last executing test programs:

19m10.588768222s ago: executing program 4 (id=463):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0, 0x0, 0x20000000}, 0x18)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/35)

19m10.320847426s ago: executing program 4 (id=466):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xd1)
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="020000", @ANYBLOB], 0x2c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019640)=""/102392, 0x18ff8)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="34010000", @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x41)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff80700"/28, 0x1c)
syz_init_net_socket$ax25(0x3, 0x2, 0x1)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bond\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0xb0}}, 0x0)

19m6.216292063s ago: executing program 4 (id=472):
syz_emit_ethernet(0x0, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000300))
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x8, 0x6, 0x34325842, 0x4, 0x6bb, 0xffffffff, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5}})
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x410001, 0x2, 0x4})
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000140)=0x2)

19m4.470330865s ago: executing program 4 (id=476):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/146, &(0x7f0000000000)=0x92)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
pipe2$9p(0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB])
mkdir(0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r3, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000002480)=""/9, 0x9}, {&(0x7f00000024c0)=""/225, 0xe1}, {&(0x7f00000025c0)=""/4096, 0x1000}, {&(0x7f00000035c0)=""/139, 0x8b}], 0x4}}], 0x1, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
name_to_handle_at(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@isofs={0x14, 0x1, {0x5, 0x5, 0x7, 0x10000, 0x0, 0x6}}, &(0x7f0000000280), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)

19m4.060605192s ago: executing program 4 (id=478):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x6c, 0xf9, 0x6b, 0x10, 0x9e8, 0x62, 0x80f2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf0, 0x3e, 0xfc}}]}}]}}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80900, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYRES32=r0])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006)
ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x7})

19m0.688497475s ago: executing program 4 (id=482):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000001, 0x0, 0x7}]})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r8, 0x0, 0x0)
wait4(r8, 0x0, 0x20000000, 0x0)

18m59.462484162s ago: executing program 32 (id=482):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000003c0)={0x1, 0x0, [{0x40000001, 0x0, 0x7}]})
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r8, 0x0, 0x0)
wait4(r8, 0x0, 0x20000000, 0x0)

18m4.60055251s ago: executing program 0 (id=589):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xfe03, 0x200, 0x0, 0x3e8}, &(0x7f00000006c0)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000040)={0xc})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000624000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xd367c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0xffffffffffffffd5)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x1b00, 0x0, 0x3, 0x80}, &(0x7f0000000180), 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4], 0x5c}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000440)=ANY=[], 0x1f)
fcntl$dupfd(r7, 0x0, r7)

18m3.61962884s ago: executing program 0 (id=592):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000073013f000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = dup(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r4 = io_uring_setup(0x5ef3, &(0x7f00000002c0)={0x0, 0xe69, 0x0, 0x1, 0xa1})
r5 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x100000, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0xe}, {0x0, 0xffe0}}}, 0x24}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="56712bbd07f34a74", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000004)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r8 = syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
alarm(0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
alarm(0x1)
io_uring_enter(r8, 0x154c, 0xef91, 0x48, 0x0, 0x0)
mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil)

17m59.768546909s ago: executing program 0 (id=602):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080)
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x2000)
r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, <r3=>0x0, <r4=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
r6 = socket$inet6(0xa, 0x802, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa08c82553c54d08004500004000000000040690780a010102ac1414aa00010000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="bc000000907800001312b3e480a7612888fd71106c027deb3b010403b7000000"], 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x310, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0\x00', {0xff}, 'virt_wifi0\x00', {}, 0x0, 0x5}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x6]}, {0x0, [0x1, 0x6, 0x1], 0x0, 0x3}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e, 0x0, 0x6}, {0x0, 0x0, 0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x370)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0xc0189436, 0x0)
setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000200)=ANY=[@ANYRES8=r6, @ANYRESHEX=r6], 0x18)
connect$inet6(r6, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
socket$pppoe(0x18, 0x1, 0x0)
r9 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r9, &(0x7f0000000000)={0x18, 0x0, {0x15, @remote, 'bond0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r9, 0x40047452, &(0x7f0000000100)={0x18, 0x0, {0x3, @multicast, 'vlan1\x00'}})
sendmmsg$inet6(r6, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r10 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet_sctp(r10, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4622, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="1c49bcdb344efe4bc34547c67cae96dbbb45e9a18d4e83688a8230beab54ad3282c4eb0d05c5dcae2bfa1bd786252a5772a963094468ffaaf16d1a053bcf5323a9e9bda42fd8278924fcd249b98ad32616041f6ce47b4302000ac06ecd77d564f7e2060b3c64c35c4a013dff2a85a25053d00dd491cb2df28ff090c282191acebdea8a2fe9d84c4fce5a5f20da4f42695e0c2221c82f90eca401f67dc778fb11", 0xa0}], 0x1, 0x0, 0x0, 0x48060}], 0x1, 0x200000d0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000008c20bc8955c782e0085000000b200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000600)={r2, r2, 0x0, 0x9, 0x9, 0xa, 0xee, 0x7, 0x3, 0x4, 0xd, 0xcf2})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[r5], 0x1, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}})
r11 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_SETCONFIGURATION(r11, 0x80045505, &(0x7f0000000000)=0x1)
write$dsp(0xffffffffffffffff, 0x0, 0x0)

17m57.278556594s ago: executing program 0 (id=606):
socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000080)=""/146, &(0x7f0000000000)=0x92)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0)
pipe2$9p(0x0, 0x0)
syz_pidfd_open(0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000000, 0x88}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(r2, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB, @ANYRESHEX, @ANYBLOB])
mkdir(0x0, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file1\x00', 0x0, 0x8}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r3, &(0x7f00000037c0), 0x0, 0x2, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x20, 0x72, 0x7e3bfe4fa73db39f, 0x0, 0x0, {}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}]}, 0x20}}, 0x0)
mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0)
r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001)
name_to_handle_at(r1, &(0x7f0000000180)='./file1\x00', &(0x7f0000000240)=@isofs={0x14, 0x1, {0x5, 0x5, 0x7, 0x10000, 0x0, 0x6}}, &(0x7f0000000280), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300))
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2)

17m56.47944581s ago: executing program 0 (id=610):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000480)={0x0, 0x9f}, &(0x7f00000004c0)=0x8)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x20001}, 0x10) (fail_nth: 1)

17m54.069313569s ago: executing program 0 (id=614):
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x500040, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000100)={0x1, 0x1})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400050000010000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0x20000080)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

17m52.361940628s ago: executing program 33 (id=614):
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x500040, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000100)={0x1, 0x1})
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400050000010000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5)
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, 0x0, 0x20000080)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0)
syz_fuse_handle_req(r1, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0)

12m18.068862365s ago: executing program 3 (id=1335):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000f80900008500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x50)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38)

12m17.017850012s ago: executing program 3 (id=1338):
r0 = userfaultfd(0x1)
r1 = creat(&(0x7f0000000440)='./file0\x00', 0x64)
open_by_handle_at(r1, 0x0, 0x830200)
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6f}, 0x2c)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x7d9})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2})
r8 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x22280, 0x0)
ioctl$IOMMU_VFIO_CHECK_EXTENSION(r8, 0x3b65, 0x3)

12m15.419442963s ago: executing program 3 (id=1341):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4)
syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_capability(0x0, 0x0, &(0x7f0000000080)=@v2={0x2000000, [{0x0, 0x6}, {0x83e, 0x40}]}, 0x14, 0x1)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

12m14.370950599s ago: executing program 3 (id=1346):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

12m14.005012764s ago: executing program 3 (id=1349):
mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='gfs2\x00', 0x5, 0x0)

12m13.612983029s ago: executing program 3 (id=1353):
chown(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
close_range(r1, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)

12m12.417313645s ago: executing program 34 (id=1353):
chown(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x800)
r1 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, r3, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}})
close_range(r1, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)

2m42.259249851s ago: executing program 7 (id=3050):
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x100047ffffa, 0x122c43)
socket$nl_audit(0x10, 0x3, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0)

2m40.50160765s ago: executing program 7 (id=3057):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4)
sendmmsg$alg(r4, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000280)="4d6abafe26e0ed9e5d7a981f304ef2299086fc8630737e7c5bcc7f20596a2416ae27f012d759d1b5de8757704db50515dc2b78b32eb877ae6adc5f844d49dcc079dc4cb9fa6ba8e14452f31aaf765873edbcae393f1a64f02621cce2f390d08bbdf4adc448bab595b7ad48de0ea9a17c4f85db6cbdf93f10af", 0x79}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810)

2m39.226267276s ago: executing program 7 (id=3060):
syz_emit_ethernet(0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c00fe8000000000002000e4ff0000"], 0x0)

2m39.067798883s ago: executing program 7 (id=3062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200002)

2m37.278963198s ago: executing program 7 (id=3066):
openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x802, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ptrace$peekuser(0x3, r0, 0xe170)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7, 0x40, 0x8ad, 0x9, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x66, 0x0, 0x10, 0x29, 0x0, @remote, @loopback, {[@rr={0x7, 0x13, 0x2c, [@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @generic={0x86, 0xa, "163cf0a99e9692a8"}]}}}}})
socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8, @ANYBLOB="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"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3b}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m36.085489144s ago: executing program 7 (id=3068):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mlockall(0x2)
brk(0x75555ede6001)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2050)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101481, 0x0)
write$FUSE_ENTRY(r3, 0x0, 0x300)

2m20.872243784s ago: executing program 35 (id=3068):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mlockall(0x2)
brk(0x75555ede6001)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2050)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x9c33cbf2f2cca353}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101481, 0x0)
write$FUSE_ENTRY(r3, 0x0, 0x300)

11.25173837s ago: executing program 6 (id=3376):
lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0)
mprotect(&(0x7f00005f9000/0x2000)=nil, 0x2000, 0x5)
r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000001c0)=0x1c, 0x80400)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'dvmrp1\x00', &(0x7f0000000200)=@ethtool_rxfh={0x47, 0x1, 0x5, 0xd, 0x4, "598d26", 0x1}})
lsm_get_self_attr(0x64, &(0x7f0000000040)={0x0, 0x0, 0xd1, 0xb1, ""/177}, &(0x7f0000000140)=0xd1, 0x1)

10.963199765s ago: executing program 6 (id=3379):
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
r2 = dup(r0)
r3 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3c, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002ef1c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

8.856556629s ago: executing program 1 (id=3384):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x10000002}, 0x18)
syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x200002)

8.536611378s ago: executing program 2 (id=3385):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0xf7}, 0x8)

8.486707374s ago: executing program 8 (id=3386):
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x42c, r3, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_TX_RATES={0x228, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x2, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x5, 0x9}, {0x7, 0x2}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x8}, {0x7, 0x6}, {0x5}, {0x2, 0x9}, {0x6, 0x1}, {0x3, 0x9}, {0x2, 0xa}, {0x4, 0x1}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6}, {0x2, 0x1}, {0x5, 0x2}]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x2}, {0x5, 0xa}, {0x3, 0x6}, {0x3, 0x9}, {0x3, 0x9}, {0x1, 0x7}, {0x3, 0xa}, {0x7, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x9}, {0x6, 0x8}, {0x5, 0x7}, {0x1, 0x6}, {0x1}, {0x3, 0x3}, {0x2, 0x1}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x6}, {0x3, 0x9}, {0x5, 0xa}, {0x0, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x5, 0x6}, {0x1}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x4, 0x8}, {0x6, 0xa}, {0x7, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x2, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x7}, {0x3, 0xa}, {0x7, 0x3}, {0x5, 0x5}, {0x3, 0x4}, {0x0, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xe, 0x5, 0x2, 0xfffd, 0x67, 0x10, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x400, 0x5, 0x4, 0x9, 0x8, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x48, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x24, 0x12, 0x12, 0x30, 0x24, 0xb, 0x9, 0x5, 0x30, 0x1b, 0x2, 0x3, 0xc, 0x9, 0x30, 0x1b, 0x9]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x2, 0x5}, {0x6, 0xa}, {0x7, 0x6}, {0x3, 0x7}, {0x6, 0x3}, {0x3, 0x7}, {0x7, 0x3}, {0x0, 0x4}, {0x7, 0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x5, 0xaa6, 0xdf61, 0x81, 0x77, 0xe]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x1c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x1b, 0x24, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x1b, 0xc, 0xc, 0x5, 0x0, 0x18, 0x12, 0x9, 0x5, 0x9, 0x1b, 0x4, 0x48, 0x2, 0x24, 0x6, 0x6c, 0x2963fcaf8e4a0a26, 0xc, 0x48, 0xb, 0x5, 0x75, 0x1b, 0x6, 0x6, 0x2, 0x3, 0x60]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6, 0x4, 0xb, 0x30, 0x60, 0xb, 0x60, 0x16, 0x13, 0x1a, 0xc, 0x18, 0x6, 0x12, 0x4, 0x16, 0x3, 0x24, 0x12, 0x1b]}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x19, 0x1, [0x48, 0x48, 0x3, 0x9, 0xc, 0x5, 0x9, 0x48, 0xc, 0x24, 0x5, 0x1b, 0x36, 0x12, 0x9, 0x12, 0x16, 0x18, 0x4b, 0xb, 0x16]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1, 0x2000, 0x6, 0x8, 0x9, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x0, 0x3, 0x0, 0xc93c, 0x5, 0xa, 0x1]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x1, 0x6}, {0x0, 0x4}, {0x7, 0x6}, {0x1, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x6}, {0x6, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x4}, {0x7, 0x4}, {0x0, 0x7}, {0x7, 0x5}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x6}, {0x5, 0x2}, {0x6, 0x8}, {0x2}, {0x6, 0x16}, {0x4}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x3}, {0x7, 0x3}, {0x5, 0x9}, {0x0, 0x8}, {0x7, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x2, 0x5}, {0x7, 0x6}, {0x7, 0x9}, {0x7, 0x7}, {0x4, 0x2}, {}, {0x1, 0x2}, {0x6, 0x5}, {0x1, 0x6}, {0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x2}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0xa}, {0x1, 0x9}, {0x1, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x1, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x7}, {0x5, 0xa}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x28, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x6, 0xfff7, 0x3, 0x8, 0x2, 0x7, 0xa7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0xfffc, 0x4, 0x2, 0x5, 0x9, 0x2, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xc3f, 0x7, 0x81, 0x4, 0x0, 0x5, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x150, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x18, 0x18, 0x12, 0x36, 0x1, 0x6c]}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x7, 0x8}, {0x1, 0x8}, {0x4, 0x7}, {0x3}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0x8}, {0x1, 0x6}, {0x1, 0x4}, {0x2}, {0x5, 0xa}, {0x3, 0x2}, {0x7, 0x5}, {0x5, 0x8}, {0x0, 0x1}, {0x5}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x0, 0x4}, {0x2, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x1, 0x7}, {0x7, 0x8}, {0x6, 0x2}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x3}, {0x7, 0x1}, {0x6, 0x9}, {0x0, 0x7}, {0x2, 0x5}, {0x5, 0x9}, {0x1}, {0x1, 0x5}, {0x3, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x7, 0x2, 0x6, 0x3, 0x4b5b, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x1, 0x8, 0x1, 0x12f9, 0x5144, 0x2]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0x1}, {0x6, 0x5}, {0x5, 0x7}, {0x3, 0x6}, {0x4, 0x4}, {0x1, 0x5}, {0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x3}, {0x6, 0x5}, {0x0, 0x5}, {0x2, 0x7}, {0x2, 0x8}, {0x0, 0x1}, {0x1, 0x8}, {0x5, 0x7}, {0x6, 0x6}, {0x7, 0xa}, {0x4}, {0x7, 0x13}, {0x3, 0x7}, {0x4, 0x9}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x3}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x8}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x1b, 0x1, 0x60, 0xb, 0x16, 0x60, 0x48, 0x1b, 0xb, 0x2, 0x12, 0x1b, 0x2, 0x1b]}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x30, 0x0, 0x16, 0x32, 0x16, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x0, 0x4, 0x3, 0x830, 0xfe01, 0x1, 0xa]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf0fb, 0x9ac3, 0x3, 0x400, 0xffff, 0x7, 0x8000, 0x100]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x40, 0x5, 0x3, 0x1, 0xd1e, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, 0x42c}, 0x1, 0x0, 0x0, 0x8044}, 0x4005) (async)
fsetxattr$system_posix_acl(r2, &(0x7f0000000140)='system.posix_acl_access\x00', 0x0, 0x0, 0x2)

8.284043701s ago: executing program 2 (id=3387):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd='])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x240000c0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)

8.112783805s ago: executing program 8 (id=3388):
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc", 0x3, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

7.85469361s ago: executing program 8 (id=3389):
keyctl$join(0x1, 0xfffffffffffffffd)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
close(0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
r3 = add_key$keyring(&(0x7f0000000240), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000000)="30800201", 0x1001, r3)

6.66884125s ago: executing program 8 (id=3390):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000001500009e000040"])
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4a, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r7, 0x0, 0x7}, 0x18)
socket(0x28, 0x803, 0x0)
syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0)
mkdir(0x0, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x4)
writev(r8, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000040)="abd9", 0x2}], 0x2)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']})
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r9=>0x0}, 0x2020)
unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x200)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r9, {0x7, 0x1f, 0x0, 0x20140318, 0x627f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x6, {0x5, 0x0, 0xfffffffffffffffb, 0x0, 0x4, 0x0, {0x1, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x3, 0x4, 0x1000, 0xfffffffe, 0xee00, 0xee01, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0})

6.354190625s ago: executing program 6 (id=3391):
syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000856)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0)
sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x10)

6.283752888s ago: executing program 2 (id=3392):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x0, 0x2}, 0xe)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil)
eventfd(0x0)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8, 0x10, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x22f, &(0x7f0000000200)={0x0, 0x0, 0x10000, 0x0, 0x100002d0}, 0x0, &(0x7f0000000040)=<r2=>0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x6, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0xffffffffffffffff], 0x1, 0x0, 0x1, {0x0, r3}})
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000fc0)=0x2000003, 0x4)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000000)=""/1, 0x1, 0xc24acb3efee62aae, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x4, @private1, 0x4}, 0x80)
r4 = syz_io_uring_setup(0x83b, &(0x7f0000000d40)={0x0, 0x1484, 0x800, 0x0, 0xe4}, &(0x7f0000000d00)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r8, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4)
socket$inet(0x2, 0x3, 0x3)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90)
write(r7, &(0x7f0000000000)="2e000400010002", 0x7)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)

6.03302982s ago: executing program 5 (id=3393):
socket$unix(0x1, 0x5, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00')
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e", 0x1ed, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0)
syz_open_dev$loop(&(0x7f0000000080), 0x100047ffffa, 0x122c43)
socket$nl_audit(0x10, 0x3, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0)

5.458863394s ago: executing program 1 (id=3394):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff0001}, [@call={0x85, 0x0, 0x0, 0x23}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x5, {0x3, 0x1, 0x0, 0x400000000000000, 0xfffffffd, 0x0, {0x1, 0x8, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x7, 0xc000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1001a}}, 0x50)
fanotify_mark(0xffffffffffffffff, 0x10, 0x8001020, 0xffffffffffffffff, 0x0)
poll(0x0, 0x0, 0x100)
socket$nl_route(0x10, 0x3, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5ad6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90c00000000cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde0caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1c83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db1085df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bee1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ecf8e26206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362371a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4671f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76b060000000000000095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc06127a450ed0dfa1410cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f01d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865638b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72093b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e500", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x8000000000000, 0x28dc, 0x0, 0x440000, 0x1, {0x1, 0xfffffffffffffffd, 0x0, 0x1000, 0xfffffffffffffffc, 0x100, 0x0, 0x0, 0x4, 0xc000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000005c0)='./file0/../file0/file0\x00')

5.359834818s ago: executing program 8 (id=3395):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
ioctl$KVM_S390_VCPU_FAULT(0xffffffffffffffff, 0x4004ae52, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r0)

5.219185975s ago: executing program 2 (id=3396):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4)
sendmmsg$alg(r4, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="9140a4bdea648a53aa2106b893d709c28a80626adee9be3050ded5cdd8b07ed1c91ec2a922bce0ce9acf5e5980f5fa9d10fa8ba4993c2ba42fa741ec6c7e01fa267cf6337991d69ec91e5d24d2284d63da302f287dcf255c1dbc0770eb8dec6ee2eb516795eeef969834e4d1583c16fe40ec9b2dc9318af13c37d83e7c708166f76a8668388f82", 0x87}, {&(0x7f0000000280)="4d6abafe26e0ed9e5d7a981f304ef2299086fc8630737e7c5bcc7f20596a2416ae27f012d759d1b5de8757704db50515dc2b78b32eb877ae6adc5f844d49dcc079dc4cb9fa6ba8e14452f31aaf765873edbcae393f1a64f02621cce2f390d08bbdf4adc448bab595b7ad48de0ea9a17c4f85db6cbdf93f10af", 0x79}], 0x2, &(0x7f0000000380), 0x0, 0x895}], 0x1, 0x24000810)

4.223297824s ago: executing program 6 (id=3397):
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x9, 0x4}, 0x5, 0x0, &(0x7f0000000040)={{0x6, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0xff}})

4.124386571s ago: executing program 2 (id=3398):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x3c, r2, 0x101, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_BSS_BASIC_RATES={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48081}, 0x4850)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r3, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="f56b4427"], 0x8)
r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000))
sendto$inet(r4, &(0x7f0000000380)="8c717050be0fcbb40e78a55aacf7a713707ea2c7e419802cee096619ab8c2c12db2391ce917a6edfb12bba2556169462bd8fbf2aba559dc000865c03cbf27bcf3478902512a41e60900425856e8aa774c6e064127737f0803246c16edcdfb1f8c650d47f00ebc03975e7d67c62377c0452e96464a0eec41bd09eb08b70e4a82884c502ce8602e6", 0x87, 0x4000, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)

4.077232659s ago: executing program 1 (id=3399):
syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000140)={0x0, 0x0, 0x4000000081, 0xfffffffffffffff9})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5dfc", 0x3, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.009776103s ago: executing program 5 (id=3400):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2, 0x0, 0x5}, 0x18)
getresuid(0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100007144000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)

3.816823829s ago: executing program 2 (id=3401):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e2b4fc4068a11806a4e3010203010902120001000000000904d9"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000091401"], 0x18}}, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141121)
mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000)
socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x44084)
syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, &(0x7f00000002c0)={0x20, 0xe, 0xae, {0xae, 0x23, "550a8588796bfcecfc72fbcb0be5e1ed22fa0d2ac0ed8bbcb7b5a77938540663ad2ccc8bd657415ceb46c155bb42a37212630d396295727b6019bb0f47e77c16813b257a7ee2034052ee7ec9918e1689598a3c1add7ba9768e9f59d346bff27d122b8d8f92f1f69935adb1d296c4600da19a6912a54602996222aa4e02c8082c74bc83eb7bbf9194cc39ff8147b190f8017a3c9a3a633cd06bcb2778098f84316a32aa1a35f7203f695f096f"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f00000000c0)={0x0, 0x22, 0x17, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_012={0x2, 0x1, 0x4c218b92515e2b02, "03ae"}, @global=@item_012={0x0, 0x1, 0x5}, @main=@item_012={0x1, 0x0, 0x8, '-'}, @main=@item_012={0x0, 0x0, 0x9}, @local=@item_4={0x3, 0x2, 0x4, "a96f29b9"}, @global=@item_4={0x3, 0x1, 0x6, "23e1837f"}, @main=@item_4={0x3, 0x0, 0xb, "920b4ecd"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x7, 0x1, {0x22, 0x163}}}}, &(0x7f0000000580)={0x2c, &(0x7f00000003c0)={0x20, 0x17, 0x77, "4842f9d989d868afa60796f2cf6d0fe9668a13cbe95d3123374376d1958085774955f9ca4ed7802727b2239a1c7150bd3016615a130f6e7ed753780738dc4746d7eb8efecbbf94fdf1cec5e2d7cf207b4e5e07a1c59cb7b8b62533aca3977ddc69eb3ec4ce8dc980896d350ce29678f7064afa78c2ed69"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000004c0)={0x20, 0x1, 0x63, "479b09f49dad33bbed04199bf96d28c6141d4bc3b98f81aea559ef1beb00b4ff52b2f9e1cc2f75d8db02f65858b3a90ce3c9dc1df5b50ce22190700e1d7476f20a249950bbe88d6871d93ca140d0e85be4bb4b3ff2445a88b8bec768b50276267247df"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}})
socket$nl_route(0x10, 0x3, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0)

3.816437898s ago: executing program 6 (id=3402):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup(r1)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd='])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r3, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40)
shutdown(r3, 0x1)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8)
r4 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}})
io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x240000c0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)

3.65462024s ago: executing program 5 (id=3403):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x20800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", <r1=>0xffffffffffffffff})
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x2e0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0x0, 0xff000000, 0x4, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth1_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, <r6=>0xffffffffffffffff})
r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r8=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r9, <r10=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r10, <r11=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"31ec861d1bdbb2f004dd52ad43b7db21214d0677cda624d9b86d05e119883e3f", r11})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r12=>r7}, './file0\x00'})
sendmsg$SOCK_DIAG_BY_FAMILY(r12, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x440}, 0x1, 0x0, 0x0, 0x40044}, 0x4004801)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
ioctl$TIOCVHANGUP(r2, 0x5437, 0x0)
syz_open_dev$loop(&(0x7f0000000340), 0x7fff, 0x10b101)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f00000003c0)={[{@redirect_dir_nofollow}, {@metacopy_off}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r13 = inotify_init()
creat(&(0x7f00000000c0)='./file0\x00', 0x80)
inotify_add_watch(r13, &(0x7f0000000080)='./file0\x00', 0x4000cdd)
unlink(&(0x7f0000000000)='./file0\x00')

2.915878951s ago: executing program 5 (id=3404):
socket(0x8, 0x3, 0x3a)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
prlimit64(0x0, 0xe, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x36f3)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f0000000140)={0x80000000009, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
r3 = openat$smackfs_logging(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
writev(r3, &(0x7f0000000a00)=[{&(0x7f0000000800)='3', 0x1}, {0x0}], 0x2)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x7, 0x0, &(0x7f0000000380)="8fe9334364e9da23635da62a67f3de65f3e9aa4752f8aa2958a967185dc6d85d20c3317a6d183f66b82665ecb640afca8a77b29b45c847f267c461371f0cf87db4bf1f9412eed0a12d29c4576ed1632f3fcfc53942af1a53ac03e18693ab443257062dd651194e3718b997d5fc5ca30666a2e9664d04b782258c9a35510191edee1737366e4ab0b85d3c932607020ecf"})
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x80200, 0x0)
ioctl$COMEDI_CMDTEST(r5, 0x8050640a, &(0x7f0000000300)={0xffffffff, 0x8, 0x80, 0x6, 0x0, 0x9, 0x80, 0x5, 0x0, 0x4, 0xffffffff, 0x8, &(0x7f0000000040)=[0x32c0000], 0x1, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.41446183s ago: executing program 1 (id=3405):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe"], 0x98}}, 0x0)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
socket(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
unshare(0x26020480)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r4, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1a, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000480000000000000000085000000b5000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x11a, 0x23, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xd, 0x62ca, 0x1f, 0xfffffffffffffffd, 0x3, 0x7, 0x53, 0x10ecbc}, 0x0, 0x0, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0)
sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0xfdff)
socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.332896063s ago: executing program 6 (id=3406):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, r0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00')
lseek(r1, 0xffffffffffffffff, 0x1)
keyctl$chown(0x4, r0, 0x0, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={'\x00', 0xfff8, 0x8, 0x9, 0x1, 0x8, <r2=>0xffffffffffffffff})
prlimit64(r2, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000000)={0x1, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9930595c2cddcd07aee620a9a46577b92493bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e0014b2909b5e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f8d4ffffffffffffffb99e6b87de5f79d383d05bdaed400762a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"})
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0})
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21)
r6 = gettid()
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r6, 0x2, 0x5004)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]})
chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x2f7e, &(0x7f0000000180)=""/171)
splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)

1.113200473s ago: executing program 1 (id=3407):
syz_open_dev$video(&(0x7f0000000040), 0x9, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000400)='ns/user\x00')
syz_io_uring_setup(0x386, &(0x7f0000000080)={0x0, 0x0, 0x13100, 0x2, 0x2de}, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x6, 0x2000000, 0x0, 0xc8c9, 0x4002, 0x5e51, 0xfffffffffffffffe, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x2, 0x0, 0x5, 0x5}, 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f041})

1.060962516s ago: executing program 8 (id=3408):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@security={'security\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0x2, 0x4, 0x3, 0x0, 0x4], 0x4, 0x6}, {0x2, [0x4, 0x0, 0x6, 0x6, 0x4, 0x6], 0x6, 0x1}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xb7, 0x28, "8b4339262144083f90283c71f224b2fcee2f47d0d3735bee809d59439ece"}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xfff1, 0xffff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310)
clock_adjtime(0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x2, &(0x7f000091e000/0x2000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xe}, 0x94)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=<r5=>0xffffffffffffffff, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
rename(0x0, &(0x7f0000000100)='./file0\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0xffffffffffffffee, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1f748e770a3342181b925a39d29ddfd89e2a37eb3202f771a802d0373e3f1f351f86a459af687b5c56c44b385ad90fd6c04db0f41b64a7c1b9d1be495d5477040da573586f11", @ANYRES64=0x0], 0x44}}, 0x0)
ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100))
openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
write$cgroup_pid(r1, &(0x7f00000000c0), 0x40)
bind$alg(0xffffffffffffffff, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800)

333.082261ms ago: executing program 5 (id=3409):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x80, {0x0, 0x0, 0x0, r1, {0xffff, 0xfff1}, {0x8, 0x2}, {0xffff, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040801}, 0x20004014)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x103001, 0x0)

250.745086ms ago: executing program 1 (id=3410):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x2, 0x1, 0x2, 0xa, 0xc53e, 0x8}, 0x20) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_connect$cdc_ncm(0x3, 0x90, &(0x7f0000000540)=ANY=[@ANYBLOB="12015000020000082505a1a440000102030109027e00020176c0080904000001020d0000062406000146052400050b76800406241ac963180524150b000c241b0900be000505040004042402000c241b0800ff03187fffff00090581030800080102020d000009058202100040073f090503021000280007"], &(0x7f00000007c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x9, 0x3, 0xb, 0x8, 0x8}, 0x1f, &(0x7f0000000640)={0x5, 0xf, 0x1f, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x1d, "7a6c214c77e5d6d2f12ba825125500c4"}]}, 0x5, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2c01}}]})
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r2, &(0x7f00000000c0)={0x14, &(0x7f0000000040)={0x20, 0x10, 0x39, {0x39, 0xd, "a9b1d130c34cb35f38a9a58e40536c3b5cd93276f43d34623751e2959bc3732ec7375b4cf210ff617345bc9a53c685eeac402686db723a"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0x18, 0xf2, "ae238242004d59e4a8dae194584ab607a719a2d1c7cbc14b701969960fa5d7a47b80b580dc45834943f4105b6a2094d6239800b2ee53b9a428f82e06bafd9b2baa1d772981e59254b1b2ff1f11e845f323bd8fd596274f0cb70b5121bce978a7e3d7f7f07fb223e8e6318a55c33d0d637751377bdfc78453d0f81ce4580ba37cc1552e5ff9ec553fa635c33fb48bbf9df59a5510061b07ee2fa9b87f1574eb8c698dc34f1ada5af179e822965bc984dfb71deb85405f1190c43e77e91a055dc80db9364420e821894c3e1ebf19bdf03ce1249652243bcbbf248ab0fbc2a8588383e632436a3c990babebc07aa1600dc1c7fb"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0xb740, 0x800, 0x800, 0x7ff, 0x7, 0x4, 0x2, 0x9, 0x0, 0xb13c, 0x401, 0x8}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x46a3}, &(0x7f0000000380)={0x20, 0x83, 0x2}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000440)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x4, 0x4, {0x4, 0x1, "a7ea"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
unshare(0x22020400) (async)
r3 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
listen(r4, 0x0) (async)
accept4$unix(r4, 0x0, 0x0, 0x80800)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}}, 0xb8}}, 0x0)
add_key(0x0, 0x0, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc)
r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7)
sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})

0s ago: executing program 5 (id=3411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x1}, @TCA_FQ_RATE_ENABLE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044004}, 0x0)
r2 = openat$mixer(0xffffff9c, &(0x7f0000000100), 0xa000, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r2, 0x80044dff, &(0x7f0000000140))
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18210000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000c200000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0}, 0x94)
socket$can_j1939(0x1d, 0x2, 0x7)

kernel console output (not intermixed with test programs):

___ratelimit+0x10/0x10
[ 1240.682499][T16573]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1240.682534][T16573]  ? __pfx__printk+0x10/0x10
[ 1240.682580][T16573]  ? __pfx___might_resched+0x10/0x10
[ 1240.682607][T16573]  ? fs_reclaim_acquire+0x7d/0x100
[ 1240.682640][T16573]  should_fail_ex+0x414/0x560
[ 1240.682670][T16573]  should_failslab+0xa8/0x100
[ 1240.682696][T16573]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1240.682717][T16573]  ? mgmt_pending_new+0x65/0x1e0
[ 1240.682753][T16573]  mgmt_pending_new+0x65/0x1e0
[ 1240.682788][T16573]  mgmt_pending_add+0x35/0x140
[ 1240.682822][T16573]  start_discovery_internal+0x480/0x700
[ 1240.682857][T16573]  hci_mgmt_cmd+0x9c9/0xef0
[ 1240.682904][T16573]  hci_sock_sendmsg+0x6ca/0xef0
[ 1240.682940][T16573]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[ 1240.682965][T16573]  ? sched_clock_cpu+0x74/0x430
[ 1240.682986][T16573]  ? psi_task_switch+0x318/0x6d0
[ 1240.683014][T16573]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1240.683036][T16573]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[ 1240.683067][T16573]  __sock_sendmsg+0x21c/0x270
[ 1240.683099][T16573]  sock_write_iter+0x258/0x330
[ 1240.683127][T16573]  ? __pfx_sock_write_iter+0x10/0x10
[ 1240.683166][T16573]  ? bpf_lsm_file_permission+0x9/0x20
[ 1240.683189][T16573]  ? security_file_permission+0x75/0x290
[ 1240.683225][T16573]  vfs_write+0x54b/0xa90
[ 1240.683252][T16573]  ? __pfx_sock_write_iter+0x10/0x10
[ 1240.683277][T16573]  ? __pfx_vfs_write+0x10/0x10
[ 1240.683312][T16573]  ? __fget_files+0x2a/0x420
[ 1240.683348][T16573]  ksys_write+0x145/0x250
[ 1240.683373][T16573]  ? __pfx_ksys_write+0x10/0x10
[ 1240.683390][T16573]  ? rcu_is_watching+0x15/0xb0
[ 1240.683421][T16573]  ? do_syscall_64+0xbe/0x3b0
[ 1240.683451][T16573]  do_syscall_64+0xfa/0x3b0
[ 1240.683476][T16573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.683495][T16573]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1240.683523][T16573]  ? clear_bhb_loop+0x60/0xb0
[ 1240.683550][T16573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1240.683579][T16573] RIP: 0033:0x7f479ad8ebe9
[ 1240.683602][T16573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1240.683619][T16573] RSP: 002b:00007f479bc80038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1240.683643][T16573] RAX: ffffffffffffffda RBX: 00007f479afb6090 RCX: 00007f479ad8ebe9
[ 1240.683659][T16573] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000007
[ 1240.683673][T16573] RBP: 00007f479bc80090 R08: 0000000000000000 R09: 0000000000000000
[ 1240.683686][T16573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1240.683699][T16573] R13: 00007f479afb6128 R14: 00007f479afb6090 R15: 00007ffc671bfd58
[ 1240.683736][T16573]  </TASK>
[ 1241.736274][T16576] netlink: 'syz.1.2883': attribute type 6 has an invalid length.
[ 1242.324974][T16581] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2885'.
[ 1242.930538][    C0] vcan0: j1939_tp_rxtimer: 0xffff888025413000: rx timeout, send abort
[ 1242.946479][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888025413000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1245.065251][T16604] netlink: 360 bytes leftover after parsing attributes in process `syz.5.2893'.
[ 1248.525728][T16611] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1249.623622][T16619] IPv6: addrconf: prefix option has invalid lifetime
[ 1251.427831][T16614] Bluetooth: hci5: command 0x0406 tx timeout
[ 1251.957555][T16641] bridge_slave_0: left allmulticast mode
[ 1251.957579][T16641] bridge_slave_0: left promiscuous mode
[ 1251.975744][T16641] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1252.092531][T16641] bridge_slave_1: left allmulticast mode
[ 1252.128033][T16641] bridge_slave_1: left promiscuous mode
[ 1252.134117][T16641] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1252.225199][T16653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1252.237225][T16641] : (slave bond_slave_0): Releasing backup interface
[ 1252.266223][T16641] : (slave bond_slave_1): Releasing backup interface
[ 1252.391819][T16641] team0: Port device team_slave_0 removed
[ 1252.415798][T16641] team0: Port device team_slave_1 removed
[ 1252.426523][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1252.444080][T16641] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1252.462676][T16641] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1252.476970][T16641] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1252.623077][T16662] program syz.1.2909 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1252.638974][T15411] usb 7-1: new high-speed USB device number 60 using dummy_hcd
[ 1252.851017][T15411] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1252.888213][T15411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1252.907886][T15411] usb 7-1: Product: syz
[ 1252.917131][T15411] usb 7-1: Manufacturer: syz
[ 1252.932133][T15411] usb 7-1: SerialNumber: syz
[ 1252.953843][T15411] usb 7-1: config 0 descriptor??
[ 1253.026575][T15411] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1253.245788][T16677] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1253.253512][T16677] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1253.262664][T16677] bridge0: entered allmulticast mode
[ 1253.521834][T16687] FAULT_INJECTION: forcing a failure.
[ 1253.521834][T16687] name failslab, interval 1, probability 0, space 0, times 0
[ 1253.581865][T16687] CPU: 0 UID: 0 PID: 16687 Comm: syz.7.2918 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1253.581896][T16687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1253.581910][T16687] Call Trace:
[ 1253.581924][T16687]  <TASK>
[ 1253.581934][T16687]  dump_stack_lvl+0x189/0x250
[ 1253.581964][T16687]  ? __pfx____ratelimit+0x10/0x10
[ 1253.581988][T16687]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1253.582011][T16687]  ? __pfx__printk+0x10/0x10
[ 1253.582041][T16687]  ? __pfx___might_resched+0x10/0x10
[ 1253.582064][T16687]  ? fs_reclaim_acquire+0x7d/0x100
[ 1253.582094][T16687]  should_fail_ex+0x414/0x560
[ 1253.582122][T16687]  should_failslab+0xa8/0x100
[ 1253.582145][T16687]  __kmalloc_noprof+0xcb/0x4f0
[ 1253.582162][T16687]  ? tomoyo_mount_permission+0x27a/0x970
[ 1253.582187][T16687]  ? tomoyo_encode+0x28b/0x550
[ 1253.582218][T16687]  tomoyo_encode+0x28b/0x550
[ 1253.582248][T16687]  ? tomoyo_mount_permission+0x27a/0x970
[ 1253.582274][T16687]  tomoyo_mount_permission+0x331/0x970
[ 1253.582307][T16687]  ? __pfx_tomoyo_mount_permission+0x10/0x10
[ 1253.582416][T16687]  security_sb_mount+0xec/0x350
[ 1253.582450][T16687]  path_mount+0xbc/0xfe0
[ 1253.582471][T16687]  ? user_path_at+0x44/0x60
[ 1253.582496][T16687]  ? kmem_cache_free+0x18f/0x400
[ 1253.582528][T16687]  __se_sys_mount+0x317/0x410
[ 1253.582559][T16687]  ? __pfx___se_sys_mount+0x10/0x10
[ 1253.582581][T16687]  ? rcu_is_watching+0x15/0xb0
[ 1253.582610][T16687]  ? do_syscall_64+0xbe/0x3b0
[ 1253.582630][T16687]  ? __x64_sys_mount+0x20/0xc0
[ 1253.582657][T16687]  do_syscall_64+0xfa/0x3b0
[ 1253.582677][T16687]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1253.582699][T16687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.582720][T16687]  ? clear_bhb_loop+0x60/0xb0
[ 1253.582745][T16687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1253.582766][T16687] RIP: 0033:0x7f4c3738ebe9
[ 1253.582785][T16687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1253.582803][T16687] RSP: 002b:00007f4c355ee038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 1253.582827][T16687] RAX: ffffffffffffffda RBX: 00007f4c375b5fa0 RCX: 00007f4c3738ebe9
[ 1253.582842][T16687] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000
[ 1253.582857][T16687] RBP: 00007f4c355ee090 R08: 00002000000005c0 R09: 0000000000000000
[ 1253.582870][T16687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1253.582882][T16687] R13: 00007f4c375b6038 R14: 00007f4c375b5fa0 R15: 00007ffeba3cd968
[ 1253.582919][T16687]  </TASK>
[ 1254.835938][T14917] usb 7-1: USB disconnect, device number 60
[ 1255.356591][T16714] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1255.454915][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2928'.
[ 1258.408058][ T5905] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[ 1258.459389][T16761] can0: slcan on ttyS3.
[ 1258.546997][T16768] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1258.577941][ T5905] usb 3-1: Using ep0 maxpacket: 16
[ 1258.615617][ T5905] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1258.660195][T16761] can0 (unregistered): slcan off ttyS3.
[ 1258.770331][ T5905] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1258.840450][ T5905] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1258.902948][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1258.945969][ T5905] usb 3-1: Product: syz
[ 1258.996824][ T5905] usb 3-1: Manufacturer: syz
[ 1259.018125][ T5905] usb 3-1: SerialNumber: syz
[ 1259.312500][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2946'.
[ 1259.403557][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2945'.
[ 1259.501143][ T5905] usb 3-1: 0:2 : does not exist
[ 1259.518751][ T5905] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 1259.526431][T16784] FAULT_INJECTION: forcing a failure.
[ 1259.526431][T16784] name failslab, interval 1, probability 0, space 0, times 0
[ 1259.545570][T16784] CPU: 0 UID: 0 PID: 16784 Comm: syz.6.2945 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1259.545602][T16784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1259.545614][T16784] Call Trace:
[ 1259.545623][T16784]  <TASK>
[ 1259.545633][T16784]  dump_stack_lvl+0x189/0x250
[ 1259.545663][T16784]  ? __pfx____ratelimit+0x10/0x10
[ 1259.545686][T16784]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1259.545708][T16784]  ? __pfx__printk+0x10/0x10
[ 1259.545742][T16784]  ? __pfx___might_resched+0x10/0x10
[ 1259.545765][T16784]  ? fs_reclaim_acquire+0x7d/0x100
[ 1259.545796][T16784]  should_fail_ex+0x414/0x560
[ 1259.545825][T16784]  should_failslab+0xa8/0x100
[ 1259.545851][T16784]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1259.545871][T16784]  ? tcf_block_get_ext+0x140/0x17d0
[ 1259.545906][T16784]  tcf_block_get_ext+0x140/0x17d0
[ 1259.545953][T16784]  tcf_block_get+0x67/0xa0
[ 1259.545988][T16784]  ? __pfx_tcf_chain_head_change_dflt+0x10/0x10
[ 1259.546021][T16784]  hfsc_change_class+0x174e/0x21f0
[ 1259.546066][T16784]  ? __pfx_hfsc_change_class+0x10/0x10
[ 1259.546095][T16784]  ? lockdep_rtnl_is_held+0x26/0x40
[ 1259.546116][T16784]  ? qdisc_lookup+0x179/0x6d0
[ 1259.546140][T16784]  tc_ctl_tclass+0xaa0/0x1500
[ 1259.546175][T16784]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1259.546211][T16784]  ? __pfx_tc_ctl_tclass+0x10/0x10
[ 1259.546235][T16784]  ? rcu_is_watching+0x15/0xb0
[ 1259.546262][T16784]  ? __mutex_lock+0xa6d/0xe80
[ 1259.546285][T16784]  ? __mutex_lock+0x51b/0xe80
[ 1259.546345][T16784]  ? __pfx_tc_ctl_tclass+0x10/0x10
[ 1259.546368][T16784]  rtnetlink_rcv_msg+0x779/0xb70
[ 1259.546400][T16784]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1259.546422][T16784]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1259.546445][T16784]  ? ref_tracker_free+0x63a/0x7d0
[ 1259.546466][T16784]  ? __copy_skb_header+0xa7/0x550
[ 1259.546491][T16784]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1259.546512][T16784]  ? __skb_clone+0x63/0x7a0
[ 1259.546541][T16784]  netlink_rcv_skb+0x205/0x470
[ 1259.546572][T16784]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1259.546601][T16784]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1259.546644][T16784]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1259.546671][T16784]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1259.546707][T16784]  netlink_unicast+0x75c/0x8e0
[ 1259.546748][T16784]  netlink_sendmsg+0x805/0xb30
[ 1259.546797][T16784]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1259.546836][T16784]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1259.546858][T16784]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1259.546887][T16784]  __sock_sendmsg+0x21c/0x270
[ 1259.546915][T16784]  ____sys_sendmsg+0x505/0x830
[ 1259.546954][T16784]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1259.547011][T16784]  ? import_iovec+0x74/0xa0
[ 1259.547045][T16784]  ___sys_sendmsg+0x21f/0x2a0
[ 1259.547080][T16784]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1259.547157][T16784]  ? __fget_files+0x2a/0x420
[ 1259.547180][T16784]  ? __fget_files+0x3a0/0x420
[ 1259.547214][T16784]  __x64_sys_sendmsg+0x19b/0x260
[ 1259.547245][T16784]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1259.547287][T16784]  ? __pfx_ksys_write+0x10/0x10
[ 1259.547316][T16784]  ? do_syscall_64+0xbe/0x3b0
[ 1259.547346][T16784]  do_syscall_64+0xfa/0x3b0
[ 1259.547367][T16784]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1259.547389][T16784]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.547447][T16784]  ? clear_bhb_loop+0x60/0xb0
[ 1259.547475][T16784]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1259.547495][T16784] RIP: 0033:0x7f5f4418ebe9
[ 1259.547516][T16784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1259.547534][T16784] RSP: 002b:00007f5f44f50038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1259.547559][T16784] RAX: ffffffffffffffda RBX: 00007f5f443b6090 RCX: 00007f5f4418ebe9
[ 1259.547576][T16784] RDX: 00000000000040c4 RSI: 0000200000000000 RDI: 0000000000000005
[ 1259.547590][T16784] RBP: 00007f5f44f50090 R08: 0000000000000000 R09: 0000000000000000
[ 1259.547604][T16784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1259.547616][T16784] R13: 00007f5f443b6128 R14: 00007f5f443b6090 R15: 00007ffd5b453bf8
[ 1259.547652][T16784]  </TASK>
[ 1260.083470][ T5905] usb 3-1: USB disconnect, device number 60
[ 1260.273223][T16788] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2948'.
[ 1260.527986][T15411] usb 7-1: new high-speed USB device number 61 using dummy_hcd
[ 1260.818121][T15411] usb 7-1: device descriptor read/64, error -71
[ 1261.466208][T15411] usb 7-1: new high-speed USB device number 62 using dummy_hcd
[ 1261.648038][T15411] usb 7-1: device descriptor read/64, error -71
[ 1261.717242][T16804] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1261.778961][T15411] usb usb7-port1: attempt power cycle
[ 1261.825462][T14917] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1261.978685][T14917] usb 2-1: device descriptor read/64, error -71
[ 1262.137860][T15411] usb 7-1: new high-speed USB device number 63 using dummy_hcd
[ 1262.181305][T15411] usb 7-1: device descriptor read/8, error -71
[ 1262.238131][T14917] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1262.377867][T14917] usb 2-1: device descriptor read/64, error -71
[ 1262.456670][T15411] usb 7-1: new high-speed USB device number 64 using dummy_hcd
[ 1262.498336][T14917] usb usb2-port1: attempt power cycle
[ 1262.518517][T15411] usb 7-1: device descriptor read/8, error -71
[ 1262.638470][T15411] usb usb7-port1: unable to enumerate USB device
[ 1262.878100][T14917] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1262.928542][T14917] usb 2-1: device descriptor read/8, error -71
[ 1262.993919][T16810] netlink: 'syz.2.2954': attribute type 1 has an invalid length.
[ 1263.014970][T16810] netlink: 208 bytes leftover after parsing attributes in process `syz.2.2954'.
[ 1263.095295][T16812] netlink: 'syz.7.2955': attribute type 1 has an invalid length.
[ 1263.106312][T16812] netlink: 208 bytes leftover after parsing attributes in process `syz.7.2955'.
[ 1263.178078][T14917] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1263.209063][T14917] usb 2-1: device descriptor read/8, error -71
[ 1263.318749][T14917] usb usb2-port1: unable to enumerate USB device
[ 1263.376354][T16820] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2957'.
[ 1266.570964][T16849] netlink: 'syz.1.2964': attribute type 10 has an invalid length.
[ 1266.594331][T16849] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1266.620151][T16849] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1266.674707][T16849] bond0: entered promiscuous mode
[ 1266.690409][T16849] bond_slave_0: entered promiscuous mode
[ 1266.696546][T16849] bond_slave_1: entered promiscuous mode
[ 1266.728274][T16849] batadv0: entered promiscuous mode
[ 1267.528619][T16859] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2967'.
[ 1267.605129][T16849] netlink: 'syz.1.2964': attribute type 1 has an invalid length.
[ 1267.649050][T16849] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2964'.
[ 1268.940340][T16882] could not allocate digest TFM handle 
[ 1269.511242][T16894] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2974'.
[ 1269.874428][T16896] fuse: Unknown parameter 'f¤'
[ 1272.370917][T16914] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1273.118058][T14917] usb 7-1: new high-speed USB device number 65 using dummy_hcd
[ 1273.225868][T16931] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2986'.
[ 1273.278301][T14917] usb 7-1: Using ep0 maxpacket: 16
[ 1273.293356][T14917] usb 7-1: config 0 has an invalid interface number: 49 but max is 0
[ 1273.305938][T14917] usb 7-1: config 0 has no interface number 0
[ 1273.314654][T14917] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[ 1273.403725][T14917] usb 7-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xCB, changing to 0x8B
[ 1273.426397][T14917] usb 7-1: config 0 interface 49 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1274.179855][T14917] usb 7-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1274.226338][T14917] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[ 1274.259827][T14917] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1274.284219][T14917] usb 7-1: Product: syz
[ 1274.301903][T14917] usb 7-1: Manufacturer: syz
[ 1274.327057][T14917] usb 7-1: SerialNumber: syz
[ 1274.350531][T14917] usb 7-1: config 0 descriptor??
[ 1274.370694][T16924] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[ 1275.027799][T14917] usb 7-1: USB disconnect, device number 65
[ 1275.540960][T16939] Invalid source name
[ 1275.545284][T16939] UBIFS error (pid: 16939): cannot open "/dev/sg0", error -22
[ 1275.560382][T16939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2989'.
[ 1277.061961][T14917] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[ 1277.327314][T14917] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1277.521354][T14917] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1277.544641][T14917] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1277.583424][T14917] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1277.628297][T14917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1277.648109][T14917] usb 3-1: Product: syz
[ 1277.655948][T16969] FAULT_INJECTION: forcing a failure.
[ 1277.655948][T16969] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1277.677336][T16966] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1277.705022][T14917] usb 3-1: Manufacturer: syz
[ 1277.705096][T14917] usb 3-1: SerialNumber: syz
[ 1277.708006][T16969] CPU: 1 UID: 0 PID: 16969 Comm: syz.1.2998 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1277.708035][T16969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1277.708049][T16969] Call Trace:
[ 1277.708058][T16969]  <TASK>
[ 1277.708068][T16969]  dump_stack_lvl+0x189/0x250
[ 1277.708098][T16969]  ? __pfx____ratelimit+0x10/0x10
[ 1277.708122][T16969]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1277.708146][T16969]  ? __pfx__printk+0x10/0x10
[ 1277.708173][T16969]  ? __might_fault+0xb0/0x130
[ 1277.708207][T16969]  should_fail_ex+0x414/0x560
[ 1277.708236][T16969]  _copy_from_iter+0x1db/0x16f0
[ 1277.708275][T16969]  ? policy_nodemask+0x27c/0x720
[ 1277.708297][T16969]  ? __pfx__copy_from_iter+0x10/0x10
[ 1277.708330][T16969]  ? set_page_refcounted+0xa0/0x1e0
[ 1277.708354][T16969]  ? page_copy_sane+0x4e/0x280
[ 1277.708382][T16969]  copy_page_from_iter+0xdd/0x170
[ 1277.708414][T16969]  tun_get_user+0x1c4d/0x3ce0
[ 1277.708444][T16969]  ? tun_get_user+0x693/0x3ce0
[ 1277.708490][T16969]  ? __pfx_tun_get_user+0x10/0x10
[ 1277.708525][T16969]  ? __lock_acquire+0xab9/0xd20
[ 1277.708575][T16969]  ? ref_tracker_alloc+0x318/0x460
[ 1277.708596][T16969]  ? __lock_acquire+0xab9/0xd20
[ 1277.708614][T16969]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1277.708641][T16969]  ? tun_get+0x1c/0x2f0
[ 1277.708672][T16969]  ? tun_get+0x1c/0x2f0
[ 1277.708695][T16969]  ? tun_get+0x1c/0x2f0
[ 1277.708724][T16969]  tun_chr_write_iter+0x113/0x200
[ 1277.708754][T16969]  vfs_write+0x54b/0xa90
[ 1277.708791][T16969]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1277.708817][T16969]  ? __pfx_vfs_write+0x10/0x10
[ 1277.708848][T16969]  ? __fget_files+0x2a/0x420
[ 1277.708880][T16969]  ksys_write+0x145/0x250
[ 1277.708901][T16969]  ? __pfx_ksys_write+0x10/0x10
[ 1277.708929][T16969]  ? do_syscall_64+0xbe/0x3b0
[ 1277.708956][T16969]  do_syscall_64+0xfa/0x3b0
[ 1277.708976][T16969]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1277.708998][T16969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.709018][T16969]  ? clear_bhb_loop+0x60/0xb0
[ 1277.709043][T16969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1277.709062][T16969] RIP: 0033:0x7f479ad8d69f
[ 1277.709081][T16969] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1277.709098][T16969] RSP: 002b:00007f479bca1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1277.709120][T16969] RAX: ffffffffffffffda RBX: 00007f479afb5fa0 RCX: 00007f479ad8d69f
[ 1277.709135][T16969] RDX: 000000000000002a RSI: 0000200000000080 RDI: 00000000000000c8
[ 1277.709147][T16969] RBP: 00007f479bca1090 R08: 0000000000000000 R09: 0000000000000000
[ 1277.709160][T16969] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001
[ 1277.709173][T16969] R13: 00007f479afb6038 R14: 00007f479afb5fa0 R15: 00007ffc671bfd58
[ 1277.709207][T16969]  </TASK>
[ 1278.000730][T14917] usb 3-1: Found UVC 0.00 device syz (8086:0b07)
[ 1278.000784][T14917] usb 3-1: No valid video chain found.
[ 1278.009459][T14917] usb 3-1: USB disconnect, device number 61
[ 1280.720119][T16992] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[ 1280.913169][T14917] usb 8-1: new high-speed USB device number 38 using dummy_hcd
[ 1281.061177][T14917] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1281.088883][T14917] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1281.122955][T14917] usb 8-1: config 220 interface 0 has no altsetting 0
[ 1281.161242][T14917] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1281.192919][T14917] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1281.208989][T14917] usb 8-1: Product: syz
[ 1281.213816][T14917] usb 8-1: Manufacturer: syz
[ 1281.223139][T14917] usb 8-1: SerialNumber: syz
[ 1281.318032][ T5905] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[ 1281.674445][ T5905] usb 2-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config
[ 1282.381641][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1282.399145][ T5905] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1282.503618][ T5905] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1282.720661][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1282.732466][ T5905] usb 2-1: Product: syz
[ 1283.148379][ T5905] usb 2-1: Manufacturer: syz
[ 1283.153355][ T5905] usb 2-1: SerialNumber: syz
[ 1283.426985][ T5905] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 1283.461325][ T5905] cdc_ncm 2-1:1.0: bind() failure
[ 1283.515346][ T5905] usb 2-1: USB disconnect, device number 49
[ 1283.695481][T14917] usb 8-1: Found UVC 0.00 device syz (8086:0b07)
[ 1283.702269][T15411] usb 7-1: new high-speed USB device number 66 using dummy_hcd
[ 1283.722130][T14917] usb 8-1: No valid video chain found.
[ 1283.736578][T14917] usb 8-1: USB disconnect, device number 38
[ 1283.878154][T15411] usb 7-1: Using ep0 maxpacket: 8
[ 1283.902326][T15411] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[ 1283.927878][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1283.986119][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[ 1284.030503][T15411] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1284.040188][T15411] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3
[ 1284.061399][T15411] usb 7-1: Product: syz
[ 1284.080750][T15411] usb 7-1: Manufacturer: syz
[ 1284.094050][T15411] usb 7-1: SerialNumber: syz
[ 1284.119336][T17034] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3019'.
[ 1284.130450][T15411] usb 7-1: config 0 descriptor??
[ 1284.225198][T15411] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input38
[ 1284.788147][ T5905] usb 7-1: USB disconnect, device number 66
[ 1287.448253][T17062] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3029'.
[ 1288.098173][T14917] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[ 1288.605723][T14917] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1288.726515][T16614] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1288.738209][T14917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1288.746281][T14917] usb 2-1: Product: syz
[ 1288.747917][T16614] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1288.760026][T16614] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1288.768626][T16614] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1288.776717][T16614] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1288.868189][T14917] usb 2-1: Manufacturer: syz
[ 1288.872958][T14917] usb 2-1: SerialNumber: syz
[ 1288.942271][T17068] lo speed is unknown, defaulting to 1000
[ 1288.966451][T17074] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3033'.
[ 1288.983230][T14917] usb 2-1: config 0 descriptor??
[ 1289.033003][T14917] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1289.147513][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3033'.
[ 1289.272364][T17074] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3033'.
[ 1289.458326][T15411] usb 7-1: new full-speed USB device number 67 using dummy_hcd
[ 1289.602203][T10737] : (slave netdevsim0): Releasing backup interface
[ 1289.625260][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1289.653034][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1289.666909][T15411] usb 7-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[ 1289.689868][T15411] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1289.732779][T15411] usb 7-1: config 0 descriptor??
[ 1290.011809][T17068] chnl_net:caif_netlink_parms(): no params data found
[ 1290.183231][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'.
[ 1290.211136][T17093] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3034'.
[ 1290.249073][T15411] logitech-hidpp-device 0003:046D:C262.000B: item fetching failed at offset 0/3
[ 1290.322588][T15411] logitech-hidpp-device 0003:046D:C262.000B: hidpp_probe:parse failed
[ 1290.349287][T15411] logitech-hidpp-device 0003:046D:C262.000B: probe with driver logitech-hidpp-device failed with error -22
[ 1290.406187][T10737] bridge_slave_1: left allmulticast mode
[ 1290.414073][T15411] usb 7-1: USB disconnect, device number 67
[ 1290.420371][T10737] bridge_slave_1: left promiscuous mode
[ 1290.421752][T10737] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1290.462278][T10737] bridge_slave_0: left allmulticast mode
[ 1290.503406][T10737] bridge_slave_0: left promiscuous mode
[ 1290.540911][T10737] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1290.664047][T15411] usb 2-1: USB disconnect, device number 50
[ 1290.988061][T16614] Bluetooth: hci1: command tx timeout
[ 1292.157027][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3039'.
[ 1292.189791][T17110] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3039'.
[ 1292.203819][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3039'.
[ 1292.217568][T17110] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3039'.
[ 1292.644825][T10737]  (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1292.655987][T10737]  (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1292.668127][T10737]  (unregistering): Released all slaves
[ 1292.692948][T10737] bond1 (unregistering): Released all slaves
[ 1292.745113][T17105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3038'.
[ 1293.028317][T16614] Bluetooth: hci1: command tx timeout
[ 1293.048085][T17121] FAULT_INJECTION: forcing a failure.
[ 1293.048085][T17121] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1293.119966][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.6.3043 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1293.119997][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1293.120011][T17121] Call Trace:
[ 1293.120020][T17121]  <TASK>
[ 1293.120029][T17121]  dump_stack_lvl+0x189/0x250
[ 1293.120060][T17121]  ? __pfx____ratelimit+0x10/0x10
[ 1293.120083][T17121]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1293.120107][T17121]  ? __pfx__printk+0x10/0x10
[ 1293.120136][T17121]  ? __might_fault+0xb0/0x130
[ 1293.120171][T17121]  should_fail_ex+0x414/0x560
[ 1293.120200][T17121]  _copy_from_iter+0x1db/0x16f0
[ 1293.120232][T17121]  ? rcu_is_watching+0x15/0xb0
[ 1293.120255][T17121]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[ 1293.120276][T17121]  ? __pfx__copy_from_iter+0x10/0x10
[ 1293.120302][T17121]  ? __build_skb_around+0x257/0x3e0
[ 1293.120334][T17121]  ? netlink_sendmsg+0x642/0xb30
[ 1293.120361][T17121]  ? skb_put+0x11b/0x210
[ 1293.120395][T17121]  netlink_sendmsg+0x6b2/0xb30
[ 1293.120432][T17121]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.120481][T17121]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1293.120503][T17121]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1293.120534][T17121]  __sock_sendmsg+0x21c/0x270
[ 1293.120563][T17121]  ____sys_sendmsg+0x505/0x830
[ 1293.120601][T17121]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1293.120643][T17121]  ? import_iovec+0x74/0xa0
[ 1293.120676][T17121]  ___sys_sendmsg+0x21f/0x2a0
[ 1293.120710][T17121]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1293.120782][T17121]  ? __fget_files+0x2a/0x420
[ 1293.120806][T17121]  ? __fget_files+0x3a0/0x420
[ 1293.120842][T17121]  __x64_sys_sendmsg+0x19b/0x260
[ 1293.120877][T17121]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1293.120921][T17121]  ? __pfx_ksys_write+0x10/0x10
[ 1293.120938][T17121]  ? rcu_is_watching+0x15/0xb0
[ 1293.120967][T17121]  ? do_syscall_64+0xbe/0x3b0
[ 1293.121000][T17121]  do_syscall_64+0xfa/0x3b0
[ 1293.121023][T17121]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1293.121045][T17121]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.121065][T17121]  ? clear_bhb_loop+0x60/0xb0
[ 1293.121091][T17121]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1293.121112][T17121] RIP: 0033:0x7f5f4418ebe9
[ 1293.121131][T17121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1293.121150][T17121] RSP: 002b:00007f5f44f71038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1293.121174][T17121] RAX: ffffffffffffffda RBX: 00007f5f443b5fa0 RCX: 00007f5f4418ebe9
[ 1293.121190][T17121] RDX: 0000000020004004 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1293.121204][T17121] RBP: 00007f5f44f71090 R08: 0000000000000000 R09: 0000000000000000
[ 1293.121217][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1293.121230][T17121] R13: 00007f5f443b6038 R14: 00007f5f443b5fa0 R15: 00007ffd5b453bf8
[ 1293.121265][T17121]  </TASK>
[ 1293.135490][T10737] tipc: Disabling bearer <eth:vlan0>
[ 1293.462693][T10737] tipc: Left network mode
[ 1293.469904][T17068] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1293.477127][T17068] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1293.486455][T17068] bridge_slave_0: entered allmulticast mode
[ 1293.494212][T17068] bridge_slave_0: entered promiscuous mode
[ 1293.506487][T17122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'.
[ 1293.587124][T17068] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1293.594615][T17068] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1293.606612][T17068] bridge_slave_1: entered allmulticast mode
[ 1293.615609][T17068] bridge_slave_1: entered promiscuous mode
[ 1294.910162][T17068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1295.005010][T17068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1295.110474][T16614] Bluetooth: hci1: command tx timeout
[ 1295.152960][T17147] overlayfs: missing 'lowerdir'
[ 1295.373450][T17068] team0: Port device team_slave_0 added
[ 1295.474587][T17068] team0: Port device team_slave_1 added
[ 1295.671655][ T5848] usb 8-1: new high-speed USB device number 39 using dummy_hcd
[ 1295.815630][T17068] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1295.825070][T17068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1295.854203][T17068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1295.859907][ T5848] usb 8-1: Using ep0 maxpacket: 16
[ 1295.879476][ T5848] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.890159][ T5848] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1295.906656][ T5848] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1295.919826][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1295.928575][ T5848] usb 8-1: Product: syz
[ 1295.954101][ T5848] usb 8-1: Manufacturer: syz
[ 1295.984234][ T5848] usb 8-1: SerialNumber: syz
[ 1296.003100][T10737] hsr_slave_0: left promiscuous mode
[ 1296.036426][T10737] hsr_slave_1: left promiscuous mode
[ 1296.044975][T10737] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1296.063212][T10737] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1296.208251][T15411] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[ 1296.230505][ T5848] usb 8-1: 0:2 : does not exist
[ 1296.246320][ T5848] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[ 1296.343828][ T5848] usb 8-1: USB disconnect, device number 39
[ 1296.387828][T15411] usb 3-1: Using ep0 maxpacket: 16
[ 1296.429777][T15411] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 1296.459962][T15411] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 1296.474633][T15411] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 1296.490999][T15411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1296.530023][T17024] udevd[17024]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1296.561949][T15411] usb 3-1: Product: syz
[ 1296.566555][T15411] usb 3-1: Manufacturer: syz
[ 1296.612779][T15411] usb 3-1: SerialNumber: syz
[ 1296.653040][T15411] usb 3-1: config 0 descriptor??
[ 1296.739014][T15411] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 1296.763420][T15411] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 1297.288875][T16614] Bluetooth: hci1: command tx timeout
[ 1297.323703][T17174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1297.358296][T17174] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1298.230552][T15411] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 1298.238055][T15411] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 1298.252991][T15411] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[ 1298.260222][T15411] em28xx 3-1:0.0: No AC97 audio processor
[ 1298.277908][T15411] usb 3-1: USB disconnect, device number 62
[ 1298.290682][T15411] em28xx 3-1:0.0: Disconnecting em28xx
[ 1298.336415][T15411] em28xx 3-1:0.0: Freeing device
[ 1298.555359][T17193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3059'.
[ 1298.754024][ T5920] usb 8-1: new high-speed USB device number 40 using dummy_hcd
[ 1298.933483][ T5920] usb 8-1: Using ep0 maxpacket: 16
[ 1298.940020][ T5848] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1298.942285][ T5920] usb 8-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1298.956781][ T5920] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[ 1298.977282][ T5920] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[ 1299.004052][ T5920] usb 8-1: config 0 has an invalid interface number: 125 but max is 1
[ 1299.013386][ T5920] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1299.025102][ T5920] usb 8-1: config 0 has no interface number 0
[ 1299.032583][ T5920] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1299.045615][ T5920] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1299.056113][ T5920] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1299.070496][ T5920] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1299.084193][ T5920] usb 8-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30
[ 1299.096122][ T5920] usb 8-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1299.117824][ T5848] usb 2-1: Using ep0 maxpacket: 16
[ 1299.122453][ T5920] usb 8-1: config 0 interface 125 has no altsetting 0
[ 1299.128888][ T5848] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.132472][ T5920] usb 8-1: config 0 interface 125 has no altsetting 2
[ 1299.141294][ T5848] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1299.156360][ T5920] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1299.176283][ T5920] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.179126][ T5848] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1299.184662][ T5920] usb 8-1: Product: syz
[ 1299.212153][ T5920] usb 8-1: Manufacturer: syz
[ 1299.212178][ T5848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1299.216797][ T5920] usb 8-1: SerialNumber: syz
[ 1299.230828][ T5848] usb 2-1: Product: syz
[ 1299.237110][ T5920] usb 8-1: config 0 descriptor??
[ 1299.253428][ T5920] usb 8-1: selecting invalid altsetting 2
[ 1299.279955][ T5848] usb 2-1: Manufacturer: syz
[ 1299.285063][ T5848] usb 2-1: SerialNumber: syz
[ 1299.454925][    C0] usb 8-1: async_complete: urb error -71
[ 1299.460829][    C0] usb 8-1: async_complete: urb error -71
[ 1299.466722][    C0] usb 8-1: async_complete: urb error -71
[ 1299.472521][    C0] usb 8-1: async_complete: urb error -71
[ 1299.481428][ T5920] get_1284_register: usb error -71
[ 1299.486840][ T5920] uss720 8-1:0.125: probe with driver uss720 failed with error -71
[ 1299.502536][ T5920] usb 8-1: USB disconnect, device number 40
[ 1299.536681][ T5848] usb 2-1: 0:2 : does not exist
[ 1299.606298][ T5848] usb 2-1: USB disconnect, device number 51
[ 1299.717959][T17196] udevd[17196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1299.884857][T17068] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1299.893653][T17068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1299.920160][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1299.932822][T17068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1300.638700][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.391218][T17193] team0 (unregistering): Port device team_slave_0 removed
[ 1301.446815][T17193] team0 (unregistering): Port device team_slave_1 removed
[ 1301.944193][T17193] team0 (unregistering): Port device geneve0 removed
[ 1302.224872][T15747] usb 8-1: new high-speed USB device number 41 using dummy_hcd
[ 1302.336953][T17068] hsr_slave_0: entered promiscuous mode
[ 1302.355831][T17068] hsr_slave_1: entered promiscuous mode
[ 1302.368621][T17068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1302.376532][T17068] Cannot create hsr debugfs directory
[ 1302.397748][T15747] usb 8-1: Using ep0 maxpacket: 32
[ 1302.414828][T15747] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[ 1302.441735][T15747] usb 8-1: config 0 has no interface number 0
[ 1302.462818][T15747] usb 8-1: config 0 interface 12 has no altsetting 0
[ 1302.497900][T15747] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1302.527527][T15747] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1302.546371][T15747] usb 8-1: Product: syz
[ 1302.556778][T15747] usb 8-1: Manufacturer: syz
[ 1302.574320][T15747] usb 8-1: SerialNumber: syz
[ 1302.599079][T15747] usb 8-1: config 0 descriptor??
[ 1302.717861][ T5848] usb 7-1: new full-speed USB device number 68 using dummy_hcd
[ 1302.930095][ T5848] usb 7-1: config 0 has no interfaces?
[ 1302.935822][ T5848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1302.965371][ T5848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1303.002267][ T5848] usb 7-1: config 0 descriptor??
[ 1303.476164][ T5848] usb 7-1: USB disconnect, device number 68
[ 1305.001403][T17235] ptrace attach of "./syz-executor exec"[9144] was attempted by "./syz-executor exec"[17235]
[ 1305.442295][T17068] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1305.606554][T17068] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1305.688381][T17068] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1305.829765][T17242] FAULT_INJECTION: forcing a failure.
[ 1305.829765][T17242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1305.843456][T17242] CPU: 0 UID: 0 PID: 17242 Comm: syz.6.3077 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1305.843486][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1305.843498][T17242] Call Trace:
[ 1305.843507][T17242]  <TASK>
[ 1305.843513][T17242]  dump_stack_lvl+0x189/0x250
[ 1305.843539][T17242]  ? __pfx____ratelimit+0x10/0x10
[ 1305.843554][T17242]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1305.843568][T17242]  ? __pfx__printk+0x10/0x10
[ 1305.843584][T17242]  ? __might_fault+0xb0/0x130
[ 1305.843617][T17242]  should_fail_ex+0x414/0x560
[ 1305.843634][T17242]  _copy_from_user+0x2d/0xb0
[ 1305.843651][T17242]  ___sys_sendmsg+0x158/0x2a0
[ 1305.843673][T17242]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1305.843719][T17242]  ? __might_fault+0xb0/0x130
[ 1305.843733][T17242]  __sys_sendmmsg+0x227/0x430
[ 1305.843755][T17242]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1305.843772][T17242]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1305.843803][T17242]  ? ksys_write+0x22a/0x250
[ 1305.843817][T17242]  ? __pfx_ksys_write+0x10/0x10
[ 1305.843833][T17242]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1305.843853][T17242]  do_syscall_64+0xfa/0x3b0
[ 1305.843868][T17242]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.843880][T17242]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1305.843893][T17242]  ? clear_bhb_loop+0x60/0xb0
[ 1305.843907][T17242]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1305.843920][T17242] RIP: 0033:0x7f5f4418ebe9
[ 1305.843933][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1305.843944][T17242] RSP: 002b:00007f5f44f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1305.843959][T17242] RAX: ffffffffffffffda RBX: 00007f5f443b6090 RCX: 00007f5f4418ebe9
[ 1305.843969][T17242] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000009
[ 1305.843977][T17242] RBP: 00007f5f44f50090 R08: 0000000000000000 R09: 0000000000000000
[ 1305.843985][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1305.843993][T17242] R13: 00007f5f443b6128 R14: 00007f5f443b6090 R15: 00007ffd5b453bf8
[ 1305.844012][T17242]  </TASK>
[ 1306.087911][T15747] f81534 8-1:0.12: f81534_set_register: reg: 1003 data: b0 failed: -32
[ 1306.464084][T17068] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1306.486283][T15747] f81534 8-1:0.12: f81534_find_config_idx: read failed: -32
[ 1306.503674][T15747] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -32
[ 1306.523973][T15747] f81534 8-1:0.12: probe with driver f81534 failed with error -32
[ 1306.982650][T17068] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1307.031986][T17068] 8021q: adding VLAN 0 to HW filter on device team0
[ 1307.064592][T15507] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1307.072089][T15507] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1307.130824][T15507] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1307.138255][T15507] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1308.453098][T17068] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1310.012888][T17068] veth0_vlan: entered promiscuous mode
[ 1310.030861][T17068] veth1_vlan: entered promiscuous mode
[ 1310.070614][T17068] veth0_macvtap: entered promiscuous mode
[ 1310.097411][T17068] veth1_macvtap: entered promiscuous mode
[ 1310.333413][T17068] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1310.512974][T17068] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1310.547161][T17068] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1310.562423][T17068] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1310.592108][T17068] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1310.604603][T17068] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1310.809117][T15466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1310.852748][T15466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1311.006255][T10735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1311.040789][T10735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1311.491157][T17278] FAULT_INJECTION: forcing a failure.
[ 1311.491157][T17278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1311.528228][T17278] CPU: 0 UID: 0 PID: 17278 Comm: syz.5.3025 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1311.528258][T17278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1311.528272][T17278] Call Trace:
[ 1311.528281][T17278]  <TASK>
[ 1311.528291][T17278]  dump_stack_lvl+0x189/0x250
[ 1311.528320][T17278]  ? __pfx____ratelimit+0x10/0x10
[ 1311.528345][T17278]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1311.528368][T17278]  ? __pfx__printk+0x10/0x10
[ 1311.528410][T17278]  should_fail_ex+0x414/0x560
[ 1311.528439][T17278]  _copy_to_user+0x31/0xb0
[ 1311.528472][T17278]  simple_read_from_buffer+0xe1/0x170
[ 1311.528511][T17278]  proc_fail_nth_read+0x1df/0x250
[ 1311.528541][T17278]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1311.528571][T17278]  ? rw_verify_area+0x258/0x650
[ 1311.528602][T17278]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1311.528630][T17278]  vfs_read+0x200/0x980
[ 1311.528669][T17278]  ? __pfx___mutex_lock+0x10/0x10
[ 1311.528695][T17278]  ? __pfx_vfs_read+0x10/0x10
[ 1311.528727][T17278]  ? __fget_files+0x2a/0x420
[ 1311.528756][T17278]  ? __fget_files+0x3a0/0x420
[ 1311.528777][T17278]  ? __fget_files+0x2a/0x420
[ 1311.528811][T17278]  ksys_read+0x145/0x250
[ 1311.528835][T17278]  ? __pfx_ksys_read+0x10/0x10
[ 1311.528851][T17278]  ? rcu_is_watching+0x15/0xb0
[ 1311.528881][T17278]  ? do_syscall_64+0xbe/0x3b0
[ 1311.528909][T17278]  do_syscall_64+0xfa/0x3b0
[ 1311.528930][T17278]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1311.528952][T17278]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.528972][T17278]  ? clear_bhb_loop+0x60/0xb0
[ 1311.528999][T17278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1311.529020][T17278] RIP: 0033:0x7f885638d5fc
[ 1311.529039][T17278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1311.529057][T17278] RSP: 002b:00007f885716d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1311.529080][T17278] RAX: ffffffffffffffda RBX: 00007f88565b5fa0 RCX: 00007f885638d5fc
[ 1311.529095][T17278] RDX: 000000000000000f RSI: 00007f885716d0a0 RDI: 0000000000000004
[ 1311.529108][T17278] RBP: 00007f885716d090 R08: 0000000000000000 R09: 0000000000000010
[ 1311.529122][T17278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1311.529134][T17278] R13: 00007f88565b6038 R14: 00007f88565b5fa0 R15: 00007fff16dd4118
[ 1311.529170][T17278]  </TASK>
[ 1314.032432][T10735] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.158382][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1314.173340][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1314.192476][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1314.214027][ T5845] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1314.222922][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1314.326335][T10735] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.427904][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 1314.549462][T10735] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.592462][T14917] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 1314.620039][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1314.635936][   T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.679138][   T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1314.697905][T17306] lo speed is unknown, defaulting to 1000
[ 1314.880426][T14917] usb 6-1: Using ep0 maxpacket: 16
[ 1314.897251][   T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1314.903494][T10735] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1314.918060][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.946472][T14917] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1314.957390][   T10] usb 2-1: Product: syz
[ 1314.967773][T14917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1314.977769][   T10] usb 2-1: Manufacturer: syz
[ 1314.988544][   T10] usb 2-1: SerialNumber: syz
[ 1315.007108][T14917] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1315.027502][T14917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1315.045731][T14917] usb 6-1: Product: syz
[ 1315.062760][T14917] usb 6-1: Manufacturer: syz
[ 1315.079437][T14917] usb 6-1: SerialNumber: syz
[ 1315.307523][   T10] usb 2-1: 0:2 : does not exist
[ 1315.545779][   T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 1315.610735][T14917] usb 6-1: 0:2 : does not exist
[ 1315.628939][   T10] usb 2-1: USB disconnect, device number 52
[ 1315.768187][T14917] usb 6-1: USB disconnect, device number 23
[ 1315.994432][T17196] udevd[17196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1316.093134][T17024] udevd[17024]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1316.307812][T16614] Bluetooth: hci3: command tx timeout
[ 1316.365370][T17320] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3093'.
[ 1316.422845][T17322] netlink: 'syz.5.3094': attribute type 1 has an invalid length.
[ 1316.443083][T17322] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3094'.
[ 1318.036418][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1318.048433][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1318.060814][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1318.096930][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1318.111246][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1318.392147][T16614] Bluetooth: hci3: command tx timeout
[ 1318.767567][T10735]  (unregistering): Released all slaves
[ 1319.083651][T10735] bond1 (unregistering): Released all slaves
[ 1319.333199][T17341] tipc: Started in network mode
[ 1319.367862][T17341] tipc: Node identity 9e6064641ed8, cluster identity 4711
[ 1319.375465][T17341] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1319.410837][T17342] syzkaller0: entered promiscuous mode
[ 1319.419502][T17342] syzkaller0: entered allmulticast mode
[ 1319.477509][T17353] tipc: Resetting bearer <eth:syzkaller0>
[ 1319.491529][T10735] : left promiscuous mode
[ 1319.574692][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3099'.
[ 1319.648457][T17337] tipc: Resetting bearer <eth:syzkaller0>
[ 1319.900208][T17337] tipc: Disabling bearer <eth:syzkaller0>
[ 1320.249953][T16614] Bluetooth: hci4: command tx timeout
[ 1320.467789][T16614] Bluetooth: hci3: command tx timeout
[ 1321.687441][T17358] team0 (unregistering): Port device team_slave_0 removed
[ 1321.744394][T17358] team0 (unregistering): Port device team_slave_1 removed
[ 1321.771204][T17366] Bluetooth: MGMT ver 1.23
[ 1321.975582][T10735] tipc: Disabling bearer <eth:syzkaller0>
[ 1322.024870][T10735] tipc: Disabling bearer <udp:syz2>
[ 1322.051106][T10735] tipc: Left network mode
[ 1322.071681][T17306] chnl_net:caif_netlink_parms(): no params data found
[ 1322.287840][T14917] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1322.306467][T17332] lo speed is unknown, defaulting to 1000
[ 1322.314079][T16614] Bluetooth: hci4: command tx timeout
[ 1322.488639][T14917] usb 2-1: Using ep0 maxpacket: 16
[ 1322.504911][T14917] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1322.547129][T14917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1322.557796][T16614] Bluetooth: hci3: command tx timeout
[ 1322.562984][T14917] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1322.692542][T14917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1322.841319][T14917] usb 2-1: Product: syz
[ 1322.899403][T14917] usb 2-1: Manufacturer: syz
[ 1322.980508][T14917] usb 2-1: SerialNumber: syz
[ 1323.472880][T14917] usb 2-1: 0:2 : does not exist
[ 1323.592014][T14917] usb 2-1: USB disconnect, device number 53
[ 1324.260637][T17196] udevd[17196]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1324.347527][T10735] hsr_slave_0: left promiscuous mode
[ 1324.387758][T16614] Bluetooth: hci4: command tx timeout
[ 1324.424823][T10735] hsr_slave_1: left promiscuous mode
[ 1324.509722][T10735] veth1_macvtap: left promiscuous mode
[ 1324.519537][T10735] veth0_macvtap: left promiscuous mode
[ 1324.542364][T10735] veth1_vlan: left promiscuous mode
[ 1324.568235][T10735] veth0_vlan: left promiscuous mode
[ 1326.467770][T16614] Bluetooth: hci4: command tx timeout
[ 1327.071201][T17306] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1327.108604][T17306] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1327.130438][T17306] bridge_slave_0: entered allmulticast mode
[ 1327.142095][T17306] bridge_slave_0: entered promiscuous mode
[ 1327.176197][T17306] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1327.188056][T17306] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1327.201640][T17306] bridge_slave_1: entered allmulticast mode
[ 1327.377753][T17306] bridge_slave_1: entered promiscuous mode
[ 1327.507373][T17402] xt_l2tp: invalid flags combination: 4
[ 1327.521796][T17402] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3110'.
[ 1327.814673][T17306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1328.320984][T17306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1328.731824][T17306] team0: Port device team_slave_0 added
[ 1328.929369][T17417] FAULT_INJECTION: forcing a failure.
[ 1328.929369][T17417] name failslab, interval 1, probability 0, space 0, times 0
[ 1328.944010][T17417] CPU: 0 UID: 0 PID: 17417 Comm: syz.6.3115 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1328.944038][T17417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1328.944050][T17417] Call Trace:
[ 1328.944059][T17417]  <TASK>
[ 1328.944068][T17417]  dump_stack_lvl+0x189/0x250
[ 1328.944097][T17417]  ? __pfx____ratelimit+0x10/0x10
[ 1328.944118][T17417]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1328.944140][T17417]  ? __pfx__printk+0x10/0x10
[ 1328.944171][T17417]  ? __pfx___might_resched+0x10/0x10
[ 1328.944191][T17417]  ? fs_reclaim_acquire+0x7d/0x100
[ 1328.944220][T17417]  should_fail_ex+0x414/0x560
[ 1328.944247][T17417]  should_failslab+0xa8/0x100
[ 1328.944281][T17417]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1328.944301][T17417]  ? getname_flags+0xb8/0x540
[ 1328.944330][T17417]  getname_flags+0xb8/0x540
[ 1328.944351][T17417]  ? _copy_from_user+0x94/0xb0
[ 1328.944382][T17417]  path_setxattrat+0x2ac/0x3a0
[ 1328.944421][T17417]  ? __pfx_path_setxattrat+0x10/0x10
[ 1328.944448][T17417]  ? __mutex_unlock_slowpath+0x1cd/0x700
[ 1328.944498][T17417]  ? ksys_write+0x22a/0x250
[ 1328.944521][T17417]  ? __pfx_ksys_write+0x10/0x10
[ 1328.944547][T17417]  __x64_sys_setxattr+0xbc/0xe0
[ 1328.944575][T17417]  do_syscall_64+0xfa/0x3b0
[ 1328.944600][T17417]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.944619][T17417]  ? asm_sysvec_call_function_single+0x1a/0x20
[ 1328.944639][T17417]  ? clear_bhb_loop+0x60/0xb0
[ 1328.944663][T17417]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1328.944683][T17417] RIP: 0033:0x7f5f4418ebe9
[ 1328.944703][T17417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1328.944722][T17417] RSP: 002b:00007f5f44f50038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[ 1328.944745][T17417] RAX: ffffffffffffffda RBX: 00007f5f443b6090 RCX: 00007f5f4418ebe9
[ 1328.944760][T17417] RDX: 0000200000000180 RSI: 0000200000000080 RDI: 0000200000000040
[ 1328.944775][T17417] RBP: 00007f5f44f50090 R08: 0000000000000002 R09: 0000000000000000
[ 1328.944789][T17417] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 1328.944802][T17417] R13: 00007f5f443b6128 R14: 00007f5f443b6090 R15: 00007ffd5b453bf8
[ 1328.944837][T17417]  </TASK>
[ 1328.980556][T17306] team0: Port device team_slave_1 added
[ 1330.080295][T17332] chnl_net:caif_netlink_parms(): no params data found
[ 1330.122646][T17306] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1330.150462][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1330.188231][T17306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1330.236796][T17306] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1330.277826][ T5905] usb 7-1: new high-speed USB device number 69 using dummy_hcd
[ 1330.497899][ T5905] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1330.506952][ T5905] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1330.556537][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1330.647320][ T5905] usb 7-1: config 0 descriptor??
[ 1331.067881][T17306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1331.111834][T17306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1331.528001][ T3583] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1331.596630][T17306] hsr_slave_0: entered promiscuous mode
[ 1331.609415][T17306] hsr_slave_1: entered promiscuous mode
[ 1331.611789][T17306] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1331.611869][T17306] Cannot create hsr debugfs directory
[ 1331.612291][T17332] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1331.612424][T17332] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1331.612607][T17332] bridge_slave_0: entered allmulticast mode
[ 1331.616601][T17332] bridge_slave_0: entered promiscuous mode
[ 1331.665246][T17332] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1331.665408][T17332] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1331.665611][T17332] bridge_slave_1: entered allmulticast mode
[ 1331.668066][T17332] bridge_slave_1: entered promiscuous mode
[ 1331.699424][ T3583] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1331.699446][ T3583] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1331.699489][ T3583] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1331.702670][ T3583] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1331.702693][ T3583] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1331.702706][ T3583] usb 2-1: Product: syz
[ 1331.702717][ T3583] usb 2-1: Manufacturer: syz
[ 1331.702727][ T3583] usb 2-1: SerialNumber: syz
[ 1331.825421][ T5905] radio-keene 7-1:0.0: V4L2 device registered as radio48
[ 1331.874184][T17332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1331.923348][ T3583] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[ 1331.923389][ T3583] usb 2-1: No valid video chain found.
[ 1331.937758][ T3583] usb 2-1: USB disconnect, device number 54
[ 1331.938865][T17332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1332.098581][T17332] team0: Port device team_slave_0 added
[ 1332.111191][T17332] team0: Port device team_slave_1 added
[ 1332.218207][T17332] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1332.218230][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1332.256187][T17332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1332.311759][T17332] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1332.332339][T17332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1332.360310][T14917] usb 7-1: USB disconnect, device number 69
[ 1332.366734][T17332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1332.797044][T17332] hsr_slave_0: entered promiscuous mode
[ 1332.824621][T17332] hsr_slave_1: entered promiscuous mode
[ 1332.837969][T17332] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1332.846021][T17332] Cannot create hsr debugfs directory
[ 1333.635928][T17306] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1333.659867][T17306] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1333.696375][T17306] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1333.717187][T17306] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1334.001335][T17332] netdevsim netdevsim8 netdevsim0: renamed from eth0
[ 1334.094248][T17332] netdevsim netdevsim8 netdevsim1: renamed from eth1
[ 1334.685316][T17332] netdevsim netdevsim8 netdevsim2: renamed from eth2
[ 1334.799217][T17332] netdevsim netdevsim8 netdevsim3: renamed from eth3
[ 1336.175694][T17480] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1336.785678][T17482] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3129'.
[ 1336.855103][T17306] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1336.970598][T17306] 8021q: adding VLAN 0 to HW filter on device team0
[ 1337.191265][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1337.198599][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1337.215300][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1337.222595][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1337.461066][T17332] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1337.587444][T17306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1337.623877][T14917] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1337.624133][T17306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1337.891827][T14917] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.083464][T14917] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1338.109004][T14917] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1338.276879][T14917] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1338.305582][T17332] 8021q: adding VLAN 0 to HW filter on device team0
[ 1338.327823][T14917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1338.336070][T14917] usb 2-1: Product: syz
[ 1338.357767][T14917] usb 2-1: Manufacturer: syz
[ 1338.377889][T14917] usb 2-1: SerialNumber: syz
[ 1338.452819][ T7439] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1338.460182][ T7439] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1338.550939][T15466] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1338.558224][T15466] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1338.655897][T14917] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[ 1338.683582][T14917] usb 2-1: No valid video chain found.
[ 1338.726599][T14917] usb 2-1: USB disconnect, device number 55
[ 1339.246928][T17306] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1339.535259][T17507] dvmrp17: entered allmulticast mode
[ 1339.968183][T17306] veth0_vlan: entered promiscuous mode
[ 1340.034794][T17306] veth1_vlan: entered promiscuous mode
[ 1340.209094][T17306] veth0_macvtap: entered promiscuous mode
[ 1340.260868][T17306] veth1_macvtap: entered promiscuous mode
[ 1340.324084][T17306] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1340.445154][T17306] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1340.472067][T17306] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.488036][T17306] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.538792][T17306] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.605363][T17306] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1340.623644][T17332] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1340.902588][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1340.922503][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1340.968238][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1340.976988][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1344.297980][   T10] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1344.491904][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1344.516897][T17332] veth0_vlan: entered promiscuous mode
[ 1344.575323][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1344.587364][T17332] veth1_vlan: entered promiscuous mode
[ 1344.678450][   T10] usb 2-1: Product: syz
[ 1344.693222][   T10] usb 2-1: Manufacturer: syz
[ 1344.765241][   T10] usb 2-1: SerialNumber: syz
[ 1344.811015][T17332] veth0_macvtap: entered promiscuous mode
[ 1344.842939][   T10] usb 2-1: config 0 descriptor??
[ 1344.844718][T17332] veth1_macvtap: entered promiscuous mode
[ 1344.944636][T17332] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1344.988309][T17332] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1345.034469][T17332] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.045145][T17332] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.062022][T17332] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.079173][   T10] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1345.147995][T17332] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1345.576952][T15466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1345.601076][T15466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1345.871429][T10741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1345.905201][T10741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1346.069444][ T5834] usb 7-1: new high-speed USB device number 70 using dummy_hcd
[ 1346.288790][ T5834] usb 7-1: Using ep0 maxpacket: 16
[ 1346.366095][   T10] gspca_sunplus: reg_r err -71
[ 1346.386315][T17554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3145'.
[ 1346.406405][   T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1346.750020][   T10] usb 2-1: USB disconnect, device number 56
[ 1346.759811][ T5834] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1346.775410][ T5834] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1346.787118][ T5834] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1346.797718][ T5834] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1346.806059][ T5834] usb 7-1: Product: syz
[ 1346.810957][ T5834] usb 7-1: Manufacturer: syz
[ 1346.815949][ T5834] usb 7-1: SerialNumber: syz
[ 1347.042587][ T5834] usb 7-1: 0:2 : does not exist
[ 1347.265153][ T5834] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[ 1347.350684][ T5834] usb 7-1: USB disconnect, device number 70
[ 1347.487013][T17196] udevd[17196]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1347.522147][T12627] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[ 1347.732603][T12627] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1347.778608][T12627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1347.804021][T12627] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[ 1347.817723][T12627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1347.895690][T12627] usb 3-1: config 0 descriptor??
[ 1348.132658][ T5834] usb 3-1: USB disconnect, device number 63
[ 1348.484121][T17571] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1352.076759][T17602] 9pnet_fd: Insufficient options for proto=fd
[ 1352.841246][T17609] PKCS8: Unsupported PKCS#8 version
[ 1353.560081][T15747] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1353.749576][T15747] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1353.774151][T15747] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1353.806044][T15747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1353.863032][   T10] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[ 1353.899040][T15747] usb 2-1: config 0 descriptor??
[ 1354.061024][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1354.469355][T15747]  (null): keene_cmd_main failed (-110)
[ 1354.477134][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1354.556063][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1354.702203][   T10] usb 3-1: config 0 descriptor??
[ 1354.960386][   T10] videodev: could not get a free minor
[ 1354.997731][   T10] radio-keene 3-1:0.0: could not register video device
[ 1355.037589][   T10] radio-keene 3-1:0.0: probe with driver radio-keene failed with error -23
[ 1355.101265][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[ 1355.639144][T17631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1355.653052][ T3583] IPVS: starting estimator thread 0...
[ 1355.758950][T17632] IPVS: using max 23 ests per chain, 55200 per kthread
[ 1355.774264][T15747] video4linux radio48: keene_cmd_set failed (-110)
[ 1355.774432][T15747] radio-keene 2-1:0.0: V4L2 device registered as radio48
[ 1356.445330][ T5905] usb 2-1: USB disconnect, device number 57
[ 1357.013035][T17645] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1358.483678][T15747] usb 3-1: USB disconnect, device number 64
[ 1360.064529][ T5905] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 1360.260981][T15747] usb 3-1: new full-speed USB device number 65 using dummy_hcd
[ 1360.274733][ T5905] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1360.296643][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1360.316378][ T5905] usb 6-1: Product: syz
[ 1360.321043][ T5905] usb 6-1: Manufacturer: syz
[ 1360.325696][ T5905] usb 6-1: SerialNumber: syz
[ 1360.367024][ T5905] usb 6-1: config 0 descriptor??
[ 1360.429797][ T5905] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1360.467935][T15747] usb 3-1: config 0 has no interfaces?
[ 1360.475055][T15747] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1360.528464][T15747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.560837][T15747] usb 3-1: config 0 descriptor??
[ 1361.008633][ T5905] gspca_sunplus: reg_r err -110
[ 1361.107887][ T5905] sunplus 6-1:0.0: probe with driver sunplus failed with error -110
[ 1361.151317][T17670] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1361.280792][T12627] usb 3-1: USB disconnect, device number 65
[ 1361.991675][T17687] overlayfs: failed to resolve './file1': -2
[ 1362.001828][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.107803][ T5920] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[ 1362.169842][ T5834] usb 6-1: USB disconnect, device number 24
[ 1362.187919][   T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[ 1362.274723][T17692] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1362.420245][ T5920] usb 9-1: config 0 has an invalid interface number: 217 but max is 0
[ 1362.447391][ T5920] usb 9-1: config 0 has no interface number 0
[ 1362.610209][ T5920] usb 9-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4
[ 1362.778508][   T10] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1362.853721][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1362.972673][ T5920] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.022219][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1363.034214][ T5920] usb 9-1: Product: syz
[ 1363.041422][ T5920] usb 9-1: Manufacturer: syz
[ 1363.073824][ T5920] usb 9-1: SerialNumber: syz
[ 1363.079569][   T10] usb 3-1: config 0 descriptor??
[ 1363.105880][ T5920] usb 9-1: config 0 descriptor??
[ 1363.134373][ T5920] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[ 1363.924264][ T5920] gspca_sn9c20x: Write register 1001 failed -110
[ 1363.930828][ T5920] gspca_sn9c20x: Device initialization failed
[ 1363.937222][ T5920] gspca_sn9c20x 9-1:0.217: probe with driver gspca_sn9c20x failed with error -110
[ 1364.067695][T17684] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3185'.
[ 1364.237898][ T5920] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 1364.377907][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1364.406032][   T10] video4linux radio48: keene_cmd_set failed (-71)
[ 1364.413412][   T10] radio-keene 3-1:0.0: V4L2 device registered as radio48
[ 1364.477419][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3185'.
[ 1364.497460][   T10] usb 3-1: USB disconnect, device number 66
[ 1365.267863][ T5920] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 1366.409167][ T5920] usb 6-1: device descriptor read/64, error -71
[ 1366.448295][T12627] usb 9-1: USB disconnect, device number 2
[ 1366.562692][ T5920] usb usb6-port1: attempt power cycle
[ 1367.490486][T10741] bridge_slave_1: left allmulticast mode
[ 1367.496259][T10741] bridge_slave_1: left promiscuous mode
[ 1367.785873][T10741] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1368.321453][T10741] bridge_slave_0: left allmulticast mode
[ 1368.732473][T10741] bridge_slave_0: left promiscuous mode
[ 1368.746029][T10741] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1368.869826][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'.
[ 1368.887840][T17738] netlink: 'syz.1.3201': attribute type 20 has an invalid length.
[ 1368.905012][T17738] netlink: 'syz.1.3201': attribute type 21 has an invalid length.
[ 1370.778620][T10741] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1370.806318][T10741] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1370.839673][T10741] bond0 (unregistering): Released all slaves
[ 1371.337798][T14917] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[ 1371.347361][T10741] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface
[ 1371.361376][T10741] bond1 (unregistering): Released all slaves
[ 1371.497300][T14917] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1371.531353][T14917] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1371.602580][T14917] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1371.653110][T14917] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1371.695340][T14917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.744498][T14917] usb 3-1: Product: syz
[ 1371.762842][T14917] usb 3-1: Manufacturer: syz
[ 1371.793211][T14917] usb 3-1: SerialNumber: syz
[ 1371.858193][   T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 1372.096215][   T10] usb 6-1: config 0 interface 0 has no altsetting 0
[ 1372.128112][T14917] usb 3-1: Found UVC 0.00 device syz (8086:0b07)
[ 1372.137027][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1372.149890][T14917] usb 3-1: No valid video chain found.
[ 1372.158962][T14917] usb 3-1: USB disconnect, device number 67
[ 1372.165615][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1372.188448][   T10] usb 6-1: config 0 descriptor??
[ 1372.245204][T10741] hsr_slave_0: left promiscuous mode
[ 1372.265726][T10741] hsr_slave_1: left promiscuous mode
[ 1372.272839][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1372.300706][T10741] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1372.369760][T10741] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1372.378851][T10741] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1372.409184][T10741] veth1_macvtap: left promiscuous mode
[ 1372.415117][T10741] veth0_macvtap: left promiscuous mode
[ 1372.423362][T10741] veth1_vlan: left promiscuous mode
[ 1372.429902][T10741] veth0_vlan: left promiscuous mode
[ 1372.588780][ T5920] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1372.749908][ T5920] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.801080][ T5920] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1372.819728][ T5920] usb 2-1: config 220 interface 0 has no altsetting 0
[ 1372.855907][ T5920] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1372.866500][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.887914][ T5920] usb 2-1: Product: syz
[ 1372.892871][ T5920] usb 2-1: Manufacturer: syz
[ 1372.897490][ T5920] usb 2-1: SerialNumber: syz
[ 1373.010914][T17768] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1373.162018][ T5920] usb 2-1: Found UVC 0.00 device syz (8086:0b07)
[ 1373.162093][ T5920] usb 2-1: No valid video chain found.
[ 1373.187039][ T5920] usb 2-1: USB disconnect, device number 58
[ 1373.405606][   T10] video4linux radio48: keene_cmd_set failed (-71)
[ 1373.417741][   T10] radio-keene 6-1:0.0: V4L2 device registered as radio48
[ 1373.463969][   T10] usb 6-1: USB disconnect, device number 28
[ 1374.368020][ T5920] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 1374.576428][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1374.597803][ T5920] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[ 1374.636430][ T5920] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1374.691834][ T5920] usb 6-1: language id specifier not provided by device, defaulting to English
[ 1374.711792][ T5920] usb 6-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[ 1374.722108][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1374.750708][ T5920] usb 6-1: Manufacturer: ‰
[ 1374.755296][ T5920] usb 6-1: SerialNumber: syz
[ 1374.775905][ T5920] usb 6-1: config 0 descriptor??
[ 1374.812363][ T5920] em28xx 6-1:0.0: New device ‰  @ 480 Mbps (2013:0251, interface 0, class 0)
[ 1374.850919][ T5920] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 1374.861957][T10741] team0 (unregistering): Port device team_slave_1 removed
[ 1375.078708][ T5920] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 1375.093235][ T5920] em28xx 6-1:0.0: Config register raw data: 0xfffffffb
[ 1375.120629][T10741] team0 (unregistering): Port device team_slave_0 removed
[ 1375.133693][ T5920] em28xx 6-1:0.0: AC97 chip type couldn't be determined
[ 1375.141323][ T5920] em28xx 6-1:0.0: No AC97 audio processor
[ 1375.187847][T15411] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[ 1375.218650][ T5920] usb 6-1: USB disconnect, device number 29
[ 1375.241478][ T5920] em28xx 6-1:0.0: Disconnecting em28xx
[ 1375.275880][ T5920] em28xx 6-1:0.0: Freeing device
[ 1375.368190][T15411] usb 9-1: Using ep0 maxpacket: 8
[ 1375.382000][T15411] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.406303][T15411] usb 9-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[ 1375.416859][T15411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1375.451884][T15411] usb 9-1: config 0 descriptor??
[ 1376.514040][T17799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1376.536616][T17799] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1377.502882][ T3583] usb 9-1: USB disconnect, device number 3
[ 1379.384788][ T5905] usb 7-1: new high-speed USB device number 71 using dummy_hcd
[ 1379.577802][ T3583] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[ 1379.610276][ T5905] usb 7-1: config 0 interface 0 has no altsetting 0
[ 1379.622435][ T5905] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 1379.663487][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1379.706615][ T5905] usb 7-1: config 0 descriptor??
[ 1379.786659][ T3583] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1379.803540][ T3583] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1379.857162][ T3583] usb 3-1: Product: syz
[ 1379.883084][ T3583] usb 3-1: Manufacturer: syz
[ 1379.906763][ T3583] usb 3-1: SerialNumber: syz
[ 1379.958656][ T3583] usb 3-1: config 0 descriptor??
[ 1380.001831][ T3583] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1380.888736][ T5905] video4linux radio48: keene_cmd_set failed (-71)
[ 1380.895726][ T5905] radio-keene 7-1:0.0: V4L2 device registered as radio48
[ 1380.963935][ T5905] usb 7-1: USB disconnect, device number 71
[ 1381.265356][ T5920] usb 3-1: USB disconnect, device number 68
[ 1381.797792][ T5920] usb 7-1: new high-speed USB device number 72 using dummy_hcd
[ 1381.915315][T17850] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1382.818599][ T5920] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1383.659562][ T5920] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1383.678223][ T5920] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1383.697736][ T5920] usb 7-1: config 0 descriptor??
[ 1383.750039][ T5920] pwc: Askey VC010 type 2 USB webcam detected.
[ 1383.948065][ T5905] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[ 1383.955863][T12627] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 1384.349405][ T5920] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1384.368768][ T5920] pwc: recv_control_msg error -32 req 02 val 2700
[ 1384.379234][ T5920] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1384.395530][ T5920] pwc: recv_control_msg error -32 req 04 val 1000
[ 1384.404642][ T5920] pwc: recv_control_msg error -32 req 04 val 1300
[ 1384.418972][ T5920] pwc: recv_control_msg error -32 req 04 val 1400
[ 1384.428945][ T5920] pwc: recv_control_msg error -32 req 02 val 2000
[ 1384.440579][ T5920] pwc: recv_control_msg error -32 req 02 val 2100
[ 1384.447893][ T5905] usb 9-1: Using ep0 maxpacket: 16
[ 1384.454619][ T5920] pwc: recv_control_msg error -32 req 04 val 1500
[ 1384.459617][T12627] usb 6-1: config 0 has an invalid interface number: 217 but max is 0
[ 1384.485565][ T5905] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.499535][T12627] usb 6-1: config 0 has no interface number 0
[ 1384.506064][ T5905] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1384.519519][ T5920] pwc: recv_control_msg error -32 req 02 val 2500
[ 1384.520891][T12627] usb 6-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4
[ 1384.537834][T12627] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.546685][T12627] usb 6-1: Product: syz
[ 1384.552859][T12627] usb 6-1: Manufacturer: syz
[ 1384.553006][ T5905] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1384.567564][T12627] usb 6-1: SerialNumber: syz
[ 1384.572658][ T5905] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1384.583966][ T5905] usb 9-1: Product: syz
[ 1384.589809][T12627] usb 6-1: config 0 descriptor??
[ 1384.595224][ T5905] usb 9-1: Manufacturer: syz
[ 1384.604486][T12627] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[ 1384.611981][ T5905] usb 9-1: SerialNumber: syz
[ 1384.738544][ T5920] pwc: recv_control_msg error -32 req 02 val 2600
[ 1384.768829][ T5920] pwc: recv_control_msg error -32 req 02 val 2900
[ 1384.855799][ T5905] usb 9-1: 0:2 : does not exist
[ 1384.883224][ T5905] usb 9-1: unit 6 not found!
[ 1384.990648][ T5905] usb 9-1: USB disconnect, device number 4
[ 1385.019584][T17861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3238'.
[ 1385.372061][T17861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3238'.
[ 1385.427211][T17772] udevd[17772]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1385.454368][T12627] gspca_sn9c20x: Write register 1002 failed -71
[ 1385.492033][T12627] gspca_sn9c20x: Device initialization failed
[ 1385.502702][T12627] gspca_sn9c20x 6-1:0.217: probe with driver gspca_sn9c20x failed with error -71
[ 1385.580144][T12627] usb 6-1: USB disconnect, device number 30
[ 1386.114945][ T5920] pwc: recv_control_msg error -71 req 04 val 1100
[ 1386.122405][ T5920] pwc: recv_control_msg error -71 req 04 val 1200
[ 1386.174301][ T5920] pwc: Registered as video103.
[ 1386.197049][ T5920] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input39
[ 1386.390090][ T5920] usb 7-1: USB disconnect, device number 72
[ 1386.843954][T17887] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3246'.
[ 1388.141364][T17901] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1389.734652][T17906] FAULT_INJECTION: forcing a failure.
[ 1389.734652][T17906] name failslab, interval 1, probability 0, space 0, times 0
[ 1389.748080][T17906] CPU: 1 UID: 0 PID: 17906 Comm: syz.5.3250 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1389.748119][T17906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1389.748132][T17906] Call Trace:
[ 1389.748142][T17906]  <TASK>
[ 1389.748152][T17906]  dump_stack_lvl+0x189/0x250
[ 1389.748183][T17906]  ? __pfx____ratelimit+0x10/0x10
[ 1389.748206][T17906]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1389.748231][T17906]  ? __pfx__printk+0x10/0x10
[ 1389.748261][T17906]  ? __pfx___might_resched+0x10/0x10
[ 1389.748285][T17906]  ? fs_reclaim_acquire+0x7d/0x100
[ 1389.748317][T17906]  should_fail_ex+0x414/0x560
[ 1389.748346][T17906]  should_failslab+0xa8/0x100
[ 1389.748371][T17906]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1389.748393][T17906]  ? hash_netport_create+0x2fe/0xfe0
[ 1389.748431][T17906]  hash_netport_create+0x2fe/0xfe0
[ 1389.748472][T17906]  ? __nla_parse+0x40/0x60
[ 1389.748497][T17906]  ? __pfx_hash_netport_create+0x10/0x10
[ 1389.748531][T17906]  ip_set_create+0xa94/0x1940
[ 1389.748557][T17906]  ? ip_set_create+0x4a2/0x1940
[ 1389.748595][T17906]  ? __pfx_ip_set_create+0x10/0x10
[ 1389.748663][T17906]  nfnetlink_rcv_msg+0xb4d/0x1130
[ 1389.748689][T17906]  ? nfnetlink_rcv_msg+0x20d/0x1130
[ 1389.748736][T17906]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1389.748758][T17906]  ? kasan_save_free_info+0x46/0x50
[ 1389.748845][T17906]  netlink_rcv_skb+0x205/0x470
[ 1389.748877][T17906]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1389.748903][T17906]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1389.748947][T17906]  ? bpf_lsm_capable+0x9/0x20
[ 1389.748972][T17906]  ? security_capable+0x7e/0x2e0
[ 1389.749009][T17906]  nfnetlink_rcv+0x26a/0x2520
[ 1389.749038][T17906]  ? __dev_queue_xmit+0x1cd7/0x3a70
[ 1389.749067][T17906]  ? kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1389.749091][T17906]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1389.749122][T17906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.749157][T17906]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1389.749181][T17906]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1389.749221][T17906]  ? ref_tracker_free+0x63a/0x7d0
[ 1389.749242][T17906]  ? __copy_skb_header+0xa7/0x550
[ 1389.749265][T17906]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1389.749288][T17906]  ? __skb_clone+0x63/0x7a0
[ 1389.749315][T17906]  ? __skb_clone+0x483/0x7a0
[ 1389.749345][T17906]  ? skb_clone+0x246/0x3a0
[ 1389.749369][T17906]  ? __netlink_deliver_tap+0x807/0x850
[ 1389.749398][T17906]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1389.749435][T17906]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1389.749463][T17906]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1389.749498][T17906]  netlink_unicast+0x75c/0x8e0
[ 1389.749539][T17906]  netlink_sendmsg+0x805/0xb30
[ 1389.749581][T17906]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1389.749620][T17906]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1389.749642][T17906]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1389.749673][T17906]  __sock_sendmsg+0x21c/0x270
[ 1389.749703][T17906]  ____sys_sendmsg+0x505/0x830
[ 1389.749742][T17906]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1389.749786][T17906]  ? import_iovec+0x74/0xa0
[ 1389.749820][T17906]  ___sys_sendmsg+0x21f/0x2a0
[ 1389.749856][T17906]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1389.749932][T17906]  ? __fget_files+0x2a/0x420
[ 1389.749957][T17906]  ? __fget_files+0x3a0/0x420
[ 1389.749994][T17906]  __x64_sys_sendmsg+0x19b/0x260
[ 1389.750030][T17906]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1389.750075][T17906]  ? __pfx_ksys_write+0x10/0x10
[ 1389.750093][T17906]  ? rcu_is_watching+0x15/0xb0
[ 1389.750131][T17906]  ? do_syscall_64+0xbe/0x3b0
[ 1389.750161][T17906]  do_syscall_64+0xfa/0x3b0
[ 1389.750183][T17906]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1389.750206][T17906]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.750227][T17906]  ? clear_bhb_loop+0x60/0xb0
[ 1389.750254][T17906]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1389.750274][T17906] RIP: 0033:0x7f885638ebe9
[ 1389.750296][T17906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1389.750313][T17906] RSP: 002b:00007f885714c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1389.750338][T17906] RAX: ffffffffffffffda RBX: 00007f88565b6090 RCX: 00007f885638ebe9
[ 1389.750352][T17906] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1389.750365][T17906] RBP: 00007f885714c090 R08: 0000000000000000 R09: 0000000000000000
[ 1389.750378][T17906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1389.750392][T17906] R13: 00007f88565b6128 R14: 00007f88565b6090 R15: 00007fff16dd4118
[ 1389.750428][T17906]  </TASK>
[ 1391.941205][T17923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3257'.
[ 1392.045431][T17929] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3257'.
[ 1392.195085][T17929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3257'.
[ 1392.217849][T12627] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[ 1392.591383][T12627] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1392.669109][T12627] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1392.686339][T12627] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1392.809576][T12627] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1392.835979][T12627] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1392.878641][T12627] usb 9-1: Product: syz
[ 1392.894272][T12627] usb 9-1: Manufacturer: syz
[ 1392.916412][T12627] usb 9-1: SerialNumber: syz
[ 1393.198331][   T10] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1393.377974][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1393.429044][   T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1393.440283][   T10] usb 2-1: config 0 has no interface number 0
[ 1393.453571][   T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1393.503487][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.535195][   T10] usb 2-1: Product: syz
[ 1393.540920][   T10] usb 2-1: Manufacturer: syz
[ 1393.548695][   T10] usb 2-1: SerialNumber: syz
[ 1393.566436][   T10] usb 2-1: config 0 descriptor??
[ 1393.582316][   T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1393.844801][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1393.889637][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1393.964084][T17948] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1394.628782][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1394.658071][   T10] usb 2-1: USB disconnect, device number 59
[ 1394.784925][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1394.816708][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1394.844717][   T10] quatech2 2-1:0.51: device disconnected
[ 1395.007365][T12627] usb 9-1: Found UVC 0.00 device syz (8086:0b07)
[ 1395.034977][T12627] usb 9-1: No valid video chain found.
[ 1395.075716][T12627] usb 9-1: USB disconnect, device number 5
[ 1396.189532][ T5920] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1396.372226][ T5920] usb 2-1: Using ep0 maxpacket: 16
[ 1396.390335][ T5920] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1396.402168][ T5920] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1396.410909][ T5920] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1396.423870][ T5920] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1396.432816][ T5920] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1396.443145][ T5920] usb 2-1: config 0 has no interface number 0
[ 1396.449631][ T5920] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1396.466125][ T5920] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1396.485396][ T5920] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1396.495995][ T5920] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1396.513745][ T5920] usb 2-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30
[ 1396.527292][ T5920] usb 2-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1396.546680][T15411] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[ 1396.561292][ T5920] usb 2-1: config 0 interface 125 has no altsetting 0
[ 1396.573156][ T5920] usb 2-1: config 0 interface 125 has no altsetting 2
[ 1396.626838][ T5920] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1396.637528][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1396.645930][ T5920] usb 2-1: Product: syz
[ 1396.658118][ T5920] usb 2-1: Manufacturer: syz
[ 1396.662978][ T5920] usb 2-1: SerialNumber: syz
[ 1396.678673][ T5920] usb 2-1: config 0 descriptor??
[ 1396.689812][ T5920] usb 2-1: selecting invalid altsetting 2
[ 1396.710177][T15411] usb 9-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1396.723756][T15411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1396.743912][T15411] usb 9-1: config 0 descriptor??
[ 1396.765498][T15411] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1396.897306][    C0] usb 2-1: async_complete: urb error -71
[ 1396.903495][    C0] usb 2-1: async_complete: urb error -71
[ 1396.909209][    C0] usb 2-1: async_complete: urb error -71
[ 1396.914972][    C0] usb 2-1: async_complete: urb error -71
[ 1396.930616][ T5920] get_1284_register: usb error -71
[ 1396.935938][ T5920] uss720 2-1:0.125: probe with driver uss720 failed with error -71
[ 1396.956773][ T5920] usb 2-1: USB disconnect, device number 60
[ 1397.273966][T15411] cpia1 9-1:0.0: unexpected state after lo power cmd: 00
[ 1398.141196][T15411] cpia1 9-1:0.0: only firmware version 1 is supported (got: 0)
[ 1398.358033][ T5920] usb 9-1: USB disconnect, device number 6
[ 1398.517799][T15411] usb 7-1: new high-speed USB device number 73 using dummy_hcd
[ 1398.568252][   T10] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1398.787866][T15411] usb 7-1: Using ep0 maxpacket: 16
[ 1398.799837][T15411] usb 7-1: config index 0 descriptor too short (expected 1828, got 36)
[ 1398.824412][T15411] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[ 1399.153605][   T10] usb 2-1: Using ep0 maxpacket: 16
[ 1399.172008][   T10] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1399.181817][T15411] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[ 1399.198017][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1399.206982][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[ 1399.219286][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1399.260553][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1399.327383][   T10] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1399.359456][T15411] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1399.384101][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1399.419044][T15411] usb 7-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[ 1399.435641][T15411] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.438234][T17989] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.3276'.
[ 1399.443905][   T10] usb 2-1: config 0 has no interface number 0
[ 1399.489461][T15411] usb 7-1: Product: syz
[ 1399.494194][T15411] usb 7-1: Manufacturer: syz
[ 1399.504059][T15411] usb 7-1: SerialNumber: syz
[ 1399.514394][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1399.534327][T15411] usb 7-1: config 0 descriptor??
[ 1399.549451][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1399.571453][T15411] keyspan 7-1:0.0: Keyspan 2 port adapter converter detected
[ 1399.601534][   T10] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1399.614066][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87
[ 1399.808223][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7
[ 1399.817958][   T10] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1400.302920][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 81
[ 1400.322860][   T10] usb 2-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30
[ 1400.343203][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1
[ 1400.353637][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2
[ 1400.364483][   T10] usb 2-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1400.379138][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85
[ 1400.387123][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5
[ 1400.413253][   T10] usb 2-1: config 0 interface 125 has no altsetting 0
[ 1400.436757][   T10] usb 2-1: config 0 interface 125 has no altsetting 2
[ 1400.485358][T15411] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[ 1400.501529][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3275'.
[ 1400.532875][   T10] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1400.550094][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.559492][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 83
[ 1400.567805][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 4
[ 1400.576953][   T10] usb 2-1: Product: syz
[ 1400.582282][   T10] usb 2-1: Manufacturer: syz
[ 1400.587352][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 86
[ 1400.595396][   T10] usb 2-1: SerialNumber: syz
[ 1400.616490][T15411] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 6
[ 1400.630760][   T10] usb 2-1: config 0 descriptor??
[ 1400.665946][   T10] usb 2-1: selecting invalid altsetting 2
[ 1400.678534][T15411] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[ 1400.739571][T15411] usb 7-1: USB disconnect, device number 73
[ 1400.754823][T15411] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[ 1400.772967][T15411] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[ 1400.830481][T15411] keyspan 7-1:0.0: device disconnected
[ 1400.869638][    C0] usb 2-1: async_complete: urb error -71
[ 1400.875662][    C0] usb 2-1: async_complete: urb error -71
[ 1400.881664][    C0] usb 2-1: async_complete: urb error -71
[ 1400.887755][    C0] usb 2-1: async_complete: urb error -71
[ 1400.895404][   T10] get_1284_register: usb error -71
[ 1400.900816][   T10] uss720 2-1:0.125: probe with driver uss720 failed with error -71
[ 1400.916398][   T10] usb 2-1: USB disconnect, device number 61
[ 1402.327967][T15747] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[ 1402.399010][   T30] audit: type=1326 audit(1755727430.261:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18007 comm="syz.6.3283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f4418ebe9 code=0x0
[ 1402.579822][T15747] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1402.739635][T15747] usb 9-1: config 220 has 1 interface, different from the descriptor's value: 3
[ 1403.133572][T15747] usb 9-1: config 220 interface 0 has no altsetting 0
[ 1404.164493][T15747] usb 9-1: string descriptor 0 read error: -71
[ 1404.171040][T15747] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1404.180232][T15747] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.179834][T15747] usb 9-1: can't set config #220, error -71
[ 1405.198179][T15747] usb 9-1: USB disconnect, device number 7
[ 1406.039508][T15411] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1406.342529][T15411] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1406.385678][T15411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1406.446189][T15411] usb 2-1: Product: syz
[ 1406.462486][T15411] usb 2-1: Manufacturer: syz
[ 1406.479478][T15411] usb 2-1: SerialNumber: syz
[ 1406.493608][T15411] usb 2-1: config 0 descriptor??
[ 1406.520490][T15411] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1406.845686][T18056] usb usb6: usbfs: process 18056 (syz.6.3293) did not claim interface 46 before use
[ 1409.028299][T15411] usb 2-1: USB disconnect, device number 62
[ 1411.909880][T18085] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1413.073501][T18092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[ 1413.877877][T16614] Bluetooth: hci5: unexpected event for opcode 0x0c7b
[ 1414.047767][ T5905] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1414.237948][ T5905] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[ 1414.274561][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.315153][ T5905] usb 2-1: Product: syz
[ 1414.370540][ T5905] usb 2-1: Manufacturer: syz
[ 1414.386533][ T5905] usb 2-1: SerialNumber: syz
[ 1414.512625][ T5905] usb 2-1: config 0 descriptor??
[ 1414.560985][ T5905] gspca_main: sq905c-2.14.0 probing 2770:9052
[ 1415.066626][T18094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.108654][T18094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.171323][ T5905] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[ 1415.204519][ T5905] sq905c 2-1:0.0: Reading version command failed
[ 1415.212313][ T5905] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[ 1415.267791][T16614] Bluetooth: hci1: command 0x0406 tx timeout
[ 1415.278802][ T5905] usb 2-1: USB disconnect, device number 63
[ 1417.077947][T15411] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1417.262353][T15411] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1417.304693][T15411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1417.348109][T15411] usb 2-1: Product: syz
[ 1417.352453][T15411] usb 2-1: Manufacturer: syz
[ 1417.386979][T15411] usb 2-1: SerialNumber: syz
[ 1417.452537][T15411] usb 2-1: config 0 descriptor??
[ 1417.476384][T15411] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1417.939696][T18135] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1419.519534][T15411] usb 2-1: USB disconnect, device number 64
[ 1419.716158][T18153] fuse: Bad value for 'fd'
[ 1423.362444][T18195] PKCS8: Unsupported PKCS#8 version
[ 1424.000174][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1424.257659][T18196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3331'.
[ 1430.450109][T18241] overlayfs: missing 'lowerdir'
[ 1430.626297][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3346'.
[ 1433.127832][ T5905] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 1433.308892][ T5905] usb 6-1: Using ep0 maxpacket: 16
[ 1433.343063][ T5905] usb 6-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1433.375821][ T5905] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1433.493149][ T5905] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1433.637738][ T5905] usb 6-1: config 0 has an invalid interface number: 125 but max is 1
[ 1433.676285][ T5905] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1433.727135][ T5905] usb 6-1: config 0 has no interface number 0
[ 1433.756931][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1433.777818][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1433.818958][ T5905] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1433.856984][ T5905] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1433.898729][ T5905] usb 6-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30
[ 1434.337347][ T5905] usb 6-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1434.357743][ T5905] usb 6-1: config 0 interface 125 has no altsetting 0
[ 1434.364679][ T5905] usb 6-1: config 0 interface 125 has no altsetting 2
[ 1434.419886][ T5905] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1434.541384][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1434.618989][ T5905] usb 6-1: Product: syz
[ 1434.631021][ T5905] usb 6-1: Manufacturer: syz
[ 1434.642412][ T5905] usb 6-1: SerialNumber: syz
[ 1434.669767][ T5905] usb 6-1: config 0 descriptor??
[ 1434.728519][ T5905] usb 6-1: selecting invalid altsetting 2
[ 1434.923318][    C1] usb 6-1: async_complete: urb error -71
[ 1434.929167][    C1] usb 6-1: async_complete: urb error -71
[ 1434.934951][    C1] usb 6-1: async_complete: urb error -71
[ 1434.940673][    C1] usb 6-1: async_complete: urb error -71
[ 1434.987733][ T5905] get_1284_register: usb error -71
[ 1435.007873][ T5905] uss720 6-1:0.125: probe with driver uss720 failed with error -71
[ 1435.044922][ T5905] usb 6-1: USB disconnect, device number 31
[ 1435.467335][T18279] PKCS8: Unsupported PKCS#8 version
[ 1437.939383][T18286] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3356'.
[ 1441.562328][T18307] netlink: 'syz.1.3361': attribute type 3 has an invalid length.
[ 1441.576581][T18307] netlink: 666 bytes leftover after parsing attributes in process `syz.1.3361'.
[ 1441.662040][T18311] FAULT_INJECTION: forcing a failure.
[ 1441.662040][T18311] name failslab, interval 1, probability 0, space 0, times 0
[ 1441.668081][T18296] Bluetooth: hci3: command 0x0406 tx timeout
[ 1441.683087][T18296] Bluetooth: hci4: command 0x0406 tx timeout
[ 1441.723660][T18311] CPU: 0 UID: 0 PID: 18311 Comm: syz.8.3362 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1441.723691][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1441.723704][T18311] Call Trace:
[ 1441.723713][T18311]  <TASK>
[ 1441.723724][T18311]  dump_stack_lvl+0x189/0x250
[ 1441.723755][T18311]  ? __pfx____ratelimit+0x10/0x10
[ 1441.723776][T18311]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1441.723798][T18311]  ? __pfx__printk+0x10/0x10
[ 1441.723830][T18311]  ? __pfx___might_resched+0x10/0x10
[ 1441.723852][T18311]  ? fs_reclaim_acquire+0x7d/0x100
[ 1441.723883][T18311]  should_fail_ex+0x414/0x560
[ 1441.723912][T18311]  should_failslab+0xa8/0x100
[ 1441.723936][T18311]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1441.723958][T18311]  ? __alloc_skb+0x112/0x2d0
[ 1441.723993][T18311]  __alloc_skb+0x112/0x2d0
[ 1441.724026][T18311]  netlink_ack+0x146/0xa50
[ 1441.724052][T18311]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1441.724070][T18311]  ? ref_tracker_free+0x63a/0x7d0
[ 1441.724097][T18311]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1441.724134][T18311]  netlink_rcv_skb+0x28c/0x470
[ 1441.724169][T18311]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1441.724193][T18311]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1441.724244][T18311]  ? down_read+0x1ad/0x2e0
[ 1441.724272][T18311]  genl_rcv+0x28/0x40
[ 1441.724291][T18311]  netlink_unicast+0x75c/0x8e0
[ 1441.724332][T18311]  netlink_sendmsg+0x805/0xb30
[ 1441.724374][T18311]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1441.724411][T18311]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1441.724432][T18311]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1441.724462][T18311]  __sock_sendmsg+0x21c/0x270
[ 1441.724491][T18311]  ____sys_sendmsg+0x505/0x830
[ 1441.724531][T18311]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1441.724574][T18311]  ? import_iovec+0x74/0xa0
[ 1441.724609][T18311]  ___sys_sendmsg+0x21f/0x2a0
[ 1441.724644][T18311]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1441.724729][T18311]  ? __fget_files+0x2a/0x420
[ 1441.724751][T18311]  ? __fget_files+0x3a0/0x420
[ 1441.724788][T18311]  __x64_sys_sendmsg+0x19b/0x260
[ 1441.724821][T18311]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1441.724876][T18311]  ? __pfx_ksys_write+0x10/0x10
[ 1441.724893][T18311]  ? rcu_is_watching+0x15/0xb0
[ 1441.724922][T18311]  ? do_syscall_64+0xbe/0x3b0
[ 1441.724952][T18311]  do_syscall_64+0xfa/0x3b0
[ 1441.724973][T18311]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1441.725001][T18311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.725022][T18311]  ? clear_bhb_loop+0x60/0xb0
[ 1441.725047][T18311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.725068][T18311] RIP: 0033:0x7fc3a9b8ebe9
[ 1441.725088][T18311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1441.725106][T18311] RSP: 002b:00007fc3aa9e6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1441.725130][T18311] RAX: ffffffffffffffda RBX: 00007fc3a9db5fa0 RCX: 00007fc3a9b8ebe9
[ 1441.725145][T18311] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[ 1441.725158][T18311] RBP: 00007fc3aa9e6090 R08: 0000000000000000 R09: 0000000000000000
[ 1441.725172][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1441.725184][T18311] R13: 00007fc3a9db6038 R14: 00007fc3a9db5fa0 R15: 00007ffcfb40d1a8
[ 1441.725220][T18311]  </TASK>
[ 1442.557737][T17982] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[ 1442.744753][T17982] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1442.770801][T17982] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1442.780725][T17982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1442.792854][T17982] usb 3-1: config 0 descriptor??
[ 1442.821566][T17982] pwc: Askey VC010 type 2 USB webcam detected.
[ 1442.868173][T15411] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[ 1442.896521][   T10] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 1443.027831][T15411] usb 9-1: Using ep0 maxpacket: 32
[ 1443.061835][   T10] usb 6-1: config 0 has an invalid interface number: 217 but max is 0
[ 1443.071354][   T10] usb 6-1: config 0 has no interface number 0
[ 1443.080251][T15411] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1443.092395][T15411] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1443.103299][T15411] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00
[ 1443.901630][T15411] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1443.929009][T15411] usb 9-1: config 0 descriptor??
[ 1443.941854][   T10] usb 6-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4
[ 1443.959278][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1444.247906][   T10] usb 6-1: Product: syz
[ 1444.275647][T18318] tipc: Started in network mode
[ 1444.280954][T18318] tipc: Node identity ac14140f, cluster identity 4711
[ 1444.288494][T18318] tipc: New replicast peer: 255.255.255.255
[ 1444.293533][   T10] usb 6-1: Manufacturer: syz
[ 1444.297648][T18318] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1444.320359][T17982] pwc: recv_control_msg error -71 req 02 val 2b00
[ 1444.342217][   T10] usb 6-1: SerialNumber: syz
[ 1444.356123][T17982] pwc: recv_control_msg error -71 req 02 val 2700
[ 1444.374221][   T10] usb 6-1: config 0 descriptor??
[ 1444.386613][T17982] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1444.399731][T17982] pwc: recv_control_msg error -71 req 04 val 1000
[ 1444.411088][   T10] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[ 1444.419158][T17982] pwc: recv_control_msg error -71 req 04 val 1300
[ 1444.436068][T17982] pwc: recv_control_msg error -71 req 04 val 1400
[ 1444.444914][T15411] smartjoyplus 0003:0925:8866.000C: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.8-1/input0
[ 1444.475242][T17982] pwc: recv_control_msg error -71 req 02 val 2000
[ 1444.482377][T15411] smartjoyplus 0003:0925:8866.000C: Force feedback for SmartJoy PLUS PS2/USB adapter
[ 1444.498887][T17982] pwc: recv_control_msg error -71 req 02 val 2100
[ 1444.506232][T17982] pwc: recv_control_msg error -71 req 04 val 1500
[ 1444.527192][T17982] pwc: recv_control_msg error -71 req 02 val 2500
[ 1444.535968][T17982] pwc: recv_control_msg error -71 req 02 val 2400
[ 1444.546432][T17982] pwc: recv_control_msg error -71 req 02 val 2600
[ 1444.564925][T17982] pwc: recv_control_msg error -71 req 02 val 2900
[ 1444.572744][T17982] pwc: recv_control_msg error -71 req 02 val 2800
[ 1444.588570][T17982] pwc: recv_control_msg error -71 req 04 val 1100
[ 1444.606115][T17982] pwc: recv_control_msg error -71 req 04 val 1200
[ 1444.646436][T17982] pwc: Registered as video103.
[ 1444.674993][T15411] usb 9-1: USB disconnect, device number 8
[ 1444.685838][T17982] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40
[ 1444.687953][ T5905] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[ 1444.783608][T17982] usb 3-1: USB disconnect, device number 69
[ 1444.882424][T18342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3366'.
[ 1444.944391][ T5905] usb 2-1: config 0 has no interfaces?
[ 1444.982081][ T5905] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1445.020436][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.082396][ T5905] usb 2-1: config 0 descriptor??
[ 1445.166030][T18324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3366'.
[ 1445.220300][   T10] gspca_sn9c20x: Write register 1002 failed -71
[ 1445.240235][   T10] gspca_sn9c20x: Device initialization failed
[ 1445.258816][   T10] gspca_sn9c20x 6-1:0.217: probe with driver gspca_sn9c20x failed with error -71
[ 1445.317490][   T10] usb 6-1: USB disconnect, device number 32
[ 1445.417989][ T5905] tipc: Node number set to 2886997007
[ 1445.975350][T17982] usb 2-1: USB disconnect, device number 65
[ 1446.677726][ T5961] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[ 1446.857795][ T5961] usb 9-1: Using ep0 maxpacket: 16
[ 1446.934235][ T5961] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1447.134103][ T5961] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1447.145345][T18375] 8021q: VLANs not supported on vxcan1
[ 1447.163376][ T5961] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1447.174287][ T5961] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1447.212143][ T5961] usb 9-1: Product: syz
[ 1447.230491][ T5961] usb 9-1: Manufacturer: syz
[ 1447.235179][ T5961] usb 9-1: SerialNumber: syz
[ 1447.516155][ T5961] usb 9-1: 0:2 : does not exist
[ 1447.557204][ T5961] usb 9-1: 5:0: failed to get current value for ch 0 (-22)
[ 1447.708945][ T5961] usb 9-1: USB disconnect, device number 9
[ 1448.149522][T18325] udevd[18325]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1448.818792][T18383] xt_CT: No such helper "pptp"
[ 1449.031550][T15411] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[ 1449.228037][T15411] usb 2-1: Using ep0 maxpacket: 16
[ 1449.254846][T15411] usb 2-1: config index 0 descriptor too short (expected 16456, got 72)
[ 1449.291987][T15411] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1449.312710][T18393] overlayfs: missing 'workdir'
[ 1449.328578][T15411] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1449.337094][T15411] usb 2-1: config 0 has an invalid interface number: 125 but max is 1
[ 1449.396435][T15411] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1449.430758][T15411] usb 2-1: config 0 has no interface number 0
[ 1449.449644][T15411] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[ 1449.483582][T15411] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[ 1449.515251][T15411] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1449.696164][T15411] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1449.741753][T15411] usb 2-1: too many endpoints for config 0 interface 125 altsetting 190: 32, using maximum allowed: 30
[ 1449.759179][T15411] usb 2-1: config 0 interface 125 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[ 1449.886341][T15411] usb 2-1: config 0 interface 125 has no altsetting 0
[ 1449.894384][T15411] usb 2-1: config 0 interface 125 has no altsetting 2
[ 1450.147263][T15411] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[ 1450.164127][T18405] PKCS8: Unsupported PKCS#8 version
[ 1450.296834][T15411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1451.024831][T15411] usb 2-1: Product: syz
[ 1451.030110][T15411] usb 2-1: Manufacturer: syz
[ 1451.035353][T15411] usb 2-1: SerialNumber: syz
[ 1451.063402][T15411] usb 2-1: config 0 descriptor??
[ 1451.099177][T15411] usb 2-1: selecting invalid altsetting 2
[ 1451.280665][    C0] usb 2-1: async_complete: urb error -71
[ 1451.286714][    C0] usb 2-1: async_complete: urb error -71
[ 1451.292601][    C0] usb 2-1: async_complete: urb error -71
[ 1451.298564][    C0] usb 2-1: async_complete: urb error -71
[ 1451.333183][T15411] get_1284_register: usb error -71
[ 1451.366073][T15411] uss720 2-1:0.125: probe with driver uss720 failed with error -71
[ 1451.457164][T15411] usb 2-1: USB disconnect, device number 66
[ 1451.533347][ T5905] usb 7-1: new full-speed USB device number 74 using dummy_hcd
[ 1451.770331][ T5905] usb 7-1: config 0 has no interfaces?
[ 1451.796711][ T5905] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1451.855711][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1451.891443][ T5905] usb 7-1: config 0 descriptor??
[ 1451.918201][ T5920] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 1452.109157][ T5920] usb 6-1: Using ep0 maxpacket: 16
[ 1452.131811][ T5920] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1452.150049][ T5905] usb 7-1: USB disconnect, device number 74
[ 1452.177560][ T5920] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1452.211984][ T5920] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1452.232666][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1452.264839][ T5920] usb 6-1: Product: syz
[ 1452.277797][ T5920] usb 6-1: Manufacturer: syz
[ 1452.282572][ T5920] usb 6-1: SerialNumber: syz
[ 1452.612120][ T5920] usb 6-1: 0:2 : does not exist
[ 1452.727388][ T5920] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 1453.258090][ T5920] usb 6-1: USB disconnect, device number 33
[ 1453.529510][T18325] udevd[18325]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1453.922634][T18446] overlayfs: missing 'lowerdir'
[ 1453.999374][ T5920] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[ 1455.457894][ T5920] usb 3-1: config 0 has an invalid interface number: 217 but max is 0
[ 1455.472708][ T5920] usb 3-1: config 0 has no interface number 0
[ 1455.756103][T18452] usb 8-1: USB disconnect, device number 41
[ 1455.954414][ T5920] usb 3-1: New USB device found, idVendor=a168, idProduct=0618, bcdDevice=e3.a4
[ 1455.981497][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1456.019084][ T5920] usb 3-1: Product: syz
[ 1456.036151][ T5920] usb 3-1: Manufacturer: syz
[ 1456.088158][ T5920] usb 3-1: SerialNumber: syz
[ 1456.097196][ T5920] usb 3-1: config 0 descriptor??
[ 1456.110349][ T5920] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0618
[ 1456.539708][T18462] usb usb1: check_ctrlrecip: process 18462 (syz.6.3406) requesting ep 01 but needs 81
[ 1456.550202][T18462] usb usb1: usbfs: process 18462 (syz.6.3406) did not claim interface 0 before use
[ 1456.766217][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'.
[ 1457.026223][ T5920] gspca_sn9c20x: Write register 1001 failed -110
[ 1457.047844][ T5920] gspca_sn9c20x: Device initialization failed
[ 1457.065867][ T5920] gspca_sn9c20x 3-1:0.217: probe with driver gspca_sn9c20x failed with error -110
[ 1457.098936][T18463] vivid-000: disconnect
[ 1457.105606][T18458] vivid-000: reconnect
[ 1457.417878][   T31] INFO: task syz.7.3068:17207 blocked for more than 143 seconds.
[ 1457.425691][   T31]       Not tainted 6.16.0-syzkaller #0
[ 1457.442669][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1457.467729][   T31] task:syz.7.3068      state:D stack:25096 pid:17207 tgid:17207 ppid:11585  task_flags:0x400040 flags:0x00004006
[ 1457.494697][   T31] Call Trace:
[ 1457.521703][   T31]  <TASK>
[ 1457.529179][   T31]  __schedule+0x16aa/0x4c90
[ 1457.553325][   T31]  ? schedule+0x165/0x360
[ 1457.656118][   T31]  ? __pfx___schedule+0x10/0x10
[ 1457.662444][   T31]  ? schedule+0x91/0x360
[ 1457.669709][   T31]  schedule+0x165/0x360
[ 1457.677408][   T31]  __fuse_simple_request+0xf15/0x18d0
[ 1457.740974][   T31]  ? __pfx___fuse_simple_request+0x10/0x10
[ 1457.768524][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1457.792459][   T31]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1457.806135][   T31]  fuse_flush+0x5d4/0x800
[ 1457.815417][   T31]  ? __pfx_locks_remove_posix+0x10/0x10
[ 1457.828502][   T31]  ? __pfx_fuse_flush+0x10/0x10
[ 1457.850844][   T31]  ? __pfx_fuse_flush+0x10/0x10
[ 1457.857504][   T31]  filp_flush+0xba/0x190
[ 1457.862615][   T31]  filp_close+0x1d/0x40
[ 1457.867464][   T31]  __se_sys_close_range+0x359/0x650
[ 1457.877541][   T31]  ? __pfx___se_sys_close_range+0x10/0x10
[ 1457.884963][   T31]  ? do_syscall_64+0xbe/0x3b0
[ 1457.897004][   T31]  do_syscall_64+0xfa/0x3b0
[ 1457.904194][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.915240][   T31]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 1457.921262][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1457.926530][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1457.938458][   T31] RIP: 0033:0x7f4c3738ebe9
[ 1458.090714][   T31] RSP: 002b:00007ffeba3cdac8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1458.099492][   T31] RAX: ffffffffffffffda RBX: 000000000013dbd5 RCX: 00007f4c3738ebe9
[ 1458.108061][   T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 1458.116474][   T31] RBP: 00007f4c375b7da0 R08: 0000000000000001 R09: 00000011ba3cddbf
[ 1458.124793][   T31] R10: 0000001b2dc20000 R11: 0000000000000246 R12: 00007f4c375b5fac
[ 1458.134046][   T31] R13: 00007f4c375b5fa0 R14: ffffffffffffffff R15: 00007ffeba3cdbe0
[ 1458.142331][   T31]  </TASK>
[ 1458.151189][   T31] 
[ 1458.151189][   T31] Showing all locks held in the system:
[ 1458.199275][   T31] 1 lock held by khungtaskd/31:
[ 1458.211374][   T31]  #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1458.224230][   T31] 2 locks held by getty/5602:
[ 1458.229561][   T31]  #0: ffff8880354520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1458.240189][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1458.259604][   T31] 1 lock held by syz-executor/5823:
[ 1458.265724][   T31]  #0: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[ 1458.276353][   T31] 1 lock held by syz.8.3408/18467:
[ 1458.282053][   T31] 
[ 1458.284858][   T31] =============================================
[ 1458.284858][   T31] 
[ 1458.295637][   T31] NMI backtrace for cpu 0
[ 1458.295657][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1458.295680][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1458.295692][   T31] Call Trace:
[ 1458.295700][   T31]  <TASK>
[ 1458.295711][   T31]  dump_stack_lvl+0x189/0x250
[ 1458.295739][   T31]  ? __wake_up_klogd+0xd9/0x110
[ 1458.295769][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1458.295793][   T31]  ? __pfx__printk+0x10/0x10
[ 1458.295834][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1458.295868][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1458.295895][   T31]  ? _printk+0xcf/0x120
[ 1458.295926][   T31]  ? __pfx__printk+0x10/0x10
[ 1458.295955][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1458.295989][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1458.296023][   T31]  watchdog+0xfee/0x1030
[ 1458.296056][   T31]  ? watchdog+0x1de/0x1030
[ 1458.296094][   T31]  kthread+0x70e/0x8a0
[ 1458.296125][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1458.296153][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.296181][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1458.296202][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1458.296220][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.296246][   T31]  ret_from_fork+0x3fc/0x770
[ 1458.296269][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1458.296295][   T31]  ? __switch_to_asm+0x39/0x70
[ 1458.296319][   T31]  ? __switch_to_asm+0x33/0x70
[ 1458.296342][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.296371][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1458.296423][   T31]  </TASK>
[ 1458.296435][   T31] Sending NMI from CPU 0 to CPUs 1:
[ 1458.460474][    C1] NMI backtrace for cpu 1
[ 1458.460494][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1458.460513][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1458.460524][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[ 1458.460547][    C1] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[ 1458.460561][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2
[ 1458.460579][    C1] RAX: 60920f71ae582e00 RBX: ffffffff81976918 RCX: 60920f71ae582e00
[ 1458.460592][    C1] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40
[ 1458.460604][    C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb
[ 1458.460616][    C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa0b3f0
[ 1458.460629][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a51b40
[ 1458.460641][    C1] FS:  0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000
[ 1458.460668][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1458.460680][    C1] CR2: 000000110c349968 CR3: 00000000791ca000 CR4: 00000000003526f0
[ 1458.460697][    C1] Call Trace:
[ 1458.460707][    C1]  <TASK>
[ 1458.460714][    C1]  default_idle+0x13/0x20
[ 1458.460733][    C1]  default_idle_call+0x74/0xb0
[ 1458.460754][    C1]  do_idle+0x1e8/0x510
[ 1458.460775][    C1]  ? __pfx_do_idle+0x10/0x10
[ 1458.460798][    C1]  ? do_idle+0xa/0x510
[ 1458.460815][    C1]  cpu_startup_entry+0x44/0x60
[ 1458.460833][    C1]  start_secondary+0x101/0x110
[ 1458.460855][    C1]  common_startup_64+0x13e/0x147
[ 1458.460882][    C1]  </TASK>
[ 1458.697095][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1458.704130][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1458.714277][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1458.724815][   T31] Call Trace:
[ 1458.728120][   T31]  <TASK>
[ 1458.731067][   T31]  dump_stack_lvl+0x99/0x250
[ 1458.735658][   T31]  ? __asan_memcpy+0x40/0x70
[ 1458.740262][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1458.745548][   T31]  ? __pfx__printk+0x10/0x10
[ 1458.750146][   T31]  panic+0x2db/0x790
[ 1458.754050][   T31]  ? __pfx_panic+0x10/0x10
[ 1458.758483][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[ 1458.764477][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1458.769969][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[ 1458.776299][   T31]  watchdog+0x102d/0x1030
[ 1458.780732][   T31]  ? watchdog+0x1de/0x1030
[ 1458.785531][   T31]  kthread+0x70e/0x8a0
[ 1458.789664][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1458.794619][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.799335][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1458.804619][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1458.810010][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.814636][   T31]  ret_from_fork+0x3fc/0x770
[ 1458.819327][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1458.824625][   T31]  ? __switch_to_asm+0x39/0x70
[ 1458.829407][   T31]  ? __switch_to_asm+0x33/0x70
[ 1458.834182][   T31]  ? __pfx_kthread+0x10/0x10
[ 1458.838793][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1458.843664][   T31]  </TASK>
[ 1458.847150][   T31] Kernel Offset: disabled
[ 1458.851564][   T31] Rebooting in 86400 seconds..