last executing test programs:

2m42.800242217s ago: executing program 0 (id=302):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000377a4440ba0d00100900010203010902121001000000000904"], 0x0)
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x3, 0x40, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xfe, 0x0, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000006c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x9}]}}, 0x0}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
pipe2$watch_queue(&(0x7f0000000200)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x7a)
keyctl$invalidate(0x15, r2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x40, r5, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9d15a649288ad004f4173d6512fd5095c8b07c667826ac05"}]]}, 0x40}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
flock(0xffffffffffffffff, 0xe1ee4e2f06703565)
sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002400010078b97000fbdbdf250c07fa9a2990fabff50000000600030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x0)

2m40.924916509s ago: executing program 0 (id=314):
r0 = socket$inet(0x2, 0x3, 0x0)
bind$inet(r0, &(0x7f0000000540)={0x2, 0x4e20, @broadcast}, 0x10)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x6, 0x4)
listen(r0, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10)
r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r3)
r4 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
unshare(0x2040400)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, <r6=>0x0})
syz_open_procfs(r6, &(0x7f0000000140)='net/nfsfs\x00')
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r7 = syz_open_dev$vim2m(0x0, 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0)
syz_open_dev$dri(0x0, 0x7, 0xa0002)
poll(&(0x7f0000000500)=[{r5, 0x1}], 0x1, 0xffffffff)
r8 = gettid()
timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc))

2m38.136779373s ago: executing program 1 (id=326):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
fremovexattr(0xffffffffffffffff, &(0x7f0000000000)=@known='user.syz\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0xc)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x66, &(0x7f0000000000)={r2, 0x3}, &(0x7f0000000080)=0x10)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = socket(0x200000000000011, 0x2, 0xf)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004650d310450c0a8047db01020301000000000904000000cda637000000000000"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000001080)={0x84, &(0x7f0000000c40)={0x0, 0x0, 0x1, "f1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x8, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x4001)
bind$packet(r4, &(0x7f0000000080)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={r7, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000021011907800000000000000004e224e2300109078e20400008000000094822bb5691f56ca93d9c4b0ff7cfd7470a38955472f6c2c9b7e65aa9c00563c6dab8c4b4f925e1e91ee9bf3f878f6b5cfcbe3451286bb46a041770577c4d60a3ba0efd2e070f42a0fbb3a36d7f96c62727211ce19eff736dfdac4853a326bcaf50ad81a5f254e99038650e9ab143ad9e40629964cb212c9cc5fb3f413cc19b6ef400b0ef3da8cdb72edea22f17897358b3a9d108f36dc3535bec0a00512a74dcea6e1fc393216d0bf6d77bfd6ecc1"], 0x0)
r8 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r8, 0xfffffffc)
r9 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r12, 0xffffffffffffffff, 0x0)
eventfd(0x6)

2m36.731568211s ago: executing program 0 (id=338):
socket$packet(0x11, 0x3, 0x300)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500400000000000000a000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

2m36.436227975s ago: executing program 0 (id=342):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000050a59b206d04b708db990000000109029200010000000009040000006b7e7c00"], 0x0)
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xffffffff, 0x3}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
futex(&(0x7f0000000040), 0x6, 0x2, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='bpf\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d70300000000000000d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df6c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8a9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2a9e99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8be1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaa072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a3ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a98838156ff00000000000000cdbf91f7582ab314be3e67b8c9459564c856339a80919ecf839560c62e69df8667b274cc53f83f2086cfd2664252471fad9081824d60741d663ee258705c364e162b84a09870acd0a19399103474444f4fa12dcbd10b40195b6088513029b60a34e4161fe48c092693eb07dc8ddcba2eac2efe30b285a877c862c73ff8a60cf73f1b17da0000000000005664181c1f28cd2880e6872bae932eaf4b0000000000007b662c0fe22cfd6d4bd7b851ae928cebeec6375b16af342e93c39d97e5d74d5a8e96c15fdcde7526b0af54b145e61b042c1e600390590a"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r6, &(0x7f0000003500)=[{{&(0x7f0000000140)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000240)="81", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f0000000780)}}], 0x2, 0x24000851)
setsockopt(r6, 0x84, 0x14, &(0x7f0000000040)="020000000980ffff", 0x8)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3c9300000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x20000014}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040))

2m34.923725406s ago: executing program 1 (id=351):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty=0x34000}, "001863714ab99043"}}}}}, 0x0)

2m34.653733988s ago: executing program 1 (id=353):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000000)={0x4, 0x4, 0x0, 0x0, 0x0, 0x7})
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b", @ANYRESHEX], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_usb_control_io(r1, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_xfrm(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000180)=@newsa={0x108, 0x10, 0x421, 0x0, 0x0, {{@in6=@remote, @in=@rand_addr=0x64010101, 0x8, 0x0, 0x6e20, 0x8, 0x0, 0x80, 0x0, 0x3c}, {@in6=@mcast1, 0x0, 0x3c}, @in=@loopback, {0x0, 0x0, 0x0, 0x83, 0x135d}, {0x0, 0x20000000000000}, {0x1}, 0x70bd2a, 0x0, 0x2, 0x0, 0x39, 0x20}, [@encap={0x1c, 0x4, {0x3, 0x4e24, 0x4e20, @in=@remote}}]}, 0x108}}, 0x200008c0)

2m33.25249075s ago: executing program 0 (id=357):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r0, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x181800)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000200)={0x2000000b})
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3)
r4 = getpid()
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x20000006})
kcmp$KCMP_EPOLL_TFD(r4, 0x0, 0x7, 0xffffffffffffffff, 0x0)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905010340"], 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
shutdown(r0, 0x1)

2m32.765371022s ago: executing program 1 (id=359):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x401)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6(0xa, 0x80002, 0x88)
ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f00000005c0))
syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r3)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000340)={'wg0\x00'})
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[], 0x378}}, 0x20000080)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/246, 0xf6}, {&(0x7f0000000380)=""/217, 0xd9}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000480)=""/254, 0xfe}], 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)

2m32.472732817s ago: executing program 1 (id=360):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x80800)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000004ffffffbe"])

2m32.32207786s ago: executing program 1 (id=362):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$nullb(0xffffff9c, &(0x7f0000000380), 0x2000, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000003c0)={0x8000000000000000, 0x7})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200582, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x402c5839, &(0x7f00000004c0)={0x20, 0x2, 0x0, 0x10000000000400})
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$evdev(&(0x7f0000000400), 0xffff0000, 0x107002)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x9, @local, 0x2}, @in6={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}]}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r6, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940))
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12015002020000102505a1a44000010203010902580001010050000904000000020600000524060000d41e0001040d240f0100000000a1f51f00"], &(0x7f0000000c40)={0xfffffffffffffcbf, 0x0, 0x0, 0x0})
mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0])
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000340)=@secondary)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002d00090027bd70000000000004000800"], 0x14}}, 0x84)

2m31.889603475s ago: executing program 3 (id=365):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(cast6)\x00'}, 0x58)
r1 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000040), 0x4040, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="c99b050d1801427209d0ff0f0ba791eb103846212bbe71651cbfaeac5b257e1acd530000000000", 0x27)

2m31.388933244s ago: executing program 0 (id=367):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
write$binfmt_aout(r2, 0x0, 0xffffffdb)
r3 = socket(0x1, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000000280)={'veth1_to_batadv\x00', 0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="0006000060090000000012800b00010067656e65766500000c0002800500388400cbe933791b9b4875831e090022ac7b692d2a1f80000000"], 0x3c}, 0x1, 0x2, 0x0, 0x805}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xec5c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0xa, 0xb, 0x1, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x48, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x1, 0x1ff, 0x10}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[{0x1, 0x2, 0x9}, {0x3, 0x1, 0x1, 0xa}, {0x4, 0x3, 0xd, 0x1}, {0x5, 0x1, 0xb, 0xc}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0x8d}, 0x94)
openat$uhid(0xffffff9c, &(0x7f0000000380), 0x802, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10)
write(r0, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000e80)={'veth1_macvtap\x00', &(0x7f0000000480)=@ethtool_channels={0xefbbf78acc72356d, 0x7, 0x8, 0x2, 0x9, 0x401, 0x4, 0x2, 0x9}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0x1, 0x0)
vmsplice(r10, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000800)="05add631", 0x4}, {&(0x7f0000000900)="55555cbe", 0x4}, {&(0x7f0000000a00)="74863e", 0x3}], 0x4, 0xe)
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0)
write(r8, 0x0, 0x0)

2m30.721722937s ago: executing program 3 (id=368):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x400}, 0x8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x3})
unshare(0x20000400)
r3 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1)
flistxattr(r3, 0x0, 0xffde)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[], 0x18}}, 0x20000000)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m30.183294377s ago: executing program 3 (id=369):
socket$inet6(0xa, 0x5, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
r3 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b266610dff2d4f1d0c29c9b9faa", 0x9c, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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")
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, r4, 0x0)
unshare(0x22020600)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}})
r6 = syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000240)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r6, 0x7, 0x0, 0x0, 0x0, 0x1})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000380)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000680)=ANY=[@ANYBLOB="c90000000000000000003206bcb2"])
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c)
read$FUSE(r9, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00')

2m28.503324648s ago: executing program 3 (id=375):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000600)=[&(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x1, 0x3, r2, &(0x7f00000011c0)='\n', 0x1}])
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={""/10, ""/2, @dev}}}, &(0x7f0000000180)=0xe4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10)
sendto$inet(r5, &(0x7f0000000900)="c45cf7035c053bdf388b125b37fbf978a43202842b9ac13bb7dee6033985", 0x1e, 0x44088881, 0x0, 0x0)
quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r4, &(0x7f0000000400))
r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x0, 0x0)
fchdir(r7)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, [0x7, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x9]}})
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x6a)
r9 = inotify_init()
inotify_add_watch(r9, &(0x7f00000000c0)='./file0\x00', 0x4000001)
write$binfmt_elf32(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda000020"], 0x69)
close(r8)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x8}}}}}}, 0x0)

2m27.888934707s ago: executing program 3 (id=377):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343e", 0xc4}], 0x2, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x8dffffff)

2m27.739184358s ago: executing program 3 (id=378):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) (fail_nth: 37)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3c000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000615a5a2d2bbd0e000000db2508000100010300000000000074447d225e01000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x9, 0xfab6, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@end, @end, @timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x21, 0x0}, 0xb}, {@empty, 0x1ae4}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x7}]}]}}}}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x131c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000))
fstatat64(0xffffff9c, 0x0, &(0x7f0000000300), 0x1000)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000729158086311000292b8fb00000109022b0001020000000905a9000220e2c70009058010ff037f790209050e03200009809b0705ab0b78eb81"], 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0)

2m17.083001274s ago: executing program 32 (id=362):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = openat$nullb(0xffffff9c, &(0x7f0000000380), 0x2000, 0x0)
ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000003c0)={0x8000000000000000, 0x7})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x200582, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d802, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x402c5839, &(0x7f00000004c0)={0x20, 0x2, 0x0, 0x10000000000400})
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
syz_open_dev$evdev(&(0x7f0000000400), 0xffff0000, 0x107002)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x38, &(0x7f0000000480)=[@in6={0xa, 0x4e22, 0x9, @local, 0x2}, @in6={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}]}, &(0x7f0000000300)=0xc)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r6=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000000)={r6, 0x0, 0x0, 0xfffffffe, 0x0, 0x6}, 0x14)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940))
syz_usb_connect$cdc_ecm(0x2, 0x6a, &(0x7f00000002c0)=ANY=[@ANYBLOB="12015002020000102505a1a44000010203010902580001010050000904000000020600000524060000d41e0001040d240f0100000000a1f51f00"], &(0x7f0000000c40)={0xfffffffffffffcbf, 0x0, 0x0, 0x0})
mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd', @ANYRESDEC=0x0])
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0xe0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffd)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000280)='cifs.idmap\x00', &(0x7f0000000340)=@secondary)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002d00090027bd70000000000004000800"], 0x14}}, 0x84)

2m15.577167327s ago: executing program 33 (id=367):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
write$binfmt_aout(r2, 0x0, 0xffffffdb)
r3 = socket(0x1, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r4, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
ioctl$sock_SIOCETHTOOL(r3, 0x89ff, &(0x7f0000000280)={'veth1_to_batadv\x00', 0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r6, @ANYBLOB="0006000060090000000012800b00010067656e65766500000c0002800500388400cbe933791b9b4875831e090022ac7b692d2a1f80000000"], 0x3c}, 0x1, 0x2, 0x0, 0x805}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x17, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xec5c, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x5}, @jmp={0x5, 0x0, 0x0, 0xa, 0xb, 0x1, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x48, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0x1, 0x1ff, 0x10}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000240)=[{0x1, 0x2, 0x9}, {0x3, 0x1, 0x1, 0xa}, {0x4, 0x3, 0xd, 0x1}, {0x5, 0x1, 0xb, 0xc}, {0x0, 0x2, 0x8, 0x7}], 0x10, 0x8d}, 0x94)
openat$uhid(0xffffff9c, &(0x7f0000000380), 0x802, 0x0)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10)
write(r0, &(0x7f0000000640)="68a0b32fafd3b845da570480e0465913a86dde57923b10e6fd23bb9ae2d3029b", 0x20)
r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000e80)={'veth1_macvtap\x00', &(0x7f0000000480)=@ethtool_channels={0xefbbf78acc72356d, 0x7, 0x8, 0x2, 0x9, 0x401, 0x4, 0x2, 0x9}})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
splice(r9, 0x0, r10, 0x0, 0x1, 0x0)
vmsplice(r10, &(0x7f0000000400)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f0000000800)="05add631", 0x4}, {&(0x7f0000000900)="55555cbe", 0x4}, {&(0x7f0000000a00)="74863e", 0x3}], 0x4, 0xe)
ioctl$sock_inet_udp_SIOCINQ(r10, 0x541b, 0x0)
write(r8, 0x0, 0x0)

2m12.356948349s ago: executing program 34 (id=378):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340))
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"})
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x0, 0x0, 0x1f) (fail_nth: 37)
r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0)
ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x100b})
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x3c000004}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000615a5a2d2bbd0e000000db2508000100010300000000000074447d225e01000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x1)
open(&(0x7f00000002c0)='./file0\x00', 0x1491ff, 0x22)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x5, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x7800, 0x8000, 0x9, 0xfab6, {{0xf, 0x4, 0x1, 0x8, 0x3c, 0x67, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@end, @end, @timestamp_prespec={0x44, 0x24, 0xd0, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x21, 0x0}, 0xb}, {@empty, 0x1ae4}, {@rand_addr=0x64010101, 0x101}, {@broadcast, 0x7}]}]}}}}})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x131c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x2000000000001}}, 0x30)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000))
fstatat64(0xffffff9c, 0x0, &(0x7f0000000300), 0x1000)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000729158086311000292b8fb00000109022b0001020000000905a9000220e2c70009058010ff037f790209050e03200009809b0705ab0b78eb81"], 0x0)
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, 0xffffffffffffffff, 0x0)

39.663829102s ago: executing program 7 (id=704):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)={0x3c, r2, 0x205, 0x0, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x80000001}]}, 0x3c}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x2000000, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in=@private, 0x4e24, 0x0, 0x0, 0x6}, {@in, 0x0, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x7, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7}, {0x7, 0xffffffff, 0x8}, 0x70bd2b, 0x3503, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'xchacha12-neon\x00'}}}]}, 0x138}}, 0x4000080)
ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000140))

39.352972112s ago: executing program 7 (id=705):
r0 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x40000, 0x115}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_CONNECT={0x10, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x8aa, 0x0, 0x41, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42000, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001100)={r3, 0x2000000, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}})

39.064864254s ago: executing program 7 (id=706):
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r0=>0xffffffffffffffff, {0xa}}, './file0\x00'})
r1 = openat$full(0xffffff9c, &(0x7f0000000040), 0x501100, 0x0)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0)
write$nbd(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x40)
r3 = socket$netlink(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x147a, 0x73}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gretap0\x00', &(0x7f00000002c0)={'tunl0\x00', <r8=>0x0, 0x8, 0x8000, 0x81, 0x9, {{0x15, 0x4, 0x2, 0x1, 0x54, 0x65, 0x0, 0xdd, 0x2f, 0x0, @empty, @broadcast, {[@generic={0x82, 0x8, "03d31791171d"}, @generic={0xcc, 0xd, "b673e51fa8afa96df1bd0a"}, @generic={0x86, 0xa, "c99c049952e5d8fa"}, @ssrr={0x89, 0x1f, 0xee, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}, @loopback, @private=0xa010102, @local, @remote]}, @noop]}}}}})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_VENDOR(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r9, 0x701, 0x0, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}]}, 0x38}}, 0x40)
r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0x0, 0x8, 0x10}, 0xc)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x27, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9bd3, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0xa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x10000}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @ldst={0x1, 0x1, 0x6, 0x1, 0x6f4c5fcbff52c173, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x0, 0x0, 0x3, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='syzkaller\x00', 0x993, 0x0, 0x0, 0x41100, 0x8, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x1, 0xf, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[r12, r13], &(0x7f0000000500)=[{0x4, 0x4, 0x2, 0x1}, {0x3, 0x4, 0x10, 0x6}], 0x10, 0x9}, 0x94)
syz_usb_connect(0x0, 0x51, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000025697086708129808460102030109023f00010000c0000904"], 0x0)

37.172729473s ago: executing program 7 (id=713):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80)
fsetxattr$security_capability(r0, &(0x7f0000000000), &(0x7f00000000c0)=@v2={0x2000000, [{0xffffffff, 0x1c44600}, {0x3, 0xdb4a}]}, 0x14, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
fchdir(r1)
write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001c8, 0x12)

36.649360118s ago: executing program 7 (id=714):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r0, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)
listen(r1, 0xe)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x2, 0x0, 0x127}, &(0x7f0000000240), &(0x7f0000001880))

33.888659283s ago: executing program 7 (id=718):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xcc, 0x0, 0x1ac, 0x94050000, 0x1ac, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x138, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
r3 = socket$inet6(0xa, 0x3, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r4 = dup(r2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20084014)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
cachestat(r5, &(0x7f0000000040)={0xffff, 0x10}, &(0x7f0000000080), 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)

18.761867869s ago: executing program 35 (id=718):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x65c, 0xcc, 0x0, 0x1ac, 0x94050000, 0x1ac, 0x594, 0x594, 0x594, 0x594, 0x594, 0x6, 0x0, {[{{@uncond, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6, 0x0, 0x0, 0x44}, 0x0, 0xa4, 0xe0}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf4, 0x138, 0x0, {}, [@common=@unspec=@connmark={{0x2c}}, @common=@inet=@socket1={{0x24}}]}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00', @ipv4=@private}}}, {{@uncond, 0x0, 0x11c, 0x140, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x24}}, {{@uncond, 0x0, 0x134, 0x170, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x3c, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x6b8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x78, 0x1, [@m_ct={0x2c, 0xe, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42)
r3 = socket$inet6(0xa, 0x3, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x1, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}})
r4 = dup(r2)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20084014)
write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0)
cachestat(r5, &(0x7f0000000040)={0xffff, 0x10}, &(0x7f0000000080), 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
openat$uinput(0xffffff9c, 0x0, 0x2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)

15.02537993s ago: executing program 2 (id=780):
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$swradio(&(0x7f0000002440), 0x1, 0x2)
pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}, &(0x7f0000000280)=<r3=>0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000040)=0xfffffc40, 0x0, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000000)=0x1a7)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x8012, r4, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000003c0)="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", 0x105)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
sendto$unix(0xffffffffffffffff, &(0x7f00000007c0)="a4999ce7481460879be9ed9f493e6952680aadc4c0a5852984de4c2589668d9c184d61db9c3229573aeb629fe2b14ee5180ef71fdfec222bc5d6851b6266920143d75f6ce432c112e8634711ce2d7bce83f94d475275dc628788deeb304a0c3dbdb69f774b71e469353ce4aa6ce4f6369de57bbdd594b6cc358c17619369bdc661761c002e14eaac7c17e154af2099b7dcbde57c894c52aa7b58aa06819c52c8a6a264da5a95ea276aedd2927f55e12122f28d4752f181ba243f8a41bd9a21aee63c69a2ae5033eef77302b4dd083d6f3a69", 0xd2, 0x8010, 0x0, 0x0)
r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r8, &(0x7f0000000780)=ANY=[], 0x920)
recvmmsg(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/209, 0xd1}], 0x1}, 0x7fff}, {{0x0, 0x0, 0x0}, 0xff}], 0x2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)

12.265304259s ago: executing program 2 (id=786):
syz_usb_connect$hid(0x59c7271563034cba, 0x0, 0x0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4a, &(0x7f0000000580)=@string={0x4a, 0x3, "f34c2a690f9edebae6e528230fbc28a8648b019527eaa18106f93b2762db6c23ee51dd91b80c0423907b5013a6212e814d37637d351fcd98c90e4fdfaaf16079e116382e7c5d3d57"}}]})
r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0xfffe, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

11.92666723s ago: executing program 6 (id=789):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
dup3(r0, r0, 0x0) (async)
r2 = dup3(r0, r0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000140)={0x5, 0x206, 0x0, {0x5, 0xfffffff8}, 0x1, 0xf1})
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000000000000000000a140000001000010000000000000000000084000a000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20008814)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x8, 0x3, 0x454, 0x0, 0xa, 0x148, 0x308, 0x10, 0x3c0, 0x2a8, 0x2a8, 0x3c0, 0x2a8, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @rand_addr=0x64010101, 0xff, 0xff, 'macvlan1\x00', '\x00', {}, {0xff}, 0x88, 0x2, 0x4}, 0x0, 0x2a0, 0x308, 0x0, {0x20000000}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x18, 0x0, 0x80000000, 0x22ab4ce8, '\x00', 'syz0\x00', {0x6}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x99, 0x4, 0x4, 'netbios-ns\x00', {0x9}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4b0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x5d0, 0x3f4, 0x25, 0x148, 0x0, 0x60, 0x53c, 0x2a8, 0x2a8, 0x53c, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2cc, 0x3f4, 0x0, {0x200003ae, 0x7f00}, [@common=@addrtype={{0x2c}, {0xc1, 0xb, 0x1, 0x1}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x8, 'system_u:object_r:tty_device_t:s0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x5]}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x62c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
write$UHID_INPUT(r2, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(r2, &(0x7f0000002080)={0x8, {"20ebd8360df1e36d4796e8c1ad8cac83217ad9f593639703c199677c08c1c2914e9104940faf078902255084c1091e43e4aec841ff2f946e78baad45a86d7cfc56cfcc1a605f70d0ca3cca68e92723e33356017b19618cef4223d8589904776fc95e22d57562a8172f5a1f858063e9853ff4f6f499ef206e8178ada4095b0bd42dea43dc7816fdfc1043991679983f0d7ced217bac956186fe09f556a3014038abf28f73712f1c5ceee777868aac8847df3ebd2804e0fc86ccc6a368979c33f97f761fcd7b011798a2361d3d25572ef5e3101e4127fdf34acef138850b0bfb4a5c5aab1098557e25efc17f07ebe39934619f771d67d191e1fc685971ead5d3f0ff204edac5816f837daeb873d043717bf3ee64c9fcc5296f7c56e35195294c2084cc2981ec4214b4b099f88492df590475b6a00f30775ae52bf52820293aae3837e61a535f45be2e55856eb7d791cc3365c1fcbe1f4d1632845515efdb2915810b446d8b01b9c1b0bfae2d73e36aebc221b47a9b6ae2272fb0f0b04ea92155c8061323ecfcc7e16b95e1f28085a80ac0081fa5eb1c377e0c7be89fb1b7d19558de16af55c3460bcbd6bbb10a481ef1312409a21c50655bd429896912f03f98698ecef7e06a78ff98587672186cb6fbb58c5ccc38f60a4c2fb7f6499fc2ac67916c998c52e5ab85e4d577c8e00d869794b1936e7b6a3a2c20e70428b1e4b3a0787665bd0350dc5855910ffcf58310c31218385db488dda4cca32ad1c672fb50498e02a69ef28e82ddddb0e830ebf5d851e4567afe743e63ab6e42c7b848664add1ed844e62567fb09029cbc6b52ab1c624adae79d82b595bdd581d12242f4bded1e3ef70aaf03bb5dc86c17c37b87ac36fbe43900ef99bd8249262b3635a6fc395325488a4b716b2a5401747157c8643976ce55221b91365a2542269aed01a56090d539064b8d074849455188d8dab5c9aedf91c8b64f364eefae144a0fc08ebb8f46de187ef97c8b2e480ee975dac4d75e85c290d08be68010061b7c74778b289fd038454ef4065d72510cc33701b9e37e8e1438e8473183edcace6ce24dbe42874107dfaa87971a085f8bb35e6dfa7fb7348dc2e44d62241c35789491b60a42883705d9b6a0754602c068f71ea1f0345aac43ce9ce5d950cf1636f43ce74034ab8f661353f263536ded4ab39ce19bab7d95f5acb7b749f7725c0da640259b1c8298b5ac1ef138136b8ef4a266b46fb0db8207f4cfd87237b3acbdacedc8a7310325662643044d6d1c41aabd168eaa72f0f4357801a656971f7d219eab06009b1f9122b568d9bf8cdf94fafe2cba340a218c93595461bf8b9e5f352cb1ee5bc00d1b6a938277fff5fd1c22f7b5fa82af6f0ae249faa6282c7cdf96b80acba2cbeb8171bf58b2f67c610286a0247e38934845bb557ccd0081461103c394cc5a97f92ee3d87ff312083f9ed5168ad47fe34b295d5744065bc0a471717bf2f6d7884eae14f83ae3e5bb9b8e4ee44b8d6c979f556ffce303cf2d3d4c5f2aa485325dcde6ff297a21caaec897f7437ad37bf1c71a0bd14e80134b57969f2e663c5a11103b9945880f0cdb076f5191b70338b454e04d3e89c2bddb3d3d55679eb6fdfdb28221fa8352b650e79cdda8a2c5198c877e23da64a7afbcb0e3faf324606cc84a34da5ae0fdaf5934dbe87349c8684b76072ea56afd96950db1b63cf2e9a752481996435c0fbe88f8b522b1b45e2557a4471c5a2c40fa491c2852579db234d6d4b8942dba66d17d2df150ee806e05199a40a48d508f0c1cbf889d74a2cadec868824b06e384164ac7979adb9d4a9608778bf69928b64201b753e9e4d6198f0e292a42dc50c1918a09b35ae756b6cd350e103ee5832163f6c2b70bc25cd6b60b67d89abef0ea60427f490f972c5d69b1ebe21fe770aba4b7799603d99139160232cff9b559e59a1cabe349fd9c60bc11469dfd7d93eb3428108003e347c146c0ec5aba03deff09c09ca53573088feb58aaf650bddf5da385661d911a8fe3f9c51cee9177cdc8fa1da9fa9696d4bf0cea5e3fe092122af422b542822899e5e4ebe32bb34d96a210022302541cf0629983d54f0e661ccf467235b66210795b8f287c0a6e5f5e7aae168bc7e569e6482424cb093196d310fef0fa4e8ffcf4810a24abbdf50c660f1becb0b987c92ed7d40054fcdb9f67a310b4a9fcc44bcaf90aa324e21f791128ac3f1eda4a9fde59c8fe190c733c8378ee0d699f6c65b2f882b8b77fcf97977a9dc5f849582f40946afe50222d178cf16ca653820da46486f563dfceba9fdb83b4e4564ead8ead101c612c90263ebbb5a63f8d1c5e3cf473e90abf5b95386078a7d0b75e644e70b458e5165b579e06ae2d460cfcd0d9f93becb83fa920cadfaa0b6c1d5d610cee0bd4c1df27bfdff7e11452b44829fcd32fd11c26f78569a21e06fc9106d3392cd19939cc31693d10547d4e407869f2d3ee604c05f74992b8d21f2d0f125f05d593e817a7a0e5d3070e365efa85ba0ac953106e58a6641193836a32cce2c2d8c55dcc802bda625f09fda4299e67f679b2d62a1d1aeb3f38ae262b0869ccad78aaef51afeb403c4bb90b71c8677131e851132f9db6ae392da354f51bfeba8eedd4b7111cf95b0c1f26a4965c4e95bdfbfa1f5cd3809b29119ca23c333eee5eabeefa8e6cefd668e3551d846c37403384a73c1f468c6e6c77004d40aff2e804b4f2c1a9f71bfe401959c46e6988c221c12527bfc0bdb11a478867f0ac901b93fc3762ecd89b5e919076846285032136f346040d0790d9dc19c591fdbf36fe46c55d8f4017ba23751855d747167c94e91bfb729285938734483c191419f476ec7281be470b4355b529ef5c58864ba12cefe8cf5804053917b39b022ce059911b8fc9d53d6fae3938763c88a51f754f0b5cbdaa49b0acdf27f8021a00c82cf284e7dc4c59ff6d28515c07f49960bfccdc27d43a18cdba59a09ac56822fc8f4dda18317537fba6e7450d3ea145f06a8eb7836ededcbcd9ee68732f42904715d55fecd2ce20b1cf5c3b91b4ac56e52f033a29a4f99eb34e0e50790b015ca34782df12dd703b395200abf0efee5baa4f5e4db6ad757a6077ea95d793f68967b3e0f261558f2510e2ebc8a639f40e442f9dc0f8832cc5cca656fd6c142b68b8d4b0b0e40362663997b71897ce6bd08adc943a3a38479a0072505bd691fca7ff75e1e35acf5457a8e1eb253bf669602016c44fe5ad6e7786b4632094d3fac875e4adae1afabc91382bc5190e94b055e028828eeebe9bf2636734a2db95428437254888372d57e416e1161c374d7f68414095e457d53c985ff7b7ba0a2e2722a9731ed1b2babc51c06e9f2ca7a9fbc61d814a58a36b41e390a10af9d991a8d411d22d667de13b5f08963b4e7171d36c2faf0b4e11c3fcec3a9c0f94e9b8e0b5c0b1dd7ce418f5a88af38b590a847ccac414786a31250d0df2e88c2e4e44e50a5a64dd4b226ebf9174bc830abc7c2a53d7fd70dbec81b262a6ac0cfc644875274c328d48aef31298b5a30e39538999989ff90735572023a8f3a8042e18e50e1ac372e0492dfce13eb5feb369b59a006630c297a208818f141559fc33aea2e616f03ca9c18648994613e445f497183680cc961ba0f41f07c4221207dedea0916f8bde6f48eb7effb3ac87dc4df7b2dd5901cb0f6483aabfdd789d165e585061995cb72d0866161d47dcb5ace1a96687ad6e4ba00db98113c057f98552c8aad5db20ae9dd92279a8b092cada81366137c84960de8924272aec0be7be34508c719c982133f32a5d1cfc5963ed6b9cde5241748c8e04511f31c363e393261f72a7785a12ef919ca65d08b4da2d996cf089d575e81c60ba004b7c6b6324f73afe0c7269ac5c5daebba1633203e79db1119f5b57506cb6eda891c5e7c3f3884454e63cdf21d91912c85c5cfbf353f41e0740b86922c097f7a27642b5a0948bfcab24671910b5f8f897a79ff60021a26ca2b02b458efca244b20e66ed69e2b208c280ef547d47ffa35785415cd92a9fac4a711c4c2018a9803219ff25fce3b3def45adccfe3ae6933d70267be63c25154c2b182af210612b5d58ea3fc3fd540b4a42ffc911bf9bb0876134ceb1d1294e779ffb504a23c8c98bd6b0c17c66cb51678e66eee92e916b77c0b41ce2104f582d0f4b2dd2e068bc967f67bf3111df79ac400fbb4925d40bf0e71f13103103bcf1b39c4faa46a92fcdd8aeda9bfd3062b15c49ba8a24f9942f6605313a7b196680e6a3c2175fb6d20aaa8dc004298d15691c65f0d35cc51cfe3511bb8721dfe0dc11fab51588c0a3e20d54e458721a13904119a1d476de205b633ebff39ab500727fffc658aeca27aabfa4e4b03fd86ebe2cafd5dd3d7ab95564bc30afca3363ba25b1fe85bb29f20c7ff78e961084384bb65348f2c6946a56271cffdd965984dde5a8a9f6686b6ebc3ec17c0ba9670f43bd8a2be59e28d5a4f1ba18742346c58eb24fb93acbbedda103a355ef3fbf13479e98b9473eb270a97701794f4136468f3d2e839fdf76dc0765983dee5805d46e36a51690a366ca2e6afd230a0f2c75e21716f4655a016c1d3cec8ebb756d9e5a4f75972977e8c0ca58e1cb88440096862de0efc872c73c16ce36b3bd1db0223daaa035d556826cb3da7023feeae34afa8d23aeb9b391d7000a7b4ff4c993c70b43979bd40e928b09c28892872218e91c3d986823aa828e350329f4e2430e54f149968a9c1e89a5e1b0f2d5133a1ae988a3d224dca8ac553261c3386fe84e78b22de3a41c175c5677c24fa6c3d56264ac473cf5650c361e81ca52770926462447246749b545f7e4e9262e218e25d0213a5671e30bafc274069b5080b6af53d2fd9da7979daac5f446051960f8992a83ba59535abad1d6b5a2396961477a7f158c2d0a2cbe8672b45c2dd18e6a136d51ff7651a72701ceb423089ac1206e0a76c8e1e038a4010a88dd41fbae6fe4b3d52e55afcfcae23164977b1a6e3253956824ed1cca1e69de3f0cdaeb28d40c65dd3188d873163e0318ec1b99b135de648f9b0a487cd49dbf92be1f2d9b710876858aa79341e28d3e6063a8ad248fc794ca4565f8229d1d3ea1f43a4464600bb98f3ba50badda42f094506f80f6fe904f73f5eea4b571a1b59a9a442d4a5a4fc91a8aacd3092cdcbb4e53dca69818dde8f2a5c5e9116c432c8171c07a4601be36b89436eacfe88f7da2949e0aee6156949e5dea3c5f10866917e8c2cbf04aea031df8af9c2d52b79cc2644d93bf817cd1764a1d9256115f3c2ceccf3946f7a10f5d0b34d7008519f53ee31da9ed37c112b10f899247455fe773a5dd211ef467339929089b2b0462eebb8c70a7eaee2ef80b73b70ee6fe7d62eaeba8e469bf689a24a55370bc998535d5a49518c970d9d0d413e69f79167d082173d94ea3b0524446a6b1feadc6d609dccfaaadd900dea6d0d4f03eccb9cb4df8b955742568905e1af82645b0a5645955702afe0172203de739dbdad0f45cbfb47ed0837fd1d1eb3a01298d5e691388c5a505942213fe16d46e2238a707cf67c500ec6f2dca31b705304e3e0cbbfed16194abb56c89001327f23ab176ee62355f6387632e187c401d42300f18f7bcdb9b89abfb3bd89952b53bec53a844af1e1484b3f45784e3e18dbd87030752476dbdf73f36327d3dc54671727e9c568d0eee65014f281307f25d17816c9df707d3ee0f066dd7be483a3136c0a038c5ca5734c0a5e1907418b2b254d701b9c8d5331524550a3bd", 0x1000}}, 0x1006)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0xfffffffffffffe97, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000127bd7000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="0c005a800000008000000300010009000900ffff00000000040001805413818486"], 0x28}}, 0x0)

11.210076327s ago: executing program 2 (id=790):
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
quotactl_fd$Q_SYNC(r2, 0xffffffff80000102, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x8, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
unshare(0x22020600)
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00')
lseek(r4, 0xffffeffffffffffe, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00')
openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x4)
syz_emit_ethernet(0x0, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)

11.11972862s ago: executing program 6 (id=791):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000000)='g', 0x1, 0x0, &(0x7f0000000100)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0)
socket$inet6(0xa, 0x800, 0xc82)
r5 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001ed4ca976742f5616a45baa74b4e80386f05f108bf933132a8105ff4368d2c16ee1d41b38949eb1e824972951d15c5e1f146ea6c1eca478913a8bc861c3cf7ba5981724a27335c5167c20d12cef8c8763100930d4d4a0701621a219a26417cac7b4619ab84b057b63afaa57bf381d1485ddc806d97a69fa20af3ce90ed9a9d72c5de2061c3d01362a312a6bf6b6f0b8b97116c576f0aa3fa1b645ca7b72d596181703351088eb7e92f9266eeb660f52bcd6b4b590a59aef413afb6df21bc65c03886b3fe2549ce36bc4de849d443f2195ec95aa86e603a4539547"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
r6 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000b40))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)
r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r7)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x4, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0xe, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x4009, 0xfffffffc, 0x4, 0x10001, 0x5, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xf, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x80000002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdf, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000001140)=0x10000000)
close_range(r9, 0xffffffffffffffff, 0x0)

8.505049125s ago: executing program 4 (id=794):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x80003, 0x6)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
sendmsg$xdp(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

8.469604886s ago: executing program 5 (id=795):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
sendmmsg(r0, &(0x7f0000003e00)=[{{&(0x7f00000002c0)=@can, 0x18, &(0x7f0000000340)=[{&(0x7f0000001640)="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", 0x6fa}, {0x0}], 0x2}}], 0x1, 0x8084)

8.048533383s ago: executing program 5 (id=796):
r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x6, 0x1, 0x1, "d569e8000000c10100", 0x38414761})
ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x5, 0x4d08})

7.927221819s ago: executing program 6 (id=797):
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x78, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0xb}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0x20, 0x7, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @connlimit={{0x4, 0x2}, @val={0x4}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xfc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c)
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
listen(r3, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x18)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0xc1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r8 = socket(0x10, 0x3, 0x0)
write(r8, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24)
syz_usb_connect(0x2, 0xee2, &(0x7f00000001c0)=ANY=[@ANYBLOB="12011003626ebe201104970083d5010203010902d00e048009200d09040f01095f2a5e03052406000105240001000d240f010e000000450e5c330506241a0300200c241b92700900070102000f0a2407021f060300050007240a0108060c09050a0200040a0106cd0bcdd35f0ef9f5bdd882900540f7d1c3869ed4d5b0433133ff90b4c92b648849d45fa990b4ee5648a56cf1498eaf5b729f1ac0744909da336eb40c2facbf1fea92e8e20f8f04595d93be4cb40709c49a37eddb7d8aaa7babdbd072404ae62783ce5c8919552a0fb9ba3ef65365a4858c130d9d7e0b97ad4f173d45e5fd8e020a3a30ef786cb4eb737785a8bf52b9db19df78e23271fe8daadb8327da9cf5bff80a1c693c305561adc32a0c92bc27e1860bd342f80c600a20a8bfb9744daf14d827f55c93cab20cb62c2eeed00905000060000105069b03e69879242f987fc20b35f3a537a3c430b45e7cf51d254eb783e90fda4bc941ce9194f5d5f702ffea766fd7ef3c7ed7c3253e5b4b2d2f0504e29c5740e3129abad6e9fae13e8a273329819c69aea33354ff8996744005de96843d0af5ec8738af77d39c26db1f655a0ba526a5f207e049549ffa89497fd72d725f8f8d281a7181f3bab45bb0554a82b809819959d17bf0085dd366f71d2b82550c013c7033865b7359dcb3ee09050e08100008008209050010ff03580720e911812730ec8b4587c65918276ed4c2f5d3dc4572d217126b0f401797e195015e18c19e6f0dade1893245ee1ad491217f765e958d7628570d7ed664178870c2378e21d782ec2096a05354826d5f98404ab52b2c14ac9a63761bf2c662387171240ab2d24d5da27eba866566f663589c18efe144103107d8dc1dace3ecf9e07bd7e9243be0d9096925eed1c8ac8c1bf0447b7e6216eee404420b0cc7e99c787ecaa33305e9a4158d80261608bd6a38ee4b9e50851fe0e5f1773c4af6aa47b8317914814dad48bb4dfc9179fe433a8738f340f9f1cbd5105610f7f2dea4a29c7ba31cf1bbd1bb9e86fa09050400400009080509050a034000f08104cb0c193f8d3e29cc102578cb9dfb7d0cb8c9c9777b3b4fdb87b88edb5627ac174bc3f9832711d9e653f696542d9daa7f724dc6f0b97e61e174bc4313ac25bf920f9ab5d1972b17a9c8cfe387abda989be0d51deae07332e8e130afd6a527ddcfdf1d96595bd1cfb755c0e7611e34559655f3d5ab49e45cd35616383800e9c543cc3240f16b38e12d6dd78804733a89cd8504ad8cfa752ddbd2d700fdf27c0bcc97a2a502506d5d2380f5caa24d4245967c68a770a2ca15610eb27be5868a6c0765417496ae2336d47597e1090500001000080206090500000004ec030e072501010004000725010001040009050e0820000109fee80527329667998a306a673ff1348c63cae1cff0f27b02f2a94676be26fefc345ba643351fca1e085ed92d43d481b4d4a9ebd7613543892e11ff822ae5d36360e13692957863dc5dece04024e6a7f1f51033ecfa11e4978d1dbc17e83104ca5829797b8e9fe2cb454647bcd5a4acb66833674515348c920e91df70c96ac98bcc78142c2b100e2ceeda087a8186d9bb0f2c95200e3eb65f34fb8dc4bdf72f61f2430f6b4f320870f401f7efc3436cb2059f365f498631f18b06d5a522095a4416427d31e4e07b9c365102f6e017f5172a472ca4054bae504ead27bd01b577877ea4c6dbf069ee2608090406030d362d3b0009240600007cfe75d50524000e000d240f010600000003000800c305240100020a24010100060201020c24020602020307790003ff0724070600000a0d24080307000049f05a5cb1910924050405733b2e8a0a240806060007cfeb5009240801110061002209050b01100003020109050c02ff03360b02d00d6800867c4260e600807116fc75ad0f767eeda0bcb41106de5abfdefecf31b96bd67bf362e3989e0dd36ce78d9727db295efd58c0969c62c896ad81cbc62eaaf18dfab4fd5d250b6ea5d64252dd77c0c6e50c92ec8a8d3d407b7c2f9f0779115cc84a049fa8adab3795887334e947fa65e7d2fd7d2cb471042c40cd8073a7dc3a9cd57726e5b672bb802b5391a04101f71ebbbfc67acb64a8057453516be5acdb32cc663ec6efe5b0c71e125b7d5fd8320a82bb5434603e60a8ae02d6bff28c7a256a6994c9b5272b63a63fd8d5680725018300080009050f1000040904fc0725018302050009050210000403010809050c002000690484a331a327da54ebc9a77daa08102223edf0906c72fbf9cd98fd65a63967738c580c5706d7a920af4f630b4818a81403abb8da5dc403ee80b40b4fc03f4013ad0ceeb77d2b44e3c47f4ab44b10e403fae9b5c6444bc6194e3d0ba45f2af6524a586d11aff3bc106fdaa913b7a97303aca80fcd38859b354fd5552bab8ccdbb74e5a6158feb9771577629d3688500e41b8df8c28c3cc6e0e4588839c72d02e600a3be629c090506f640000610020725018303ff7f07250102017f00090500002000037f0d09050210100006930407250180060800072501010806000905011108005c040009050c000004080cf0072501010502002f02644afe3b72fb976c23706070b10840ab12e7433d4299c052c1e3a0420eaee8ec67667cc318494202aad4441c27090509101000020200ac05a649e00b8511576cd035758d676809697ae8df9f091e40a4635127fab5f4eec79eb608c8b95f6ba6be1b6a5411f99f11fc1e70bfc79e408c84cd7dd68f71b34134c20247bd71137a1992b986bc46e28d359f3888c6bb5e08f029fc50429be743f8b796f642b1c13b524fb9bd33b86ec11a228b994c71e30d6b99de8183467884648c7a282293ecfc1cd162fba98628bf5af381e4b5f00eefed1744f50ca1e028fa8a0905250210000008ff07250180da040009050100ff03cb06010904a0010d86aa6f000a24010600040201020c240206ff01050f030004000924030100000604090624040104d70d24070206009bbd1ba59aa0f0052406000005240005000d240f01f700000001f8f8ff4007240a070b0b08090500020000814a8709050b00000480093a0725010004030009050a0040000700ef072501816a030009050d03000289720be9212464a83b094c4d1249e2f686a6939317209dfaf7ea1c31e37d2357e633cd29028f5a383858c3b7bbb697bf6129920d2842dd46e5372123daaad0baaf92c3517ab2f8c7b3b27c12ca21070a8e44a6a3b5fd29e33f868b58a1a5a3bee87414eafb3f0cb75da7ae1f6dee0d1a92da64bc09c3f591e70096a1f740c4f381472258211da63b9a60ff88d18390525231a3f4c0bb1a1af606b27c8f834a8f8a2cd8bd301b65b897ffb3c025ae0a88b0742622c0ab03d7e5a258e15b02f7815daef1902f6cc50b486c1fbe6ecd2817753262d1ea0dbef32fca95aacf75d4138702bd08e2982295d8fc5a9f090503030002879009472051315f1d2123f88d10a2da753bad4c7c52c3a826a0367491bcaf6ba81dd9c3c68a0687dcd8df9e0739fe4f12f508c4bd5a6b7e3b3a0ed2060b48a34475bd0d95021b22dd5e0725010101000009050c0e080008010809050e00ff0305c00809050d000002e1060053309e740579e42efeeebfcf990a7af0fad57eb98bddb64907eb0d0485b4f4862a8aa28df3b4a613c5307fb743e0a364658bf071b883004ef9dbf7d850d366e38532b8b309c61ce78d54f2e33abe30182e9b8f09050b03ff0394026060351de9d144da44276e4ca3a0e24adb52595bed276c43b3289533427b58c50567ad5fbe019a6a419fdb0e8ce05146692cd17e0a51cc40a1790fea5df3c9118e44bd03a90daa9ca3beb2280d301dcc85787914b561476690d8de3e95585d3dd703107509050a11ff030303050725010307800007250102ef02000905090000028000070725018109060009050b10000276020081231993b1774e3f3555d2d4c3add7224d4c856202ed4c97bf6d6a1a0394e588b2556673e5d5a741239b6b4e17bc044802aec354e2031998799ce31493caa700ecc33c91d04b8c93d0f8b1d168f70e3dee621c0224d7cd1cbd89726edc69abfabb9c6372a7b95331eaa53fd7276f487333792994b736bb35d778af381f4ae81fcd0905080140000681c00725018106b000ca21f5831f724af1a47bb004c26f738d7004bc2ec85eea488a595285a150234fa7c99a95f5b51ae12c28bf64d40cbc3af4b47c0b04bdb8ab3dfd337ddbb1f401ed9b746e297867026f3598ba91b153c4a1a1eab07fa5f2e385de32c5670d85dd89cabeafa13e699cc11e65c55afc6591ffcafc19420472c599aeca9f6cbf0fd5e8253cd8f388583d0c1e26eee54fca386db317803d9599fb1fe9aa7da13d8c1690665be08f4567de77302809e5f5b52205fedf3c36f428780f67b2efec40a918c64a56ff14ca70fee40709044c03098df8e5040905080008000a0002090504002000c400f81e0679f9d131ea09ecef9d9d75a85c40b80ac041c9f9146e84aefe6bf02e090500080004000604152234fe179eff746fb5d0a46f66e5375316b3e37309050200ff030d0208812336921e3687b317eb716123e7d0f16d6bd42357c59ad047104a5e1e004f75013aedb2b3a866f148552b0eef9674fff94a078db134a3aadafe20508b4e5b3b57661d0f4d05c269ad73187c81d6233dd9ba80984696ba51c1281446c3a7dbfd1cd7caac8c9628e49cebe665dc721bfd460e0c23c5093b6623df938e629d5d4e1c09050304400003090a072501010601045d108c6c176bd6869061d27cb700e3eddea11a06368106bdffda4d5333a35393104621a58123823c4f35f66e8b2c70782be4990359ae6f91a69c54349600e235e4b7c76815cb8c402b8ff2ff84440717410fe76a8515ca79a569da8afc09050600100007c6810725010108675f09050d0008000781040e0fdc8fc2131b0f6fc168d11f4b0725010080ab00090504100800092d0e4624b760324518cc9c3b3a776513a4079258c84d7faed8c881013d5e9a3837e846ed3bc629e9c3bd86db5d59d4a56c8cb44e9507d1564170675c5d5b8118d337a1ce56ccd15e800365c6d406f940725e382c1626e295b2238891cd41fa7d8f0e1cc98ff398a9a2dd377a8db054b955083353999825c5dd63423d50c408e3a160973749409dacd65f5c3f47e8f93490839c53a53c55fbf8b0745dc691e360acc3f773057046d2a9906ef3a606171bb5253b589359496ac55db3557464973f30be12dae5a1015f09050202200006d606220a6742e7008353fd04447bbf20fa11e61866b9d0facdf5cc6f01a8470ea764647807250181"], &(0x7f0000001240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xd, 0xf1, 0x7, 0x20, 0x4}, 0x38, &(0x7f0000001280)=ANY=[@ANYBLOB="050f2f000300100109000005590900ff1c100a03240100000000040000c00000603f00000f7eff0000c0000014100403f0eb10f0d3f23f5ea92d2721376b"], 0x4, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0xc2a}}, {0xa1, &(0x7f0000001180)=ANY=[@ANYBLOB="a10338bc5259302a80b35919184d10e973caa1469a74f8dfd94d7d8dd258f9805267a942734ab213d8a4266433f97878935eb25de01c3fced42a84f3278c4e928cfe0c32345fb941be396eb3ea5db832d5fefa138fc8b67e9cd0b3b08cd83d5a1f3a0dde72dece8dc2924430ee2feda179c1ca4235cd4ac977c195f35c444a396e01f2bc615bbe484c3768d5faf80c39790e5cf16a57aef96eb570ac4d9928e3"]}]})
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={r11, 0x7d45}, 0x8)

7.696999092s ago: executing program 5 (id=798):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
readv(r4, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/246, 0xf6}], 0x1)
remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x3fe, 0x1c0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)=@flushpolicy={0xb8, 0x28, 0x105, 0x0, 0x0, "", [@policy={0xa8, 0x7, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x6, 0x4e20, 0x0, 0xa, 0x0, 0xa0, 0x2}, {0x43, 0x1, 0x18e8, 0x0, 0x6, 0x2, 0x9, 0x5471}, {0xd48a, 0x1, 0x6, 0x8000}, 0x10001, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}}]}, 0xb8}}, 0x4000800)
r6 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101})
syz_io_uring_setup(0x239, &(0x7f0000001180)={0x0, 0xcd0c, 0x10100, 0xfffffffa, 0x3c1}, &(0x7f0000000180), &(0x7f00000001c0))
mq_timedsend(r6, 0x0, 0x0, 0x0, 0x0)
mq_timedreceive(r6, &(0x7f0000000140)=""/4096, 0x1000, 0x0, 0x0)

7.244904313s ago: executing program 2 (id=799):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x80003, 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
sendmsg$xdp(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

4.540064075s ago: executing program 5 (id=800):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(&(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f0000000800)="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", 0x2000, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01082cbd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="30005080110001000a62e339084eeef16f162471f400000008000700000000000500020000000000080003000cac0f000a0006"], 0x58}, 0x1, 0x0, 0x0, 0x44151}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf090000000000005509010063af00000700000000000000bc9110000000000056080000000000008500000007000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
syz_usb_connect(0x0, 0x12, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
writev(r7, &(0x7f0000002100)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x2f)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x17)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = inotify_init1(0x0)
inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0x64000ba6)
inotify_add_watch(r8, &(0x7f0000000180)='./control\x00', 0xa4000960)

4.336755645s ago: executing program 4 (id=801):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ff, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x8d64, 0x181)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x81)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1c4f, 0x59, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ff, 0x1, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) (async)
syz_open_dev$sndctrl(&(0x7f0000000000), 0x8d64, 0x181) (async)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x81) (async)

4.285225876s ago: executing program 6 (id=802):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100260900000000fcdf00000100000000004fcecbbf7751377e3fdf2cf36e910c19ecdcf1a07783283ca42538ec6e8db87be24031c67ecc16d1465d896d9c48bc02ee71101ee87a0d18bceafa7317a09af6b0361319bf1ba31f59fa674a89d8e971a2a991f3fe806054dfdd4edc70ddc6672f1132111cc8a83d29ad71e26d721151b695b707991bdbb1bdae82b00e71fab623adeb43bfa8f66ab6641317420799b2f57d98a5660ae03f12fa03da6e19245d1a85e2b5d4004a42fba8dd1cbc11c987000e5cbc5752", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

3.332591359s ago: executing program 2 (id=803):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="30003300c0"], 0x54}}, 0x0)

2.674729758s ago: executing program 6 (id=804):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0)
readv(r1, &(0x7f0000000040)=[{0x0}, {&(0x7f00000004c0)=""/181, 0xb5}], 0x2)
syz_open_dev$dri(&(0x7f0000001180), 0x0, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

2.244802151s ago: executing program 4 (id=805):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
openat$sequencer2(0xffffffffffffff9c, 0xfffffffffffffffe, 0x88383, 0x0)
read$midi(r0, 0x0, 0x43)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_freeze_timeout', 0x101, 0x11)
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f0000000300)=@attr_other={0x0, 0x6, 0x8, &(0x7f00000001c0)=0x2})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r6 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r6, 0x8)
r7 = accept4(r6, 0x0, 0x0, 0x0)
write(r7, &(0x7f0000000000)="ea", 0x1)
sendto$inet6(r7, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e)
close(r7)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000003c0)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y<yN\xfbXh[\xe9\xa9\x1702\x7f\x9e\xf0\x99\xad\xdc;p\x98R\a\xb1\x9d^\x0f\x121\xb3\xab7P\xd6\xcb\x06\xfe2~W\xd9\xad\x80\xd9!\x89%\xb80\xa3l;\x1eK\x90\x15\xc6\x11A\xfc\x7f\xc6\xed\xe7\xa3\x9f\xb4\xce\"\xef\xa8\x86F\x15\xb9\rj\f\xafa\xb0}\xde\'E\x84\xb2bO\xd2\xd4\x85F\xde1e\xe0\xf2\xa0/\xd3<\xda\xfe\x04,\xfa\x97\xb6\xf4\xcf\x0el\xf2\xbd\x18\x88\xd7\x02\xce\x99\x1f\xadj\x89\xd9\xb7\xae9\xb0\xb0{n.\xd7\x87C\x0eh|KZG\x108l\n\xcd\xe9\x04\xafM\xbf\x83#>\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x00']})
write$tcp_mem(r5, &(0x7f00000000c0)={0xfffffffffffff1a6, 0x20, 0x0, 0x20, 0xfffffffffffffffd}, 0x48)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c64656661756c745f70656a6d6950f8696f6e732c616c6c6f775f6f746865722c00"], 0x0, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0xe, @dev={0xfe, 0x80, '\x00', 0xb}, 0x8}], 0x1c)

1.79393749s ago: executing program 2 (id=806):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000006c0), 0x802, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000000)='g', 0x1, 0x0, &(0x7f0000000100)={0x11, 0xd, r4, 0x1, 0x0, 0x6, @remote}, 0x14)
openat$uinput(0xffffff9c, &(0x7f0000000000), 0x802, 0x0)
socket$inet6(0xa, 0x800, 0xc82)
r5 = socket(0x21, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24)
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000001001000001ed4ca976742f5616a45baa74b4e80386f05f108bf933132a8105ff4368d2c16ee1d41b38949eb1e824972951d15c5e1f146ea6c1eca478913a8bc861c3cf7ba5981724a27335c5167c20d12cef8c8763100930d4d4a0701621a219a26417cac7b4619ab84b057b63afaa57bf381d1485ddc806d97a69fa20af3ce90ed9a9d72c5de2061c3d01362a312a6bf6b6f0b8b97116c576f0aa3fa1b645ca7b72d596181703351088eb7e92f9266eeb660f52bcd6b4b590a59aef413afb6df21bc65c03886b3fe2549ce36bc4de849d443f2195ec95aa86e603a4539547"], 0x10, 0xe000}, 0x5}], 0x1, 0x0)
r6 = openat$uinput(0xffffff9c, &(0x7f0000000080), 0x802, 0x0)
openat$uinput(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$UI_BEGIN_FF_ERASE(r6, 0xc00c55ca, 0x0)
ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000b40))
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0)
r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usb_disconnect(r7)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x4, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x6, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x4, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0xe, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x4009, 0xfffffffc, 0x4, 0x10001, 0x5, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xf, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x80000002, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x3, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7ffd, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x4, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdf, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = fcntl$dupfd(r10, 0x0, r10)
ioctl$VHOST_SET_FEATURES(r11, 0x4008af00, &(0x7f0000001140)=0x10000000)
close_range(r9, 0xffffffffffffffff, 0x0)

1.506206571s ago: executing program 8 (id=765):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x94, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}]}, 0x94}, 0x1, 0xff84}, 0x0)

1.049759997s ago: executing program 8 (id=807):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
brk(0x5fde6000)
brk(0x55555ede6001)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000b00)={0x4000000000000000, 0xf000, 0x9, 0xb, 0x6})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x4e0, 0xffffffff, 0x1c4, 0x1c4, 0xf8, 0xffffffff, 0xffffffff, 0x418, 0x418, 0x418, 0xffffffff, 0x4, &(0x7f0000000580), {[{{@ipv6={@private1, @mcast2, [0xff, 0xff000000, 0xffffff00, 0xff000000], [0xffffffff, 0x7f000080, 0x0, 0xff000000], 'geneve1\x00', 'wg1\x00', {}, {}, 0x0, 0xc, 0x1}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@mh={{0x24}, {'-h'}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4}, {0x3, 0x2, 0x4}, 0x800, 0x7}}}, {{@ipv6={@private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xff, 0xff, 0xffffff00, 0xffffffff], [0xff000000, 0xff, 0xff000000], 'veth1\x00', 'veth1\x00', {}, {}, 0x8e, 0x8, 0x2, 0x43}, 0x0, 0xa4, 0xcc}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5714, 0x2, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff, 0xffffff00, 0x1ffffff01], [0xffffff00, 0xffffffff, 0xff, 0xff000000], 'team_slave_1\x00', 'ip6tnl0\x00', {}, {0xff}, 0x3a, 0x4, 0x3, 0x1}, 0x0, 0x20c, 0x254, 0x0, {}, [@common=@ah={{0x30}, {[0x4d2, 0x4d4], 0x796, 0x2, 0x3}}, @common=@rt={{0x138}, {0x68a8, [0x3, 0x80000000], 0x4, 0x10, 0x3, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0xd}, @private1, @dev={0xfe, 0x80, '\x00', 0x2e}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @private0, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x2b}], 0xa}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010102, 'batadv0\x00', {0x8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x53c)
r3 = openat$cuse(0xffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = getuid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1, {0x0, <r5=>0x0}}, './file0\x00'})
statx(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x0, 0x200, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x4008, &(0x7f00000003c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xfffffffffffffffd}}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x1}}], [{@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@uid_eq={'uid', 0x3d, r6}}, {@subj_user={'subj_user', 0x3d, '!'}}, {@pcr={'pcr', 0x3d, 0x2b}}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x36, 0x33, 0x62, 0x64, 0x36, 0x32, 0x63], 0x2d, [0x30, 0x65, 0x39, 0x63], 0x2d, [0x62, 0x64, 0x37, 0x65], 0x2d, [0x31, 0x31, 0xf, 0x34], 0x2d, [0x36, 0xc2233aebee7cef5e, 0x38, 0x63, 0x33, 0x66, 0x0, 0x30]}}}, {@func={'func', 0x3d, 'FILE_CHECK'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, '\xaa\xaa\xaa\xaa\xaa'}}]}})
syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xfffe, 0x0, 0x3}, {"c81cd53b4c7edb5f8110d4ea89e080d60f3bfaa62bd4a09af61f872fdfb4c6d435070ef4091adaf2363764e5ca4bf51071960f496864625ac52514b8fdbcf19ed3858d737c0b5c9ea8ba3b3f2ddb77d499a7e30b21cf2e37"}}}}}}, 0x0)

888.872971ms ago: executing program 5 (id=808):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10}, 0x94)
r1 = io_uring_setup(0xf0b, &(0x7f000000c480)={0x0, 0x4e3f, 0x1000, 0x1ffff, 0x373})
r2 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x608b, 0x0, 0x0, 0x28b, 0x0, r1})
io_uring_register$IORING_REGISTER_FILES(r2, 0x1e, &(0x7f0000000000)=[r1], 0x1)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r5 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=r8, 0x4, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x4000080)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, 0x12, r9, 0x0)
pipe2(&(0x7f0000000280), 0x180)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1})
io_uring_enter(r5, 0x2d3e, 0x2936, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000008007ee3647332f672e62f1a77ba3ed00", @ANYRES16=r4, @ANYBLOB="05072bbd7000ffdbdf25010000003c000280380001800800010004000000160001000600000008000100080000001c00018008000100030000000800010001000000080001000100000004000180"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
pipe(&(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r12=>0x0)
io_submit(r12, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x4, r11}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0, 0x0, 0xfffffffffffffffc}])
sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000003680)='2', 0x1}], 0x1}}], 0x2, 0x8010)

796.898577ms ago: executing program 4 (id=809):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'})
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x89)
ioctl$TIOCEXCL(r3, 0x540c)
io_setup(0xdb, &(0x7f0000000000)=<r4=>0x0)
io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x9, r0, &(0x7f00000000c0)="e141ab7acca94d898d642b55e7e48735057e9ee02b6ae49e0e41a3a6c1202dcf3462235001e849db4eb4f8b4d4f7cb6813247c1fb0f9e117623d3d8c125c6bc1cf60adec530cbbf2c91c1d8aaa6c55c57b17320229c80d71a4aec84b7faf7bb4b0db269bd42560b7b3ea779e0c0173", 0x6f, 0x81, 0x0, 0x1, r1}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x1, r0, &(0x7f0000000140)="9de150ef0213875de0173476ab055a02b320a063610b12949cffa6ca6b59d1a002cd1f7e205d84695e31f02f679c", 0x2e, 0x9, 0x0, 0x2}])
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004410)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)

696.703054ms ago: executing program 8 (id=810):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
sendmsg$xdp(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

355.192479ms ago: executing program 6 (id=811):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x80003, 0x6)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
sendmsg$xdp(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

207.361609ms ago: executing program 4 (id=812):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac00400020211000200030001002c0003a1eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

92.964193ms ago: executing program 5 (id=813):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x80003, 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r3, 0x1)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
sendmsg$xdp(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="60481a316f1aa678318d8d77bf44cced0b70bfcbc4905b8152f20c18be2eeef743f54cb7a16bbb6e3bf2fbbe9ff7481627c2561e1a6c8b02f0eb88c7f32f68b9e2423a0fe87501577efd40b70965d66b09f2cdeb159d2d3d6c095271ce37fbf7fb3712f3e95b9aacc6c1af787c5bdcfcc9b313bd46d1fc3d148d86d5ffb261ace6c45c2fbdced8e4b45e4358b95d4212e53ef7", 0x93}], 0x1, 0x0, 0x0, 0x20000080}, 0x440000d0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

0s ago: executing program 4 (id=814):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="13"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="300000000706010100000000000000000200000405000100070000000900020073797a3766987b53fd4dd47915fea4313de6e3c4bc260b20aeffdc57c5a862574df86f5a35e1734f39ebfc13c0e8498e729ce51cc93f46ba8f1934"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
fanotify_init(0x10, 0x80000)
r3 = syz_open_dev$hiddev(&(0x7f0000000140), 0x0, 0x20000)
ioctl$HIDIOCGUSAGE(r3, 0xc018480b, &(0x7f0000000000)={0x1, 0xffffffff, 0x2d9, 0x0, 0x4fd, 0x5})
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="20120700000000f4000000"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, &(0x7f0000000540)={0x18, &(0x7f0000000400)={0x0, 0xf, 0xd7, {0xd7, 0x30, "1358cbf839daa027427bc75ac3883ddf31366558a60e1302daf96decfdb28ccfa7577842027f5bfde40850ce33a358aa57d0d448db10b1bfb66ebe4df454e8aa65ac832f5705f78b32bb56c34011ff3e4f763f6b19dd87207a63f634af212a41e8e91a1ecf07dda030c82819a8c8a7974aaac6d9d4223101f3e75514b2e8bdad2a89307cdfb3fd4e11f4cc47eeee14290bb8c2252eb1e3d803e95f517444c7521bd9df1942cbfb0c7a106a50763f4bdb61944200b63ae04fea9afacb126fa995951cc3b7457b2f915412a6ba0ed0a0d374c5de8358"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000000200)={0x0, 0xf, 0x30, {0x5, 0xf, 0x30, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x5, 0x0, 0xe6, [0x41c0, 0x3fcf, 0x0, 0x3f00, 0x7]}, @wireless={0xb, 0x10, 0x1, 0x2, 0xc0, 0x3, 0x1, 0x0, 0x2}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x1, 0x3, 0xfc, "07efe9b8", "0ac56057"}}, &(0x7f0000000500)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x0, 0x98, 0x1, 0x1, 0x8, 0x9}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000580)={0x40, 0x17, 0xa0, "ecb7a22a0c870b61444605eaef8d9bfe6118ddf468a689d6f3a8321ba3b0b8a8154a61fae86bd918444e746d5166e9e77ace758dad2be108ab58bd9f3b95eff72bac6d8cb1c44f525af7ed03d18650174d6389d1a4b27d3fc2612071c6bbd8b9b694fc8886a75df1dbb7b251b6422f7f9dad5105ca6e2d71a80a78b6dc7b5200ec4ae88618a7e1ccfd787f5c3b9cfc8b892e7ac358c569c1f01ef1acc57424e8"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x7f}, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x3}}, &(0x7f0000000700)={0x20, 0x0, 0x8, {0xe0, 0x20, [0xf]}}, &(0x7f0000000740)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x9, 0x1, 0x67}, &(0x7f00000007c0)={0x40, 0xb, 0x2, "02cd"}, &(0x7f0000000800)={0x40, 0xf, 0x2, 0xbd0c}, &(0x7f0000000840)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000880)={0x40, 0x17, 0x6, @random="a380d2a80d65"}, &(0x7f00000008c0)={0x40, 0x19, 0x2, "b0ba"}, &(0x7f0000000900)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000940)={0x40, 0x1c, 0x1, 0xc}, &(0x7f0000000980)={0x40, 0x1e, 0x1, 0x7}, &(0x7f00000009c0)={0x40, 0x21, 0x1}})
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9}, 0xe)
shutdown(r6, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000040)={r8}, &(0x7f0000001080)=0x8)
readv(r3, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/53, 0x35}], 0x1)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0x8}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0)

kernel console output (not intermixed with test programs):

03 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.310898][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.368077][   T30] audit: type=1326 audit(1752422029.856:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.437908][   T24] usb 5-1: USB disconnect, device number 37
[  304.491958][   T30] audit: type=1326 audit(1752422029.856:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.556331][   T30] audit: type=1326 audit(1752422029.856:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.578146][    C1] vkms_vblank_simulate: vblank timer overrun
[  304.725767][   T30] audit: type=1326 audit(1752422029.856:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.812610][   T30] audit: type=1326 audit(1752422029.856:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.841504][   T30] audit: type=1326 audit(1752422029.856:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7663 comm="syz.5.497" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70de539 code=0x7ffc0000
[  304.904611][ T5947] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  304.959045][ T5947] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  305.529339][ T5845] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  305.604027][ T7673] syz.4.500 (7673): drop_caches: 2
[  305.623292][ T7684] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  305.709008][ T5845] usb 6-1: Using ep0 maxpacket: 32
[  305.716099][ T5845] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  305.752746][ T5845] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  305.777609][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  305.812212][ T5845] usb 6-1: Product: syz
[  305.832426][ T5845] usb 6-1: Manufacturer: syz
[  305.877678][ T5845] usb 6-1: SerialNumber: syz
[  305.928254][ T5845] usb 6-1: config 0 descriptor??
[  305.948804][ T7679] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  305.970334][ T5845] hub 6-1:0.0: bad descriptor, ignoring hub
[  305.976316][ T5845] hub 6-1:0.0: probe with driver hub failed with error -5
[  306.062761][   T24] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  306.123931][ T7680] netlink: 312 bytes leftover after parsing attributes in process `syz.2.496'.
[  306.140885][ T7680] netlink: 312 bytes leftover after parsing attributes in process `syz.2.496'.
[  306.261144][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.298524][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  306.406309][   T24] usb 7-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  306.417047][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  306.443631][   T24] usb 7-1: config 0 descriptor??
[  306.452581][   T24] qmi_wwan 7-1:0.0: probe with driver qmi_wwan failed with error -22
[  306.772387][   T24] usb 7-1: USB disconnect, device number 4
[  307.143556][ T7706] ipvlan2: entered promiscuous mode
[  307.170021][ T7706] ipvlan2: entered allmulticast mode
[  307.184419][ T7706] hsr0: entered allmulticast mode
[  307.281086][ T7706] hsr_slave_0: entered allmulticast mode
[  307.359137][ T7706] hsr_slave_1: entered allmulticast mode
[  308.718866][ T5947] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  308.780568][ T5947] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  308.840931][ T5947] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  308.885110][ T5947] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  308.959230][ T5947] usb 3-1: USB disconnect, device number 23
[  309.319918][ T5945] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  309.530659][ T5945] usb 8-1: Using ep0 maxpacket: 32
[  309.537847][ T5945] usb 8-1: config index 0 descriptor too short (expected 156, got 27)
[  309.552357][ T5945] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  309.583548][ T5945] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  309.632098][ T5945] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  309.685530][ T5945] usb 8-1: config 0 interface 0 has no altsetting 0
[  309.715774][   T44] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  309.717616][ T5945] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  309.782375][ T5945] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  309.827516][ T5845] usb 6-1: USB disconnect, device number 9
[  309.867362][ T5945] usb 8-1: Product: syz
[  309.934196][ T5945] usb 8-1: Manufacturer: syz
[  309.991064][   T44] usb 5-1: Using ep0 maxpacket: 8
[  310.039499][   T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  310.049506][   T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  310.062781][   T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  310.086698][   T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  310.091571][ T5945] usb 8-1: SerialNumber: syz
[  310.106187][   T44] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  310.135676][   T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.179045][   T44] usb 5-1: Product: syz
[  310.183237][   T44] usb 5-1: Manufacturer: syz
[  310.210057][ T5945] usb 8-1: config 0 descriptor??
[  310.226011][   T44] usb 5-1: SerialNumber: syz
[  310.243823][   T44] usb 5-1: config 0 descriptor??
[  310.270702][ T5945] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  310.290195][ T7734] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  310.305508][   T44] radioshark2 5-1:0.0: Invalid radioSHARK2 device
[  310.322822][   T44] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22
[  310.356794][ T5945] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  310.392547][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  310.392557][   T30] audit: type=1326 audit(1752422036.296:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7726 comm="syz.2.515" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x0
[  310.537084][   T44] usb 5-1: USB disconnect, device number 38
[  310.956071][ T7752] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD
[  311.025172][  T982] usb 8-1: USB disconnect, device number 8
[  311.044092][  T982] ldusb 8-1:0.0: LD USB Device #0 now disconnected
[  311.166609][ T7757] netlink: 20 bytes leftover after parsing attributes in process `syz.7.524'.
[  311.176542][ T7757] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  311.253206][ T7757] bridge0: port 2(bridge_slave_1) entered disabled state
[  311.260773][ T7757] bridge0: port 1(bridge_slave_0) entered disabled state
[  311.485868][ T7761] loop2: detected capacity change from 0 to 7
[  311.547191][ T7761] Dev loop2: unable to read RDB block 7
[  311.586603][ T7761]  loop2: unable to read partition table
[  311.596671][ T7761] loop2: partition table beyond EOD, truncated
[  311.605273][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.526'.
[  311.629639][ T7761] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  311.645972][ T7767] netlink: 100 bytes leftover after parsing attributes in process `syz.6.526'.
[  311.659046][ T7767] netlink: 100 bytes leftover after parsing attributes in process `syz.6.526'.
[  312.269078][ T5945] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  312.359563][ T7778] FAULT_INJECTION: forcing a failure.
[  312.359563][ T7778] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.399601][ T7778] CPU: 1 UID: 0 PID: 7778 Comm: syz.6.531 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  312.399630][ T7778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  312.399642][ T7778] Call Trace:
[  312.399650][ T7778]  <TASK>
[  312.399659][ T7778]  dump_stack_lvl+0x189/0x250
[  312.399689][ T7778]  ? __pfx____ratelimit+0x10/0x10
[  312.399723][ T7778]  ? __pfx_dump_stack_lvl+0x10/0x10
[  312.399748][ T7778]  ? __pfx__printk+0x10/0x10
[  312.399777][ T7778]  ? __might_fault+0xb0/0x130
[  312.399814][ T7778]  should_fail_ex+0x414/0x560
[  312.399848][ T7778]  _copy_from_user+0x2d/0xb0
[  312.399874][ T7778]  get_compat_msghdr+0xad/0x4a0
[  312.399908][ T7778]  ? __pfx_get_compat_msghdr+0x10/0x10
[  312.399939][ T7778]  ? rcu_is_watching+0x15/0xb0
[  312.399962][ T7778]  ? ___sys_recvmsg+0x1c4/0x510
[  312.399997][ T7778]  ___sys_recvmsg+0x17f/0x510
[  312.400038][ T7778]  ? __pfx____sys_recvmsg+0x10/0x10
[  312.400092][ T7778]  ? __fget_files+0x3a0/0x420
[  312.400132][ T7778]  do_recvmmsg+0x36a/0x770
[  312.400169][ T7778]  ? __pfx_do_recvmmsg+0x10/0x10
[  312.400210][ T7778]  ? __pfx_vfs_write+0x10/0x10
[  312.400251][ T7778]  __sys_recvmmsg+0x19d/0x280
[  312.400282][ T7778]  ? __pfx___sys_recvmmsg+0x10/0x10
[  312.400309][ T7778]  ? ksys_write+0x22a/0x250
[  312.400342][ T7778]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  312.400377][ T7778]  __do_fast_syscall_32+0xb6/0x2b0
[  312.400398][ T7778]  ? lockdep_hardirqs_on+0x9c/0x150
[  312.400435][ T7778]  do_fast_syscall_32+0x34/0x80
[  312.400456][ T7778]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  312.400481][ T7778] RIP: 0023:0xf7f67539
[  312.400498][ T7778] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  312.400517][ T7778] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  312.400538][ T7778] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080003700
[  312.400552][ T7778] RDX: 0000000000000600 RSI: 0000000000000000 RDI: 0000000000000000
[  312.400565][ T7778] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  312.400576][ T7778] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  312.400588][ T7778] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  312.400617][ T7778]  </TASK>
[  312.643179][  T979] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  312.786711][ T5945] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  312.821315][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  312.838988][  T979] usb 8-1: Using ep0 maxpacket: 32
[  312.854496][  T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.896131][  T979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.922435][ T5945] usb 3-1: config 0 has no interface number 0
[  312.949457][ T5945] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  312.980072][  T979] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  313.070572][ T5945] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[  313.086556][  T979] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  313.147452][ T5945] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  313.165983][  T979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.201356][ T5945] usb 3-1: config 0 interface 52 has no altsetting 0
[  313.210919][  T979] usb 8-1: config 0 descriptor??
[  313.225660][ T5945] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00
[  313.239167][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35
[  313.252717][ T5945] usb 3-1: SerialNumber: syz
[  313.275577][ T5945] usb 3-1: config 0 descriptor??
[  313.527740][ T5945] synaptics_usb 3-1:0.52: synusb_open - usb_submit_urb failed, error: -90
[  313.581653][ T5945] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -5
[  313.691181][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.530'.
[  313.709022][ T7776] netlink: 20 bytes leftover after parsing attributes in process `syz.7.530'.
[  313.774374][ T7774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  313.817408][ T7774] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  313.951802][ T5947] usb 3-1: USB disconnect, device number 24
[  315.438509][  T979] usbhid 8-1:0.0: can't add hid device: -71
[  315.448588][  T979] usbhid 8-1:0.0: probe with driver usbhid failed with error -71
[  315.511572][  T979] usb 8-1: USB disconnect, device number 9
[  315.707154][ T7817] x_tables: duplicate underflow at hook 3
[  316.186726][ T7830] netlink: 'syz.4.545': attribute type 16 has an invalid length.
[  316.261349][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.7.546'.
[  316.372984][ T7832] vlan2: entered promiscuous mode
[  316.393051][ T7832] team0: entered promiscuous mode
[  316.411431][ T7832] team_slave_0: entered promiscuous mode
[  316.453656][ T7832] team_slave_1: entered promiscuous mode
[  316.632104][ T7841] netlink: 28 bytes leftover after parsing attributes in process `syz.6.549'.
[  317.019494][ T7843] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  317.035787][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.042304][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.155009][ T7853] netlink: 72 bytes leftover after parsing attributes in process `syz.6.553'.
[  317.292314][ T7857] TCP: tcp_parse_options: Illegal window scaling value 53 > 14 received
[  317.534691][ T7860] ip6gre1: entered promiscuous mode
[  317.540198][ T7860] ip6gre1: entered allmulticast mode
[  318.499180][ T5947] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  318.709106][ T5947] usb 3-1: Using ep0 maxpacket: 32
[  318.747330][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.818989][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.842418][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  318.929075][ T5947] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  319.004632][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.070219][ T5947] usb 3-1: config 0 descriptor??
[  319.419010][ T5945] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  319.499109][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  319.579596][ T5945] usb 5-1: device descriptor read/64, error -71
[  319.622949][ T5947] usbhid 3-1:0.0: can't add hid device: -71
[  319.629284][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  319.651982][ T5947] usb 3-1: USB disconnect, device number 25
[  319.669274][    T9] usb 7-1: Using ep0 maxpacket: 32
[  319.710744][    T9] usb 7-1: config index 0 descriptor too short (expected 29220, got 36)
[  319.738975][    T9] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  319.779166][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81
[  319.813835][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  319.847098][ T5945] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  319.865249][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  319.910354][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  319.945318][    T9] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  320.023343][ T5945] usb 5-1: device descriptor read/64, error -71
[  320.050640][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.123226][    T9] usb 7-1: config 0 descriptor??
[  320.149468][ T5945] usb usb5-port1: attempt power cycle
[  320.339113][   T44] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  320.375783][    T9] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  320.466106][    T9] usb 7-1: USB disconnect, device number 5
[  320.509595][   T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.519912][   T44] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  320.538987][ T5945] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  320.547548][    T9] usblp0: removed
[  320.587377][ T5945] usb 5-1: device descriptor read/8, error -71
[  320.610016][   T44] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  320.619301][   T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.643435][   T44] usb 6-1: Product: syz
[  320.668138][   T44] usb 6-1: Manufacturer: syz
[  320.720857][   T44] usb 6-1: SerialNumber: syz
[  320.909655][    T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  320.917204][ T5945] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  320.939493][ T5945] usb 5-1: device descriptor read/8, error -71
[  320.964625][   T44] usb 6-1: config 0 descriptor??
[  321.046713][ T7889] FAULT_INJECTION: forcing a failure.
[  321.046713][ T7889] name failslab, interval 1, probability 0, space 0, times 0
[  321.069232][    T9] usb 7-1: device descriptor read/64, error -71
[  321.075898][ T5945] usb usb5-port1: unable to enumerate USB device
[  321.133307][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.7.562 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  321.133326][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  321.133334][ T7889] Call Trace:
[  321.133339][ T7889]  <TASK>
[  321.133345][ T7889]  dump_stack_lvl+0x189/0x250
[  321.133364][ T7889]  ? __pfx____ratelimit+0x10/0x10
[  321.133385][ T7889]  ? __pfx_dump_stack_lvl+0x10/0x10
[  321.133401][ T7889]  ? __pfx__printk+0x10/0x10
[  321.133436][ T7889]  should_fail_ex+0x414/0x560
[  321.133459][ T7889]  should_failslab+0xa8/0x100
[  321.133477][ T7889]  __kmalloc_cache_noprof+0x70/0x3d0
[  321.133493][ T7889]  ? sctp_add_bind_addr+0x8c/0x370
[  321.133514][ T7889]  sctp_add_bind_addr+0x8c/0x370
[  321.133531][ T7889]  sctp_copy_local_addr_list+0x30b/0x4e0
[  321.133547][ T7889]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  321.133561][ T7889]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  321.133578][ T7889]  ? sctp_v4_is_any+0x35/0x60
[  321.133592][ T7889]  ? sctp_copy_one_addr+0x93/0x360
[  321.133607][ T7889]  sctp_bind_addr_copy+0xb3/0x3c0
[  321.133622][ T7889]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  321.133645][ T7889]  sctp_connect_new_asoc+0x2e0/0x690
[  321.133664][ T7889]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  321.133680][ T7889]  ? __local_bh_enable_ip+0x12d/0x1c0
[  321.133700][ T7889]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  321.133713][ T7889]  ? security_sctp_bind_connect+0x7e/0x2e0
[  321.133733][ T7889]  sctp_sendmsg+0x155c/0x2810
[  321.133757][ T7889]  ? __pfx_sctp_sendmsg+0x10/0x10
[  321.133776][ T7889]  ? aa_sk_perm+0x81e/0x950
[  321.133797][ T7889]  ? __pfx_aa_sk_perm+0x10/0x10
[  321.133817][ T7889]  ? sock_rps_record_flow+0x19/0x410
[  321.133832][ T7889]  ? inet_sendmsg+0x2f4/0x370
[  321.133847][ T7889]  __sock_sendmsg+0x19c/0x270
[  321.133862][ T7889]  ____sys_sendmsg+0x505/0x830
[  321.133882][ T7889]  ? __pfx_____sys_sendmsg+0x10/0x10
[  321.133910][ T7889]  ___sys_sendmsg+0x21f/0x2a0
[  321.133928][ T7889]  ? __pfx____sys_sendmsg+0x10/0x10
[  321.133968][ T7889]  ? __fget_files+0x2a/0x420
[  321.133986][ T7889]  ? __fget_files+0x3a0/0x420
[  321.134010][ T7889]  __sys_sendmsg+0x164/0x220
[  321.134046][ T7889]  ? __pfx___sys_sendmsg+0x10/0x10
[  321.134073][ T7889]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  321.134088][ T7889]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.134111][ T7889]  __do_fast_syscall_32+0xb6/0x2b0
[  321.134126][ T7889]  ? lockdep_hardirqs_on+0x9c/0x150
[  321.134152][ T7889]  do_fast_syscall_32+0x34/0x80
[  321.134166][ T7889]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  321.134201][ T7889] RIP: 0023:0xf7f13539
[  321.134214][ T7889] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  321.134228][ T7889] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  321.134244][ T7889] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0
[  321.134254][ T7889] RDX: 000000000404c0e0 RSI: 0000000000000000 RDI: 0000000000000000
[  321.134264][ T7889] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  321.134272][ T7889] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  321.134281][ T7889] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  321.134302][ T7889]  </TASK>
[  321.961595][    T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  322.109727][    T9] usb 7-1: device descriptor read/64, error -71
[  322.259181][    T9] usb usb7-port1: attempt power cycle
[  322.429005][   T44] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  322.499291][ T5947] usb 8-1: new high-speed USB device number 10 using dummy_hcd
[  322.610737][   T44] usb 3-1: Using ep0 maxpacket: 8
[  322.619614][   T44] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  322.634423][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.673861][ T5947] usb 8-1: Using ep0 maxpacket: 16
[  322.686528][   T44] usb 3-1: config 0 descriptor??
[  322.725579][ T5947] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  322.750260][ T5947] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  322.761171][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.771454][ T5947] usb 8-1: Product: syz
[  322.780351][ T5947] usb 8-1: Manufacturer: syz
[  322.789717][ T5947] usb 8-1: SerialNumber: syz
[  322.807230][ T5947] usb 8-1: config 0 descriptor??
[  322.920119][   T44] usb 3-1: USB disconnect, device number 26
[  323.034110][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.564'.
[  323.069578][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  323.079826][ T7897] netlink: 32 bytes leftover after parsing attributes in process `syz.7.564'.
[  323.096565][ T5947] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  323.267296][    T9] usb 7-1: device descriptor read/8, error -71
[  323.487740][ T6504] usb 8-1: Failed to submit usb control message: -71
[  323.489462][  T979] usb 8-1: USB disconnect, device number 10
[  323.549161][ T6504] usb 8-1: unable to send the bmi data to the device: -71
[  323.596856][ T6504] usb 8-1: unable to get target info from device
[  323.640505][ T6504] usb 8-1: could not get target info (-71)
[  323.648702][ T7909] FAULT_INJECTION: forcing a failure.
[  323.648702][ T7909] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  323.696351][ T6504] usb 8-1: could not probe fw (-71)
[  323.712632][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.6.567 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  323.712649][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  323.712658][ T7909] Call Trace:
[  323.712663][ T7909]  <TASK>
[  323.712669][ T7909]  dump_stack_lvl+0x189/0x250
[  323.712689][ T7909]  ? __pfx____ratelimit+0x10/0x10
[  323.712710][ T7909]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.712726][ T7909]  ? __pfx__printk+0x10/0x10
[  323.712744][ T7909]  ? __might_fault+0xb0/0x130
[  323.712766][ T7909]  should_fail_ex+0x414/0x560
[  323.712788][ T7909]  _copy_from_user+0x2d/0xb0
[  323.712805][ T7909]  v4l2_compat_get_array_args+0x24b/0xaf0
[  323.712832][ T7909]  ? __pfx_v4l2_compat_get_array_args+0x10/0x10
[  323.712866][ T7909]  ? __kasan_kmalloc_large+0x85/0xa0
[  323.712884][ T7909]  ? rcu_is_watching+0x15/0xb0
[  323.712899][ T7909]  ? video_usercopy+0xaa9/0x14f0
[  323.712920][ T7909]  ? video_usercopy+0xaa9/0x14f0
[  323.712935][ T7909]  ? rcu_is_watching+0x15/0xb0
[  323.712949][ T7909]  ? video_usercopy+0xaa9/0x14f0
[  323.712964][ T7909]  ? trace_kmalloc+0x1f/0xd0
[  323.712978][ T7909]  ? __kvmalloc_node_noprof+0x331/0x5f0
[  323.712998][ T7909]  video_usercopy+0xb5c/0x14f0
[  323.713021][ T7909]  ? __pfx___video_do_ioctl+0x10/0x10
[  323.713037][ T7909]  ? __pfx_video_usercopy+0x10/0x10
[  323.713065][ T7909]  ? __fget_files+0x2a/0x420
[  323.713084][ T7909]  v4l2_ioctl+0x18a/0x1e0
[  323.713101][ T7909]  v4l2_compat_ioctl32+0x1d4/0x260
[  323.713124][ T7909]  __ia32_compat_sys_ioctl+0x540/0x840
[  323.713141][ T7909]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  323.713155][ T7909]  ? __fget_files+0x3a0/0x420
[  323.713176][ T7909]  ? fput+0xa0/0xd0
[  323.713196][ T7909]  ? ksys_write+0x22a/0x250
[  323.713214][ T7909]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  323.713228][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.713250][ T7909]  __do_fast_syscall_32+0xb6/0x2b0
[  323.713263][ T7909]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.713286][ T7909]  do_fast_syscall_32+0x34/0x80
[  323.713299][ T7909]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  323.713314][ T7909] RIP: 0023:0xf7f67539
[  323.713325][ T7909] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  323.713337][ T7909] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  323.713351][ T7909] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185647
[  323.713360][ T7909] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  323.713368][ T7909] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.713376][ T7909] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  323.713383][ T7909] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  323.713400][ T7909]  </TASK>
[  324.290006][ T5945] usb 6-1: USB disconnect, device number 10
[  324.511785][   T30] audit: type=1326 audit(1752422050.416:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.700801][   T30] audit: type=1326 audit(1752422050.466:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.770441][   T30] audit: type=1326 audit(1752422050.466:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.809138][   T30] audit: type=1326 audit(1752422050.466:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.837350][   T30] audit: type=1326 audit(1752422050.466:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=270 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.933727][   T30] audit: type=1326 audit(1752422050.466:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  324.982062][   T30] audit: type=1326 audit(1752422050.476:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7914 comm="syz.6.570" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000
[  325.390726][ T5947] usb 8-1: new high-speed USB device number 11 using dummy_hcd
[  325.585609][ T5947] usb 8-1: Using ep0 maxpacket: 8
[  325.615842][ T5947] usb 8-1: too many configurations: 30, using maximum allowed: 8
[  325.645531][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.677241][ T7933] bridge1: entered allmulticast mode
[  325.686770][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  325.757575][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.808581][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  325.860849][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.910656][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  325.950196][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  325.980865][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  326.050558][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.093895][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  326.150373][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.175255][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  326.199972][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.237184][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  326.321318][ T5947] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  326.359226][    T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  326.425198][ T5947] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  326.499217][    T9] usb 6-1: device descriptor read/64, error -71
[  326.599439][ T5947] usb 8-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  326.656830][ T5947] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.687181][ T5947] usb 8-1: Product: syz
[  326.691476][ T5947] usb 8-1: Manufacturer: syz
[  326.717516][ T5947] usb 8-1: SerialNumber: syz
[  326.730510][ T5947] usb 8-1: config 0 descriptor??
[  326.781927][    T9] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  326.829234][  T982] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[  326.887738][ T7948] bridge1: entered promiscuous mode
[  326.939144][    T9] usb 6-1: device descriptor read/64, error -71
[  327.014288][  T982] usb 5-1: config 4 has an invalid interface number: 44 but max is 0
[  327.022637][  T982] usb 5-1: config 4 has no interface number 0
[  327.063888][    T9] usb usb6-port1: attempt power cycle
[  327.078448][  T982] usb 5-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  327.112401][  T982] usb 5-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  327.139430][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.201653][  T982] usb 5-1: Product: syz
[  327.212725][  T982] usb 5-1: Manufacturer: syz
[  327.232814][  T982] usb 5-1: SerialNumber: syz
[  327.262155][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.280457][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.479059][    T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  327.516365][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.529490][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.539020][    T9] usb 6-1: device descriptor read/8, error -71
[  327.702216][  T982] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  327.725935][  T982] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  327.789110][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  327.863931][  T982] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  327.894341][  T982] usb 5-1: media controller created
[  327.902795][    T9] usb 6-1: device descriptor read/8, error -71
[  327.915120][  T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  328.001094][  T982] DVB: Unable to find symbol dib7000p_attach()
[  328.039463][    T9] usb usb6-port1: unable to enumerate USB device
[  328.054606][  T982] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  328.340472][  T982] rc_core: IR keymap rc-dib0700-rc5 not found
[  328.357123][  T982] Registered IR keymap rc-empty
[  328.392814][  T982] dvb-usb: could not initialize remote control.
[  328.420543][ T7965] syz_tun: entered allmulticast mode
[  328.431646][  T982] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  328.491768][ T7965] dvmrp8: entered allmulticast mode
[  328.538197][ T7964] syz_tun: left allmulticast mode
[  328.656607][ T5947] usb 5-1: USB disconnect, device number 43
[  328.713729][ T5947] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  329.825291][  T982] usb 8-1: USB disconnect, device number 11
[  330.234823][ T7992] netlink: 12 bytes leftover after parsing attributes in process `syz.7.593'.
[  330.325724][ T7992] netlink: 'syz.7.593': attribute type 1 has an invalid length.
[  330.429366][   T44] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  330.629666][   T44] usb 7-1: Using ep0 maxpacket: 16
[  330.662312][   T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  330.761556][   T44] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  330.786539][ T7998] netlink: 'syz.5.595': attribute type 9 has an invalid length.
[  330.820481][   T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.826047][ T7998] netlink: 'syz.5.595': attribute type 6 has an invalid length.
[  330.901168][   T44] usb 7-1: Product: syz
[  330.905400][   T44] usb 7-1: Manufacturer: syz
[  330.991540][   T44] usb 7-1: SerialNumber: syz
[  331.060271][   T44] usb 7-1: config 0 descriptor??
[  331.167860][   T44] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  331.276097][ T3530] usb 7-1: Failed to submit usb control message: -71
[  331.300087][   T44] usb 7-1: USB disconnect, device number 10
[  331.363882][ T3530] usb 7-1: unable to send the bmi data to the device: -71
[  331.386941][ T8005] binfmt_misc: register: failed to install interpreter file ./file0
[  331.425812][ T3530] usb 7-1: unable to get target info from device
[  331.492915][ T3530] usb 7-1: could not get target info (-71)
[  331.528085][ T3530] usb 7-1: could not probe fw (-71)
[  333.310047][   T44] usb 8-1: new full-speed USB device number 12 using dummy_hcd
[  333.468972][   T44] usb 8-1: device descriptor read/64, error -71
[  333.639333][  T982] usb 5-1: new full-speed USB device number 44 using dummy_hcd
[  333.729319][   T44] usb 8-1: new full-speed USB device number 13 using dummy_hcd
[  333.943689][   T44] usb 8-1: device descriptor read/64, error -71
[  334.035257][  T982] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  334.070906][   T44] usb usb8-port1: attempt power cycle
[  334.076614][  T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.105126][  T982] usb 5-1: Product: syz
[  334.136606][  T982] usb 5-1: Manufacturer: syz
[  334.143344][  T982] usb 5-1: SerialNumber: syz
[  334.276089][ T8054] FAULT_INJECTION: forcing a failure.
[  334.276089][ T8054] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  334.280067][  T982] usb 5-1: config 0 descriptor??
[  334.289610][ T8054] CPU: 1 UID: 0 PID: 8054 Comm: syz.6.610 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  334.289640][ T8054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  334.289654][ T8054] Call Trace:
[  334.289662][ T8054]  <TASK>
[  334.289671][ T8054]  dump_stack_lvl+0x189/0x250
[  334.289703][ T8054]  ? __pfx____ratelimit+0x10/0x10
[  334.289736][ T8054]  ? __pfx_dump_stack_lvl+0x10/0x10
[  334.289762][ T8054]  ? __pfx__printk+0x10/0x10
[  334.289793][ T8054]  ? fs_reclaim_acquire+0x7d/0x100
[  334.289831][ T8054]  should_fail_ex+0x414/0x560
[  334.289866][ T8054]  prepare_alloc_pages+0x213/0x610
[  334.289913][ T8054]  __alloc_frozen_pages_noprof+0x123/0x370
[  334.289948][ T8054]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  334.289996][ T8054]  alloc_pages_mpol+0x232/0x4a0
[  334.290028][ T8054]  alloc_pages_noprof+0xa9/0x190
[  334.290055][ T8054]  get_zeroed_page_noprof+0x1a/0x90
[  334.290086][ T8054]  mon_bin_ioctl+0x5df/0xd70
[  334.290126][ T8054]  ? __pfx_mon_bin_ioctl+0x10/0x10
[  334.290171][ T8054]  mon_bin_compat_ioctl+0x1c1/0x3e0
[  334.290199][ T8054]  ? __fget_files+0x2a/0x420
[  334.290229][ T8054]  ? __pfx_mon_bin_compat_ioctl+0x10/0x10
[  334.290260][ T8054]  ? __fget_files+0x3a0/0x420
[  334.290286][ T8054]  ? __fget_files+0x2a/0x420
[  334.290315][ T8054]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  334.290343][ T8054]  __ia32_compat_sys_ioctl+0x540/0x840
[  334.290369][ T8054]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  334.290392][ T8054]  ? __fget_files+0x3a0/0x420
[  334.290426][ T8054]  ? fput+0xa0/0xd0
[  334.290457][ T8054]  ? ksys_write+0x22a/0x250
[  334.290487][ T8054]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  334.290509][ T8054]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.290544][ T8054]  __do_fast_syscall_32+0xb6/0x2b0
[  334.290566][ T8054]  ? lockdep_hardirqs_on+0x9c/0x150
[  334.290601][ T8054]  do_fast_syscall_32+0x34/0x80
[  334.290622][ T8054]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  334.290648][ T8054] RIP: 0023:0xf7f67539
[  334.290664][ T8054] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  334.290682][ T8054] RSP: 002b:00000000f506555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  334.290704][ T8054] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000009204
[  334.290719][ T8054] RDX: 00000000000ccd1a RSI: 0000000000000000 RDI: 0000000000000000
[  334.290731][ T8054] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  334.290743][ T8054] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  334.290755][ T8054] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  334.290784][ T8054]  </TASK>
[  334.511121][    C0] vkms_vblank_simulate: vblank timer overrun
[  334.660265][   T44] usb 8-1: new full-speed USB device number 14 using dummy_hcd
[  334.761176][   T44] usb 8-1: device descriptor read/8, error -71
[  335.064507][   T44] usb 8-1: new full-speed USB device number 15 using dummy_hcd
[  335.099674][   T44] usb 8-1: device descriptor read/8, error -71
[  335.109878][ T5918] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  335.166936][  T982] airspy 5-1:0.0: Board ID: 05
[  335.171858][  T982] airspy 5-1:0.0: Firmware version: 
[  335.239346][   T44] usb usb8-port1: unable to enumerate USB device
[  335.289343][ T5918] usb 3-1: Using ep0 maxpacket: 32
[  335.305750][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  335.354039][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  335.397671][ T5918] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  335.466281][ T5918] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  335.507282][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  335.547165][ T5918] usb 3-1: config 0 descriptor??
[  335.899807][ T8072] syzkaller0: entered promiscuous mode
[  335.905478][ T8072] syzkaller0: entered allmulticast mode
[  335.979028][ T5938] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  336.156465][ T5938] usb 7-1: Using ep0 maxpacket: 32
[  336.160959][ T5938] usb 7-1: config 4 has an invalid interface number: 128 but max is 0
[  336.160982][ T5938] usb 7-1: config 4 has no interface number 0
[  336.161044][ T5938] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.161069][ T5938] usb 7-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.161105][ T5938] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  336.161126][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.177876][ T5938] hub 7-1:4.128: USB hub found
[  336.190398][ T5918] usbhid 3-1:0.0: can't add hid device: -71
[  336.190496][ T5918] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  336.194967][  T982] airspy 5-1:0.0: Registered as swradio24
[  336.194982][  T982] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  336.209078][ T5918] usb 3-1: USB disconnect, device number 27
[  336.386558][ T5938] hub 7-1:4.128: config failed, can't read hub descriptor (err -90)
[  336.779251][ T5938] usb 7-1: USB disconnect, device number 11
[  338.004070][ T5918] usb 5-1: USB disconnect, device number 44
[  338.216902][ T8094] netlink: 'syz.4.624': attribute type 1 has an invalid length.
[  338.305295][ T8091] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  338.356570][ T8094] bond2: entered promiscuous mode
[  338.362474][ T8094] 8021q: adding VLAN 0 to HW filter on device bond2
[  338.388194][ T8096] bond2: (slave dummy0): making interface the new active one
[  338.400851][ T8096] dummy0: entered promiscuous mode
[  338.424837][ T8096] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  338.910276][   T44] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  339.368965][   T44] usb 5-1: Using ep0 maxpacket: 8
[  339.381822][   T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  339.401914][   T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  339.425727][   T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  339.455632][   T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  339.506406][   T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  339.582031][   T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  339.845023][   T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.417872][   T44] usb 5-1: GET_CAPABILITIES returned 0
[  340.474492][   T44] usbtmc 5-1:16.0: can't read capabilities
[  340.622518][   T44] usb 5-1: USB disconnect, device number 45
[  340.902181][   T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd
[  341.089238][   T24] usb 8-1: Using ep0 maxpacket: 32
[  341.244872][   T24] usb 8-1: config 0 has an invalid interface number: 20 but max is 0
[  341.258261][   T24] usb 8-1: config 0 has no interface number 0
[  341.543390][   T24] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  341.568187][   T24] usb 8-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  341.596290][   T24] usb 8-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  341.646837][   T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.868641][   T24] usb 8-1: Product: syz
[  341.875211][   T24] usb 8-1: Manufacturer: syz
[  341.880153][   T24] usb 8-1: SerialNumber: syz
[  341.896039][   T24] usb 8-1: config 0 descriptor??
[  341.931175][ T8119] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'.
[  341.961964][ T8111] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  342.018835][ T8111] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  342.088266][   T24] ums-sddr09 8-1:0.20: USB Mass Storage device detected
[  342.435417][ T8128] netlink: 'syz.7.627': attribute type 1 has an invalid length.
[  342.459222][   T24] ums-sddr09 8-1:0.20: probe with driver ums-sddr09 failed with error -22
[  342.619072][  T982] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  342.806727][  T982] usb 5-1: Using ep0 maxpacket: 32
[  342.834995][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  342.883825][  T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  342.905821][  T982] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  343.019068][ T5945] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  343.027992][  T982] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  343.054426][  T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.096618][  T982] usb 5-1: config 0 descriptor??
[  343.271622][ T5945] usb 3-1: Using ep0 maxpacket: 8
[  343.278443][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  343.288519][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  343.300376][ T5945] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  343.316793][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.338822][ T5945] usb 3-1: config 0 descriptor??
[  343.391113][ T5945] hso 3-1:0.0: Can't find BULK IN endpoint
[  343.495113][ T5945] usb 8-1: USB disconnect, device number 16
[  343.658298][  T982] usbhid 5-1:0.0: can't add hid device: -71
[  343.703145][  T982] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  343.812984][  T982] usb 5-1: USB disconnect, device number 46
[  344.169117][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  344.254106][ T8148] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  344.338976][    T9] usb 7-1: Using ep0 maxpacket: 8
[  344.388740][    T9] usb 7-1: config 0 has an invalid interface number: 106 but max is 0
[  344.504548][    T9] usb 7-1: config 0 has no interface number 0
[  344.524830][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=3d58, bcdDevice=88.ce
[  344.627611][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.657544][    T9] usb 7-1: config 0 descriptor??
[  344.965062][   T24] usb 7-1: USB disconnect, device number 12
[  345.001674][   T44] usb 3-1: USB disconnect, device number 28
[  345.080761][ T8157] Invalid logical block size (-1048577)
[  346.733283][ T8176] tap0: tun_chr_ioctl cmd 1074025677
[  346.752260][ T8176] tap0: linktype set to 805
[  346.810020][ T8178] FAULT_INJECTION: forcing a failure.
[  346.810020][ T8178] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  346.980276][ T8178] CPU: 1 UID: 0 PID: 8178 Comm: syz.6.646 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  346.980302][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  346.980314][ T8178] Call Trace:
[  346.980322][ T8178]  <TASK>
[  346.980331][ T8178]  dump_stack_lvl+0x189/0x250
[  346.980359][ T8178]  ? __pfx____ratelimit+0x10/0x10
[  346.980390][ T8178]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.980413][ T8178]  ? __pfx__printk+0x10/0x10
[  346.980441][ T8178]  ? __pfx_migrate_enable+0x10/0x10
[  346.980473][ T8178]  should_fail_ex+0x414/0x560
[  346.980506][ T8178]  _copy_to_user+0x31/0xb0
[  346.980539][ T8178]  generic_map_lookup_batch+0x8e8/0xcc0
[  346.980580][ T8178]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  346.980606][ T8178]  ? __fget_files+0x2a/0x420
[  346.980636][ T8178]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  346.980662][ T8178]  bpf_map_do_batch+0x25b/0x5f0
[  346.980683][ T8178]  ? security_bpf+0x7e/0x300
[  346.980711][ T8178]  __sys_bpf+0x70c/0x860
[  346.980730][ T8178]  ? __pfx___sys_bpf+0x10/0x10
[  346.980772][ T8178]  ? ksys_write+0x22a/0x250
[  346.980805][ T8178]  __ia32_sys_bpf+0x7c/0x90
[  346.980833][ T8178]  __do_fast_syscall_32+0xb6/0x2b0
[  346.980853][ T8178]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.980886][ T8178]  do_fast_syscall_32+0x34/0x80
[  346.980914][ T8178]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  346.980935][ T8178] RIP: 0023:0xf7f67539
[  346.980949][ T8178] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  346.980964][ T8178] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  346.980982][ T8178] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0
[  346.980993][ T8178] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  346.981003][ T8178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  346.981012][ T8178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  346.981022][ T8178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  346.981045][ T8178]  </TASK>
[  347.933843][ T8192] syzkaller1: entered promiscuous mode
[  347.959218][ T5947] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  347.969729][ T8192] syzkaller1: entered allmulticast mode
[  348.075459][ T8192] netlink: 4 bytes leftover after parsing attributes in process `syz.6.651'.
[  348.169220][ T5947] usb 3-1: Using ep0 maxpacket: 32
[  348.188174][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  348.214189][ T5947] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  348.278390][ T5947] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  348.278483][ T5938] usb 8-1: new high-speed USB device number 17 using dummy_hcd
[  348.396916][ T5947] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  348.417353][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.442376][ T5947] usb 3-1: config 0 descriptor??
[  348.590095][ T5938] usb 8-1: config 0 has an invalid interface number: 98 but max is 0
[  348.666423][ T5938] usb 8-1: config 0 has no interface number 0
[  348.685852][ T5938] usb 8-1: config 0 interface 98 has no altsetting 0
[  348.731239][ T5938] usb 8-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  348.764425][ T8199] fuse: Unknown parameter 'uswr_id'
[  348.782592][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.821627][ T5938] usb 8-1: Product: syz
[  348.825833][ T5938] usb 8-1: Manufacturer: syz
[  348.878439][ T5938] usb 8-1: SerialNumber: syz
[  348.909932][ T5938] usb 8-1: config 0 descriptor??
[  349.028487][ T5947] usbhid 3-1:0.0: can't add hid device: -71
[  349.045750][ T5947] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  349.114080][ T5947] usb 3-1: USB disconnect, device number 29
[  349.199713][ T5938] usb 8-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  349.593096][ T8212] FAULT_INJECTION: forcing a failure.
[  349.593096][ T8212] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  349.611120][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  349.639258][ T8212] CPU: 1 UID: 0 PID: 8212 Comm: syz.4.659 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  349.639286][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  349.639299][ T8212] Call Trace:
[  349.639307][ T8212]  <TASK>
[  349.639315][ T8212]  dump_stack_lvl+0x189/0x250
[  349.639344][ T8212]  ? __pfx____ratelimit+0x10/0x10
[  349.639376][ T8212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  349.639399][ T8212]  ? __pfx__printk+0x10/0x10
[  349.639426][ T8212]  ? __might_fault+0xb0/0x130
[  349.639459][ T8212]  should_fail_ex+0x414/0x560
[  349.639493][ T8212]  _copy_from_user+0x2d/0xb0
[  349.639516][ T8212]  get_compat_msghdr+0xad/0x4a0
[  349.639549][ T8212]  ? __pfx_get_compat_msghdr+0x10/0x10
[  349.639577][ T8212]  ? rcu_is_watching+0x15/0xb0
[  349.639598][ T8212]  ? ___sys_recvmsg+0x1c4/0x510
[  349.639631][ T8212]  ___sys_recvmsg+0x17f/0x510
[  349.639669][ T8212]  ? __pfx____sys_recvmsg+0x10/0x10
[  349.639719][ T8212]  ? __fget_files+0x3a0/0x420
[  349.639756][ T8212]  do_recvmmsg+0x36a/0x770
[  349.639789][ T8212]  ? __pfx_do_recvmmsg+0x10/0x10
[  349.639829][ T8212]  ? __pfx_vfs_write+0x10/0x10
[  349.639866][ T8212]  __sys_recvmmsg+0x19d/0x280
[  349.639896][ T8212]  ? __pfx___sys_recvmmsg+0x10/0x10
[  349.639921][ T8212]  ? ksys_write+0x22a/0x250
[  349.639952][ T8212]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  349.639983][ T8212]  __do_fast_syscall_32+0xb6/0x2b0
[  349.640004][ T8212]  ? lockdep_hardirqs_on+0x9c/0x150
[  349.640039][ T8212]  do_fast_syscall_32+0x34/0x80
[  349.640059][ T8212]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  349.640083][ T8212] RIP: 0023:0xf70be539
[  349.640099][ T8212] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  349.640116][ T8212] RSP: 002b:00000000f508d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  349.640136][ T8212] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  349.640150][ T8212] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000
[  349.640162][ T8212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  349.640173][ T8212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  349.640184][ T8212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  349.640208][ T8212]  </TASK>
[  349.877700][ T5938] usb 8-1: reset high-speed USB device number 17 using dummy_hcd
[  349.976552][ T8214] FAULT_INJECTION: forcing a failure.
[  349.976552][ T8214] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  349.993370][    T9] usb 6-1: Using ep0 maxpacket: 8
[  350.014443][    T9] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  350.025973][    T9] usb 6-1: config 179 has no interface number 0
[  350.169045][ T8214] CPU: 1 UID: 0 PID: 8214 Comm: syz.2.660 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  350.169069][ T8214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  350.169078][ T8214] Call Trace:
[  350.169083][ T8214]  <TASK>
[  350.169088][ T8214]  dump_stack_lvl+0x189/0x250
[  350.169109][ T8214]  ? __pfx____ratelimit+0x10/0x10
[  350.169140][ T8214]  ? __pfx_dump_stack_lvl+0x10/0x10
[  350.169163][ T8214]  ? __pfx__printk+0x10/0x10
[  350.169189][ T8214]  ? fs_reclaim_acquire+0x7d/0x100
[  350.169220][ T8214]  should_fail_ex+0x414/0x560
[  350.169243][ T8214]  prepare_alloc_pages+0x213/0x610
[  350.169266][ T8214]  __alloc_frozen_pages_noprof+0x123/0x370
[  350.169299][ T8214]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  350.169337][ T8214]  ? policy_nodemask+0x27c/0x720
[  350.169360][ T8214]  ? __lock_acquire+0xab9/0xd20
[  350.169376][ T8214]  alloc_pages_mpol+0x232/0x4a0
[  350.169395][ T8214]  vma_alloc_folio_noprof+0xe4/0x200
[  350.169411][ T8214]  ? __anon_vma_prepare+0x3d2/0x4a0
[  350.169437][ T8214]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  350.169462][ T8214]  ? up_write+0x1c4/0x420
[  350.169483][ T8214]  ? do_raw_spin_unlock+0x122/0x240
[  350.169518][ T8214]  folio_prealloc+0x30/0x180
[  350.169537][ T8214]  __handle_mm_fault+0x2c88/0x5620
[  350.169564][ T8214]  ? __pfx___handle_mm_fault+0x10/0x10
[  350.169605][ T8214]  ? __pfx___might_resched+0x10/0x10
[  350.169632][ T8214]  handle_mm_fault+0x40a/0x8e0
[  350.169663][ T8214]  __get_user_pages+0x1af4/0x30b0
[  350.169713][ T8214]  ? __pfx___get_user_pages+0x10/0x10
[  350.169735][ T8214]  get_user_pages_remote+0x2f9/0xaa0
[  350.169763][ T8214]  ? __pfx_get_user_pages_remote+0x10/0x10
[  350.169782][ T8214]  ? down_read+0x1ad/0x2e0
[  350.169803][ T8214]  ? mmap_read_lock_maybe_expand+0xc6/0x3c0
[  350.169833][ T8214]  get_arg_page+0x104/0x330
[  350.169845][ T8214]  ? __might_fault+0xb0/0x130
[  350.169861][ T8214]  ? __pfx_get_arg_page+0x10/0x10
[  350.169881][ T8214]  copy_string_kernel+0x191/0x2a0
[  350.169904][ T8214]  do_execveat_common+0x3c5/0x6a0
[  350.169938][ T8214]  __ia32_compat_sys_execve+0x99/0xb0
[  350.169960][ T8214]  __do_fast_syscall_32+0xb6/0x2b0
[  350.169981][ T8214]  ? lockdep_hardirqs_on+0x9c/0x150
[  350.170004][ T8214]  do_fast_syscall_32+0x34/0x80
[  350.170018][ T8214]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  350.170033][ T8214] RIP: 0023:0xf7ff2539
[  350.170047][ T8214] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  350.170064][ T8214] RSP: 002b:00000000f511655c EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[  350.170084][ T8214] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000
[  350.170096][ T8214] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000
[  350.170106][ T8214] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  350.170115][ T8214] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  350.170126][ T8214] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  350.170147][ T8214]  </TASK>
[  350.272950][ T8194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  350.499660][ T8194] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  350.506356][    T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  350.579036][    T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  350.609971][ T8194] tipc: Failed to remove unknown binding: 66,3,3/0:47572481/47572482
[  350.708359][    T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  350.785669][    T9] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  350.866926][    T9] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  350.956750][    T9] usb 6-1: config 179 interface 65 has no altsetting 0
[  351.004282][    T9] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  351.072999][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.099095][   T44] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  351.137482][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input22
[  351.199731][ T5203] input input22: unable to receive magic message: -110
[  351.309943][ T5203] input input22: unable to receive magic message: -32
[  351.329419][   T44] usb 3-1: Using ep0 maxpacket: 32
[  351.336036][ T5203] input input22: unable to receive magic message: -32
[  351.360608][   T44] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.377168][   T44] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.393590][   T44] usb 3-1: config 0 interface 0 has no altsetting 0
[  351.404470][   T44] usb 3-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  351.482170][   T44] usb 3-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  351.497036][ T5203] input input22: unable to receive magic message: -32
[  351.560389][   T44] usb 3-1: Product: syz
[  351.705136][   T44] usb 3-1: config 0 descriptor??
[  351.710856][ T5938] usb 8-1: failed to restore interface 98 altsetting 4 (error=-71)
[  351.722544][ T5938] usb 8-1: [ueagle-atm] pre-firmware device, uploading firmware
[  351.737678][ T5938] usb 8-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  351.746251][  T982] usb 8-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  351.757022][  T982] usb 8-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  351.768735][ T5203] input input22: unable to receive magic message: -32
[  351.809445][ T5938] usb 8-1: USB disconnect, device number 17
[  351.880109][ T5203] input input22: unable to receive magic message: -32
[  351.945815][ T5203] input input22: unable to receive magic message: -32
[  352.181679][ T8232] netlink: 'syz.4.664': attribute type 10 has an invalid length.
[  352.295478][   T44] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0
[  352.306771][   T44] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0
[  352.322395][   T44] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0
[  352.334298][   T44] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0
[  352.351751][   T44] waterforce 0003:1044:7A4D.0007: unknown main item tag 0x0
[  352.376573][   T44] waterforce 0003:1044:7A4D.0007: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.2-1/input0
[  352.452739][   T44] waterforce 0003:1044:7A4D.0007: fw version request failed with -38
[  352.619070][ T5845] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  352.748558][ T5938] usb 6-1: USB disconnect, device number 15
[  352.754595][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  352.859012][ T5845] usb 5-1: device descriptor read/64, error -71
[  353.338555][ T5845] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  353.499006][ T5845] usb 5-1: device descriptor read/64, error -71
[  353.619241][ T5845] usb usb5-port1: attempt power cycle
[  353.649093][   T24] usb 3-1: reset high-speed USB device number 30 using dummy_hcd
[  354.019077][ T5845] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  354.049744][ T5845] usb 5-1: device descriptor read/8, error -71
[  354.348269][ T5845] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  354.396737][ T5845] usb 5-1: device descriptor read/8, error -71
[  354.591562][ T5947] usb 3-1: USB disconnect, device number 30
[  354.629899][ T5845] usb usb5-port1: unable to enumerate USB device
[  354.728779][ T8248] netlink: 'syz.7.669': attribute type 10 has an invalid length.
[  354.947094][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[  354.964258][ T8252] netlink: 104 bytes leftover after parsing attributes in process `syz.2.670'.
[  354.994801][ T8252] netlink: 104 bytes leftover after parsing attributes in process `syz.2.670'.
[  355.298997][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  355.498984][    T9] usb 7-1: Using ep0 maxpacket: 32
[  355.523308][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  355.523329][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  355.523344][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  355.523371][    T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  355.523386][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.525979][    T9] usb 7-1: config 0 descriptor??
[  355.873070][   T30] audit: type=1326 audit(1752422081.766:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.873129][   T30] audit: type=1326 audit(1752422081.766:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=310 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.873180][   T30] audit: type=1326 audit(1752422081.766:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.874353][   T30] audit: type=1326 audit(1752422081.776:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.874407][   T30] audit: type=1326 audit(1752422081.776:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.874455][   T30] audit: type=1326 audit(1752422081.776:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.874504][   T30] audit: type=1326 audit(1752422081.776:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=274 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.874977][   T30] audit: type=1326 audit(1752422081.776:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.875027][   T30] audit: type=1326 audit(1752422081.776:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  355.875984][   T30] audit: type=1326 audit(1752422081.776:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8258 comm="syz.7.674" exe="/root/syz-executor" sig=0 arch=40000003 syscall=430 compat=1 ip=0xf7f13539 code=0x7ffc0000
[  356.475910][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  356.475988][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  356.477676][    T9] usb 7-1: USB disconnect, device number 13
[  356.558409][ T8265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.675'.
[  356.684210][ T8275] loop6: detected capacity change from 0 to 524287999
[  356.890072][ T6209] Buffer I/O error on dev loop6, logical block 65535999, async page read
[  357.088616][ T6198] Buffer I/O error on dev loop6, logical block 65535999, async page read
[  357.811435][ T8291] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.040646][ T8296] tipc: Resetting bearer <eth:syzkaller0>
[  358.187569][ T8283] tipc: Disabling bearer <eth:syzkaller0>
[  358.680720][ T8301] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  359.024587][ T5938] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  359.199018][ T5845] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  359.250611][ T5938] usb 3-1: Using ep0 maxpacket: 32
[  359.275531][ T5938] usb 3-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52
[  359.295307][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.367185][ T5938] usb 3-1: Product: syz
[  359.387439][ T5938] usb 3-1: Manufacturer: syz
[  359.402370][ T5938] usb 3-1: SerialNumber: syz
[  359.478666][ T5845] usb 7-1: Using ep0 maxpacket: 16
[  359.505883][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.540201][ T5845] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.567752][ T5938] usb 3-1: config 0 descriptor??
[  359.599156][ T5845] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  359.622572][ T5845] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  359.632202][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.661639][ T5845] usb 7-1: config 0 descriptor??
[  359.675825][ T5938] usb_ehset_test 3-1:0.0: probe with driver usb_ehset_test failed with error -32
[  359.766869][ T8312] netlink: 68 bytes leftover after parsing attributes in process `syz.4.681'.
[  359.777777][ T8312] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'.
[  359.881813][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.684'.
[  360.074646][ T5938] usb 3-1: USB disconnect, device number 31
[  360.101655][ T5845] microsoft 0003:045E:07DA.0008: ignoring exceeding usage max
[  360.143667][ T5845] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  360.161654][ T5845] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  360.187320][ T5845] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  360.283807][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.292779][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.300890][ T5845] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  360.308146][ T5845] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0
[  360.411572][ T8306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.462965][ T8306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.644926][ T5845] input: HID 045e:07da as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:045E:07DA.0008/input/input23
[  360.709005][ T5938] usb 8-1: new full-speed USB device number 18 using dummy_hcd
[  360.748229][ T5845] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  360.868646][ T5845] usb 7-1: USB disconnect, device number 14
[  360.881250][ T5938] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  360.925682][ T5938] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  360.955282][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.005808][ T5938] usb 8-1: Product: syz
[  361.030380][ T5938] usb 8-1: Manufacturer: syz
[  361.035039][ T5938] usb 8-1: SerialNumber: syz
[  361.082575][ T8320] fido_id[8320]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  361.137775][ T5938] usb 8-1: config 0 descriptor??
[  361.199353][ T5938] em28xx 8-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  361.258956][ T5938] em28xx 8-1:0.0: Device initialization failed.
[  361.294440][ T5938] em28xx 8-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  361.902803][ T5845] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  362.089133][ T5938] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  362.138968][ T5845] usb 6-1: Using ep0 maxpacket: 32
[  362.218823][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.230338][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.240466][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  362.257522][ T5845] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  362.268733][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.330809][ T5845] usb 6-1: config 0 descriptor??
[  362.768026][ T5938] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  362.778069][ T5845] usbhid 6-1:0.0: can't add hid device: -71
[  362.781275][ T5938] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  362.812937][ T5845] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  362.819119][ T5938] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  362.878165][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.909551][ T5845] usb 6-1: USB disconnect, device number 16
[  362.955436][ T8322] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  362.996812][ T5938] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  363.348641][ T5938] usb 3-1: USB disconnect, device number 32
[  363.685676][ T8340] x_tables: duplicate underflow at hook 3
[  364.681353][   T24] usb 8-1: USB disconnect, device number 18
[  364.689130][ T5938] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  365.342939][ T8362] program syz.7.697 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  365.699061][    T9] usb 8-1: new high-speed USB device number 19 using dummy_hcd
[  365.941439][    T9] usb 8-1: Using ep0 maxpacket: 8
[  365.982524][    T9] usb 8-1: config 0 has an invalid interface number: 12 but max is 0
[  365.995635][    T9] usb 8-1: config 0 has no interface number 0
[  366.015923][    T9] usb 8-1: config 0 interface 12 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  366.075571][    T9] usb 8-1: config 0 interface 12 altsetting 8 has an invalid descriptor for endpoint zero, skipping
[  366.149425][    T9] usb 8-1: config 0 interface 12 has no altsetting 0
[  366.159284][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=602e, bcdDevice=12.75
[  366.170472][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.184099][    T9] usb 8-1: Product: syz
[  366.196076][    T9] usb 8-1: Manufacturer: syz
[  366.201059][    T9] usb 8-1: SerialNumber: syz
[  366.217923][    T9] usb 8-1: config 0 descriptor??
[  366.258188][ T8368] bridge2: entered allmulticast mode
[  366.266187][    T9] gspca_main: sonixb-2.14.0 probing 0c45:602e
[  366.445193][    T9] sonixb 8-1:0.12: Error reading register 00: -71
[  366.458302][    T9] usb 8-1: USB disconnect, device number 19
[  367.419385][  T979] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  367.590301][  T979] usb 6-1: Using ep0 maxpacket: 32
[  367.611110][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  367.649322][  T979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  367.699288][  T979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  367.740906][  T979] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  367.764807][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz.7.704'.
[  367.799924][  T979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.828455][  T979] usb 6-1: config 0 descriptor??
[  368.029038][    T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  368.048050][ T8383] Invalid logical block size (33554432)
[  368.220526][    T9] usb 5-1: Using ep0 maxpacket: 32
[  368.282952][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  368.381368][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  368.417393][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  368.451402][  T979] usbhid 6-1:0.0: can't add hid device: -71
[  368.460563][  T979] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  368.488654][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  368.556829][  T979] usb 6-1: USB disconnect, device number 17
[  368.569381][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  368.619378][ T8391] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  368.639683][    T9] usb 5-1: config 0 descriptor??
[  368.664366][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.6.707'.
[  368.715350][ T8391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.707'.
[  368.757148][ T5938] usb 8-1: new high-speed USB device number 20 using dummy_hcd
[  368.942709][ T5938] usb 8-1: Using ep0 maxpacket: 8
[  368.971115][ T5938] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  368.999064][   T10] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  369.020533][ T8394] netlink: 'syz.2.708': attribute type 1 has an invalid length.
[  369.044418][ T5938] usb 8-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08
[  369.053871][ T5938] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.098969][ T5938] usb 8-1: Product: syz
[  369.115002][ T5938] usb 8-1: Manufacturer: syz
[  369.145309][ T5938] usb 8-1: SerialNumber: syz
[  369.162087][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  369.204408][   T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  369.215108][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  369.243644][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  369.253523][ T5938] usb 8-1: config 0 descriptor??
[  369.273091][    T9] usb 5-1: USB disconnect, device number 51
[  369.307904][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  369.339307][   T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  369.349480][ T5938] comedi comedi5: Wrong number of endpoints
[  369.355477][ T5938] dt9812 8-1:0.0: driver 'dt9812' failed to auto-configure device.
[  369.382224][   T10] usb 7-1: Product: syz
[  369.386702][   T10] usb 7-1: Manufacturer: syz
[  369.397642][   T10] usb 7-1: SerialNumber: syz
[  369.412802][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'.
[  369.422811][   T10] usb 7-1: config 0 descriptor??
[  369.460774][ T8399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.709'.
[  369.473041][  T979] usb 8-1: USB disconnect, device number 20
[  369.502174][   T10] usb 7-1: selecting invalid altsetting 0
[  370.364312][ T8407] block device autoloading is deprecated and will be removed.
[  370.551709][ T8409] FAULT_INJECTION: forcing a failure.
[  370.551709][ T8409] name failslab, interval 1, probability 0, space 0, times 0
[  370.619875][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: syz.5.712 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  370.619898][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  370.619911][ T8409] Call Trace:
[  370.619917][ T8409]  <TASK>
[  370.619925][ T8409]  dump_stack_lvl+0x189/0x250
[  370.619948][ T8409]  ? __pfx____ratelimit+0x10/0x10
[  370.619972][ T8409]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.619991][ T8409]  ? __pfx__printk+0x10/0x10
[  370.620022][ T8409]  should_fail_ex+0x414/0x560
[  370.620049][ T8409]  should_failslab+0xa8/0x100
[  370.620070][ T8409]  __kmalloc_noprof+0xcb/0x4f0
[  370.620088][ T8409]  ? __nla_parse+0x40/0x60
[  370.620101][ T8409]  ? xfrmi_build_state+0x1af/0x480
[  370.620128][ T8409]  xfrmi_build_state+0x1af/0x480
[  370.620153][ T8409]  ? __pfx_xfrmi_build_state+0x10/0x10
[  370.620182][ T8409]  ? lwtunnel_build_state+0xe2/0x4c0
[  370.620209][ T8409]  lwtunnel_build_state+0x381/0x4c0
[  370.620233][ T8409]  ? lwtunnel_build_state+0xe2/0x4c0
[  370.620265][ T8409]  fib_nh_common_init+0x14b/0x430
[  370.620283][ T8409]  ? in6_dev_get+0x1a/0x290
[  370.620304][ T8409]  ? __pfx_fib_nh_common_init+0x10/0x10
[  370.620321][ T8409]  ? in6_dev_get+0x1a/0x290
[  370.620343][ T8409]  fib6_nh_init+0x1608/0x1ff0
[  370.620374][ T8409]  ? __pfx_fib6_nh_init+0x10/0x10
[  370.620393][ T8409]  ? kasan_save_track+0x4f/0x80
[  370.620408][ T8409]  ? kasan_save_track+0x3e/0x80
[  370.620422][ T8409]  ? __kasan_kmalloc+0x93/0xb0
[  370.620438][ T8409]  ? __kmalloc_noprof+0x27a/0x4f0
[  370.620454][ T8409]  ? fib6_info_alloc+0x30/0xf0
[  370.620469][ T8409]  ? ip6_route_info_create+0x142/0x860
[  370.620490][ T8409]  ? ip6_route_add+0x49/0x1b0
[  370.620508][ T8409]  ? inet6_rtm_newroute+0x1cf/0x18c0
[  370.620523][ T8409]  ? rtnetlink_rcv_msg+0x7cf/0xb70
[  370.620538][ T8409]  ? netlink_rcv_skb+0x208/0x470
[  370.620555][ T8409]  ? netlink_unicast+0x759/0x8e0
[  370.620569][ T8409]  ? netlink_sendmsg+0x805/0xb30
[  370.620586][ T8409]  ? __sock_sendmsg+0x219/0x270
[  370.620597][ T8409]  ? ____sys_sendmsg+0x505/0x830
[  370.620615][ T8409]  ? ___sys_sendmsg+0x21f/0x2a0
[  370.620632][ T8409]  ? __sys_sendmsg+0x164/0x220
[  370.620650][ T8409]  ? __do_fast_syscall_32+0xb6/0x2b0
[  370.620664][ T8409]  ? do_fast_syscall_32+0x34/0x80
[  370.620678][ T8409]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  370.620722][ T8409]  ? ip_fib_metrics_init+0x404/0x6f0
[  370.620750][ T8409]  ? fib6_info_alloc+0x30/0xf0
[  370.620769][ T8409]  ip6_route_info_create_nh+0x16a/0xab0
[  370.620795][ T8409]  ? __pfx_ip6_route_info_create_nh+0x10/0x10
[  370.620818][ T8409]  ? ip6_route_info_create+0x508/0x860
[  370.620847][ T8409]  ip6_route_add+0x6e/0x1b0
[  370.620869][ T8409]  inet6_rtm_newroute+0x1cf/0x18c0
[  370.620890][ T8409]  ? nlmon_xmit+0xb0/0x100
[  370.620904][ T8409]  ? kmem_cache_free+0x18f/0x400
[  370.620925][ T8409]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  370.620942][ T8409]  ? __local_bh_enable_ip+0x12d/0x1c0
[  370.620960][ T8409]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.620984][ T8409]  ? __local_bh_enable_ip+0x12d/0x1c0
[  370.621001][ T8409]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  370.621021][ T8409]  ? __dev_queue_xmit+0x27e/0x3a70
[  370.621072][ T8409]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  370.621101][ T8409]  rtnetlink_rcv_msg+0x7cf/0xb70
[  370.621119][ T8409]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  370.621135][ T8409]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  370.621149][ T8409]  ? ref_tracker_free+0x63a/0x7d0
[  370.621170][ T8409]  ? __copy_skb_header+0xa7/0x550
[  370.621192][ T8409]  ? __pfx_ref_tracker_free+0x10/0x10
[  370.621214][ T8409]  ? __skb_clone+0x63/0x7a0
[  370.621239][ T8409]  netlink_rcv_skb+0x208/0x470
[  370.621258][ T8409]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  370.621274][ T8409]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  370.621301][ T8409]  ? netlink_deliver_tap+0x2e/0x1b0
[  370.621319][ T8409]  ? netlink_deliver_tap+0x2e/0x1b0
[  370.621345][ T8409]  netlink_unicast+0x759/0x8e0
[  370.621369][ T8409]  netlink_sendmsg+0x805/0xb30
[  370.621393][ T8409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.621414][ T8409]  ? __import_iovec+0x5d4/0x7f0
[  370.621429][ T8409]  ? aa_sock_msg_perm+0x94/0x160
[  370.621453][ T8409]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  370.621476][ T8409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  370.621496][ T8409]  __sock_sendmsg+0x219/0x270
[  370.621512][ T8409]  ____sys_sendmsg+0x505/0x830
[  370.621535][ T8409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  370.621565][ T8409]  ___sys_sendmsg+0x21f/0x2a0
[  370.621586][ T8409]  ? __pfx____sys_sendmsg+0x10/0x10
[  370.621629][ T8409]  ? __fget_files+0x2a/0x420
[  370.621649][ T8409]  ? __fget_files+0x3a0/0x420
[  370.621675][ T8409]  __sys_sendmsg+0x164/0x220
[  370.621695][ T8409]  ? __pfx___sys_sendmsg+0x10/0x10
[  370.621741][ T8409]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  370.621755][ T8409]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.621778][ T8409]  __do_fast_syscall_32+0xb6/0x2b0
[  370.621792][ T8409]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.621816][ T8409]  do_fast_syscall_32+0x34/0x80
[  370.621830][ T8409]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  370.621850][ T8409] RIP: 0023:0xf70de539
[  370.621880][ T8409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  370.621892][ T8409] RSP: 002b:00000000f50ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  370.621908][ T8409] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000080000680
[  370.621918][ T8409] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  370.621927][ T8409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  370.621935][ T8409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  370.621944][ T8409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  370.621964][ T8409]  </TASK>
[  372.330706][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.5.715'.
[  372.631814][  T979] usb 7-1: USB disconnect, device number 15
[  373.547969][ T8430] xt_TPROXY: Can be used only with -p tcp or -p udp
[  373.601130][ T8434] sctp: [Deprecated]: syz.2.717 (pid 8434) Use of struct sctp_assoc_value in delayed_ack socket option.
[  373.601130][ T8434] Use struct sctp_sack_info instead
[  373.634302][ T8435] loop6: detected capacity change from 0 to 2560
[  373.641237][ T8433] binder: 8431:8433 ioctl 4018620d 0 returned -22
[  373.699335][  T979] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  373.722936][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.761482][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.799076][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.799878][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'.
[  373.837682][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.883079][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.914735][  T979] usb 7-1: config 0 has an invalid interface number: 156 but max is 0
[  373.948702][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  373.958661][  T979] usb 7-1: config 0 has no interface number 0
[  373.980810][  T979] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  373.991712][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  374.020004][  T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.029081][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  374.037001][ T6209] ldm_validate_partition_table(): Disk read failed.
[  374.091881][  T979] usb 7-1: config 0 descriptor??
[  374.109565][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  374.117537][ T6209] Buffer I/O error on dev loop6, logical block 0, async page read
[  374.132288][  T979] gspca_main: spca561-2.14.0 probing abcd:cdee
[  374.160520][ T6209] Dev loop6: unable to read RDB block 0
[  374.166811][ T6209]  loop6: unable to read partition table
[  374.182736][ T8435] ldm_validate_partition_table(): Disk read failed.
[  374.199613][ T8435] Dev loop6: unable to read RDB block 0
[  374.210783][ T8435]  loop6: unable to read partition table
[  374.226655][ T8435] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  374.313209][ T8425] batman_adv: batadv0: Adding interface: vxlan0
[  374.320772][ T8425] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  374.349185][ T8425] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active
[  374.359597][ T5938] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  374.427749][  T979] spca561 7-1:0.156: probe with driver spca561 failed with error -22
[  374.450401][  T979] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  374.475923][  T979] usb 7-1: MIDIStreaming interface descriptor not found
[  374.544099][ T5938] usb 5-1: Using ep0 maxpacket: 32
[  374.561414][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.631646][ T5938] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.666825][  T979] usb 7-1: USB disconnect, device number 16
[  374.682549][ T5938] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  374.746904][ T5938] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  374.794634][ T5938] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.843839][ T5938] usb 5-1: config 0 descriptor??
[  375.085677][ T5218] ldm_validate_partition_table(): Disk read failed.
[  375.154076][ T5218] Dev loop6: unable to read RDB block 0
[  375.174397][ T5218]  loop6: unable to read partition table
[  375.539055][ T5947] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  375.568599][ T5938] usbhid 5-1:0.0: can't add hid device: -71
[  375.577301][ T5938] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  375.602756][ T5938] usb 5-1: USB disconnect, device number 52
[  375.768977][ T5947] usb 7-1: Using ep0 maxpacket: 32
[  375.790427][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.818955][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.837957][ T5947] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  375.868461][ T5947] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  375.915296][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.936685][ T5947] usb 7-1: config 0 descriptor??
[  376.401125][ T5947] usbhid 7-1:0.0: can't add hid device: -71
[  376.407788][ T5947] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  376.466080][ T8470] input: syz0 as /devices/virtual/input/input26
[  376.476247][ T8470] input: failed to attach handler leds to device input26, error: -6
[  376.519627][ T5947] usb 7-1: USB disconnect, device number 17
[  377.205326][ T5218] ldm_validate_partition_table(): Disk read failed.
[  377.245402][ T5218] Dev loop6: unable to read RDB block 0
[  377.315244][ T5218]  loop6: unable to read partition table
[  377.756223][ T8482] FAULT_INJECTION: forcing a failure.
[  377.756223][ T8482] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  377.816768][ T8482] CPU: 1 UID: 0 PID: 8482 Comm: syz.4.733 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  377.816798][ T8482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  377.816811][ T8482] Call Trace:
[  377.816820][ T8482]  <TASK>
[  377.816829][ T8482]  dump_stack_lvl+0x189/0x250
[  377.816859][ T8482]  ? __pfx____ratelimit+0x10/0x10
[  377.816892][ T8482]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.816917][ T8482]  ? __pfx__printk+0x10/0x10
[  377.816946][ T8482]  ? __might_fault+0xb0/0x130
[  377.816989][ T8482]  should_fail_ex+0x414/0x560
[  377.817025][ T8482]  _copy_from_user+0x2d/0xb0
[  377.817051][ T8482]  get_compat_msghdr+0xad/0x4a0
[  377.817087][ T8482]  ? __pfx_get_compat_msghdr+0x10/0x10
[  377.817117][ T8482]  ? rcu_is_watching+0x15/0xb0
[  377.817142][ T8482]  ? ___sys_recvmsg+0x1c4/0x510
[  377.817174][ T8482]  ___sys_recvmsg+0x17f/0x510
[  377.817198][ T8482]  ? __pfx____sys_recvmsg+0x10/0x10
[  377.817235][ T8482]  ? __fget_files+0x3a0/0x420
[  377.817263][ T8482]  do_recvmmsg+0x36a/0x770
[  377.817289][ T8482]  ? __pfx_do_recvmmsg+0x10/0x10
[  377.817317][ T8482]  ? __pfx_vfs_write+0x10/0x10
[  377.817345][ T8482]  __sys_recvmmsg+0x19d/0x280
[  377.817367][ T8482]  ? __pfx___sys_recvmmsg+0x10/0x10
[  377.817385][ T8482]  ? ksys_write+0x22a/0x250
[  377.817408][ T8482]  __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0
[  377.817433][ T8482]  __do_fast_syscall_32+0xb6/0x2b0
[  377.817449][ T8482]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.817475][ T8482]  do_fast_syscall_32+0x34/0x80
[  377.817490][ T8482]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  377.817507][ T8482] RIP: 0023:0xf70be539
[  377.817520][ T8482] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  377.817533][ T8482] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000151
[  377.817560][ T8482] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080005c80
[  377.817570][ T8482] RDX: 0000000000000344 RSI: 0000000000010122 RDI: 0000000000000000
[  377.817596][ T8482] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  377.817604][ T8482] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  377.817613][ T8482] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  377.817634][ T8482]  </TASK>
[  378.483189][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  378.492727][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  378.799381][ T5938] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  378.958982][ T5947] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  378.973886][ T5938] usb 6-1: config 0 has an invalid interface number: 255 but max is 0
[  378.989292][ T5938] usb 6-1: config 0 has no interface number 0
[  379.037934][ T5938] usb 6-1: config 0 interface 255 has no altsetting 0
[  379.049879][ T8501] tipc: Started in network mode
[  379.054823][ T8501] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  379.059589][ T5938] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  379.087164][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.103291][ T5938] usb 6-1: config 0 descriptor??
[  379.121819][ T5938] cp210x 6-1:0.255: cp210x converter detected
[  379.145748][ T8501] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  379.184513][ T5947] usb 7-1: Using ep0 maxpacket: 8
[  379.221716][ T5947] usb 7-1: config 0 has no interfaces?
[  379.231001][ T5947] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  379.257217][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.279169][ T5947] usb 7-1: Product: syz
[  379.283394][ T5947] usb 7-1: Manufacturer: syz
[  379.308579][ T5947] usb 7-1: SerialNumber: syz
[  379.340523][ T5947] usb 7-1: config 0 descriptor??
[  379.530663][ T5938] cp210x 6-1:0.255: failed to get vendor val 0x000e size 3: -32
[  379.574581][    T9] usb 7-1: USB disconnect, device number 18
[  379.740664][ T5938] cp210x 6-1:0.255: GPIO initialisation failed: -19
[  379.857949][ T5938] usb 6-1: cp210x converter now attached to ttyUSB0
[  379.956528][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'.
[  380.024070][ T5938] usb 6-1: USB disconnect, device number 18
[  380.041985][ T5938] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  380.068064][ T5938] cp210x 6-1:0.255: device disconnected
[  380.801721][ T5218] buffer_io_error: 69 callbacks suppressed
[  380.801739][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.817199][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.825218][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.833215][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.841503][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.862988][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.913108][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.949212][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.959896][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'.
[  380.965948][ T5218] ldm_validate_partition_table(): Disk read failed.
[  380.975885][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.743'.
[  380.985232][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  380.995885][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  381.012936][ T5218] Dev loop6: unable to read RDB block 0
[  381.035764][ T5218]  loop6: unable to read partition table
[  381.036298][ T8516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.741'.
[  381.199000][  T979] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  381.318126][ T5218] ldm_validate_partition_table(): Disk read failed.
[  381.390016][  T979] usb 3-1: Using ep0 maxpacket: 32
[  381.395538][ T5218] Dev loop6: unable to read RDB block 0
[  381.410923][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.430477][ T5218]  loop6: unable to read partition table
[  381.441429][  T979] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.485405][  T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  381.560050][  T979] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  381.581969][  T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.657105][  T979] usb 3-1: config 0 descriptor??
[  381.845823][ T8534] ip6gretap2: entered promiscuous mode
[  381.851477][ T8534] ip6gretap2: entered allmulticast mode
[  382.882569][  T979] usbhid 3-1:0.0: can't add hid device: -71
[  382.888612][  T979] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  382.933551][  T979] usb 3-1: USB disconnect, device number 34
[  383.486495][ T5218] ldm_validate_partition_table(): Disk read failed.
[  383.508467][ T5218] Dev loop6: unable to read RDB block 0
[  383.539314][ T5218]  loop6: unable to read partition table
[  384.553771][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  384.622427][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  384.631446][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  384.640508][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  384.649484][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  384.658375][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.6.750'.
[  385.149131][ T8560] __nla_validate_parse: 44 callbacks suppressed
[  385.149150][ T8560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.754'.
[  385.339316][ T5938] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  385.382507][ T8560] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode
[  385.444965][ T8560] macvtap1: entered promiscuous mode
[  385.484853][ T8560] mac80211_hwsim hwsim18 wlan1: left promiscuous mode
[  385.512109][ T5938] usb 3-1: Using ep0 maxpacket: 8
[  385.531882][ T5938] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  385.547675][ T5938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  385.588230][ T5938] usb 3-1: Product: syz
[  385.606399][ T5938] usb 3-1: Manufacturer: syz
[  385.626574][ T5938] usb 3-1: SerialNumber: syz
[  385.650687][ T5938] usb 3-1: config 0 descriptor??
[  385.685603][ T5938] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  385.725065][ T5938] usb 3-1: setting power ON
[  385.799323][ T5938] dvb-usb: bulk message failed: -22 (2/0)
[  385.860474][ T5938] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  385.905872][ T8567] loop2: detected capacity change from 0 to 7
[  385.923024][ T5938] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  385.962324][ T8567] Dev loop2: unable to read RDB block 7
[  385.969001][ T5938] usb 3-1: media controller created
[  385.984592][ T8567]  loop2: unable to read partition table
[  386.015153][ T8567] loop2: partition table beyond EOD, truncated
[  386.044964][ T5218] buffer_io_error: 53 callbacks suppressed
[  386.044980][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.059441][ T8567] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  386.103536][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  386.141382][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.173842][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.191304][ T5938] usb 3-1: selecting invalid altsetting 6
[  386.203066][ T5938] usb 3-1: digital interface selection failed (-22)
[  386.204679][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.217632][ T5938] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  386.241514][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.268319][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.272392][ T5938] usb 3-1: setting power OFF
[  386.300116][ T5938] dvb-usb: bulk message failed: -22 (2/0)
[  386.314130][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.329438][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  386.377027][ T5938] (NULL device *): no alternate interface
[  386.378681][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.420035][ T5218] ldm_validate_partition_table(): Disk read failed.
[  386.439065][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.493445][ T5938] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  386.496449][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  386.525654][ T5938] usb 3-1: USB disconnect, device number 35
[  386.552254][ T5218] Dev loop6: unable to read RDB block 0
[  386.581004][ T5218]  loop6: unable to read partition table
[  386.779783][ T8579] ip6gretap1: entered promiscuous mode
[  386.785556][ T8579] ip6gretap1: entered allmulticast mode
[  386.825349][    T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  386.988984][    T9] usb 6-1: Using ep0 maxpacket: 32
[  386.994239][ T5938] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  387.005558][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.022896][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.257988][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  387.293202][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  387.536476][    T9] usb 6-1: can't read configurations, error -71
[  387.589380][ T5938] usb 3-1: Using ep0 maxpacket: 32
[  387.727145][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  387.740253][ T8583] fuse: root generation should be zero
[  387.766515][ T5938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  387.818243][ T5938] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  387.861155][ T5938] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  387.910059][ T5938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  387.961356][ T5938] usb 3-1: config 0 descriptor??
[  388.237871][ T5218] ldm_validate_partition_table(): Disk read failed.
[  388.259223][ T5218] Dev loop6: unable to read RDB block 0
[  388.265132][ T5218]  loop6: unable to read partition table
[  388.404518][ T5938] usbhid 3-1:0.0: can't add hid device: -71
[  388.453034][ T5938] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  388.540711][ T5938] usb 3-1: USB disconnect, device number 36
[  388.745494][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.6.764'.
[  389.042798][ T8595] fuse: Unknown parameter 'default_pejmiPøions'
[  389.604008][ T8606] trusted_key: encrypted_key: insufficient parameters specified
[  389.729519][ T5218] ldm_validate_partition_table(): Disk read failed.
[  389.736345][ T5218] Dev loop6: unable to read RDB block 0
[  389.799438][    T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  389.830474][ T5218]  loop6: unable to read partition table
[  389.860080][ T5850] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  389.878417][ T5850] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  389.886570][ T5850] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  389.896247][ T5850] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  389.914041][ T5850] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  390.043672][ T8612] netlink: 8 bytes leftover after parsing attributes in process `syz.6.772'.
[  390.073216][ T8612] veth0: entered promiscuous mode
[  390.109550][ T8612] veth0: left promiscuous mode
[  390.264886][ T8621] ipt_ECN: cannot use operation on non-tcp rule
[  390.490331][   T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  390.682226][   T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  390.721086][   T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  390.750375][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  390.760161][ T5218] ldm_validate_partition_table(): Disk read failed.
[  390.763998][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  390.784361][ T8615] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  390.792897][ T5218] Dev loop6: unable to read RDB block 0
[  390.802662][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  391.090434][   T24] usb 5-1: USB disconnect, device number 53
[  391.135739][ T5218] buffer_io_error: 65 callbacks suppressed
[  391.135756][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.248644][ T5218] Buffer I/O error on dev loop6, logical block 3, async page read
[  391.299412][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.323965][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.359225][ T5218]  loop6: unable to read partition table
[  391.690786][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.709055][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.790667][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.824398][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.851465][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.898174][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  391.945426][ T5218] ldm_validate_partition_table(): Disk read failed.
[  391.965099][ T5218] Dev loop6: unable to read RDB block 0
[  391.989214][ T5168] Bluetooth: hci8: command tx timeout
[  392.007739][ T5218]  loop6: unable to read partition table
[  392.008994][   T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  392.014069][ T8616] chnl_net:caif_netlink_parms(): no params data found
[  392.201340][ T6532] udevd[6532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  392.227650][   T24] usb 7-1: Using ep0 maxpacket: 32
[  392.236815][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  392.317599][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  392.391459][   T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  392.473769][   T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  392.523902][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  392.560559][   T24] usb 7-1: config 0 descriptor??
[  392.759111][ T8616] bridge0: port 1(bridge_slave_0) entered blocking state
[  392.816521][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.5.781'.
[  392.836733][ T8616] bridge0: port 1(bridge_slave_0) entered disabled state
[  392.969779][ T8616] bridge_slave_0: entered allmulticast mode
[  392.978189][ T8616] bridge_slave_0: entered promiscuous mode
[  393.026755][ T8616] bridge0: port 2(bridge_slave_1) entered blocking state
[  393.048322][ T8616] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.063935][   T24] usbhid 7-1:0.0: can't add hid device: -71
[  393.074777][   T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  393.109852][ T8616] bridge_slave_1: entered allmulticast mode
[  393.121316][   T24] usb 7-1: USB disconnect, device number 19
[  393.139183][ T8616] bridge_slave_1: entered promiscuous mode
[  393.679858][ T5218] ldm_validate_partition_table(): Disk read failed.
[  393.711261][ T8659] qrtr: Invalid version 0
[  393.771390][ T5218] Dev loop6: unable to read RDB block 0
[  393.777771][ T5218]  loop6: unable to read partition table
[  393.882516][ T8661] netlink: 16 bytes leftover after parsing attributes in process `syz.4.784'.
[  393.977091][ T8662] input: syz0 as /devices/virtual/input/input29
[  394.069137][ T5849] Bluetooth: hci8: command tx timeout
[  394.769180][ T8667] netlink: 'syz.4.785': attribute type 1 has an invalid length.
[  395.028339][ T8667] 8021q: adding VLAN 0 to HW filter on device bond3
[  395.111118][ T5218] ldm_validate_partition_table(): Disk read failed.
[  395.140521][ T5218] Dev loop6: unable to read RDB block 0
[  395.192801][ T5218]  loop6: unable to read partition table
[  395.217680][ T8616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  395.307729][ T8616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  395.344528][ T5218] ldm_validate_partition_table(): Disk read failed.
[  395.394472][ T5218] Dev loop6: unable to read RDB block 0
[  395.411858][ T5218]  loop6: unable to read partition table
[  395.617521][ T8616] team0: Port device team_slave_0 added
[  395.688361][ T8616] team0: Port device team_slave_1 added
[  395.734334][ T8679] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  395.846084][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  395.846097][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.846130][ T8616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  395.861832][ T8616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.861843][ T8616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.861871][ T8616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.909949][ T5849] Bluetooth: hci5: command 0x0406 tx timeout
[  395.941828][ T5847] Bluetooth: hci6: command 0x0406 tx timeout
[  396.131634][ T5218] ldm_validate_partition_table(): Disk read failed.
[  396.148987][ T5850] Bluetooth: hci8: command tx timeout
[  396.209276][ T5218] buffer_io_error: 91 callbacks suppressed
[  396.209293][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.236067][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.249078][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.300926][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.329049][ T5218] Dev loop6: unable to read RDB block 0
[  396.368146][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.396621][ T8616] hsr_slave_0: entered promiscuous mode
[  396.410355][ T5218] Buffer I/O error on dev loop6, logical block 3, async page read
[  396.418315][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.430610][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.446653][ T5218]  loop6: unable to read partition table
[  396.494821][ T8616] hsr_slave_1: entered promiscuous mode
[  396.531684][ T8616] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  396.574218][   T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  396.610616][ T6532] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.638934][ T8616] Cannot create hsr debugfs directory
[  396.747148][ T6532] Buffer I/O error on dev loop6, logical block 0, async page read
[  396.878537][   T10] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  396.936264][   T10] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  396.988963][   T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  397.088475][ T8689] IPv6: sit1: Disabled Multicast RS
[  397.106380][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.160146][ T8685] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  397.177375][   T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  397.269376][   T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  397.372988][   T10] usb 7-1: USB disconnect, device number 20
[  397.440778][   T24] usb 6-1: Using ep0 maxpacket: 32
[  397.500705][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  397.572821][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  397.639675][   T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  397.675527][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  397.685312][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  397.710161][   T24] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  397.739016][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.768163][   T24] usb 6-1: config 0 descriptor??
[  397.829930][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.012356][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.065109][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.075261][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.087078][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.111429][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.149823][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.201005][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.239451][ T5850] Bluetooth: hci8: command tx timeout
[  398.239604][   T24] usbhid 6-1:0.0: can't add hid device: -71
[  398.261919][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.299404][   T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  398.309540][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.790'.
[  398.408034][   T24] usb 6-1: USB disconnect, device number 21
[  398.921035][ T8616] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  399.004658][ T8616] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  399.041261][ T8616] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  399.228020][ T8616] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  399.351238][ T5218] ldm_validate_partition_table(): Disk read failed.
[  399.454380][ T5218] Dev loop6: unable to read RDB block 0
[  399.499740][ T5218]  loop6: unable to read partition table
[  399.613113][ T8712] netlink: 'syz.6.797': attribute type 3 has an invalid length.
[  399.675187][ T8712] netlink: 'syz.6.797': attribute type 3 has an invalid length.
[  399.868941][ T8716] bond0: option fail_over_mac: unable to set because the bond device has slaves
[  399.998353][ T8719] netlink: 'syz.6.797': attribute type 10 has an invalid length.
[  400.040313][ T8719] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.049031][ T8719] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.413717][ T8719] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.420890][ T8719] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.428271][ T8719] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.435555][ T8719] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.507790][ T8719] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  400.804041][ T8616] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.859489][ T5845] usb 7-1: new full-speed USB device number 21 using dummy_hcd
[  401.075658][ T5168] Bluetooth: hci7: command 0x0406 tx timeout
[  401.097286][ T8616] 8021q: adding VLAN 0 to HW filter on device team0
[  401.183571][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  401.190759][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  401.223975][ T5845] usb 7-1: not running at top speed; connect to a high speed hub
[  401.233575][ T5845] usb 7-1: config 128 has an invalid interface number: 15 but max is 3
[  401.283064][ T5845] usb 7-1: config 128 contains an unexpected descriptor of type 0x1, skipping
[  401.321679][ T5845] usb 7-1: config 128 has an invalid interface number: 6 but max is 3
[  401.349524][ T5845] usb 7-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[  401.375014][ T5845] usb 7-1: config 128 contains an unexpected descriptor of type 0x1, skipping
[  401.400311][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  401.407441][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.527575][ T5845] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  401.540968][ T5845] usb 7-1: config 128 has 2 interfaces, different from the descriptor's value: 4
[  401.558983][ T5845] usb 7-1: config 128 has no interface number 0
[  401.565362][ T5845] usb 7-1: config 128 has no interface number 1
[  401.640831][ T5845] usb 7-1: config 128 interface 15 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  401.747493][ T8616] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  401.779177][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  401.806875][ T8616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  401.842146][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  401.942793][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  402.005131][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  402.042574][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  402.221333][ T8616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  402.271551][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has a duplicate endpoint with address 0xE, skipping
[  402.333608][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has an endpoint descriptor with address 0x27, changing to 0x7
[  402.363744][ T8616] veth0_vlan: entered promiscuous mode
[  402.399973][ T8616] veth1_vlan: entered promiscuous mode
[  402.449131][ T5845] usb 7-1: config 128 interface 15 altsetting 1 endpoint 0x7 has invalid maxpacket 26518, setting to 64
[  402.511112][ T5845] usb 7-1: config 128 interface 15 altsetting 1 has 10 endpoint descriptors, different from the interface descriptor's value: 9
[  402.568692][ T8616] veth0_macvtap: entered promiscuous mode
[  402.633260][ T8616] veth1_macvtap: entered promiscuous mode
[  402.689657][ T5845] usb 7-1: config 128 interface 6 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 13
[  402.780901][ T5845] usb 7-1: config 128 interface 15 has no altsetting 0
[  402.813774][ T5845] usb 7-1: config 128 interface 6 has no altsetting 0
[  402.850103][ T5845] usb 7-1: string descriptor 0 read error: -71
[  402.871028][ T5845] usb 7-1: New USB device found, idVendor=0411, idProduct=0097, bcdDevice=d5.83
[  402.876396][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  402.948906][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.949647][ T5218] buffer_io_error: 24 callbacks suppressed
[  402.949663][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  402.998496][ T8616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.029459][ T5845] usb 7-1: can't set config #128, error -71
[  403.062915][ T8616] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.090473][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.098375][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.129347][ T5845] usb 7-1: USB disconnect, device number 21
[  403.129843][ T8616] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.169744][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.189139][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.196988][ T8616] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.215430][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.232778][ T8616] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.262639][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.544017][ T5947] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  403.678087][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.705776][ T5218] ldm_validate_partition_table(): Disk read failed.
[  403.712869][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.722055][ T5947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  403.738958][ T5947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  403.739497][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  403.912087][ T5218] Dev loop6: unable to read RDB block 0
[  403.918072][ T5218]  loop6: unable to read partition table
[  404.113072][ T5947] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  404.138984][ T5947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.150196][ T5947] usb 5-1: config 0 descriptor??
[  404.561880][ T5947] sigmamicro 0003:1C4F:0059.0009: unknown main item tag 0x0
[  404.597563][ T5947] sigmamicro 0003:1C4F:0059.0009: unknown main item tag 0x0
[  404.628926][ T5947] sigmamicro 0003:1C4F:0059.0009: unknown main item tag 0x0
[  404.664819][ T5947] sigmamicro 0003:1C4F:0059.0009: unknown main item tag 0x0
[  404.695538][ T5947] sigmamicro 0003:1C4F:0059.0009: unknown main item tag 0x0
[  404.725871][ T5218] ldm_validate_partition_table(): Disk read failed.
[  404.737945][ T6520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  404.748475][ T5218] Dev loop6: unable to read RDB block 0
[  404.777279][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.803850][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.820556][ T5947] sigmamicro 0003:1C4F:0059.0009: hidraw0: USB HID v7.ff Device [HID 1c4f:0059] on usb-dummy_hcd.4-1/input0
[  404.835547][ T6520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  404.845667][ T5218]  loop6: unable to read partition table
[  404.933708][  T979] usb 5-1: USB disconnect, device number 54
[  405.030622][ T6506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.083549][    T9] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  405.083581][ T6506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.174734][ T8756] fido_id[8756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  405.548123][ T8760] __nla_validate_parse: 39 callbacks suppressed
[  405.548138][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'.
[  405.600087][    T9] usb 7-1: Using ep0 maxpacket: 32
[  405.636755][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  405.689620][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  405.772483][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  405.786751][    T9] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  405.812053][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  405.831307][   T44] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  405.853684][    T9] usb 7-1: config 0 descriptor??
[  405.862354][ T8758] fuse: Unknown parameter 'default_pejmiPøions'
[  406.004928][   T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  406.028960][   T44] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  406.067152][   T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  406.136662][   T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.269430][ T8761] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  406.285308][   T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  406.347975][    T9] usbhid 7-1:0.0: can't add hid device: -71
[  406.355209][    T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  406.524004][    T9] usb 7-1: USB disconnect, device number 22
[  406.603643][   T44] usb 3-1: USB disconnect, device number 38
[  406.914902][ T5218] ldm_validate_partition_table(): Disk read failed.
[  406.956419][ T5218] Dev loop6: unable to read RDB block 0
[  407.005096][ T5218]  loop6: unable to read partition table
[  407.807507][ T5845] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  407.919372][   T31] INFO: task syz.0.367:7188 blocked for more than 143 seconds.
[  407.927278][   T31]       Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0
[  407.952446][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  407.999727][   T31] task:syz.0.367       state:D stack:26920 pid:7188  tgid:7188  ppid:5861   task_flags:0x440040 flags:0x20004004
[  408.028943][ T5845] usb 5-1: Using ep0 maxpacket: 32
[  408.058941][   T31] Call Trace:
[  408.069538][   T31]  <TASK>
[  408.079041][   T31]  __schedule+0x16f5/0x4d00
[  408.088576][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  408.122341][   T31]  ? schedule+0x165/0x360
[  408.157577][ T5845] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  408.159847][   T31]  ? __pfx___schedule+0x10/0x10
[  408.202925][   T31]  ? schedule+0x91/0x360
[  408.229067][   T31]  schedule+0x165/0x360
[  408.246922][   T31]  ? rwsem_down_read_slowpath+0x568/0x880
[  408.273367][   T31]  schedule_preempt_disabled+0x13/0x30
[  408.278936][ T5845] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  408.278990][ T5845] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  408.279012][ T5845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  408.281882][ T5845] usb 5-1: config 0 descriptor??
[  408.316912][   T31]  rwsem_down_read_slowpath+0x552/0x880
[  408.356643][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  408.405887][   T31]  ? page_cache_ra_order+0x445/0xc70
[  408.425924][   T31]  down_read+0x98/0x2e0
[  408.446231][   T31]  page_cache_ra_order+0x445/0xc70
[  408.486817][   T31]  ? maybe_unlock_mmap_for_io+0x225/0x2d0
[  408.518315][   T31]  do_sync_mmap_readahead+0x4b5/0x5f0
[  408.587450][   T31]  ? __pfx_do_sync_mmap_readahead+0x10/0x10
[  408.606580][   T31]  ? count_memcg_event_mm+0x1d/0x250
[  408.636844][   T31]  ? count_memcg_event_mm+0x1d/0x250
[  408.655942][   T31]  filemap_fault+0x62a/0x1200
[  408.703683][   T31]  ? __pagetable_ctor+0x253/0x340
[  408.722275][   T31]  ? __pfx_filemap_fault+0x10/0x10
[  408.750408][   T31]  ? rcu_is_watching+0x15/0xb0
[  408.757013][   T31]  ? __raw_spin_lock_init+0x45/0x100
[  408.797824][   T31]  __do_fault+0x138/0x390
[  408.816869][   T31]  __handle_mm_fault+0x198b/0x5620
[  408.836548][   T31]  ? __lock_acquire+0xab9/0xd20
[  408.847711][   T31]  ? __pfx___handle_mm_fault+0x10/0x10
[  408.885003][   T31]  ? lock_vma_under_rcu+0xf8/0x710
[  408.917332][   T31]  ? lock_vma_under_rcu+0xf8/0x710
[  408.947305][   T31]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  408.965761][   T31]  handle_mm_fault+0x40a/0x8e0
[  408.975740][   T31]  do_user_addr_fault+0xa81/0x1390
[  408.992334][   T31]  ? rcu_is_watching+0x15/0xb0
[  408.997248][   T31]  ? trace_page_fault_user+0x84/0x1e0
[  409.015222][   T31]  exc_page_fault+0x76/0xf0
[  409.029570][ T5845] hid (null): unknown global tag 0xe
[  409.038068][   T31]  asm_exc_page_fault+0x26/0x30
[  409.054825][   T31] RIP: 0023:0xf712db58
[  409.078765][   T31] RSP: 002b:00000000f75bfa60 EFLAGS: 00010246
[  409.094392][   T31] RAX: 0000000080000200 RBX: 0000000000000000 RCX: 0000000000000001
[  409.110203][ T5845] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input34
[  409.152321][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  409.183837][ T5845] input: HID 0458:5011 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5011.000A/input/input35
[  409.265400][   T31] RBP: 00000000f75bfd98 R08: 0000000000000000 R09: 0000000000000000
[  409.534489][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  409.547310][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  409.563582][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  409.577760][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  409.599488][   T31]  </TASK>
[  409.607624][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.4.814'.
[  409.617212][   T31] INFO: task syz.3.378:7223 blocked for more than 145 seconds.
[  409.668952][   T31]       Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0
[  409.690721][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  409.779331][   T31] task:syz.3.378       state:D stack:28232 pid:7223  tgid:7222  ppid:5858   task_flags:0x400040 flags:0x20004004
[  409.814894][   T31] Call Trace:
[  409.821737][   T31]  <TASK>
[  409.830635][   T31]  __schedule+0x16f5/0x4d00
[  409.845496][ T5845] kye 0003:0458:5011.000A: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.4-1/input0
[  409.884151][   T31]  ? schedule+0x165/0x360
[  409.928482][   T31]  ? __pfx___schedule+0x10/0x10
[  409.967182][   T31]  ? schedule+0x91/0x360
[  410.012656][   T31]  schedule+0x165/0x360
[  410.042943][   T31]  ? rwsem_down_read_slowpath+0x568/0x880
[  410.077198][   T31]  schedule_preempt_disabled+0x13/0x30
[  410.113929][   T31]  rwsem_down_read_slowpath+0x552/0x880
[  410.131304][   T31]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  410.147877][    T9] usb 5-1: USB disconnect, device number 55
[  410.188981][   T31]  ? blkdev_read_iter+0x2f8/0x440
[  410.228118][   T31]  ? _parse_integer_limit+0x1ae/0x1f0
[  410.334066][ T8792] fido_id[8792]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  410.348924][   T31]  down_read+0x98/0x2e0
[  410.354069][   T31]  blkdev_read_iter+0x2f8/0x440
[  410.359048][   T31]  do_iter_readv_writev+0x56b/0x7f0
[  410.371257][   T31]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  410.391589][   T31]  ? bpf_lsm_file_permission+0x9/0x20
[  410.414885][   T31]  ? security_file_permission+0x75/0x290
[  410.425980][   T31]  ? rw_verify_area+0x258/0x650
[  410.443657][   T31]  vfs_readv+0x253/0x850
[  410.462488][   T31]  ? __pfx_vfs_readv+0x10/0x10
[  410.481034][   T31]  ? __fget_files+0x2a/0x420
[  410.502972][   T31]  ? __fget_files+0x3a0/0x420
[  410.515925][   T31]  ? __fget_files+0x2a/0x420
[  410.529755][   T31]  __ia32_compat_sys_preadv2+0x227/0x320
[  410.549126][   T31]  ? __pfx___ia32_compat_sys_preadv2+0x10/0x10
[  410.582156][   T31]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  410.597424][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.617521][   T31]  __do_fast_syscall_32+0xb6/0x2b0
[  410.640190][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  410.668328][   T31]  do_fast_syscall_32+0x34/0x80
[  410.694051][   T31]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  410.736658][   T31] RIP: 0023:0xf703e539
[  410.754703][   T31] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 000000000000017a
[  410.808930][   T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000080
[  410.823623][ T5218] buffer_io_error: 53 callbacks suppressed
[  410.823637][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  410.866379][   T31] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000
[  410.886598][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  410.911799][   T31] RBP: 000000000000001f R08: 0000000000000000 R09: 0000000000000000
[  410.942354][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  410.959068][   T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  410.967155][   T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  410.975309][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  410.983173][   T31]  </TASK>
[  410.986302][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  410.994295][   T31] 
[  410.994295][   T31] Showing all locks held in the system:
[  411.024640][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.043912][   T31] 7 locks held by kworker/0:0/9:
[  411.048936][   T31] 1 lock held by ksoftirqd/0/15:
[  411.053893][   T31] 1 lock held by khungtaskd/31:
[  411.058765][   T31]  #0: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  411.059070][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.076790][   T31] 3 locks held by kworker/0:3/982:
[  411.081999][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  411.120088][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.146299][   T31]  #1: ffffc900037afbc0 ((work_completion)(&fw_work->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  411.180347][ T5218] ldm_validate_partition_table(): Disk read failed.
[  411.187023][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.221246][   T31]  #2: ffffffff8dfe4810 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_lock_wait+0xff/0x210
[  411.230726][ T5218] Buffer I/O error on dev loop6, logical block 0, async page read
[  411.246900][   T31] 3 locks held by kworker/u8:8/3530:
[  411.257936][   T31]  #0: ffff88807a509948 ((wq_completion)loop6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  411.282392][   T31]  #1: ffffc9000c5e7bc0 ((work_completion)(&worker->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  411.288535][ T5218] Dev loop6: unable to read RDB block 0
[  411.313559][ T5218]  loop6: unable to read partition table
[  411.314238][   T31]  #2: ffff888148c15820 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_write_iter+0x50b/0x710
[  411.358687][   T31] 2 locks held by acpid/5203:
[  411.371288][   T31]  #0: ffff88807b9a6160 (&mousedev->mutex#2){+.+.}-{4:4}, at: mousedev_open_device+0x27/0x150
[  411.402488][   T31]  #1: ffff8880273272c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_open_device+0x53/0x360
[  411.436344][   T31] 2 locks held by udevd/5218:
[  411.456639][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  411.474784][   T31]  #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  411.497514][   T31] 2 locks held by getty/5612:
[  411.506959][   T31]  #0: ffff888034d720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  411.519151][   T31]  #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  411.537474][   T31] 3 locks held by udevd/6198:
[  411.547846][   T31]  #0: ffff88807b9a1118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_release+0x706/0x800
[  411.560043][   T31]  #1: ffff8880273272c0 (&dev->mutex#2){+.+.}-{4:4}, at: input_close_device+0x4c/0x230
[  411.570025][   T31]  #2: ffffffff8e144bb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  411.581195][   T31] 3 locks held by kworker/u8:12/6503:
[  411.586668][   T31]  #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140
[  411.599149][   T31]  #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0
[  411.610874][   T31]  #2: ffffffff8e13f0a0 (rcu_read_lock){....}-{1:3}, at: batadv_nc_worker+0xd2/0x610
[  411.620674][   T31] 2 locks held by syz.1.362/7173:
[  411.629160][   T31] 1 lock held by syz.0.367/7188:
[  411.634197][   T31]  #0: ffff888148c159c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70
[  411.648829][   T31] 1 lock held by syz.3.378/7223:
[  411.657029][   T31]  #0: ffff888148c15820 (&sb->s_type->i_mutex_key#8){++++}-{4:4}, at: blkdev_read_iter+0x2f8/0x440
[  411.668145][   T31] 1 lock held by syz.7.718/8429:
[  411.678041][   T31]  #0: ffff888148c159c0 (mapping.invalidate_lock){++++}-{4:4}, at: page_cache_ra_order+0x445/0xc70
[  411.695304][   T31] 
[  411.699432][   T31] =============================================
[  411.699432][   T31] 
[  411.708016][   T31] NMI backtrace for cpu 1
[  411.708032][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  411.708056][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  411.708069][   T31] Call Trace:
[  411.708078][   T31]  <TASK>
[  411.708086][   T31]  dump_stack_lvl+0x189/0x250
[  411.708113][   T31]  ? __wake_up_klogd+0xd9/0x110
[  411.708145][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  411.708171][   T31]  ? __pfx__printk+0x10/0x10
[  411.708215][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  411.708247][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  411.708274][   T31]  ? irqentry_exit+0x74/0x90
[  411.708294][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.708337][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  411.708361][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  411.708405][   T31]  watchdog+0xfee/0x1030
[  411.708428][   T31]  ? watchdog+0x1de/0x1030
[  411.708456][   T31]  kthread+0x70e/0x8a0
[  411.708490][   T31]  ? __pfx_watchdog+0x10/0x10
[  411.708509][   T31]  ? __pfx_kthread+0x10/0x10
[  411.708541][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  411.708572][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.708603][   T31]  ? __pfx_kthread+0x10/0x10
[  411.708634][   T31]  ret_from_fork+0x3fc/0x770
[  411.708661][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  411.708691][   T31]  ? __switch_to_asm+0x39/0x70
[  411.708718][   T31]  ? __switch_to_asm+0x33/0x70
[  411.708745][   T31]  ? __pfx_kthread+0x10/0x10
[  411.708776][   T31]  ret_from_fork_asm+0x1a/0x30
[  411.708822][   T31]  </TASK>
[  411.708831][   T31] Sending NMI from CPU 1 to CPUs 0:
[  411.875365][    C0] NMI backtrace for cpu 0
[  411.875383][    C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  411.875405][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  411.875427][    C0] Workqueue: usb_hub_wq hub_event
[  411.875447][    C0] RIP: 0010:rcu_is_watching+0x9/0xb0
[  411.875468][    C0] Code: 50 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> ff 05 70 23 f9 10 e8 2b 35 c8 09 89 c3 83 f8 08 73 65 49 bf 00
[  411.875482][    C0] RSP: 0018:ffffc900000e68f8 EFLAGS: 00000293
[  411.875494][    C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002
[  411.875504][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e13f0a0
[  411.875514][    C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: 0000000000000000
[  411.875523][    C0] R10: ffffc900000e6ad8 R11: ffffffff81ad00a0 R12: 0000000000000002
[  411.875534][    C0] R13: ffffffff8e13f0a0 R14: 0000000000000000 R15: 0000000000000000
[  411.875544][    C0] FS:  0000000000000000(0000) GS:ffff888125c1b000(0000) knlGS:0000000000000000
[  411.875557][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  411.875567][    C0] CR2: 000056550a38f070 CR3: 0000000028814000 CR4: 00000000003526f0
[  411.875581][    C0] Call Trace:
[  411.875587][    C0]  <TASK>
[  411.875594][    C0]  lock_acquire+0x5f/0x360
[  411.875614][    C0]  ? unwind_next_frame+0xa5/0x2390
[  411.875637][    C0]  ? bus_remove_device+0x34d/0x410
[  411.875653][    C0]  ? unwind_next_frame+0xa5/0x2390
[  411.875670][    C0]  unwind_next_frame+0xc2/0x2390
[  411.875687][    C0]  ? unwind_next_frame+0xa5/0x2390
[  411.875707][    C0]  ? unwind_next_frame+0xa5/0x2390
[  411.875724][    C0]  ? device_release_driver_internal+0x4d6/0x7c0
[  411.875748][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  411.875770][    C0]  arch_stack_walk+0x11c/0x150
[  411.875792][    C0]  ? bus_remove_device+0x34d/0x410
[  411.875813][    C0]  stack_trace_save+0x9c/0xe0
[  411.875834][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  411.875855][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[  411.875878][    C0]  ? call_rcu+0x157/0x9c0
[  411.875895][    C0]  ? kernfs_put+0x19e/0x480
[  411.875916][    C0]  ? kernfs_remove_by_name_ns+0xb7/0x130
[  411.875930][    C0]  ? sysfs_unmerge_group+0xd4/0x140
[  411.875951][    C0]  ? dpm_sysfs_remove+0x76/0xd0
[  411.875972][    C0]  ? device_del+0x251/0x8e0
[  411.875993][    C0]  kasan_save_stack+0x3e/0x60
[  411.876008][    C0]  ? kasan_save_stack+0x3e/0x60
[  411.876023][    C0]  ? kasan_record_aux_stack+0xbd/0xd0
[  411.876045][    C0]  ? call_rcu+0x157/0x9c0
[  411.876062][    C0]  ? kernfs_put+0x19e/0x480
[  411.876082][    C0]  ? device_del+0x251/0x8e0
[  411.876100][    C0]  ? cdev_device_del+0x27/0xf0
[  411.876120][    C0]  ? evdev_disconnect+0x4c/0xb0
[  411.876139][    C0]  ? __input_unregister_device+0x353/0x5e0
[  411.876158][    C0]  ? input_unregister_device+0x9b/0x100
[  411.876176][    C0]  ? hidinput_disconnect+0x226/0x2d0
[  411.876197][    C0]  ? hid_device_remove+0x123/0x370
[  411.876214][    C0]  ? device_release_driver_internal+0x46f/0x7c0
[  411.876235][    C0]  ? bus_remove_device+0x34d/0x410
[  411.876249][    C0]  ? device_del+0x511/0x8e0
[  411.876266][    C0]  ? hid_destroy_device+0x6b/0x1b0
[  411.876283][    C0]  ? usbhid_disconnect+0x9f/0xc0
[  411.876304][    C0]  ? usb_unbind_interface+0x26b/0x8f0
[  411.876322][    C0]  ? device_release_driver_internal+0x4d6/0x7c0
[  411.876342][    C0]  ? bus_remove_device+0x34d/0x410
[  411.876377][    C0]  kasan_record_aux_stack+0xbd/0xd0
[  411.876400][    C0]  ? __pfx_kernfs_free_rcu+0x10/0x10
[  411.876421][    C0]  call_rcu+0x157/0x9c0
[  411.876438][    C0]  ? __lock_acquire+0xab9/0xd20
[  411.876457][    C0]  ? delete_node+0x2de/0xa50
[  411.876478][    C0]  ? __pfx_call_rcu+0x10/0x10
[  411.876500][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  411.876524][    C0]  kernfs_put+0x19e/0x480
[  411.876546][    C0]  ? sysfs_remove_group+0x236/0x2c0
[  411.876568][    C0]  device_del+0x251/0x8e0
[  411.876589][    C0]  ? kasan_quarantine_put+0xdd/0x220
[  411.876606][    C0]  ? __pfx_device_del+0x10/0x10
[  411.876632][    C0]  ? kfree+0x18e/0x440
[  411.876651][    C0]  cdev_device_del+0x27/0xf0
[  411.876672][    C0]  evdev_disconnect+0x4c/0xb0
[  411.876692][    C0]  __input_unregister_device+0x353/0x5e0
[  411.876711][    C0]  ? kernfs_remove_by_name_ns+0xee/0x130
[  411.876728][    C0]  input_unregister_device+0x9b/0x100
[  411.876747][    C0]  hidinput_disconnect+0x226/0x2d0
[  411.876772][    C0]  hid_device_remove+0x123/0x370
[  411.876791][    C0]  ? __pfx_hid_device_remove+0x10/0x10
[  411.876810][    C0]  device_release_driver_internal+0x46f/0x7c0
[  411.876834][    C0]  bus_remove_device+0x34d/0x410
[  411.876853][    C0]  device_del+0x511/0x8e0
[  411.876876][    C0]  ? __pfx_device_del+0x10/0x10
[  411.876899][    C0]  hid_destroy_device+0x6b/0x1b0
[  411.876919][    C0]  usbhid_disconnect+0x9f/0xc0
[  411.876941][    C0]  usb_unbind_interface+0x26b/0x8f0
[  411.876963][    C0]  ? __pfx_usb_unbind_interface+0x10/0x10
[  411.876982][    C0]  device_release_driver_internal+0x4d6/0x7c0
[  411.877007][    C0]  bus_remove_device+0x34d/0x410
[  411.877026][    C0]  device_del+0x511/0x8e0
[  411.877046][    C0]  ? kfree+0x18e/0x440
[  411.877063][    C0]  ? __pfx_device_del+0x10/0x10
[  411.877081][    C0]  ? kobject_put+0x446/0x480
[  411.877101][    C0]  usb_disable_device+0x3e9/0x8a0
[  411.877122][    C0]  usb_disconnect+0x330/0x950
[  411.877149][    C0]  hub_event+0x1cdb/0x4a00
[  411.877178][    C0]  ? do_raw_spin_lock+0x121/0x290
[  411.877201][    C0]  ? register_lock_class+0x51/0x320
[  411.877224][    C0]  ? __pfx_hub_event+0x10/0x10
[  411.877240][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  411.877261][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  411.877283][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  411.877299][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  411.877317][    C0]  process_scheduled_works+0xae1/0x17b0
[  411.877348][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  411.877374][    C0]  worker_thread+0x8a0/0xda0
[  411.877405][    C0]  kthread+0x70e/0x8a0
[  411.877428][    C0]  ? __pfx_worker_thread+0x10/0x10
[  411.877446][    C0]  ? __pfx_kthread+0x10/0x10
[  411.877468][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  411.877489][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  411.877511][    C0]  ? __pfx_kthread+0x10/0x10
[  411.877533][    C0]  ret_from_fork+0x3fc/0x770
[  411.877550][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  411.877569][    C0]  ? __switch_to_asm+0x39/0x70
[  411.877589][    C0]  ? __switch_to_asm+0x33/0x70
[  411.877608][    C0]  ? __pfx_kthread+0x10/0x10
[  411.877635][    C0]  ret_from_fork_asm+0x1a/0x30
[  411.877663][    C0]  </TASK>
[  412.569137][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  412.576120][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  412.587947][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  412.598016][   T31] Call Trace:
[  412.601317][   T31]  <TASK>
[  412.604272][   T31]  dump_stack_lvl+0x99/0x250
[  412.608893][   T31]  ? __asan_memcpy+0x40/0x70
[  412.613499][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  412.618724][   T31]  ? __pfx__printk+0x10/0x10
[  412.623363][   T31]  panic+0x2db/0x790
[  412.627293][   T31]  ? __pfx_panic+0x10/0x10
[  412.631732][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  412.637570][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  412.642962][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  412.649142][   T31]  watchdog+0x102d/0x1030
[  412.653488][   T31]  ? watchdog+0x1de/0x1030
[  412.657927][   T31]  kthread+0x70e/0x8a0
[  412.662033][   T31]  ? __pfx_watchdog+0x10/0x10
[  412.666735][   T31]  ? __pfx_kthread+0x10/0x10
[  412.671361][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  412.676595][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  412.681821][   T31]  ? __pfx_kthread+0x10/0x10
[  412.686443][   T31]  ret_from_fork+0x3fc/0x770
[  412.691059][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  412.696200][   T31]  ? __switch_to_asm+0x39/0x70
[  412.700987][   T31]  ? __switch_to_asm+0x33/0x70
[  412.705778][   T31]  ? __pfx_kthread+0x10/0x10
[  412.710394][   T31]  ret_from_fork_asm+0x1a/0x30
[  412.715206][   T31]  </TASK>
[  412.718632][   T31] Kernel Offset: disabled
[  412.722965][   T31] Rebooting in 86400 seconds..