.765275][T24492] usb usb2-port1: attempt power cycle
[ 1919.766292][T24487] usb 4-1: device firmware changed
[ 1919.782103][ T7617] usb 4-1: USB disconnect, device number 12
[ 1919.904017][T15176] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 1919.943971][ T7617] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 1920.044171][T15176] usb 6-1: device descriptor read/64, error -71
[ 1920.108009][ T7617] usb 4-1: config 0 has no interfaces?
[ 1920.114238][T24492] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1920.128380][ T7617] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1920.140851][ T7617] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1920.149178][ T7617] usb 4-1: Product: syz
[ 1920.153550][ T7617] usb 4-1: Manufacturer: syz
[ 1920.160353][ T7617] usb 4-1: SerialNumber: syz
[ 1920.160563][T24492] usb 2-1: device descriptor read/8, error -71
[ 1920.173365][ T7617] usb 4-1: config 0 descriptor??
[ 1920.306275][T15176] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 1920.388183][ T3602] usb 4-1: USB disconnect, device number 13
[ 1920.444030][T24492] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1920.475087][T24492] usb 2-1: device descriptor read/8, error -71
[ 1920.503990][T15176] usb 6-1: device descriptor read/64, error -71
[ 1920.585200][T24492] usb usb2-port1: unable to enumerate USB device
[ 1920.615359][T15176] usb usb6-port1: attempt power cycle
[ 1920.977821][T15176] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 1920.990882][ T5066] loop6: detected capacity change from 0 to 7
[ 1921.009984][ T5066] Dev loop6: unable to read RDB block 7
[ 1921.016649][T15176] usb 6-1: device descriptor read/8, error -71
[ 1921.023250][ T5066]  loop6: unable to read partition table
[ 1921.040721][ T5066] loop6: partition table beyond EOD, truncated
[ 1921.052090][ T5066] loop_reread_partitions: partition scan of loop6 (�被x������ ) failed (rc=-5)
[ 1921.264619][T15176] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 1921.294682][T15176] usb 6-1: device descriptor read/8, error -71
[ 1921.414395][T15176] usb usb6-port1: unable to enumerate USB device
[ 1921.575682][ T5083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9434'.
[ 1921.777069][ T5089] usb usb8: usbfs: process 5089 (syz.3.9434) did not claim interface 0 before use
[ 1921.949572][ T5093] Lens A: =================  START STATUS  =================
[ 1921.960885][ T5093] Lens A: Focus, Absolute: 0
[ 1921.968663][ T5093] Lens A: ==================  END STATUS  ==================
[ 1922.284254][ T7617] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1922.434119][ T7617] usb 2-1: Using ep0 maxpacket: 16
[ 1922.464750][ T7617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1922.482702][ T7617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1922.492920][ T7617] usb 2-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[ 1922.504219][ T7617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1922.529762][ T7617] usb 2-1: config 0 descriptor??
[ 1922.761268][ T7617] hid (null): bogus close delimiter
[ 1922.771751][ T7617] hid (null): unknown global tag 0xc
[ 1922.779866][ T7617] hid (null): invalid report_count -776623640
[ 1922.786906][ T7617] hid (null): invalid report_count -606263203
[ 1922.795544][ T7617] hid (null): invalid report_size 16434
[ 1922.801509][ T7617] hid (null): bogus close delimiter
[ 1922.806848][ T7617] hid (null): invalid report_size 1457780112
[ 1922.813828][ T7617] hid (null): unknown global tag 0xd
[ 1922.856039][ T7617] hid_parser_main: 3 callbacks suppressed
[ 1922.856062][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.868862][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.875868][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.882763][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.890411][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.898621][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.913813][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.921000][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.927964][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.935136][ T7617] topre 0003:0853:0148.0041: unknown main item tag 0x0
[ 1922.944293][T24487] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 1922.966964][ T5110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9443'.
[ 1922.977307][ T7617] topre 0003:0853:0148.0041: unexpected long global item
[ 1922.986781][ T7617] topre 0003:0853:0148.0041: probe with driver topre failed with error -22
[ 1923.003494][ T7617] usb 2-1: USB disconnect, device number 29
[ 1923.103955][T24487] usb 4-1: device descriptor read/64, error -71
[ 1923.353943][T24487] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[ 1923.495808][T24487] usb 4-1: device descriptor read/64, error -71
[ 1923.616090][T24487] usb usb4-port1: attempt power cycle
[ 1923.974198][T24487] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[ 1924.024570][T24487] usb 4-1: device descriptor read/8, error -71
[ 1924.263955][T24487] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1924.296013][T24487] usb 4-1: device descriptor read/8, error -71
[ 1924.510050][T24487] usb usb4-port1: unable to enumerate USB device
[ 1924.601035][ T3602] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 1924.808660][ T3602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1924.819934][ T3602] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1924.844087][ T3602] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1924.873394][ T3602] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1924.895390][ T3602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1924.931208][ T3602] usb 6-1: config 0 descriptor??
[ 1924.936672][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9450'.
[ 1924.954791][T24487] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1925.165781][T24487] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 132, changing to 11
[ 1925.199650][T24487] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1925.228681][T24487] usb 2-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[ 1925.262138][T24487] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1925.294723][T24487] usb 2-1: config 0 descriptor??
[ 1925.454596][ T3602] usbhid 6-1:0.0: can't add hid device: -71
[ 1925.465966][ T3602] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 1925.485164][ T3602] usb 6-1: USB disconnect, device number 2
[ 1925.730906][T24487] sony 0003:12BA:0100.0042: unbalanced collection at end of report description
[ 1925.811604][T24487] sony 0003:12BA:0100.0042: parse failed
[ 1925.832671][T24487] sony 0003:12BA:0100.0042: probe with driver sony failed with error -22
[ 1925.908567][ T5159] input: syz0 as /devices/virtual/input/input155
[ 1925.946164][ T3602] usb 2-1: USB disconnect, device number 30
[ 1926.795912][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9463'.
[ 1926.924257][ T5922] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1927.084938][ T5922] usb 2-1: Using ep0 maxpacket: 8
[ 1927.096994][ T5922] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1927.105566][ T5922] usb 2-1: config 0 has no interface number 0
[ 1927.111692][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1927.123164][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1927.135756][ T5922] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 74, changing to 10
[ 1927.148350][ T5922] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 41336, setting to 1024
[ 1927.161490][ T5922] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1927.180508][ T5922] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1927.190158][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1927.206874][ T5922] usb 2-1: config 0 descriptor??
[ 1927.226867][ T5922] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1927.394467][T24487] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 1927.543646][    C1] ldusb 2-1:0.55: usb_submit_urb failed (-1)
[ 1927.553755][ T7617] usb 2-1: USB disconnect, device number 31
[ 1927.566600][ T7617] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1927.579647][T24487] usb 6-1: config 0 has no interfaces?
[ 1927.592719][T24487] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[ 1927.603463][T24487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1927.611739][T24487] usb 6-1: Product: syz
[ 1927.616218][T24487] usb 6-1: Manufacturer: syz
[ 1927.620819][T24487] usb 6-1: SerialNumber: syz
[ 1927.628211][T24487] usb 6-1: config 0 descriptor??
[ 1927.842919][ T7617] usb 6-1: USB disconnect, device number 3
[ 1928.147508][ T5213] Dev loop9: unable to read RDB block 7
[ 1928.153132][ T5213]  loop9: AHDI p3 p4
[ 1928.159140][ T5213] loop9: partition table partially beyond EOD, truncated
[ 1928.167561][ T5213] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 1929.314263][ T3602] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1929.464020][ T3602] usb 2-1: Using ep0 maxpacket: 32
[ 1929.471563][ T3602] usb 2-1: config 0 has an invalid interface number: 196 but max is 0
[ 1929.481064][ T3602] usb 2-1: config 0 has no interface number 0
[ 1929.487521][ T3602] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[ 1929.497581][ T3602] usb 2-1: config 0 interface 196 has no altsetting 0
[ 1929.508653][ T3602] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[ 1929.518327][ T3602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1929.526982][ T3602] usb 2-1: Product: syz
[ 1929.543990][ T3602] usb 2-1: Manufacturer: syz
[ 1929.550265][ T3602] usb 2-1: SerialNumber: syz
[ 1929.563392][ T3602] usb 2-1: config 0 descriptor??
[ 1929.571662][ T5214] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1929.575753][T24487] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 1929.745096][T24487] usb 6-1: config 0 has an invalid interface number: 47 but max is 0
[ 1929.755181][T24487] usb 6-1: config 0 has no interface number 0
[ 1929.764127][T24487] usb 6-1: config 0 interface 47 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1929.788641][T24487] usb 6-1: New USB device found, idVendor=1519, idProduct=0443, bcdDevice=15.97
[ 1929.803595][T24487] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1929.813091][T24487] usb 6-1: Product: syz
[ 1929.820493][T24487] usb 6-1: Manufacturer: syz
[ 1929.825346][T24487] usb 6-1: SerialNumber: syz
[ 1929.851969][T24487] usb 6-1: config 0 descriptor??
[ 1929.901156][T24487] cdc_ncm 6-1:0.47: CDC Union missing and no IAD found
[ 1929.909003][T24487] cdc_ncm 6-1:0.47: bind() failure
[ 1929.960524][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9474'.
[ 1929.975017][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9474'.
[ 1930.157247][T24492] usb 6-1: USB disconnect, device number 4
[ 1930.159627][ T5229] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9476'.
[ 1930.227577][ T3602] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[ 1930.237895][ T5229] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1930.266285][ T3602] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached
[ 1930.842727][ T5249] loop3: detected capacity change from 0 to 7
[ 1930.862588][ T5249]  loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2
[ 1930.900458][ T5249] loop3: partition table partially beyond EOD, truncated
[ 1930.913406][ T5213] Dev loop9: unable to read RDB block 7
[ 1930.929375][ T5213]  loop9: AHDI p3 p4
[ 1930.933153][ T5249] loop3: p1 size 3016769088 extends beyond EOD, truncated
[ 1930.941075][ T5213] loop9: partition table partially beyond EOD, truncated
[ 1930.967662][ T5249] loop3: p2 start 669336480 is beyond EOD, truncated
[ 1930.969026][ T5213] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 1931.284113][T15176] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 1931.323492][T27328] udevd[27328]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[ 1931.504465][T24487] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1931.554379][T15176] usb 6-1: Using ep0 maxpacket: 8
[ 1931.562636][T15176] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 1931.572068][T15176] usb 6-1: config 0 has no interface number 0
[ 1931.581946][T15176] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1931.610210][T15176] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1931.638660][T15176] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1931.663826][T15176] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1931.687745][T24487] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1931.699593][T15176] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1931.709692][T24487] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 1931.731774][T24487] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1931.753975][T15176] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1931.762167][T24487] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 1931.795223][T15176] usb 6-1: config 0 descriptor??
[ 1931.800219][T24487] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 1931.802263][T24487] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1931.852282][T24487] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1931.879055][T15176] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1931.887475][T24487] usb 4-1: Product: syz
[ 1931.887501][T24487] usb 4-1: Manufacturer: syz
[ 1931.916970][T24487] cdc_wdm 4-1:1.0: skipping garbage
[ 1931.936436][T24487] cdc_wdm 4-1:1.0: skipping garbage
[ 1931.963761][T24487] cdc_wdm 4-1:1.0: cdc-wdm1: USB WDM device
[ 1931.978348][T24487] cdc_wdm 4-1:1.0: Unknown control protocol
[ 1932.142905][T24487] usb 4-1: USB disconnect, device number 18
[ 1932.187960][ T5262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1932.236283][ T5262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1933.803560][ T5305] loop2: detected capacity change from 0 to 7
[ 1933.819715][ T5305]  loop2:
[ 1933.829767][ T5305] loop2: partition table partially beyond EOD, truncated
[ 1934.035097][T24492] usb 6-1: USB disconnect, device number 5
[ 1934.067725][T24492] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 1934.377225][ T5316] fuse: Unknown parameter '#�'
[ 1934.829815][ T5213] Dev loop9: unable to read RDB block 7
[ 1934.861474][ T5213]  loop9: AHDI p3 p4
[ 1934.876529][ T5213] loop9: partition table partially beyond EOD, truncated
[ 1934.936974][ T5213] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 1937.424065][T24492] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[ 1937.606230][T24492] usb 6-1: Invalid ep0 maxpacket: 32
[ 1937.774007][T24492] usb 6-1: new low-speed USB device number 7 using dummy_hcd
[ 1937.966504][T24492] usb 6-1: Invalid ep0 maxpacket: 32
[ 1937.972622][T24492] usb usb6-port1: attempt power cycle
[ 1938.324071][T24492] usb 6-1: new low-speed USB device number 8 using dummy_hcd
[ 1938.375245][T24492] usb 6-1: Invalid ep0 maxpacket: 32
[ 1938.383410][ T5380] pim6reg: entered allmulticast mode
[ 1938.392419][ T5380] pim6reg: left allmulticast mode
[ 1938.473429][ T5382] ptrace attach of "./syz-executor exec"[2762] was attempted by "./syz-executor exec"[5382]
[ 1938.516513][T24492] usb 6-1: new low-speed USB device number 9 using dummy_hcd
[ 1938.564725][T24492] usb 6-1: Invalid ep0 maxpacket: 32
[ 1938.575807][T24492] usb usb6-port1: unable to enumerate USB device
[ 1938.794105][T15176] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 1939.024788][T15176] usb 4-1: Using ep0 maxpacket: 8
[ 1939.075787][T15176] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[ 1939.084333][T15176] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1939.096690][T15176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1939.108216][T15176] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1939.120880][T15176] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1939.135603][T15176] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1939.150502][T15176] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1939.160613][T15176] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1939.170798][ T5389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1939.180711][ T5389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1939.395453][T15176] usb 4-1: GET_CAPABILITIES returned 0
[ 1939.407887][T15176] usbtmc 4-1:16.0: can't read capabilities
[ 1940.538398][ T5414] loop5: detected capacity change from 0 to 7
[ 1940.547839][ T5414]  loop5:
[ 1940.550979][ T5414] loop5: partition table partially beyond EOD, truncated
[ 1940.564061][T15176] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1940.724995][T15176] usb 6-1: device descriptor read/64, error -71
[ 1940.974072][T15176] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[ 1941.124059][T15176] usb 6-1: device descriptor read/64, error -71
[ 1941.234682][T15176] usb usb6-port1: attempt power cycle
[ 1941.561690][   T30] kauditd_printk_skb: 6 callbacks suppressed
[ 1941.561827][   T30] audit: type=1326 audit(1759741968.819:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1941.595087][T15176] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[ 1941.624671][T15176] usb 6-1: device descriptor read/8, error -71
[ 1941.864001][T15176] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[ 1941.895524][T15176] usb 6-1: device descriptor read/8, error -71
[ 1942.006973][T15176] usb usb6-port1: unable to enumerate USB device
[ 1942.255355][   T30] audit: type=1326 audit(1759741969.519:1355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.290079][   T30] audit: type=1326 audit(1759741969.519:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.312457][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1942.330455][   T30] audit: type=1326 audit(1759741969.519:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.390388][ T3602] usb 4-1: USB disconnect, device number 19
[ 1942.412647][   T30] audit: type=1326 audit(1759741969.519:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.488283][   T30] audit: type=1326 audit(1759741969.519:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.510655][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1942.550513][   T30] audit: type=1326 audit(1759741969.519:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.601660][   T30] audit: type=1326 audit(1759741969.519:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.690825][   T30] audit: type=1326 audit(1759741969.519:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.713187][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1942.827485][   T30] audit: type=1326 audit(1759741969.519:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5426 comm="syz.1.9527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95fe98eec9 code=0x7fc00000
[ 1942.996635][ T5446] loop5: detected capacity change from 0 to 7
[ 1943.011251][ T5446]  loop5:
[ 1943.014546][ T5446] loop5: partition table partially beyond EOD, truncated
[ 1943.524181][ T3602] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[ 1943.535619][ T5452] netlink: 208 bytes leftover after parsing attributes in process `syz.5.9535'.
[ 1943.818849][ T5922] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[ 1943.867788][ T3602] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1943.877171][ T3602] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1943.892605][ T3602] usb 4-1: Product: syz
[ 1943.897182][ T3602] usb 4-1: Manufacturer: syz
[ 1943.902101][ T3602] usb 4-1: SerialNumber: syz
[ 1943.912344][ T5213] Dev loop9: unable to read RDB block 7
[ 1943.919278][ T3602] usb 4-1: config 0 descriptor??
[ 1943.958597][ T3602] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1943.972997][ T5213]  loop9: AHDI p3 p4
[ 1943.995045][ T5213] loop9: partition table partially beyond EOD, truncated
[ 1944.061777][ T5922] usb 6-1: Using ep0 maxpacket: 32
[ 1944.071891][ T5213] loop9: p3 size 4227858431 extends beyond EOD, truncated
[ 1944.085269][ T5922] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 1944.099113][ T5922] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[ 1944.136808][ T5922] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[ 1944.187150][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1944.225101][ T5922] usb 6-1: Product: syz
[ 1944.235640][ T5922] usb 6-1: Manufacturer: syz
[ 1944.247618][ T5922] usb 6-1: SerialNumber: syz
[ 1944.464586][ T5922] usb 6-1: Cannot retrieve CPort count: -71
[ 1944.486312][ T5922] usb 6-1: Cannot retrieve CPort count: -71
[ 1944.537502][ T5922] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -71
[ 1944.642716][ T5922] usb 6-1: USB disconnect, device number 14
[ 1945.994048][ T3602] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[ 1946.079060][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1946.101611][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1946.363300][ T3602] usb 6-1: Using ep0 maxpacket: 8
[ 1946.516939][ T3602] usb 6-1: config index 0 descriptor too short (expected 74, got 45)
[ 1946.542277][ T3602] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[ 1946.785794][ T3602] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[ 1946.868696][ T4593] Bluetooth: hci4: ACL packet for unknown connection handle 200
[ 1946.911880][ T3602] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[ 1946.966823][ T5521] loop2: detected capacity change from 0 to 7
[ 1946.977754][ T5521]  loop2:
[ 1946.980807][ T5521] loop2: partition table partially beyond EOD, truncated
[ 1947.089632][ T3602] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[ 1947.134452][ T3602] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1947.319902][ T3602] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1947.377349][ T3602] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1947.729825][ T5922] usb 4-1: USB disconnect, device number 20
[ 1947.827684][ T3602] usb 6-1: GET_CAPABILITIES returned 0
[ 1947.833267][ T3602] usbtmc 6-1:16.0: can't read capabilities
[ 1948.053599][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9549'.
[ 1950.178113][ T3602] usb 6-1: USB disconnect, device number 15
[ 1976.127004][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1976.133425][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2037.561644][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2037.568243][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2099.007777][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2099.014254][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2160.437818][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2160.445713][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 2206.525477][ T6654] kworker/0:8 (6654) used greatest stack depth: 13080 bytes left
[ 2221.887483][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.894021][ T1302] ieee802154 phy1 wpan1: encryption failed: -22