last executing test programs:

1m43.800867081s ago: executing program 1 (id=697):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x6, 0x204100)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f00000000c0)={0x26, 0x28, 0x15, 0x18, 0x9, 0x80000000, 0x2, 0x21, 0xffffffffffffffff}) (async)
syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYRES32=r0], 0x0)

1m40.618058981s ago: executing program 1 (id=704):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_misc(r1, &(0x7f0000000040)="23ac1d4c81d5bf6b60c0b64724ae03de23d6e8ca9348f685b647463482bca11ad0c9933618bc70462fa2e941bb4041929354c898db3e22a8b15799459b5a2a548e0c3567dc5b73cb8376063bc4c997b9cf6834e5a9a765c1568f638b14ee545e8bdd6da3090db1c54f48784385f8042a2f592aec15ef07ae953c0841b79fd0747da9a03efc818b916fcd16adadf232a594dc1593cd1c6d", 0x97)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220700000085f79378ea0fb9"], 0x0}, 0x0)

1m38.257819437s ago: executing program 1 (id=715):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r1=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000100)={0x28, 0x2, r1, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f00000000c0)})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
r3 = accept4$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x14, 0x80800)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r4=>0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000280)={'syztnl1\x00', <r5=>r4, 0x80, 0x8000, 0x14, 0x7, {{0x26, 0x4, 0x1, 0x5, 0x98, 0x68, 0x0, 0xd9, 0x29, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0xf, 0x1c, [@rand_addr=0x64010100, @empty, @broadcast]}, @timestamp_addr={0x44, 0x44, 0x32, 0x1, 0x8, [{@broadcast, 0x8001}, {@multicast1, 0x4}, {@multicast1, 0x401}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@loopback, 0xfffffffe}, {@rand_addr=0x64010102, 0x8001}, {@empty, 0x1ff}, {@private=0xa010100, 0xef}]}, @generic={0x83, 0x7, "5c2c61de73"}, @generic={0x7, 0x6, "bff5b25a"}, @timestamp_prespec={0x44, 0x4, 0x32, 0x3, 0x9}, @timestamp={0x44, 0x20, 0x4a, 0x0, 0x0, [0x3, 0x0, 0x8, 0xfffffff9, 0x4254, 0x7, 0x6]}]}}}}})
recvmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000380)=@sco, 0x80, 0xfffffffffffffffc, 0x0, &(0x7f0000000400)=""/31, 0x1f}, 0x1}], 0x1, 0x10002, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r2)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000015c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000800}, 0xc, &(0x7f0000001580)={&(0x7f0000000500)={0x106c, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_OURS={0x1050, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x43, 0x4, "4ec70dc2218d4b64994b858321e02c2d8db7ec6948f93711ded94a96f429dfefaa6255700323452eefcf947afdbacaa0460598f8c9dd4be361c861c910ddbe"}]}]}, 0x106c}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000001600)={[0x3, 0x4, 0x2, 0x2, 0x8b, 0x401, 0x4, 0x9, 0xfff, 0x7, 0x9, 0xffffffff, 0xcc2e, 0x7, 0x0, 0x2d7a4469], 0x4000, 0x2001})
close(r0)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f00000016c0)={@private=0xa010102, @broadcast, 0x1, "f7c632fa8eed3d58cee0679b7cae7c71ab909da45ca69c521f88d90a52ab2b23", 0x2c8, 0x6, 0x80000000, 0x8001}, 0x3c)
connect(0xffffffffffffffff, &(0x7f0000001700)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x26}}, 0x4, 0x4}}, 0x80)
ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000001780)={0xe, 0xffff0000, 0x4, 0xb, 0xfffffff7, 0x81})
sendmsg$nl_route(r2, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)=@delnexthop={0x60, 0x69, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x8}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8}, {0x8, 0x1, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000)
r8 = syz_open_dev$loop(&(0x7f0000001900), 0x8001, 0x1)
ioctl$BLKBSZGET(r8, 0x80081270, &(0x7f0000001940))
recvmmsg(r6, &(0x7f000000bdc0)=[{{&(0x7f0000001980)=@xdp, 0x80, &(0x7f0000003c40)=[{&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/223, 0xdf}, {&(0x7f0000002b00)=""/68, 0x44}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)=""/83, 0x53}, {&(0x7f0000002c40)=""/4096, 0x1000}], 0x6, &(0x7f0000003cc0)=""/188, 0xbc}, 0x4}, {{&(0x7f0000003d80)=@vsock, 0x80, &(0x7f0000004140)=[{&(0x7f0000003e00)=""/195, 0xc3}, {&(0x7f0000003f00)=""/74, 0x4a}, {&(0x7f0000003f80)=""/151, 0x97}, {&(0x7f0000004040)=""/172, 0xac}, {&(0x7f0000004100)=""/53, 0x35}], 0x5, &(0x7f00000041c0)=""/216, 0xd8}, 0x80}, {{&(0x7f00000042c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000004340)=""/101, 0x65}, {&(0x7f00000043c0)=""/227, 0xe3}, {&(0x7f00000044c0)=""/96, 0x60}, {&(0x7f0000004540)=""/5, 0x5}, {&(0x7f0000004580)=""/64, 0x40}, {&(0x7f00000045c0)=""/11, 0xb}, {&(0x7f0000004600)=""/4096, 0x1000}], 0x7, &(0x7f0000005680)=""/252, 0xfc}, 0x2}, {{&(0x7f0000005780)=@caif=@rfm, 0x80, &(0x7f0000006800)=[{&(0x7f0000005800)=""/4096, 0x1000}], 0x1, &(0x7f0000006840)=""/95, 0x5f}, 0x7}, {{0x0, 0x0, &(0x7f0000007a00)=[{&(0x7f00000068c0)=""/4096, 0x1000}, {&(0x7f00000078c0)=""/64, 0x40}, {&(0x7f0000007900)=""/103, 0x67}, {&(0x7f0000007980)=""/76, 0x4c}], 0x4, &(0x7f0000007a40)=""/220, 0xdc}, 0xfffffff9}, {{&(0x7f0000007b40)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000008d80)=[{&(0x7f0000007bc0)=""/185, 0xb9}, {&(0x7f0000007c80)=""/4096, 0x1000}, {&(0x7f0000008c80)=""/254, 0xfe}], 0x3, &(0x7f0000008dc0)=""/233, 0xe9}, 0xe12e}, {{&(0x7f0000008ec0)=@nfc, 0x80, &(0x7f0000009080)=[{&(0x7f0000008f40)=""/73, 0x49}, {&(0x7f0000008fc0)=""/144, 0x90}], 0x2, &(0x7f00000090c0)=""/104, 0x68}, 0x10001}, {{0x0, 0x0, &(0x7f000000a5c0)=[{&(0x7f0000009140)=""/143, 0x8f}, {&(0x7f0000009200)=""/17, 0x11}, {&(0x7f0000009240)=""/22, 0x16}, {&(0x7f0000009280)=""/120, 0x78}, {&(0x7f0000009300)=""/4096, 0x1000}, {&(0x7f000000a300)=""/174, 0xae}, {&(0x7f000000a3c0)=""/216, 0xd8}, {&(0x7f000000a4c0)=""/223, 0xdf}], 0x8, &(0x7f000000a640)=""/97, 0x61}, 0x1f620000}, {{&(0x7f000000a6c0)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f000000bc80)=[{&(0x7f000000a740)=""/248, 0xf8}, {&(0x7f000000a840)=""/241, 0xf1}, {&(0x7f000000a940)=""/65, 0x41}, {&(0x7f000000a9c0)=""/37, 0x25}, {&(0x7f000000aa00)=""/133, 0x85}, {&(0x7f000000aac0)=""/4096, 0x1000}, {&(0x7f000000bac0)=""/98, 0x62}, {&(0x7f000000bb40)=""/134, 0x86}, {&(0x7f000000bc00)=""/12, 0xc}, {&(0x7f000000bc40)=""/37, 0x25}], 0xa, &(0x7f000000bd40)=""/87, 0x57}, 0x7}], 0x9, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f000000c000)={0xac, 0x1, {0x1, 0x0, 0xb, 0x2, 0x3}, 0xfffffffb})
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9c706a41f181b1ed, 0x11, 0xffffffffffffffff, 0x0)
r10 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f000000c080), 0x2, 0x0)
syz_io_uring_submit(r9, 0x0, &(0x7f000000c0c0)=@IORING_OP_TEE={0x21, 0x5a, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0x0, r10}})
ioctl$SIOCRSSL2CALL(r2, 0x89e2, &(0x7f000000c100)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f000000c140)={@rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x44}}, 0x9, 0x1, 0xa30, 0xbd062668bae82ec5, 0xff, 0x255, r5})
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f000000c1c0)={{0x2, 0x4e23, @empty}, {0x1}, 0x1e, {0x2, 0x4e23, @multicast1}, 'veth1_to_bond\x00'})
bind$inet(0xffffffffffffffff, &(0x7f000000c240)={0x2, 0x4e22, @empty}, 0x10)

1m37.210833771s ago: executing program 1 (id=718):
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x400, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0x6}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0x400, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gre0\x00', &(0x7f00000001c0)={'erspan0\x00', <r2=>0x0, 0x1, 0x80, 0x1, 0x400, {{0xc, 0x4, 0x1, 0x4, 0x30, 0x65, 0x0, 0x31, 0x29, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x0, [{@remote, 0x5d5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @generic={0x44, 0x7, "5993a5f27b"}]}}}}})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32=r5, @ANYBLOB="00080000000000001c0012800b00010062726964676500000c00028006002700080080"], 0x3c}, 0x1, 0x1000000, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', <r7=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f0000000580)=[{}], 0x8, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x8e, 0x8, 0x8, &(0x7f0000000640)}}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x3cc, r1, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x174, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd05}, @ETHTOOL_A_BITSET_VALUE={0xed, 0x4, "be2bf8a8d3707bd4037de822c4952b40f19ddcc96789f781ae86c8f438bdfd5591ce0f9327e131e6aa9c975a13c03a6a9d6ade1b66cbdf643d4fe89eca75e106e8df4cd28d47d87789c3d3c2af2e36cbd63ac4ec180d3db1135e3025b5075733522ecfe7e23f2a4e97153193b5af7f5419dc4336fced6ca76db82daec202901b5a3e965a47401cd6232f2c7080671ebd741001d30d8eab77efd7976ac75f0c16200ca6c29b25cc10ced4c6f9f886dd68007e62a64fc0ec4033c5cf566f882a7333213708f7a42755f6a4d0e8d6266e6a3d87bcf4f37555d2281054d4b23da852b70892c62408a8f22f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x30, 0x5, "dc3dd404d34a3bdae811bbd99eecb9a44b8017900b9ac07746a2a374a6dfb0da16915e2a7ac9091df06630ce"}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "69f92f58122c273f7de5b42d98a80c6f738eff38d08f30059c0d43bc165c855525deb50feefc92111b0f46843d22a1b982354a4579a9c393a6a84092a9f2"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x20, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x17, 0x5, "c7edc274f875d671bf9640934d44c793cdb64a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x158, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "035a9ae978377ae6503c13b719f5b9f7a4366a570edaa5e9b4318371a81ba17313d95cb35215222ee9a7e2358513178dde812cc1554bf8fe14585b0629ed0d39b83cd2508cd4af81fdc0abd4b6326e244e17bddddc3b6ed1f63f689252856d4f2a4db4b661e203ccbe42563c6e036264fe07ed75e07c196533fba8ec97c7d9c90ed7ef8da337b6a710cdba5e6c167c522443f35d42dc16324a81c06a4d22f8bbb66b642011dfdc1d2eab32a4e43b0ddd6af134e3405c955fc985bf99963355894ef0597230b6e3e36ae3846e2b6d2a8a2dba53"}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '}*!+}\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '&^,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&%\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xab72}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&{%:{&/W(\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'hfsc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

1m36.799999486s ago: executing program 1 (id=720):
r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0)
read$rfkill(r0, 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid() (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
close(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fc02000000000000000000000000000027030000000000000000000000000000000000000000000000000000000000000010000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000080000000000025bd7000023500000a0000ff00000000000000004f000200656362286369706865725f6e756c6c2900"/217], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) (async)
ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x20000, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40000, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d7, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x8569, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8878, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0xcca, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1ffffe], [0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc, 0x0, 0x0, 0x0, 0x744]}, 0x45c)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
fsmount(0xffffffffffffffff, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x0) (async)
fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x5, &(0x7f0000000000)='sync\x00', 0x0, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)

1m36.067367243s ago: executing program 1 (id=722):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_open_procfs(r0, &(0x7f0000000000)='net/vlan/vlan1\x00')
read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = syz_open_dev$I2C(&(0x7f0000000480), 0x8000, 0x0)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}], 0x1})
syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x82101, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r7, 0x2285, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20, 0x3, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280))

1m20.625862277s ago: executing program 32 (id=722):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_open_procfs(r0, &(0x7f0000000000)='net/vlan/vlan1\x00')
read$FUSE(r4, &(0x7f0000006300)={0x2020, 0x0, <r5=>0x0}, 0x2020)
ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r6 = syz_open_dev$I2C(&(0x7f0000000480), 0x8000, 0x0)
ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000180)={&(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0}], 0x1})
syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x82101, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r7, 0x2285, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x20, 0x3, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280))

10.918531264s ago: executing program 5 (id=1039):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
unshare(0x20040600)
readahead(0xffffffffffffffff, 0x401, 0x6c9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000002c0)={[{@huge_always}]})
chdir(&(0x7f0000000140)='./file0\x00')
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040))
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f00000000c0)=0x1ff)
mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
read$FUSE(r3, &(0x7f0000001740)={0x2020}, 0x2020)

10.796053341s ago: executing program 2 (id=1040):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005d00)=[{{&(0x7f0000000900)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000980)="dc0848c756c3650469754114ecf65b21122776c7a3132131fb66db7f6512605cd93e08291c7186fe709384e64b2d754f14ef26705818e07a4bc8a8b25f617503ce77f179aa194f9529d208c0432d55535671bcb54d0071e8b176c94c410805adab055af9e75a88014fb7bc593ba0607697a796ea6a190b2ae3b6bec11ac3b600a68dda4fa7c4bca0a05274", 0x8b}, {&(0x7f0000000040)="fad83f796459b34e07da8b7954133fdfd1df", 0x12}, {&(0x7f0000000a40)="30454b1f4386bb30000d2b4475a640b785c821f9edda5ab4dfd4b121c17d921e907f7993bd7314a2ae99e502a4ad89b29d90b804e4ba701d1605c5ba0686ec8289ee2055964d9099c45bb5fab7c02091eb8399e326e270133c9205c119939dd6cd3cb0a107eafb47a1303c6c0c06c589e85f5eedc36b62953d37d7efe0b302b3870b2cb3a16307287186251cb5e1781fa7c4dc09d2c23102c1fcbe67af72b673aa8d6e4683ccd5835a8239bdc788b949b2ef5ffe0cd0052f5dfc30ea60991229b29e9d54674e44aa", 0xc8}, {&(0x7f0000000b40)="bae9446809f35a5548950c0613e3fe46e46df9c411dcd2e06dd23bd78ea7998e3519f4b250d205b4bc1a941abb5695a995818a0ddba96fe70d38b21497d86d731965f7e753b93fbdf8bcd8e5f0894c51775b6cff9e6776c06cb45fdfe2c2eda10aac907323634257782ee961079f2ac40f5e944704dfacee7390d6d48c6eb40c867ebac754445df6f59ba4f59ed6a7060bbc28a72964b551cf7bd5449cc241428756b6f5f4cfa03e419716e1a6", 0xad}, {&(0x7f0000000c00)="dfa43a5927599377c662fe97d971efd178eaa878d09e1f7e409dc4b3abf4c3cb95c109ebf0b27228c40391a4f4ff1e2cda8e18e888d832fa9e6000203d022869c599d0d0809f7555646782111a1c545852fd8710d9ccc5bfce4fce29c30fcb530994284c922564e153b82891ec5e117495f95c203569f4b35ab99be38aed080f910490e62bfaec554ae6ed9cdaff84eafdebf247c229a9e0cfbeaf7b60d8e17320c46b52e13a13c8bf4874953e2b2aac", 0xb0}], 0x5, 0x0, 0x0, 0x4048841}}, {{&(0x7f0000000d40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000ec0)=[{&(0x7f0000000dc0)="fad082f899907c397b56d5f5ab02ec7bb1fde02cf186af3eaad689247074620405e8d485734834fcb4acb990409ea0548d2dedf7b812985c81d31badde36a9d8fed62b02bfbf74148e2d5e7806aabd8356e19ad7734b564fa674a4e08704df456e2befb6c589d402895c47c26e3e9475cb5e59b8e0fd6218d0ca174f51f3433906ff3b97e4f878603256f69b4a35e808ea0d47f457016eb415e92b53e91c792307afcfcbc2d73b36278f1e3e0d27c5d619bdd9981b5aeb611aeb1cfad7306f4a97fe1cf961c6fe481e02593452869c5c642d74453b8f5b5ecc4e87793d710f19c1d314dfbbe8ee542628fac4", 0xec}], 0x1, &(0x7f0000001140)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000002c0000000000000088b8a21bb495fbd1", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x4}}, {{&(0x7f0000004500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000005a40)=[{&(0x7f0000004640)="430f82080f5353422c6d93a9cb1f8f48b649b221a50ab3cb5878b785d9cdac64790efde9fd601c0fcc67a1a44704aeea80660d694adbae2a7f5461a6d1f7820b01920b73c51cb18a29834822766560b926ee23e87f8f93bf22a12d035a96e6f5d39bc980552ec02491af5e79c2508656d535691daf1c0dcb3840668225ebcf1d79e0894bc24a", 0x86}, {&(0x7f0000004700)="48f6b0b0742a3a83259bfce06ac3652804c23872e87177b79bc94627d1f24a8c8259226c540f60cfa65224bc692eafdbf1702faf5ef4fd2b9c5956df81caa6f55966fc920a2fe8a10206be8f2a357f3fa8d91ca3a2be53c76a91b97b9b036f09de305a2a22aaa08ada9c61b378d9815830cbc14b17f12d28e8273484ea27c840285105d5b6e6ca1b9f61415e8715c984be95cb494fb39986b67b28593100daa24d95cd7d077c3473f4aa27faf06b14a82320efc118c3e75b1428bac56ddb2dbe0bd62b9a5fe575f022d324056e4f1122e4c95e082550669cbaf63049a18065230fc71a7b1bc533edb3", 0xe9}, {&(0x7f0000004800)="595f4d293b255188d1e6b972bda6b15cefffa4a654cdb13f10835a037cd8a9df8fb872134de5275a76d5d0d3f9181551931d27fd86a3a14262a3a238146b2dd7c84416c698391d1f3577a46f56e5a7bfb405f51aafd249324f4c945c272292cd48704ea515ce4486f0f922e2a3accb98c111a0b4684090517714eae5d19cbcbc62445da1e2e0b801eba17773e74d23a676c5d25b430e9f19aa3e51c7022135b38979e996ebd2c719f8af83e6fa102da4c32656405524f8d8b04ab93356573c5b88", 0xc1}, {&(0x7f0000004900)="0cd817d0d1ef4285f6a6ec35f366a8183c3bd7be7453b9f7d2df1a2ead46e55b2b1216db35e62885732be37758b17c7fb68d947e986e07af4fdb9b3bfc6dd8deda95a0e828803e41eb9ddf08de692bb5cbe06d5636bb661f7f26f08d0a197ef808fb9ea8c11c85ec0fef9ec5911ae1f55c6f5b8cba30fcbff6e297a4e45240c82a8afd372858773e0194c15b98edd6c62411fc6ea58b4cd9d87395c4cd7f3e358032f734016cc5", 0xa7}, {&(0x7f00000049c0)="e4ddeea859979cc67eb8b12b7c477ea08c365b273aa577a1b278c2eecc85af18c38eafadd0dffb054d0c114c701ec50b098dd525a1c3cb72befe0da86aee205800b77e306e43fce764d149e05086edb8a057d94266ff1a71c79b96041224c510d2d85ef70a28d76602397a72791c22575964", 0x72}, {&(0x7f0000004a40)="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", 0x1000}, {&(0x7f0000004580)='C9E', 0x3}], 0x7, &(0x7f0000005c40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c}}], 0xc0, 0x8c7450e6859cc395}}], 0x3, 0x80)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000480)=@l2tp, 0x80, &(0x7f0000001900)=[{&(0x7f0000000700)=""/90, 0x5a}, {&(0x7f0000000780)=""/100, 0x64}, {&(0x7f0000000800)=""/117, 0x75}, {&(0x7f0000000880)=""/106, 0x6a}, {&(0x7f00000032c0)=""/4098, 0x1002}], 0x5, &(0x7f0000001980)=""/69, 0x45}, 0x9a67}, {{&(0x7f0000002b40)=@x25={0x9, @remote}, 0x80, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/133, 0x85}, {&(0x7f00000000c0)=""/16, 0x10}], 0x3, &(0x7f0000003240)=""/128, 0x80}, 0x1}, {{&(0x7f0000002bc0)=@qipcrtr, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000002f80)=""/22, 0x16}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002fc0)=""/132, 0x84}], 0x1, &(0x7f00000030c0)=""/118, 0x76}, 0x50cd}], 0x4, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x702939ce71adecb9, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000640)={0x2, {{0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, 0x88)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000010401040000000000000000050000070500010003000000a21a27fa064614324b919f910c691a3298fb4cbc92b5a8334e020b58167f0ac8a1b748fcff157ead161d74bf3821f97cd0ec62f9238e33d9b38d15efdd894b3cb1762159feee61ca517d469ec04d2f1fa4c3057da8021c11fbfd802e2880c1bce31e93b8ee7405230a51844a2ee858cc51fae2eb8ee9096ce5"], 0x1c}, 0x1, 0x0, 0x0, 0x24008054}, 0x40)
r4 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000f00)=0xffffffffffffffff, 0x2)
connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e1f, 0x8bc, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x1}, 0xfffffffffffffd63)
pwritev(r1, 0x0, 0x0, 0x0, 0x8)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x4, 0x0, 0x0, 0x2)
futex(&(0x7f000000cffc)=0x5, 0x5, 0x24, 0x0, &(0x7f0000000000)=0xfffffffe, 0xffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1000000000001, 0x2)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4010, 0xffffffffffffffff, 0x1000)

10.261272203s ago: executing program 5 (id=1041):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6, 0x5}]}, 0x10)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x400, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r1, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x740085b3, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="412e450a2a7b9586d1e6e9de257afc4fd60c8de430c0d6348b2cf1db8d070a539de9c1e91a178f9240dbcfe303566018f6c20c55d643a2ed46aaacf49ca491ee2f06184bdb548778a2c56e56f6b40b994419428bbbb9dfa5f9593511ca8ae1c088fb0ee5da72f505000000000000002c04754204f194ae6ceff4570d44496eeffe619998eafc7167d22e1c6aa73e89ad19224e35130a37cf68d5c41ccafe59b4b753a26e06c4306d31d78de6cede97c06e3ca2cc4af66b7548268efa91621ffca2655d2c8f1a9bb019b88fa729cb3d32f72c098c44898d42c42f39feb4faead93980726c236129acdf31c01f1cabb5ca3ec4e45eb5e6e59912792b4976e3f2b560c861d49b539d8e1870040a8cf190a8a767ec067a8048aac53336b44669d3d425843ae80681a7c02a5d5a3d90f355fd4a6ac277e75230d558f0df20cb323cc65e9b5a258cdd669c8a9534e4aff09a8fe89b124748c9e756c28789c2152a5142bc0bb205e339d43bb980b3f04a3c1a424a2a093966b20600a5410e0528fb35937c998eea19f01eaf2f39e16d85563a6737ddab3213ca1832f0afdf891e34a582f6a4ac81fda70ebc3fedac2fb3a492fdb40b91021e5d371d990064cd1f7c2c1a6472dec7505f9a4940057a3e57fd53aa3cd2eb914e073a19b6e925f8553e6875c093c7d19de25861fd9640f0eca4cda0467f12126daa2e0c6df7d4e4babe5a6e59e8391be7700790315b6b8a8aa74cd6d3f054aceaeda79430676b67fe25c9029e0894b413377fc4d8300d9f9338fadd07e4c80cac08113df8971a868458c47c06fff0c1c4bfd48ea583e9e76ef103d42c233b6de10b30612cdbeb6b60a6a4dbbe2da63cc2dd4fb93cac65af3c1279274f4af0e2c5b96e6068aa5b41f7548fb72b0c142351f64446db7425115b89132b5589ee642ebbde655adb2d7d1117456a6e4f2886879b42baf85e05d53e2aceea9c3830673bdc4d081675fe76b994651af9c3f16b7513834fce4654f84558a8308fa677d05bffcc893d9813bf87c5ec520cd66ad58dc06f0c47d253cd36dfec82980fc8dbdcd4b1c037c2b30bef455984f3e8ed19d69e185fe4fbdda2c2517ec9abfbb4841252e650b6bf56fdeca9a4ee3c311de3c6859ec14cc00e95323c57c02fa894d83ea17944f3112fc19a7e11335d7951ec6dd5b4f06fb9b637313a230341ea5da6a7a959e707d0cd5fca60a6649c8df8d6c17e9a49d230e5775df14e4b43aa3420bd0b8814ec7360ab1910e69fab8932f7646d7998bdc2e8ec354c52da21ed83fb7582cb9d37bb95f144974f72c7b0ae7b42945768fa8ec0dd6daba72d05809670506ef1054282201b00906c8af64e3e13a10f180688c96549b2d3d6b04403fd571e7b132891dd4b7cf37aec25ca1e9190c17aaefbc31e059915c12c232fb7097e9fa6f35fbb265c7102db62e2a64590c583ea90f1aee3f166af81430d9084eb0c760ebbb16049c9fd1fee6ce33c8ac205e3ac9c275531feadfa4054e0c027c26beb009f54aa72b864d39bb11753f77931bb960276db33021c65671e57b3708bbf979be222e8439d71f58ca87cec7a054517af398a42735b580717377a54f139e2c46813cbb03d98e49c26f4ed54d75e48573cd06145f913f4e313eeee837496dfff75aa722fd8486c45f9c959da12ae48ba4a10712120a203e2476c7b96031d8f8773f68344e6fa21831287655aabbd594e9f272eb1a7315d2d79b8bcd5e63004cd106f80b1e40a5d9e428a01bc58264f4d63c2ee9db6efa70607a642aeb883bf4b9fe009d7f09c16b05a2c9b73573e9019e161ebbdc1fc9b9cd0c5fe1b57adcba2d0f3a767ad59aafa159b3dd181f0601ff95e8af8b5410e56c81ffb8ab35b1e04af35dabf69f08572e69260b72bfd502c5a0de627fd3fee44bf1d4a261bd356056c5739398e3ff161beec1240a089625daffbc61dc5e660c274565477a0ff1797fefff04a98704802ab0674ab72d400686229608cbfd2ca20f4e62495e8b09de9d180c47375bbad72f4474b67d56104b4b466192be60f7aa668fd0a4338b856f114311842ee806d6488ab09098ed9de0e21bcc8b42a5d5713d15eca108fcc7a65d6b414a112524a6e1418644508dd957147a92d4399d13faaf01cacef40549cd11900f9aa32a8333f55796ef25d33c554a308da9797cd0ac25888311b0ac88eff0be7a36ddedcfc2b095abb4d5a6a4edbbad67b70cdf60c7ed0c5e040ced90edb3322ef684332358942ede9191b431c99b3abf8f9c50206479f0ac118c0a99df61fb9c90d846f41caa6a2448fb7e15640965e051c2af4ee72a5cc7c962bacff7019615c10e6c3054e2e5792df3aa6e2c33425552148466a88568cc79b6edebf0107b7d3d24423a665d20c3a1c0f1a6b34eb475bf875912115914cfabcf394f8a096d64e5dc95705074fe5e985497dcf052b9f748b9d4688859c0200fa43719e4722ed6c064c0efa7e07beb2a26fd724b63537fa0eb506365d5c029cd8dce7dd0a1cb9d9058c061739734af6be9e880fe7e28a211a4c368a7babd1107110ecbb384b274cc092b9511c4abde2ddd863162e2739984a9f3c0a76e3c530a27d5e385f4a3b87607b2a944e09d28239661d27719e22c0a657ea383c30859ca29cdb8fbc79bc83e995dcb361743a7e195650c37e570b768a0a1f0b118fa5be9b3c838326343ec5b376d5ee040ee29dfd868cccf9cfa4591151f519cd6e2ae1453a58aa92f90ee5be11ceb8511ab743f399be0a190eeddfd112336866831c3255ef6520d88b2581ea3767f3df01a38d9b4656f2a89c5df41443291a795da45c8a846015cd041bea0dfbe648348b10ae73ce43d9017182792cd9172eee642c549a530cc1f537f9aa70ca63792ba4a86a713ae09b917136e5bf1506ad7f367d8d2f77f47a2318facd109bba9b1327b5db9e4aeffbdcf414db761eeacc227a15cd72aa52c8ede33bdbab9de9aa1e8f470a388013d07f08777e2131bbd4856ab5c1c38d03ef407197ccf24e8b2a8db69e78f9d6623033c453541bb79f9e0be9a55588e2e54fce65fb785467064a146c4bf218068b5e3efdafaf93a98253becaef226cd79468ff1bbe0c9d43877f5cbb5844fd8957f15d3ef208aac11816585cdccf039c36b429d3d7fb634054fd0f09c8abea3746a6b7379142abde26d998ac7e39b94746c60c09f86ddbd7497849d1ef839730672449f35a3c3253666e9fc053ac1c518e44e0b84555be507f7c00fa9e4864b4bf40ac3d93f12001eb780a779e655d0633803268c094ae161a0efd652003d6ac47f9a6c28d866b56233f371627b01e0fe9361dca611a28841968d4e12cb73d49ce08fe25de4a90b2d34607202b20e71f5e1eed38e17d0a2748f548cf61735f4c9cead1cb93b11929d906d65fc60f88e6919b7b5a1014e6d408bce9c8cc832eecf9147708fe451891717d2ed99dee70773feaa97985102abd3dd05c904c28898afe060621db6564887bc4afe158fbe1d819136a1ac1dc9d8674798a93daf5255460b50c34496205834c668db4c764e76ebb6cdaf5fc44b881cc2ae87b4a7cc045143f96b1620abfd0f116e673b335beefdafa1e58d9194e010cb78956044646da5ba853ce981667f2b8e5001c2df437c9d597ccd2be7d2887f5cb7aad0539abb3f9db1c8f5cd4d7d831946ba1c1aa8737c114fec1ac9a82519f57cb48c49b7f62e9eaa89f448df33fb307cd0036c70b490ac340f7d04e14f32bfeebb08a9d5bc7bbef8f231ea09311d4c82cc55c90eb53c6c003cc98a34dd3c4ec2d8b3a655a78e16e908f368733d0a02b36fe963e2d80b5e6f7b2e3aae3013c900c76e4d56e8348bef221f8a642e692c23b12520fb68c793e789eeeceb4efb2097a4d5952d144094cd7be6edc933d257f6230e962d70ba42e1b07ad9eca0ccd60d3d9a6e06b73ccf96a8aa490ed3bd58bf4d79db65355ae145b54be004e464f4dd23fb8b1bf15e13838116083da67186513652608e37c8f847b2bcafb57bcefc7efc8c8182c7d708cce5d14695b4e618e77f8e7be81f27a05e415fd37ac21507a665b2558daee5c0b0859fedfede8c03f181ef5e0ec0da6caa3edf402dd73bcb4026c489a7cca8ab700d3e9f050006c36768a16e8a48e48ed5750b8cdb7ad1fd12d4cc8333d324d6c83905303fa7013fc02553b587544affe38f1a95e0c4c39740d63b6d387fc89b30bd5fd745cb64844b13897ccf5cca135f7d39e03ce8adcda919d86b25b52764b0a0c4f07f88df68868415de13863df84a7e8d355b09cf90e482eb4174fd01f1b371a4dc52f3c89fc3a70c71657aa5d7573ef9acf4d2b0b321c41ff2640515bb43637ba2288ca0bff2e2a3a998ad8294c52f9edfe0a4ee0a3f8ed5b4b5c43319bb9c58dd07ea3237d7bb62cb086e7ea4a81cba2cdeb28794a09c275a704963110b64720bd089e3737ee1a91e348b5e97b63e1724de1fa9f49961d653bbb47b6fa993b035cf59659bcd0306180645162568abf51127845cbe6e37cc3c19b9d69657db4258fa5e8428a73eff6506bff474c2e302ad5559ac8de44c6f0baba5e2e579e7d7f9d9ebf540674432ac11d92bfc9abdc24126888b533f43bd6f293b0bc315915743114a35308a0ee2e710522137918a2b09ddbbc7a2313a2a6b85a1ad26f14dd70072651c8300ddf6de29704b716ce1bc431c66ccc96731f46359a9f6850976c96dcb5e0ee47446f50b6b3ba90d45224066e123ad3854d877c0cdd9325000ac0d6813c30cd43d3e150335601724ca3666458dc4c04f6562296982353e155d5255c9008c0b46d21a678c8fcb3aa8d6574476e0458eb0a76a6cb50f929ed218cc4654cb4f95fb3afbc2548b74acc312563375a19e55d488599488dfed4dd31b39f29ad61dad343dfca3b45b316a34e7a7bebd2b0f562a9e69848d13fc80a4fa52d0f17bd15d9e1fd39a7dcc86128d14493805d105a745673bddea68ca74ac09d95cc7412d5be2cbd0a247a81dc9e148111e22cdf3375805469226ca3538f960a6ba6aa0eeeb87c784ffb1bfc09180a61be3c7c535fc6d593c3b3f4de21b8c3eccc9021e80fb07dce0aeb3b023bd55f24356f646791ba80e5ca21ac092a069ae0a22cfefc08c23cc7aa69b570bd17cce9de15871d363f167288f99f04761caa67f12c949466493f661d39ee4280c955446ff5a9bb14f2d1ae21cdb91a5868e0c52097cf380f571935b140562922763f1b79c3709b949c57a00b08828ce9e685f6b234b5fe3c62d9feb249ce75e81f5efd556c14d5da24dc0554723fdbe52659969a39f470e82c50c4777c908628436e31177af1125d5f70ff627462247e5bc20c47ef75f369174586d43d42f7eefdd47fefa745badebca2a881ccc018ea411cc8a7a0881422bee8704bb98e6bea9fbec63441fb45d7ccfd436909b57a2b60b788e15bda3ca7663b19bd84d0879deb639f10def9a99d42a4b9a4fd7fecbf6d2e7598678307ba9a5b6f143c27cf1ca41e3c904007bb762cd5df6e63c4cf422c2ba959e53bd8e5664cf5df6a91a4bc8cebc52b22f30060fcbc5ead53d38eabd160c1da4cab8aa95c3640ffd78074aa2cbb05cb8ea90a0c95a4a1b2be1ee94f238000f1faffa069d87039f13f5f84ff368aec5a0b10020232b9fc954a6c22573ef48459e574d48a4845837e1d6ef386738ccedd093d4d5bf3a3f790c875ba7449d03397642feb71100f2c25ab2cadf0b0802544a2095a51b19cdece623b17d420b173a99c081f8e229b6de3c680d6bb39bb98b479517d77cca581b81cf856753a44ebd64cff111fb8ca37ea45d217a3fca44a083e6c35b0fed9f8f7631178d15e88f86c85f1ce68c900afdd1f7e5b8bd4ef3f58c447b77d3befc49180df7a5eb2ae8ae33b4ef573f3a425da8a60cde84d8eeae6d6399b9fbbfa0fa8d448b25c7f79b7554d0b02b0decbc74ae8560f630af596313fb33d442a410061ace0aa7a440d5e31ca8bb2cc495c4f0b672edb011b0c5f16781836df7f4af8329143d5a1a99d7b18ef9f774c4199d635848cedebac82637a03a189c65be667503737c75b6639ac65ad424ca475285437e6f19830b36549f607ffc387c8b11a34a838159376a6335afaa045bd2bb04e279dd72436331d07dfbd72e2436b27f0df23a266fd15cf56d1a9e93aaac8901cfe49a3219ae36c5c65c75e5c708fb82cac4d6a50726509ec3a7d32d54cf584ae353a5bff75a6de77a0b240cf8a0a72817c9d37699ca89c96e0e0d96a7665ac3a7d1febca1a1d79e2cbde8025c271360e2f90048b2d9fd56f45c013e001dad4b7785be69dc01f8a954ef7a84455986fc5c9d5167d91808efdb4476ed79f99563d887cfd4e99809d9e388501dea228cbb3cf3770082dc566455251fd9c2c742963c33500618c6ec99e0bef007408a0462a081237be4c6e5db0258d4be5fc9cf63fd1ace1f4166c053b0fb84fe24917da1255cf40bbb1b45644f6a7699cf802a35a932c374b1d62013e6afca3787627469994c02f622ab877ed5491fc2a89eea60e4e1628da89e3ad600ff6442e4ebf20e47304176b6a1703c094b3cf6d7fbbddd8d8fa5a00f28b4d8f43d88487e9d4531071512f2027198714a8d1cef126775547fc74f2a35840510f325e50361be76557767560055e084f2ecaefa0dd8ca8215301a7a887d2eaddaeb1f5c3dfdbd2cc1ba5f02d4426b98c0f861c5f724405758f442560ea6cd1d953456cc4aac6642ad61c03dbaffc2364d8ec2ef9f483c70355139d1fbd9617ab3c7eedf0b8963c1cfdab769180db43c416a90d9fdf3fd0eb2f81187642b4e2a09d6462d27527fdfda31f7b262501749dcfc6c184983f9923424131d05cc811cacf5c2c87e8e6f135349e68cde0e8997bf1dde248e5124d5dca2681abdbe58d327a8edd585821f03fdd4515728f1336495ba25c9bba56a3f706d60c35cbd0b40d0ac0583a981f9af08510ed8ed0a726e5472f8995af3837fbf1e89587633d2ef944868a153919165778e963710872af12faf96c0919c638e5affa97104471ba6e178d27602f96b9546ebe52190d91be245be08742b96389080676a566d3229e593e4f56a76ae4c58113c6adc1088703b1b92dafe32a5600e14ac1e71df829dfef425911f16a2b91f693599ecabf93065c6c4f5fefca8d4ed095599113529f65d9120d5252f577af95b404979508c343df54e4d239720e7d3a861f1dcabfa69e12d655c8a026c10a4df279b139fd222e561d205ac9b45c1054f8699eca594fb23886e0de565186597766dd5e40f74a423d5708dac254f4172f1089270988fb18715813f13ee4d131b64dd517c7e77f27f804b229f5339ac2f483b14739ac33a98fb117f7b11bb51c4ed683b59e28bf25a58f123dfbeb1f0f21f03d9b57d8e61d59b311037a5b757b03ca5c95e0eb73922c6918530c99de4d6733640f2b8d13bebce31d4f5e27aab201101e48cde23a0d7e87b9511949d812e3187ee5ff11bc5858c022ed7b00790eba32f9ef7e134ce5f73a01269ca971b40e62133eca9d596a768686d6390b2c74602f6dc597faec3ed9d9658102d99c9624c1a97d00d63853578afaccc7e30a77fe054ebc23eec45f608f996fd015cd6bd50a111360f0790eff6ffb1ea59d13c8e29480bd96217188f97e53a1f5d9eae0a2badb4fea52f2bb4f8cb04d0afd99e7371a978a7d7ef473f77ea6738ff84af655313a12db24cff692ec7e282245ae9a42338db814593448f7115df3dc3f4e2faa2c2fdbd68f679d6aba01a15031347bb17d8bf8f1fad0ecf365e9dcd32e69803c5c05f4b47adbf8a21af7e9fb327f267df1c914486389a9820edf0a03bde6ef388c255761e439b2f7e1f9c1c3c95bd30c502197ab37f76b52f0d0675f366e919be19329853767bba34a540fb75bcdcc9596a4cda254a660e11bed5af9d8646ac4b7d6d7aa5d7c0005879b6d08058a56c3d3a4d3d401b883153fa7f2f6a6d34dd010f6b9e7b4e457b9ff5a5802d7723abb35f9dca0afc10f6791824dbe0a7725d534e7753445b7268d90145b6438b93fc475f44d5d678d79da6c5770f3a9106f3cffbabe4b88cbe7eda9b8a495be4f6717b0fbee6fec78c86031b6d878d47e357b2089de3e6dd19a265552553d1f7da53884ef84d0eebe782791c48a9c68a28d8ea3bb70c922b01dc20b2cd05cfb276e326651398f766f5faaea54a41da597cf6b50f3d5ebc634185b99069126b8d935c6bc42c47f2109de42091ef4ade3d87cc44aeb78709255501e64f34ac2d4b2725cf7777315f8ca9424bc9d61a896a93500faa6cf5a5aee1fb888e17b47a38a667be2ffa3bae46afa88bfd8b5b6e1186d6e41b9a4e490591043372c23f36fb48d80caff74cc349adc92bb25f701738c809ccf74c47afa193795ee67bc58ea7fd85542fa7e70218490fff212163401cfde016df2f42496bae403d5391e53fe200f758bbcdead0fe72c77861889b9632a257229c35bdfe8fa78375b4f5c768b9c60cafbde1f00aff6ca1879f6472f28001f5f13d4d9d6c3a90e04d8df09873550daa8262d39efbe96a79c697fbcc9a7f27c9f6d782d5d5f6d024b291376e9cc40d902f809072e1f0f2c2ab88ce3d074e88461f5971853e7be749943ab6e25e25e8afa5042dd73407f49b50841c7782c54eece62ec2beef1f16caf1ca5989427bd2726ca0fee33e303702e9892e4382e92c3f3a03a6188f39762db81819c7e12b424be8fd964dcdbfbac00139e8c5a6200506f13f484ac34ef3d26e7cadd53cf402117419c1618205bfa5382486094bd55448f2b1aa4dbec2289189b601ba641c6f5dd19cf24abc72fc5264cf11f6b44a4929267a02cd1de1b602b9de65a6c06640aa0f76109baa90d66eeb17295b1711365b7d6835a2dd55b7fe868c59453613240643c847a5b48d27897a58dda63e579c1bba58350550e147b190f0a2c9a5ce719d627ce3302028b4b6801bbfa8cd7488fffba35817c0eca034d19210950796807125fe6065dcd47d7c870ed2db5c00cff235e4154e2d89ec2a09a87551f9b7ca25d519b5603c0c33d2cf72878199ffab567fc5e093529b89d1163587f3564ba8291d2d96cf9762e7f568e786ea90849f6312c1a10f45d61600cd45c48e6870a7d76c913f9c4497374fc04401cbd11f7710740148234fe8f041f24d0278fcfd48846e6aa49f05016fc332dc5d46b4a26574fed5c0751cebb9f7ab4cdbc1ee011d82d6ef95c52c9df8eedac3ab5cf30805f23d88d4f707601f8e6c606b58f2fe234e948d6756d430a5c4ec76a33874886c8fb484059b47a9bd198a61a1896419288a9e81d0969dec778a53e8233f0f63bd0134e5f29825e7817e7c8ccb7d9acd8f86ac9d3af78c43df3036d7934dd294f2bb12063bee52c547d27a218145befb0ca96cbfaabd39fa245b51c39f4cd4cf8db105f9dc46a7aaa8f7d06fa208120ce1ac49326179618fa2c8596c44e174eb7a141056b1d17689c10dee089c8b0867b8a757ae12251bbd68db5fba2be341275fb6ee379309f5cde9b31242b0b2bac44da74776fac141936bd96e3177161f057c820a8c22cca8cce29b158eb55aed0260253fbee70a6dd281d9fca23e0b0a38d46c76a95e1262f1cafcf0fc37b52e649a1ba1e2c0f97d10bbf4d2b5632cf340bce56736071d5885ec9b4e17910744d3e63e2ca6deb21e43fc21e89c6865d3ad424ef4a14efe8843ff3168c99ee395400dcc8755719d290c567c95a5e7d28ec1190ceee240084d444265cc801cd960f69b368359bbf06b8a4ec23b47c7bf9d4b16c701a1c4fb9e81abb55bf49d450b566ce03de939fc6f5c51291380086f8c995cdd4fa15a325601c4846a69f15c77f55c900270bc9ea5f406480cb0e3e89bc869fe8b7cec4fbef7e76283d50c25ab1b4d34d093a7df062990a925a9c44aa2661abd7d381a4d6cdb64821ef624dd51b72e99af914bca2f80c25b82ac6945df7c7582e6d0ce2cd073e35f1fc120a68ba210410db64592a9aa319b30f2b818c495750e1cea0610e27d52be31e52e501a3bd51b501bc51c2ec8592f679b6e55b9aa58d513fd2bebadc83ba76eb45e5676f130193e9a666b8c8132c9f5141681fbab324b555c5c890d488ac2dd00feead0a20fbd8a46391438e3193edc6fb89161cd864fca98f4f39a2893c933dcd13bc8c5d5a548d24862e8161c0fad7f33aca8c86791d620815fe3f0daddb5defd933d0c10097a7a98e67625420b6c0db7c3e17ab07ea64e6f0f53fdc670799e06a2e3a871d6be363a2639e35339361311e0f528cc433eacea4f79bf217108c7b1d657840253ffdea18bdd1f93cdee63e7a9b8dbcb4ee06162b253e09ea0641f2771bd9823dd210905e9ea495f43194bb471cdeb690e8890b03b50835d53dde1b572dd123ccc8507bb57a45e46c0efb8fb3d5596bddf9782d86dd911636eae2cf64b5829cf8893faf789be3fa22859accf688f5b5da6c29cacc96d477e23b63cc934f685b6e42e1655c9a9b94d6d78402de22b8d9776e3915391aa258e57467d770d65480ba2f6a94b0337965a8c659c42b4e90b14da4697d0c0a6d74774c94c52d8ecb694eee747bdaa6c3a6d60739db18c6446090eebba72e62ab88b0e8b88e728ba8cb133d8524eda89a2bff1c8414da3edfa6f83788331c8a7e5a8af2dd3682d4752190a3c689949abdad8350111373e7fb46151f54a10f79d91940e37efb05f9f157bddcfacf018b65a38ab614807c34a2786af4a1d48c4d1c1abd31815715f9d1b103992207fc664f12c82fd923c57d8e7cfb9f4af55182318d055c704865cf484206d60e34cf7fe9b6ce60b1772c5c7cdacb6695227d80da18ec1f98a434b1aaf9c6b6d082f5663aed2bf267e559dca6b93d3ce34273846fc677f529690482df0a8f782b8ad7269f344f5f2b4d320a7ce2d2fa02284f8db634dc930c3e2b9a629245364acf35d41e9a14c88efde4e742ef1ea4b43d0caf2e70d4a617278823e6403934524debbd933e7676e441a48f630dc8bcccd55d9032d6bf3dea97d1669c39fb865b0e619eeb3f5461e517000f5aee3ef2abdb87d3a76b88e140eb4644a9fbddbdc9e20972cdfacf00bffa3a1ca5f84122c2ebc54067cdaa23967eaeb7bbbfe44e5843382b834fae1f62a066688595e4ee67c7ff9858672355abf7893ebeb4bcf88a62b2237c6e6cec9aebe3f28bfc310ced3a590e88d4bd0f53289206deb9addbf6f3c02115ce4980dadfc112683ae250c2d438fd9c0f2a090dbf122a0072828db798bdb868dcd47384dd3f5eeebc0307a5b268683cd51f312e8f02b5a7746b11a97ac43287d9b9765f03c720503cfe6e0117660a4c00d67895224c4d42b032000a10d7a743054758a8f54941fd5eaf72498b678d1579b3de4e5518f90f1e3d32517d09d7f5da9d180215e66218e9dd64036819cf12638ce82712a6cc79a9ddb36e86814b797d72c2bc58b18ba439e99965f745b4fb7de2878e3186e3e7b835c746b0935f6c67e92e3770bd8d5eb4f66d8175ceb7850e418c55e574db891639aa77fc62bc45dcb734681ede8484d4d4109a9adb8c0c00", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
dup3(r6, r4, 0x80000)
write$FUSE_IOCTL(r4, &(0x7f0000001100)={0x20, 0x0, r5, {0x80000000, 0x4, 0x4, 0x10000}}, 0x20)
ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x0, 0x0, 0x2, 0x4, 0xb6, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0xfffd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe}], 0x6})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r8, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "f9768778dfdcd165", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f", 0x2})
write$sndseq(r8, &(0x7f00000000c0)=[{0x5, 0x2, 0x0, 0x0, @time, {0x0, 0x8}, {0x0, 0x81}, @result={0x0, 0x31a}}], 0x1c)
pipe2(0x0, 0x80000)
r9 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x24, 0x0, 0x0)

9.783985844s ago: executing program 2 (id=1043):
socket$nl_route(0x10, 0x3, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x165b00, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0xd)
write$binfmt_aout(r6, &(0x7f0000000940)=ANY=[], 0xff2e)

8.616220703s ago: executing program 2 (id=1044):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x5) (async)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x0, @multicast2}})
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001080)={0x2020}, 0x2020) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x8, 0xffffffff}]}, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0802, 0x0)
ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000100))

8.520719887s ago: executing program 5 (id=1045):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00'})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="bc000000", @ANYRES16=r8, @ANYBLOB="010000000000000000001200000008000300", @ANYRESOCT=r1, @ANYBLOB="0a0006000802110000010000"], 0xbc}, 0x1, 0x0, 0x0, 0x4004040}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
gettid()
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000040)={0xf0f024})
syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0)

7.576790362s ago: executing program 3 (id=1047):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f00000000c0)={0xc})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
mount$overlay(0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)) (async)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f"], 0x48) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x5, 0x3, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x4)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000044d564b0000"]) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.400082683s ago: executing program 4 (id=1048):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x400}], 0x2, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000100)='./file0/../file0\x00', 0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r1)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4008040)
mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x300000c, 0x4f832, 0xffffffffffffffff, 0x1000000)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'})
ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"})

7.247823992s ago: executing program 2 (id=1049):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000351930404516080036cf000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x30, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x7, 0x1, 0x3, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x8, 0x0, 0x40}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa2, 0x6}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x1, 0x4, 0x8, 0x10, 0x1}, 0x6e, &(0x7f0000000200)={0x5, 0xf, 0x6e, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0x4b, 0x6, 0x890, 0x110f, 0x7ff, [0x30, 0xffc03f, 0xc00f, 0xf, 0x3f00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0xd}, @wireless={0xb, 0x10, 0x1, 0x2, 0x6, 0x0, 0x8f, 0x3ff, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "88b3690adf26b968094229553ee71262"}, @ssp_cap={0x1c, 0x10, 0xa, 0x2, 0x4, 0x7fff001, 0x0, 0x1, [0xc000, 0xc000, 0x30, 0xffc00f]}]}, 0x6, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0xc01}}, {0xd8, &(0x7f0000000340)=ANY=[@ANYBLOB="d8035270df240d2dce48a31e7257ab022ea2d39904c7bf505b929dd567bcbacceddc736f63e13216fc3574e82362b6b8026c40e1710c3ee2964265567842da798291c0070418f29479c5ce7a045ff0822f704ec5032f0d777c9525cdcb96a49ce731250d9ad30fa3f1001e7daeaa5260d7b6ee2b7186595f2863cbd39f7e80f1be768d4028fda527f926b75c531b628deab70323a23e6d5fab5d83b4b07f4013d1e6a71b24b1a2455b47a0bf11acd8309b7d79a2dacf2d934517cf7157d1239d9b3afc01c7f0d5092ada00"/216]}, {0xf5, &(0x7f0000000440)=@string={0xf5, 0x3, "af6e238f1eec908c7ad34b38f28895e879493fd07c07e78c21e087acce5a1f839a265fd5c42d53b8cb1dd7d8bd47648e4ea9a7502c642749b503d40dbc3b80aa63256660b960de6f72970bff187e773b4edf31e43ac21f1ec1ecd5ac99cbb243dd3bcd08db76e338d8cf6079b8211a6583e00f65f771a8a45832fe422101783784e485a9ea38b2781a41171fda0f1e151c5cc0b9e98b89e835e6deb02c59c07994ab1182808fa74b6f9c1798b654510dfa2042f7a5282aee86b3505b40f00b27f130e44a6fe7677b7b6f0365a64dbb4415baa7d0222bb1841d15ba0c07da71c84840b4ae7b94378abab5855dc17fe50d80e5b7"}}, {0x8f, &(0x7f0000000540)=@string={0x8f, 0x3, "824d75d80e976bb4a83fd3399b910f8e2fe07a822edc4581a8a320b64f40a0d58fe34e09227c5952b122074a8384481ae99529b7608885331c3e6a26d74656fc4c67a0a7a26f3db4eaa167c3108201ab63fa4578323cb1ab236fa5df2c0e10de53736a712605ce984abdc27f55c178b1231c837875d20d94fa8933e4bafc8093f7b97077d058a5e36be3dd3d88"}}]})
syz_usb_control_io(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x20000040)
sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000002000000000000000000fc02000000000000000000000000000100000000000000000a00e00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c0000000200000002000a0000000000000000000000ffff7f000001fc02000000000000000000000000000064010102000000000000000000000000fc0200000000000000000000000000003c0000000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$sock(r7, &(0x7f0000000640)={&(0x7f00000002c0)=@rc={0x1f, @none, 0x4}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)}, {&(0x7f0000000540)="03b9d4a4e56a110b5824bcccb70a3af712dd38252f73a06900482ae4ef7a69d5ef84ece19200"/50, 0x32}, {&(0x7f00000007c0)="a46c19f56c4f8a21e8068c6321387f24cd64e0033d354a3ad77b959b6c9ec188b030e82549fd347d6f75b4f6367b391d3b4f4e793639cec69bd182a1bce37cb7e65f2a6054c10433a515bad93b2c8c77304a068535e722206ba8e6aa6fafb5f4dad1379af983edb195bd25b112a6a2dd73a551ee40d3c38b19d9f5be464435eaef871c46ab6c85f58e91ec5d2e330b61e429ae434a72fdb365bfd96007528fb67386722fb09ecc76", 0xa8}], 0x3, &(0x7f0000000bc0)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xa}}], 0x90}, 0x1)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x64, r6, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x103, 0x37}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ae3d26bbcb30"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09cf587ac6e4"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c7bcb58a1bfc"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x64}, 0x1, 0x0, 0x0, 0x4804}, 0x40081)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r10 = socket(0x10, 0x803, 0x0)
syz_usb_connect(0x0, 0x3c, &(0x7f0000000200)=ANY=[@ANYBLOB="12015002c9cb8e102d1510030a3b0102030109022a0001010400030904ce00010e0100040724010f0c04000905030c4000014007080b71adb0bf34847e"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, &(0x7f0000000980)={0x14, &(0x7f0000000880)={0x0, 0x2, 0xe5, {0xe5, 0x10, "5de2295a1830c57dcc6d371a7e2867e49809ce33ed2afe62c03f83f13c9ec2f513c325663cdaca05af2939a7ca55025d152d997b28ccb497735a2f5b47ee25705680a0b5b7aee70c632635d06494b4a61f0cfc9a89aca1c2f0e48fbbb53ad284d419d023bcfffa0106311b689b73ac90a149638daa87fb580c70fa9c7bc9236da6f93b7ced731cc27103975dfa2897da7cd292dd8fe63b99ec7cccfdf9ed47c3e8ac20b4beb3225183fc3d6f2ea0034e070ef97c363e83f803c7e7efe0d83b2d05dfa5a5df7b147f595b9b3995ca7e47bd6dfe7b0d549d51843f32b1e250dd128a8389"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c0a}}}, &(0x7f0000000d00)={0x34, &(0x7f00000009c0)={0x0, 0xf, 0x100, "390b9f574833fb9cca036444cb5c57f8b672583933b56fc4a434d7d578599c42696fc24bf9c4fd011db381d293c3b7031b4164c111e76206bf9755070081ef91d25172e99507b100dec7e1389e397f0d3015df31749699a1766bcca5120593f6d7ccf10cdad6629a3d6a0ac9e5a958e7672a82c8d61595e1341fa9c481aca24238da01719ed1564fd8da80643cd7818674a7b43122758c480330323ed21b1201622a2c2a032f11b593d862e94cf75cb7279f3c983022bdd0c2a227b99c953bf217b571610268badd0bc667a5b79e92bcc3cd07500dd9105975eddb833413601653532b136a056535279fb7dc887562dafe1f0ca915b8f81c842bc347a78bdf44"}, &(0x7f0000000b00)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000b40)={0x0, 0x8, 0x1, 0xa3}, &(0x7f0000000b80)={0x20, 0x0, 0xc9, {0xc7, "ffa3a1ebe35573bf5d0d1b893e63fda1872a1203d1995dec07e7d92e0662361f8ac0c15ebc758681845c5a3ad5496817a18288fd4193db7f79aed2e9a7074bd094e5e16ecdb891dd6b6047713a1145d4e23c254dbebf428ba6d44ef5002a365873a33a292659ffc97fd573d8fcd3d35749276906ba13b457d748e2ce2abd866d48e7033b18692759aced081adf65a3361ee802e38c6a64b1b959b0d2f489caf90dc55062fb67c4c55cb3e55e83d5a3fe791883cb54e55c905497bcf7dc589436f41ee78dca9ddc"}}, &(0x7f0000000c80)={0x20, 0x1, 0x1, 0x38}, &(0x7f0000000cc0)={0x20, 0x0, 0x1, 0x3}})
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)={0x34, r12, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x16}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xd0}, 0x0)

7.219598284s ago: executing program 3 (id=1050):
syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x1000, 0x0, 0x1e6}, &(0x7f0000000380)=<r0=>0x0, &(0x7f0000000600))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setrlimit(0x8, 0x0)
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)
pipe2$9p(&(0x7f0000001900)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r6 = dup(r5)
write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x40, 0x56, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x4, 0x99, 0x1, {0x22, 0xee0}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xd, 0xa, 0xf8}}}}}]}}]}}, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa2f00, 0xa3)
socket$nl_route(0x10, 0x3, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r7 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r7, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)

6.611813345s ago: executing program 0 (id=1051):
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x5, 0x3, 0xb, 0x7fffffff, 0x7, 0x8, 0x4, 0x400, 0x7, 0x1, 0x7, 0xa4c, 0x88e38000, 0x10, 0x7, 0x1ff, 0x7, 0x3, 0x3, 0x7, 0x9d, 0x8}}) (async)
unshare(0x22020600) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000a83000/0x4000)=nil, 0x4000}) (async)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b66, &(0x7f0000000040))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) (async)
set_robust_list(&(0x7f00000000c0)={0x0, 0x6}, 0x18) (async)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc, 0x42004}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r2}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffc}]}, 0x44}}, 0x0)

6.61143354s ago: executing program 4 (id=1052):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000d00)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e27, @multicast2}, 0x10) (async)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r2 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a00000002"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r3}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) (async)
sendmmsg$inet(r4, &(0x7f0000000f80)=[{{&(0x7f0000000100)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x4000213, 0x4999fa8a25843244) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pread64(r4, &(0x7f0000000200)=""/26, 0x1a, 0x9) (async, rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) (async, rerun: 64)
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async, rerun: 32)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000001a40)=""/102392, 0x18ff8) (async)
write$P9_RSTATu(r6, 0x0, 0x230) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
pwritev2(r8, &(0x7f0000000500)=[{&(0x7f0000000000)='d', 0x200200}, {0x0, 0x7fdfee00}, {&(0x7f0000000140)="d9", 0x98}], 0x2, 0x0, 0x0, 0x3) (async)
recvmmsg$unix(r2, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001dc0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0)

6.444144305s ago: executing program 0 (id=1053):
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000))
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0})
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000400)={0x20, 0x0, 0xf, "a2a504c3d3dac57950200d3ead96dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x3, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "f775f131761c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x3, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0xfff}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x26}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa1, 0x10, 0x9}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x6, 0x2, 0x40, 0x7}, 0x110, &(0x7f0000000240)={0x5, 0xf, 0x110, 0x4, [@generic={0xd5, 0x10, 0xa, "56be17278b140529127d2e5798b81a8218ddb0ea4f5796227eb99f3ae30d6a9c7b3c2623717a709e24de630e2f6be0bb6571eecab9b429906bf18622abb9fdb2a41a81f8d01cb3e70b137677316faf6a6b7511596a045ae6925b97485a571f59973066136e8bcd0c772149f12b40abee6016e2013f4318dd31bf690a57d02a75a77af318e3ab45d19aa074cbee08fbf7c6e986f8e80e097c4b68430cfaff96021c3174ac70df052447ea962cd0114e5013cf1d02ba02f9e726bec233cad2482088ffc182ecc4d49b7998b66cac08f9b655c7"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x400, 0xff0f, 0x2, [0xff0000, 0x17f0f, 0xff0000, 0x0, 0xff208f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0xfa, 0x9, 0x1, 0x23}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0xf0, &(0x7f0000000440)=@string={0xf0, 0x3, "c57830107554910105aa3e71ad470d8352603885926e7b1df297eba5bcd6c9c565496bf5214136dffa011de20b1e02876bc3dd5392f63407213bee1e619e371757ce53b6a1166115139e824fc53da8e596db0b9f45f58795f02f194b359972ae9b71c14faa021a6ac894d8cd66d147e023bba917c930494d07dd3bbd4626543aa0e63dd30bb9ad9064c82d3b84c4aabfbb0620691929df398e84ef2e1449393a0971b219075e48b68b1cdacac3c3afde699e79c030c8cbcd17b7bf8e413d6ad9026aad196425994907026f2e74a76de99faf7d4fb566eda2b184f6900177da4ffd80bbc46adb32522f7a71ceee41"}}, {0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "53dd2878b86e3aeb67a7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "3ff4213421d0e0fa28e09208790d1821b5a31df778efc77191ef96c861b04d2e340014f5225d95af7f64ac0e43561c4a0e0e4cc9f1e881a5de92d50e1139e0a5f97531c9adbed2c26c9a4d5c32b0b3134e3dce389fab7f62048754fe04e059722646352f75cbcde66ebf8a073fb1b32b059e771f97f3f2d8acd1cc293073c59f6f87186f74c2a0a7bfc0cf8d4909fd7f9ae88dbd6014835cd003b59d2bdb680f790b3eaca867009fe6bd9335d4a69e6ca160787cf8d8736ad42a31fabdb407460ab330bece4fef7f84ace2bb14cf4210049472f136d57c1e2fc43a193132a37ed91d6f9c7a7892b9ced0c571"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "c161456d0517e1bcfbe2a5857b66358d2241c54f0cee2bcc4c8dc341bc79b9c416926b2587f9094c1159300f404682df7571029983c8e2f52e1f478933435861cb98e197908c015d867ef56accaf94f68cd796fed04ef821b0cf10b90b56290d2fe45d8f26eee238c12b4f61ddee25c0964b528a00e305f4720371f09bcc"}}, {0x3e, &(0x7f00000003c0)=@string={0x3e, 0x3, "94be36c307aff66a0241ce953723a0ff8a5bd1466aa206d34a6c62e3000dbf2fc643165649d621e5a0e88c4c45d79072543b2022a2c58b4b8d5bf5b4"}}]})
arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000000)) (async)
syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) (async)
pipe(0x0) (async)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000680)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000400)={0x20, 0x0, 0xf, "a2a504c3d3dac57950200d3ead96dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x3, 0xf0, 0x2, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "f775f131761c"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8, 0x3, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0xfff}, @acm={0x4, 0x24, 0x2, 0x8}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x26}, @mdlm={0x15, 0x24, 0x12, 0x7}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xa1, 0x10, 0x9}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x80, 0x6, 0x2, 0x40, 0x7}, 0x110, &(0x7f0000000240)={0x5, 0xf, 0x110, 0x4, [@generic={0xd5, 0x10, 0xa, "56be17278b140529127d2e5798b81a8218ddb0ea4f5796227eb99f3ae30d6a9c7b3c2623717a709e24de630e2f6be0bb6571eecab9b429906bf18622abb9fdb2a41a81f8d01cb3e70b137677316faf6a6b7511596a045ae6925b97485a571f59973066136e8bcd0c772149f12b40abee6016e2013f4318dd31bf690a57d02a75a77af318e3ab45d19aa074cbee08fbf7c6e986f8e80e097c4b68430cfaff96021c3174ac70df052447ea962cd0114e5013cf1d02ba02f9e726bec233cad2482088ffc182ecc4d49b7998b66cac08f9b655c7"}, @ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x400, 0xff0f, 0x2, [0xff0000, 0x17f0f, 0xff0000, 0x0, 0xff208f, 0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x5, 0x1}, @wireless={0xb, 0x10, 0x1, 0x2, 0xa, 0xfa, 0x9, 0x1, 0x23}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x415}}, {0xf0, &(0x7f0000000440)=@string={0xf0, 0x3, "c57830107554910105aa3e71ad470d8352603885926e7b1df297eba5bcd6c9c565496bf5214136dffa011de20b1e02876bc3dd5392f63407213bee1e619e371757ce53b6a1166115139e824fc53da8e596db0b9f45f58795f02f194b359972ae9b71c14faa021a6ac894d8cd66d147e023bba917c930494d07dd3bbd4626543aa0e63dd30bb9ad9064c82d3b84c4aabfbb0620691929df398e84ef2e1449393a0971b219075e48b68b1cdacac3c3afde699e79c030c8cbcd17b7bf8e413d6ad9026aad196425994907026f2e74a76de99faf7d4fb566eda2b184f6900177da4ffd80bbc46adb32522f7a71ceee41"}}, {0xc, &(0x7f00000001c0)=@string={0xc, 0x3, "53dd2878b86e3aeb67a7"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x436}}, {0xee, &(0x7f0000000540)=@string={0xee, 0x3, "3ff4213421d0e0fa28e09208790d1821b5a31df778efc77191ef96c861b04d2e340014f5225d95af7f64ac0e43561c4a0e0e4cc9f1e881a5de92d50e1139e0a5f97531c9adbed2c26c9a4d5c32b0b3134e3dce389fab7f62048754fe04e059722646352f75cbcde66ebf8a073fb1b32b059e771f97f3f2d8acd1cc293073c59f6f87186f74c2a0a7bfc0cf8d4909fd7f9ae88dbd6014835cd003b59d2bdb680f790b3eaca867009fe6bd9335d4a69e6ca160787cf8d8736ad42a31fabdb407460ab330bece4fef7f84ace2bb14cf4210049472f136d57c1e2fc43a193132a37ed91d6f9c7a7892b9ced0c571"}}, {0x80, &(0x7f0000000640)=@string={0x80, 0x3, "c161456d0517e1bcfbe2a5857b66358d2241c54f0cee2bcc4c8dc341bc79b9c416926b2587f9094c1159300f404682df7571029983c8e2f52e1f478933435861cb98e197908c015d867ef56accaf94f68cd796fed04ef821b0cf10b90b56290d2fe45d8f26eee238c12b4f61ddee25c0964b528a00e305f4720371f09bcc"}}, {0x3e, &(0x7f00000003c0)=@string={0x3e, 0x3, "94be36c307aff66a0241ce953723a0ff8a5bd1466aa206d34a6c62e3000dbf2fc643165649d621e5a0e88c4c45d79072543b2022a2c58b4b8d5bf5b4"}}]}) (async)

6.437848468s ago: executing program 4 (id=1054):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000000c0)={0x1, 0x0, {0x0, 0x1, 0x3013, 0x0, 0x8, 0x8, 0x5, 0x657ef077e46ea00d}})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
socket$key(0xf, 0x3, 0x2)

6.339142766s ago: executing program 4 (id=1055):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce01028297090212000100000000090400000002"], 0x0)

6.295547202s ago: executing program 5 (id=1056):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000c401"])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x676d, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000031401002cbd7000fedbdf250900020073797a32000000000800410073697700140033006c6f00"/56], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20004802)
lsetxattr$security_smack_transmute(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0), 0x4, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x8}, 0x18)
r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r8, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800)

3.996072088s ago: executing program 5 (id=1057):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9a860675e5aa2a63, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_io_uring_setup(0x676d, 0x0, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x8}, 0x18)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37)
r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x440000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r5, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'})
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0xfcffffff, 0x0, 0x24000841}, 0x800)

3.809492567s ago: executing program 3 (id=1058):
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
syz_open_dev$media(&(0x7f0000000300), 0x1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40002043, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
userfaultfd(0x80801)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x9, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x2)
syz_clone3(&(0x7f0000000400)={0x3a6280480, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000080)={0x4002, 0x0, 0x2}, 0x18, 0x0)
landlock_restrict_self(r5, 0x0)
r6 = fsmount(r3, 0x0, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
open_by_handle_at(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@debug={'debug', 0x3d, 0x8000000000000001}}]}})

3.451354973s ago: executing program 4 (id=1059):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xc8}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0)
getrlimit(0x0, &(0x7f00000000c0))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000280)={0x0})
r5 = add_key$user(&(0x7f0000000440), &(0x7f0000002180)={'syz', 0x1}, &(0x7f0000000240)="8b", 0x1, 0xfffffffffffffffe)
r6 = add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000400)={r5, r6, r5}, &(0x7f0000000480)=""/199, 0xc7, &(0x7f0000000580)={&(0x7f0000000340)={'blake2b-256\x00'}})
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)

3.272325481s ago: executing program 3 (id=1060):
socket$nl_route(0x10, 0x3, 0x0)
fsopen(0x0, 0x0) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) (async)
r1 = syz_io_uring_setup(0x4ad, &(0x7f0000000380)={0x0, 0xfffffff8, 0x10100, 0x10000000, 0x13c}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) (async)
io_uring_enter(r1, 0x38c5, 0x2000000, 0x0, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) (async)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async)
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000, 0x0) (async)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000840), 0x121000, 0x0) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000008c0)={0xc0}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) (async)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async)
shutdown(r0, 0x1)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

3.261626614s ago: executing program 0 (id=1061):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
read(r2, &(0x7f0000000b80)=""/215, 0xd7)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000000)={0xd, @tick=0xfffffffc, 0x0, {0x6}, 0x1, 0x1})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000100)={{0x3, 0xff}, 'port1\x00', 0x0, 0x400, 0xffffffff, 0x101, 0x0, 0x3, 0x9, 0x0, 0x5, 0x9})
tkill(r1, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3.208790267s ago: executing program 2 (id=1062):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x32314752}}) (async)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000b40)={0x1, @pix_mp={0x0, 0x0, 0x32314752}})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00') (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/fib_trie\x00')
pread64(r1, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a)
ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x1, 0x0, 0x0, <r2=>0x0, 0x0, 0xdead, 0x4})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x3, r2, 0x0, 0x3, 0x26, &(0x7f00000000c0)="b5108a7b338b36194ea03979e3b860bbca1fdb53fbdfd54cc0a6b5aa0525525f2a58dea2aad7"})
eventfd2(0x8, 0x1)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
socket$phonet_pipe(0x23, 0x5, 0x2) (async)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, 0x0, 0x0)
dup(0xffffffffffffffff) (async)
r5 = dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/../file0/file0/file0\x00', 0x144)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r7=>0x0, 0x0, &(0x7f0000000240)}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r5, 0x84, 0x6, &(0x7f0000000380)={r7, @in6={{0xa, 0x4e22, 0x0, @loopback, 0x5}}}, &(0x7f00000000c0)=0x84)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
r8 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYRES64=r2], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
r9 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x4050}, 0x4000)
read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020)
sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0)

3.000398087s ago: executing program 3 (id=1063):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) (async)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0) (async)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000070601080000000000004000000000000500010006000000fd507b42b8f655dc8739e54bd83a454a639c39628f6f4b3e256bc754db1de4265eae293d9148f42ef3fd00d7402df127dc9aaf10335867e2b258d32e2a06e3f7623302298598aada951c09f7a1bba8440d0b6d8eb40f7dd5c4ef81c971167f4abedca50db886d349ef148ad1bb281a0abd2d5dcc86b02ec20f3fa4b86dc97a3a0a676ca42fe3021db679b8e9c17b86d93ea99bf8042c1d5e2013d05aa0a6dad8b882870e345b93560f44841d4fd3e8f10447b115ff17e4d2081e8a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c000000070601080000000000004000000000000500010006000000fd507b42b8f655dc8739e54bd83a454a639c39628f6f4b3e256bc754db1de4265eae293d9148f42ef3fd00d7402df127dc9aaf10335867e2b258d32e2a06e3f7623302298598aada951c09f7a1bba8440d0b6d8eb40f7dd5c4ef81c971167f4abedca50db886d349ef148ad1bb281a0abd2d5dcc86b02ec20f3fa4b86dc97a3a0a676ca42fe3021db679b8e9c17b86d93ea99bf8042c1d5e2013d05aa0a6dad8b882870e345b93560f44841d4fd3e8f10447b115ff17e4d2081e8a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ab8000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000003340)=""/4109, 0x1000, 0x1, &(0x7f0000004380)=""/4094, 0xff2}, &(0x7f00000010c0)=0x96)
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x9782, 0x1}, 0x18, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, &(0x7f0000000380)=""/84, 0x0, 0x54, 0x0, 0x1}, 0x28)
landlock_restrict_self(r6, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r7, 0x4b3a, 0x1)
ioctl$TCXONC(r7, 0x4b3a, 0x2) (async)
ioctl$TCXONC(r7, 0x4b3a, 0x2)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) (async)
add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa) (async)
add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)

2.882323207s ago: executing program 2 (id=1064):
syz_usb_connect(0x0, 0x1b, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd4, 0x6d, 0x8a, 0xff, 0x7aa, 0x3c, 0x3345, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x8, 0x0, 0x0, 0x9}}]}}, 0x0)

945.419351ms ago: executing program 0 (id=1065):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f0000001640)=[{{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000680)="07e932c88648a715dbb4e62e0873d2414a589d73b28dd51b2b6a3e5bb1b821b47ecab2bc469aa5a3915a18aa168cb36e534ca1d4a8fa5848b644bdd4e0dd8ce0fcaa83ba143702d5440b7efc6be9e1f89e748f34103064282c891f94321c33ee929c4ce848b5a24791fa49508e77dc4aec009b8788c928dac9f3f3d1c80e4ef5a194654eb8964b0d9ae414c3ceee1f2152fde00300"/158, 0x9e}, {&(0x7f0000000880)="c6d0cdeff71a4dcc7c49d1984bfcabc37244617052ce969ebaf817056e070462ac6a1fdc990a04fd498d314d7c47317d955eb6b7b1fe433c6252c7c1d97249c1038c114c00264b6e80beaa4996ea20c63b3dafa62b078ce31f382e3e5b14a31f561501375e7cbabb81b06b63a05dc66a1a2ee0c0cc091b0450bb0c05c6823bc125a6bf89026bc3ef6f30e19c7e86f125fb61ff8c247bfa9d8e8c81aa5c4765bc1566fdfe9bab93248501aa1c6e108ee1b0c4649a7abc4c57a5d3525dfbb5636c77aa2c620ad196ef20b7eeb76e9dcdc2c371f88ad30d3c4a8a4c2467819488f0b04d3be3aee9dcfded84266d7f6cff7f2443c42e9403c0", 0xf7}, {&(0x7f0000000e40)="733a958781a9415352e8d38c66406b078a0cd6572c378b9368ebbb60f9e55e5ca272fd30e54a4ee685869c2e4901184a9c7a0cfdaab0f0a2d5dd0cb5a76ebbc70e366c79fe1c1423cadd4780ee5b667adbdf6f376c61ea3ce1a86238889630a566266d811c1652fee914a9fc2628cac6fe4103d3b5235fbc5ce4806715d698ea78773dcad87cf689d75656d6a232a93ef94325401209f7dcacd37b9efd7ef4526a9e790b3bebdc152f81c93d42e4a55b20e200a835d4a743ccf42c5e2d42646f61910b21afae44994bfc3b2832cd68f2c38614aff0d4340b6385aa0d2833a4c1fe00ffcf0a87f6ecb771cd49cc75e5aef3f408971feb", 0xf6}, {&(0x7f0000000980)="3c504a238aacb8edcbb358b6746994ca33b22082e88f35a98234cbd655e2321dacb1be3196dff80b71fbf84e0a14c602dd2748e5e4d1bdf4ad021adb80a285ba3d22bf8e672eb4dc483955c818c5acfc889538db5241eb2d19caabc20db3b78a9f5b4b2d46f130e27ee3ca7b2737d998269946a15828743be621d24675417b53e6fce403d560ee749ae1a5c05ceccd201afdf5a52c68453797d60c177713794bad408f97013dd4dcc52f3cffbb0aeb5db93825fc002e7c68a6d8221b987580b7932f779f96633563b01aefe8d59184f6363cf7a021bbc26504f95f68a902df57fb306948cc1ff5925c1c8e25f5387663824c", 0xf2}, {&(0x7f0000000d40)="5fff3aa740c4e9c80473dc1e8d02f2f33dafea1a4e481de6e52d79bb652a14177d7e81fb19a8f94ad9b84c617fc0bb66fd53182ec389b91bf961d30d7a9fde52e9dcd90e0173ef14dae1b5faf77414612ea3563faaaddd4ec404f60d0bb85e495f45ba4a503db87583e4899593993624e07339aa61fc28576b6a6f3c9e9f888f99b9f2bbf02d8c7eb44826984ce5b52116d3bed2d0419881b2f1227fee88c8220e8e2cd0ae85c41671ee057e96b7b127dcd4a8d7f59c7732a6f33a17b75c94e8bc4ad9a3486bfe2561ca755f25fb156c310f18e72dc94817fa740cdc0e2a142d23e4dfbff780acfd3b8f8291e2cf1b", 0xef}, {&(0x7f0000000380)="ded3148740196e6779d1b87dc0ed9f71538d1280fa9da064d86d53e3ecd9a74db6a8450d87ad39fcfeaf2cca4c7d4061166caed638cd34211127a54228019ca4eb006719271e8d9ee6e0653f61b48d718eadb54532fa6e4c4aa799e0e0495a74e9af662d2a", 0x65}, {&(0x7f0000000780)="cd705af16873bed01653708ff8833eb74146572f430b014c116da306b221094d183cb61582c65a89f66d7537520b89891620fbcf366887a52aeeb43e38a044b6264ee1", 0x43}], 0x7, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x10}}], 0x28}}, {{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000a80)="ea31939663e4a385199fc8bc6dc49235fffaf00fa5c6533ee06cf63ab9733f8a924e5b08c11200741b977f", 0x2b}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c00000400000000d1bc757aa59cb6c6", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x100, 0x40c4000}}, {{&(0x7f0000001180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000001200)="08cb33c6af3bfb1306d79a52cd2add0918f9c77177f4c47f6401b3deb96bedd52024cb47aba36a33cdab1d8e3599dfae344ffb8a282fd7669d3123b0bbd4634524339f9abb71c69debc549e4e94c00dce0555c063d64ecd91c58b0cbd7e5f0568a891683ced75aabde862a25ceadcd6cec38f2a79e392d5636717cd14a4d3ac923a1f4e2b74df8d35c191671380f359493c79d3253819ff31f8574ef755180ce0516963c7bfdb009fe47fbfaeadd352bf5b85044fc5aac7a00b164240900e715518110d5b2976fcbce25b9fc5854348cf958761b206d3b17a859e2b9aa332b3f1bbb884e1dd1cf78994a2e6c4db9538889c9187623", 0xf5}], 0x1, &(0x7f0000001340)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000002a1d4a0b8ce872bebff33905000000b72c9607597dbdf1", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYRES32=r2, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x80}}], 0x3, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x10002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYRES32=r1, @ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r2], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x5, 0x5, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) (async)
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
read(r4, &(0x7f0000000840)=""/40, 0x28) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x9, 0x9}, 0x9, {0xc0, 0xff}, 0x46, 0x1, 0x1}) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r4, 0xc08c5334, &(0x7f0000000500)={0x8b, 0xfff, 0x1, 'queue1\x00', 0x80000001}) (async)
lsetxattr$system_posix_acl(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x24, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x9) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="37fd0000100200"/18, @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c00028008000300ff"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000)
pipe(0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)

692.132999ms ago: executing program 0 (id=1066):
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00')
getdents64(r0, &(0x7f0000000100)=""/45, 0x2d)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000080)=0x5, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
shutdown(0xffffffffffffffff, 0x1)
r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000000)={0x0, 0x1, "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"})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TCFLSH(r6, 0x400455c8, 0x4)
ioctl$TIOCSTI(r6, 0x5412, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x402401)
r9 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r9, {0x400000}}, '\xe9\x1fq\x89Y\x1e\x923aK\x00'})
sendmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x24040801}, 0x200008f0)

691.34682ms ago: executing program 4 (id=1067):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'caif0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x10)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='smaps_rollup\x00')
read$FUSE(r6, &(0x7f0000004440)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, r7, 0x25, 0x2, @val=@netfilter={0x5, 0x1, 0x107, 0x1}}, 0x20)
syz_emit_ethernet(0xffe, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000103afffe8000000000000000000000000000bbff0200000000000000008000000000018600903800000000ffff0000fdffffff"], 0x0)

312.809377ms ago: executing program 3 (id=1068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mq_unlink(0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fdffffff0f0000003000078008000100050000000800020007"], 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c010000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000740000000010800044000000000080002400000000e08000640000000070900010073797a30000000000900020073797a3200000000c60007"], 0x154}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r1, 0xb97534d5fe9704cf, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x152}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_WME={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4000004)

56.645274ms ago: executing program 5 (id=1069):
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
getrandom(0x0, 0x0, 0x2)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000500", @ANYRES32=0x0, @ANYBLOB="04000500"], 0x2c}}, 0x0) (async)
socket(0x18, 0x803, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) (async)
sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x3a) (async, rerun: 64)
socket$netlink(0x10, 0x3, 0x8) (async, rerun: 64)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) (async)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
close(0x3) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) (rerun: 64)

0s ago: executing program 0 (id=1070):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0)
mlockall(0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fchdir(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = socket$kcm(0x10, 0x2, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000400)="89000000120081ae08060cdc03a6000000000004000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff2", 0x87}], 0x1}, 0x8000)
r5 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil)
shmat(r5, &(0x7f0000ffd000/0x2000)=nil, 0x6000)
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x1f0, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFQA_CT={0x70, 0xb, 0x0, 0x1, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x3}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_LABELS_MASK={0x18, 0x17, [0x1, 0xa, 0x800, 0x4, 0x5]}]}, @NFQA_EXP={0x160, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0x150, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @empty}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x40000}, 0x4040)
shmctl$SHM_LOCK(r5, 0xb)
r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f14258323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"})
mount$bpf(0x0, &(0x7f0000000ac0)='.\x00', &(0x7f0000000b00), 0x400008, &(0x7f0000000080)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0xee00])
r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
lseek(r7, 0x10001, 0x0)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r8)
sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r9, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800)

kernel console output (not intermixed with test programs):

T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  234.259156][   T10] usb 5-1: selecting invalid altsetting 6
[  234.299839][   T10] usb 5-1: digital interface selection failed (-22)
[  234.374691][   T10] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  234.594485][   T10] usb 5-1: setting power OFF
[  234.709445][   T10] dvb-usb: bulk message failed: -22 (2/0)
[  234.736488][ T5955] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  234.883184][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  234.994063][   T10] (NULL device *): no alternate interface
[  235.018391][ T8166] mkiss: ax0: crc mode is auto.
[  235.109007][   T10] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  235.160235][   T10] usb 5-1: USB disconnect, device number 22
[  235.685522][ T8183] /dev/nullb0: Can't open blockdev
[  236.233089][ T8176] /dev/nullb0: Can't open blockdev
[  236.765204][ T5947] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  236.888829][ T8182] syz.3.563 (8182): drop_caches: 2
[  236.935644][ T5947] usb 2-1: Using ep0 maxpacket: 16
[  236.946985][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.974772][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.027261][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  237.085086][ T5947] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  237.139669][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.197366][ T8198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.568'.
[  237.200301][ T5947] usb 2-1: config 0 descriptor??
[  237.266025][ T8200] bridge_slave_0: left allmulticast mode
[  237.289065][ T8200] bridge_slave_0: left promiscuous mode
[  237.295002][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.318049][   T10] IPVS: starting estimator thread 0...
[  237.398340][ T8200] bridge_slave_1: left allmulticast mode
[  237.404094][ T8200] bridge_slave_1: left promiscuous mode
[  237.433017][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.440723][ T8204] IPVS: using max 28 ests per chain, 67200 per kthread
[  237.516759][ T8200] bond0: (slave bond_slave_0): Releasing backup interface
[  237.601187][ T8200] bond0: (slave bond_slave_1): Releasing backup interface
[  237.687007][ T8200] team0: Port device team_slave_0 removed
[  237.909591][ T8211] ./bus: Can't lookup blockdev
[  238.015302][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  238.016821][ T5953] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  238.394088][ T8213] /dev/nullb0: Can't open blockdev
[  238.710012][ T8200] team0: Port device team_slave_1 removed
[  238.743473][ T8200] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.864979][ T8200] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.905542][ T5953] usb 3-1: Using ep0 maxpacket: 8
[  239.031322][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.084706][ T8200] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  239.093723][ T8200] batman_adv: batadv0: Removing interface: batadv_slave_1
[  239.103758][ T5953] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  239.121086][ T5953] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  239.131485][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.152697][ T5953] usb 3-1: Product: syz
[  239.160962][ T5947] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  239.178699][ T8218] netlink: 'syz.0.572': attribute type 1 has an invalid length.
[  239.181361][ T5953] usb 3-1: Manufacturer: syz
[  239.190723][ T5947] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  239.198957][ T5947] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  239.206375][ T5947] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  239.211451][ T5953] usb 3-1: SerialNumber: syz
[  239.215838][ T5947] shield 0003:0955:7214.0007: unknown main item tag 0x0
[  239.232540][ T5953] usb 3-1: config 0 descriptor??
[  239.243900][ T5947] input: HID 0955:7214 Haptics as /devices/virtual/input/input12
[  239.310668][ T8220] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  239.323824][ T8220] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  239.355281][    T9] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  239.386205][ T5947] shield 0003:0955:7214.0007: Registered Thunderstrike controller
[  239.394655][ T5947] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[  239.419301][ T8221] gretap1: entered promiscuous mode
[  239.432278][ T8221] bond1: (slave gretap1): making interface the new active one
[  239.442672][ T8221] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  239.469826][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.484520][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.508856][   T10] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  239.533866][ T5947] usb 2-1: USB disconnect, device number 27
[  239.554669][   T10] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  239.573078][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  239.581053][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.594598][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  239.607592][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.616010][   T10] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  239.633962][    T9] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[  239.636145][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.647567][   T10] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  239.664236][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.692203][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.698838][    T9] usb 5-1: config 0 descriptor??
[  239.733117][ T8203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.764700][ T8203] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  239.899532][ T8223] netlink: 'syz.0.573': attribute type 4 has an invalid length.
[  240.151912][    T9] bigben 0003:146B:0902.0008: unexpected rdesc, please submit for review
[  240.214254][    T9] bigben 0003:146B:0902.0008: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0
[  240.350102][    T9] bigben 0003:146B:0902.0008: not enough fields in HID_OUTPUT_REPORT 0
[  240.471908][    T9] bigben 0003:146B:0902.0008: no output report found
[  241.351187][ T5897] usb 5-1: USB disconnect, device number 23
[  241.362372][ T8235] bio_check_eod: 2 callbacks suppressed
[  241.362390][ T8235] syz.0.575: attempt to access beyond end of device
[  241.362390][ T8235] loop1: rw=0, sector=0, nr_sectors = 1 limit=0
[  241.434771][ T8235] FAT-fs (loop1): unable to read boot sector
[  241.455511][ T8233] fido_id[8233]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  241.496253][ T8235] bridge0: entered promiscuous mode
[  241.505327][ T8235] bridge0: port 3(macvlan2) entered blocking state
[  241.512308][ T8235] bridge0: port 3(macvlan2) entered disabled state
[  241.523789][ T8235] macvlan2: entered allmulticast mode
[  241.560742][    T9] usb 3-1: USB disconnect, device number 19
[  241.562118][ T8235] bridge0: entered allmulticast mode
[  241.626468][ T8235] macvlan2: left allmulticast mode
[  241.631775][ T8235] bridge0: left allmulticast mode
[  241.677768][ T8235] bridge0: left promiscuous mode
[  241.759507][    T9] hid-generic 9259:10001:FFFFFFFF.0009: item fetching failed at offset 5/184
[  241.774307][    T9] hid-generic 9259:10001:FFFFFFFF.0009: probe with driver hid-generic failed with error -22
[  242.225210][    T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  242.547106][ T8255] xt_NFQUEUE: number of total queues is 0
[  242.555602][    T9] usb 2-1: device descriptor read/64, error -71
[  242.647541][ T8261] o2cb: This node has not been configured.
[  242.669482][ T8261] o2cb: Cluster check failed. Fix errors before retrying.
[  242.789827][ T8264] overlayfs: failed to resolve './file1': -2
[  242.885307][    T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  242.960385][ T8261] (syz.4.585,8261,0):user_dlm_register:674 ERROR: status = -22
[  243.098066][ T8261] (syz.4.585,8261,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0"
[  243.161392][    T9] usb 2-1: device descriptor read/64, error -71
[  243.207613][ T8268] o2cb: This node has not been configured.
[  243.220441][ T8268] o2cb: Cluster check failed. Fix errors before retrying.
[  243.245299][ T8268] (syz.4.585,8268,0):user_dlm_register:674 ERROR: status = -22
[  243.315066][    T9] usb usb2-port1: attempt power cycle
[  243.324967][ T8268] (syz.4.585,8268,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  243.464617][ T8274] sp0: Synchronizing with TNC
[  243.735014][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  243.743269][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  243.765624][    T9] usb 2-1: device descriptor read/8, error -71
[  243.811302][ T8279] netlink: 324 bytes leftover after parsing attributes in process `syz.4.589'.
[  243.875046][   T10] usb 3-1: device descriptor read/64, error -71
[  244.009169][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  244.039354][    T9] usb 2-1: device descriptor read/8, error -71
[  244.155128][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  244.216630][    T9] usb usb2-port1: unable to enumerate USB device
[  244.295023][   T10] usb 3-1: device descriptor read/64, error -71
[  244.417308][   T10] usb usb3-port1: attempt power cycle
[  244.487172][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  244.745035][    T9] usb 5-1: Using ep0 maxpacket: 32
[  244.791525][    T9] usb 5-1: too many configurations: 40, using maximum allowed: 8
[  244.844108][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  244.855171][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  244.980808][    T9] usb 5-1: can't read configurations, error -61
[  245.015690][   T10] usb 3-1: device descriptor read/8, error -71
[  245.655488][    T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  245.967010][ T8298] ./bus: Can't lookup blockdev
[  246.225002][    T9] usb 5-1: Using ep0 maxpacket: 32
[  246.233260][    T9] usb 5-1: too many configurations: 40, using maximum allowed: 8
[  246.257432][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  246.269884][    T9] usb 5-1: can't read configurations, error -61
[  246.278730][    T9] usb usb5-port1: attempt power cycle
[  246.285178][   T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  246.473418][ T8311] erspan0: entered promiscuous mode
[  246.566158][   T10] usb 3-1: device not accepting address 23, error -71
[  246.575820][   T10] usb usb3-port1: unable to enumerate USB device
[  246.635024][ T5955] usb 2-1: new full-speed USB device number 32 using dummy_hcd
[  246.666181][ T5953] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  246.695111][    T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  246.746598][    T9] usb 5-1: Using ep0 maxpacket: 32
[  246.777160][    T9] usb 5-1: too many configurations: 40, using maximum allowed: 8
[  246.807825][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  246.815173][ T5953] usb 4-1: device descriptor read/64, error -71
[  246.821201][ T5955] usb 2-1: not running at top speed; connect to a high speed hub
[  246.830936][    T9] usb 5-1: can't read configurations, error -61
[  246.842374][ T5955] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  246.860458][ T5955] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  246.872290][ T5955] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  246.891940][ T5955] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  246.901396][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  246.920921][ T5955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.931216][ T5955] usb 2-1: Product: И
[  246.935706][ T5955] usb 2-1: Manufacturer: ᐁ
[  246.941338][ T5955] usb 2-1: SerialNumber: ю
[  246.957650][ T8295] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  246.985156][    T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  247.015885][    T9] usb 5-1: Using ep0 maxpacket: 32
[  247.021972][    T9] usb 5-1: too many configurations: 40, using maximum allowed: 8
[  247.034653][    T9] usb 5-1: unable to read config index 0 descriptor/start: -61
[  247.044487][    T9] usb 5-1: can't read configurations, error -61
[  247.052556][    T9] usb usb5-port1: unable to enumerate USB device
[  247.065209][ T5953] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  247.205059][ T5897] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  247.212983][ T5953] usb 4-1: device descriptor read/64, error -71
[  247.337628][ T5953] usb usb4-port1: attempt power cycle
[  247.386855][ T5897] usb 3-1: config 0 has an invalid interface number: 104 but max is 0
[  247.387074][ T5955] cdc_ncm 2-1:1.0: bind() failure
[  247.402688][ T5897] usb 3-1: config 0 has no interface number 0
[  247.450307][ T5897] usb 3-1: config 0 interface 104 has no altsetting 0
[  247.480006][ T5897] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=cf.b6
[  247.490898][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.499846][ T5897] usb 3-1: Product: syz
[  247.500592][ T5955] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  247.504781][ T5897] usb 3-1: Manufacturer: syz
[  247.517174][ T5897] usb 3-1: SerialNumber: syz
[  247.540049][ T5897] usb 3-1: config 0 descriptor??
[  247.554756][ T5955] cdc_ncm 2-1:1.1: bind() failure
[  247.584513][ T5955] usb 2-1: USB disconnect, device number 32
[  247.667126][ T5912] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  247.705107][ T5953] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  247.736251][ T5953] usb 4-1: device descriptor read/8, error -71
[  247.837429][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.850274][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.860818][ T5912] usb 5-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00
[  247.872355][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.896830][ T5912] usb 5-1: config 0 descriptor??
[  247.919759][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.104/input/input13
[  247.968427][ T5191] bcm5974 3-1:0.104: could not read from device
[  247.986023][ T5953] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  247.996375][ T5897] usb 3-1: USB disconnect, device number 24
[  248.025685][ T5953] usb 4-1: device descriptor read/8, error -71
[  248.139656][ T5953] usb usb4-port1: unable to enumerate USB device
[  248.312592][ T8329] lo speed is unknown, defaulting to 1000
[  248.343834][ T5912] razer 0003:1532:010E.000A: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.4-1/input0
[  248.377014][ T8329] lo speed is unknown, defaulting to 1000
[  248.520370][ T5912] usb 5-1: USB disconnect, device number 28
[  248.827136][ T8343] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  249.005401][ T5955] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  249.310646][ T5955] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  249.351593][ T5955] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  249.372179][ T5955] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  249.412970][ T5955] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.455728][ T8340] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  249.463983][ T8346] vti0: entered promiscuous mode
[  249.496165][ T8346] vti0: entered allmulticast mode
[  249.524348][ T8349] bpq0: entered allmulticast mode
[  249.565701][ T5955] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  249.780694][ T5955] usb 3-1: USB disconnect, device number 25
[  251.415009][ T5955] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  251.567624][ T5955] usb 3-1: Using ep0 maxpacket: 16
[  251.569382][ T8405] vlan1: entered promiscuous mode
[  251.578602][ T8405] vlan1: entered allmulticast mode
[  251.580277][ T5955] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  251.586581][ T8405] veth0_vlan: entered allmulticast mode
[  251.614524][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.079689][ T5955] usb 3-1: Product: syz
[  252.091263][ T5955] usb 3-1: Manufacturer: syz
[  252.104946][ T5955] usb 3-1: SerialNumber: syz
[  252.113046][ T5955] usb 3-1: config 0 descriptor??
[  252.197355][ T8405] syz.4.611 (8405) used greatest stack depth: 17992 bytes left
[  252.239522][ T5955] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  252.546170][ T5955] gp8psk: usb in 137 operation failed.
[  252.558429][ T5955] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  252.589745][ T5955] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  252.620823][ T5955] usb 3-1: media controller created
[  252.664565][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  252.674995][ T5897] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  252.699281][ T5955] gp8psk_fe: Frontend revision 1 attached
[  252.707318][ T5955] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  252.739849][ T5955] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  252.835587][ T5897] usb 2-1: device descriptor read/64, error -71
[  252.938549][   T51] Bluetooth: hci4: unexpected event for opcode 0x1804
[  252.970680][ T8420] netlink: 268 bytes leftover after parsing attributes in process `syz.4.624'.
[  253.105252][ T8422] netlink: 'syz.3.623': attribute type 2 has an invalid length.
[  253.555687][ T5897] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  253.735467][ T5897] usb 2-1: device descriptor read/64, error -71
[  253.751746][ T5955] gp8psk: usb in 138 operation failed.
[  253.867228][ T5897] usb usb2-port1: attempt power cycle
[  253.873509][ T5955] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  254.024959][ T5955] gp8psk: found Genpix USB device pID = 201 (hex)
[  254.044388][ T5955] usb 3-1: USB disconnect, device number 26
[  254.130301][ T8425] netlink: 'syz.3.625': attribute type 1 has an invalid length.
[  254.170403][ T8427] new mount options do not match the existing superblock, will be ignored
[  254.202729][ T8427] sctp: [Deprecated]: syz.0.627 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  254.202729][ T8427] Use struct sctp_sack_info instead
[  254.285053][ T5897] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  254.326235][ T5897] usb 2-1: device descriptor read/8, error -71
[  254.379227][ T5955] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  254.555098][ T5953] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  254.567386][ T5897] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  254.607313][ T5897] usb 2-1: device descriptor read/8, error -71
[  254.725924][ T5897] usb usb2-port1: unable to enumerate USB device
[  254.781736][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.794068][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.804191][ T5953] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.817853][ T5953] usb 5-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00
[  254.825190][ T5955] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  254.827292][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.920696][ T8445] ./bus: Can't lookup blockdev
[  255.521476][ T5953] usb 5-1: config 0 descriptor??
[  255.536523][ T5955] usb 3-1: Using ep0 maxpacket: 32
[  255.556918][ T5955] usb 3-1: unable to get BOS descriptor or descriptor too short
[  255.576439][ T5955] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  255.586851][ T8443] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.633'.
[  255.614345][ T5955] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.642121][ T5955] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.684558][ T5955] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  255.702751][ T5955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.713500][ T5955] usb 3-1: Product: syz
[  255.732733][ T5955] usb 3-1: Manufacturer: syz
[  255.743950][ T5955] usb 3-1: SerialNumber: syz
[  255.850308][ T8450] cgroup: subsys name conflicts with all
[  256.000525][ T8429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  256.046521][ T8429] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  256.173345][ T5955] usb 3-1: 0:2 : does not exist
[  256.505214][ T5955] usb 3-1: USB disconnect, device number 27
[  256.977585][   T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  256.994449][   T51] Bluetooth: hci4: Injecting HCI hardware error event
[  257.014654][   T51] Bluetooth: hci4: hardware error 0x00
[  257.229526][ T7516] udevd[7516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.320732][ T5955] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  257.631405][ T5955] usb 3-1: device descriptor read/all, error -71
[  257.743930][ T8469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'.
[  259.295412][   T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  259.598436][ T8494] overlayfs: missing 'lowerdir'
[  259.630136][ T8496] syz.2.646: attempt to access beyond end of device
[  259.630136][ T8496] nbd2: rw=0, sector=16, nr_sectors = 1 limit=0
[  259.747177][ T8496] qnx6: unable to read the first superblock
[  259.753378][ T8496] syz.2.646: attempt to access beyond end of device
[  259.753378][ T8496] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  259.893504][ T1212] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  259.905657][ T8488] nvme_fabrics: missing parameter 'transport=%s'
[  259.912513][ T8488] nvme_fabrics: missing parameter 'nqn=%s'
[  259.982902][ T8496] qnx6: unable to read the first superblock
[  260.053413][ T8496] qnx6: unable to read the first superblock
[  260.068895][ T5953] usbhid 5-1:0.0: can't add hid device: -71
[  260.100847][ T5953] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  260.116104][ T5904] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  260.164475][ T5953] usb 5-1: USB disconnect, device number 29
[  260.388498][ T1212] usb 4-1: Using ep0 maxpacket: 32
[  260.408310][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.409236][ T5904] usb 3-1: config 6 has an invalid interface number: 223 but max is 1
[  260.429314][ T5904] usb 3-1: config 6 has an invalid interface number: 168 but max is 1
[  260.447536][ T5904] usb 3-1: config 6 has no interface number 0
[  260.455020][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.455220][ T5904] usb 3-1: config 6 has no interface number 1
[  260.473696][ T5904] usb 3-1: too many endpoints for config 6 interface 223 altsetting 7: 246, using maximum allowed: 30
[  260.499687][ T1212] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  260.502190][ T5904] usb 3-1: config 6 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[  260.526748][ T5904] usb 3-1: config 6 interface 223 has no altsetting 0
[  260.533568][ T5904] usb 3-1: config 6 interface 168 has no altsetting 0
[  260.548641][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.551306][ T5904] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=93.a4
[  260.575131][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.583690][ T5904] usb 3-1: Product: syz
[  260.595018][ T5904] usb 3-1: Manufacturer: syz
[  260.609745][ T1212] usb 4-1: config 0 descriptor??
[  260.620307][ T5904] usb 3-1: SerialNumber: syz
[  260.627909][ T1212] hub 4-1:0.0: USB hub found
[  261.025946][ T1212] hub 4-1:0.0: 1 port detected
[  261.465092][ T5904] usb 3-1: USB disconnect, device number 30
[  261.634314][ T5955] hub 4-1:0.0: hub_ext_port_status failed (err = -71)
[  261.641573][ T1212] usb 4-1: USB disconnect, device number 20
[  263.535199][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  263.787323][ T8528] netlink: 'syz.1.657': attribute type 2 has an invalid length.
[  263.795261][ T8528] netlink: 'syz.1.657': attribute type 1 has an invalid length.
[  263.803389][ T8528] netlink: 152 bytes leftover after parsing attributes in process `syz.1.657'.
[  264.007067][ T5955] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  264.489569][ T8547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.663'.
[  264.535034][ T5955] usb 3-1: device descriptor read/64, error -71
[  264.567589][ T8544] netlink: 'syz.4.661': attribute type 4 has an invalid length.
[  264.631571][ T8551] netlink: 'syz.4.661': attribute type 4 has an invalid length.
[  264.785011][ T5955] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  264.925297][ T5955] usb 3-1: device descriptor read/64, error -71
[  264.953731][ T8556] syz_tun: entered allmulticast mode
[  264.963105][ T8554] syz_tun: left allmulticast mode
[  265.035870][ T5955] usb usb3-port1: attempt power cycle
[  265.415275][ T5955] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  265.455747][ T5955] usb 3-1: device descriptor read/8, error -71
[  265.665003][ T1212] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  265.715129][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  265.722995][ T5955] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  265.745645][ T5955] usb 3-1: device descriptor read/8, error -71
[  265.815249][ T1212] usb 5-1: Using ep0 maxpacket: 32
[  265.823117][ T1212] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  265.831886][ T1212] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  265.840828][ T1212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  265.850125][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  265.860404][ T1212] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  265.870459][ T5955] usb usb3-port1: unable to enumerate USB device
[  265.878010][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  265.891901][ T1212] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  265.901586][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.910474][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.922455][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.933404][ T1212] usb 5-1: config 0 descriptor??
[  265.940208][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  265.952935][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.963548][   T10] usb 4-1: config 0 descriptor??
[  266.166857][ T1212] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  266.178867][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'.
[  266.185545][ T1212] usb 5-1: USB disconnect, device number 30
[  266.199432][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.3.669'.
[  266.211254][ T1212] usblp0: removed
[  266.423727][   T10] cp2112 0003:10C4:EA90.000B: item fetching failed at offset 5/7
[  266.432565][   T10] cp2112 0003:10C4:EA90.000B: parse failed
[  266.438751][   T10] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -22
[  266.627115][ T5904] usb 4-1: USB disconnect, device number 21
[  266.676474][ T1212] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  266.866867][ T1212] usb 5-1: Using ep0 maxpacket: 32
[  266.876900][ T1212] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  266.894476][ T1212] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  266.903851][ T1212] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  266.914265][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  266.931466][ T1212] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  266.941921][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  266.969786][ T1212] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  266.979305][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.005814][ T1212] usb 5-1: config 0 descriptor??
[  267.409434][ T1212] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  267.453727][ T8568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  267.468253][ T8568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  267.483357][   T10] usb 5-1: USB disconnect, device number 31
[  267.508554][   T10] usblp0: removed
[  267.685045][ T1212] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  267.895033][ T1212] usb 4-1: Using ep0 maxpacket: 32
[  267.907096][ T1212] usb 4-1: config 0 has an invalid interface number: 182 but max is 0
[  267.925117][ T1212] usb 4-1: config 0 has no interface number 0
[  267.933382][ T1212] usb 4-1: config 0 interface 182 has no altsetting 0
[  267.945622][ T1212] usb 4-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=2a.74
[  267.971701][ T1212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.982748][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'.
[  267.990486][ T1212] usb 4-1: Product: syz
[  267.999707][ T1212] usb 4-1: Manufacturer: syz
[  268.009143][ T1212] usb 4-1: SerialNumber: syz
[  268.023583][ T1212] usb 4-1: config 0 descriptor??
[  268.033468][ T1212] gspca_main: spca500-2.14.0 probing 046d:0900
[  268.163302][ T8609] netlink: 256 bytes leftover after parsing attributes in process `syz.0.682'.
[  268.165882][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'.
[  268.193749][ T8609] netlink: 256 bytes leftover after parsing attributes in process `syz.0.682'.
[  268.225833][ T8610] ptm ptm8: ldisc open failed (-12), clearing slot 8
[  268.295511][ T5953] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  268.462782][ T1212] gspca_spca500: reg write: error -71
[  268.468903][ T1212] gspca_spca500: reg write: error -71
[  268.483523][ T1212] gspca_spca500: reg write: error -71
[  268.488422][ T8621] pimreg: entered allmulticast mode
[  268.491082][ T1212] gspca_spca500: reg write: error -71
[  268.498232][ T5953] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.505369][ T1212] gspca_spca500: reg write: error -71
[  268.518705][ T5953] usb 3-1: New USB device found, idVendor=0525, idProduct=a5a1, bcdDevice= 0.40
[  268.528139][ T1212] gspca_spca500: reg write: error -71
[  268.528519][ T1212] gspca_spca500: reg write: error -71
[  268.544572][ T1212] gspca_spca500: reg write: error -71
[  268.547672][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.562773][ T5953] usb 3-1: Product: syz
[  268.568002][ T1212] gspca_spca500: reg write: error -71
[  268.574083][ T1212] gspca_spca500: reg write: error -71
[  268.580026][   T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  268.595826][ T1212] gspca_spca500: reg write: error -71
[  268.601976][ T5953] usb 3-1: Manufacturer: syz
[  268.603641][ T1212] gspca_spca500: reg write: error -71
[  268.613061][ T5953] usb 3-1: SerialNumber: syz
[  268.617591][ T1212] gspca_spca500: reg write: error -71
[  268.642374][ T1212] usb 4-1: USB disconnect, device number 22
[  269.265025][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  269.283589][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.293950][   T10] usb 5-1: Product: syz
[  269.300698][   T10] usb 5-1: Manufacturer: syz
[  269.309536][   T10] usb 5-1: SerialNumber: syz
[  269.777325][   T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  269.872102][ T1212] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  270.085364][ T8616] Failed to get privilege flags for destination (handle=0x0:0x0)
[  270.167886][ T5904] usb 5-1: USB disconnect, device number 32
[  270.174650][ T5953] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  270.216532][ T5953] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  270.274677][ T5953] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  270.351604][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.690'.
[  270.377971][  T981] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  270.390740][ T8639] netlink: 'syz.0.690': attribute type 25 has an invalid length.
[  270.405372][ T8636] binder_alloc: binder_alloc_mmap_handler: 8633 200000ffe000-200001000000 already mapped failed -16
[  270.417511][ T8635] binder: 8633:8635 ioctl c0306201 2000000003c0 returned -14
[  270.425087][ T8640] binder: 8633:8640 ioctl c0306201 2000000003c0 returned -14
[  270.743318][  T981] usb 4-1: Using ep0 maxpacket: 16
[  270.760657][  T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64
[  270.780164][  T981] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  270.791469][  T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.231685][ T1212] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  271.262652][ T1212] ath9k_htc: Failed to initialize the device
[  271.285035][  T981] usb 4-1: Product: syz
[  271.315658][  T981] usb 4-1: Manufacturer: syz
[  271.323070][  T981] usb 4-1: SerialNumber: syz
[  271.333146][  T981] usb 4-1: config 0 descriptor??
[  271.360743][  T981] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  271.461923][ T5904] usb 5-1: ath9k_htc: USB layer deinitialized
[  271.551282][  T981] usb 4-1: USB disconnect, device number 23
[  271.982210][ T5904] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  272.603082][ T5953] cdc_ncm 3-1:1.0: setting tx_max = 88
[  272.631840][ T5953] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  272.655530][ T5953] usb 3-1: USB disconnect, device number 35
[  272.665794][ T5953] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  272.765265][ T5904] usb 5-1: Using ep0 maxpacket: 8
[  272.811986][ T5904] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  272.873644][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.915016][ T5904] usb 5-1: Product: syz
[  272.937301][ T5904] usb 5-1: Manufacturer: syz
[  272.957483][ T5904] usb 5-1: SerialNumber: syz
[  272.976568][ T5904] usb 5-1: config 0 descriptor??
[  273.010775][ T5904] gspca_main: se401-2.14.0 probing 047d:5003
[  273.203970][ T5953] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  273.275085][   T43] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  273.404750][ T5904] gspca_se401: ExtraFeatures: 64
[  273.583310][ T8676] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  273.610412][ T8676] CIFS mount error: No usable UNC path provided in device string!
[  273.610412][ T8676] 
[  273.621949][ T8676] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  273.641475][   T43] usb 2-1: device descriptor read/64, error -71
[  273.680739][ T5953] usb 3-1: Using ep0 maxpacket: 16
[  274.167580][ T5904] gspca_se401: Too many frame sizes
[  274.181793][ T5953] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  274.203884][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.220422][ T5953] usb 3-1: Product: syz
[  274.224986][ T5953] usb 3-1: Manufacturer: syz
[  274.233131][ T5953] usb 3-1: SerialNumber: syz
[  274.247283][ T5953] usb 3-1: config 0 descriptor??
[  274.415031][   T43] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  274.456948][ T5953] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[  274.509361][ T5953] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[  274.577135][   T43] usb 2-1: device descriptor read/64, error -71
[  274.618976][ T5904] usb 5-1: USB disconnect, device number 33
[  274.686379][   T43] usb usb2-port1: attempt power cycle
[  275.075036][   T43] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  275.117372][   T43] usb 2-1: device descriptor read/8, error -71
[  275.286769][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  275.345605][ T8696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[  275.375149][   T43] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  275.417346][   T43] usb 2-1: device descriptor read/8, error -71
[  275.487815][    T9] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  275.487865][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  275.487890][    T9] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  275.487902][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.489756][    T9] usb 4-1: config 0 descriptor??
[  275.491227][    T9] usb-storage 4-1:0.0: USB Mass Storage device detected
[  275.538999][    T9] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  275.549650][   T43] usb usb2-port1: unable to enumerate USB device
[  275.630400][ T8700] capability: warning: `syz.4.703' uses 32-bit capabilities (legacy support in use)
[  275.694320][ T8709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  275.694589][ T8709] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.325720][ T5904] usb 4-1: USB disconnect, device number 24
[  276.399562][   T43] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  276.492181][  T981] usb 3-1: USB disconnect, device number 36
[  276.587010][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.631915][   T43] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  276.698532][   T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.788297][   T43] usb 2-1: config 0 descriptor??
[  276.868097][ T6043] Bluetooth: Error in BCSP hdr checksum
[  277.518299][ T1212] usb 2-1: USB disconnect, device number 41
[  277.625165][ T5947] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  278.502119][ T5947] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[  278.528628][ T5947] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84
[  278.568508][ T5947] usb 5-1: config 4 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 77
[  278.610720][ T5947] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[  278.665335][ T5947] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  278.674442][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.724551][ T8747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  278.845178][ T5904] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  278.899870][ T5839] Bluetooth: hci5: command 0x1003 tx timeout
[  278.906676][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  279.016750][ T5904] usb 3-1: Using ep0 maxpacket: 16
[  279.026734][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  279.051123][ T5947] ath6kl: Failed to submit usb control message: -71
[  279.055063][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  279.079859][ T5947] ath6kl: unable to send the bmi data to the device: -71
[  279.097587][ T5904] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  279.110105][ T5947] ath6kl: Unable to send get target info: -71
[  279.125695][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.128787][ T5947] ath6kl: Failed to init ath6kl core: -71
[  279.154442][ T5947] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[  279.163122][ T5904] usb 3-1: Product: syz
[  279.163144][ T5904] usb 3-1: Manufacturer: syz
[  279.163158][ T5904] usb 3-1: SerialNumber: syz
[  279.180318][ T5904] usb 3-1: config 0 descriptor??
[  279.218314][ T5904] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  279.242826][ T5904] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  279.261352][ T5947] usb 5-1: USB disconnect, device number 34
[  279.554418][ T8782] netlink: 'syz.1.718': attribute type 1 has an invalid length.
[  279.576845][ T8782] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.595863][ T8782] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.605126][ T8782] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.833580][ T5904] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  279.840580][ T5904] em28xx 3-1:0.0: Config register raw data: 0x15
[  280.052506][ T5904] em28xx 3-1:0.0: AC97 chip type couldn't be determined
[  280.059750][ T5904] em28xx 3-1:0.0: No AC97 audio processor
[  280.094386][ T5904] usb 3-1: USB disconnect, device number 37
[  280.693593][ T5904] em28xx 3-1:0.0: Disconnecting em28xx
[  280.848686][ T5904] em28xx 3-1:0.0: Freeing device
[  280.999840][   T43] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  281.899471][   T43] usb 5-1: Using ep0 maxpacket: 32
[  281.925357][   T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  281.967603][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  282.008893][ T8813] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  282.027409][   T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  282.089668][   T43] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  282.133421][   T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.194479][   T43] usb 5-1: config 0 descriptor??
[  282.214447][ T8794] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  282.277102][   T43] hub 5-1:0.0: USB hub found
[  282.421628][ T8827] netlink: 10 bytes leftover after parsing attributes in process `syz.3.727'.
[  282.508673][   T43] hub 5-1:0.0: 10 ports detected
[  282.525210][   T43] hub 5-1:0.0: insufficient power available to use all downstream ports
[  282.716353][   T43] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  282.723246][   T43] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  282.790564][   T43] usbhid 5-1:0.0: can't add hid device: -71
[  282.805396][   T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  282.845337][   T43] usb 5-1: USB disconnect, device number 35
[  284.032638][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.0.730'.
[  284.190264][ T8860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.730'.
[  284.258519][ T8860] 8021q: adding VLAN 0 to HW filter on device bond2
[  284.372597][ T8857] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  284.743175][ T8866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.733'.
[  285.025377][ T8871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.734'.
[  285.102411][ T8871] x_tables: ip_tables: udp match: only valid for protocol 17
[  285.827269][ T8884] xt_CT: No such helper "pptp"
[  286.209033][ T8890] netlink: 'syz.0.738': attribute type 5 has an invalid length.
[  286.263262][ T8890] ip6erspan0: entered promiscuous mode
[  286.465539][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  287.205716][ T8905] ip6gre1: entered allmulticast mode
[  287.332075][ T6043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  287.341334][    T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  287.408744][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.423702][    T9] usb 4-1: Product: syz
[  287.438519][    T9] usb 4-1: Manufacturer: syz
[  287.455109][    T9] usb 4-1: SerialNumber: syz
[  287.477852][    T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  287.510828][ T1212] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  287.755281][    T9] usb 4-1: USB disconnect, device number 25
[  287.988699][ T8918] x_tables: duplicate underflow at hook 4
[  288.000830][ T8919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.295845][ T8892] 8021q: adding VLAN 0 to HW filter on device bond3
[  288.820058][ T1212] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  288.875545][ T1212] ath9k_htc: Failed to initialize the device
[  288.882820][    T9] usb 4-1: ath9k_htc: USB layer deinitialized
[  289.158381][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.752'.
[  289.190404][ T8935] netlink: 'syz.4.750': attribute type 1 has an invalid length.
[  289.202432][ T8935] netlink: 'syz.4.750': attribute type 3 has an invalid length.
[  289.210899][ T8935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.750'.
[  289.245173][ T5953] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  289.417801][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.433921][ T5953] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  289.444180][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.461331][ T5953] usb 3-1: config 0 descriptor??
[  289.675959][ T8933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.710127][ T5953] logitech-djreceiver 0003:046D:C71F.000D: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0
[  289.818035][ T8933] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.896957][ T5953] usb 3-1: USB disconnect, device number 38
[  290.085642][ T8959] fido_id[8959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  290.228718][ T8961] /dev/nullb0: Can't open blockdev
[  290.278476][ T8961] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  290.560501][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.758'.
[  290.595514][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'.
[  290.630742][ T8967] netlink: 60 bytes leftover after parsing attributes in process `syz.2.758'.
[  291.094274][ T8986] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  291.102874][ T8986] overlayfs: failed to set xattr on upper
[  291.109011][ T8986] overlayfs: ...falling back to index=off.
[  291.115519][ T8986] overlayfs: ...falling back to uuid=null.
[  291.615181][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  292.090275][ T8999] siw: device registration error -23
[  292.139424][ T8999] FAULT_INJECTION: forcing a failure.
[  292.139424][ T8999] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  292.153110][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.4.764 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  292.153136][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  292.153152][ T8999] Call Trace:
[  292.153164][ T8999]  <TASK>
[  292.153172][ T8999]  dump_stack_lvl+0x189/0x250
[  292.153197][ T8999]  ? __pfx____ratelimit+0x10/0x10
[  292.153215][ T8999]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.153233][ T8999]  ? __pfx__printk+0x10/0x10
[  292.153257][ T8999]  ? __might_fault+0xb0/0x130
[  292.153284][ T8999]  should_fail_ex+0x414/0x560
[  292.153308][ T8999]  _copy_from_user+0x2d/0xb0
[  292.153333][ T8999]  ___sys_sendmsg+0x158/0x2a0
[  292.153364][ T8999]  ? __pfx____sys_sendmsg+0x10/0x10
[  292.153426][ T8999]  ? __fget_files+0x2a/0x420
[  292.153454][ T8999]  ? __fget_files+0x3a0/0x420
[  292.153487][ T8999]  __x64_sys_sendmsg+0x19b/0x260
[  292.153519][ T8999]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  292.153558][ T8999]  ? __pfx_ksys_write+0x10/0x10
[  292.153574][ T8999]  ? rcu_is_watching+0x15/0xb0
[  292.153601][ T8999]  ? do_syscall_64+0xbe/0x3b0
[  292.153625][ T8999]  do_syscall_64+0xfa/0x3b0
[  292.153642][ T8999]  ? lockdep_hardirqs_on+0x9c/0x150
[  292.153661][ T8999]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.153679][ T8999]  ? clear_bhb_loop+0x60/0xb0
[  292.153703][ T8999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.153721][ T8999] RIP: 0033:0x7fd96098ebe9
[  292.153745][ T8999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.153762][ T8999] RSP: 002b:00007fd9617b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.153782][ T8999] RAX: ffffffffffffffda RBX: 00007fd960bb6180 RCX: 00007fd96098ebe9
[  292.153797][ T8999] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003
[  292.153810][ T8999] RBP: 00007fd9617b7090 R08: 0000000000000000 R09: 0000000000000000
[  292.153823][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.153834][ T8999] R13: 00007fd960bb6218 R14: 00007fd960bb6180 R15: 00007ffea10da968
[  292.153866][ T8999]  </TASK>
[  292.881487][ T9015] fuse: Bad value for 'fd'
[  292.891154][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  292.961282][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.050558][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  293.050558][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.769'.
[  294.502436][ T9042] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  295.008631][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.780'.
[  296.761098][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  296.775925][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  296.860732][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  296.871073][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  296.881509][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  296.935146][ T5953] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  297.125186][ T5953] usb 3-1: Using ep0 maxpacket: 32
[  297.370561][ T5953] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  297.455081][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  297.535616][ T9071] lo speed is unknown, defaulting to 1000
[  297.630071][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.630364][ T9071] lo speed is unknown, defaulting to 1000
[  297.776703][ T5953] usb 3-1: config 0 descriptor??
[  298.000618][ T5953] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  298.051024][ T5953] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  298.084378][ T5953] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  298.094644][ T5953] usb 3-1: media controller created
[  298.160245][ T5953] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  298.417482][ T9071] chnl_net:caif_netlink_parms(): no params data found
[  298.466275][   T30] kauditd_printk_skb: 64 callbacks suppressed
[  298.466292][   T30] audit: type=1326 audit(1754939302.443:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.512767][   T30] audit: type=1326 audit(1754939302.443:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.539244][   T30] audit: type=1326 audit(1754939302.463:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.571833][   T30] audit: type=1326 audit(1754939302.473:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.603873][   T30] audit: type=1326 audit(1754939302.473:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.639422][   T30] audit: type=1326 audit(1754939302.473:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9084 comm="syz.3.788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d3f8ebe9 code=0x7ffc0000
[  298.704816][ T9071] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.722285][ T9071] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.735736][ T9071] bridge_slave_0: entered allmulticast mode
[  298.749736][ T9071] bridge_slave_0: entered promiscuous mode
[  298.759325][ T9071] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.778727][   T30] audit: type=1326 audit(1754939302.643:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  298.843176][   T30] audit: type=1326 audit(1754939302.643:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  298.909757][   T30] audit: type=1326 audit(1754939302.643:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  298.961737][ T5904] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  298.979962][ T5839] Bluetooth: hci5: command tx timeout
[  299.004791][   T30] audit: type=1326 audit(1754939302.643:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9064 comm="syz.2.785" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  299.025069][ T9071] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.038699][ T9071] bridge_slave_1: entered allmulticast mode
[  299.062733][ T9071] bridge_slave_1: entered promiscuous mode
[  299.145136][ T5904] usb 4-1: Using ep0 maxpacket: 32
[  299.154327][ T5904] usb 4-1: config 0 has an invalid interface number: 247 but max is 0
[  299.164252][ T5904] usb 4-1: config 0 has no interface number 0
[  299.184031][ T5904] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  299.203562][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  299.213087][ T9071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.247540][ T5904] usb 4-1: Product: syz
[  299.251827][ T5904] usb 4-1: Manufacturer: syz
[  299.259658][ T9071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.298674][ T5904] usb 4-1: config 0 descriptor??
[  299.499376][ T9071] team0: Port device team_slave_0 added
[  299.508018][ T9071] team0: Port device team_slave_1 added
[  299.516919][ T9090] QAT: Stopping all acceleration devices.
[  299.592238][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.592258][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.592303][ T9071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.603582][ T9071] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.603602][ T9071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.603645][ T9071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.753861][ T5953] az6027: usb out operation failed. (-71)
[  299.753927][ T5953] stb0899_attach: Driver disabled by Kconfig
[  299.753940][ T5953] az6027: no front-end attached
[  299.753940][ T5953] 
[  299.754714][ T5953] az6027: usb out operation failed. (-71)
[  299.754734][ T5953] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  299.758468][ T5953] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input15
[  299.771929][ T5953] dvb-usb: schedule remote query interval to 400 msecs.
[  299.836483][ T5953] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  299.839776][ T5953] usb 3-1: USB disconnect, device number 39
[  299.858266][ T9071] hsr_slave_0: entered promiscuous mode
[  299.859344][ T9071] hsr_slave_1: entered promiscuous mode
[  299.860079][ T9071] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  299.860163][ T9071] Cannot create hsr debugfs directory
[  300.052661][ T5953] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  300.179125][ T9102] netlink: 'syz.4.792': attribute type 1 has an invalid length.
[  300.579930][ T5953] usb 4-1: USB disconnect, device number 26
[  300.655096][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  300.716960][ T9071] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  300.727927][ T9071] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  300.741064][ T9071] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  300.748164][ T1212] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  300.761795][ T9071] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  300.852012][ T9071] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.876121][ T9071] 8021q: adding VLAN 0 to HW filter on device team0
[  300.889165][ T6071] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.896891][ T6071] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.915940][ T6072] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.923331][ T6072] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.935330][ T1212] usb 5-1: Using ep0 maxpacket: 16
[  300.946992][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  300.969790][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  300.989589][ T1212] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  301.005252][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.015998][ T1212] usb 5-1: Product: syz
[  301.020245][ T1212] usb 5-1: Manufacturer: syz
[  301.025322][ T1212] usb 5-1: SerialNumber: syz
[  301.032992][ T1212] usb 5-1: config 0 descriptor??
[  301.043491][ T1212] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  301.053216][ T1212] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class)
[  301.057177][ T5839] Bluetooth: hci5: command tx timeout
[  301.519335][ T9071] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.716259][ T5897] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  301.748551][ T9129] loop9: detected capacity change from 0 to 7
[  301.799550][ T1212] em28xx 5-1:0.0: chip ID is em28174
[  301.801578][ T5890] Dev loop9: unable to read RDB block 7
[  301.801635][ T5890]  loop9: unable to read partition table
[  301.801853][ T5890] loop9: partition table beyond EOD, truncated
[  301.906137][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'.
[  301.915234][ T9146] netlink: 10 bytes leftover after parsing attributes in process `syz.3.803'.
[  301.954729][ T9146] netlink: 248 bytes leftover after parsing attributes in process `syz.3.803'.
[  302.442552][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.479139][ T9129] Dev loop9: unable to read RDB block 7
[  302.485078][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.485131][ T5897] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  302.485155][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.487849][ T5897] usb 3-1: config 0 descriptor??
[  302.555063][ T9129]  loop9: unable to read partition table
[  302.589939][ T9129] loop9: partition table beyond EOD, truncated
[  302.602924][ T9129] loop_reread_partitions: partition scan of loop9 (�被x������ ) failed (rc=-5)
[  302.708050][ T5912] usb 5-1: USB disconnect, device number 36
[  302.716973][ T5912] em28xx 5-1:0.0: Disconnecting em28xx
[  302.769026][ T9149] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.805'.
[  302.795964][ T9149] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  302.827216][ T5912] em28xx 5-1:0.0: Freeing device
[  302.855438][ T9153] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  302.862430][ T9153] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  302.890718][ T9153] vhci_hcd vhci_hcd.0: Device attached
[  302.949041][ T9154] vhci_hcd: connection closed
[  302.964138][ T1059] vhci_hcd: stop threads
[  303.011557][ T5897] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0
[  303.025824][ T1059] vhci_hcd: release socket
[  303.037113][ T1059] vhci_hcd: disconnect device
[  303.061013][ T5897] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  303.140967][ T5839] Bluetooth: hci5: command tx timeout
[  303.220867][ T5897] cp2112 0003:10C4:EA90.000E: error requesting version
[  303.246940][ T5897] cp2112 0003:10C4:EA90.000E: probe with driver cp2112 failed with error -32
[  303.382678][ T9071] veth0_vlan: entered promiscuous mode
[  303.400595][ T9171] IPVS: length: 40 != 8
[  303.419407][ T9071] veth1_vlan: entered promiscuous mode
[  303.552883][ T9071] veth0_macvtap: entered promiscuous mode
[  303.575247][ T5897] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  303.611965][ T9071] veth1_macvtap: entered promiscuous mode
[  303.626491][ T5953] usb usb34-port1: attempt power cycle
[  303.682592][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.699875][ T9071] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.730694][ T9182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.811'.
[  303.741538][ T9071] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.752259][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  303.767366][ T9071] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.785382][ T9071] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.796395][ T5897] usb 4-1: config 9 interface 0 has no altsetting 0
[  303.817816][ T9071] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.835362][ T5897] usb 4-1: New USB device found, idVendor=0471, idProduct=2093, bcdDevice=e6.1a
[  303.844521][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.895591][ T5897] usb 4-1: Product: syz
[  303.899838][ T5897] usb 4-1: Manufacturer: syz
[  303.904479][ T5897] usb 4-1: SerialNumber: syz
[  304.065505][ T9196] netlink: 'syz.2.802': attribute type 1 has an invalid length.
[  304.073662][ T9196] netlink: 'syz.2.802': attribute type 2 has an invalid length.
[  304.117879][ T9198] dummy0: entered promiscuous mode
[  304.144826][ T9198] dummy0: left promiscuous mode
[  304.179509][ T5897] usb 4-1: USB disconnect, device number 27
[  304.197270][ T5953] usb usb34-port1: unable to enumerate USB device
[  304.279864][ T6071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.299084][ T6071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.401723][ T6072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.430225][ T6072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.453947][ T9203] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  304.463310][ T9203] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  304.710610][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'.
[  304.756713][ T9206] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  304.894222][ T9216] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  305.145550][ T5953] usb 3-1: USB disconnect, device number 40
[  305.216470][ T5839] Bluetooth: hci5: command tx timeout
[  305.358734][   T30] audit: type=1326 audit(1754939309.313:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  305.388738][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  305.525702][   T30] audit: type=1326 audit(1754939309.403:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  305.594481][    T9] usb 6-1: Using ep0 maxpacket: 32
[  305.617108][    T9] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[  305.642492][    T9] usb 6-1: config 0 has no interface number 0
[  305.657529][   T30] audit: type=1326 audit(1754939309.633:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  305.665496][    T9] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  306.018852][   T30] audit: type=1326 audit(1754939309.953:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  306.052913][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.248532][   T30] audit: type=1326 audit(1754939309.953:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  306.249813][    T9] usb 6-1: Product: syz
[  306.356405][   T30] audit: type=1326 audit(1754939310.213:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  306.374993][    T9] usb 6-1: Manufacturer: syz
[  306.426873][    T9] usb 6-1: SerialNumber: syz
[  306.458325][   T30] audit: type=1326 audit(1754939310.293:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  306.460198][    T9] usb 6-1: config 0 descriptor??
[  306.603948][   T30] audit: type=1326 audit(1754939310.293:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9219 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  306.690684][    T9] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  306.857964][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  307.095588][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 146
[  307.282145][ T9216] netlink: 76 bytes leftover after parsing attributes in process `syz.5.783'.
[  307.327582][ T9260] netlink: 'syz.4.823': attribute type 10 has an invalid length.
[  307.336192][ T9260] netlink: 40 bytes leftover after parsing attributes in process `syz.4.823'.
[  307.375437][    C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[  307.375796][ T9260] batman_adv: batadv0: Adding interface: virt_wifi0
[  307.390580][ T9260] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  307.418248][ T9260] batman_adv: batadv0: Interface activated: virt_wifi0
[  307.428851][    T9] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  307.509229][ T9266] nbd: must specify a size in bytes for the device
[  307.517635][    T9] usb 6-1: USB disconnect, device number 2
[  307.686271][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  307.778714][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  307.832328][    T9] quatech2 6-1:0.51: device disconnected
[  307.835143][ T5953] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  308.020890][ T5953] usb 3-1: Using ep0 maxpacket: 16
[  308.034019][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.094504][ T5953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.112105][ T5953] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  308.130490][ T5953] usb 3-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00
[  308.142863][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.172688][ T5953] usb 3-1: config 0 descriptor??
[  308.336778][  T981] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  308.409640][   T30] audit: type=1326 audit(1754939312.383:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9284 comm="syz.4.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  308.463027][   T30] audit: type=1326 audit(1754939312.383:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9284 comm="syz.4.832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  308.524082][  T981] usb 6-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.545248][  T981] usb 6-1: config 0 interface 0 has no altsetting 0
[  308.552057][  T981] usb 6-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  308.612648][ T9266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  308.684585][  T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.713470][ T9266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  308.742039][  T981] usb 6-1: config 0 descriptor??
[  308.945123][ T5897] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  309.132706][ T5897] usb 5-1: unable to get BOS descriptor or descriptor too short
[  309.185159][ T5897] usb 5-1: config 2 has an invalid interface number: 181 but max is 0
[  309.193916][ T5897] usb 5-1: config 2 has no interface number 0
[  309.205199][ T5897] usb 5-1: config 2 interface 181 altsetting 9 endpoint 0xD has an invalid bInterval 173, changing to 11
[  309.254849][  T981] apple 0003:05AC:027A.000F: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.5-1/input0
[  309.311282][ T5897] usb 5-1: config 2 interface 181 has no altsetting 0
[  309.401858][ T5897] usb 5-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=65.85
[  309.450629][  T981] usb 6-1: USB disconnect, device number 3
[  309.457116][ T5897] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.470946][ T5897] usb 5-1: Product: syz
[  309.486053][ T5897] usb 5-1: Manufacturer: syz
[  309.492226][ T5897] usb 5-1: SerialNumber: syz
[  309.669693][ T5953] usbhid 3-1:0.0: can't add hid device: -71
[  309.695248][ T5953] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  309.716899][ T5953] usb 3-1: USB disconnect, device number 41
[  309.758378][ T9297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  309.931989][ T9297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.005821][ T9308] fido_id[9308]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  310.070181][ T5897] usb 5-1: USB disconnect, device number 37
[  310.778438][ T9323] fuse: Unknown parameter 'ȣi����_b��z�hFߐ�dyv�3_f������I��*�߼nN�Kl��if}��Ns�'
[  311.815053][   T10] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  311.965200][   T10] usb 4-1: device descriptor read/64, error -71
[  312.354970][   T10] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[  312.478556][ T9349] siw: device registration error -23
[  312.505088][   T10] usb 4-1: device descriptor read/64, error -71
[  312.665312][ T5947] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  312.805826][   T10] usb usb4-port1: attempt power cycle
[  313.083372][ T5947] usb 5-1: LPM exit latency is zeroed, disabling LPM.
[  313.446585][ T5947] usb 5-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  313.536093][ T5947] usb 5-1: config 1 interface 0 has no altsetting 0
[  313.584121][ T5947] usb 5-1: string descriptor 0 read error: -22
[  313.714478][ T5947] usb 5-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40
[  313.730543][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  314.385567][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  314.426324][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  314.473564][ T5947] usbhid 5-1:1.0: can't add hid device: -71
[  314.505065][ T5947] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  314.647517][ T5947] usb 5-1: USB disconnect, device number 38
[  314.691950][ T9376] overlayfs: failed to resolve './file1': -2
[  315.686289][ T9385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.852'.
[  315.695773][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'.
[  316.682866][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'.
[  316.731930][ T9395] kvm: user requested TSC rate below hardware speed
[  317.935471][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  318.894271][ T9446] netlink: 88 bytes leftover after parsing attributes in process `syz.4.866'.
[  319.031504][ T9453] netlink: 60 bytes leftover after parsing attributes in process `syz.3.867'.
[  319.046133][ T9453] overlayfs: failed to resolve './file1': -2
[  319.158250][ T9458] overlay: Unknown parameter 'euid<00000000000000000000'
[  320.177001][ T9472] netlink: 'syz.4.872': attribute type 10 has an invalid length.
[  320.201614][ T9472] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.262967][ T9477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.872'.
[  320.309272][ T9472] bridge0: port 1(bridge_slave_0) entered blocking state
[  320.316618][ T9472] bridge0: port 1(bridge_slave_0) entered forwarding state
[  320.436659][ T5953] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[  320.575462][ T5953] usb 4-1: device descriptor read/64, error -71
[  320.900144][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.872'.
[  320.914227][ T9472] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  321.023262][ T9485] bridge_slave_0: left allmulticast mode
[  321.060760][ T9485] bridge_slave_0: left promiscuous mode
[  321.105495][ T9485] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.190524][ T9481] unsupported nlmsg_type 40
[  321.235377][ T5953] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[  321.350339][ T9485] bond0: (slave bridge0): Releasing backup interface
[  321.385028][ T5953] usb 4-1: device descriptor read/64, error -71
[  321.524695][ T5953] usb usb4-port1: attempt power cycle
[  321.975445][ T5953] usb 4-1: new low-speed USB device number 33 using dummy_hcd
[  322.074782][ T5953] usb 4-1: device descriptor read/8, error -71
[  322.230477][ T9499] netlink: 'syz.4.879': attribute type 10 has an invalid length.
[  322.266696][ T9499] 8021q: adding VLAN 0 to HW filter on device bond0
[  322.275772][ T5947] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  322.292004][ T9499] team0: Port device bond0 added
[  322.315015][ T5953] usb 4-1: new low-speed USB device number 34 using dummy_hcd
[  322.447493][ T5953] usb 4-1: device descriptor read/8, error -71
[  322.475001][ T5947] usb 3-1: Using ep0 maxpacket: 32
[  322.490528][ T5947] usb 3-1: config index 0 descriptor too short (expected 36, got 35)
[  322.512876][ T5947] usb 3-1: config 0 has an invalid interface number: 155 but max is 0
[  322.567900][ T5953] usb usb4-port1: unable to enumerate USB device
[  322.583298][ T5947] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.659625][ T5947] usb 3-1: config 0 has no interface number 0
[  322.690764][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  322.690782][   T30] audit: type=1326 audit(1754939326.663:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  322.699250][ T5947] usb 3-1: config 0 interface 155 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  322.856467][   T30] audit: type=1326 audit(1754939326.693:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  322.879208][    C1] vkms_vblank_simulate: vblank timer overrun
[  322.926855][ T5947] usb 3-1: config 0 interface 155 has no altsetting 0
[  322.939851][   T30] audit: type=1326 audit(1754939326.693:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  322.964824][ T5947] usb 3-1: New USB device found, idVendor=0499, idProduct=500c, bcdDevice=1e.9a
[  323.000409][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.022342][   T30] audit: type=1326 audit(1754939326.693:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  323.126949][   T30] audit: type=1326 audit(1754939326.693:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  323.126983][ T5947] usb 3-1: Product: syz
[  323.150366][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.449953][ T5947] usb 3-1: Manufacturer: syz
[  323.460058][ T5947] usb 3-1: SerialNumber: syz
[  323.503483][ T5947] usb 3-1: config 0 descriptor??
[  323.508194][   T30] audit: type=1326 audit(1754939326.693:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  323.530194][    C1] vkms_vblank_simulate: vblank timer overrun
[  323.559401][ T5947] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  323.646521][ T5947] snd-usb-audio 3-1:0.155: probe with driver snd-usb-audio failed with error -2
[  323.651430][   T30] audit: type=1326 audit(1754939326.693:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  323.658453][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.882'.
[  323.783638][ T5947] usb 3-1: USB disconnect, device number 42
[  323.835023][   T30] audit: type=1326 audit(1754939326.693:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  323.843985][ T7516] udevd[7516]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.009946][   T30] audit: type=1326 audit(1754939326.693:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  324.152095][   T30] audit: type=1326 audit(1754939326.693:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9505 comm="syz.4.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  324.635829][ T9532] /dev/nullb0: Can't open blockdev
[  325.205999][ T5904] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  325.277318][   T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  325.455297][   T10] usb 3-1: Using ep0 maxpacket: 32
[  325.513577][   T10] usb 3-1: config index 0 descriptor too short (expected 6145, got 27)
[  325.532401][   T10] usb 3-1: config 253 has too many interfaces: 112, using maximum allowed: 32
[  325.543291][   T10] usb 3-1: config 253 has an invalid descriptor of length 130, skipping remainder of the config
[  325.565933][   T10] usb 3-1: config 253 has 0 interfaces, different from the descriptor's value: 112
[  325.582593][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  325.594391][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.726018][   T10] usb 3-1: Product: syz
[  325.733237][ T5904] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  325.746890][   T10] usb 3-1: Manufacturer: syz
[  325.751666][   T10] usb 3-1: SerialNumber: syz
[  325.756294][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.756321][ T5904] usb 4-1: Product: syz
[  325.756335][ T5904] usb 4-1: Manufacturer: syz
[  325.756349][ T5904] usb 4-1: SerialNumber: syz
[  325.775075][   T43] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  325.791129][ T5904] usb 4-1: config 0 descriptor??
[  325.933016][ T5839] Bluetooth: hci6: urb ffff88805a78bc00 submission failed (2)
[  325.996781][   T43] usb 5-1: config 0 has an invalid interface number: 160 but max is 0
[  326.014981][   T43] usb 5-1: config 0 has no interface number 0
[  326.021173][   T43] usb 5-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[  326.043977][   T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e
[  326.054120][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.062737][   T43] usb 5-1: Product: syz
[  326.069770][   T43] usb 5-1: Manufacturer: syz
[  326.074695][   T43] usb 5-1: SerialNumber: syz
[  326.110798][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.130505][   T43] usb 5-1: config 0 descriptor??
[  326.165029][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  326.183993][   T43] usb 5-1: Found UVC 0.00 device syz (05ac:8501)
[  326.191689][ T9551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  326.211975][   T43] usb 5-1: No valid video chain found.
[  326.212410][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.227156][ T9551] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  326.334942][   T10] usb 6-1: Using ep0 maxpacket: 16
[  326.342323][   T10] usb 6-1: config index 0 descriptor too short (expected 1828, got 36)
[  326.351488][   T10] usb 6-1: config 0 has an invalid interface number: 0 but max is -1
[  326.360013][   T10] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0
[  326.369861][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  326.380454][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  326.391525][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.404840][   T10] usb 6-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  326.415598][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.423725][   T10] usb 6-1: Product: syz
[  326.430702][ T5947] usb 4-1: USB disconnect, device number 35
[  326.442632][   T10] usb 6-1: Manufacturer: syz
[  326.447738][   T10] usb 6-1: SerialNumber: syz
[  326.491404][   T10] usb 6-1: config 0 descriptor??
[  326.504210][ T1212] usb 3-1: USB disconnect, device number 43
[  326.520504][   T10] keyspan 6-1:0.0: Keyspan 2 port adapter converter detected
[  326.542636][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 87
[  326.552724][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 7
[  326.568935][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 81
[  326.604052][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 1
[  326.648130][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 2
[  326.681103][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 85
[  326.738718][ T9558] lo speed is unknown, defaulting to 1000
[  326.823271][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 5
[  326.834057][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  327.021369][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 83
[  327.030464][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 4
[  327.100758][ T9558] lo speed is unknown, defaulting to 1000
[  327.106852][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 86
[  327.125259][   T10] keyspan 6-1:0.0: found no endpoint descriptor for endpoint 6
[  327.152765][   T10] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  327.181621][ T9546] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  327.261575][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.290381][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.324188][ T6760] Bluetooth: hci6: Frame reassembly failed (-84)
[  328.344640][   T10] usb 5-1: USB disconnect, device number 39
[  329.217477][ T5839] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  329.225409][   T51] Bluetooth: hci6: command 0x1003 tx timeout
[  329.226060][ T9599] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  329.262096][  T981] usb 6-1: USB disconnect, device number 4
[  329.263239][ T9599] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  329.282860][  T981] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  329.307158][  T981] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  329.324009][  T981] keyspan 6-1:0.0: device disconnected
[  329.347618][ T9600] input: syz1 as /devices/virtual/input/input16
[  329.740303][ T9610] netlink: 180 bytes leftover after parsing attributes in process `syz.4.902'.
[  329.767431][ T9609] netlink: 180 bytes leftover after parsing attributes in process `syz.4.902'.
[  329.783828][ T9609] netlink: 180 bytes leftover after parsing attributes in process `syz.4.902'.
[  329.812094][ T9613] mmap: syz.3.904 (9613): VmData 37597184 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data.
[  330.235278][   T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  330.243823][  T981] usb 4-1: new low-speed USB device number 36 using dummy_hcd
[  330.255085][ T5904] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  330.369465][ T9630] batadv0: entered promiscuous mode
[  330.405582][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  330.416213][   T43] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  330.429949][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -61
[  330.437976][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.446323][ T5904] usb 5-1: can't read configurations, error -61
[  330.453704][   T43] usb 3-1: Product: syz
[  330.459192][   T43] usb 3-1: Manufacturer: syz
[  330.463845][   T43] usb 3-1: SerialNumber: syz
[  330.477466][   T43] r8152-cfgselector 3-1: Unknown version 0x0000
[  330.484702][   T43] r8152-cfgselector 3-1: config 0 descriptor??
[  330.535085][  T981] usb 4-1: new low-speed USB device number 37 using dummy_hcd
[  330.585028][ T5904] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  330.685084][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  330.690903][  T981] usb usb4-port1: attempt power cycle
[  330.750624][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -61
[  330.759219][ T5904] usb 5-1: can't read configurations, error -61
[  330.767666][ T5904] usb usb5-port1: attempt power cycle
[  331.035658][  T981] usb 4-1: new low-speed USB device number 38 using dummy_hcd
[  331.077879][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  331.115032][ T5904] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  331.143371][ T9628] batadv0: left promiscuous mode
[  331.158750][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -61
[  331.191386][ T5904] usb 5-1: can't read configurations, error -61
[  331.243999][  T981] usb 4-1: new low-speed USB device number 39 using dummy_hcd
[  331.303904][  T981] usb 4-1: Invalid ep0 maxpacket: 64
[  331.325362][  T981] usb usb4-port1: unable to enumerate USB device
[  331.337639][ T5904] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  331.368044][ T5904] usb 5-1: unable to read config index 0 descriptor/start: -61
[  331.378366][ T5904] usb 5-1: can't read configurations, error -61
[  331.385900][ T5904] usb usb5-port1: unable to enumerate USB device
[  331.428404][ T5904] r8152-cfgselector 3-1: USB disconnect, device number 44
[  331.575223][ T5947] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  331.715070][ T5947] usb 6-1: device descriptor read/64, error -71
[  332.149252][ T5947] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  332.224634][ T9653] fuse: Bad value for 'fd'
[  332.305015][ T5947] usb 6-1: device descriptor read/64, error -71
[  332.476985][ T5947] usb usb6-port1: attempt power cycle
[  333.065906][ T5947] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  333.095546][ T5947] usb 6-1: device descriptor read/8, error -71
[  333.341229][ T9664] Bluetooth: hci0: invalid length 0, exp 2 for type 11
[  335.505011][ T5947] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  335.666903][ T9659] lo speed is unknown, defaulting to 1000
[  335.686675][ T9659] lo speed is unknown, defaulting to 1000
[  335.728506][ T5947] usb 6-1: device not accepting address 8, error -71
[  335.758797][ T5947] usb usb6-port1: unable to enumerate USB device
[  335.835669][ T5953] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  336.038840][ T9680] netlink: 68 bytes leftover after parsing attributes in process `syz.5.922'.
[  336.055623][ T5953] usb 4-1: Using ep0 maxpacket: 16
[  336.073570][ T5953] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  336.092058][ T5953] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  336.142393][ T5953] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  336.169249][ T5953] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  336.180754][ T5953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.192587][ T5953] usb 4-1: Product: syz
[  336.205749][ T5953] usb 4-1: Manufacturer: syz
[  336.210876][ T5953] usb 4-1: SerialNumber: syz
[  336.324337][ T5947] usb 3-1: new full-speed USB device number 45 using dummy_hcd
[  336.484273][ T5953] usb 4-1: USB disconnect, device number 40
[  336.505391][ T5947] usb 3-1: unable to get BOS descriptor or descriptor too short
[  336.517585][   T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  336.536542][ T5947] usb 3-1: not running at top speed; connect to a high speed hub
[  336.555667][ T5947] usb 3-1: config 2 has an invalid interface number: 8 but max is 0
[  336.570563][ T5947] usb 3-1: config 2 has no interface number 0
[  336.593793][ T5947] usb 3-1: New USB device found, idVendor=056c, idProduct=8007, bcdDevice=5f.aa
[  336.617712][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.635355][ T5947] usb 3-1: Product: syz
[  336.639772][ T5947] usb 3-1: Manufacturer: syz
[  336.652143][ T5947] usb 3-1: SerialNumber: syz
[  336.698644][   T10] usb 5-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  336.728720][   T10] usb 5-1: config 0 interface 0 has no altsetting 0
[  336.752693][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  336.770326][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.787012][   T10] usb 5-1: config 0 descriptor??
[  336.869268][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  336.878141][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  336.891796][ T5947] belkin_sa 3-1:2.8: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  337.037579][ T5947] usb 3-1: bcdDevice: 5faa, bfc: 0
[  337.055458][ T5947] usb 3-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  337.070252][ T5947] usb 3-1: USB disconnect, device number 45
[  337.080543][ T5947] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  337.092716][ T5947] belkin_sa 3-1:2.8: device disconnected
[  337.917891][   T10] logitech 0003:046D:C29C.0010: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0
[  338.255266][   T10] logitech 0003:046D:C29C.0010: no inputs found
[  338.291438][   T10] usb 5-1: USB disconnect, device number 44
[  338.339480][ T9706] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  338.367546][ T9705] netlink: 'syz.2.929': attribute type 1 has an invalid length.
[  338.436145][ T9705] 8021q: adding VLAN 0 to HW filter on device bond2
[  338.464384][ T9710] tipc: Started in network mode
[  338.469673][ T9710] tipc: Node identity 669e6d923a55, cluster identity 4711
[  338.477841][ T9710] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.486863][ T9710] syzkaller0: entered promiscuous mode
[  338.492815][ T9710] syzkaller0: entered allmulticast mode
[  338.515203][ T5947] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  338.542525][ T9708] tipc: Resetting bearer <eth:syzkaller0>
[  338.570925][ T9708] tipc: Disabling bearer <eth:syzkaller0>
[  338.685786][ T5947] usb 4-1: Using ep0 maxpacket: 16
[  338.699065][ T9721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.708582][ T9721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.712203][ T9703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  338.738805][ T9703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  338.760243][ T5947] usb 4-1: unable to get BOS descriptor or descriptor too short
[  338.772590][ T5947] usb 4-1: unable to read config index 0 descriptor/start: -71
[  338.781057][ T5947] usb 4-1: can't read configurations, error -71
[  338.794657][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  338.794674][   T30] audit: type=1326 audit(1754939342.763:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  338.827484][   T30] audit: type=1326 audit(1754939342.763:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  338.849987][   T30] audit: type=1326 audit(1754939342.803:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  338.875509][   T30] audit: type=1326 audit(1754939342.803:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd96098ec23 code=0x7ffc0000
[  338.925143][ T5953] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  338.928311][   T30] audit: type=1326 audit(1754939342.803:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd96098ec23 code=0x7ffc0000
[  338.966523][   T30] audit: type=1326 audit(1754939342.803:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  339.014118][   T30] audit: type=1326 audit(1754939342.803:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  339.044471][   T30] audit: type=1326 audit(1754939342.823:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  339.078777][   T30] audit: type=1326 audit(1754939342.823:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  339.102396][   T30] audit: type=1326 audit(1754939342.823:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9722 comm="syz.4.935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd96098ebe9 code=0x7ffc0000
[  339.149456][ T5953] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  339.162332][ T5953] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  339.178585][ T5953] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  339.188414][ T5953] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.196706][ T5953] usb 6-1: Product: syz
[  339.201275][ T5953] usb 6-1: Manufacturer: syz
[  339.207206][ T5953] usb 6-1: SerialNumber: syz
[  339.214794][ T5953] usb 6-1: config 0 descriptor??
[  339.305181][ T5904] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  339.427871][ T5953] em28xx 6-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  339.438257][ T5953] em28xx 6-1:0.0: Device initialization failed.
[  339.444691][ T5953] em28xx 6-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  339.453628][ T5904] usb 5-1: device descriptor read/64, error -71
[  339.657458][ T5947] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  339.698333][ T5904] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  339.790634][   T10] usb 6-1: USB disconnect, device number 9
[  339.815120][ T5947] usb 4-1: Using ep0 maxpacket: 16
[  339.824239][ T5947] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[  339.835427][ T5904] usb 5-1: device descriptor read/64, error -71
[  339.842139][ T5947] usb 4-1: config 0 has no interface number 0
[  339.850019][ T5947] usb 4-1: config 0 interface 68 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023
[  339.868964][ T5947] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[  339.879236][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.887809][ T5947] usb 4-1: Product: syz
[  339.892658][ T5947] usb 4-1: Manufacturer: syz
[  339.897562][ T5947] usb 4-1: SerialNumber: syz
[  339.911733][ T5947] usb 4-1: config 0 descriptor??
[  339.919359][ T9731] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  339.937686][ T5947] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  339.956623][ T5904] usb usb5-port1: attempt power cycle
[  340.137760][ T3496] usb 4-1: Failed to submit usb control message: -71
[  340.139775][ T5953] usb 4-1: USB disconnect, device number 42
[  340.156303][ T3496] usb 4-1: unable to send the bmi data to the device: -71
[  340.163830][ T3496] usb 4-1: unable to get target info from device
[  340.170878][ T3496] usb 4-1: could not get target info (-71)
[  340.177605][ T3496] usb 4-1: could not probe fw (-71)
[  340.315136][ T5904] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  340.335531][ T5904] usb 5-1: device descriptor read/8, error -71
[  340.575036][ T5904] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  340.603409][ T5904] usb 5-1: device descriptor read/8, error -71
[  340.717730][ T5904] usb usb5-port1: unable to enumerate USB device
[  341.653620][ T9773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.946'.
[  345.175137][  T981] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  345.356233][  T981] usb 5-1: Using ep0 maxpacket: 32
[  345.373737][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.380702][ T9829] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  345.398137][ T9829] bond0: (slave lo): Error: Device can not be enslaved while up
[  345.415359][   T10] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  345.422137][  T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.492393][  T981] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  345.525417][  T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.618654][  T981] usb 5-1: config 0 descriptor??
[  345.653302][  T981] hub 5-1:0.0: USB hub found
[  345.662316][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.674924][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.710901][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  345.735785][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  345.750954][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.763501][   T10] usb 4-1: config 0 descriptor??
[  345.950482][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  345.987872][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  346.035412][  T981] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  346.092942][  T981] usbhid 5-1:0.0: can't add hid device: -71
[  346.113325][  T981] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  346.271957][   T10] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  346.319332][  T981] usb 5-1: USB disconnect, device number 49
[  347.170320][ T9853] lo speed is unknown, defaulting to 1000
[  347.178621][ T9853] lo speed is unknown, defaulting to 1000
[  348.011465][ T9851] siw: device registration error -23
[  348.072103][ T9856] xt_CT: No such helper "snmp"
[  348.199290][ T9856] use of bytesused == 0 is deprecated and will be removed in the future,
[  348.233939][ T9856] use the actual size instead.
[  348.540889][ T9876] evm: overlay not supported
[  348.949998][ T5955] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  349.001182][ T9888] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  349.050274][ T5947] usb 4-1: reset high-speed USB device number 43 using dummy_hcd
[  349.676331][ T5955] usb 6-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  349.704603][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.772733][ T5955] usb 6-1: Product: syz
[  349.779398][ T5955] usb 6-1: Manufacturer: syz
[  349.784342][ T5955] usb 6-1: SerialNumber: syz
[  349.792528][ T5955] usb 6-1: config 0 descriptor??
[  349.802434][ T5955] gspca_main: sq905c-2.14.0 probing 2770:9052
[  349.866779][ T5947] usb 4-1: device firmware changed
[  349.906475][   T10] usb 4-1: USB disconnect, device number 43
[  349.945159][ T5953] usb 5-1: new full-speed USB device number 50 using dummy_hcd
[  350.069570][   T30] kauditd_printk_skb: 39 callbacks suppressed
[  350.069589][   T30] audit: type=1326 audit(1754939354.043:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.085045][   T10] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  350.104348][   T30] audit: type=1326 audit(1754939354.073:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.162880][ T5953] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  350.179194][ T5953] usb 5-1: config 0 has no interface number 0
[  350.192221][ T5953] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  350.208639][   T30] audit: type=1326 audit(1754939354.123:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.268408][ T9893] misc userio: No port type given on /dev/userio
[  350.314781][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.323973][   T30] audit: type=1326 audit(1754939354.153:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9894 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f35e4bc14a5 code=0x7ffc0000
[  350.331050][ T5953] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.04
[  350.362983][   T30] audit: type=1326 audit(1754939354.163:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.394588][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  350.395535][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.409276][ T5953] usb 5-1: Product: syz
[  350.414971][ T5953] usb 5-1: SerialNumber: syz
[  350.430268][   T30] audit: type=1326 audit(1754939354.163:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.459747][ T5953] usb 5-1: config 0 descriptor??
[  350.467326][   T30] audit: type=1326 audit(1754939354.213:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.470240][ T5955] gspca_sq905c: sq905c_read: usb_control_msg failed (-71)
[  350.509907][ T5953] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input18
[  350.530336][   T30] audit: type=1326 audit(1754939354.223:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.534682][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  350.553711][   T30] audit: type=1326 audit(1754939354.223:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.571502][ T5955] sq905c 6-1:0.0: Reading version command failed
[  350.635594][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  350.645033][ T5955] sq905c 6-1:0.0: probe with driver sq905c failed with error -71
[  350.651385][   T30] audit: type=1326 audit(1754939354.223:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9892 comm="syz.2.974" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35e4b8ebe9 code=0x7ffc0000
[  350.666262][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  350.692356][ T5955] usb 6-1: USB disconnect, device number 10
[  350.703608][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  350.713164][   T10] usb 4-1: SerialNumber: syz
[  351.149175][   T10] usb 4-1: 0:2 : does not exist
[  351.754383][   T10] usb 4-1: USB disconnect, device number 44
[  351.855113][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  353.192437][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.202123][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.211514][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.220837][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.230025][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.239198][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.248361][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.257614][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.266964][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  353.430693][ T9928] random: crng reseeded on system resumption
[  354.231305][ T9923] net_ratelimit: 2936 callbacks suppressed
[  354.231327][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.247000][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.256388][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.265758][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.275132][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.284201][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.293822][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.303212][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.312774][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.322001][ T9923] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31
[  354.849509][ T9934] lo speed is unknown, defaulting to 1000
[  354.857384][ T9934] lo speed is unknown, defaulting to 1000
[  355.184424][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  355.194062][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  355.201362][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  355.205412][   T10] usb 5-1: USB disconnect, device number 50
[  355.208488][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  355.279500][   T10] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  356.254426][ T9969] netlink: 'syz.5.992': attribute type 10 has an invalid length.
[  356.366982][ T9969] team0: Device hsr_slave_0 failed to register rx_handler
[  356.458983][ T9973] pimreg: entered allmulticast mode
[  357.707655][   T51] Bluetooth: hci5: link tx timeout
[  357.713787][   T51] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[  358.287902][   T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  358.332038][T10022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1007'.
[  358.345097][ T5953] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  358.464851][T10025] lo speed is unknown, defaulting to 1000
[  358.472652][T10025] lo speed is unknown, defaulting to 1000
[  358.499046][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  358.549922][   T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  358.599575][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.656004][   T10] usb 3-1: config 0 descriptor??
[  358.682207][   T10] pwc: Askey VC010 type 2 USB webcam detected.
[  358.830057][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  358.845190][ T5953] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  358.854295][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  358.869270][T10025] siw: device registration error -23
[  358.878598][T10025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1005'.
[  358.893796][ T5953] usb 4-1: config 0 descriptor??
[  359.086475][   T10] pwc: recv_control_msg error -32 req 02 val 2b00
[  359.110729][T10034] sd 0:0:1:0: device reset
[  359.125493][   T10] pwc: recv_control_msg error -32 req 02 val 2700
[  359.320288][ T5953] wacom 0003:056A:0016.0012: Unknown device_type for 'HID 056a:0016'. Assuming pen.
[  359.375774][   T10] pwc: recv_control_msg error -71 req 04 val 1000
[  359.385711][ T5953] wacom 0003:056A:0016.0012: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0
[  359.396004][   T10] pwc: recv_control_msg error -71 req 04 val 1300
[  359.417989][   T10] pwc: recv_control_msg error -71 req 04 val 1400
[  359.441375][   T10] pwc: recv_control_msg error -71 req 02 val 2000
[  359.447119][ T5953] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.0012/input/input19
[  359.455222][   T10] pwc: recv_control_msg error -71 req 02 val 2100
[  359.484802][   T10] pwc: recv_control_msg error -71 req 04 val 1500
[  359.503095][   T10] pwc: recv_control_msg error -71 req 02 val 2500
[  359.521297][   T10] pwc: recv_control_msg error -71 req 02 val 2400
[  359.554849][   T10] pwc: recv_control_msg error -71 req 02 val 2600
[  359.580295][   T10] pwc: recv_control_msg error -71 req 02 val 2900
[  359.602137][   T10] pwc: recv_control_msg error -71 req 02 val 2800
[  359.627103][   T10] pwc: recv_control_msg error -71 req 04 val 1100
[  359.647885][   T10] pwc: recv_control_msg error -71 req 04 val 1200
[  359.685204][   T10] pwc: Registered as video103.
[  359.713352][   T10] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22
[  359.756238][   T10] usb 3-1: USB disconnect, device number 46
[  359.776508][   T51] Bluetooth: hci5: command 0x0405 tx timeout
[  360.968579][ T5953] usb 4-1: USB disconnect, device number 45
[  361.127032][T10050] tipc: Started in network mode
[  361.131996][T10050] tipc: Node identity de8dc21290ca, cluster identity 4711
[  361.173952][T10050] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  361.185858][T10058] syzkaller0: entered promiscuous mode
[  361.217623][T10058] syzkaller0: entered allmulticast mode
[  361.266220][T10050] tipc: Resetting bearer <eth:syzkaller0>
[  361.280722][T10049] tipc: Resetting bearer <eth:syzkaller0>
[  361.367440][T10049] tipc: Disabling bearer <eth:syzkaller0>
[  361.489894][ T5904] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  361.582722][T10070] syz.5.1015: attempt to access beyond end of device
[  361.582722][T10070] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0
[  361.596572][T10070] efs: cannot read volume header
[  362.178090][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 256, setting to 64
[  362.212443][ T5904] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 9.75
[  362.222896][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.231399][ T5904] usb 3-1: Product: syz
[  362.233232][ T5839] Bluetooth: hci5: unexpected event for opcode 0x0c03
[  362.235730][ T5904] usb 3-1: Manufacturer: syz
[  362.248106][ T5904] usb 3-1: SerialNumber: syz
[  362.263154][ T5904] usb 3-1: config 0 descriptor??
[  362.278514][ T5839] Bluetooth: hci5: unexpected event for opcode 0x0c03
[  362.367217][T10082] devpts: Bad value for 'uid'
[  362.371996][T10082] devpts: Bad value for 'uid'
[  362.383994][T10082] tmpfs: Bad value for 'mpol'
[  362.398977][ T5904] viperboard 3-1:0.0: version 0.00 found at bus 003 address 047
[  362.440816][ T5904] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100
[  362.445078][   T10] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  362.462696][ T5904] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5
[  362.525987][ T5904] usb 3-1: USB disconnect, device number 47
[  362.904932][   T10] usb 5-1: Using ep0 maxpacket: 32
[  362.907296][T10085] cgroup: fork rejected by pids controller in /syz5
[  362.914706][   T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  362.940760][   T10] usb 5-1: config 0 has no interface number 0
[  362.956966][   T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  362.967322][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.976099][   T10] usb 5-1: Product: syz
[  362.980450][   T10] usb 5-1: Manufacturer: syz
[  362.990624][   T10] usb 5-1: SerialNumber: syz
[  363.006116][   T10] usb 5-1: config 0 descriptor??
[  363.030396][   T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  363.328649][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  363.406893][   T10] usb 5-1: qt2_attach - failed to power on unit: -71
[  363.414015][T11016] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1022'.
[  363.472039][   T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  363.492687][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1022'.
[  363.751929][   T10] usb 5-1: USB disconnect, device number 51
[  365.170085][T11281] /dev/nullb0: Can't open blockdev
[  366.016418][ T5947] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  366.455196][ T5947] usb 4-1: Using ep0 maxpacket: 16
[  366.472557][ T5947] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  366.504554][ T5947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  366.532358][ T5947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  366.553370][ T5947] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  366.705154][ T5947] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  366.714401][ T5947] usb 4-1: config 0 has no interface number 0
[  366.722051][ T5947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  366.734248][ T5947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  366.757751][ T5947] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  366.795484][ T5947] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  366.854376][ T5947] usb 4-1: config 0 interface 125 has no altsetting 0
[  366.878707][ T5947] usb 4-1: config 0 interface 125 has no altsetting 2
[  366.912118][ T5947] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  367.002797][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.898304][ T5947] usb 4-1: Product: syz
[  367.902567][ T5947] usb 4-1: Manufacturer: syz
[  367.907276][ T5947] usb 4-1: SerialNumber: syz
[  368.028789][ T5947] usb 4-1: config 0 descriptor??
[  368.070777][ T5947] usb 4-1: selecting invalid altsetting 2
[  368.495131][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  368.538748][T11347] loop2: detected capacity change from 0 to 7
[  368.610503][T11347] Dev loop2: unable to read RDB block 7
[  368.652068][T11347]  loop2: unable to read partition table
[  368.660646][T11353] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1045'.
[  368.686411][T11347] loop2: partition table beyond EOD, truncated
[  368.694039][T11347] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  368.706165][T11346] [U] 	
[  369.027770][    C0] usb 4-1: async_complete: urb error -71
[  369.033656][    C0] usb 4-1: async_complete: urb error -71
[  369.039404][    C0] usb 4-1: async_complete: urb error -71
[  369.045684][    C0] usb 4-1: async_complete: urb error -71
[  369.053090][    C0] vkms_vblank_simulate: vblank timer overrun
[  369.063443][ T5947] get_1284_register: usb error -71
[  369.115215][ T5947] uss720 4-1:0.125: probe with driver uss720 failed with error -71
[  369.158581][ T5947] usb 4-1: USB disconnect, device number 46
[  369.735196][ T5953] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  369.970690][ T5953] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  370.045205][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.082829][ T5953] usb 3-1: config 0 descriptor??
[  370.245099][ T5947] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  370.264162][T11379] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  370.330445][ T5953] kaweth 3-1:0.0: Firmware present in device.
[  370.581067][ T5953] kaweth 3-1:0.0: Statistics collection: 0
[  370.587104][ T5953] kaweth 3-1:0.0: Multicast filter limit: 0
[  370.592074][ T5947] usb 4-1: config 1 interface 0 has no altsetting 0
[  370.593438][ T5953] kaweth 3-1:0.0: MTU: 0
[  370.604041][ T5953] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  370.620482][ T5947] usb 4-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40
[  370.629859][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.638313][ T5947] usb 4-1: Product: syz
[  370.642516][ T5947] usb 4-1: Manufacturer: syz
[  370.648412][ T5947] usb 4-1: SerialNumber: syz
[  370.705031][   T10] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  370.746036][T11387] siw: device registration error -23
[  370.889959][   T10] usb 5-1: too many configurations: 151, using maximum allowed: 8
[  372.075237][ T6071] wlan1: Trigger new scan to find an IBSS to join
[  372.224340][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  372.254515][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  372.263382][   T10] usb 5-1: Product: syz
[  372.268235][   T10] usb 5-1: Manufacturer: syz
[  372.273545][   T10] usb 5-1: SerialNumber: syz
[  372.279612][ T5947] usbhid 4-1:1.0: can't add hid device: -71
[  372.297909][ T5947] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  372.306963][   T10] usb 5-1: config 0 descriptor??
[  372.329852][ T5947] usb 4-1: USB disconnect, device number 47
[  372.432238][T11364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  372.445453][T11364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.472956][ T5953] kaweth 3-1:0.0: kaweth interface created at eth1
[  372.514823][ T5947] usb 5-1: USB disconnect, device number 52
[  372.834184][ T5953] usb 3-1: USB disconnect, device number 48
[  372.914347][T11395] siw: device registration error -23
[  373.470754][T11403] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  374.415064][ T5947] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  374.573983][ T5947] usb 3-1: device descriptor read/64, error -71
[  375.055656][ T5947] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  375.415021][ T5947] usb 3-1: device descriptor read/64, error -71
[  375.525389][ T5947] usb usb3-port1: attempt power cycle
[  375.877898][ T5947] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[  375.918989][ T5947] usb 3-1: device descriptor read/8, error -71
[  376.195250][ T5947] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  376.536683][ T5947] usb 3-1: device descriptor read/8, error -71
[  376.580919][T11441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1068'.
[  376.596136][T11441] tipc: Cannot configure node identity twice
[  376.645239][T11441] ------------[ cut here ]------------
[  376.651448][T11441] WARNING: CPU: 0 PID: 11441 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0
[  376.661758][T11441] Modules linked in:
[  376.666465][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.3.1068 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  376.676629][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  376.687382][T11441] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  376.694050][T11441] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 ee 8b 00 cc e8 22 b1 e2 f6 90 0f 0b 90 eb e1 e8 17 b1 e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  376.713788][T11441] RSP: 0018:ffffc9001ab46ff0 EFLAGS: 00010283
[  376.720020][T11441] RAX: ffffffff8add74a9 RBX: ffff88807c4f0000 RCX: 0000000000080000
[  376.728189][T11441] RDX: ffffc9000c301000 RSI: 0000000000000356 RDI: 0000000000000357
[  376.736533][T11441] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8add6fc3
[  376.744539][T11441] R10: dffffc0000000000 R11: ffffed100f89e031 R12: 1ffff1100f89e00a
[  376.752689][T11441] R13: ffff888057310e40 R14: 0000000000000001 R15: ffffffff8add6fc3
[  376.761658][T11441] FS:  00007f93d4d806c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  376.771574][T11441] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.778885][T11441] CR2: 0000200000001040 CR3: 0000000056454000 CR4: 00000000003526f0
[  376.787491][T11441] Call Trace:
[  376.791413][T11441]  <TASK>
[  376.794367][T11441]  rate_control_rate_init_all_links+0x109/0x1a0
[  376.801736][T11441]  sta_apply_auth_flags+0x1c2/0x400
[  376.807276][T11441]  sta_apply_parameters+0xe4b/0x15b0
[  376.812700][T11441]  ieee80211_add_station+0x424/0x6a0
[  376.818402][T11441]  rdev_add_station+0x108/0x290
[  376.823426][T11441]  nl80211_new_station+0x1723/0x1b40
[  376.828817][T11441]  ? __pfx_nl80211_new_station+0x10/0x10
[  376.834634][T11441]  ? netdev_run_todo+0xe1d/0xea0
[  376.839739][T11441]  ? nl80211_pre_doit+0x4f1/0x930
[  376.844930][T11441]  genl_family_rcv_msg_doit+0x215/0x300
[  376.850508][T11441]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  376.856649][T11441]  ? bpf_lsm_capable+0x9/0x20
[  376.861511][T11441]  ? security_capable+0x7e/0x2e0
[  376.866685][T11441]  genl_rcv_msg+0x60e/0x790
[  376.871222][T11441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.876324][T11441]  ? ref_tracker_free+0x63a/0x7d0
[  376.881386][T11441]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  376.886816][T11441]  ? __pfx_nl80211_new_station+0x10/0x10
[  376.892813][T11441]  ? __pfx_nl80211_post_doit+0x10/0x10
[  376.899017][T11441]  ? __pfx_ref_tracker_free+0x10/0x10
[  376.904526][T11441]  netlink_rcv_skb+0x205/0x470
[  376.909420][T11441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  376.914464][T11441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  376.919814][T11441]  ? down_read+0x1ad/0x2e0
[  376.924339][T11441]  genl_rcv+0x28/0x40
[  376.928356][T11441]  netlink_unicast+0x75c/0x8e0
[  376.933183][T11441]  netlink_sendmsg+0x805/0xb30
[  376.938519][T11441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.944009][T11441]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  376.949527][T11441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  376.954830][T11441]  __sock_sendmsg+0x21c/0x270
[  376.959597][T11441]  ____sys_sendmsg+0x505/0x830
[  376.964727][T11441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  376.970321][T11441]  ? import_iovec+0x74/0xa0
[  376.975204][ T6071] wlan1: Trigger new scan to find an IBSS to join
[  376.975398][T11441]  ___sys_sendmsg+0x21f/0x2a0
[  376.986530][T11441]  ? __pfx____sys_sendmsg+0x10/0x10
[  376.991788][T11441]  ? __fget_files+0x2a/0x420
[  376.996811][T11441]  ? __fget_files+0x3a0/0x420
[  377.001522][T11441]  __x64_sys_sendmsg+0x19b/0x260
[  377.006820][T11441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  377.012320][T11441]  ? rcu_is_watching+0x15/0xb0
[  377.017170][T11441]  ? do_syscall_64+0xbe/0x3b0
[  377.021889][T11441]  do_syscall_64+0xfa/0x3b0
[  377.026544][T11441]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.032407][T11441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.038609][T11441]  ? clear_bhb_loop+0x60/0xb0
[  377.043506][T11441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.049458][T11441] RIP: 0033:0x7f93d3f8ebe9
[  377.053910][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.073897][T11441] RSP: 002b:00007f93d4d80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.082992][T11441] RAX: ffffffffffffffda RBX: 00007f93d41b5fa0 RCX: 00007f93d3f8ebe9
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  377.091169][T11441] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  377.099933][T11441] RBP: 00007f93d4011e19 R08: 0000000000000000 R09: 0000000000000000
[  377.108498][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.116617][T11441] R13: 00007f93d41b6038 R14: 00007f93d41b5fa0 R15: 00007fff88b21018
[  377.125040][T11441]  </TASK>
[  377.128209][T11441] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  377.135883][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.3.1068 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  377.146236][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  377.156404][T11441] Call Trace:
[  377.159689][T11441]  <TASK>
[  377.162671][T11441]  dump_stack_lvl+0x99/0x250
[  377.167335][T11441]  ? __asan_memcpy+0x40/0x70
[  377.171962][T11441]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.177200][T11441]  ? __pfx__printk+0x10/0x10
[  377.181824][T11441]  panic+0x2db/0x790
[  377.185737][T11441]  ? __pfx_panic+0x10/0x10
[  377.190175][T11441]  __warn+0x31b/0x4b0
[  377.194251][T11441]  ? rate_control_rate_init+0x64a/0x6e0
[  377.199821][T11441]  ? rate_control_rate_init+0x64a/0x6e0
[  377.205558][T11441]  report_bug+0x2be/0x4f0
[  377.210246][T11441]  ? rate_control_rate_init+0x64a/0x6e0
[  377.215806][T11441]  ? rate_control_rate_init+0x64a/0x6e0
[  377.221395][T11441]  ? rate_control_rate_init+0x64c/0x6e0
[  377.227061][T11441]  handle_bug+0x84/0x160
[  377.231350][T11441]  exc_invalid_op+0x1a/0x50
[  377.235907][T11441]  asm_exc_invalid_op+0x1a/0x20
[  377.240785][T11441] RIP: 0010:rate_control_rate_init+0x64a/0x6e0
[  377.247051][T11441] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 88 ee 8b 00 cc e8 22 b1 e2 f6 90 0f 0b 90 eb e1 e8 17 b1 e2 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00
[  377.266950][T11441] RSP: 0018:ffffc9001ab46ff0 EFLAGS: 00010283
[  377.273175][T11441] RAX: ffffffff8add74a9 RBX: ffff88807c4f0000 RCX: 0000000000080000
[  377.281193][T11441] RDX: ffffc9000c301000 RSI: 0000000000000356 RDI: 0000000000000357
[  377.289194][T11441] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8add6fc3
[  377.297352][T11441] R10: dffffc0000000000 R11: ffffed100f89e031 R12: 1ffff1100f89e00a
[  377.305520][T11441] R13: ffff888057310e40 R14: 0000000000000001 R15: ffffffff8add6fc3
[  377.313614][T11441]  ? rate_control_rate_init+0x163/0x6e0
[  377.319525][T11441]  ? rate_control_rate_init+0x163/0x6e0
[  377.325278][T11441]  ? rate_control_rate_init+0x649/0x6e0
[  377.330951][T11441]  rate_control_rate_init_all_links+0x109/0x1a0
[  377.337296][T11441]  sta_apply_auth_flags+0x1c2/0x400
[  377.342624][T11441]  sta_apply_parameters+0xe4b/0x15b0
[  377.347954][T11441]  ieee80211_add_station+0x424/0x6a0
[  377.353271][T11441]  rdev_add_station+0x108/0x290
[  377.358137][T11441]  nl80211_new_station+0x1723/0x1b40
[  377.363439][T11441]  ? __pfx_nl80211_new_station+0x10/0x10
[  377.369255][T11441]  ? netdev_run_todo+0xe1d/0xea0
[  377.374233][T11441]  ? nl80211_pre_doit+0x4f1/0x930
[  377.379360][T11441]  genl_family_rcv_msg_doit+0x215/0x300
[  377.384921][T11441]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  377.391012][T11441]  ? bpf_lsm_capable+0x9/0x20
[  377.395705][T11441]  ? security_capable+0x7e/0x2e0
[  377.400951][T11441]  genl_rcv_msg+0x60e/0x790
[  377.405493][T11441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.410526][T11441]  ? ref_tracker_free+0x63a/0x7d0
[  377.415573][T11441]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  377.421033][T11441]  ? __pfx_nl80211_new_station+0x10/0x10
[  377.426868][T11441]  ? __pfx_nl80211_post_doit+0x10/0x10
[  377.432424][T11441]  ? __pfx_ref_tracker_free+0x10/0x10
[  377.437900][T11441]  netlink_rcv_skb+0x205/0x470
[  377.442703][T11441]  ? __pfx_genl_rcv_msg+0x10/0x10
[  377.447817][T11441]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  377.453216][T11441]  ? down_read+0x1ad/0x2e0
[  377.457834][T11441]  genl_rcv+0x28/0x40
[  377.461858][T11441]  netlink_unicast+0x75c/0x8e0
[  377.466930][T11441]  netlink_sendmsg+0x805/0xb30
[  377.471783][T11441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.477110][T11441]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  377.482501][T11441]  ? __pfx_netlink_sendmsg+0x10/0x10
[  377.487804][T11441]  __sock_sendmsg+0x21c/0x270
[  377.492586][T11441]  ____sys_sendmsg+0x505/0x830
[  377.497398][T11441]  ? __pfx_____sys_sendmsg+0x10/0x10
[  377.502789][T11441]  ? import_iovec+0x74/0xa0
[  377.507331][T11441]  ___sys_sendmsg+0x21f/0x2a0
[  377.512040][T11441]  ? __pfx____sys_sendmsg+0x10/0x10
[  377.517341][T11441]  ? __fget_files+0x2a/0x420
[  377.522037][T11441]  ? __fget_files+0x3a0/0x420
[  377.526822][T11441]  __x64_sys_sendmsg+0x19b/0x260
[  377.531777][T11441]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  377.537381][T11441]  ? rcu_is_watching+0x15/0xb0
[  377.542157][T11441]  ? do_syscall_64+0xbe/0x3b0
[  377.546863][T11441]  do_syscall_64+0xfa/0x3b0
[  377.551479][T11441]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.556698][T11441]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.562782][T11441]  ? clear_bhb_loop+0x60/0xb0
[  377.567466][T11441]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.573453][T11441] RIP: 0033:0x7f93d3f8ebe9
[  377.578169][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.598172][T11441] RSP: 002b:00007f93d4d80038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  377.606684][T11441] RAX: ffffffffffffffda RBX: 00007f93d41b5fa0 RCX: 00007f93d3f8ebe9
[  377.614751][T11441] RDX: 0000000004000004 RSI: 0000200000000200 RDI: 0000000000000003
[  377.622921][T11441] RBP: 00007f93d4011e19 R08: 0000000000000000 R09: 0000000000000000
[  377.630998][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.639060][T11441] R13: 00007f93d41b6038 R14: 00007f93d41b5fa0 R15: 00007fff88b21018
[  377.647124][T11441]  </TASK>
[  377.650799][T11441] Kernel Offset: disabled
[  377.655138][T11441] Rebooting in 86400 seconds..